last executing test programs: 3.640006289s ago: executing program 4 (id=8292): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0xffff}, {0xfff1, 0xffff}, {0x8, 0xfff2}}}, 0x17}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="9b0f2abd7000ffdbdf25010000000400028004000300"], 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x20004080) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000580)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x0, 0x6, 0x2, 0x5, 0xffffffffffffffc0, 0xfffffffffffffff0}, @map_fd]}, &(0x7f00000007c0)='syzkaller\x00', 0x2, 0x85, &(0x7f0000000800)=""/133, 0x1e00, 0x30, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000940)=[{0x4, 0x3, 0x1, 0x8}, {0x0, 0x4, 0x9, 0x4}, {0x4, 0x3, 0xa, 0x4}, {0x5, 0x3, 0x8, 0xa}, {0x4, 0x1, 0x0, 0x2}], 0x10, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r6, 0x0, 0x49, 0x8, &(0x7f0000000bc0), &(0x7f0000000c00)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000d00)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000d80)=[{&(0x7f0000000e00)=""/102, 0x365}, {&(0x7f0000000e80)=""/76, 0x14c}, {&(0x7f0000000f00)=""/4096, 0x197}, {&(0x7f0000001f00)=""/92, 0x645}, {&(0x7f0000001f80)=""/73, 0x1b}, {&(0x7f0000002000)=""/77, 0x188}, {&(0x7f0000002080)=""/154, 0x2c}, {&(0x7f0000002140)=""/17, 0x1d8}], 0x21, &(0x7f0000002180)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000002240)={0x77359400}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002280), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000022c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r8, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000023c0)={0x17, {{0x29, 0x0, 0x43000000, @private1, 0x6}}, {{0xa, 0x0, 0x4, @remote}}}, 0x108) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002500), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000025c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000fddbdf25020000000800010003000000def555df4afe41eb0d11bf031618c6b75c1a66151bafdfb105eca225506242a3f0740257d4a5dcb39e0dc9a24f670776cf26f4"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socket$inet(0x2, 0x1, 0x6) 3.095658053s ago: executing program 2 (id=8298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0xc01, 0x3, 0x1248, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x11b0, 0x3c8, 0x3c8, 0x11b0, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff9, 0x2, [0x7, 0xc, 0x1f, 0x32, 0x2a, 0xa, 0x3d, 0x3e, 0x2d, 0x17, 0x19, 0xc, 0x25, 0xd, 0x3e, 0x79], 0x0, 0x1000, 0x5b5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12a8) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0xfd, 0x2f, 0x0, @private=0x800, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x6a}}}}}}}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x4048000) 2.832700338s ago: executing program 2 (id=8300): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000580)={0x2, &(0x7f0000000700)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendto$inet6(r0, &(0x7f0000000740)="8a", 0x1, 0x51, &(0x7f0000000780)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) (fail_nth: 99) 2.469081346s ago: executing program 2 (id=8301): setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000840)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000880)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000008c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x10, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7ff}, {@empty}, {@private=0xa010101, 0x3}, {@private=0xa010102, 0x5}]}]}}}}}, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000050000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0xc, &(0x7f0000000f00)=ANY=[], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000001000)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000380)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f00000007c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'nicvf0\x00'}) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x4004000) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000640)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 2.309424848s ago: executing program 1 (id=8303): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35, 0x0, 0x1, 0xfff5}, {0x0, 0x0, 0x0, 0x80}, {0x3d, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x6, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8000) 2.29548744s ago: executing program 3 (id=8304): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0xe4ffffff, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35, 0x0, 0x1, 0x1}, {0x2000, 0x0, 0x0, 0x80}, {0x3d}, {}, {}, {}, {0x6, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8000) 2.185437828s ago: executing program 3 (id=8305): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}, 0x1, 0x0, 0x0, 0x24}, 0x8000) 2.164824087s ago: executing program 3 (id=8306): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000040)={0x7, 0x20, 0x100000001, 0x20, 0x5}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x7, 0x6619, 0x8, @empty, @loopback, 0x8, 0x80, 0x2, 0x81}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x12c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8001, 0x76, 0x0, 0xb}, {0x4, 0x5c, 0x2, 0x7}]}}}]}}, {{0x8, 0x1, r3}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004005) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000085}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000500)="9fb8d792a8a87d7d838784e2376ba3f62bf49e84905dedd5fbaa", 0x1a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r6, &(0x7f00000005c0)={0x67446698, 0x1, 0x2, 0x2, 0x1, "d62c052a1a367afd125f5af8f749ddda4855e00b9876d21fe2ee1987383f8c4f9dbe1e630b96642a4df8dbfebf8f0250d56d4330ff836c3a1e1e29bb5a91acf1b9ab85a98ccffacbd3"}, 0x59) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x400602, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000002b40)={&(0x7f0000002a80)=[{&(0x7f0000000680)="2606e1ae3d75909bd60562313785ed4b0487d3ecc21c", 0x16}, {&(0x7f00000006c0)="cce9b7779e24a1e05516af80e198e7ef127b39c771b7b077a6a5585d9f4e688e1235dd0a099c06c5da88db", 0x2b}, {&(0x7f0000000700)="7a8a7d0821c5028096f1c09980da69955b4f2efbecb63d3f51e0b0e42b0175069eea2740b2cb323bf924b67248527dd43a0edfe90b2acae980124d834f28b7562011c1c7eddec1d52e31d51fc20c25a6623c10de550949afeb1bd1208ed7552f065ea95d321b77dfa31983b08793bac67829b07c65e7ac4e326096cad5a57a01110be7a32cea44f42fa8f8a095d748bfd937a51cff090e4e05d82221367d9622792f6e54a3004803414613143d1e8529af", 0xb1}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="6e013f413871", 0x6}, {&(0x7f0000002800)="d99c05636dfea9dcf15e4c3de813a3b6e9030b31df705f2dc9ab44e255db178a6df93e28d0bbc2f29c7dcfb1cf874a572ab5dfef3793618b51efa89b7562cc7b174cf7070871bccb4e48127ff71b5fae1a19d5607004cfa7f8482b8fd426fca3e479699b7b2fb6967af704684bc1cae2e99d06f435b34e8fecd0df487082cb8a27fd1e6577f4550a4647df3ad08cf4219945735599203933bb097daa4e301119a479a0940b7ce1a4415369430f9ffc2a58035c78edde5e17a336b79f8740c8cfe642a659147841ea14c1b0bc1448de2c06fddc7d15dbd6e6dd517f6c9bda24e29bf948241af1de", 0xe7}, {&(0x7f0000002900)}, {&(0x7f0000002940)="9cbdf4637dda497be7c4154480ba3cb6849d550ccc8d15a5e813a8977ac1a2458eec2355b0673623b5028851c72e60e9d0d4bb7de8672c94337dbfbe574f1328830b0ce59e7f18446339d389d37b01cafbc4393cbabe68854815e584bc05cbda1312d2d4caff3790", 0x68}, {&(0x7f00000029c0)="21fecd9984b573df15566ef0dccf306f67b0156e9f3fcea5d2b50eb50d1ba4043d4fc4f3bb915a1558fd9c838fe229ac925dedcb3a9fd8dda99991be14d4bee2997c6568495af18e1df3e064761434c7703e6fd411b10052f219d7898326cbec1c51257d55d4bf4e5baa9554c95a3b8e9a51cf19261513a807a11b6b7bb7b142a5105feb", 0x84}], 0xa, 0x6, 0x0, 0x3, 0xa5, 0x3ff, 0x3, 0x3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c00)=@ipv6_newrule={0xbc, 0x20, 0x400, 0x70bd2d, 0x25dfdbfe, {0xa, 0x80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x4, 0x10013}, [@FRA_DST={0x14, 0x1, @local}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, @FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_DST={0x14, 0x1, @local}]}, 0xbc}}, 0x4000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000002d40)={0x6, "d09f0d"}, 0x6) sendmsg$nl_route_sched(r8, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x1}, {0x10, 0xa5e18377331c1a74}, {0x10, 0xe}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x804) sendmsg$nl_route(r8, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)=@ipv6_newaddr={0x40, 0x14, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x8, 0x8, 0xff, r2}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000091}, 0x20004001) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000002f80)={0x3c, 0x1b, '\x00', [@generic={0xc7, 0xc1, "0bf8448011f7881e6216e32f209ab522dd25096d83cab2279ada11c36e5d3ff995a713750399350fa688e52eac31c47b854c45d3e073d049d437e41a671fb35b73eeed948b681f427342e8fefbc73e2259ce16a2afc73243db39db14da30fa5f08eda2e46c2a71ca9b64d9ff8b05a42f26a02be3c696b4c52c654fb5cdb06a52a5da7a8b4446d43306f86f7e1b4f499707d49d892daa2d7acab636227138d0511438ed8e55078a67bbb1c710d329a1127d82660cf8dddd44ad7fb70ab3a7461481"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @jumbo={0xc2, 0x4, 0xfff}]}, 0xe8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000003080)) r9 = socket$nl_crypto(0x10, 0x3, 0x15) getsockname$netlink(r9, &(0x7f00000030c0), &(0x7f0000003100)=0xc) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000003140)={'macvlan1\x00', 0x200}) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000031c0)=@o_path={&(0x7f0000003180)='./file0\x00', 0x0, 0x4000, r9}, 0x18) ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f0000003200)={{r9}, 0xd, 0x6, 0xfffffffffffffffe}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000003240)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r10, 0xc0385868, &(0x7f0000003380)={r6, &(0x7f0000003280)='^]\x00', 0x8000, &(0x7f00000032c0)={@align=0x3, {0x0, 0x7, 0x4, 0x4}}, 0x80, &(0x7f0000003300)={@_ha_fsid}, &(0x7f0000003340)=0xe}) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f00000033c0)={r6}) 2.155302649s ago: executing program 4 (id=8307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$nl_audit(0x10, 0x3, 0x9) pwrite64(r1, &(0x7f0000000000)="f21aac664e127a22ebfd1dc3cb0168c3a2bdb029cda018d97e0ff1de0d678f7b389e6bfb984a88bcbcf2e5d82016e8f21d9f573a174294cc2cfec6edbf304a8527550dc10866baaf9472c80b3da5ae2783227ac5d1de26875b2e66a630aa7bb0b3c56dd97a6411a5f413998bfd1677f1e64854c7a43eb280b1222ee761a2d9ee0530da4f60327eb3b77960ab7732058e29a773519851ae1176668425b96a6439c52934a72a3971321e4ed586212bcdf543aefe24a7fa310a2b1a77d38b13eea29e7a6cd42dd95a0160e8595520e5a7b76845b8890f141e10a5", 0xd9, 0x16b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x800001, 0x4) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 1.940413674s ago: executing program 1 (id=8308): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x2a0, 0x390, 0x1c0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x2f, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x5}, 0x0, 0xa8, 0xe0, 0x48000000, {0x2100}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x38, 0x17}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f9) 1.825452546s ago: executing program 4 (id=8309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) 1.82485081s ago: executing program 3 (id=8310): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34fb6}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) (fail_nth: 52) 1.707771396s ago: executing program 1 (id=8311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xf0, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x46a3}]}]}, @NFT_MSG_DELFLOWTABLE={0x78, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x3, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x1b0}}, 0x4008004) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x60}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x5}, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="bfa200000000000007020000f0ffffffb70300000c000000ff000000009503020000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000580)={@broadcast, @remote, 0xffffffffffffffff, "9a30403d62cefa0174f8e9ab4c5c3927d35bae19b79ec87fa2d9c16f1113eda4", 0x4, 0xfffffff9, 0x7fffffff, 0x840}, 0x3c) 1.529270824s ago: executing program 3 (id=8313): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0xfffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x6, 0x0, 0x6, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ffdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000fa07002600431700000800270003000000"], 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000640)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000", @ANYRES16=r3, @ANYBLOB="00042dbd7000ff5bdf252800000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7001}) r8 = socket(0x27, 0x2, 0x3) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x6, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20008000) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000b40), 0x6) ioctl$sock_bt_hci(r12, 0x800448d7, &(0x7f0000000b80)) bind$inet(r8, &(0x7f0000000bc0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000c00), 0x56) sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0x0, 0x0, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000d00)}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.349205841s ago: executing program 0 (id=8314): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0xc, @mcast1, 0x4}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000600)="6b3818b2428c18126329d467bebb89a2e8205e5c72fcc800dc44b86c257ffc39092dacf5825a515d5609499dd5e5443e681df3bd15a6e7b66ac039431f0acc", 0x3f}, {&(0x7f0000000640)="f18a7461fde12892718c6782dbf8c7f2efc6f1c09d986dbc4d0429f78d9c85c16b5039a789898279c3a3b24205387409487d583e07ae96eee0a0c1da13f855f27ae7e6d06cc679c5987731838d0c472e93b8dfe5f14f69d8", 0x58}, {&(0x7f00000006c0)="4dec72c993d7fff75774dfbb3f98398125d41e7603c338999656152e7d341b68f511c7757503b3e7f454a3be7eb40c73100c966b835f3e838ffabf63e367b558fc49a6afb1f9bac64a657264b0f86f52fec27f77661c6075dba2e5e1f6f64d05f7cd2a283e4610e34db6610bac07e224a0844ee3e696fdd3a7417e44e0353f9caa69e408c0c96eb2b957df39c33736df2109677d09fb0ca8f2dcbf7c8708a63938bc14bf86c3e30215b7815e081ee68a7cfd18", 0xb3}, {&(0x7f0000000780)="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", 0x123}, {&(0x7f00000008c0)="359abd4c6f56111eedb0a896ec10bb01f3e088b75cd745d9b8a4baa4cb86b3f75801939b5cf01fa353465fce2d730325a2f101e2dd57b3d0a69886a6bd87d82408bae1bfcf9ecf05d4bc69eb45aac722639d533e78cbc5ac4aa39b6c11fd8ea68e44d76d2281042f79f25ad4c1adc98b790a6f97439cba02825280944de7e878bcfbef3b92832af4627542c97b6e4c169ec77a4c3375bcccd19eaff7688aa1d745062424968fed8cf6bc81629b1d7abd6c3a7700f696bb7f3f57ef5c4110972b95b0b1796c4e80f238b4605f79238e59a3ccf075b8368f69e03ab2a0be9705381e79e2e688ac832b5500cbfab5b3c9b0", 0xf0}], 0x5}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a40)="31db13ec02843eec71a20af910fee96c98bc68504aa1ea9c790299c392b32e129bc0d5d107f25e0c8401d024402482574113c1d1669a4de00455af0adc3831d564e2bc63528c431aebdb0cb13b25fd617f4dcff0773031e9d605314d534b3620abfe9baf58b1376a64bbd059a042a2c25248cf6407bc4ba5182f11bd9a11d5c40a68edfba35219ebd03910f84f380576cefbd745fb7b34b8553e35c087b3c306b700a9a4d581", 0xa6}, {&(0x7f0000000b00)="65089f09c3e6c3a93e9a3286f660e116b70146bc5e18b4c2aa6dc0449a34b4d1d39bb7ab1b5f8ccc46b4cdf20f2904ecce532f6686df5f8c89a437c09e", 0x3d}, {&(0x7f0000000b40)="1807af582b1133d81090ecab5b84e26bab8329db55dbab46aacd67e75b2b8e6b95a04dbd77912b735b04513212688ca2d3adb701f22289f0e6a04fe7477491def8477af9d250d87b80c9969a76a51863633a935c7603a460a891cacd72423fbdc4d237138371699278a14327368e59d16c3915cf21b07a5e9780be988792211f70c37ebca95d550e", 0x88}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="6f7cbc7fc20cdee7e2cce765c62c376214c46adf023b095b0b7d2f2ed07c116fd30f625f8d5941ca25a667be97fb0ea02a711d9ac54eab4559ab0161f3699722e8a09578d35ef5563b7687a505bed41a6b8e11a07355b878fd7c5f36d9b538123c9fcb214b72766a81f51928cd0b69630062f54969833c326ee18809a5632112016014c5f8698cb239b31026056873223fdc7973bc375106349e6be96d80786562136c59c3a137d08c00ba5819dc9535aff73339c8a369a95dd724e5f911de2a95d22e92f6a3e0b38cbd0ed191dcd014fc397dab", 0xd4}], 0x5}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001d40)="19ca9501571df1d4ddd71e42680b71856b9ceb9f88e86a600f3ffc7dfb46e1fe4ed1b7d8403c0020ce9f2e814cc41e7d6b8a202cf83a667ebf7fa69eab5b93d8f5c57d78804037ec6a4244e33e648a3c6bd0918865cc293ada43dbe92f", 0x5d}, {0x0, 0x5d00}], 0x2, &(0x7f0000001dc0)=ANY=[], 0x1d8}}], 0x3, 0xc040) 1.302318381s ago: executing program 1 (id=8315): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000600)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x300}}]}, &(0x7f0000000640)='GPL\x00', 0x8, 0x1, &(0x7f0000000680)=""/1, 0x41100, 0x16}, 0x94) 1.249434953s ago: executing program 0 (id=8316): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}, 0x1, 0x0, 0x0, 0x24}, 0x8000) 1.249180325s ago: executing program 4 (id=8317): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000080)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000100)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000140)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x9, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000066b15b46ad86918700"}]}}]}, 0x170}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0xa, r7, 0x1a, r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000009c0)=0x1, 0x23) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000000)=0x210503, 0x4) connect$inet6(r8, &(0x7f0000000a00)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1.237078179s ago: executing program 0 (id=8318): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000740)={0x3, 0x0, &(0x7f0000000780)={&(0x7f0000001b40)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600400300000a00002c09bbfc00fc010000000000000000000000000000000000000000000002000100000000fffffffb160000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 1.159748083s ago: executing program 0 (id=8319): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="60000000120001030000000000000000020000000000000000000600"/56, @ANYRES32=0x0, @ANYBLOB="000000000000e5fffeffffff0000002014000100051014"], 0x60}}, 0x0) 1.092173496s ago: executing program 1 (id=8320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x6, 0x4, &(0x7f0000001a80)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa}, [@alu={0x7, 0x0, 0xa, 0x8, 0x0, 0x6, 0x800000000000000b}]}, &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x20, &(0x7f00000006c0)={&(0x7f0000000700)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@union={0x1, 0x3, 0x0, 0x5, 0x0, 0x1000, [{0xf, 0x1, 0x7911528c}, {0xf, 0x4, 0x8}, {0xc, 0x0, 0x7fff}]}, @struct={0xb, 0x3, 0x0, 0x4, 0x1, 0x3, [{0x3, 0x3, 0x1}, {0xe, 0x1, 0x6}, {0xf, 0x3, 0x1}]}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x30, 0x61, 0x0, 0x30]}}, &(0x7f0000000800)=""/4096, 0x97, 0x1000, 0x0, 0x8, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x44, &(0x7f0000000140)=""/68, 0xdb05e66098f9cf18, 0x10, '\x00', r6, @fallback=0x14, r7, 0x8, &(0x7f0000001840)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x7, 0x0, &(0x7f0000001880)=[{0x2, 0x3, 0x6, 0xc}, {0x5, 0x1, 0xa, 0x6}, {0x1, 0x4, 0x6, 0x6}, {0x0, 0x1, 0x0, 0x6}, {0x1, 0x4, 0xb}, {0x4, 0x1, 0xe, 0x9}, {0x3, 0x1, 0x0, 0xa}], 0x10, 0xb}, 0x94) 1.09069139s ago: executing program 2 (id=8321): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x275a, 0x0) unshare(0x100000) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001440)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) unshare(0x2c020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x5, &(0x7f0000000740)=ANY=[], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001300)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)="5df00ae9d2761a2431a5c064697ffa2333da15d5d6bc300740729b7df6581f519cd40dd87c675eca6de7b97a2879c6a9eeccdd7c1e8b66152bc96cb18cb6f5c23ef8078cc44fad65cd39050bc6e221abcc2d9f72947b6d9b8552d1ae7a2374b872b97f485478af879e21089b5fed", 0x6e}], 0x1}, 0x10) openat$cgroup_ro(r2, &(0x7f0000000640)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0xec}}, 0x8000) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0x8000) r9 = socket$l2tp6(0xa, 0x2, 0x73) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000014c0)=[{&(0x7f0000001500)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) sendmmsg$inet6(r9, &(0x7f0000000440)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000029000000370000003a0000000000000018000000000000002900000037000000620000000000ec0000"], 0x30}}], 0x1, 0xc810) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x85, &(0x7f0000000200)={r12, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) 1.000582516s ago: executing program 0 (id=8322): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="0000000000000000000000010000", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (fail_nth: 28) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @private1}, 0xfffffffffffffc88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000300)=0x8fa7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={r6, 0xffff}, &(0x7f0000000440)=0x8) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000480)=0x6, 0x4) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f00000004c0)=0x2, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x200440a1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000005c0)='dctcp', 0x5) 772.606418ms ago: executing program 0 (id=8323): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="0000000000140000000000010000", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @private1}, 0xfffffffffffffc88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000300)=0x8fa7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={r6, 0xffff}, &(0x7f0000000440)=0x8) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000480)=0x6, 0x4) setsockopt$packet_int(r7, 0x107, 0x7, &(0x7f00000004c0)=0x2, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x200440a1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r8, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000005c0)='dctcp', 0x5) 730.852641ms ago: executing program 2 (id=8324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00010076786c616e00000024000280080001000100000008000200e0010101080003"], 0x68}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2f}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000900000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0x10f0, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x80000000, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000008000000000002095002dc244550000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c0002800800014000000005080003400000003b0500020007000000080004400000008d08000640000000040900010073797a3000"], 0xdc}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0), 0x40000, 0x0) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000c00)={0x8057, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) 720.201337ms ago: executing program 3 (id=8325): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000a40)='GPL\x00'}, 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="90000000040a01020000000000000000000000060900010073797a300000000008000b4000000001400004800800014000000000080001400000000208000140000000001400030076657468305f746f5f68737200000000080001400000000108000140000000041e000c0000ec9c53ae152b38aace4ae077921981049a5e68cc079be1506a0000080007006e61740035e139515c7c1344b1635757f254ba16bf7c9e8bdf5bbe6e13f832fff80bae8b13c336afd6a8"], 0x90}, 0x1, 0x0, 0x0, 0x48084}, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000ac0)=r1, 0x4) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000b40)=0x0) r8 = socket(0x200000000000011, 0x2, 0xd) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f00)=0x14) bind$packet(r8, &(0x7f0000000f40)={0x11, 0x1b, r10, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$rxrpc(r8, &(0x7f0000000f80)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x24) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@setlink={0x40, 0x13, 0x5, 0xfffbfffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48020, 0x5120}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) writev(r2, &(0x7f0000000c40)=[{&(0x7f0000000c80)="c4", 0x1}], 0x1) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) sendto$inet6(r0, &(0x7f0000000740), 0x0, 0x0, &(0x7f0000000780)={0xa, 0x1f90, 0x0, @local}, 0x1c) 452.836817ms ago: executing program 4 (id=8326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000100001040000000003ebffffff000000", @ANYRES32=0x0, @ANYBLOB="fbb4817dbcb5f31a68001280110001006272696467655f736c61766500000000500005800400180005000500010000000500050000000000080025000000fffd06001f00d500000005001b000100000005000800000000000500060001000000050001000000000006001f0006000000140003006272696467655f736c6176655f30"], 0x9c}, 0x1, 0x0, 0x0, 0x20044804}, 0x4040) 66.786733ms ago: executing program 4 (id=8327): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x18, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [@call={0x85, 0x0, 0x0, 0xad}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0xf, 0x1002, &(0x7f0000000a00)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x7, 0x28, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 38.260997ms ago: executing program 2 (id=8328): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180"], 0x4c}, 0x1, 0x0, 0x0, 0x24}, 0x8000) 0s ago: executing program 1 (id=8329): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x11000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0xb, 0x100a, &(0x7f0000000200)=""/4106, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (fail_nth: 67) kernel console output (not intermixed with test programs): 3] bpf_compute_scc+0xd2/0xdb0 [ 940.559541][T30843] ? sort_subprogs_topo+0xe5f/0x1130 [ 940.559589][T30843] bpf_check+0x2c70/0x34e0 [ 940.559625][T30843] ? ktime_get_with_offset+0x93/0x2d0 [ 940.559656][T30843] ? ktime_get_with_offset+0x93/0x2d0 [ 940.559686][T30843] ? __pfx_bpf_check+0x10/0x10 [ 940.559712][T30843] ? bpf_obj_name_cpy+0x194/0x1e0 [ 940.559744][T30843] bpf_prog_load+0x14da/0x1c60 [ 940.559780][T30843] ? __pfx_bpf_prog_load+0x10/0x10 [ 940.559819][T30843] ? __might_fault+0xaf/0x130 [ 940.559849][T30843] __sys_bpf+0xd86/0xe00 [ 940.559881][T30843] ? __pfx___sys_bpf+0x10/0x10 [ 940.559923][T30843] ? __fget_files+0x2a/0x420 [ 940.559975][T30843] ? ksys_write+0x242/0x270 [ 940.560007][T30843] ? __pfx_ksys_write+0x10/0x10 [ 940.560040][T30843] __x64_sys_bpf+0xba/0xd0 [ 940.560073][T30843] do_syscall_64+0x166/0x520 [ 940.560097][T30843] ? trace_irq_disable+0x3b/0x140 [ 940.560124][T30843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.560145][T30843] ? clear_bhb_loop+0x70/0xc0 [ 940.560170][T30843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.560190][T30843] RIP: 0033:0x7f1c9359fb19 [ 940.560209][T30843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.560227][T30843] RSP: 002b:00007f1c943b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 940.560251][T30843] RAX: ffffffffffffffda RBX: 00007f1c93825fa0 RCX: 00007f1c9359fb19 [ 940.560266][T30843] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 940.560280][T30843] RBP: 00007f1c943b1090 R08: 0000000000000000 R09: 0000000000000000 [ 940.560292][T30843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 940.560303][T30843] R13: 00007f1c93826038 R14: 00007f1c93825fa0 R15: 00007ffcd2b100c8 [ 940.560337][T30843] [ 940.650174][T30839] FAULT_INJECTION: forcing a failure. [ 940.650174][T30839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.650205][T30839] CPU: 0 UID: 0 PID: 30839 Comm: syz.1.7382 Not tainted syzkaller #0 PREEMPT(full) [ 940.650228][T30839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 940.650240][T30839] Call Trace: [ 940.650249][T30839] [ 940.650258][T30839] dump_stack_lvl+0xe8/0x150 [ 940.650300][T30839] should_fail_ex+0x3eb/0x540 [ 940.650332][T30839] _copy_to_user+0x31/0xb0 [ 940.650362][T30839] simple_read_from_buffer+0xe1/0x170 [ 940.650394][T30839] proc_fail_nth_read+0x1bb/0x230 [ 940.650429][T30839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 940.650464][T30839] ? rw_verify_area+0x24a/0x4c0 [ 940.650492][T30839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 940.650520][T30839] vfs_read+0x213/0xa80 [ 940.650557][T30839] ? __pfx_vfs_read+0x10/0x10 [ 940.650597][T30839] ? fdget+0x16b/0x250 [ 940.650631][T30839] ksys_read+0x150/0x270 [ 940.650659][T30839] ? __pfx_ksys_read+0x10/0x10 [ 940.650697][T30839] do_syscall_64+0x166/0x520 [ 940.650723][T30839] ? trace_irq_disable+0x3b/0x140 [ 940.650751][T30839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.650769][T30839] ? clear_bhb_loop+0x70/0xc0 [ 940.650793][T30839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.650811][T30839] RIP: 0033:0x7f308eb6034e [ 940.650830][T30839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 940.650845][T30839] RSP: 002b:00007f308fb1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 940.650866][T30839] RAX: ffffffffffffffda RBX: 00007f308fb1e6c0 RCX: 00007f308eb6034e [ 940.650881][T30839] RDX: 000000000000000f RSI: 00007f308fb1e0a0 RDI: 000000000000000c [ 940.650893][T30839] RBP: 00007f308fb1e090 R08: 0000000000000000 R09: 0000000000000000 [ 940.650904][T30839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.650916][T30839] R13: 00007f308ee26038 R14: 00007f308ee25fa0 R15: 00007ffc044418b8 [ 940.650946][T30839] [ 941.291579][T30868] netlink: 'syz.0.7392': attribute type 10 has an invalid length. [ 942.081000][T30897] __nla_validate_parse: 5 callbacks suppressed [ 942.081023][T30897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7399'. [ 943.302374][T30948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7416'. [ 943.302413][T30948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7416'. [ 943.302431][T30948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7416'. [ 943.451111][T30950] batman_adv: batadv0: Adding interface: syz_tun [ 943.451133][T30950] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.451573][T30950] batman_adv: batadv0: Interface activated: syz_tun [ 943.635153][T30960] FAULT_INJECTION: forcing a failure. [ 943.635153][T30960] name failslab, interval 1, probability 0, space 0, times 0 [ 943.635186][T30960] CPU: 1 UID: 0 PID: 30960 Comm: syz.0.7420 Not tainted syzkaller #0 PREEMPT(full) [ 943.635209][T30960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 943.635222][T30960] Call Trace: [ 943.635237][T30960] [ 943.635247][T30960] dump_stack_lvl+0xe8/0x150 [ 943.635286][T30960] should_fail_ex+0x3eb/0x540 [ 943.635317][T30960] should_failslab+0xa8/0x100 [ 943.635350][T30960] __kmalloc_noprof+0xf9/0x710 [ 943.635377][T30960] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 943.635402][T30960] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 943.635436][T30960] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 943.635478][T30960] genl_family_rcv_msg_doit+0xda/0x340 [ 943.635510][T30960] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 943.635539][T30960] ? __pfx_genl_get_cmd+0x10/0x10 [ 943.635558][T30960] ? __dev_queue_xmit+0x29b/0x3920 [ 943.635582][T30960] ? __pfx_nbd_genl_connect+0x10/0x10 [ 943.635738][T30960] genl_rcv_msg+0x614/0x7a0 [ 943.635775][T30960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.635798][T30960] ? __pfx_nbd_genl_connect+0x10/0x10 [ 943.635833][T30960] ? __asan_memcpy+0x40/0x70 [ 943.635866][T30960] netlink_rcv_skb+0x226/0x4a0 [ 943.635896][T30960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 943.635923][T30960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 943.635971][T30960] ? down_read+0x2b9/0x320 [ 943.636006][T30960] genl_rcv+0x28/0x40 [ 943.636028][T30960] netlink_unicast+0x8ef/0xa80 [ 943.636078][T30960] netlink_sendmsg+0x7f0/0xb20 [ 943.636117][T30960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.636152][T30960] ? aa_sock_msg_perm+0x144/0x210 [ 943.636181][T30960] ? apparmor_socket_sendmsg+0x98/0x360 [ 943.636214][T30960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.636244][T30960] sock_sendmsg_nosec+0x14e/0x190 [ 943.636276][T30960] ____sys_sendmsg+0x54e/0x850 [ 943.636306][T30960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.636339][T30960] ? import_iovec+0x73/0xa0 [ 943.636369][T30960] ___sys_sendmsg+0x2a5/0x360 [ 943.636389][T30960] ? __lock_acquire+0x747/0x2de0 [ 943.636422][T30960] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.636498][T30960] ? __fget_files+0x3a2/0x420 [ 943.636523][T30960] ? __fget_files+0x2a/0x420 [ 943.636561][T30960] __x64_sys_sendmsg+0x1b1/0x290 [ 943.636588][T30960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 943.636638][T30960] do_syscall_64+0x166/0x520 [ 943.636662][T30960] ? trace_irq_disable+0x3b/0x140 [ 943.636691][T30960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.636714][T30960] ? clear_bhb_loop+0x70/0xc0 [ 943.636741][T30960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.636762][T30960] RIP: 0033:0x7fa64599fb19 [ 943.636783][T30960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.636802][T30960] RSP: 002b:00007fa646819028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.636828][T30960] RAX: ffffffffffffffda RBX: 00007fa645c25fa0 RCX: 00007fa64599fb19 [ 943.636844][T30960] RDX: 0000000000004040 RSI: 00002000000006c0 RDI: 0000000000000009 [ 943.636859][T30960] RBP: 00007fa646819090 R08: 0000000000000000 R09: 0000000000000000 [ 943.636873][T30960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.636887][T30960] R13: 00007fa645c26038 R14: 00007fa645c25fa0 R15: 00007fffb6c9aa38 [ 943.636926][T30960] [ 943.984907][T30964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7421'. [ 943.998890][T30963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7421'. [ 944.757567][T30994] netlink: 'syz.0.7427': attribute type 4 has an invalid length. [ 944.806796][T30999] tipc: Enabling of bearer rejected, failed to enable media [ 944.935008][T31006] sctp: [Deprecated]: syz.2.7433 (pid 31006) Use of int in max_burst socket option. [ 944.935008][T31006] Use struct sctp_assoc_value instead [ 944.968620][T31011] sctp: [Deprecated]: syz.2.7433 (pid 31011) Use of int in max_burst socket option. [ 944.968620][T31011] Use struct sctp_assoc_value instead [ 945.367838][T31024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7440'. [ 945.494229][T31027] nbd: couldn't find a device at index 0 [ 945.618372][T31044] FAULT_INJECTION: forcing a failure. [ 945.618372][T31044] name failslab, interval 1, probability 0, space 0, times 0 [ 945.618417][T31044] CPU: 1 UID: 0 PID: 31044 Comm: syz.1.7446 Not tainted syzkaller #0 PREEMPT(full) [ 945.618442][T31044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 945.618456][T31044] Call Trace: [ 945.618465][T31044] [ 945.618474][T31044] dump_stack_lvl+0xe8/0x150 [ 945.618515][T31044] should_fail_ex+0x3eb/0x540 [ 945.618548][T31044] should_failslab+0xa8/0x100 [ 945.618581][T31044] __kvmalloc_node_noprof+0x171/0x820 [ 945.618613][T31044] ? bpf_compute_scc+0xcbe/0xdb0 [ 945.618641][T31044] ? bpf_compute_scc+0xcbe/0xdb0 [ 945.618676][T31044] bpf_compute_scc+0xcbe/0xdb0 [ 945.618730][T31044] bpf_check+0x2c70/0x34e0 [ 945.618766][T31044] ? ktime_get_with_offset+0x93/0x2d0 [ 945.618795][T31044] ? ktime_get_with_offset+0x93/0x2d0 [ 945.618823][T31044] ? __pfx_bpf_check+0x10/0x10 [ 945.618848][T31044] ? bpf_obj_name_cpy+0x194/0x1e0 [ 945.618879][T31044] bpf_prog_load+0x14da/0x1c60 [ 945.618913][T31044] ? __pfx_bpf_prog_load+0x10/0x10 [ 945.618950][T31044] ? __might_fault+0xaf/0x130 [ 945.618979][T31044] __sys_bpf+0xd86/0xe00 [ 945.619009][T31044] ? __pfx___sys_bpf+0x10/0x10 [ 945.619043][T31044] ? __fget_files+0x2a/0x420 [ 945.619088][T31044] ? ksys_write+0x242/0x270 [ 945.619119][T31044] ? __pfx_ksys_write+0x10/0x10 [ 945.619153][T31044] __x64_sys_bpf+0xba/0xd0 [ 945.619188][T31044] do_syscall_64+0x166/0x520 [ 945.619212][T31044] ? trace_irq_disable+0x3b/0x140 [ 945.619241][T31044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.619263][T31044] ? clear_bhb_loop+0x70/0xc0 [ 945.619290][T31044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.619311][T31044] RIP: 0033:0x7f308eb9fb19 [ 945.619333][T31044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.619351][T31044] RSP: 002b:00007f308fb1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 945.619375][T31044] RAX: ffffffffffffffda RBX: 00007f308ee25fa0 RCX: 00007f308eb9fb19 [ 945.619391][T31044] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 945.619414][T31044] RBP: 00007f308fb1e090 R08: 0000000000000000 R09: 0000000000000000 [ 945.619428][T31044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 945.619440][T31044] R13: 00007f308ee26038 R14: 00007f308ee25fa0 R15: 00007ffc044418b8 [ 945.619472][T31044] [ 945.870094][T31045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 946.157782][T31061] sctp: [Deprecated]: syz.4.7451 (pid 31061) Use of int in max_burst socket option. [ 946.157782][T31061] Use struct sctp_assoc_value instead [ 946.208901][ T30] audit: type=1800 audit(1793776634.313:13): pid=31055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7450" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1628 res=0 errno=-22 [ 946.247049][T31063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7451'. [ 946.541650][T31072] siw: device registration error -23 [ 946.779254][T31085] syzkaller1: entered promiscuous mode [ 946.779282][T31085] syzkaller1: entered allmulticast mode [ 947.242861][T31099] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7462'. [ 947.260979][T31097] syzkaller1: entered promiscuous mode [ 947.261005][T31097] syzkaller1: entered allmulticast mode [ 947.262698][T31100] netlink: 'syz.2.7460': attribute type 3 has an invalid length. [ 947.274662][T31099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7462'. [ 947.924840][T31118] macvtap1: entered allmulticast mode [ 947.925371][T31118] bond0: entered allmulticast mode [ 947.926270][T31118] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 947.928143][T31118] team0: Device macvtap1 failed to register rx_handler [ 947.937795][T31118] bond0: left allmulticast mode [ 948.169025][T16343] Bluetooth: hci0: command 0x080f tx timeout [ 948.367062][T31129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7472'. [ 948.367089][T31129] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7472'. [ 948.438240][T31133] Bluetooth: MGMT ver 1.23 [ 948.584894][T31135] syzkaller1: entered promiscuous mode [ 948.584922][T31135] syzkaller1: entered allmulticast mode [ 948.602747][T31137] nbd: couldn't find a device at index 0 [ 948.621077][T31139] IPv6: addrconf: prefix option has invalid lifetime [ 948.643365][T31142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7477'. [ 948.836017][T31152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7480'. [ 949.774240][T31188] tipc: Enabling of bearer rejected, failed to enable media [ 949.831110][T31183] syzkaller0: entered promiscuous mode [ 949.831136][T31183] syzkaller0: entered allmulticast mode [ 949.872580][T31191] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7492'. [ 949.893647][T31191] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7492'. [ 949.981554][T31197] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 950.104171][T31197] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 950.300227][T31197] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 950.485579][T31208] netlink: 964 bytes leftover after parsing attributes in process `syz.1.7500'. [ 950.485608][T31208] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 950.485706][T31212] tipc: Started in network mode [ 950.485734][T31212] tipc: Node identity b6aaeaf0cd82, cluster identity 4711 [ 950.486894][T31212] tipc: Enabled bearer , priority 20 [ 950.490538][T25627] Bluetooth: hci4: command 0x0405 tx timeout [ 950.621517][T31218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7504'. [ 951.054992][T31238] xt_hashlimit: size too large, truncated to 1048576 [ 951.166117][T31243] netlink: 'syz.0.7513': attribute type 11 has an invalid length. [ 951.419309][T31251] nbd: couldn't find a device at index 0 [ 951.599003][ T7089] tipc: Node number set to 2066279152 [ 951.778928][T31272] v: renamed from dummy0 (while UP) [ 952.499975][T31265] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 952.805327][T31324] Bluetooth: hci0: unsupported parameter 5135 [ 952.805355][T31324] Bluetooth: hci0: unsupported parameter 8192 [ 952.805370][T31324] Bluetooth: hci0: unsupported parameter 5135 [ 952.805382][T31324] Bluetooth: hci0: unsupported parameter 8192 [ 952.806422][T31324] xt_hashlimit: max too large, truncated to 1048576 [ 952.806668][T31324] Cannot find del_set index 4 as target [ 952.835777][T31323] nbd: couldn't find a device at index 0 [ 953.020642][T31331] netlink: 'syz.1.7542': attribute type 4 has an invalid length. [ 953.065871][T31337] IPv6: addrconf: prefix option has invalid lifetime [ 953.385820][T31350] __nla_validate_parse: 3 callbacks suppressed [ 953.385844][T31350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7548'. [ 953.808661][T31361] netlink: 'syz.0.7553': attribute type 4 has an invalid length. [ 953.808689][T31361] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.7553'. [ 953.969421][T31367] sctp: [Deprecated]: syz.4.7555 (pid 31367) Use of int in max_burst socket option. [ 953.969421][T31367] Use struct sctp_assoc_value instead [ 954.028965][T31368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7555'. [ 954.690879][T31370] Bluetooth: hci0: unsupported parameter 5135 [ 954.690917][T31370] Bluetooth: hci0: unsupported parameter 8192 [ 954.690932][T31370] Bluetooth: hci0: unsupported parameter 5135 [ 954.690946][T31370] Bluetooth: hci0: unsupported parameter 8192 [ 954.693257][T31370] xt_hashlimit: max too large, truncated to 1048576 [ 954.693502][T31370] Cannot find del_set index 4 as target [ 954.917670][T31380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7557'. [ 954.917696][T31380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7557'. [ 954.917722][T31380] netlink: 'syz.3.7557': attribute type 18 has an invalid length. [ 955.134123][T31387] tipc: Enabling of bearer rejected, failed to enable media [ 955.509049][T31391] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.509773][T31391] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.789801][T31391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.797739][T31391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.911311][T31411] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7566'. [ 956.828576][ T1162] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.828633][ T1162] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.828669][ T1162] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.828706][ T1162] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.999206][T31419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.645019][T31448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7579'. [ 957.747788][T31452] netlink: 'syz.3.7580': attribute type 5 has an invalid length. [ 957.747818][T31452] nbd: must specify at least one socket [ 957.899666][T31462] Bluetooth: hci0: unsupported parameter 5135 [ 957.899694][T31462] Bluetooth: hci0: unsupported parameter 8192 [ 957.899707][T31462] Bluetooth: hci0: unsupported parameter 5135 [ 957.899719][T31462] Bluetooth: hci0: unsupported parameter 8192 [ 957.903187][T31462] Cannot find del_set index 4 as target [ 958.413116][T31486] netlink: 976 bytes leftover after parsing attributes in process `syz.0.7590'. [ 958.511133][T31492] FAULT_INJECTION: forcing a failure. [ 958.511133][T31492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.511166][T31492] CPU: 1 UID: 0 PID: 31492 Comm: syz.2.7593 Not tainted syzkaller #0 PREEMPT(full) [ 958.511189][T31492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 958.511201][T31492] Call Trace: [ 958.511211][T31492] [ 958.511220][T31492] dump_stack_lvl+0xe8/0x150 [ 958.511258][T31492] should_fail_ex+0x3eb/0x540 [ 958.511289][T31492] _copy_from_user+0x2d/0xb0 [ 958.511314][T31492] ___sys_sendmsg+0x1c6/0x360 [ 958.511332][T31492] ? __lock_acquire+0x747/0x2de0 [ 958.511362][T31492] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.511421][T31492] ? __fget_files+0x3a2/0x420 [ 958.511444][T31492] ? __fget_files+0x2a/0x420 [ 958.511477][T31492] __x64_sys_sendmsg+0x1b1/0x290 [ 958.511501][T31492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 958.511546][T31492] do_syscall_64+0x166/0x520 [ 958.511568][T31492] ? trace_irq_disable+0x3b/0x140 [ 958.511592][T31492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.511613][T31492] ? clear_bhb_loop+0x70/0xc0 [ 958.511638][T31492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.511658][T31492] RIP: 0033:0x7f1c9359fb19 [ 958.511679][T31492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.511696][T31492] RSP: 002b:00007f1c943b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.511719][T31492] RAX: ffffffffffffffda RBX: 00007f1c93825fa0 RCX: 00007f1c9359fb19 [ 958.511733][T31492] RDX: 0000000020008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 958.511747][T31492] RBP: 00007f1c943b1090 R08: 0000000000000000 R09: 0000000000000000 [ 958.511759][T31492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.511771][T31492] R13: 00007f1c93826038 R14: 00007f1c93825fa0 R15: 00007ffcd2b100c8 [ 958.511805][T31492] [ 958.924952][T31505] FAULT_INJECTION: forcing a failure. [ 958.924952][T31505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.924985][T31505] CPU: 0 UID: 0 PID: 31505 Comm: syz.4.7598 Not tainted syzkaller #0 PREEMPT(full) [ 958.925009][T31505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 958.925023][T31505] Call Trace: [ 958.925032][T31505] [ 958.925042][T31505] dump_stack_lvl+0xe8/0x150 [ 958.925084][T31505] should_fail_ex+0x3eb/0x540 [ 958.925117][T31505] _copy_from_user+0x2d/0xb0 [ 958.925147][T31505] __sys_connect+0x155/0x450 [ 958.925183][T31505] ? __pfx___sys_connect+0x10/0x10 [ 958.925229][T31505] ? __pfx_ksys_write+0x10/0x10 [ 958.925267][T31505] __x64_sys_connect+0x7a/0x90 [ 958.925300][T31505] do_syscall_64+0x166/0x520 [ 958.925325][T31505] ? trace_irq_disable+0x3b/0x140 [ 958.925352][T31505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.925374][T31505] ? clear_bhb_loop+0x70/0xc0 [ 958.925401][T31505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.925422][T31505] RIP: 0033:0x7f911179fb19 [ 958.925444][T31505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.925463][T31505] RSP: 002b:00007f91126b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 958.925489][T31505] RAX: ffffffffffffffda RBX: 00007f9111a25fa0 RCX: 00007f911179fb19 [ 958.925515][T31505] RDX: 000000000000001c RSI: 0000200000000a00 RDI: 0000000000000003 [ 958.925530][T31505] RBP: 00007f91126b8090 R08: 0000000000000000 R09: 0000000000000000 [ 958.925544][T31505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.925558][T31505] R13: 00007f9111a26038 R14: 00007f9111a25fa0 R15: 00007fffd772e618 [ 958.925595][T31505] [ 959.651620][T31536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7610'. [ 959.651659][T31536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7610'. [ 959.676957][T31539] sctp: [Deprecated]: syz.1.7607 (pid 31539) Use of int in max_burst socket option. [ 959.676957][T31539] Use struct sctp_assoc_value instead [ 959.718824][T31536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7610'. [ 959.718871][T31536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7610'. [ 959.759587][T31546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7607'. [ 959.800448][T31542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7611'. [ 960.187194][T31558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7614'. [ 960.620156][T31569] bond2: option ad_select: invalid value (34) [ 960.627716][T31569] bond2 (unregistering): Released all slaves [ 960.935967][T31581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7621'. [ 961.748377][T31616] ipvlan2: entered promiscuous mode [ 962.054412][T31632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7640'. [ 963.133059][T31671] netlink: 'syz.0.7657': attribute type 10 has an invalid length. [ 963.149436][T31671] netlink: 'syz.0.7657': attribute type 10 has an invalid length. [ 963.306966][T31683] netlink: 'syz.1.7658': attribute type 4 has an invalid length. [ 963.344021][T31685] FAULT_INJECTION: forcing a failure. [ 963.344021][T31685] name failslab, interval 1, probability 0, space 0, times 0 [ 963.344055][T31685] CPU: 0 UID: 0 PID: 31685 Comm: syz.3.7660 Not tainted syzkaller #0 PREEMPT(full) [ 963.344080][T31685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 963.344093][T31685] Call Trace: [ 963.344102][T31685] [ 963.344113][T31685] dump_stack_lvl+0xe8/0x150 [ 963.344155][T31685] should_fail_ex+0x3eb/0x540 [ 963.344189][T31685] should_failslab+0xa8/0x100 [ 963.344224][T31685] __kvmalloc_node_noprof+0x171/0x820 [ 963.344260][T31685] ? __kvmalloc_node_noprof+0x340/0x820 [ 963.344289][T31685] ? bpf_compute_postorder+0x127/0x9a0 [ 963.344318][T31685] ? bpf_compute_postorder+0x127/0x9a0 [ 963.344364][T31685] bpf_compute_postorder+0x127/0x9a0 [ 963.344395][T31685] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 963.344434][T31685] bpf_check+0x298f/0x34e0 [ 963.344470][T31685] ? ktime_get_with_offset+0x93/0x2d0 [ 963.344501][T31685] ? ktime_get_with_offset+0x93/0x2d0 [ 963.344532][T31685] ? __pfx_bpf_check+0x10/0x10 [ 963.344559][T31685] ? bpf_obj_name_cpy+0x194/0x1e0 [ 963.344593][T31685] bpf_prog_load+0x14da/0x1c60 [ 963.344630][T31685] ? __pfx_bpf_prog_load+0x10/0x10 [ 963.344672][T31685] ? __might_fault+0xaf/0x130 [ 963.344704][T31685] __sys_bpf+0xd86/0xe00 [ 963.344736][T31685] ? __pfx___sys_bpf+0x10/0x10 [ 963.344772][T31685] ? __fget_files+0x2a/0x420 [ 963.344821][T31685] ? ksys_write+0x242/0x270 [ 963.344850][T31685] ? __pfx_ksys_write+0x10/0x10 [ 963.344885][T31685] __x64_sys_bpf+0xba/0xd0 [ 963.344920][T31685] do_syscall_64+0x166/0x520 [ 963.344948][T31685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.344970][T31685] ? clear_bhb_loop+0x70/0xc0 [ 963.344998][T31685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.345020][T31685] RIP: 0033:0x7fba3b59fb19 [ 963.345043][T31685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.345063][T31685] RSP: 002b:00007fba3c510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 963.345088][T31685] RAX: ffffffffffffffda RBX: 00007fba3b825fa0 RCX: 00007fba3b59fb19 [ 963.345104][T31685] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 963.345119][T31685] RBP: 00007fba3c510090 R08: 0000000000000000 R09: 0000000000000000 [ 963.345134][T31685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 963.345148][T31685] R13: 00007fba3b826038 R14: 00007fba3b825fa0 R15: 00007ffcbac62898 [ 963.345187][T31685] [ 963.617522][T31693] __nla_validate_parse: 6 callbacks suppressed [ 963.617545][T31693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7664'. [ 963.669080][T31693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 963.670519][T31697] FAULT_INJECTION: forcing a failure. [ 963.670519][T31697] name failslab, interval 1, probability 0, space 0, times 0 [ 963.670551][T31697] CPU: 1 UID: 0 PID: 31697 Comm: syz.0.7665 Not tainted syzkaller #0 PREEMPT(full) [ 963.670576][T31697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 963.670589][T31697] Call Trace: [ 963.670597][T31697] [ 963.670609][T31697] dump_stack_lvl+0xe8/0x150 [ 963.670650][T31697] should_fail_ex+0x3eb/0x540 [ 963.670683][T31697] should_failslab+0xa8/0x100 [ 963.670718][T31697] __kmalloc_cache_noprof+0x9e/0x600 [ 963.670745][T31697] ? __kmalloc_cache_noprof+0x148/0x600 [ 963.670769][T31697] ? sctp_add_bind_addr+0x8c/0x370 [ 963.670794][T31697] ? sctp_add_bind_addr+0x8c/0x370 [ 963.670827][T31697] sctp_add_bind_addr+0x8c/0x370 [ 963.670856][T31697] sctp_copy_local_addr_list+0x31a/0x4e0 [ 963.670882][T31697] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 963.670907][T31697] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 963.670934][T31697] ? sctp_v6_is_any+0x64/0x80 [ 963.670964][T31697] ? sctp_copy_one_addr+0x93/0x360 [ 963.670992][T31697] sctp_bind_addr_copy+0xb3/0x3c0 [ 963.671017][T31697] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 963.671054][T31697] sctp_connect_new_asoc+0x2ff/0x6b0 [ 963.671087][T31697] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 963.671124][T31697] ? __local_bh_enable_ip+0xd6/0x140 [ 963.671151][T31697] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 963.671179][T31697] ? security_sctp_bind_connect+0x7e/0x2c0 [ 963.671211][T31697] sctp_sendmsg+0x159b/0x2d00 [ 963.671251][T31697] ? kstrtouint+0x6e/0xe0 [ 963.671283][T31697] ? __pfx_sctp_sendmsg+0x10/0x10 [ 963.671309][T31697] ? lock_acquire+0x115/0x350 [ 963.671357][T31697] ? aa_sock_msg_perm+0xf5/0x210 [ 963.671384][T31697] ? sock_rps_record_flow+0x19/0x350 [ 963.671412][T31697] ? inet_sendmsg+0x298/0x320 [ 963.671437][T31697] ? __pfx_inet_sendmsg+0x10/0x10 [ 963.671457][T31697] sock_sendmsg_nosec+0x10f/0x190 [ 963.671489][T31697] __sys_sendto+0x408/0x5a0 [ 963.671519][T31697] ? ksys_write+0x1e6/0x270 [ 963.671549][T31697] ? __pfx___sys_sendto+0x10/0x10 [ 963.671574][T31697] ? __mutex_unlock_slowpath+0x731/0x900 [ 963.671616][T31697] ? fdget+0x1ac/0x250 [ 963.671659][T31697] ? __pfx_ksys_write+0x10/0x10 [ 963.671695][T31697] __x64_sys_sendto+0xde/0x100 [ 963.671732][T31697] do_syscall_64+0x166/0x520 [ 963.671755][T31697] ? trace_irq_disable+0x3b/0x140 [ 963.671782][T31697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.671805][T31697] ? clear_bhb_loop+0x70/0xc0 [ 963.671834][T31697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.671854][T31697] RIP: 0033:0x7fa64599fb19 [ 963.671875][T31697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.671894][T31697] RSP: 002b:00007fa646819028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 963.671919][T31697] RAX: ffffffffffffffda RBX: 00007fa645c25fa0 RCX: 00007fa64599fb19 [ 963.671936][T31697] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000003 [ 963.671951][T31697] RBP: 00007fa646819090 R08: 0000200000000780 R09: 000000000000001c [ 963.671965][T31697] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 963.671979][T31697] R13: 00007fa645c26038 R14: 00007fa645c25fa0 R15: 00007fffb6c9aa38 [ 963.672018][T31697] [ 963.727929][T31698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7666'. [ 963.973515][T31709] tipc: Enabled bearer , priority 0 [ 963.988194][T31692] syzkaller0: entered promiscuous mode [ 963.988217][T31692] syzkaller0: entered allmulticast mode [ 964.364251][T31724] syzkaller1: entered promiscuous mode [ 964.364278][T31724] syzkaller1: entered allmulticast mode [ 964.428885][T31688] tipc: Resetting bearer [ 964.482102][T31688] tipc: Disabling bearer [ 964.508803][T31732] IPv6: addrconf: prefix option has invalid lifetime [ 964.905887][T31751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7680'. [ 964.905927][T31751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7680'. [ 965.067444][T31753] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.201798][T31753] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.327387][T31753] : (slave netdevsim1): Releasing backup interface [ 965.331937][T31753] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.476438][T31753] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.869186][T25193] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.030413][T25193] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.030463][T25193] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.030723][T31777] syzkaller1: entered promiscuous mode [ 966.030741][T31777] syzkaller1: entered allmulticast mode [ 966.069103][T25193] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.102339][T31780] netlink: 'syz.4.7691': attribute type 11 has an invalid length. [ 966.111445][T31755] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.356772][T31755] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.450598][T31755] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.555431][T31755] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.624562][T31792] netlink: 'syz.4.7694': attribute type 1 has an invalid length. [ 966.669007][T31798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7695'. [ 967.393560][T31816] sctp: [Deprecated]: syz.3.7701 (pid 31816) Use of int in max_burst socket option. [ 967.393560][T31816] Use struct sctp_assoc_value instead [ 967.475205][T31817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7701'. [ 967.697420][T31821] IPv6: NLM_F_CREATE should be specified when creating new route [ 967.716851][T13538] bridge_slave_1: left allmulticast mode [ 967.716883][T13538] bridge_slave_1: left promiscuous mode [ 967.717136][T13538] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.741818][T13538] bridge_slave_0: left allmulticast mode [ 967.741849][T13538] bridge_slave_0: left promiscuous mode [ 967.742187][T13538] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.802581][T13538] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 968.038822][T31832] Bluetooth: hci0: unsupported parameter 5135 [ 968.038851][T31832] Bluetooth: hci0: unsupported parameter 8192 [ 968.038866][T31832] Bluetooth: hci0: unsupported parameter 5135 [ 968.038880][T31832] Bluetooth: hci0: unsupported parameter 8192 [ 968.043559][T31832] Cannot find del_set index 4 as target [ 968.227760][T13538] batman_adv: batadv0: Removing interface: ip6gretap1 [ 968.626444][T13538] bond1 (unregistering): (slave geneve2): Releasing active interface [ 968.732360][T13538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.735852][T13538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.757654][T13538] bond0 (unregistering): Released all slaves [ 968.772901][T13538] bond1 (unregistering): Released all slaves [ 968.794650][T31840] netlink: 964 bytes leftover after parsing attributes in process `syz.1.7706'. [ 968.794677][T31840] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 968.910675][T31843] netlink: 'syz.0.7707': attribute type 3 has an invalid length. [ 968.910702][T31843] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7707'. [ 968.963500][T13538] tipc: Disabling bearer [ 968.963947][T13538] tipc: Disabling bearer [ 968.964064][T13538] tipc: Left network mode [ 969.037126][T13538] IPVS: stopping master sync thread 20089 ... [ 969.230211][T31855] sctp: [Deprecated]: syz.1.7712 (pid 31855) Use of int in max_burst socket option. [ 969.230211][T31855] Use struct sctp_assoc_value instead [ 969.259102][T31857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7710'. [ 969.287015][T31860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7712'. [ 970.212937][T31865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7716'. [ 970.234582][T31869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7715'. [ 970.274627][ T1162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.369146][T31875] FAULT_INJECTION: forcing a failure. [ 970.369146][T31875] name failslab, interval 1, probability 0, space 0, times 0 [ 970.369179][T31875] CPU: 1 UID: 0 PID: 31875 Comm: syz.0.7719 Not tainted syzkaller #0 PREEMPT(full) [ 970.369203][T31875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 970.369215][T31875] Call Trace: [ 970.369225][T31875] [ 970.369234][T31875] dump_stack_lvl+0xe8/0x150 [ 970.369277][T31875] should_fail_ex+0x3eb/0x540 [ 970.369309][T31875] should_failslab+0xa8/0x100 [ 970.369342][T31875] __kvmalloc_node_noprof+0x171/0x820 [ 970.369368][T31875] ? lockdep_hardirqs_on+0x7b/0x110 [ 970.369397][T31875] ? bpf_compute_loops+0x103/0x3e80 [ 970.369418][T31875] ? bpf_compute_loops+0x103/0x3e80 [ 970.369440][T31875] ? bpf_compute_idoms+0x18b5/0x1940 [ 970.369466][T31875] bpf_compute_loops+0x103/0x3e80 [ 970.369488][T31875] ? bpf_compute_idoms+0x18b5/0x1940 [ 970.369534][T31875] bpf_check+0x2ce7/0x34e0 [ 970.369570][T31875] ? ktime_get_with_offset+0x93/0x2d0 [ 970.369599][T31875] ? ktime_get_with_offset+0x93/0x2d0 [ 970.369626][T31875] ? __pfx_bpf_check+0x10/0x10 [ 970.369651][T31875] ? bpf_obj_name_cpy+0x194/0x1e0 [ 970.369681][T31875] bpf_prog_load+0x14da/0x1c60 [ 970.369717][T31875] ? __pfx_bpf_prog_load+0x10/0x10 [ 970.369755][T31875] ? __might_fault+0xaf/0x130 [ 970.369785][T31875] __sys_bpf+0xd86/0xe00 [ 970.369815][T31875] ? __pfx___sys_bpf+0x10/0x10 [ 970.369847][T31875] ? __fget_files+0x2a/0x420 [ 970.369901][T31875] ? ksys_write+0x242/0x270 [ 970.369930][T31875] ? __pfx_ksys_write+0x10/0x10 [ 970.369962][T31875] __x64_sys_bpf+0xba/0xd0 [ 970.369995][T31875] do_syscall_64+0x166/0x520 [ 970.370018][T31875] ? trace_irq_disable+0x3b/0x140 [ 970.370045][T31875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.370066][T31875] ? clear_bhb_loop+0x70/0xc0 [ 970.370093][T31875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.370114][T31875] RIP: 0033:0x7fa64599fb19 [ 970.370136][T31875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.370154][T31875] RSP: 002b:00007fa646819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 970.370178][T31875] RAX: ffffffffffffffda RBX: 00007fa645c25fa0 RCX: 00007fa64599fb19 [ 970.370194][T31875] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 970.370208][T31875] RBP: 00007fa646819090 R08: 0000000000000000 R09: 0000000000000000 [ 970.370222][T31875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.370234][T31875] R13: 00007fa645c26038 R14: 00007fa645c25fa0 R15: 00007fffb6c9aa38 [ 970.370268][T31875] [ 970.373896][T25211] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.491407][T31878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7717'. [ 970.508907][T25192] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.634404][ T1162] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.006900][T31891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7722'. [ 971.789227][T13538] hsr_slave_0: left promiscuous mode [ 971.792183][T13538] hsr_slave_1: left promiscuous mode [ 971.793201][T13538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.793261][T13538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.795729][T13538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.795752][T13538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.811803][T31919] nbd: couldn't find a device at index 0 [ 971.886135][T13538] veth0_to_bridge: left allmulticast mode [ 971.886168][T13538] veth0_to_bridge: left promiscuous mode [ 971.886284][T13538] veth1_macvtap: left promiscuous mode [ 971.887526][T13538] veth0_macvtap: left promiscuous mode [ 971.887668][T13538] veth1_vlan: left promiscuous mode [ 971.887742][T13538] veth0_vlan: left promiscuous mode [ 972.504937][T13538] team0 (unregistering): Port device team_slave_1 removed [ 972.519831][T13538] team0 (unregistering): Port device team_slave_0 removed [ 973.092511][T13538] IPVS: stop unused estimator thread 0... [ 973.110231][T31939] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received [ 973.358932][T31943] syzkaller0: entered promiscuous mode [ 973.358959][T31943] syzkaller0: entered allmulticast mode [ 974.827125][T31980] netlink: 964 bytes leftover after parsing attributes in process `syz.3.7748'. [ 974.827153][T31980] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 975.024794][T31982] netlink: 'syz.2.7749': attribute type 10 has an invalid length. [ 975.544324][T32002] sctp: [Deprecated]: syz.0.7753 (pid 32002) Use of int in max_burst socket option. [ 975.544324][T32002] Use struct sctp_assoc_value instead [ 975.646775][T32006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7753'. [ 976.844354][T32024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7760'. [ 977.030688][T32033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7762'. [ 977.171033][T32035] Bluetooth: hci0: unsupported parameter 5135 [ 977.171061][T32035] Bluetooth: hci0: unsupported parameter 8192 [ 977.171076][T32035] Bluetooth: hci0: unsupported parameter 5135 [ 977.171090][T32035] Bluetooth: hci0: unsupported parameter 8192 [ 977.174036][T32035] Cannot find del_set index 4 as target [ 977.208922][T32039] netlink: 'syz.4.7765': attribute type 10 has an invalid length. [ 977.431205][T32051] IPv6: addrconf: prefix option has invalid lifetime [ 977.435758][T32042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7766'. [ 977.587836][T32061] macvtap1: entered allmulticast mode [ 977.597909][T32061] bond0: entered allmulticast mode [ 977.604051][T32061] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 977.604344][T32061] team0: Device macvtap1 failed to register rx_handler [ 977.606933][T32059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7771'. [ 977.673800][T32067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7773'. [ 977.707953][T32064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7769'. [ 978.350466][T32061] bond0: left allmulticast mode [ 978.639745][T32088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 978.656605][T32086] IPVS: stopping master sync thread 29688 ... [ 978.718901][T32094] syzkaller0: entered promiscuous mode [ 978.718925][T32094] syzkaller0: entered allmulticast mode [ 978.868049][T32099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7778'. [ 979.785486][T32127] bridge0: port 3(gretap0) entered blocking state [ 979.785662][T32127] bridge0: port 3(gretap0) entered disabled state [ 979.785937][T32127] gretap0: entered allmulticast mode [ 979.787815][T32127] gretap0: entered promiscuous mode [ 979.789119][T32127] bridge0: port 3(gretap0) entered blocking state [ 979.789281][T32127] bridge0: port 3(gretap0) entered forwarding state [ 980.076372][T32131] netlink: 'syz.0.7790': attribute type 10 has an invalid length. [ 980.211371][T32137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7789'. [ 980.294279][T32137] syzkaller1: entered promiscuous mode [ 980.294307][T32137] syzkaller1: entered allmulticast mode [ 980.314060][T32143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 980.320044][T32137] netlink: 'syz.4.7789': attribute type 3 has an invalid length. [ 980.334971][T32143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7793'. [ 980.401736][T32145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 980.412723][T32143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7793'. [ 980.792788][T32166] FAULT_INJECTION: forcing a failure. [ 980.792788][T32166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.792823][T32166] CPU: 1 UID: 0 PID: 32166 Comm: syz.1.7800 Not tainted syzkaller #0 PREEMPT(full) [ 980.792847][T32166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 980.792860][T32166] Call Trace: [ 980.792869][T32166] [ 980.792879][T32166] dump_stack_lvl+0xe8/0x150 [ 980.792921][T32166] should_fail_ex+0x3eb/0x540 [ 980.792952][T32166] _copy_from_iter+0x1d3/0x1680 [ 980.792977][T32166] ? __alloc_skb+0x27a/0x7a0 [ 980.793010][T32166] ? __alloc_skb+0x27a/0x7a0 [ 980.793041][T32166] ? __alloc_skb+0x27a/0x7a0 [ 980.793071][T32166] ? __pfx__copy_from_iter+0x10/0x10 [ 980.793092][T32166] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 980.793116][T32166] ? __alloc_skb+0x27a/0x7a0 [ 980.793142][T32166] ? __alloc_skb+0x27a/0x7a0 [ 980.793178][T32166] ? netlink_sendmsg+0x64f/0xb20 [ 980.793207][T32166] ? skb_put+0x112/0x210 [ 980.793230][T32166] netlink_sendmsg+0x6bb/0xb20 [ 980.793266][T32166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.793299][T32166] ? aa_sock_msg_perm+0x144/0x210 [ 980.793335][T32166] ? apparmor_socket_sendmsg+0x98/0x360 [ 980.793368][T32166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.793396][T32166] sock_sendmsg_nosec+0x14e/0x190 [ 980.793427][T32166] ____sys_sendmsg+0x54e/0x850 [ 980.793455][T32166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 980.793487][T32166] ? import_iovec+0x73/0xa0 [ 980.793516][T32166] ___sys_sendmsg+0x2a5/0x360 [ 980.793536][T32166] ? __lock_acquire+0x747/0x2de0 [ 980.793567][T32166] ? __pfx____sys_sendmsg+0x10/0x10 [ 980.793632][T32166] ? __fget_files+0x3a2/0x420 [ 980.793656][T32166] ? __fget_files+0x2a/0x420 [ 980.793690][T32166] __x64_sys_sendmsg+0x1b1/0x290 [ 980.793717][T32166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 980.793765][T32166] do_syscall_64+0x166/0x520 [ 980.793790][T32166] ? trace_irq_disable+0x3b/0x140 [ 980.793816][T32166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.793838][T32166] ? clear_bhb_loop+0x70/0xc0 [ 980.793865][T32166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.793887][T32166] RIP: 0033:0x7f308eb9fb19 [ 980.793908][T32166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.793926][T32166] RSP: 002b:00007f308fb1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.793950][T32166] RAX: ffffffffffffffda RBX: 00007f308ee25fa0 RCX: 00007f308eb9fb19 [ 980.793965][T32166] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 980.793979][T32166] RBP: 00007f308fb1e090 R08: 0000000000000000 R09: 0000000000000000 [ 980.793992][T32166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.794005][T32166] R13: 00007f308ee26038 R14: 00007f308ee25fa0 R15: 00007ffc044418b8 [ 980.794038][T32166] [ 980.876105][T32161] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.642235][T32189] siw: device registration error -23 [ 982.071556][T32203] syzkaller0: entered promiscuous mode [ 982.071582][T32203] syzkaller0: entered allmulticast mode [ 982.108155][T32203] tc mirred to Houston: device ip6tnl0 is down [ 982.213226][T32213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7818'. [ 982.675743][T32229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7824'. [ 982.675786][T32229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7824'. [ 983.074030][T32243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7831'. [ 983.074058][T32243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7831'. [ 983.074076][T32243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7831'. [ 983.202523][T32248] nbd: couldn't find a device at index 0 [ 983.452926][T32258] nbd: socks must be embedded in a SOCK_ITEM attr [ 983.728909][T32278] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7843'. [ 984.110500][T32299] Bluetooth: hci0: unsupported parameter 5135 [ 984.110529][T32299] Bluetooth: hci0: unsupported parameter 65 [ 984.110542][T32299] Bluetooth: hci0: unsupported parameter 5135 [ 984.110556][T32299] Bluetooth: hci0: unsupported parameter 65 [ 984.406512][T32310] Bluetooth: hci0: unsupported parameter 5135 [ 984.406539][T32310] Bluetooth: hci0: unsupported parameter 8192 [ 984.406553][T32310] Bluetooth: hci0: unsupported parameter 5135 [ 984.406567][T32310] Bluetooth: hci0: unsupported parameter 8192 [ 984.427707][T32310] Cannot find del_set index 4 as target [ 984.436370][T32311] netlink: 'syz.2.7853': attribute type 1 has an invalid length. [ 984.631979][T32311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 984.806106][T32326] Bluetooth: hci0: unsupported parameter 5135 [ 984.806135][T32326] Bluetooth: hci0: unsupported parameter 8192 [ 984.806149][T32326] Bluetooth: hci0: unsupported parameter 5135 [ 984.806162][T32326] Bluetooth: hci0: unsupported parameter 8192 [ 984.836590][T32326] xt_hashlimit: max too large, truncated to 1048576 [ 984.836862][T32326] Cannot find del_set index 4 as target [ 984.982211][T32336] FAULT_INJECTION: forcing a failure. [ 984.982211][T32336] name failslab, interval 1, probability 0, space 0, times 0 [ 984.982245][T32336] CPU: 0 UID: 0 PID: 32336 Comm: syz.4.7864 Not tainted syzkaller #0 PREEMPT(full) [ 984.982269][T32336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 984.982282][T32336] Call Trace: [ 984.982291][T32336] [ 984.982300][T32336] dump_stack_lvl+0xe8/0x150 [ 984.982339][T32336] should_fail_ex+0x3eb/0x540 [ 984.982368][T32336] should_failslab+0xa8/0x100 [ 984.982398][T32336] __kvmalloc_node_noprof+0x171/0x820 [ 984.982432][T32336] ? __kvmalloc_node_noprof+0x340/0x820 [ 984.982456][T32336] ? bpf_compute_scc+0xec/0xdb0 [ 984.982481][T32336] ? bpf_compute_scc+0xec/0xdb0 [ 984.982512][T32336] bpf_compute_scc+0xec/0xdb0 [ 984.982539][T32336] ? sort_subprogs_topo+0xe5f/0x1130 [ 984.982584][T32336] bpf_check+0x2c70/0x34e0 [ 984.982619][T32336] ? ktime_get_with_offset+0x93/0x2d0 [ 984.982649][T32336] ? ktime_get_with_offset+0x93/0x2d0 [ 984.982677][T32336] ? __pfx_bpf_check+0x10/0x10 [ 984.982702][T32336] ? bpf_obj_name_cpy+0x194/0x1e0 [ 984.982730][T32336] bpf_prog_load+0x14da/0x1c60 [ 984.982763][T32336] ? __pfx_bpf_prog_load+0x10/0x10 [ 984.982807][T32336] ? __might_fault+0xaf/0x130 [ 984.982836][T32336] __sys_bpf+0xd86/0xe00 [ 984.982866][T32336] ? __pfx___sys_bpf+0x10/0x10 [ 984.982893][T32336] ? __fget_files+0x2a/0x420 [ 984.982929][T32336] ? ksys_write+0x242/0x270 [ 984.982952][T32336] ? __pfx_ksys_write+0x10/0x10 [ 984.982978][T32336] __x64_sys_bpf+0xba/0xd0 [ 984.983004][T32336] do_syscall_64+0x166/0x520 [ 984.983024][T32336] ? trace_irq_disable+0x3b/0x140 [ 984.983046][T32336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.983063][T32336] ? clear_bhb_loop+0x70/0xc0 [ 984.983084][T32336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.983100][T32336] RIP: 0033:0x7f911179fb19 [ 984.983117][T32336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.983131][T32336] RSP: 002b:00007f91126b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 984.983151][T32336] RAX: ffffffffffffffda RBX: 00007f9111a25fa0 RCX: 00007f911179fb19 [ 984.983164][T32336] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 984.983175][T32336] RBP: 00007f91126b8090 R08: 0000000000000000 R09: 0000000000000000 [ 984.983186][T32336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 984.983196][T32336] R13: 00007f9111a26038 R14: 00007f9111a25fa0 R15: 00007fffd772e618 [ 984.983223][T32336] [ 985.033398][T32337] FAULT_INJECTION: forcing a failure. [ 985.033398][T32337] name failslab, interval 1, probability 0, space 0, times 0 [ 985.033425][T32337] CPU: 1 UID: 0 PID: 32337 Comm: syz.2.7865 Not tainted syzkaller #0 PREEMPT(full) [ 985.033447][T32337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 985.033458][T32337] Call Trace: [ 985.033466][T32337] [ 985.033474][T32337] dump_stack_lvl+0xe8/0x150 [ 985.033510][T32337] should_fail_ex+0x3eb/0x540 [ 985.033538][T32337] should_failslab+0xa8/0x100 [ 985.033567][T32337] __kvmalloc_node_noprof+0x171/0x820 [ 985.033593][T32337] ? __kvmalloc_node_noprof+0x340/0x820 [ 985.033615][T32337] ? bpf_compute_subprog_arg_access+0x194/0x15c0 [ 985.033640][T32337] ? bpf_compute_subprog_arg_access+0x194/0x15c0 [ 985.033671][T32337] bpf_compute_subprog_arg_access+0x194/0x15c0 [ 985.033716][T32337] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 985.033745][T32337] ? __kvmalloc_node_noprof+0x340/0x820 [ 985.033768][T32337] ? bpf_compute_live_registers+0x142/0x1df0 [ 985.033790][T32337] ? bpf_compute_live_registers+0x142/0x1df0 [ 985.033821][T32337] bpf_compute_live_registers+0x10b0/0x1df0 [ 985.033866][T32337] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 985.033902][T32337] bpf_check+0x2d0b/0x34e0 [ 985.033940][T32337] ? ktime_get_with_offset+0x93/0x2d0 [ 985.033966][T32337] ? ktime_get_with_offset+0x93/0x2d0 [ 985.033991][T32337] ? __pfx_bpf_check+0x10/0x10 [ 985.034014][T32337] ? bpf_obj_name_cpy+0x194/0x1e0 [ 985.034041][T32337] bpf_prog_load+0x14da/0x1c60 [ 985.034072][T32337] ? __pfx_bpf_prog_load+0x10/0x10 [ 985.034107][T32337] ? __might_fault+0xaf/0x130 [ 985.034134][T32337] __sys_bpf+0xd86/0xe00 [ 985.034160][T32337] ? __pfx___sys_bpf+0x10/0x10 [ 985.034190][T32337] ? __fget_files+0x2a/0x420 [ 985.034229][T32337] ? ksys_write+0x242/0x270 [ 985.034255][T32337] ? __pfx_ksys_write+0x10/0x10 [ 985.034285][T32337] __x64_sys_bpf+0xba/0xd0 [ 985.034314][T32337] do_syscall_64+0x166/0x520 [ 985.034336][T32337] ? trace_irq_disable+0x3b/0x140 [ 985.034360][T32337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.034379][T32337] ? clear_bhb_loop+0x70/0xc0 [ 985.034403][T32337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.034422][T32337] RIP: 0033:0x7f1c9359fb19 [ 985.034442][T32337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.034458][T32337] RSP: 002b:00007f1c943b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 985.034478][T32337] RAX: ffffffffffffffda RBX: 00007f1c93825fa0 RCX: 00007f1c9359fb19 [ 985.034492][T32337] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 985.034505][T32337] RBP: 00007f1c943b1090 R08: 0000000000000000 R09: 0000000000000000 [ 985.034517][T32337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 985.034533][T32337] R13: 00007f1c93826038 R14: 00007f1c93825fa0 R15: 00007ffcd2b100c8 [ 985.034564][T32337] [ 985.277408][T32343] sctp: [Deprecated]: syz.0.7866 (pid 32343) Use of int in max_burst socket option. [ 985.277408][T32343] Use struct sctp_assoc_value instead [ 985.368441][T32350] __nla_validate_parse: 1 callbacks suppressed [ 985.368461][T32350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7866'. [ 985.616478][T32349] siw: device registration error -23 [ 985.837726][T32363] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 986.019332][T32365] netlink: 'syz.4.7872': attribute type 10 has an invalid length. [ 986.640488][T32388] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 986.640518][T32388] bridge3: entered allmulticast mode [ 987.311975][T32419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 987.551728][T32428] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7899'. [ 987.627801][T32430] netlink: 'syz.3.7898': attribute type 4 has an invalid length. [ 987.751135][T32434] netlink: 'syz.0.7900': attribute type 1 has an invalid length. [ 988.167022][T32450] FAULT_INJECTION: forcing a failure. [ 988.167022][T32450] name failslab, interval 1, probability 0, space 0, times 0 [ 988.167060][T32450] CPU: 0 UID: 0 PID: 32450 Comm: syz.3.7906 Not tainted syzkaller #0 PREEMPT(full) [ 988.167084][T32450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 988.167097][T32450] Call Trace: [ 988.167106][T32450] [ 988.167115][T32450] dump_stack_lvl+0xe8/0x150 [ 988.167156][T32450] should_fail_ex+0x3eb/0x540 [ 988.167187][T32450] should_failslab+0xa8/0x100 [ 988.167218][T32450] ? skb_clone+0x212/0x3a0 [ 988.167244][T32450] kmem_cache_alloc_noprof+0x9c/0x600 [ 988.167270][T32450] ? skb_clone+0x212/0x3a0 [ 988.167298][T32450] skb_clone+0x212/0x3a0 [ 988.167325][T32450] __netlink_deliver_tap+0x355/0x6e0 [ 988.167364][T32450] ? netlink_deliver_tap+0x2e/0x1b0 [ 988.167396][T32450] netlink_deliver_tap+0x19c/0x1b0 [ 988.167426][T32450] netlink_unicast+0x8c1/0xa80 [ 988.167473][T32450] netlink_sendmsg+0x7f0/0xb20 [ 988.167507][T32450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.167539][T32450] ? aa_sock_msg_perm+0x144/0x210 [ 988.167565][T32450] ? apparmor_socket_sendmsg+0x98/0x360 [ 988.167595][T32450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.167622][T32450] sock_sendmsg_nosec+0x14e/0x190 [ 988.167652][T32450] ____sys_sendmsg+0x54e/0x850 [ 988.167680][T32450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 988.167715][T32450] ? import_iovec+0x73/0xa0 [ 988.167747][T32450] ___sys_sendmsg+0x2a5/0x360 [ 988.167768][T32450] ? __lock_acquire+0x747/0x2de0 [ 988.167802][T32450] ? __pfx____sys_sendmsg+0x10/0x10 [ 988.167870][T32450] ? __fget_files+0x3a2/0x420 [ 988.167896][T32450] ? __fget_files+0x2a/0x420 [ 988.167972][T32450] __x64_sys_sendmsg+0x1b1/0x290 [ 988.168000][T32450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 988.168051][T32450] do_syscall_64+0x166/0x520 [ 988.168076][T32450] ? trace_irq_disable+0x3b/0x140 [ 988.168105][T32450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.168128][T32450] ? clear_bhb_loop+0x70/0xc0 [ 988.168156][T32450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.168178][T32450] RIP: 0033:0x7fba3b59fb19 [ 988.168199][T32450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.168218][T32450] RSP: 002b:00007fba3c4ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 988.168243][T32450] RAX: ffffffffffffffda RBX: 00007fba3b826090 RCX: 00007fba3b59fb19 [ 988.168258][T32450] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 988.168272][T32450] RBP: 00007fba3c4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 988.168285][T32450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.168297][T32450] R13: 00007fba3b826128 R14: 00007fba3b826090 R15: 00007ffcbac62898 [ 988.168332][T32450] [ 988.497028][T32454] ipvlan3: entered promiscuous mode [ 988.508597][T32454] bridge0: port 4(ipvlan3) entered blocking state [ 988.508936][T32454] bridge0: port 4(ipvlan3) entered disabled state [ 988.509965][T32454] ipvlan3: entered allmulticast mode [ 988.509986][T32454] bridge0: entered allmulticast mode [ 988.522930][T32454] ipvlan3: left allmulticast mode [ 988.522955][T32454] bridge0: left allmulticast mode [ 988.635474][T32459] sctp: [Deprecated]: syz.1.7908 (pid 32459) Use of int in max_burst socket option. [ 988.635474][T32459] Use struct sctp_assoc_value instead [ 989.082616][T32477] netlink: 'syz.4.7917': attribute type 3 has an invalid length. [ 989.082640][T32477] netlink: 'syz.4.7917': attribute type 3 has an invalid length. [ 989.133141][T32481] netlink: 'syz.4.7917': attribute type 3 has an invalid length. [ 989.133168][T32481] netlink: 'syz.4.7917': attribute type 3 has an invalid length. [ 989.274629][T32491] x_tables: unsorted underflow at hook 2 [ 989.280740][T32491] netlink: 'syz.4.7921': attribute type 10 has an invalid length. [ 989.280762][T32491] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7921'. [ 989.323740][T32496] netlink: 'syz.0.7922': attribute type 30 has an invalid length. [ 989.467065][T32496] bond2: option arp_missed_max: invalid value (0) [ 989.467093][T32496] bond2: option arp_missed_max: allowed values 1 - 255 [ 989.496721][T32496] bond2 (unregistering): Released all slaves [ 989.641908][T32500] macvtap1: entered allmulticast mode [ 989.644088][T32500] bond0: entered allmulticast mode [ 989.644111][T32500] veth0_to_bond: entered allmulticast mode [ 989.644201][T32500] veth0_to_bond: entered promiscuous mode [ 989.647395][T32500] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 989.647597][T32500] team0: Device macvtap1 failed to register rx_handler [ 989.690769][T32500] bond0: left allmulticast mode [ 989.690795][T32500] veth0_to_bond: left allmulticast mode [ 989.788835][ T5757] veth0_to_bond: left promiscuous mode [ 990.051939][T32517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7931'. [ 990.057672][T32521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7933'. [ 990.109384][T32517] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7931'. [ 990.571764][T32537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7940'. [ 990.853796][T32548] netlink: 'syz.1.7945': attribute type 3 has an invalid length. [ 990.982424][T32557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7947'. [ 991.011441][T32557] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7947'. [ 991.116898][T32564] x_tables: duplicate underflow at hook 1 [ 991.135322][T32564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7949'. [ 991.175925][T32564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7949'. [ 991.175966][T32564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7949'. [ 991.911521][T32594] netlink: 'syz.4.7954': attribute type 4 has an invalid length. [ 991.947901][T32598] Bluetooth: hci0: unsupported parameter 5135 [ 991.947929][T32598] Bluetooth: hci0: unsupported parameter 8192 [ 991.947943][T32598] Bluetooth: hci0: unsupported parameter 5135 [ 991.947957][T32598] Bluetooth: hci0: unsupported parameter 8192 [ 992.408572][T16343] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 994.722671][T32587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.754401][T32655] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7977'. [ 995.758219][T32655] veth1_macvtap: left promiscuous mode [ 995.808694][T32661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7977'. [ 996.603999][T32679] sctp: [Deprecated]: syz.1.7984 (pid 32679) Use of int in max_burst socket option. [ 996.603999][T32679] Use struct sctp_assoc_value instead [ 996.695169][T32681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7984'. [ 997.238573][T32689] bond2: option ad_select: invalid value (34) [ 997.244865][T32689] bond2 (unregistering): Released all slaves [ 997.425633][T32698] veth0_to_bridge: entered promiscuous mode [ 997.425922][T32698] macsec1: entered allmulticast mode [ 997.425950][T32698] veth0_to_bridge: entered allmulticast mode [ 997.447881][T32698] veth0_to_bridge: left allmulticast mode [ 997.447916][T32698] veth0_to_bridge: left promiscuous mode [ 997.549045][T32702] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.7990'. [ 997.549179][T32702] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.7990'. [ 997.553069][T32702] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.7990'. [ 997.553193][T32702] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.7990'. [ 997.553718][T32702] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.7990'. [ 997.553827][T32702] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.7990'. [ 997.571950][T32702] netlink: 4564 bytes leftover after parsing attributes in process `syz.2.7990'. [ 997.820407][T32705] bond2: option updelay: invalid value (18446744073709518847) [ 997.820436][T32705] bond2: option updelay: allowed values 0 - 2147483647 [ 997.857304][T32705] bond2 (unregistering): Released all slaves [ 998.045278][T32716] nbd: couldn't find a device at index 0 [ 998.075125][T32716] bridge0: entered promiscuous mode [ 998.266108][T32726] FAULT_INJECTION: forcing a failure. [ 998.266108][T32726] name failslab, interval 1, probability 0, space 0, times 0 [ 998.266141][T32726] CPU: 0 UID: 0 PID: 32726 Comm: syz.1.8000 Not tainted syzkaller #0 PREEMPT(full) [ 998.266166][T32726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 998.266178][T32726] Call Trace: [ 998.266187][T32726] [ 998.266196][T32726] dump_stack_lvl+0xe8/0x150 [ 998.266235][T32726] should_fail_ex+0x3eb/0x540 [ 998.266266][T32726] should_failslab+0xa8/0x100 [ 998.266298][T32726] kmem_cache_alloc_bulk_noprof+0x86/0x7b0 [ 998.266327][T32726] ? pfn_valid+0x125/0x4c0 [ 998.266362][T32726] ? bpf_prog_78abdf3a6a43376f+0x5b/0x66 [ 998.266397][T32726] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 998.266439][T32726] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 998.266481][T32726] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 998.266511][T32726] ? 0xffffffffa04051c0 [ 998.266581][T32726] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 998.266622][T32726] ? _copy_from_user+0x94/0xb0 [ 998.266650][T32726] ? bpf_test_init+0x113/0x150 [ 998.266676][T32726] ? xdp_convert_md_to_buff+0x5b/0x330 [ 998.266709][T32726] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 998.266755][T32726] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 998.266790][T32726] ? __fget_files+0x2a/0x420 [ 998.266821][T32726] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 998.266853][T32726] bpf_prog_test_run+0x2c5/0x340 [ 998.266879][T32726] __sys_bpf+0xb1e/0xe00 [ 998.266915][T32726] ? __pfx___sys_bpf+0x10/0x10 [ 998.266946][T32726] ? __fget_files+0x2a/0x420 [ 998.266988][T32726] ? ksys_write+0x242/0x270 [ 998.267017][T32726] ? __pfx_ksys_write+0x10/0x10 [ 998.267048][T32726] __x64_sys_bpf+0xba/0xd0 [ 998.267081][T32726] do_syscall_64+0x166/0x520 [ 998.267105][T32726] ? trace_irq_disable+0x3b/0x140 [ 998.267133][T32726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.267155][T32726] ? clear_bhb_loop+0x70/0xc0 [ 998.267180][T32726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.267202][T32726] RIP: 0033:0x7f308eb9fb19 [ 998.267223][T32726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.267242][T32726] RSP: 002b:00007f308fb1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 998.267266][T32726] RAX: ffffffffffffffda RBX: 00007f308ee25fa0 RCX: 00007f308eb9fb19 [ 998.267282][T32726] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 998.267297][T32726] RBP: 00007f308fb1e090 R08: 0000000000000000 R09: 0000000000000000 [ 998.267311][T32726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 998.267324][T32726] R13: 00007f308ee26038 R14: 00007f308ee25fa0 R15: 00007ffc044418b8 [ 998.267359][T32726] [ 998.747602][T32742] netlink: 'syz.1.8002': attribute type 11 has an invalid length. [ 998.780192][T32740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.801530][T32746] FAULT_INJECTION: forcing a failure. [ 998.801530][T32746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.801563][T32746] CPU: 1 UID: 0 PID: 32746 Comm: syz.3.8001 Not tainted syzkaller #0 PREEMPT(full) [ 998.801587][T32746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 998.801603][T32746] Call Trace: [ 998.801611][T32746] [ 998.801621][T32746] dump_stack_lvl+0xe8/0x150 [ 998.801661][T32746] should_fail_ex+0x3eb/0x540 [ 998.801690][T32746] _copy_from_user+0x2d/0xb0 [ 998.801713][T32746] ___sys_sendmsg+0x1c6/0x360 [ 998.801733][T32746] ? __lock_acquire+0x747/0x2de0 [ 998.801762][T32746] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.801819][T32746] ? __fget_files+0x3a2/0x420 [ 998.801844][T32746] ? __fget_files+0x2a/0x420 [ 998.801887][T32746] __x64_sys_sendmsg+0x1b1/0x290 [ 998.801913][T32746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.801960][T32746] do_syscall_64+0x166/0x520 [ 998.801985][T32746] ? trace_irq_disable+0x3b/0x140 [ 998.802014][T32746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.802036][T32746] ? clear_bhb_loop+0x70/0xc0 [ 998.802063][T32746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.802084][T32746] RIP: 0033:0x7fba3b59fb19 [ 998.802104][T32746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.802123][T32746] RSP: 002b:00007fba3c4ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.802148][T32746] RAX: ffffffffffffffda RBX: 00007fba3b826090 RCX: 00007fba3b59fb19 [ 998.802164][T32746] RDX: 0000000000008800 RSI: 0000200000000300 RDI: 0000000000000004 [ 998.802178][T32746] RBP: 00007fba3c4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 998.802192][T32746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.802205][T32746] R13: 00007fba3b826128 R14: 00007fba3b826090 R15: 00007ffcbac62898 [ 998.802241][T32746] [ 999.479569][T32763] FAULT_INJECTION: forcing a failure. [ 999.479569][T32763] name failslab, interval 1, probability 0, space 0, times 0 [ 999.479602][T32763] CPU: 0 UID: 0 PID: 32763 Comm: syz.2.8008 Not tainted syzkaller #0 PREEMPT(full) [ 999.479625][T32763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 999.479637][T32763] Call Trace: [ 999.479646][T32763] [ 999.479657][T32763] dump_stack_lvl+0xe8/0x150 [ 999.479697][T32763] should_fail_ex+0x3eb/0x540 [ 999.479730][T32763] should_failslab+0xa8/0x100 [ 999.479763][T32763] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 999.479790][T32763] ? __d_alloc+0x37/0x820 [ 999.479814][T32763] ? __d_alloc+0x37/0x820 [ 999.479848][T32763] __d_alloc+0x37/0x820 [ 999.479881][T32763] d_alloc+0x4b/0x190 [ 999.479904][T32763] ? lookup_one_qstr_excl+0xc4/0x360 [ 999.479933][T32763] lookup_one_qstr_excl+0xd8/0x360 [ 999.479960][T32763] ? lookup_noperm_common+0x245/0x430 [ 999.479991][T32763] start_dirop+0x5c/0x90 [ 999.480016][T32763] simple_start_creating+0xcc/0x110 [ 999.480111][T32763] ? __pfx_simple_start_creating+0x10/0x10 [ 999.480140][T32763] ? do_raw_spin_unlock+0xf5/0x200 [ 999.480163][T32763] ? mntput+0x65/0xc0 [ 999.480202][T32763] debugfs_start_creating+0xca/0x1b0 [ 999.480312][T32763] __debugfs_create_file+0x6f/0x400 [ 999.480343][T32763] debugfs_create_file_full+0x3f/0x60 [ 999.480373][T32763] ref_tracker_dir_debugfs+0x197/0x360 [ 999.480404][T32763] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 999.480464][T32763] ? __kvmalloc_node_noprof+0x52a/0x820 [ 999.480494][T32763] ? __kvmalloc_node_noprof+0x340/0x820 [ 999.480545][T32763] ? __raw_spin_lock_init+0x45/0x100 [ 999.480570][T32763] alloc_netdev_mqs+0x275/0x1240 [ 999.480596][T32763] ? __pfx_snprintf+0x10/0x10 [ 999.480628][T32763] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 999.480723][T32763] rtnl_create_link+0x321/0xd70 [ 999.480761][T32763] rtnl_newlink_create+0x258/0x7b0 [ 999.480793][T32763] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 999.480822][T32763] ? __pfx___mutex_lock+0x10/0x10 [ 999.480860][T32763] ? ns_capable+0x84/0xe0 [ 999.480894][T32763] rtnl_newlink+0x167a/0x1c30 [ 999.480937][T32763] ? __pfx_rtnl_newlink+0x10/0x10 [ 999.480957][T32763] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 999.480985][T32763] ? netlink_deliver_tap+0x19c/0x1b0 [ 999.481012][T32763] ? netlink_unicast+0x8c1/0xa80 [ 999.481035][T32763] ? netlink_sendmsg+0x7f0/0xb20 [ 999.481062][T32763] ? sock_sendmsg_nosec+0x14e/0x190 [ 999.481087][T32763] ? ____sys_sendmsg+0x54e/0x850 [ 999.481105][T32763] ? ___sys_sendmsg+0x2a5/0x360 [ 999.481123][T32763] ? __x64_sys_sendmsg+0x1b1/0x290 [ 999.481143][T32763] ? do_syscall_64+0x166/0x520 [ 999.481165][T32763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.481231][T32763] ? kasan_quarantine_put+0xbb/0x1f0 [ 999.481257][T32763] ? lockdep_hardirqs_on+0x7b/0x110 [ 999.481287][T32763] ? nlmon_xmit+0xb0/0x100 [ 999.481320][T32763] ? kmem_cache_free+0x182/0x650 [ 999.481358][T32763] ? __lock_acquire+0x747/0x2de0 [ 999.481392][T32763] ? __pfx_hook_capable+0x10/0x10 [ 999.481413][T32763] ? __dev_queue_xmit+0x29b/0x3920 [ 999.481442][T32763] ? __pfx_hook_capable+0x10/0x10 [ 999.481463][T32763] ? lockdep_hardirqs_on+0x7b/0x110 [ 999.481518][T32763] ? __pfx_rtnl_newlink+0x10/0x10 [ 999.481541][T32763] rtnetlink_rcv_msg+0x802/0xc00 [ 999.481569][T32763] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 999.481591][T32763] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 999.481618][T32763] ? __copy_skb_header+0xa3/0x4a0 [ 999.481645][T32763] ? __asan_memcpy+0x40/0x70 [ 999.481681][T32763] netlink_rcv_skb+0x226/0x4a0 [ 999.481713][T32763] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 999.481738][T32763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 999.481786][T32763] ? netlink_deliver_tap+0x2e/0x1b0 [ 999.481814][T32763] ? netlink_deliver_tap+0x2e/0x1b0 [ 999.481852][T32763] netlink_unicast+0x8ef/0xa80 [ 999.481904][T32763] netlink_sendmsg+0x7f0/0xb20 [ 999.481945][T32763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.481981][T32763] ? aa_sock_msg_perm+0x144/0x210 [ 999.482011][T32763] ? apparmor_socket_sendmsg+0x98/0x360 [ 999.482046][T32763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.482076][T32763] sock_sendmsg_nosec+0x14e/0x190 [ 999.482109][T32763] ____sys_sendmsg+0x54e/0x850 [ 999.482141][T32763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.482178][T32763] ? import_iovec+0x73/0xa0 [ 999.482212][T32763] ___sys_sendmsg+0x2a5/0x360 [ 999.482234][T32763] ? __lock_acquire+0x747/0x2de0 [ 999.482268][T32763] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.482349][T32763] ? __fget_files+0x3a2/0x420 [ 999.482375][T32763] ? __fget_files+0x2a/0x420 [ 999.482415][T32763] __x64_sys_sendmsg+0x1b1/0x290 [ 999.482443][T32763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 999.482496][T32763] do_syscall_64+0x166/0x520 [ 999.482521][T32763] ? trace_irq_disable+0x3b/0x140 [ 999.482550][T32763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.482572][T32763] ? clear_bhb_loop+0x70/0xc0 [ 999.482601][T32763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.482623][T32763] RIP: 0033:0x7f1c9359fb19 [ 999.482646][T32763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.482666][T32763] RSP: 002b:00007f1c943b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.482691][T32763] RAX: ffffffffffffffda RBX: 00007f1c93825fa0 RCX: 00007f1c9359fb19 [ 999.482708][T32763] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 999.482723][T32763] RBP: 00007f1c943b1090 R08: 0000000000000000 R09: 0000000000000000 [ 999.482737][T32763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.482750][T32763] R13: 00007f1c93826038 R14: 00007f1c93825fa0 R15: 00007ffcd2b100c8 [ 999.482789][T32763] [ 999.673500][T32763] ipvlan2: entered promiscuous mode [ 999.692876][T32763] bridge0: port 3(ipvlan2) entered blocking state [ 999.693058][T32763] bridge0: port 3(ipvlan2) entered disabled state [ 999.693733][T32763] ipvlan2: entered allmulticast mode [ 999.693750][T32763] bridge0: entered allmulticast mode [ 999.707437][T32763] ipvlan2: left allmulticast mode [ 999.707458][T32763] bridge0: left allmulticast mode [ 1000.122367][ T305] xt_hashlimit: size too large, truncated to 1048576 [ 1000.122403][ T305] xt_hashlimit: max too large, truncated to 1048576 [ 1000.122416][ T305] xt_hashlimit: Unknown mode mask 310A303D, kernel too old? [ 1000.427040][ T321] netlink: 'syz.1.8016': attribute type 9 has an invalid length. [ 1000.463046][ T324] netlink: 'syz.1.8016': attribute type 9 has an invalid length. [ 1001.861494][ T376] smc: smcd device lo applied user defined pnetid SYZ0 [ 1001.931949][ T386] ipvlan3: entered promiscuous mode [ 1001.933906][ T386] bridge0: port 4(ipvlan3) entered blocking state [ 1001.934115][ T386] bridge0: port 4(ipvlan3) entered disabled state [ 1001.934268][ T386] ipvlan3: entered allmulticast mode [ 1001.934285][ T386] bridge0: entered allmulticast mode [ 1001.936822][ T386] ipvlan3: left allmulticast mode [ 1001.936836][ T386] bridge0: left allmulticast mode [ 1002.525419][ T402] __nla_validate_parse: 61 callbacks suppressed [ 1002.525444][ T402] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8043'. [ 1003.312656][ T433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8056'. [ 1003.386453][ T438] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8055'. [ 1003.409139][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.616950][ T446] sctp: [Deprecated]: syz.0.8058 (pid 446) Use of int in max_burst socket option. [ 1003.616950][ T446] Use struct sctp_assoc_value instead [ 1003.732654][ T448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8058'. [ 1004.856902][ T471] xt_cgroup: path and classid specified [ 1004.861076][ T471] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 1005.025151][ T476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8070'. [ 1005.118626][ T482] ipvlan2: entered promiscuous mode [ 1005.120638][ T482] bridge0: port 5(ipvlan2) entered blocking state [ 1005.120855][ T482] bridge0: port 5(ipvlan2) entered disabled state [ 1005.121011][ T482] ipvlan2: entered allmulticast mode [ 1005.121028][ T482] bridge0: entered allmulticast mode [ 1005.124121][ T482] ipvlan2: left allmulticast mode [ 1005.124140][ T482] bridge0: left allmulticast mode [ 1005.452715][ T489] FAULT_INJECTION: forcing a failure. [ 1005.452715][ T489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.452749][ T489] CPU: 0 UID: 0 PID: 489 Comm: syz.4.8074 Not tainted syzkaller #0 PREEMPT(full) [ 1005.452772][ T489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1005.452785][ T489] Call Trace: [ 1005.452795][ T489] [ 1005.452805][ T489] dump_stack_lvl+0xe8/0x150 [ 1005.452843][ T489] should_fail_ex+0x3eb/0x540 [ 1005.452875][ T489] _copy_to_user+0x31/0xb0 [ 1005.452905][ T489] bpf_verifier_vlog+0x3a2/0x900 [ 1005.452943][ T489] bpf_verifier_log_write+0x11d/0x1a0 [ 1005.452967][ T489] ? analyze_subprog+0xc1a/0xac60 [ 1005.452991][ T489] ? trace_kmalloc+0x2a/0xf0 [ 1005.453017][ T489] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1005.453039][ T489] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1005.453068][ T489] ? __kvmalloc_node_noprof+0x340/0x820 [ 1005.453093][ T489] ? analyze_subprog+0xc1a/0xac60 [ 1005.453118][ T489] ? analyze_subprog+0xc1a/0xac60 [ 1005.453144][ T489] ? analyze_subprog+0x14fc/0xac60 [ 1005.453175][ T489] analyze_subprog+0x1565/0xac60 [ 1005.453211][ T489] ? is_bpf_text_address+0x26/0x2b0 [ 1005.453237][ T489] ? kernel_text_address+0xa5/0xe0 [ 1005.453266][ T489] ? __kernel_text_address+0xd/0x30 [ 1005.453292][ T489] ? unwind_get_return_address+0x4d/0x90 [ 1005.453382][ T489] ? __pfx_stack_trace_save+0x10/0x10 [ 1005.453426][ T489] ? __pfx_analyze_subprog+0x10/0x10 [ 1005.453453][ T489] ? kasan_save_track+0x4f/0x80 [ 1005.453478][ T489] ? kasan_save_track+0x3e/0x80 [ 1005.453503][ T489] ? __kasan_kmalloc+0x93/0xb0 [ 1005.453530][ T489] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1005.453556][ T489] ? call_instance+0x263/0x560 [ 1005.453580][ T489] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 1005.453606][ T489] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 1005.453633][ T489] ? bpf_check+0x2d0b/0x34e0 [ 1005.453654][ T489] ? bpf_prog_load+0x14da/0x1c60 [ 1005.453674][ T489] ? __sys_bpf+0xd86/0xe00 [ 1005.453692][ T489] ? __x64_sys_bpf+0xba/0xd0 [ 1005.453719][ T489] ? do_syscall_64+0x166/0x520 [ 1005.453744][ T489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.453810][ T489] ? call_instance+0x263/0x560 [ 1005.453835][ T489] ? rcu_is_watching+0x16/0xb0 [ 1005.453867][ T489] ? call_instance+0x263/0x560 [ 1005.453891][ T489] ? trace_kmalloc+0x2a/0xf0 [ 1005.453918][ T489] ? call_instance+0x263/0x560 [ 1005.453943][ T489] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1005.453973][ T489] ? __kvmalloc_node_noprof+0x340/0x820 [ 1005.453999][ T489] ? call_instance+0x263/0x560 [ 1005.454023][ T489] ? call_instance+0x263/0x560 [ 1005.454057][ T489] ? call_instance+0x42e/0x560 [ 1005.454093][ T489] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 1005.454147][ T489] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1005.454183][ T489] ? __kvmalloc_node_noprof+0x340/0x820 [ 1005.454209][ T489] ? bpf_compute_live_registers+0x142/0x1df0 [ 1005.454236][ T489] ? bpf_compute_live_registers+0x142/0x1df0 [ 1005.454271][ T489] bpf_compute_live_registers+0x10b0/0x1df0 [ 1005.454322][ T489] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1005.454371][ T489] bpf_check+0x2d0b/0x34e0 [ 1005.454405][ T489] ? ktime_get_with_offset+0x93/0x2d0 [ 1005.454435][ T489] ? ktime_get_with_offset+0x93/0x2d0 [ 1005.454463][ T489] ? __pfx_bpf_check+0x10/0x10 [ 1005.454488][ T489] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1005.454518][ T489] bpf_prog_load+0x14da/0x1c60 [ 1005.454553][ T489] ? __pfx_bpf_prog_load+0x10/0x10 [ 1005.454590][ T489] ? __might_fault+0xaf/0x130 [ 1005.454620][ T489] __sys_bpf+0xd86/0xe00 [ 1005.454650][ T489] ? __pfx___sys_bpf+0x10/0x10 [ 1005.454683][ T489] ? __fget_files+0x2a/0x420 [ 1005.454727][ T489] ? ksys_write+0x242/0x270 [ 1005.454757][ T489] ? __pfx_ksys_write+0x10/0x10 [ 1005.454790][ T489] __x64_sys_bpf+0xba/0xd0 [ 1005.454823][ T489] do_syscall_64+0x166/0x520 [ 1005.454845][ T489] ? trace_irq_disable+0x3b/0x140 [ 1005.454873][ T489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.454894][ T489] ? clear_bhb_loop+0x70/0xc0 [ 1005.454920][ T489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.454942][ T489] RIP: 0033:0x7f911179fb19 [ 1005.454962][ T489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.454981][ T489] RSP: 002b:00007f91126b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1005.455005][ T489] RAX: ffffffffffffffda RBX: 00007f9111a25fa0 RCX: 00007f911179fb19 [ 1005.455021][ T489] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 1005.455035][ T489] RBP: 00007f91126b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.455049][ T489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1005.455062][ T489] R13: 00007f9111a26038 R14: 00007f9111a25fa0 R15: 00007fffd772e618 [ 1005.455097][ T489] [ 1005.876950][ T495] FAULT_INJECTION: forcing a failure. [ 1005.876950][ T495] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.876979][ T495] CPU: 1 UID: 0 PID: 495 Comm: syz.4.8076 Not tainted syzkaller #0 PREEMPT(full) [ 1005.877000][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1005.877012][ T495] Call Trace: [ 1005.877020][ T495] [ 1005.877028][ T495] dump_stack_lvl+0xe8/0x150 [ 1005.877064][ T495] should_fail_ex+0x3eb/0x540 [ 1005.877092][ T495] should_failslab+0xa8/0x100 [ 1005.877120][ T495] __kvmalloc_node_noprof+0x171/0x820 [ 1005.877148][ T495] ? bpf_compute_idoms+0x307/0x1940 [ 1005.877167][ T495] ? bpf_compute_idoms+0x307/0x1940 [ 1005.877193][ T495] bpf_compute_idoms+0x307/0x1940 [ 1005.877220][ T495] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 1005.877243][ T495] ? prepare_subprog_args+0x40f/0x450 [ 1005.877271][ T495] bpf_check+0x2cc3/0x34e0 [ 1005.877303][ T495] ? ktime_get_with_offset+0x93/0x2d0 [ 1005.877328][ T495] ? ktime_get_with_offset+0x93/0x2d0 [ 1005.877353][ T495] ? __pfx_bpf_check+0x10/0x10 [ 1005.877376][ T495] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1005.877402][ T495] bpf_prog_load+0x14da/0x1c60 [ 1005.877433][ T495] ? __pfx_bpf_prog_load+0x10/0x10 [ 1005.877467][ T495] ? __might_fault+0xaf/0x130 [ 1005.877493][ T495] __sys_bpf+0xd86/0xe00 [ 1005.877524][ T495] ? __pfx___sys_bpf+0x10/0x10 [ 1005.877553][ T495] ? __fget_files+0x2a/0x420 [ 1005.877593][ T495] ? ksys_write+0x242/0x270 [ 1005.877619][ T495] ? __pfx_ksys_write+0x10/0x10 [ 1005.877649][ T495] __x64_sys_bpf+0xba/0xd0 [ 1005.877678][ T495] do_syscall_64+0x166/0x520 [ 1005.877700][ T495] ? trace_irq_disable+0x3b/0x140 [ 1005.877724][ T495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.877743][ T495] ? clear_bhb_loop+0x70/0xc0 [ 1005.877766][ T495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.877785][ T495] RIP: 0033:0x7f911179fb19 [ 1005.877803][ T495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.877820][ T495] RSP: 002b:00007f91126b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1005.877850][ T495] RAX: ffffffffffffffda RBX: 00007f9111a25fa0 RCX: 00007f911179fb19 [ 1005.877865][ T495] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1005.877878][ T495] RBP: 00007f91126b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.877890][ T495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1005.877901][ T495] R13: 00007f9111a26038 R14: 00007f9111a25fa0 R15: 00007fffd772e618 [ 1005.877936][ T495] [ 1006.215646][ T504] xt_cgroup: path and classid specified [ 1006.222372][ T504] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 1006.515604][ T515] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1006.516254][ T510] netlink: 964 bytes leftover after parsing attributes in process `syz.0.8082'. [ 1006.516286][ T510] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1006.605556][ T515] 8021q: adding VLAN 0 to HW filter on device ÿÿÿÿÿÿ [ 1006.607447][ T515] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.628198][ T515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.698190][ T516] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1006.748806][ T515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.751512][ T515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.757850][ T515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1006.757876][ T515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1006.799388][ T515] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1006.817205][T13547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.817350][T13547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.831178][T13547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.831286][T13547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.150080][ T528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8088'. [ 1007.151632][ T528] netlink: 'syz.1.8088': attribute type 32 has an invalid length. [ 1007.151654][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8088'. [ 1007.203505][ T528] bond2: option coupled_control: invalid value (10) [ 1007.222305][ T528] bond2 (unregistering): Released all slaves [ 1007.654093][ T554] xt_cgroup: path and classid specified [ 1007.655966][ T554] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 1009.069801][ T583] syzkaller1: entered promiscuous mode [ 1009.069827][ T583] syzkaller1: entered allmulticast mode [ 1009.174048][ T588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1009.690508][ T603] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1009.691595][ T603] IPv6: addrconf: prefix option has invalid lifetime [ 1009.696454][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 1009.943200][ T607] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8115'. [ 1010.545819][ T601] netlink: 'syz.1.8113': attribute type 4 has an invalid length. [ 1011.044634][ T637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8125'. [ 1011.414416][ T646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8128'. [ 1011.693217][ T658] Bluetooth: hci0: unsupported parameter 5135 [ 1011.693246][ T658] Bluetooth: hci0: unsupported parameter 8192 [ 1011.693260][ T658] Bluetooth: hci0: unsupported parameter 5135 [ 1011.693274][ T658] Bluetooth: hci0: unsupported parameter 8192 [ 1011.694508][ T658] xt_hashlimit: max too large, truncated to 1048576 [ 1011.694757][ T658] Cannot find del_set index 4 as target [ 1012.564883][ T664] syzkaller1: entered promiscuous mode [ 1012.564911][ T664] syzkaller1: entered allmulticast mode [ 1013.081098][ T685] netlink: 'syz.1.8141': attribute type 5 has an invalid length. [ 1013.081122][ T685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8141'. [ 1013.081139][ T685] nbd: must specify an index to disconnect [ 1013.303716][ T696] veth0_to_bridge: entered promiscuous mode [ 1013.305066][ T696] macvtap1: entered allmulticast mode [ 1013.305084][ T696] veth0_to_bridge: entered allmulticast mode [ 1013.629177][ T706] FAULT_INJECTION: forcing a failure. [ 1013.629177][ T706] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.629209][ T706] CPU: 1 UID: 0 PID: 706 Comm: syz.4.8148 Not tainted syzkaller #0 PREEMPT(full) [ 1013.629232][ T706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1013.629245][ T706] Call Trace: [ 1013.629254][ T706] [ 1013.629264][ T706] dump_stack_lvl+0xe8/0x150 [ 1013.629304][ T706] should_fail_ex+0x3eb/0x540 [ 1013.629335][ T706] should_failslab+0xa8/0x100 [ 1013.629365][ T706] ? skb_clone+0x212/0x3a0 [ 1013.629389][ T706] kmem_cache_alloc_noprof+0x9c/0x600 [ 1013.629415][ T706] ? skb_clone+0x212/0x3a0 [ 1013.629445][ T706] skb_clone+0x212/0x3a0 [ 1013.629472][ T706] __netlink_deliver_tap+0x355/0x6e0 [ 1013.629513][ T706] ? netlink_deliver_tap+0x2e/0x1b0 [ 1013.629544][ T706] netlink_deliver_tap+0x19c/0x1b0 [ 1013.629574][ T706] netlink_unicast+0x8c1/0xa80 [ 1013.629621][ T706] netlink_sendmsg+0x7f0/0xb20 [ 1013.629659][ T706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1013.629692][ T706] ? aa_sock_msg_perm+0x144/0x210 [ 1013.629719][ T706] ? apparmor_socket_sendmsg+0x98/0x360 [ 1013.629755][ T706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1013.629783][ T706] sock_sendmsg_nosec+0x14e/0x190 [ 1013.629813][ T706] ____sys_sendmsg+0x54e/0x850 [ 1013.629842][ T706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1013.629874][ T706] ? import_iovec+0x73/0xa0 [ 1013.629905][ T706] ___sys_sendmsg+0x2a5/0x360 [ 1013.629924][ T706] ? __lock_acquire+0x747/0x2de0 [ 1013.629957][ T706] ? __pfx____sys_sendmsg+0x10/0x10 [ 1013.630029][ T706] ? __fget_files+0x3a2/0x420 [ 1013.630053][ T706] ? __fget_files+0x2a/0x420 [ 1013.630088][ T706] __x64_sys_sendmsg+0x1b1/0x290 [ 1013.630113][ T706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1013.630160][ T706] do_syscall_64+0x166/0x520 [ 1013.630185][ T706] ? trace_irq_disable+0x3b/0x140 [ 1013.630213][ T706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.630234][ T706] ? clear_bhb_loop+0x70/0xc0 [ 1013.630259][ T706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.630280][ T706] RIP: 0033:0x7f911179fb19 [ 1013.630299][ T706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.630318][ T706] RSP: 002b:00007f91126b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1013.630341][ T706] RAX: ffffffffffffffda RBX: 00007f9111a25fa0 RCX: 00007f911179fb19 [ 1013.630356][ T706] RDX: 0000000000008800 RSI: 0000200000000300 RDI: 0000000000000004 [ 1013.630370][ T706] RBP: 00007f91126b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.630384][ T706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.630396][ T706] R13: 00007f9111a26038 R14: 00007f9111a25fa0 R15: 00007fffd772e618 [ 1013.630431][ T706] [ 1014.080598][ T714] ipvlan2: entered promiscuous mode [ 1014.097959][ T714] bridge0: port 5(ipvlan2) entered blocking state [ 1014.098858][ T714] bridge0: port 5(ipvlan2) entered disabled state [ 1014.099017][ T714] ipvlan2: entered allmulticast mode [ 1014.099034][ T714] bridge0: entered allmulticast mode [ 1014.117838][ T714] ipvlan2: left allmulticast mode [ 1014.117861][ T714] bridge0: left allmulticast mode [ 1014.208067][ T712] syzkaller1: entered promiscuous mode [ 1014.208094][ T712] syzkaller1: entered allmulticast mode [ 1014.785461][ T739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8160'. [ 1014.793932][ T742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8160'. [ 1014.944306][ T755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8164'. [ 1014.944337][ T755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8164'. [ 1014.944356][ T755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8164'. [ 1015.014168][ T756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8163'. [ 1015.209132][T16343] Bluetooth: hci1: command 0x0406 tx timeout [ 1015.851405][ T789] syzkaller1: entered promiscuous mode [ 1015.851432][ T789] syzkaller1: entered allmulticast mode [ 1016.148299][ T799] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 1016.347469][ T804] IPv6: addrconf: prefix option has invalid lifetime [ 1016.403918][ T807] FAULT_INJECTION: forcing a failure. [ 1016.403918][ T807] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.403949][ T807] CPU: 1 UID: 0 PID: 807 Comm: syz.3.8179 Not tainted syzkaller #0 PREEMPT(full) [ 1016.403972][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1016.403985][ T807] Call Trace: [ 1016.403994][ T807] [ 1016.404003][ T807] dump_stack_lvl+0xe8/0x150 [ 1016.404042][ T807] should_fail_ex+0x3eb/0x540 [ 1016.404072][ T807] should_failslab+0xa8/0x100 [ 1016.404105][ T807] __kvmalloc_node_noprof+0x171/0x820 [ 1016.404135][ T807] ? bpf_compute_idoms+0x307/0x1940 [ 1016.404156][ T807] ? bpf_compute_idoms+0x307/0x1940 [ 1016.404184][ T807] bpf_compute_idoms+0x307/0x1940 [ 1016.404215][ T807] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 1016.404240][ T807] ? prepare_subprog_args+0x40f/0x450 [ 1016.404272][ T807] bpf_check+0x2cc3/0x34e0 [ 1016.404315][ T807] ? ktime_get_with_offset+0x93/0x2d0 [ 1016.404344][ T807] ? ktime_get_with_offset+0x93/0x2d0 [ 1016.404372][ T807] ? __pfx_bpf_check+0x10/0x10 [ 1016.404396][ T807] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1016.404426][ T807] bpf_prog_load+0x14da/0x1c60 [ 1016.404460][ T807] ? __pfx_bpf_prog_load+0x10/0x10 [ 1016.404498][ T807] ? __might_fault+0xaf/0x130 [ 1016.404526][ T807] __sys_bpf+0xd86/0xe00 [ 1016.404555][ T807] ? __pfx___sys_bpf+0x10/0x10 [ 1016.404587][ T807] ? __fget_files+0x2a/0x420 [ 1016.404632][ T807] ? ksys_write+0x242/0x270 [ 1016.404660][ T807] ? __pfx_ksys_write+0x10/0x10 [ 1016.404693][ T807] __x64_sys_bpf+0xba/0xd0 [ 1016.404725][ T807] do_syscall_64+0x166/0x520 [ 1016.404749][ T807] ? trace_irq_disable+0x3b/0x140 [ 1016.404777][ T807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.404797][ T807] ? clear_bhb_loop+0x70/0xc0 [ 1016.404822][ T807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.404842][ T807] RIP: 0033:0x7fba3b59fb19 [ 1016.404861][ T807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.404879][ T807] RSP: 002b:00007fba3c510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1016.404902][ T807] RAX: ffffffffffffffda RBX: 00007fba3b825fa0 RCX: 00007fba3b59fb19 [ 1016.404917][ T807] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1016.404930][ T807] RBP: 00007fba3c510090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.404943][ T807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1016.404955][ T807] R13: 00007fba3b826038 R14: 00007fba3b825fa0 R15: 00007ffcbac62898 [ 1016.404993][ T807] [ 1017.782774][ T747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1018.054990][ T822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8184'. [ 1018.321675][ T833] netlink: 'syz.4.8188': attribute type 16 has an invalid length. [ 1018.321703][ T833] netlink: 'syz.4.8188': attribute type 17 has an invalid length. [ 1018.379159][ T836] Bluetooth: hci0: unsupported parameter 5135 [ 1018.379186][ T836] Bluetooth: hci0: unsupported parameter 8192 [ 1018.379200][ T836] Bluetooth: hci0: unsupported parameter 5135 [ 1018.379213][ T836] Bluetooth: hci0: unsupported parameter 8192 [ 1018.387653][ T836] Cannot find del_set index 4 as target [ 1018.454338][ T833] bridge0: port 3(syz_tun) entered disabled state [ 1018.497756][ T833] bridge0: port 4(ip6gretap0) entered disabled state [ 1018.505987][ T833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.646277][ T840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8191'. [ 1018.876345][ T833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.913413][ T833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.108467][ T855] IPv6: addrconf: prefix option has invalid lifetime [ 1019.140192][ T845] tipc: Enabling of bearer rejected, failed to enable media [ 1019.438921][ T858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8198'. [ 1019.597732][ T867] nbd: couldn't find a device at index 0 [ 1019.719619][ T870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8202'. [ 1019.719660][ T870] netlink: 'syz.1.8202': attribute type 7 has an invalid length. [ 1019.719675][ T870] netlink: 'syz.1.8202': attribute type 8 has an invalid length. [ 1019.758089][ T870] netlink: 'syz.1.8202': attribute type 7 has an invalid length. [ 1019.758116][ T870] netlink: 'syz.1.8202': attribute type 8 has an invalid length. [ 1019.922085][ T874] __nla_validate_parse: 3 callbacks suppressed [ 1019.922108][ T874] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8204'. [ 1020.075002][ T878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8205'. [ 1020.170561][ T881] netlink: 964 bytes leftover after parsing attributes in process `syz.0.8206'. [ 1020.170590][ T881] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1020.191777][ T883] syzkaller1: left promiscuous mode [ 1020.191816][ T883] syzkaller1: left allmulticast mode [ 1020.739596][ T904] nbd: couldn't find a device at index 0 [ 1020.799475][ T908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8215'. [ 1020.799515][ T908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8215'. [ 1020.847999][ T908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8215'. [ 1020.848046][ T908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8215'. [ 1021.012057][ T919] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8217'. [ 1021.282499][ T934] Bluetooth: hci0: unsupported parameter 5135 [ 1021.282597][ T934] Bluetooth: hci0: unsupported parameter 8192 [ 1021.282613][ T934] Bluetooth: hci0: unsupported parameter 5135 [ 1021.282627][ T934] Bluetooth: hci0: unsupported parameter 8192 [ 1021.287216][ T934] Cannot find del_set index 4 as target [ 1022.155084][ T971] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8231'. [ 1022.294405][ T977] netlink: 'syz.1.8232': attribute type 10 has an invalid length. [ 1022.297743][ T977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.318468][ T977] team0: Port device netdevsim1 added [ 1022.326126][ T977] netlink: 'syz.1.8232': attribute type 10 has an invalid length. [ 1022.356398][ T977] team0: Port device netdevsim1 removed [ 1022.371842][ T977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1022.377706][ T977] ÿÿÿÿÿÿ: (slave netdevsim1): Enslaving as an active interface with an up link [ 1022.749094][ T989] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1022.899527][ T992] netlink: 'syz.4.8236': attribute type 10 has an invalid length. [ 1023.020368][ T994] SET target dimension over the limit! [ 1023.066312][ T994] netlink: 35 bytes leftover after parsing attributes in process `syz.1.8237'. [ 1023.326741][ T997] lo speed is unknown, defaulting to 1000 [ 1023.587521][ T1010] FAULT_INJECTION: forcing a failure. [ 1023.587521][ T1010] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.587555][ T1010] CPU: 1 UID: 0 PID: 1010 Comm: syz.2.8243 Not tainted syzkaller #0 PREEMPT(full) [ 1023.587579][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1023.587592][ T1010] Call Trace: [ 1023.587601][ T1010] [ 1023.587612][ T1010] dump_stack_lvl+0xe8/0x150 [ 1023.587652][ T1010] should_fail_ex+0x3eb/0x540 [ 1023.587685][ T1010] should_failslab+0xa8/0x100 [ 1023.587719][ T1010] kmem_cache_alloc_bulk_noprof+0x86/0x7b0 [ 1023.587749][ T1010] ? pfn_valid+0x125/0x4c0 [ 1023.587787][ T1010] ? bpf_prog_78abdf3a6a43376f+0x5b/0x66 [ 1023.587811][ T1010] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 1023.587856][ T1010] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1023.587911][ T1010] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1023.587941][ T1010] ? 0xffffffffa04051c0 [ 1023.588013][ T1010] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1023.588051][ T1010] ? _copy_from_user+0x94/0xb0 [ 1023.588076][ T1010] ? bpf_test_init+0x113/0x150 [ 1023.588102][ T1010] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1023.588133][ T1010] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1023.588175][ T1010] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1023.588210][ T1010] ? __fget_files+0x2a/0x420 [ 1023.588241][ T1010] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1023.588270][ T1010] bpf_prog_test_run+0x2c5/0x340 [ 1023.588297][ T1010] __sys_bpf+0xb1e/0xe00 [ 1023.588325][ T1010] ? __pfx___sys_bpf+0x10/0x10 [ 1023.588358][ T1010] ? __fget_files+0x2a/0x420 [ 1023.588401][ T1010] ? ksys_write+0x242/0x270 [ 1023.588431][ T1010] ? __pfx_ksys_write+0x10/0x10 [ 1023.588464][ T1010] __x64_sys_bpf+0xba/0xd0 [ 1023.588495][ T1010] do_syscall_64+0x166/0x520 [ 1023.588518][ T1010] ? trace_irq_disable+0x3b/0x140 [ 1023.588543][ T1010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.588564][ T1010] ? clear_bhb_loop+0x70/0xc0 [ 1023.588589][ T1010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.588609][ T1010] RIP: 0033:0x7f1c9359fb19 [ 1023.588630][ T1010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.588648][ T1010] RSP: 002b:00007f1c943b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1023.588672][ T1010] RAX: ffffffffffffffda RBX: 00007f1c93825fa0 RCX: 00007f1c9359fb19 [ 1023.588687][ T1010] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 1023.588701][ T1010] RBP: 00007f1c943b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.588715][ T1010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1023.588726][ T1010] R13: 00007f1c93826038 R14: 00007f1c93825fa0 R15: 00007ffcd2b100c8 [ 1023.588760][ T1010] [ 1023.909664][ T997] rxe_eth0 speed is unknown, defaulting to 1000 [ 1023.981948][ T1019] FAULT_INJECTION: forcing a failure. [ 1023.981948][ T1019] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.981985][ T1019] CPU: 1 UID: 0 PID: 1019 Comm: syz.0.8247 Not tainted syzkaller #0 PREEMPT(full) [ 1023.982008][ T1019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1023.982022][ T1019] Call Trace: [ 1023.982031][ T1019] [ 1023.982041][ T1019] dump_stack_lvl+0xe8/0x150 [ 1023.982082][ T1019] should_fail_ex+0x3eb/0x540 [ 1023.982115][ T1019] should_failslab+0xa8/0x100 [ 1023.982149][ T1019] __kmalloc_cache_noprof+0x9e/0x600 [ 1023.982175][ T1019] ? __kmalloc_cache_noprof+0x148/0x600 [ 1023.982199][ T1019] ? sctp_add_bind_addr+0x8c/0x370 [ 1023.982222][ T1019] ? sctp_add_bind_addr+0x8c/0x370 [ 1023.982255][ T1019] sctp_add_bind_addr+0x8c/0x370 [ 1023.982285][ T1019] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1023.982314][ T1019] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1023.982340][ T1019] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1023.982368][ T1019] ? sctp_v6_is_any+0x64/0x80 [ 1023.982397][ T1019] ? sctp_copy_one_addr+0x93/0x360 [ 1023.982427][ T1019] sctp_bind_addr_copy+0xb3/0x3c0 [ 1023.982454][ T1019] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1023.982496][ T1019] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1023.982531][ T1019] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1023.982570][ T1019] ? __local_bh_enable_ip+0xd6/0x140 [ 1023.982598][ T1019] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1023.982626][ T1019] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1023.982659][ T1019] sctp_sendmsg+0x159b/0x2d00 [ 1023.982701][ T1019] ? kstrtouint+0x6e/0xe0 [ 1023.982734][ T1019] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1023.982762][ T1019] ? lock_acquire+0x115/0x350 [ 1023.982813][ T1019] ? aa_sock_msg_perm+0xf5/0x210 [ 1023.982841][ T1019] ? sock_rps_record_flow+0x19/0x350 [ 1023.982868][ T1019] ? inet_sendmsg+0x298/0x320 [ 1023.982893][ T1019] ? __pfx_inet_sendmsg+0x10/0x10 [ 1023.982914][ T1019] sock_sendmsg_nosec+0x10f/0x190 [ 1023.982948][ T1019] __sys_sendto+0x408/0x5a0 [ 1023.982979][ T1019] ? ksys_write+0x1e6/0x270 [ 1023.983011][ T1019] ? __pfx___sys_sendto+0x10/0x10 [ 1023.983041][ T1019] ? __mutex_unlock_slowpath+0x731/0x900 [ 1023.983083][ T1019] ? fdget+0x1ac/0x250 [ 1023.983124][ T1019] ? __pfx_ksys_write+0x10/0x10 [ 1023.983159][ T1019] __x64_sys_sendto+0xde/0x100 [ 1023.983196][ T1019] do_syscall_64+0x166/0x520 [ 1023.983219][ T1019] ? trace_irq_disable+0x3b/0x140 [ 1023.983248][ T1019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.983270][ T1019] ? clear_bhb_loop+0x70/0xc0 [ 1023.983298][ T1019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.983318][ T1019] RIP: 0033:0x7fa64599fb19 [ 1023.983340][ T1019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.983360][ T1019] RSP: 002b:00007fa646819028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1023.983384][ T1019] RAX: ffffffffffffffda RBX: 00007fa645c25fa0 RCX: 00007fa64599fb19 [ 1023.983401][ T1019] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000003 [ 1023.983414][ T1019] RBP: 00007fa646819090 R08: 0000200000000780 R09: 000000000000001c [ 1023.983429][ T1019] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1023.983442][ T1019] R13: 00007fa645c26038 R14: 00007fa645c25fa0 R15: 00007fffb6c9aa38 [ 1023.983480][ T1019] [ 1025.021873][ T1048] __nla_validate_parse: 5 callbacks suppressed [ 1025.021897][ T1048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8255'. [ 1025.448733][ T1063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8258'. [ 1025.473746][ T1066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1025.636217][ T1068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1025.723715][ T1066] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1026.114776][ T1085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8263'. [ 1026.420122][T13547] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1026.436524][ T1096] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1026.538981][ T1101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8267'. [ 1026.569683][ T1103] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1026.611829][ T1103] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1026.714292][ T1103] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1027.064678][ T1117] netlink: 964 bytes leftover after parsing attributes in process `syz.2.8272'. [ 1027.064707][ T1117] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1027.204628][ T1122] xt_cgroup: path and classid specified [ 1028.011286][ T1139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8279'. [ 1028.163355][ T1130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8277'. [ 1028.473513][ T1108] lo: entered promiscuous mode [ 1028.473540][ T1108] lo: entered allmulticast mode [ 1028.507169][ T1156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8283'. [ 1028.532561][ T1108] tunl0: entered promiscuous mode [ 1028.532587][ T1108] tunl0: entered allmulticast mode [ 1028.537979][ T1108] gre0: entered promiscuous mode [ 1028.538000][ T1108] gre0: entered allmulticast mode [ 1028.606106][ T1108] erspan0: entered promiscuous mode [ 1028.606130][ T1108] erspan0: entered allmulticast mode [ 1028.606929][ T1108] ip_vti0: entered promiscuous mode [ 1028.606944][ T1108] ip_vti0: entered allmulticast mode [ 1028.607605][ T1108] ip6_vti0: entered promiscuous mode [ 1028.607621][ T1108] ip6_vti0: entered allmulticast mode [ 1028.644020][ T1108] sit0: entered promiscuous mode [ 1028.644045][ T1108] sit0: entered allmulticast mode [ 1028.646391][ T1108] ip6tnl0: entered promiscuous mode [ 1028.646411][ T1108] ip6tnl0: entered allmulticast mode [ 1028.666705][ T1108] ip6gre0: entered promiscuous mode [ 1028.666729][ T1108] ip6gre0: entered allmulticast mode [ 1028.686408][ T1108] syz_tun: entered promiscuous mode [ 1028.686431][ T1108] syz_tun: entered allmulticast mode [ 1028.700205][ T1108] ip6gretap0: entered promiscuous mode [ 1028.700229][ T1108] ip6gretap0: entered allmulticast mode [ 1028.702964][ T1108] bridge0: entered promiscuous mode [ 1028.703004][ T1108] bridge0: entered allmulticast mode [ 1028.704175][ T1108] vcan0: entered promiscuous mode [ 1028.704193][ T1108] vcan0: entered allmulticast mode [ 1028.706493][ T1108] ÿÿÿÿÿÿ: entered promiscuous mode [ 1028.706512][ T1108] bond_slave_0: entered promiscuous mode [ 1028.706713][ T1108] bond_slave_1: entered promiscuous mode [ 1028.706918][ T1108] ÿÿÿÿÿÿ: entered allmulticast mode [ 1028.706933][ T1108] bond_slave_0: entered allmulticast mode [ 1028.706949][ T1108] bond_slave_1: entered allmulticast mode [ 1028.731051][ T1108] team0: entered promiscuous mode [ 1028.731074][ T1108] team_slave_0: entered promiscuous mode [ 1028.731311][ T1108] team_slave_1: entered promiscuous mode [ 1028.731474][ T1108] team0: entered allmulticast mode [ 1028.731488][ T1108] team_slave_0: entered allmulticast mode [ 1028.731503][ T1108] team_slave_1: entered allmulticast mode [ 1028.744569][ T1108] nlmon0: entered promiscuous mode [ 1028.744588][ T1108] nlmon0: entered allmulticast mode [ 1028.750225][ T1108] batadv0: entered promiscuous mode [ 1028.750243][ T1108] batadv0: entered allmulticast mode [ 1028.758773][ T1108] vxcan0: entered promiscuous mode [ 1028.758793][ T1108] vxcan0: entered allmulticast mode [ 1028.759419][ T1108] vxcan1: entered promiscuous mode [ 1028.759435][ T1108] vxcan1: entered allmulticast mode [ 1028.760056][ T1108] veth0: entered promiscuous mode [ 1028.760071][ T1108] veth0: entered allmulticast mode [ 1028.771972][ T1108] veth1: entered promiscuous mode [ 1028.771992][ T1108] veth1: entered allmulticast mode [ 1028.792294][ T1108] wg0: entered promiscuous mode [ 1028.792316][ T1108] wg0: entered allmulticast mode [ 1028.794460][ T1108] wg1: entered promiscuous mode [ 1028.794476][ T1108] wg1: entered allmulticast mode [ 1028.802878][ T1108] wg2: entered promiscuous mode [ 1028.802896][ T1108] wg2: entered allmulticast mode [ 1028.815451][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.815604][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.821345][ T1108] veth1_to_bridge: entered promiscuous mode [ 1028.821366][ T1108] veth1_to_bridge: entered allmulticast mode [ 1028.846493][ T1108] veth0_to_bond: entered promiscuous mode [ 1028.846514][ T1108] veth0_to_bond: entered allmulticast mode [ 1028.856845][ T1108] veth1_to_bond: entered promiscuous mode [ 1028.856866][ T1108] veth1_to_bond: entered allmulticast mode [ 1028.868659][ T1108] veth0_to_team: entered promiscuous mode [ 1028.868680][ T1108] veth0_to_team: entered allmulticast mode [ 1028.878824][ T1108] veth1_to_team: entered promiscuous mode [ 1028.878845][ T1108] veth1_to_team: entered allmulticast mode [ 1028.897310][ T1108] veth0_to_batadv: entered promiscuous mode [ 1028.897332][ T1108] veth0_to_batadv: entered allmulticast mode [ 1028.900304][ T1108] batadv_slave_0: entered promiscuous mode [ 1028.900322][ T1108] batadv_slave_0: entered allmulticast mode [ 1028.905931][ T1108] veth1_to_batadv: entered promiscuous mode [ 1028.905949][ T1108] veth1_to_batadv: entered allmulticast mode [ 1028.912262][ T1108] batadv_slave_1: entered promiscuous mode [ 1028.912281][ T1108] batadv_slave_1: entered allmulticast mode [ 1028.917514][ T1108] xfrm0: entered promiscuous mode [ 1028.917531][ T1108] xfrm0: entered allmulticast mode [ 1028.926131][ T1108] veth0_to_hsr: entered promiscuous mode [ 1028.926152][ T1108] veth0_to_hsr: entered allmulticast mode [ 1028.931281][ T1108] hsr_slave_0: entered allmulticast mode [ 1028.936151][ T1108] veth1_to_hsr: entered promiscuous mode [ 1028.938040][ T1108] veth1_to_hsr: entered allmulticast mode [ 1028.949645][ T1108] hsr_slave_1: entered allmulticast mode [ 1028.950497][ T1108] hsr0: entered promiscuous mode [ 1028.950514][ T1108] hsr0: entered allmulticast mode [ 1028.957457][ T1108] veth1_virt_wifi: entered promiscuous mode [ 1028.957478][ T1108] veth1_virt_wifi: entered allmulticast mode [ 1028.963846][ T1108] veth0_virt_wifi: entered promiscuous mode [ 1028.963866][ T1108] veth0_virt_wifi: entered allmulticast mode [ 1028.965937][ T1108] virt_wifi0: entered promiscuous mode [ 1028.965953][ T1108] virt_wifi0: entered allmulticast mode [ 1028.965966][ T1108] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1029.000311][ T1164] xt_cgroup: path and classid specified [ 1029.141480][ T1106] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1029.344084][ T1161] bridge0: port 1(ipvlan2) entered blocking state [ 1029.344210][ T1161] bridge0: port 1(ipvlan2) entered disabled state [ 1029.350924][ T1161] ipvlan2: entered allmulticast mode [ 1029.350946][ T1161] bridge0: entered allmulticast mode [ 1029.367960][ T1161] ipvlan2: left allmulticast mode [ 1029.367982][ T1161] bridge0: left allmulticast mode [ 1029.795548][ T1174] tipc: Enabling of bearer rejected, failed to enable media [ 1030.168563][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1030.295165][ T1199] ip_tables: iptables: counters copy to user failed while replacing table [ 1030.346328][ T1199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8296'. [ 1030.347761][ T1199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8296'. [ 1030.447775][ T1205] xt_cgroup: path and classid specified [ 1030.696502][ T1213] FAULT_INJECTION: forcing a failure. [ 1030.696502][ T1213] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.696538][ T1213] CPU: 0 UID: 0 PID: 1213 Comm: syz.2.8300 Not tainted syzkaller #0 PREEMPT(full) [ 1030.696567][ T1213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1030.696580][ T1213] Call Trace: [ 1030.696589][ T1213] [ 1030.696599][ T1213] dump_stack_lvl+0xe8/0x150 [ 1030.696640][ T1213] should_fail_ex+0x3eb/0x540 [ 1030.696673][ T1213] should_failslab+0xa8/0x100 [ 1030.696707][ T1213] __kmalloc_cache_noprof+0x9e/0x600 [ 1030.696734][ T1213] ? __kmalloc_cache_noprof+0x148/0x600 [ 1030.696757][ T1213] ? sctp_add_bind_addr+0x8c/0x370 [ 1030.696781][ T1213] ? sctp_add_bind_addr+0x8c/0x370 [ 1030.696813][ T1213] sctp_add_bind_addr+0x8c/0x370 [ 1030.696850][ T1213] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1030.696880][ T1213] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1030.696907][ T1213] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1030.696934][ T1213] ? sctp_v6_is_any+0x64/0x80 [ 1030.696963][ T1213] ? sctp_copy_one_addr+0x93/0x360 [ 1030.696993][ T1213] sctp_bind_addr_copy+0xb3/0x3c0 [ 1030.697019][ T1213] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1030.697052][ T1213] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1030.697084][ T1213] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1030.697119][ T1213] ? __local_bh_enable_ip+0xd6/0x140 [ 1030.697147][ T1213] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1030.697176][ T1213] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1030.697205][ T1213] sctp_sendmsg+0x159b/0x2d00 [ 1030.697246][ T1213] ? kstrtouint+0x6e/0xe0 [ 1030.697279][ T1213] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1030.697306][ T1213] ? lock_acquire+0x115/0x350 [ 1030.697354][ T1213] ? aa_sock_msg_perm+0xf5/0x210 [ 1030.697373][ T1213] ? sock_rps_record_flow+0x19/0x350 [ 1030.697398][ T1213] ? inet_sendmsg+0x298/0x320 [ 1030.697423][ T1213] ? __pfx_inet_sendmsg+0x10/0x10 [ 1030.697443][ T1213] sock_sendmsg_nosec+0x10f/0x190 [ 1030.697475][ T1213] __sys_sendto+0x408/0x5a0 [ 1030.697505][ T1213] ? ksys_write+0x1e6/0x270 [ 1030.697535][ T1213] ? __pfx___sys_sendto+0x10/0x10 [ 1030.697563][ T1213] ? __mutex_unlock_slowpath+0x731/0x900 [ 1030.697604][ T1213] ? fdget+0x1ac/0x250 [ 1030.697642][ T1213] ? __pfx_ksys_write+0x10/0x10 [ 1030.697675][ T1213] __x64_sys_sendto+0xde/0x100 [ 1030.697710][ T1213] do_syscall_64+0x166/0x520 [ 1030.697732][ T1213] ? trace_irq_disable+0x3b/0x140 [ 1030.697760][ T1213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.697781][ T1213] ? clear_bhb_loop+0x70/0xc0 [ 1030.697807][ T1213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.697827][ T1213] RIP: 0033:0x7f1c9359fb19 [ 1030.697857][ T1213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.697875][ T1213] RSP: 002b:00007f1c943b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1030.697899][ T1213] RAX: ffffffffffffffda RBX: 00007f1c93825fa0 RCX: 00007f1c9359fb19 [ 1030.697915][ T1213] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000003 [ 1030.697928][ T1213] RBP: 00007f1c943b1090 R08: 0000200000000780 R09: 000000000000001c [ 1030.697942][ T1213] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1030.697955][ T1213] R13: 00007f1c93826038 R14: 00007f1c93825fa0 R15: 00007ffcd2b100c8 [ 1030.697991][ T1213] [ 1031.244551][ T1218] syzkaller1: entered promiscuous mode [ 1031.244579][ T1218] syzkaller1: entered allmulticast mode [ 1031.661656][ T1238] FAULT_INJECTION: forcing a failure. [ 1031.661656][ T1238] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.661689][ T1238] CPU: 1 UID: 0 PID: 1238 Comm: syz.3.8310 Not tainted syzkaller #0 PREEMPT(full) [ 1031.661712][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1031.661726][ T1238] Call Trace: [ 1031.661735][ T1238] [ 1031.661745][ T1238] dump_stack_lvl+0xe8/0x150 [ 1031.661788][ T1238] should_fail_ex+0x3eb/0x540 [ 1031.661822][ T1238] should_failslab+0xa8/0x100 [ 1031.661864][ T1238] __kvmalloc_node_noprof+0x171/0x820 [ 1031.661890][ T1238] ? rcu_is_watching+0x16/0xb0 [ 1031.661925][ T1238] ? bpf_compute_subprog_arg_access+0x194/0x15c0 [ 1031.661954][ T1238] ? trace_kmalloc+0x2a/0xf0 [ 1031.661979][ T1238] ? call_instance+0x263/0x560 [ 1031.662004][ T1238] ? call_instance+0x263/0x560 [ 1031.662039][ T1238] call_instance+0x263/0x560 [ 1031.662074][ T1238] bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 1031.662129][ T1238] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1031.662164][ T1238] ? __kvmalloc_node_noprof+0x340/0x820 [ 1031.662191][ T1238] ? bpf_compute_live_registers+0x142/0x1df0 [ 1031.662217][ T1238] ? bpf_compute_live_registers+0x142/0x1df0 [ 1031.662253][ T1238] bpf_compute_live_registers+0x10b0/0x1df0 [ 1031.662306][ T1238] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1031.662345][ T1238] bpf_check+0x2d0b/0x34e0 [ 1031.662381][ T1238] ? ktime_get_with_offset+0x93/0x2d0 [ 1031.662410][ T1238] ? ktime_get_with_offset+0x93/0x2d0 [ 1031.662439][ T1238] ? __pfx_bpf_check+0x10/0x10 [ 1031.662464][ T1238] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1031.662495][ T1238] bpf_prog_load+0x14da/0x1c60 [ 1031.662530][ T1238] ? __pfx_bpf_prog_load+0x10/0x10 [ 1031.662568][ T1238] ? __might_fault+0xaf/0x130 [ 1031.662599][ T1238] __sys_bpf+0xd86/0xe00 [ 1031.662629][ T1238] ? __pfx___sys_bpf+0x10/0x10 [ 1031.662662][ T1238] ? __fget_files+0x2a/0x420 [ 1031.662708][ T1238] ? ksys_write+0x242/0x270 [ 1031.662738][ T1238] ? __pfx_ksys_write+0x10/0x10 [ 1031.662771][ T1238] __x64_sys_bpf+0xba/0xd0 [ 1031.662805][ T1238] do_syscall_64+0x166/0x520 [ 1031.662841][ T1238] ? trace_irq_disable+0x3b/0x140 [ 1031.662869][ T1238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.662892][ T1238] ? clear_bhb_loop+0x70/0xc0 [ 1031.662919][ T1238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.662941][ T1238] RIP: 0033:0x7fba3b59fb19 [ 1031.662962][ T1238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.662985][ T1238] RSP: 002b:00007fba3c510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1031.663009][ T1238] RAX: ffffffffffffffda RBX: 00007fba3b825fa0 RCX: 00007fba3b59fb19 [ 1031.663026][ T1238] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1031.663040][ T1238] RBP: 00007fba3c510090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.663054][ T1238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1031.663067][ T1238] R13: 00007fba3b826038 R14: 00007fba3b825fa0 R15: 00007ffcbac62898 [ 1031.663103][ T1238] [ 1032.235610][ T1250] netlink: 'syz.3.8313': attribute type 38 has an invalid length. [ 1032.332379][ T1265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8320'. [ 1032.439438][ T1271] FAULT_INJECTION: forcing a failure. [ 1032.439438][ T1271] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.439471][ T1271] CPU: 1 UID: 0 PID: 1271 Comm: syz.0.8322 Not tainted syzkaller #0 PREEMPT(full) [ 1032.439494][ T1271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1032.439507][ T1271] Call Trace: [ 1032.439515][ T1271] [ 1032.439525][ T1271] dump_stack_lvl+0xe8/0x150 [ 1032.439564][ T1271] should_fail_ex+0x3eb/0x540 [ 1032.439595][ T1271] should_failslab+0xa8/0x100 [ 1032.439627][ T1271] kmem_cache_alloc_bulk_noprof+0x86/0x7b0 [ 1032.439654][ T1271] ? pfn_valid+0x125/0x4c0 [ 1032.439694][ T1271] ? bpf_prog_78abdf3a6a43376f+0x5b/0x66 [ 1032.439717][ T1271] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 1032.439763][ T1271] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1032.439802][ T1271] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1032.439832][ T1271] ? 0xffffffffa04051c0 [ 1032.439901][ T1271] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1032.439939][ T1271] ? _copy_from_user+0x94/0xb0 [ 1032.439968][ T1271] ? bpf_test_init+0x113/0x150 [ 1032.439995][ T1271] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1032.440029][ T1271] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1032.440076][ T1271] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1032.440112][ T1271] ? __fget_files+0x2a/0x420 [ 1032.440145][ T1271] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1032.440176][ T1271] bpf_prog_test_run+0x2c5/0x340 [ 1032.440203][ T1271] __sys_bpf+0xb1e/0xe00 [ 1032.440233][ T1271] ? __pfx___sys_bpf+0x10/0x10 [ 1032.440266][ T1271] ? __fget_files+0x2a/0x420 [ 1032.440310][ T1271] ? ksys_write+0x242/0x270 [ 1032.440339][ T1271] ? __pfx_ksys_write+0x10/0x10 [ 1032.440380][ T1271] __x64_sys_bpf+0xba/0xd0 [ 1032.440413][ T1271] do_syscall_64+0x166/0x520 [ 1032.440437][ T1271] ? trace_irq_disable+0x3b/0x140 [ 1032.440465][ T1271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.440487][ T1271] ? clear_bhb_loop+0x70/0xc0 [ 1032.440534][ T1271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.440555][ T1271] RIP: 0033:0x7fa64599fb19 [ 1032.440575][ T1271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.440595][ T1271] RSP: 002b:00007fa646819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1032.440618][ T1271] RAX: ffffffffffffffda RBX: 00007fa645c25fa0 RCX: 00007fa64599fb19 [ 1032.440635][ T1271] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 1032.440649][ T1271] RBP: 00007fa646819090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.440663][ T1271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1032.440676][ T1271] R13: 00007fa645c26038 R14: 00007fa645c25fa0 R15: 00007fffb6c9aa38 [ 1032.440712][ T1271] [ 1032.492240][ T1267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8320'. [ 1032.860623][ T1282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8324'. [ 1032.860678][ T1282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8324'. [ 1032.921472][ T1286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8324'. [ 1032.921517][ T1286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8324'. [ 1033.382810][T13538] ------------[ cut here ]------------ [ 1033.382828][T13538] conntrack cleanup blocked for 60s [ 1033.382835][T13538] WARNING: net/netfilter/nf_conntrack_core.c:2504 at nf_conntrack_cleanup_net_list+0x21a/0x370, CPU#1: kworker/u8:12/13538 [ 1033.406900][T13538] Modules linked in: [ 1033.410941][T13538] CPU: 1 UID: 0 PID: 13538 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 1033.420987][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1033.431169][T13538] Workqueue: netns cleanup_net [ 1033.436057][T13538] RIP: 0010:nf_conntrack_cleanup_net_list+0x21a/0x370 [ 1033.443315][T13538] Code: 4c 89 ef e8 a8 6b 25 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 0a 8e ae f7 45 31 e4 e9 aa fe ff ff e8 fd 8d ae f7 48 8d 3d d6 af 92 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 1033.463388][T13538] RSP: 0018:ffffc9000662f8b0 EFLAGS: 00010293 [ 1033.469599][T13538] RAX: ffffffff8a1a87d3 RBX: dffffc0000000000 RCX: ffff88801d3e5dc0 [ 1033.477646][T13538] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff91ad37b0 [ 1033.480022][ T1297] FAULT_INJECTION: forcing a failure. [ 1033.480022][ T1297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.480047][ T1297] CPU: 0 UID: 0 PID: 1297 Comm: syz.1.8329 Not tainted syzkaller #0 PREEMPT(full) [ 1033.480068][ T1297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1033.480079][ T1297] Call Trace: [ 1033.480088][ T1297] [ 1033.480096][ T1297] dump_stack_lvl+0xe8/0x150 [ 1033.480132][ T1297] should_fail_ex+0x3eb/0x540 [ 1033.480160][ T1297] _copy_to_user+0x31/0xb0 [ 1033.480187][ T1297] bpf_verifier_vlog+0x3a2/0x900 [ 1033.480220][ T1297] verbose+0x11d/0x1a0 [ 1033.480251][ T1297] ? __pfx_verbose+0x10/0x10 [ 1033.480277][ T1297] ? lock_acquire+0x115/0x350 [ 1033.480309][ T1297] print_bpf_insn+0x15bb/0x2a90 [ 1033.480332][ T1297] ? __pfx_verbose+0x10/0x10 [ 1033.480359][ T1297] ? __pfx_print_bpf_insn+0x10/0x10 [ 1033.480378][ T1297] ? _copy_to_user+0x8a/0xb0 [ 1033.480403][ T1297] ? bpf_verifier_vlog+0x55a/0x900 [ 1033.480433][ T1297] ? bpf_verifier_log_write+0x11d/0x1a0 [ 1033.480458][ T1297] bpf_verbose_insn+0xcb/0x130 [ 1033.480483][ T1297] ? __pfx_bpf_verbose_insn+0x10/0x10 [ 1033.480526][ T1297] ? __pfx_verbose+0x10/0x10 [ 1033.480549][ T1297] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 1033.480575][ T1297] ? record_arg_access+0x14f/0xa80 [ 1033.480609][ T1297] analyze_subprog+0x6808/0xac60 [ 1033.480684][ T1297] ? __pfx_analyze_subprog+0x10/0x10 [ 1033.480708][ T1297] ? kasan_save_track+0x4f/0x80 [ 1033.480730][ T1297] ? kasan_save_track+0x3e/0x80 [ 1033.480751][ T1297] ? __kasan_kmalloc+0x93/0xb0 [ 1033.480774][ T1297] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1033.480796][ T1297] ? call_instance+0x263/0x560 [ 1033.480818][ T1297] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 1033.480841][ T1297] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 1033.480870][ T1297] ? bpf_check+0x2d0b/0x34e0 [ 1033.480888][ T1297] ? bpf_prog_load+0x14da/0x1c60 [ 1033.480904][ T1297] ? __sys_bpf+0xd86/0xe00 [ 1033.480920][ T1297] ? __x64_sys_bpf+0xba/0xd0 [ 1033.480947][ T1297] ? ip6_string+0x1532/0x1a20 [ 1033.480968][ T1297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.481025][ T1297] ? call_instance+0x263/0x560 [ 1033.481047][ T1297] ? rcu_is_watching+0x16/0xb0 [ 1033.481074][ T1297] ? call_instance+0x263/0x560 [ 1033.481094][ T1297] ? trace_kmalloc+0x2a/0xf0 [ 1033.481117][ T1297] ? call_instance+0x263/0x560 [ 1033.481139][ T1297] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1033.481164][ T1297] ? __kvmalloc_node_noprof+0x340/0x820 [ 1033.481187][ T1297] ? call_instance+0x263/0x560 [ 1033.481208][ T1297] ? call_instance+0x263/0x560 [ 1033.481248][ T1297] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 1033.481294][ T1297] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1033.481324][ T1297] ? __kvmalloc_node_noprof+0x340/0x820 [ 1033.481347][ T1297] ? bpf_compute_live_registers+0x142/0x1df0 [ 1033.481370][ T1297] ? bpf_compute_live_registers+0x142/0x1df0 [ 1033.481401][ T1297] bpf_compute_live_registers+0x10b0/0x1df0 [ 1033.481447][ T1297] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1033.481482][ T1297] bpf_check+0x2d0b/0x34e0 [ 1033.481513][ T1297] ? ktime_get_with_offset+0x93/0x2d0 [ 1033.481539][ T1297] ? ktime_get_with_offset+0x93/0x2d0 [ 1033.481565][ T1297] ? __pfx_bpf_check+0x10/0x10 [ 1033.481587][ T1297] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1033.481614][ T1297] bpf_prog_load+0x14da/0x1c60 [ 1033.481645][ T1297] ? __pfx_bpf_prog_load+0x10/0x10 [ 1033.481680][ T1297] ? __might_fault+0xaf/0x130 [ 1033.481707][ T1297] __sys_bpf+0xd86/0xe00 [ 1033.481734][ T1297] ? __pfx___sys_bpf+0x10/0x10 [ 1033.481763][ T1297] ? __fget_files+0x2a/0x420 [ 1033.481803][ T1297] ? ksys_write+0x242/0x270 [ 1033.481830][ T1297] ? __pfx_ksys_write+0x10/0x10 [ 1033.481865][ T1297] __x64_sys_bpf+0xba/0xd0 [ 1033.481894][ T1297] do_syscall_64+0x166/0x520 [ 1033.481915][ T1297] ? trace_irq_disable+0x3b/0x140 [ 1033.481940][ T1297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.481959][ T1297] ? clear_bhb_loop+0x70/0xc0 [ 1033.481982][ T1297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.482001][ T1297] RIP: 0033:0x7f308eb9fb19 [ 1033.482020][ T1297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.482036][ T1297] RSP: 002b:00007f308fb1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1033.482058][ T1297] RAX: ffffffffffffffda RBX: 00007f308ee25fa0 RCX: 00007f308eb9fb19 [ 1033.482072][ T1297] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 1033.482084][ T1297] RBP: 00007f308fb1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.482097][ T1297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.482109][ T1297] R13: 00007f308ee26038 R14: 00007f308ee25fa0 R15: 00007ffc044418b8 [ 1033.482140][ T1297] [ 1033.952119][T13538] RBP: 0000000000000001 R08: ffff88807e8cb803 R09: 1ffff1100fd19700 [ 1033.960411][T13538] R10: dffffc0000000000 R11: ffffed100fd19701 R12: 0000000100011db0 [ 1033.968483][T13538] R13: ffffc9000662fa50 R14: ffffc9000662fa50 R15: 0000000100011db1 [ 1033.976470][T13538] FS: 0000000000000000(0000) GS:ffff88812371f000(0000) knlGS:0000000000000000 [ 1033.985665][T13538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1033.992318][T13538] CR2: 00007f1c937f5158 CR3: 000000000fd48000 CR4: 00000000003526f0 [ 1034.000476][T13538] Call Trace: [ 1034.003763][T13538] [ 1034.006708][T13538] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1034.012869][T13538] ops_undo_list+0x4d7/0x8f0 [ 1034.017488][T13538] ? __pfx_ops_undo_list+0x10/0x10 [ 1034.022866][T13538] ? idr_destroy+0x218/0x290 [ 1034.027479][T13538] ? do_raw_spin_unlock+0xf5/0x200 [ 1034.032692][T13538] cleanup_net+0x572/0x810 [ 1034.037138][T13538] ? __pfx_cleanup_net+0x10/0x10 [ 1034.042375][T13538] ? rcu_is_watching+0x16/0xb0 [ 1034.047149][T13538] ? process_scheduled_works+0x97a/0x1630 [ 1034.052968][T13538] process_scheduled_works+0xc3d/0x1630 [ 1034.058901][T13538] ? __pfx_process_scheduled_works+0x10/0x10 [ 1034.064894][T13538] ? assign_work+0x3cf/0x5d0 [ 1034.069597][T13538] worker_thread+0xa47/0xfb0 [ 1034.074219][T13538] ? __kthread_parkme+0x71/0x1f0 [ 1034.079401][T13538] kthread+0x38b/0x480 [ 1034.083482][T13538] ? __pfx_worker_thread+0x10/0x10 [ 1034.088797][T13538] ? __pfx_kthread+0x10/0x10 [ 1034.093432][T13538] ret_from_fork+0x514/0xb70 [ 1034.098084][T13538] ? __pfx_ret_from_fork+0x10/0x10 [ 1034.103441][T13538] ? __switch_to+0xc78/0x1410 [ 1034.108175][T13538] ? __pfx_kthread+0x10/0x10 [ 1034.112846][T13538] ret_from_fork_asm+0x1a/0x30 [ 1034.117641][T13538] [ 1034.120942][T13538] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1034.128264][T13538] CPU: 1 UID: 0 PID: 13538 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 1034.137914][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1034.147986][T13538] Workqueue: netns cleanup_net [ 1034.152760][T13538] Call Trace: [ 1034.156034][T13538] [ 1034.158955][T13538] vpanic+0x26f/0x710 [ 1034.162956][T13538] panic+0xc5/0xd0 [ 1034.166671][T13538] ? __pfx_panic+0x10/0x10 [ 1034.171098][T13538] ? ret_from_fork_asm+0x1a/0x30 [ 1034.176032][T13538] __warn+0x315/0x4c0 [ 1034.180006][T13538] ? nf_conntrack_cleanup_net_list+0x21a/0x370 [ 1034.186198][T13538] ? nf_conntrack_cleanup_net_list+0x21a/0x370 [ 1034.192378][T13538] __report_bug+0x276/0x570 [ 1034.196966][T13538] ? nf_conntrack_cleanup_net_list+0x21a/0x370 [ 1034.203146][T13538] ? __pfx___report_bug+0x10/0x10 [ 1034.208207][T13538] report_bug_entry+0x19b/0x290 [ 1034.213083][T13538] ? nf_conntrack_cleanup_net_list+0x21a/0x370 [ 1034.219244][T13538] ? nf_conntrack_cleanup_net_list+0x21f/0x370 [ 1034.225406][T13538] handle_bug+0xce/0x200 [ 1034.229665][T13538] exc_invalid_op+0x1a/0x50 [ 1034.234199][T13538] asm_exc_invalid_op+0x1a/0x20 [ 1034.239055][T13538] RIP: 0010:nf_conntrack_cleanup_net_list+0x21a/0x370 [ 1034.245831][T13538] Code: 4c 89 ef e8 a8 6b 25 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 0a 8e ae f7 45 31 e4 e9 aa fe ff ff e8 fd 8d ae f7 48 8d 3d d6 af 92 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 1034.265452][T13538] RSP: 0018:ffffc9000662f8b0 EFLAGS: 00010293 [ 1034.271531][T13538] RAX: ffffffff8a1a87d3 RBX: dffffc0000000000 RCX: ffff88801d3e5dc0 [ 1034.279528][T13538] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff91ad37b0 [ 1034.287526][T13538] RBP: 0000000000000001 R08: ffff88807e8cb803 R09: 1ffff1100fd19700 [ 1034.295501][T13538] R10: dffffc0000000000 R11: ffffed100fd19701 R12: 0000000100011db0 [ 1034.303487][T13538] R13: ffffc9000662fa50 R14: ffffc9000662fa50 R15: 0000000100011db1 [ 1034.311469][T13538] ? nf_conntrack_cleanup_net_list+0x213/0x370 [ 1034.317651][T13538] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1034.323729][T13538] ops_undo_list+0x4d7/0x8f0 [ 1034.328355][T13538] ? __pfx_ops_undo_list+0x10/0x10 [ 1034.333504][T13538] ? idr_destroy+0x218/0x290 [ 1034.338109][T13538] ? do_raw_spin_unlock+0xf5/0x200 [ 1034.343236][T13538] cleanup_net+0x572/0x810 [ 1034.347672][T13538] ? __pfx_cleanup_net+0x10/0x10 [ 1034.352631][T13538] ? rcu_is_watching+0x16/0xb0 [ 1034.357412][T13538] ? process_scheduled_works+0x97a/0x1630 [ 1034.363149][T13538] process_scheduled_works+0xc3d/0x1630 [ 1034.368742][T13538] ? __pfx_process_scheduled_works+0x10/0x10 [ 1034.374742][T13538] ? assign_work+0x3cf/0x5d0 [ 1034.379370][T13538] worker_thread+0xa47/0xfb0 [ 1034.384010][T13538] ? __kthread_parkme+0x71/0x1f0 [ 1034.388969][T13538] kthread+0x38b/0x480 [ 1034.393043][T13538] ? __pfx_worker_thread+0x10/0x10 [ 1034.398166][T13538] ? __pfx_kthread+0x10/0x10 [ 1034.402774][T13538] ret_from_fork+0x514/0xb70 [ 1034.407378][T13538] ? __pfx_ret_from_fork+0x10/0x10 [ 1034.412494][T13538] ? __switch_to+0xc78/0x1410 [ 1034.417188][T13538] ? __pfx_kthread+0x10/0x10 [ 1034.421785][T13538] ret_from_fork_asm+0x1a/0x30 [ 1034.426572][T13538] [ 1034.429738][T13538] Kernel Offset: disabled [ 1034.434059][T13538] Rebooting in 86400 seconds..