last executing test programs: 6.604410857s ago: executing program 1 (id=8210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x4, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.541679981s ago: executing program 1 (id=8211): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1, 0x4, 0x9) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x0, 0x0, 0x0, {0x197f31aec21db0e8, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c880}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@multicast, @local, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0xfffe, 0x7, 0x2, 0x0, @private=0xa010102, @loopback}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) 6.434023176s ago: executing program 1 (id=8213): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) unshare(0x60020c00) write(r1, &(0x7f0000000940)="fc0708", 0x3) 6.012535422s ago: executing program 3 (id=8217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231e0000400012800e0001006970366772657461700000002c0002801400060000f80000000000000000ffffac1414bb14000700ffd535"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1, 0x1}}, {{0xa, 0x4e21, 0xca, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x6, @mcast1}}, 0x0, 0x1, [{{0xa, 0x4e21, 0xf, @remote, 0x80000000}}]}, 0x110) 4.217337624s ago: executing program 3 (id=8220): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x5}}) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@device_b, {0x9, 0xc5}}, @tdls_setup_req={0xc, 0x0, "", 0x1, @val=0x2000, @void, @void, @void}}, 0x1d) 4.149138734s ago: executing program 4 (id=8221): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x28012, r0, 0xd73e2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0xc051) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e22, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) close(r3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0xf810, 0x3, 0x3, {{0x7, 0x4, 0x0, 0x9, 0x1c, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@cipso={0x86, 0x6, 0x1}]}}}}}) ioctl$sock_netdev_private(r9, 0x8949, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="9ad624a821a2d61dd3745a546b52593439b7c4aadf24bfaae031efdb215555469bf637d6aee4491ea0e575eba71d8f7f370e7c59ac215f", @ANYRES16=r8, @ANYBLOB="080028bd7000fbdbdf2501000000000000000141000000180017000000190000000669623a6d6163766c616e3100"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xc, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x62}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004080}, 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x8c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008840}, 0x11) sendfile(r4, r0, &(0x7f0000000180)=0x1000, 0x9) 3.969904625s ago: executing program 0 (id=8223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x4, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.915715675s ago: executing program 4 (id=8225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 3.834867239s ago: executing program 0 (id=8226): recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 3.336275039s ago: executing program 3 (id=8228): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x8004, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000c96fd35d000000008100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff6d0fb702000008000000b70300000800000085000000060000003500f4ff00000000180100002020702500000000002020207b1af8ff00000000bfa100000000100007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b70200000300000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="fa0a0500230807003c0012800b000100697036746e6c00002c00028014000300fec0ffffffffffff000000000000000114000200000000a8"], 0x5c}}, 0x24000800) 3.325148062s ago: executing program 4 (id=8230): bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000700000000000000fdffffff850000002700000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.144915729s ago: executing program 2 (id=8231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0x3}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x25, 0x8}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x301, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3.080865843s ago: executing program 4 (id=8232): r0 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'wlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=@delchain={0x2a0, 0x65, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xa, 0xfff8}, {0x7, 0x6}, {0xc, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x26c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x258, 0x2, [@m_xt={0x254, 0x9, 0x0, 0x0, {{0x7}, {0x1dc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xcc, 0x6, {0x1, 'nat\x00', 0x2, 0x7, "e0f93b517e0d8a1a43abb2f831cc79eca60fb0e45a000e09259ab9b83b18367f52c809f8930ec49eb98e8170fe7492ca577a5b12aac0d666c9058a93bd82050d4dde6d6a24e2825ec33b46ca45c357820a505269246f8b0c103f143d8ad2b70eaa74516c6b47adeba61fb811b5029b64088fa9d830059346989f297869fafab89babf7dc55e72ca6692a666534b1f68a7d0a09c0eea3f6c6e6c2c8b30bd39f862536"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0xec, 0x6, {0xff, 'nat\x00', 0x4, 0x4, "dca47d0512ca2b91ad85b7a1fef374f2c84cd9bb8e253f6a7d39b7301f34d2c5fa3fddaee0fd541cb4ab9e04f1ed516f03942169a9f7215644e81e626b3e5038aee11db9da657a1e8bbf2311774d5b901111372807de7ed11cf590ed452655816121de8509491be6ccf704ad2d8f7d753175891742dfd9ad83ecb402a76f3d5d11fbabc6208a871e95969a62f4a81252ea25c1e48fc806460beaa58a7823273064bfbd8aaf3657218c1b27683ada0382ef2c329aa9184ad687ca5d51fe8e184b8f80"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000001}, @TCA_IPT_INDEX={0x8, 0x3, 0x4f}]}, {0x54, 0x6, "edb22a5b5f473cb78bad6957f8cd4692924837a0e46a81fb18a98f90ab692e78b9d86df9d907602f062369414779f017603b6c096a9961956161bbc10e1816a1e9a930d3c6a6f510bbd75e4893da039b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x2a0}}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, 0x0, 0x800) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) socket(0x28, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) accept4$unix(r3, 0x0, 0x0, 0x80800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000000)=0x7, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x80) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1, 0x1}}, {{0xa, 0x4e21, 0xca, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 2.925139963s ago: executing program 1 (id=8233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) socket(0x1, 0x803, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x10}, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040)="229fc8f3ff49b6a934aa4dc164d644de3aeb44198b59b40a16929e", &(0x7f0000000080)=@tcp=r2, 0x4}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000000000)=0xfffffffc, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r6 = socket(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0xa, 0x1, 0x6, 0xb, @empty, @mcast1, 0x8709, 0x10, 0xac, 0xf}}) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x1a0, r8, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0xffffffffffffff6a}, @NL80211_ATTR_FRAME={0x140, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_a, @initial, {0xa, 0x5}, @value=@ver_80211n={0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x7, @random=0xe2, 0x2000, @void, @val={0x1, 0x1, [{0x18}]}, @void, @val={0x4, 0x6, {0x0, 0x16, 0x1, 0xce3}}, @void, @val={0x5, 0x88, {0x7, 0xa1, 0xce, "5c27b2172256d6c6965cbf513ebbb82a6fa840be095f4ba9f1f8a3449e6ae50b3baaf17688a841ac556fabd728d8418c61da0003c7adcb13fe25bc7c9990278144074d4b4ead4b648c7ba29087cb17c3e52b4bbbdb81a33fe6a03e4c7ce2e789c3036d4d388c43c30c2d2377989fd883e7969cb13bff8fb95e6a1766aa886f7e3089a45d3a"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x9, 0x78, 0x4c}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x2f, "da56c478f8045f2833464c3a86eca5d9f2f5bdb2ef8cef1ed19c08b4ded5f738fdb94114439217933348791780f02c"}, {0xdd, 0x33, "3c92441649b5f3cf5f493a56845e24dadedbd5fb17c396e0b3d74224f5bad5a533c03cdd7de379c2a20b4f702dfe0ff5516ee6"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x1, 0x2, 0x8, 0xab9, 0x4, 0x8, 0x3, 0x200]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x120e}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x8b3f, 0x401, 0x7, 0x7, 0x7ff, 0x2, 0x7f, 0x8000, 0x42, 0x4dcd]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x44011}, 0x24000800) 2.889264792s ago: executing program 0 (id=8234): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xb6, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x21, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x6f, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x4, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x5, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xa, "c8f46976e79e56c7"}]}]}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="7bf88e47183d89190e51ff2e0f2f264dcc47a434605cd8cf55a0dabeec02ce4109fbb52376beedfd6eb6b4925a9091eef49125cc27f094ddb2a918d88639206ef5e3a34774bce0acf8026853b7de4f78", 0xffffff8f}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) read(r4, &(0x7f0000001040)=""/221, 0xdd) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.13962356s ago: executing program 2 (id=8235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="81", 0xffe3}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2}}}], 0x20}, 0x4840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfa780cd21d308098a00000800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.074475263s ago: executing program 1 (id=8236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r1, 0xffffffffffffffff, 0x1b, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x800) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xf0, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff0000}, @CTA_TUPLE_MASTER={0x34, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28a}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x14}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x220}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2000c8a0}, 0x40000d0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000098500000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r10 = socket(0x40000000015, 0x5, 0x0) bind$pptp(r9, &(0x7f0000000640)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) bind$inet(r10, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r10, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r10, 0x0, 0x0, 0x20004004, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.073728281s ago: executing program 0 (id=8237): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r4, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/248, 0xf8}], 0x2, 0xe9, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x801) r6 = socket$key(0xf, 0x3, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000001900000009000000000000020001000000000000000afcff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) ppoll(&(0x7f00000003c0)=[{r0, 0x5332}], 0x1, &(0x7f00000004c0), 0x0, 0x0) 1.072924422s ago: executing program 4 (id=8238): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r8, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r5, @ANYRESHEX=r1, @ANYRESHEX=r5], 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r10], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000204000000000000120000000000002e00"/52], &(0x7f0000000300)=""/195, 0x34, 0xc3, 0x1, 0x726}, 0x28) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r12, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) 952.458811ms ago: executing program 2 (id=8239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 9) 785.856707ms ago: executing program 2 (id=8240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) (async) sendto$inet6(r1, 0x0, 0x0, 0x400cc50, &(0x7f0000000040)={0xa, 0x4e25, 0xffffff7c, @mcast2}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x113, 0x9}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r11, 0x9}, 0x8) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0x4, 0x448, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r12, 0x0, &(0x7f00000000c0)=""/193}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 785.433346ms ago: executing program 3 (id=8241): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fddbdf000001006a", @ANYRES32=0x0, @ANYBLOB="320a0500230800002c0012800b00010062726964676500001c000280080004000800000008000500000000000500170001"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 578.691339ms ago: executing program 3 (id=8242): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) syz_emit_ethernet(0x8c, &(0x7f0000000100)={@multicast, @local, @val={@void, {0x8100, 0x5, 0x1, 0x7}}, {@llc={0x4, {@snap={0x0, 0x0, "4edc", "36e54d", 0x6002, "dac46578d6f5f3f21b99dc217ff0d01dafd7f944a0793be51aaded58586e3f3643544990cb7318d5af94071d9049d39846ee67b28b5fd178eaba22828b7e626b5d48691cbb748aff06767bd83e5115c50006000000f040dee04b4605000000004808d612be48d1409a963b61b5ae000000"}}}}}, 0x0) 480.346733ms ago: executing program 2 (id=8243): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1a803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x38, 0x0, &(0x7f0000000080)="4521005458000000000084dd0e6505777a332ac58e3bd2135d0880031902ec77c9b19f21460da8002196ae218ba0385a07244c281eb18d67", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 479.647448ms ago: executing program 4 (id=8244): recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 399.89925ms ago: executing program 3 (id=8245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0x3}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x25, 0x8}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x301, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 395.41119ms ago: executing program 2 (id=8246): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400a0}, 0x20048840) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) close(r2) recvmmsg(r5, 0x0, 0x0, 0x10021, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) accept$packet(r2, 0x0, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) sendmsg$xdp(r2, 0x0, 0x8000) sendmmsg$sock(r1, 0x0, 0x0, 0x80) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) 92.520922ms ago: executing program 0 (id=8247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x943, 0x0, "080c9aadb74d66ca69693fbb3d41d75b02a591c129e9738d7d8aa4e61e89a9a9bf24f97f622e69d81567b0c16ba81869ec105ab635c609beb79a79c833f4734ac34b246e6cbc9ce5d2fb8d8f9cb01a52"}, 0xd8) close(r0) 87.191852ms ago: executing program 1 (id=8248): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0, 0x1099}, {r2, 0x200}], 0x2, &(0x7f0000000200)={r3, r4+10000000}, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 0 (id=8249): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0xe}, 0x94) kernel console output (not intermixed with test programs): T1112] ? import_iovec+0x73/0xa0 [ 854.792623][ T1112] ___sys_sendmsg+0x2a5/0x360 [ 854.792645][ T1112] ? __lock_acquire+0x6b5/0x2cf0 [ 854.792670][ T1112] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.792732][ T1112] ? __fget_files+0x2a/0x420 [ 854.792750][ T1112] ? __fget_files+0x3a0/0x420 [ 854.792778][ T1112] __x64_sys_sendmsg+0x1bd/0x2a0 [ 854.792804][ T1112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 854.792835][ T1112] ? __pfx_ksys_write+0x10/0x10 [ 854.792869][ T1112] do_syscall_64+0xe2/0xf80 [ 854.792890][ T1112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.792906][ T1112] ? trace_irq_disable+0x37/0x100 [ 854.792922][ T1112] ? clear_bhb_loop+0x60/0xb0 [ 854.792943][ T1112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.792960][ T1112] RIP: 0033:0x7f324839aeb9 [ 854.792976][ T1112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.792990][ T1112] RSP: 002b:00007f32465f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.793009][ T1112] RAX: ffffffffffffffda RBX: 00007f3248615fa0 RCX: 00007f324839aeb9 [ 854.793022][ T1112] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 854.793033][ T1112] RBP: 00007f32465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 854.793044][ T1112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.793055][ T1112] R13: 00007f3248616038 R14: 00007f3248615fa0 R15: 00007ffcad7c7bb8 [ 854.793086][ T1112] [ 855.508220][ T1123] FAULT_INJECTION: forcing a failure. [ 855.508220][ T1123] name failslab, interval 1, probability 0, space 0, times 0 [ 855.521427][ T1123] CPU: 0 UID: 0 PID: 1123 Comm: syz.1.6716 Not tainted syzkaller #0 PREEMPT(full) [ 855.521448][ T1123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 855.521458][ T1123] Call Trace: [ 855.521465][ T1123] [ 855.521472][ T1123] dump_stack_lvl+0xe8/0x150 [ 855.521497][ T1123] should_fail_ex+0x412/0x560 [ 855.521521][ T1123] should_failslab+0xa8/0x100 [ 855.521543][ T1123] kmem_cache_alloc_noprof+0x87/0x6e0 [ 855.521566][ T1123] ? __inet_hash_connect+0xd48/0x2440 [ 855.521589][ T1123] __inet_hash_connect+0xd48/0x2440 [ 855.521608][ T1123] ? __pfx___inet6_check_established+0x10/0x10 [ 855.521635][ T1123] ? __inet_hash_connect+0x4cf/0x2440 [ 855.521659][ T1123] ? __pfx___inet_hash_connect+0x10/0x10 [ 855.521682][ T1123] ? inet6_hash_connect+0xd8/0x170 [ 855.521703][ T1123] tcp_v6_connect+0xf93/0x1940 [ 855.521732][ T1123] ? __pfx_tcp_v6_connect+0x10/0x10 [ 855.521746][ T1123] ? tcp_sendmsg+0x2f/0x50 [ 855.521761][ T1123] ? do_syscall_64+0xe2/0xf80 [ 855.521779][ T1123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.521820][ T1123] __inet_stream_connect+0x25a/0xdd0 [ 855.521854][ T1123] ? __pfx___inet_stream_connect+0x10/0x10 [ 855.521879][ T1123] ? __kasan_kmalloc+0x93/0xb0 [ 855.521897][ T1123] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 855.521915][ T1123] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 855.521943][ T1123] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 855.521971][ T1123] tcp_sendmsg_locked+0x4b59/0x5430 [ 855.521990][ T1123] ? tcp_sendmsg_locked+0x361/0x5430 [ 855.522004][ T1123] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 855.522034][ T1123] ? __lock_acquire+0x6b5/0x2cf0 [ 855.522074][ T1123] ? aa_sk_perm+0x15a/0x960 [ 855.522099][ T1123] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 855.522130][ T1123] ? __local_bh_enable_ip+0xd0/0x130 [ 855.522149][ T1123] tcp_sendmsg+0x2f/0x50 [ 855.522166][ T1123] __sys_sendto+0x4a7/0x7a0 [ 855.522191][ T1123] ? __pfx___sys_sendto+0x10/0x10 [ 855.522209][ T1123] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 855.522245][ T1123] ? __fget_files+0x3a0/0x420 [ 855.522274][ T1123] ? ksys_write+0x242/0x270 [ 855.522300][ T1123] ? __pfx_ksys_write+0x10/0x10 [ 855.522327][ T1123] __x64_sys_sendto+0xde/0x100 [ 855.522352][ T1123] do_syscall_64+0xe2/0xf80 [ 855.522372][ T1123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.522388][ T1123] ? trace_irq_disable+0x37/0x100 [ 855.522464][ T1123] ? clear_bhb_loop+0x60/0xb0 [ 855.522485][ T1123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.522501][ T1123] RIP: 0033:0x7f4ec779aeb9 [ 855.522517][ T1123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.522531][ T1123] RSP: 002b:00007f4ec86c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 855.522551][ T1123] RAX: ffffffffffffffda RBX: 00007f4ec7a15fa0 RCX: 00007f4ec779aeb9 [ 855.522564][ T1123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 855.522575][ T1123] RBP: 00007f4ec86c5090 R08: 00002000000001c0 R09: 000000000000001c [ 855.522586][ T1123] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 855.522598][ T1123] R13: 00007f4ec7a16038 R14: 00007f4ec7a15fa0 R15: 00007ffd6d3177c8 [ 855.522630][ T1123] [ 856.102933][ T1137] tun0: tun_chr_ioctl cmd 1074025675 [ 856.128371][ T1137] tun0: persist enabled [ 856.196845][ T1137] tun0: tun_chr_ioctl cmd 1074025675 [ 856.205707][ T1137] tun0: persist disabled [ 856.270223][ T1150] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6724'. [ 856.294917][ T1124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6717'. [ 856.388197][ T1124] bond1: entered promiscuous mode [ 856.395999][ T1124] bond1: entered allmulticast mode [ 856.425891][ T1124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 856.531151][ T1167] netlink: 'syz.1.6728': attribute type 10 has an invalid length. [ 856.587764][ T1167] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.609488][ T1167] team0: entered promiscuous mode [ 856.631083][ T1167] team_slave_0: entered promiscuous mode [ 856.650894][ T1167] team_slave_1: entered promiscuous mode [ 856.668715][ T1167] bond0: (slave team0): Enslaving as an active interface with an up link [ 856.706432][ T1177] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6732'. [ 856.812708][ T1181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6733'. [ 856.835469][ T1181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6733'. [ 856.869770][ T1185] netlink: 'syz.4.6735': attribute type 21 has an invalid length. [ 856.877787][ T1185] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6735'. [ 856.897707][ T1181] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6733'. [ 857.163570][ T1202] netlink: 'syz.0.6742': attribute type 2 has an invalid length. [ 857.171796][ T1202] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6742'. [ 857.211819][ T1197] syzkaller0: entered promiscuous mode [ 857.217765][ T1197] syzkaller0: entered allmulticast mode [ 859.170935][ T1209] netlink: 'syz.0.6746': attribute type 1 has an invalid length. [ 859.186800][ T1215] syzkaller0: entered promiscuous mode [ 859.192298][ T1215] syzkaller0: entered allmulticast mode [ 859.253895][ T1233] netlink: 'syz.3.6754': attribute type 29 has an invalid length. [ 859.272424][ T1243] bridge0: entered allmulticast mode [ 859.633602][ T1266] syzkaller0: entered promiscuous mode [ 859.652306][ T1266] syzkaller0: entered allmulticast mode [ 859.830485][ T1290] __nla_validate_parse: 3 callbacks suppressed [ 859.830504][ T1290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6773'. [ 859.862033][ T1290] erspan0: entered promiscuous mode [ 859.880718][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6768'. [ 859.901138][ T1290] erspan0: left promiscuous mode [ 859.948537][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6768'. [ 860.028511][ T1303] syzkaller0: entered promiscuous mode [ 860.034515][ T1303] syzkaller0: entered allmulticast mode [ 860.061956][ T1272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6768'. [ 860.308119][ T1320] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6778'. [ 860.644315][ T1333] sctp: [Deprecated]: syz.2.6783 (pid 1333) Use of int in maxseg socket option. [ 860.644315][ T1333] Use struct sctp_assoc_value instead [ 860.850432][ T1345] FAULT_INJECTION: forcing a failure. [ 860.850432][ T1345] name failslab, interval 1, probability 0, space 0, times 0 [ 860.917257][ T1345] CPU: 1 UID: 0 PID: 1345 Comm: syz.4.6788 Not tainted syzkaller #0 PREEMPT(full) [ 860.917290][ T1345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 860.917301][ T1345] Call Trace: [ 860.917308][ T1345] [ 860.917316][ T1345] dump_stack_lvl+0xe8/0x150 [ 860.917344][ T1345] should_fail_ex+0x412/0x560 [ 860.917370][ T1345] should_failslab+0xa8/0x100 [ 860.917391][ T1345] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 860.917415][ T1345] ? __alloc_skb+0x186/0x7d0 [ 860.917435][ T1345] ? __alloc_skb+0x1d0/0x7d0 [ 860.917452][ T1345] ? __local_bh_enable_ip+0xd0/0x130 [ 860.917474][ T1345] __alloc_skb+0x1d0/0x7d0 [ 860.917500][ T1345] alloc_skb_with_frags+0xca/0x890 [ 860.917524][ T1345] ? __lock_acquire+0x6b5/0x2cf0 [ 860.917550][ T1345] ? unwind_next_frame+0xa5/0x23c0 [ 860.917572][ T1345] sock_alloc_send_pskb+0x878/0x990 [ 860.917600][ T1345] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 860.917627][ T1345] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 860.917652][ T1345] ? dev_get_by_index+0x22/0x2e0 [ 860.917668][ T1345] ? dev_get_by_index+0x22/0x2e0 [ 860.917690][ T1345] packet_sendmsg+0x33e5/0x50f0 [ 860.917718][ T1345] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 860.917738][ T1345] ? debug_mutex_wake_waiter+0x2d0/0x310 [ 860.917787][ T1345] ? aa_sk_perm+0x15a/0x960 [ 860.917807][ T1345] ? aa_sk_perm+0x82d/0x960 [ 860.917824][ T1345] ? __pfx_packet_sendmsg+0x10/0x10 [ 860.917852][ T1345] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 860.917878][ T1345] ? aa_sock_msg_perm+0xf1/0x1b0 [ 860.917900][ T1345] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 860.917921][ T1345] __sys_sendto+0x709/0x7a0 [ 860.917944][ T1345] ? __pfx___sys_sendto+0x10/0x10 [ 860.917961][ T1345] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 860.917992][ T1345] ? __fget_files+0x3a0/0x420 [ 860.918018][ T1345] ? ksys_write+0x242/0x270 [ 860.918042][ T1345] ? __pfx_ksys_write+0x10/0x10 [ 860.918067][ T1345] __x64_sys_sendto+0xde/0x100 [ 860.918088][ T1345] do_syscall_64+0xe2/0xf80 [ 860.918108][ T1345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.918124][ T1345] ? trace_irq_disable+0x37/0x100 [ 860.918139][ T1345] ? clear_bhb_loop+0x60/0xb0 [ 860.918158][ T1345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.918174][ T1345] RIP: 0033:0x7f6c5e59aeb9 [ 860.918191][ T1345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.918206][ T1345] RSP: 002b:00007f6c5f447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 860.918225][ T1345] RAX: ffffffffffffffda RBX: 00007f6c5e815fa0 RCX: 00007f6c5e59aeb9 [ 860.918239][ T1345] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 860.918251][ T1345] RBP: 00007f6c5f447090 R08: 0000200000000200 R09: 0000000000000014 [ 860.918269][ T1345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.918281][ T1345] R13: 00007f6c5e816038 R14: 00007f6c5e815fa0 R15: 00007fffc2a48bb8 [ 860.918311][ T1345] [ 861.258166][ T1356] syzkaller0: entered promiscuous mode [ 861.281146][ T1356] syzkaller0: entered allmulticast mode [ 861.318999][ T1360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6792'. [ 861.768647][ T1384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6797'. [ 863.685426][ T1410] wg1 speed is unknown, defaulting to 1000 [ 863.721099][ T1410] ip6_vti0 speed is unknown, defaulting to 1000 [ 864.144152][ T1440] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6812'. [ 864.158887][ T1440] netlink: 'syz.3.6812': attribute type 3 has an invalid length. [ 864.169014][ T1440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6812'. [ 864.896439][ T1470] syzkaller0: entered promiscuous mode [ 864.903033][ T1470] syzkaller0: entered allmulticast mode [ 866.904189][ T1482] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 867.287565][ T1524] netlink: 'syz.2.6836': attribute type 10 has an invalid length. [ 867.295430][ T1524] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6836'. [ 867.395384][ T1530] tipc: Started in network mode [ 867.412802][ T1530] tipc: Node identity 4e1945b7f4e7, cluster identity 4711 [ 867.431869][ T1530] tipc: Enabled bearer , priority 0 [ 867.462650][ T1538] syzkaller0: entered promiscuous mode [ 867.496153][ T1538] syzkaller0: entered allmulticast mode [ 867.659924][ T1530] tipc: Resetting bearer [ 867.708051][ T1529] tipc: Resetting bearer [ 867.781297][ T1529] tipc: Disabling bearer [ 867.925146][ T1552] syzkaller0: entered promiscuous mode [ 867.930863][ T1552] syzkaller0: entered allmulticast mode [ 868.663577][ T1601] netlink: 'syz.3.6865': attribute type 1 has an invalid length. [ 868.678366][ T1601] netlink: 'syz.3.6865': attribute type 2 has an invalid length. [ 870.242059][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.249886][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.256196][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.471845][ T1627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6879'. [ 870.521372][ T1633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6880'. [ 871.436281][ T798] IPVS: starting estimator thread 0... [ 871.536720][ T1697] IPVS: using max 28 ests per chain, 67200 per kthread [ 872.048864][ T1735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6917'. [ 872.386913][ T1752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6924'. [ 872.528487][ T1761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6928'. [ 872.549579][ T1761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6928'. [ 872.583512][ T1761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6928'. [ 872.603289][ T1761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6928'. [ 873.159133][ T1812] netlink: 'syz.3.6946': attribute type 10 has an invalid length. [ 873.208016][ T1812] team0: Port device wlan1 added [ 873.377761][ T1820] netlink: 'syz.3.6949': attribute type 29 has an invalid length. [ 873.619367][ T1830] geneve2: entered promiscuous mode [ 873.850799][ T1848] netlink: 'syz.3.6959': attribute type 2 has an invalid length. [ 873.861164][ T1847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6960'. [ 874.076366][ T1863] geneve2: entered promiscuous mode [ 874.260901][ T1870] netlink: 'syz.3.6969': attribute type 5 has an invalid length. [ 875.366628][ T97] block nbd5: Possible stuck request ffff888025c48000: control (read@0,1024B). Runtime 210 seconds [ 875.379161][ T97] block nbd5: Possible stuck request ffff888025c48200: control (read@1024,1024B). Runtime 210 seconds [ 875.390561][ T97] block nbd5: Possible stuck request ffff888025c48400: control (read@2048,1024B). Runtime 210 seconds [ 875.401693][ T97] block nbd5: Possible stuck request ffff888025c48600: control (read@3072,1024B). Runtime 210 seconds [ 876.006545][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 876.014657][ C0] lec:lec_tx_timeout: lec0 [ 876.402519][ T1882] netlink: 'syz.4.6972': attribute type 10 has an invalid length. [ 876.411217][ T1882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6972'. [ 876.446728][ T1903] geneve2: entered promiscuous mode [ 876.480710][T29289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.514371][T29289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.568076][T29289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.593286][T29289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.801836][ T1929] netlink: 'syz.4.6992': attribute type 10 has an invalid length. [ 876.824709][ T1928] netlink: 'syz.0.6991': attribute type 10 has an invalid length. [ 876.840582][ T1929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6992'. [ 876.847745][ T1928] veth0_vlan: left promiscuous mode [ 876.872180][ T1928] veth0_vlan: entered promiscuous mode [ 876.901188][ T1928] team0: Device veth0_vlan failed to register rx_handler [ 876.905157][ T1934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6993'. [ 876.952094][ T1929] dummy0: entered allmulticast mode [ 876.977566][ T1929] bond0: (slave dummy0): Releasing backup interface [ 877.009018][ T1929] bridge0: port 3(dummy0) entered blocking state [ 877.043121][ T1929] bridge0: port 3(dummy0) entered disabled state [ 877.113217][ T1947] ipip0: entered promiscuous mode [ 877.132765][ T1947] ipip0: entered allmulticast mode [ 877.999177][ T1997] lo: entered allmulticast mode [ 878.027904][ T1994] lo: left allmulticast mode [ 878.832280][ T2049] xt_hashlimit: size too large, truncated to 1048576 [ 879.412763][ T2073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7042'. [ 879.447518][ T2073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7042'. [ 879.604648][ T2082] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7044'. [ 879.679866][ T2082] ksmbd: Unknown IPC event: 1, ignore. [ 880.068474][ T2118] xt_hashlimit: max too large, truncated to 1048576 [ 880.575903][T29273] bridge_slave_1: left allmulticast mode [ 880.592298][T29273] bridge_slave_1: left promiscuous mode [ 880.610173][T29273] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.642455][T29273] bridge_slave_0: left allmulticast mode [ 880.655096][T29273] bridge_slave_0: left promiscuous mode [ 880.669144][T29273] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.083582][T29273] ip6gretap0 (unregistering): left promiscuous mode [ 881.256329][T29273] gretap0 (unregistering): left promiscuous mode [ 881.435066][T29273] bridge0 (unregistering): left promiscuous mode [ 881.751732][T29273] bond0 (unregistering): left promiscuous mode [ 881.774848][T29273] : left promiscuous mode [ 881.780691][T29273] bond_slave_1: left promiscuous mode [ 881.788823][T29273] bond1 (unregistering): left promiscuous mode [ 881.802281][T29273] bond0 (unregistering): (slave 30): Releasing backup interface [ 881.813425][T29273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.824859][T29273] bond0 (unregistering): (slave bond1): Releasing backup interface [ 881.834013][T29273] bond0 (unregistering): Released all slaves [ 881.958470][T29273] bond1 (unregistering): Released all slaves [ 881.980547][T29273] bond2 (unregistering): Released all slaves [ 882.111523][T29273] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 882.122182][T29273] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 882.132594][T29273] bond3 (unregistering): Released all slaves [ 882.145342][T29273] bond4 (unregistering): Released all slaves [ 882.346927][T29273] tipc: Disabling bearer [ 882.383026][T29273] tipc: Left network mode [ 883.133691][ T2237] xt_hashlimit: size too large, truncated to 1048576 [ 883.749733][ T2258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7107'. [ 884.487995][T29273] team0: left promiscuous mode [ 884.492812][T29273] team_slave_0: left promiscuous mode [ 884.512801][T29273] team_slave_1: left promiscuous mode [ 884.562813][T29273] hsr_slave_0: left promiscuous mode [ 884.566109][ T2290] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7117'. [ 884.587766][T29273] hsr_slave_1: left promiscuous mode [ 884.607713][T29273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.653987][T29273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.730456][T29273] veth1_macvtap: left promiscuous mode [ 884.748289][T29273] veth0_macvtap: left promiscuous mode [ 884.767328][T29273] veth1_vlan: left promiscuous mode [ 884.786402][T29273] veth0_vlan: left promiscuous mode [ 885.320022][T29273] pimreg3 (unregistering): left allmulticast mode [ 886.256224][ T2336] xt_hashlimit: size too large, truncated to 1048576 [ 887.147923][T29273] team0 (unregistering): Port device team_slave_1 removed [ 887.280046][T29273] team0 (unregistering): Port device team_slave_0 removed [ 887.938281][ T2290] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.952615][ T2290] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7117'. [ 887.962414][ T2290] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 887.983914][ T2333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7132'. [ 888.274860][ T2357] bond2: option lacp_active: invalid value (69) [ 888.289486][ T2357] bond2 (unregistering): Released all slaves [ 888.332831][ T2353] netlink: 'syz.3.7140': attribute type 2 has an invalid length. [ 888.393257][T18994] lec:lec_start_xmit: lec0:No lecd attached [ 888.798334][T29273] IPVS: stop unused estimator thread 0... [ 888.810003][ T2390] macvlan1: entered promiscuous mode [ 888.937521][ T2390] macvlan1 (unregistering): left promiscuous mode [ 890.057404][ T2479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 890.064658][ T2479] IPv6: NLM_F_CREATE should be set when creating new route [ 890.909333][ T2543] ip6gre1: entered promiscuous mode [ 890.922394][ T2543] ip6gre1: entered allmulticast mode [ 891.323208][ T2577] xt_hashlimit: size too large, truncated to 1048576 [ 891.350411][ T2580] netlink: 284 bytes leftover after parsing attributes in process `syz.4.7201'. [ 891.522234][ T2591] xt_hashlimit: size too large, truncated to 1048576 [ 891.854338][ T2611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7208'. [ 892.027489][ T2627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7212'. [ 892.046638][ T2627] : renamed from team0 [ 892.059662][ T2627] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 892.612785][ T2665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7224'. [ 892.648504][ T2665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7224'. [ 892.835994][ T2675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7227'. [ 893.552943][ T2709] syzkaller0: entered promiscuous mode [ 893.562927][ T2709] syzkaller0: entered allmulticast mode [ 893.996641][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 894.004768][ C0] lec:lec_tx_timeout: lec0 [ 896.419524][ T2794] syzkaller0: entered promiscuous mode [ 896.435356][ T2794] syzkaller0: entered allmulticast mode [ 897.899911][ T2882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7287'. [ 899.475637][ T2887] bond0: (slave bond_slave_0): Releasing backup interface [ 900.214791][ T2958] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7313'. [ 900.545625][ T2974] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7318'. [ 900.944145][ T3003] xt_hashlimit: size too large, truncated to 1048576 [ 900.968242][ T3003] xt_hashlimit: max too large, truncated to 1048576 [ 900.981735][ T3003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 900.989012][ T3003] IPv6: NLM_F_CREATE should be set when creating new route [ 901.165611][ T3020] netlink: 460 bytes leftover after parsing attributes in process `syz.2.7336'. [ 901.620085][ T3043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7344'. [ 901.779778][ T3054] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7349'. [ 901.828621][ T3054] wlan1: mtu less than device minimum [ 901.840294][ T3054] team0: Device wlan1 failed to change mtu [ 902.419019][ T3096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7365'. [ 902.466047][ T3096] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7365'. [ 902.707205][ T3112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7371'. [ 902.745437][ T3112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7371'. [ 902.846124][ T3121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 902.853450][ T3121] IPv6: NLM_F_CREATE should be set when creating new route [ 903.471661][ T3163] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 904.533407][ T3211] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7401'. [ 904.591274][ T3205] syzkaller0: entered promiscuous mode [ 904.607404][ T3205] syzkaller0: entered allmulticast mode [ 905.446694][ T97] block nbd5: Possible stuck request ffff888025c48000: control (read@0,1024B). Runtime 240 seconds [ 905.458044][ T97] block nbd5: Possible stuck request ffff888025c48200: control (read@1024,1024B). Runtime 240 seconds [ 905.464957][ T3249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7409'. [ 905.469397][ T97] block nbd5: Possible stuck request ffff888025c48400: control (read@2048,1024B). Runtime 240 seconds [ 905.469429][ T97] block nbd5: Possible stuck request ffff888025c48600: control (read@3072,1024B). Runtime 240 seconds [ 907.178429][ T3279] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7418'. [ 907.244813][ T3279] gretap0: entered promiscuous mode [ 907.537388][ T3292] syzkaller0: entered promiscuous mode [ 907.542904][ T3292] syzkaller0: entered allmulticast mode [ 909.968168][ T3357] syzkaller0: entered promiscuous mode [ 909.973696][ T3357] syzkaller0: entered allmulticast mode [ 910.229553][ T3382] netlink: 'syz.2.7452': attribute type 2 has an invalid length. [ 910.466116][ T3410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7456'. [ 911.795384][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7474'. [ 911.831302][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7474'. [ 911.867322][ T3472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7474'. [ 913.269157][ T3550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7500'. [ 913.325152][ T3551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7500'. [ 913.671917][ T3565] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7504'. [ 915.819318][ T3611] xt_hashlimit: size too large, truncated to 1048576 [ 916.217981][ T3639] syzkaller0: entered promiscuous mode [ 916.223942][ T3639] syzkaller0: entered allmulticast mode [ 916.990752][ T3682] syzkaller0: entered promiscuous mode [ 916.996275][ T3682] syzkaller0: entered allmulticast mode [ 917.349891][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7558'. [ 917.554499][ T3722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7562'. [ 920.042735][ T3790] syzkaller0: entered promiscuous mode [ 920.056707][ T3790] syzkaller0: entered allmulticast mode [ 920.901429][ T3852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7598'. [ 921.389699][ T3882] netlink: 'syz.3.7609': attribute type 3 has an invalid length. [ 921.630759][ T3903] syzkaller0: entered promiscuous mode [ 921.656332][ T3903] syzkaller0: entered allmulticast mode [ 921.704048][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7616'. [ 921.780311][ T3906] team0 (unregistering): Port device team_slave_0 removed [ 921.831220][ T3906] team0 (unregistering): Port device team_slave_1 removed [ 923.308197][ T4008] FAULT_INJECTION: forcing a failure. [ 923.308197][ T4008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.327582][ T4008] CPU: 1 UID: 0 PID: 4008 Comm: syz.1.7644 Not tainted syzkaller #0 PREEMPT(full) [ 923.327607][ T4008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 923.327618][ T4008] Call Trace: [ 923.327624][ T4008] [ 923.327631][ T4008] dump_stack_lvl+0xe8/0x150 [ 923.327659][ T4008] should_fail_ex+0x412/0x560 [ 923.327684][ T4008] _copy_from_user+0x2d/0xb0 [ 923.327707][ T4008] ___sys_sendmsg+0x1c6/0x360 [ 923.327735][ T4008] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.327776][ T4008] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.327821][ T4008] __sys_sendmmsg+0x27c/0x4e0 [ 923.327848][ T4008] ? __pfx___sys_sendmmsg+0x10/0x10 [ 923.327867][ T4008] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 923.327919][ T4008] ? ksys_write+0x242/0x270 [ 923.327943][ T4008] ? __pfx_ksys_write+0x10/0x10 [ 923.327971][ T4008] __x64_sys_sendmmsg+0xa0/0xc0 [ 923.327994][ T4008] do_syscall_64+0xe2/0xf80 [ 923.328015][ T4008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.328031][ T4008] ? trace_irq_disable+0x37/0x100 [ 923.328047][ T4008] ? clear_bhb_loop+0x60/0xb0 [ 923.328066][ T4008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.328081][ T4008] RIP: 0033:0x7f4ec779aeb9 [ 923.328097][ T4008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.328111][ T4008] RSP: 002b:00007f4ec86c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 923.328130][ T4008] RAX: ffffffffffffffda RBX: 00007f4ec7a15fa0 RCX: 00007f4ec779aeb9 [ 923.328142][ T4008] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 923.328153][ T4008] RBP: 00007f4ec86c5090 R08: 0000000000000000 R09: 0000000000000000 [ 923.328162][ T4008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.328171][ T4008] R13: 00007f4ec7a16038 R14: 00007f4ec7a15fa0 R15: 00007ffd6d3177c8 [ 923.328199][ T4008] [ 923.576752][ T4017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7645'. [ 923.585787][ T4017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7645'. [ 924.118334][ T4051] FAULT_INJECTION: forcing a failure. [ 924.118334][ T4051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.191597][ T4051] CPU: 0 UID: 0 PID: 4051 Comm: syz.4.7658 Not tainted syzkaller #0 PREEMPT(full) [ 924.191625][ T4051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 924.191637][ T4051] Call Trace: [ 924.191644][ T4051] [ 924.191652][ T4051] dump_stack_lvl+0xe8/0x150 [ 924.191679][ T4051] should_fail_ex+0x412/0x560 [ 924.191704][ T4051] _copy_from_user+0x2d/0xb0 [ 924.191729][ T4051] __sys_bpf+0x229/0x920 [ 924.191749][ T4051] ? __pfx___sys_bpf+0x10/0x10 [ 924.191782][ T4051] ? ksys_write+0x242/0x270 [ 924.191809][ T4051] ? __pfx_ksys_write+0x10/0x10 [ 924.191838][ T4051] __x64_sys_bpf+0x7c/0x90 [ 924.191871][ T4051] do_syscall_64+0xe2/0xf80 [ 924.191892][ T4051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.191909][ T4051] ? trace_irq_disable+0x37/0x100 [ 924.191926][ T4051] ? clear_bhb_loop+0x60/0xb0 [ 924.191945][ T4051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.191962][ T4051] RIP: 0033:0x7f6c5e59aeb9 [ 924.191979][ T4051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.191994][ T4051] RSP: 002b:00007f6c5f447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 924.192014][ T4051] RAX: ffffffffffffffda RBX: 00007f6c5e815fa0 RCX: 00007f6c5e59aeb9 [ 924.192027][ T4051] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 924.192037][ T4051] RBP: 00007f6c5f447090 R08: 0000000000000000 R09: 0000000000000000 [ 924.192046][ T4051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.192057][ T4051] R13: 00007f6c5e816038 R14: 00007f6c5e815fa0 R15: 00007fffc2a48bb8 [ 924.192086][ T4051] [ 924.706663][ T4078] syzkaller0: entered promiscuous mode [ 924.724572][ T4078] syzkaller0: entered allmulticast mode [ 924.962370][ T4091] FAULT_INJECTION: forcing a failure. [ 924.962370][ T4091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.012586][ T4091] CPU: 0 UID: 0 PID: 4091 Comm: syz.2.7669 Not tainted syzkaller #0 PREEMPT(full) [ 925.012611][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 925.012623][ T4091] Call Trace: [ 925.012631][ T4091] [ 925.012640][ T4091] dump_stack_lvl+0xe8/0x150 [ 925.012667][ T4091] should_fail_ex+0x412/0x560 [ 925.012693][ T4091] _copy_from_user+0x2d/0xb0 [ 925.012718][ T4091] ___sys_sendmsg+0x1c6/0x360 [ 925.012740][ T4091] ? __lock_acquire+0x6b5/0x2cf0 [ 925.012767][ T4091] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.012830][ T4091] ? __fget_files+0x2a/0x420 [ 925.012848][ T4091] ? __fget_files+0x3a0/0x420 [ 925.012877][ T4091] __x64_sys_sendmsg+0x1bd/0x2a0 [ 925.012902][ T4091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 925.012933][ T4091] ? __pfx_ksys_write+0x10/0x10 [ 925.012968][ T4091] do_syscall_64+0xe2/0xf80 [ 925.012989][ T4091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.013006][ T4091] ? clear_bhb_loop+0x60/0xb0 [ 925.013027][ T4091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.013044][ T4091] RIP: 0033:0x7f4dc879aeb9 [ 925.013061][ T4091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.013076][ T4091] RSP: 002b:00007f4dc959c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.013095][ T4091] RAX: ffffffffffffffda RBX: 00007f4dc8a15fa0 RCX: 00007f4dc879aeb9 [ 925.013108][ T4091] RDX: 0000000000000000 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 925.013119][ T4091] RBP: 00007f4dc959c090 R08: 0000000000000000 R09: 0000000000000000 [ 925.013131][ T4091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.013141][ T4091] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 925.013172][ T4091] [ 925.689453][ T4120] FAULT_INJECTION: forcing a failure. [ 925.689453][ T4120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.736057][ T4120] CPU: 0 UID: 0 PID: 4120 Comm: syz.1.7678 Not tainted syzkaller #0 PREEMPT(full) [ 925.736084][ T4120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 925.736095][ T4120] Call Trace: [ 925.736103][ T4120] [ 925.736111][ T4120] dump_stack_lvl+0xe8/0x150 [ 925.736137][ T4120] should_fail_ex+0x412/0x560 [ 925.736162][ T4120] _copy_from_user+0x2d/0xb0 [ 925.736186][ T4120] ___sys_recvmsg+0x175/0x590 [ 925.736215][ T4120] ? __pfx____sys_recvmsg+0x10/0x10 [ 925.736241][ T4120] ? __fget_files+0x2a/0x420 [ 925.736277][ T4120] ? __fget_files+0x3a0/0x420 [ 925.736305][ T4120] do_recvmmsg+0x334/0x800 [ 925.736336][ T4120] ? __pfx_do_recvmmsg+0x10/0x10 [ 925.736370][ T4120] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 925.736409][ T4120] __x64_sys_recvmmsg+0x198/0x250 [ 925.736438][ T4120] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 925.736467][ T4120] do_syscall_64+0xe2/0xf80 [ 925.736486][ T4120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.736508][ T4120] ? trace_irq_disable+0x37/0x100 [ 925.736522][ T4120] ? clear_bhb_loop+0x60/0xb0 [ 925.736542][ T4120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.736557][ T4120] RIP: 0033:0x7f4ec779aeb9 [ 925.736573][ T4120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.736587][ T4120] RSP: 002b:00007f4ec86c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 925.736607][ T4120] RAX: ffffffffffffffda RBX: 00007f4ec7a15fa0 RCX: 00007f4ec779aeb9 [ 925.736620][ T4120] RDX: 0000000000000001 RSI: 0000200000002480 RDI: 0000000000000003 [ 925.736631][ T4120] RBP: 00007f4ec86c5090 R08: 0000000000000000 R09: 0000000000000000 [ 925.736642][ T4120] R10: 0000000040002003 R11: 0000000000000246 R12: 0000000000000001 [ 925.736653][ T4120] R13: 00007f4ec7a16038 R14: 00007f4ec7a15fa0 R15: 00007ffd6d3177c8 [ 925.736680][ T4120] [ 926.534030][ T4163] FAULT_INJECTION: forcing a failure. [ 926.534030][ T4163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.633398][ T4163] CPU: 0 UID: 0 PID: 4163 Comm: syz.2.7689 Not tainted syzkaller #0 PREEMPT(full) [ 926.633422][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 926.633440][ T4163] Call Trace: [ 926.633447][ T4163] [ 926.633454][ T4163] dump_stack_lvl+0xe8/0x150 [ 926.633480][ T4163] should_fail_ex+0x412/0x560 [ 926.633503][ T4163] _copy_from_user+0x2d/0xb0 [ 926.633527][ T4163] __sys_sendto+0x2af/0x7a0 [ 926.633549][ T4163] ? __pfx___sys_sendto+0x10/0x10 [ 926.633568][ T4163] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 926.633601][ T4163] ? __fget_files+0x3a0/0x420 [ 926.633625][ T4163] ? ksys_write+0x242/0x270 [ 926.633650][ T4163] ? __pfx_ksys_write+0x10/0x10 [ 926.633676][ T4163] __x64_sys_sendto+0xde/0x100 [ 926.633699][ T4163] do_syscall_64+0xe2/0xf80 [ 926.633717][ T4163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.633731][ T4163] ? trace_irq_disable+0x37/0x100 [ 926.633746][ T4163] ? clear_bhb_loop+0x60/0xb0 [ 926.633765][ T4163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.633781][ T4163] RIP: 0033:0x7f4dc879aeb9 [ 926.633796][ T4163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.633809][ T4163] RSP: 002b:00007f4dc959c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 926.633828][ T4163] RAX: ffffffffffffffda RBX: 00007f4dc8a15fa0 RCX: 00007f4dc879aeb9 [ 926.633840][ T4163] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 926.633850][ T4163] RBP: 00007f4dc959c090 R08: 0000200000000100 R09: 000000000000001c [ 926.633862][ T4163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.633872][ T4163] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 926.633901][ T4163] [ 927.209306][ T4178] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7693'. [ 927.674947][ T4199] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7700'. [ 927.845044][ T4211] FAULT_INJECTION: forcing a failure. [ 927.845044][ T4211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.862591][ T4211] CPU: 1 UID: 0 PID: 4211 Comm: syz.4.7703 Not tainted syzkaller #0 PREEMPT(full) [ 927.862618][ T4211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 927.862629][ T4211] Call Trace: [ 927.862644][ T4211] [ 927.862652][ T4211] dump_stack_lvl+0xe8/0x150 [ 927.862679][ T4211] should_fail_ex+0x412/0x560 [ 927.862706][ T4211] _copy_from_iter+0x1d3/0x1670 [ 927.862729][ T4211] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 927.862760][ T4211] ? __pfx__copy_from_iter+0x10/0x10 [ 927.862785][ T4211] ? packet_cached_dev_get+0x1c/0x2b0 [ 927.862803][ T4211] ? packet_cached_dev_get+0x1c/0x2b0 [ 927.862825][ T4211] packet_sendmsg+0x30b2/0x50f0 [ 927.862855][ T4211] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 927.862877][ T4211] ? __lock_acquire+0x6b5/0x2cf0 [ 927.862908][ T4211] ? unwind_next_frame+0xa5/0x23c0 [ 927.862943][ T4211] ? aa_sk_perm+0x15a/0x960 [ 927.862964][ T4211] ? aa_sk_perm+0x82d/0x960 [ 927.862981][ T4211] ? __pfx_packet_sendmsg+0x10/0x10 [ 927.863011][ T4211] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 927.863039][ T4211] ? aa_sock_msg_perm+0xf1/0x1b0 [ 927.863061][ T4211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 927.863080][ T4211] ? __pfx_packet_sendmsg+0x10/0x10 [ 927.863100][ T4211] ____sys_sendmsg+0xa68/0xad0 [ 927.863122][ T4211] ? __might_fault+0xaf/0x130 [ 927.863150][ T4211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 927.863179][ T4211] ? import_iovec+0x73/0xa0 [ 927.863204][ T4211] ___sys_sendmsg+0x2a5/0x360 [ 927.863224][ T4211] ? __lock_acquire+0x6b5/0x2cf0 [ 927.863250][ T4211] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.863303][ T4211] ? __fget_files+0x2a/0x420 [ 927.863321][ T4211] ? __fget_files+0x3a0/0x420 [ 927.863349][ T4211] __x64_sys_sendmsg+0x1bd/0x2a0 [ 927.863373][ T4211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 927.863403][ T4211] ? __pfx_ksys_write+0x10/0x10 [ 927.863438][ T4211] do_syscall_64+0xe2/0xf80 [ 927.863459][ T4211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.863475][ T4211] ? trace_irq_disable+0x37/0x100 [ 927.863491][ T4211] ? clear_bhb_loop+0x60/0xb0 [ 927.863512][ T4211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.863529][ T4211] RIP: 0033:0x7f6c5e59aeb9 [ 927.863546][ T4211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.863561][ T4211] RSP: 002b:00007f6c5f447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.863584][ T4211] RAX: ffffffffffffffda RBX: 00007f6c5e815fa0 RCX: 00007f6c5e59aeb9 [ 927.863598][ T4211] RDX: 0000000000000000 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 927.863609][ T4211] RBP: 00007f6c5f447090 R08: 0000000000000000 R09: 0000000000000000 [ 927.863621][ T4211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.863631][ T4211] R13: 00007f6c5e816038 R14: 00007f6c5e815fa0 R15: 00007fffc2a48bb8 [ 927.863668][ T4211] [ 928.176414][ T4215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.363157][ T4225] FAULT_INJECTION: forcing a failure. [ 928.363157][ T4225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.382438][ T4225] CPU: 0 UID: 0 PID: 4225 Comm: syz.4.7709 Not tainted syzkaller #0 PREEMPT(full) [ 928.382463][ T4225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 928.382475][ T4225] Call Trace: [ 928.382483][ T4225] [ 928.382491][ T4225] dump_stack_lvl+0xe8/0x150 [ 928.382519][ T4225] should_fail_ex+0x412/0x560 [ 928.382545][ T4225] _copy_from_user+0x2d/0xb0 [ 928.382578][ T4225] __copy_msghdr+0x3c5/0x5b0 [ 928.382605][ T4225] ___sys_sendmsg+0x213/0x360 [ 928.382625][ T4225] ? __lock_acquire+0x6b5/0x2cf0 [ 928.382652][ T4225] ? __pfx____sys_sendmsg+0x10/0x10 [ 928.382700][ T4225] ? kstrtouint+0x6e/0xe0 [ 928.382746][ T4225] ? __fget_files+0x2a/0x420 [ 928.382764][ T4225] ? __fget_files+0x3a0/0x420 [ 928.382793][ T4225] __sys_sendmmsg+0x27c/0x4e0 [ 928.382820][ T4225] ? __pfx___sys_sendmmsg+0x10/0x10 [ 928.382840][ T4225] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 928.382887][ T4225] ? ksys_write+0x242/0x270 [ 928.382912][ T4225] ? __pfx_ksys_write+0x10/0x10 [ 928.382941][ T4225] __x64_sys_sendmmsg+0xa0/0xc0 [ 928.382965][ T4225] do_syscall_64+0xe2/0xf80 [ 928.382987][ T4225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.383003][ T4225] ? trace_irq_disable+0x37/0x100 [ 928.383020][ T4225] ? clear_bhb_loop+0x60/0xb0 [ 928.383040][ T4225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.383057][ T4225] RIP: 0033:0x7f6c5e59aeb9 [ 928.383074][ T4225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.383089][ T4225] RSP: 002b:00007f6c5f447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 928.383108][ T4225] RAX: ffffffffffffffda RBX: 00007f6c5e815fa0 RCX: 00007f6c5e59aeb9 [ 928.383122][ T4225] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000003 [ 928.383134][ T4225] RBP: 00007f6c5f447090 R08: 0000000000000000 R09: 0000000000000000 [ 928.383146][ T4225] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 928.383157][ T4225] R13: 00007f6c5e816038 R14: 00007f6c5e815fa0 R15: 00007fffc2a48bb8 [ 928.383187][ T4225] [ 928.653238][ T4227] wg1 speed is unknown, defaulting to 1000 [ 928.781683][ T4227] ip6_vti0 speed is unknown, defaulting to 1000 [ 928.919444][ T4246] FAULT_INJECTION: forcing a failure. [ 928.919444][ T4246] name failslab, interval 1, probability 0, space 0, times 0 [ 928.990196][ T4246] CPU: 0 UID: 0 PID: 4246 Comm: syz.3.7715 Not tainted syzkaller #0 PREEMPT(full) [ 928.990222][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 928.990234][ T4246] Call Trace: [ 928.990241][ T4246] [ 928.990250][ T4246] dump_stack_lvl+0xe8/0x150 [ 928.990281][ T4246] should_fail_ex+0x412/0x560 [ 928.990307][ T4246] should_failslab+0xa8/0x100 [ 928.990328][ T4246] __kmalloc_noprof+0xde/0x7e0 [ 928.990344][ T4246] ? bpf_test_init+0x9f/0x150 [ 928.990368][ T4246] bpf_test_init+0x9f/0x150 [ 928.990390][ T4246] bpf_prog_test_run_skb+0x36f/0x1c90 [ 928.990422][ T4246] ? __fget_files+0x2a/0x420 [ 928.990439][ T4246] ? __fget_files+0x3a0/0x420 [ 928.990463][ T4246] ? __fget_files+0x2a/0x420 [ 928.990486][ T4246] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 928.990507][ T4246] bpf_prog_test_run+0x2c7/0x340 [ 928.990529][ T4246] __sys_bpf+0x5cb/0x920 [ 928.990550][ T4246] ? __pfx___sys_bpf+0x10/0x10 [ 928.990584][ T4246] ? ksys_write+0x242/0x270 [ 928.990608][ T4246] ? __pfx_ksys_write+0x10/0x10 [ 928.990638][ T4246] __x64_sys_bpf+0x7c/0x90 [ 928.990662][ T4246] do_syscall_64+0xe2/0xf80 [ 928.990684][ T4246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.990700][ T4246] ? trace_irq_disable+0x37/0x100 [ 928.990717][ T4246] ? clear_bhb_loop+0x60/0xb0 [ 928.990737][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.990754][ T4246] RIP: 0033:0x7f324839aeb9 [ 928.990772][ T4246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.990786][ T4246] RSP: 002b:00007f32465f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 928.990806][ T4246] RAX: ffffffffffffffda RBX: 00007f3248615fa0 RCX: 00007f324839aeb9 [ 928.990819][ T4246] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 928.990831][ T4246] RBP: 00007f32465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 928.990842][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.990853][ T4246] R13: 00007f3248616038 R14: 00007f3248615fa0 R15: 00007ffcad7c7bb8 [ 928.990883][ T4246] [ 929.377619][ T4265] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.818743][ T4287] netlink: 320 bytes leftover after parsing attributes in process `syz.4.7726'. [ 929.899898][ T4296] FAULT_INJECTION: forcing a failure. [ 929.899898][ T4296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.915003][ T4296] CPU: 1 UID: 0 PID: 4296 Comm: syz.2.7728 Not tainted syzkaller #0 PREEMPT(full) [ 929.915026][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 929.915035][ T4296] Call Trace: [ 929.915042][ T4296] [ 929.915050][ T4296] dump_stack_lvl+0xe8/0x150 [ 929.915073][ T4296] should_fail_ex+0x412/0x560 [ 929.915094][ T4296] _copy_from_iter+0x1d3/0x1670 [ 929.915113][ T4296] ? __pfx_policy_nodemask+0x10/0x10 [ 929.915137][ T4296] ? __pfx__copy_from_iter+0x10/0x10 [ 929.915154][ T4296] ? set_page_refcounted+0xa0/0x1e0 [ 929.915183][ T4296] ? __sk_mem_schedule+0x7f/0xf0 [ 929.915202][ T4296] ? skb_page_frag_refill+0x199/0x310 [ 929.915224][ T4296] mptcp_sendmsg+0xd86/0x19d0 [ 929.915270][ T4296] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 929.915289][ T4296] ? __pfx_aa_file_perm+0x10/0x10 [ 929.915307][ T4296] ? sock_rps_record_flow+0x19/0x400 [ 929.915334][ T4296] ? inet_sendmsg+0x2f4/0x370 [ 929.915355][ T4296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 929.915377][ T4296] sock_write_iter+0x421/0x550 [ 929.915397][ T4296] ? __pfx_sock_write_iter+0x10/0x10 [ 929.915424][ T4296] ? bpf_lsm_file_permission+0x9/0x20 [ 929.915441][ T4296] ? security_file_permission+0x75/0x260 [ 929.915467][ T4296] vfs_write+0x61d/0xb90 [ 929.915500][ T4296] ? __pfx_vfs_write+0x10/0x10 [ 929.915532][ T4296] ? __fget_files+0x2a/0x420 [ 929.915560][ T4296] ksys_write+0x150/0x270 [ 929.915585][ T4296] ? __pfx_ksys_write+0x10/0x10 [ 929.915618][ T4296] do_syscall_64+0xe2/0xf80 [ 929.915639][ T4296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.915656][ T4296] ? trace_irq_disable+0x37/0x100 [ 929.915672][ T4296] ? clear_bhb_loop+0x60/0xb0 [ 929.915693][ T4296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.915709][ T4296] RIP: 0033:0x7f4dc879aeb9 [ 929.915727][ T4296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.915741][ T4296] RSP: 002b:00007f4dc959c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 929.915760][ T4296] RAX: ffffffffffffffda RBX: 00007f4dc8a15fa0 RCX: 00007f4dc879aeb9 [ 929.915773][ T4296] RDX: 000000011ffffce1 RSI: 0000200000000080 RDI: 0000000000000003 [ 929.915785][ T4296] RBP: 00007f4dc959c090 R08: 0000000000000000 R09: 0000000000000000 [ 929.915796][ T4296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.915806][ T4296] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 929.915838][ T4296] [ 930.368412][ T4303] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7731'. [ 930.678147][ T4327] FAULT_INJECTION: forcing a failure. [ 930.678147][ T4327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.735601][ T4327] CPU: 0 UID: 0 PID: 4327 Comm: syz.0.7736 Not tainted syzkaller #0 PREEMPT(full) [ 930.735627][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 930.735638][ T4327] Call Trace: [ 930.735647][ T4327] [ 930.735655][ T4327] dump_stack_lvl+0xe8/0x150 [ 930.735682][ T4327] should_fail_ex+0x412/0x560 [ 930.735709][ T4327] _copy_to_user+0x31/0xb0 [ 930.735735][ T4327] simple_read_from_buffer+0xe1/0x170 [ 930.735759][ T4327] proc_fail_nth_read+0x1bb/0x230 [ 930.735785][ T4327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 930.735810][ T4327] ? rw_verify_area+0x2a6/0x4d0 [ 930.735832][ T4327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 930.735856][ T4327] vfs_read+0x20c/0xa70 [ 930.735876][ T4327] ? fdget_pos+0x246/0x320 [ 930.735899][ T4327] ? __pfx___mutex_lock+0x10/0x10 [ 930.735922][ T4327] ? __pfx_vfs_read+0x10/0x10 [ 930.735945][ T4327] ? __fget_files+0x2a/0x420 [ 930.735968][ T4327] ? __fget_files+0x3a0/0x420 [ 930.735985][ T4327] ? __fget_files+0x2a/0x420 [ 930.736013][ T4327] ksys_read+0x150/0x270 [ 930.736038][ T4327] ? __pfx_ksys_read+0x10/0x10 [ 930.736071][ T4327] do_syscall_64+0xe2/0xf80 [ 930.736091][ T4327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.736107][ T4327] ? trace_irq_disable+0x37/0x100 [ 930.736122][ T4327] ? clear_bhb_loop+0x60/0xb0 [ 930.736152][ T4327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.736170][ T4327] RIP: 0033:0x7f6e5315b78e [ 930.736186][ T4327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 930.736201][ T4327] RSP: 002b:00007f6e540f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 930.736220][ T4327] RAX: ffffffffffffffda RBX: 00007f6e540f86c0 RCX: 00007f6e5315b78e [ 930.736233][ T4327] RDX: 000000000000000f RSI: 00007f6e540f80a0 RDI: 0000000000000004 [ 930.736245][ T4327] RBP: 00007f6e540f8090 R08: 0000000000000000 R09: 0000000000000000 [ 930.736256][ T4327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.736267][ T4327] R13: 00007f6e53416038 R14: 00007f6e53415fa0 R15: 00007ffd7df0d2c8 [ 930.736297][ T4327] [ 931.031428][ T4337] FAULT_INJECTION: forcing a failure. [ 931.031428][ T4337] name failslab, interval 1, probability 0, space 0, times 0 [ 931.066598][ T4337] CPU: 0 UID: 0 PID: 4337 Comm: syz.4.7738 Not tainted syzkaller #0 PREEMPT(full) [ 931.066624][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 931.066633][ T4337] Call Trace: [ 931.066640][ T4337] [ 931.066647][ T4337] dump_stack_lvl+0xe8/0x150 [ 931.066669][ T4337] should_fail_ex+0x412/0x560 [ 931.066690][ T4337] should_failslab+0xa8/0x100 [ 931.066707][ T4337] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 931.066727][ T4337] ? __alloc_skb+0x1d0/0x7d0 [ 931.066742][ T4337] ? __local_bh_enable_ip+0xd0/0x130 [ 931.066759][ T4337] __alloc_skb+0x1d0/0x7d0 [ 931.066774][ T4337] ? unwind_next_frame+0xa5/0x23c0 [ 931.066791][ T4337] _sctp_make_chunk+0x59/0x290 [ 931.066811][ T4337] sctp_make_heartbeat+0xc5/0x4c0 [ 931.066828][ T4337] ? is_bpf_text_address+0x26/0x2b0 [ 931.066846][ T4337] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 931.066866][ T4337] ? is_bpf_text_address+0x26/0x2b0 [ 931.066888][ T4337] sctp_sf_do_prm_requestheartbeat+0x32/0x280 [ 931.066911][ T4337] sctp_do_sm+0x238/0x5cf0 [ 931.066924][ T4337] ? __pfx_sctp_pname+0x10/0x10 [ 931.066937][ T4337] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 931.066953][ T4337] ? arch_stack_walk+0xfb/0x150 [ 931.066977][ T4337] ? __pfx_sctp_do_sm+0x10/0x10 [ 931.066988][ T4337] ? __lock_acquire+0x6b5/0x2cf0 [ 931.067035][ T4337] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 931.067053][ T4337] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 931.067069][ T4337] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 931.067088][ T4337] ? sctp_v6_addr_to_user+0x217/0x420 [ 931.067107][ T4337] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 931.067137][ T4337] sctp_apply_peer_addr_params+0xdf/0x1880 [ 931.067151][ T4337] ? __pfx_sctp_addr_id2transport+0x10/0x10 [ 931.067174][ T4337] sctp_setsockopt_peer_addr_params+0x5e5/0x940 [ 931.067202][ T4337] sctp_setsockopt+0x752/0x12c0 [ 931.067219][ T4337] ? sock_common_setsockopt+0x36/0xc0 [ 931.067233][ T4337] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 931.067249][ T4337] do_sock_setsockopt+0x17c/0x1b0 [ 931.067270][ T4337] __x64_sys_setsockopt+0x13d/0x1b0 [ 931.067291][ T4337] do_syscall_64+0xe2/0xf80 [ 931.067308][ T4337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.067320][ T4337] ? trace_irq_disable+0x37/0x100 [ 931.067333][ T4337] ? clear_bhb_loop+0x60/0xb0 [ 931.067349][ T4337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.067362][ T4337] RIP: 0033:0x7f6c5e59aeb9 [ 931.067376][ T4337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.067388][ T4337] RSP: 002b:00007f6c5f426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 931.067403][ T4337] RAX: ffffffffffffffda RBX: 00007f6c5e816090 RCX: 00007f6c5e59aeb9 [ 931.067413][ T4337] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 931.067422][ T4337] RBP: 00007f6c5f426090 R08: 000000000000009c R09: 0000000000000000 [ 931.067431][ T4337] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 931.067439][ T4337] R13: 00007f6c5e816128 R14: 00007f6c5e816090 R15: 00007fffc2a48bb8 [ 931.067463][ T4337] [ 931.415278][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7742'. [ 931.430932][ T4341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7739'. [ 931.532044][ T4344] dummy0: entered promiscuous mode [ 931.561163][ T4344] macvtap1: entered promiscuous mode [ 931.571504][ T4344] macvtap1: entered allmulticast mode [ 931.577123][ T4344] dummy0: entered allmulticast mode [ 931.691358][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.700476][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.710396][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 931.751866][ T4365] geneve2: entered promiscuous mode [ 931.955496][ T4377] wg1 speed is unknown, defaulting to 1000 [ 931.967584][ T4377] ip6_vti0 speed is unknown, defaulting to 1000 [ 932.021714][ T4380] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 932.035390][ T4380] bond2 (unregistering): Released all slaves [ 932.291733][ T4390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7753'. [ 932.377871][ T4395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7753'. [ 932.543137][ T4403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 933.120471][ T4429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7764'. [ 933.287480][ T4433] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.486177][ T4433] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.662719][ T4433] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.756928][ T4463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7773'. [ 933.901747][ T4433] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.958030][ T129] IPVS: starting estimator thread 0... [ 933.971012][ T4471] ipvlan3: entered allmulticast mode [ 933.976592][ T4471] veth0_vlan: entered allmulticast mode [ 934.020322][ T4471] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7775'. [ 934.066582][ T4477] IPVS: using max 31 ests per chain, 74400 per kthread [ 934.282222][T29289] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.331884][T29279] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.384137][T29289] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.404441][T29289] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.653719][ T4503] syzkaller0: entered promiscuous mode [ 934.668064][ T4503] syzkaller0: entered allmulticast mode [ 934.973000][ T4525] FAULT_INJECTION: forcing a failure. [ 934.973000][ T4525] name failslab, interval 1, probability 0, space 0, times 0 [ 934.986251][ T4525] CPU: 0 UID: 0 PID: 4525 Comm: syz.2.7790 Not tainted syzkaller #0 PREEMPT(full) [ 934.986283][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 934.986293][ T4525] Call Trace: [ 934.986300][ T4525] [ 934.986307][ T4525] dump_stack_lvl+0xe8/0x150 [ 934.986330][ T4525] should_fail_ex+0x412/0x560 [ 934.986352][ T4525] should_failslab+0xa8/0x100 [ 934.986371][ T4525] __kmalloc_noprof+0xde/0x7e0 [ 934.986386][ T4525] ? rcu_is_watching+0x15/0xb0 [ 934.986400][ T4525] ? security_sk_alloc+0x52/0x360 [ 934.986431][ T4525] security_sk_alloc+0x52/0x360 [ 934.986454][ T4525] sk_prot_alloc+0x101/0x210 [ 934.986474][ T4525] ? sk_alloc+0x27/0x390 [ 934.986494][ T4525] sk_alloc+0x3a/0x390 [ 934.986516][ T4525] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 934.986546][ T4525] ? __fget_files+0x2a/0x420 [ 934.986569][ T4525] ? __fget_files+0x3a0/0x420 [ 934.986584][ T4525] ? __fget_files+0x2a/0x420 [ 934.986605][ T4525] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 934.986624][ T4525] bpf_prog_test_run+0x2c7/0x340 [ 934.986645][ T4525] __sys_bpf+0x5cb/0x920 [ 934.986663][ T4525] ? __pfx___sys_bpf+0x10/0x10 [ 934.986693][ T4525] ? ksys_write+0x242/0x270 [ 934.986716][ T4525] ? __pfx_ksys_write+0x10/0x10 [ 934.986743][ T4525] __x64_sys_bpf+0x7c/0x90 [ 934.986765][ T4525] do_syscall_64+0xe2/0xf80 [ 934.986799][ T4525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.986815][ T4525] ? trace_irq_disable+0x37/0x100 [ 934.986831][ T4525] ? clear_bhb_loop+0x60/0xb0 [ 934.986851][ T4525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.986864][ T4525] RIP: 0033:0x7f4dc879aeb9 [ 934.986879][ T4525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.986891][ T4525] RSP: 002b:00007f4dc959c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 934.986907][ T4525] RAX: ffffffffffffffda RBX: 00007f4dc8a15fa0 RCX: 00007f4dc879aeb9 [ 934.986918][ T4525] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 934.986928][ T4525] RBP: 00007f4dc959c090 R08: 0000000000000000 R09: 0000000000000000 [ 934.986936][ T4525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.986945][ T4525] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 934.986969][ T4525] [ 935.516906][ T97] block nbd5: Possible stuck request ffff888025c48000: control (read@0,1024B). Runtime 270 seconds [ 935.527959][ T97] block nbd5: Possible stuck request ffff888025c48200: control (read@1024,1024B). Runtime 270 seconds [ 935.539777][ T97] block nbd5: Possible stuck request ffff888025c48400: control (read@2048,1024B). Runtime 270 seconds [ 935.551914][ T97] block nbd5: Possible stuck request ffff888025c48600: control (read@3072,1024B). Runtime 270 seconds [ 936.478799][ T4555] FAULT_INJECTION: forcing a failure. [ 936.478799][ T4555] name failslab, interval 1, probability 0, space 0, times 0 [ 936.494070][ T4555] CPU: 0 UID: 0 PID: 4555 Comm: syz.1.7799 Not tainted syzkaller #0 PREEMPT(full) [ 936.494094][ T4555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 936.494104][ T4555] Call Trace: [ 936.494111][ T4555] [ 936.494118][ T4555] dump_stack_lvl+0xe8/0x150 [ 936.494142][ T4555] should_fail_ex+0x412/0x560 [ 936.494164][ T4555] should_failslab+0xa8/0x100 [ 936.494183][ T4555] __kmalloc_noprof+0xde/0x7e0 [ 936.494198][ T4555] ? rcu_is_watching+0x15/0xb0 [ 936.494211][ T4555] ? security_sk_alloc+0x52/0x360 [ 936.494236][ T4555] security_sk_alloc+0x52/0x360 [ 936.494258][ T4555] sk_prot_alloc+0x101/0x210 [ 936.494275][ T4555] ? sk_alloc+0x27/0x390 [ 936.494294][ T4555] sk_alloc+0x3a/0x390 [ 936.494314][ T4555] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 936.494343][ T4555] ? __fget_files+0x2a/0x420 [ 936.494358][ T4555] ? __fget_files+0x3a0/0x420 [ 936.494373][ T4555] ? __fget_files+0x2a/0x420 [ 936.494391][ T4555] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 936.494408][ T4555] bpf_prog_test_run+0x2c7/0x340 [ 936.494428][ T4555] __sys_bpf+0x5cb/0x920 [ 936.494445][ T4555] ? __pfx___sys_bpf+0x10/0x10 [ 936.494474][ T4555] ? ksys_write+0x242/0x270 [ 936.494496][ T4555] ? __pfx_ksys_write+0x10/0x10 [ 936.494522][ T4555] __x64_sys_bpf+0x7c/0x90 [ 936.494544][ T4555] do_syscall_64+0xe2/0xf80 [ 936.494563][ T4555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.494578][ T4555] ? trace_irq_disable+0x37/0x100 [ 936.494592][ T4555] ? clear_bhb_loop+0x60/0xb0 [ 936.494611][ T4555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.494626][ T4555] RIP: 0033:0x7f4ec779aeb9 [ 936.494641][ T4555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.494654][ T4555] RSP: 002b:00007f4ec86c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 936.494682][ T4555] RAX: ffffffffffffffda RBX: 00007f4ec7a15fa0 RCX: 00007f4ec779aeb9 [ 936.494693][ T4555] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 936.494703][ T4555] RBP: 00007f4ec86c5090 R08: 0000000000000000 R09: 0000000000000000 [ 936.494713][ T4555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.494722][ T4555] R13: 00007f4ec7a16038 R14: 00007f4ec7a15fa0 R15: 00007ffd6d3177c8 [ 936.494749][ T4555] [ 937.046569][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 937.054627][ C0] lec:lec_tx_timeout: lec0 [ 937.774328][ T4584] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7806'. [ 938.909181][ T4652] bridge_slave_1: left allmulticast mode [ 938.914921][ T4652] bridge_slave_1: left promiscuous mode [ 938.921105][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.945802][ T4651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7825'. [ 938.955657][ T4651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7825'. [ 938.970206][ T4652] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 939.008254][ T4643] netlink: 'syz.0.7822': attribute type 2 has an invalid length. [ 939.053448][ T4651] bond0: entered promiscuous mode [ 939.069029][ T4651] bond_slave_0: entered promiscuous mode [ 939.091417][ T4651] bond_slave_1: entered promiscuous mode [ 939.113886][ T4651] bridge0: entered promiscuous mode [ 939.188613][ T4655] syzkaller0: entered promiscuous mode [ 939.196286][ T4655] syzkaller0: entered allmulticast mode [ 941.264738][ T4674] syzkaller0: entered promiscuous mode [ 941.276774][ T4674] syzkaller0: entered allmulticast mode [ 943.403496][ T4734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7846'. [ 943.429885][ T4734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7846'. [ 943.439590][ T4734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7846'. [ 943.463326][ T129] IPVS: starting estimator thread 0... [ 943.524741][ T4736] syzkaller0: entered promiscuous mode [ 943.537777][ T4736] syzkaller0: entered allmulticast mode [ 943.567502][ T4739] IPVS: using max 37 ests per chain, 88800 per kthread [ 945.666557][ T4738] wg1 speed is unknown, defaulting to 1000 [ 945.674194][ T4738] ip6_vti0 speed is unknown, defaulting to 1000 [ 945.735656][ T4763] syzkaller0: entered promiscuous mode [ 945.742376][ T4763] syzkaller0: entered allmulticast mode [ 946.046409][ T4795] FAULT_INJECTION: forcing a failure. [ 946.046409][ T4795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 946.062254][ T4795] CPU: 1 UID: 0 PID: 4795 Comm: syz.4.7856 Not tainted syzkaller #0 PREEMPT(full) [ 946.062279][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 946.062290][ T4795] Call Trace: [ 946.062298][ T4795] [ 946.062305][ T4795] dump_stack_lvl+0xe8/0x150 [ 946.062330][ T4795] should_fail_ex+0x412/0x560 [ 946.062351][ T4795] _copy_from_user+0x2d/0xb0 [ 946.062373][ T4795] do_tcp_getsockopt+0x22e/0x2950 [ 946.062398][ T4795] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 946.062413][ T4795] ? sock_recv_errqueue+0x4d0/0x590 [ 946.062429][ T4795] ? __lock_acquire+0x6b5/0x2cf0 [ 946.062451][ T4795] ? _parse_integer_limit+0x1ae/0x1f0 [ 946.062467][ T4795] ? aa_label_sk_perm+0x529/0x6d0 [ 946.062487][ T4795] ? kstrtoull+0x12f/0x1d0 [ 946.062506][ T4795] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 946.062523][ T4795] ? kstrtouint+0x6e/0xe0 [ 946.062541][ T4795] ? get_pid_task+0x20/0x1f0 [ 946.062563][ T4795] ? __lock_acquire+0x6b5/0x2cf0 [ 946.062597][ T4795] ? aa_sk_perm+0x15a/0x960 [ 946.062617][ T4795] ? __might_fault+0xaf/0x130 [ 946.062640][ T4795] ? __might_fault+0xaf/0x130 [ 946.062670][ T4795] tcp_getsockopt+0x83/0x130 [ 946.062688][ T4795] ? sock_recv_errqueue+0x4d0/0x590 [ 946.062706][ T4795] ? sock_recv_errqueue+0x4d0/0x590 [ 946.062721][ T4795] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 946.062741][ T4795] do_sock_getsockopt+0x2d3/0x3f0 [ 946.062764][ T4795] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 946.062785][ T4795] ? __fget_files+0x3a0/0x420 [ 946.062801][ T4795] ? __fget_files+0x2a/0x420 [ 946.062824][ T4795] __x64_sys_getsockopt+0x1a4/0x240 [ 946.062852][ T4795] do_syscall_64+0xe2/0xf80 [ 946.062871][ T4795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.062887][ T4795] ? trace_irq_disable+0x37/0x100 [ 946.062903][ T4795] ? clear_bhb_loop+0x60/0xb0 [ 946.062922][ T4795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.062939][ T4795] RIP: 0033:0x7f6c5e59aeb9 [ 946.062956][ T4795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.062968][ T4795] RSP: 002b:00007f6c5f405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 946.062984][ T4795] RAX: ffffffffffffffda RBX: 00007f6c5e816180 RCX: 00007f6c5e59aeb9 [ 946.062994][ T4795] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 946.063003][ T4795] RBP: 00007f6c5f405090 R08: 0000200000000240 R09: 0000000000000000 [ 946.063012][ T4795] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 946.063021][ T4795] R13: 00007f6c5e816218 R14: 00007f6c5e816180 R15: 00007fffc2a48bb8 [ 946.063056][ T4795] [ 947.967145][ T4789] tipc: Enabling of bearer rejected, failed to enable media [ 948.302447][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7864'. [ 948.372190][ T4814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7864'. [ 948.396595][ T30] audit: type=1800 audit(1770260021.161:50): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7867" name="memory.events" dev="tmpfs" ino=1678 res=0 errno=0 [ 948.452146][ T30] audit: type=1804 audit(1770260021.161:51): pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.7867" name="/newroot/331/memory.events" dev="tmpfs" ino=1678 res=1 errno=0 [ 948.550634][ T4818] syzkaller0: entered promiscuous mode [ 948.556210][ T4818] syzkaller0: entered allmulticast mode [ 948.947550][ T4849] FAULT_INJECTION: forcing a failure. [ 948.947550][ T4849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.990186][ T4849] CPU: 0 UID: 0 PID: 4849 Comm: syz.4.7873 Not tainted syzkaller #0 PREEMPT(full) [ 948.990210][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 948.990221][ T4849] Call Trace: [ 948.990243][ T4849] [ 948.990251][ T4849] dump_stack_lvl+0xe8/0x150 [ 948.990279][ T4849] should_fail_ex+0x412/0x560 [ 948.990303][ T4849] _copy_to_user+0x31/0xb0 [ 948.990327][ T4849] simple_read_from_buffer+0xe1/0x170 [ 948.990350][ T4849] proc_fail_nth_read+0x1bb/0x230 [ 948.990373][ T4849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 948.990397][ T4849] ? rw_verify_area+0x2a6/0x4d0 [ 948.990418][ T4849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 948.990440][ T4849] vfs_read+0x20c/0xa70 [ 948.990459][ T4849] ? fdget_pos+0x246/0x320 [ 948.990481][ T4849] ? __pfx___mutex_lock+0x10/0x10 [ 948.990502][ T4849] ? __pfx_vfs_read+0x10/0x10 [ 948.990524][ T4849] ? __fget_files+0x2a/0x420 [ 948.990544][ T4849] ? __fget_files+0x3a0/0x420 [ 948.990557][ T4849] ? __fget_files+0x2a/0x420 [ 948.990579][ T4849] ksys_read+0x150/0x270 [ 948.990601][ T4849] ? __pfx_ksys_read+0x10/0x10 [ 948.990634][ T4849] do_syscall_64+0xe2/0xf80 [ 948.990654][ T4849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.990668][ T4849] ? trace_irq_disable+0x37/0x100 [ 948.990683][ T4849] ? clear_bhb_loop+0x60/0xb0 [ 948.990701][ T4849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.990717][ T4849] RIP: 0033:0x7f6c5e55b78e [ 948.990734][ T4849] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 948.990749][ T4849] RSP: 002b:00007f6c5f446fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 948.990769][ T4849] RAX: ffffffffffffffda RBX: 00007f6c5f4476c0 RCX: 00007f6c5e55b78e [ 948.990783][ T4849] RDX: 000000000000000f RSI: 00007f6c5f4470a0 RDI: 0000000000000004 [ 948.990794][ T4849] RBP: 00007f6c5f447090 R08: 0000000000000000 R09: 0000000000000000 [ 948.990803][ T4849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.990814][ T4849] R13: 00007f6c5e816038 R14: 00007f6c5e815fa0 R15: 00007fffc2a48bb8 [ 948.990844][ T4849] [ 949.282911][ T4855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7874'. [ 949.308217][ T4856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7874'. [ 949.572695][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7879'. [ 951.179193][ T4886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7883'. [ 951.285786][ T4894] netlink: 'syz.2.7886': attribute type 15 has an invalid length. [ 951.301992][ T4887] wg1 speed is unknown, defaulting to 1000 [ 951.313092][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7886'. [ 951.447191][ T4887] ip6_vti0 speed is unknown, defaulting to 1000 [ 951.454617][T29289] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 951.477840][T29289] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 951.490752][T29289] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 951.524094][T29289] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 951.943234][ T4919] wg1 speed is unknown, defaulting to 1000 [ 951.958844][ T4919] ip6_vti0 speed is unknown, defaulting to 1000 [ 952.089495][ T4929] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7896'. [ 952.812295][ T4958] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7903'. [ 952.991950][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7907'. [ 953.320283][T18994] lec:lec_start_xmit: lec0:No lecd attached [ 953.444354][ T5000] FAULT_INJECTION: forcing a failure. [ 953.444354][ T5000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.470170][ T5000] CPU: 1 UID: 0 PID: 5000 Comm: syz.2.7913 Not tainted syzkaller #0 PREEMPT(full) [ 953.470193][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 953.470203][ T5000] Call Trace: [ 953.470209][ T5000] [ 953.470216][ T5000] dump_stack_lvl+0xe8/0x150 [ 953.470240][ T5000] should_fail_ex+0x412/0x560 [ 953.470262][ T5000] _copy_from_user+0x2d/0xb0 [ 953.470286][ T5000] do_sys_poll+0x2a9/0x1120 [ 953.470315][ T5000] ? __lock_acquire+0x6b5/0x2cf0 [ 953.470336][ T5000] ? __pfx_do_sys_poll+0x10/0x10 [ 953.470358][ T5000] ? aa_file_perm+0x12d/0x1630 [ 953.470435][ T5000] ? __might_fault+0xaf/0x130 [ 953.470481][ T5000] ? set_user_sigmask+0xcd/0x1c0 [ 953.470497][ T5000] ? __pfx_set_user_sigmask+0x10/0x10 [ 953.470527][ T5000] ? kmem_cache_free+0x195/0x610 [ 953.470554][ T5000] __se_sys_ppoll+0x209/0x2b0 [ 953.470577][ T5000] ? __pfx___se_sys_ppoll+0x10/0x10 [ 953.470595][ T5000] ? __pfx_ksys_write+0x10/0x10 [ 953.470623][ T5000] ? __x64_sys_ppoll+0x20/0xc0 [ 953.470643][ T5000] do_syscall_64+0xe2/0xf80 [ 953.470663][ T5000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.470679][ T5000] ? trace_irq_disable+0x37/0x100 [ 953.470695][ T5000] ? clear_bhb_loop+0x60/0xb0 [ 953.470716][ T5000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.470733][ T5000] RIP: 0033:0x7f4dc879aeb9 [ 953.470749][ T5000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.470763][ T5000] RSP: 002b:00007f4dc957b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 953.470783][ T5000] RAX: ffffffffffffffda RBX: 00007f4dc8a16090 RCX: 00007f4dc879aeb9 [ 953.470796][ T5000] RDX: 00002000000004c0 RSI: 0000000000000001 RDI: 00002000000003c0 [ 953.470808][ T5000] RBP: 00007f4dc957b090 R08: 0000000000000000 R09: 0000000000000000 [ 953.470819][ T5000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.470830][ T5000] R13: 00007f4dc8a16128 R14: 00007f4dc8a16090 R15: 00007ffe4c5189c8 [ 953.470860][ T5000] [ 954.094495][ T5028] FAULT_INJECTION: forcing a failure. [ 954.094495][ T5028] name failslab, interval 1, probability 0, space 0, times 0 [ 954.112775][ T5030] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 954.122754][ T5030] pim6reg1: linktype set to 805 [ 954.158511][ T5028] CPU: 1 UID: 0 PID: 5028 Comm: syz.3.7923 Not tainted syzkaller #0 PREEMPT(full) [ 954.158536][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 954.158548][ T5028] Call Trace: [ 954.158555][ T5028] [ 954.158563][ T5028] dump_stack_lvl+0xe8/0x150 [ 954.158587][ T5028] should_fail_ex+0x412/0x560 [ 954.158611][ T5028] should_failslab+0xa8/0x100 [ 954.158630][ T5028] __kmalloc_cache_noprof+0x83/0x6e0 [ 954.158646][ T5028] ? __pfx_stack_trace_save+0x10/0x10 [ 954.158666][ T5028] ? rtnl_newlink+0x136/0x1be0 [ 954.158690][ T5028] rtnl_newlink+0x136/0x1be0 [ 954.158708][ T5028] ? kasan_save_track+0x4f/0x80 [ 954.158722][ T5028] ? kasan_save_track+0x3e/0x80 [ 954.158736][ T5028] ? kasan_save_free_info+0x46/0x50 [ 954.158754][ T5028] ? __kasan_slab_free+0x5c/0x80 [ 954.158768][ T5028] ? kmem_cache_free+0x195/0x610 [ 954.158784][ T5028] ? __dev_queue_xmit+0x168f/0x3850 [ 954.158806][ T5028] ? __netlink_deliver_tap+0x5ad/0x850 [ 954.158823][ T5028] ? netlink_deliver_tap+0x19c/0x1b0 [ 954.158839][ T5028] ? netlink_unicast+0x7e3/0x9b0 [ 954.158854][ T5028] ? netlink_sendmsg+0x813/0xb40 [ 954.158874][ T5028] ? __pfx_rtnl_newlink+0x10/0x10 [ 954.158891][ T5028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.158940][ T5028] ? kasan_quarantine_put+0xbb/0x1f0 [ 954.158963][ T5028] ? lockdep_hardirqs_on+0x7a/0x110 [ 954.158988][ T5028] ? kmem_cache_free+0x195/0x610 [ 954.159003][ T5028] ? nlmon_xmit+0xb0/0x100 [ 954.159032][ T5028] ? __lock_acquire+0x6b5/0x2cf0 [ 954.159062][ T5028] ? __local_bh_enable_ip+0xd0/0x130 [ 954.159079][ T5028] ? lockdep_hardirqs_on+0x7a/0x110 [ 954.159099][ T5028] ? __dev_queue_xmit+0x274/0x3850 [ 954.159119][ T5028] ? __local_bh_enable_ip+0xd0/0x130 [ 954.159133][ T5028] ? __dev_queue_xmit+0x274/0x3850 [ 954.159160][ T5028] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 954.159193][ T5028] ? __pfx_rtnl_newlink+0x10/0x10 [ 954.159212][ T5028] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 954.159233][ T5028] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 954.159251][ T5028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 954.159268][ T5028] ? ref_tracker_free+0x693/0x840 [ 954.159286][ T5028] ? __copy_skb_header+0xa3/0x4a0 [ 954.159311][ T5028] ? __pfx_ref_tracker_free+0x10/0x10 [ 954.159339][ T5028] netlink_rcv_skb+0x232/0x4b0 [ 954.159359][ T5028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 954.159379][ T5028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 954.159410][ T5028] ? netlink_deliver_tap+0x2e/0x1b0 [ 954.159436][ T5028] netlink_unicast+0x80f/0x9b0 [ 954.159469][ T5028] ? __pfx_netlink_unicast+0x10/0x10 [ 954.159489][ T5028] ? netlink_sendmsg+0x650/0xb40 [ 954.159507][ T5028] ? skb_put+0x11b/0x210 [ 954.159530][ T5028] netlink_sendmsg+0x813/0xb40 [ 954.159559][ T5028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.159581][ T5028] ? aa_sock_msg_perm+0xf1/0x1b0 [ 954.159603][ T5028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 954.159623][ T5028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.159640][ T5028] ____sys_sendmsg+0xa68/0xad0 [ 954.159662][ T5028] ? __might_fault+0xaf/0x130 [ 954.159690][ T5028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.159719][ T5028] ? import_iovec+0x73/0xa0 [ 954.159745][ T5028] ___sys_sendmsg+0x2a5/0x360 [ 954.159766][ T5028] ? __lock_acquire+0x6b5/0x2cf0 [ 954.159791][ T5028] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.159846][ T5028] ? __fget_files+0x2a/0x420 [ 954.159864][ T5028] ? __fget_files+0x3a0/0x420 [ 954.159891][ T5028] __x64_sys_sendmsg+0x1bd/0x2a0 [ 954.159915][ T5028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 954.159945][ T5028] ? __pfx_ksys_write+0x10/0x10 [ 954.159978][ T5028] do_syscall_64+0xe2/0xf80 [ 954.159999][ T5028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.160015][ T5028] ? trace_irq_disable+0x37/0x100 [ 954.160031][ T5028] ? clear_bhb_loop+0x60/0xb0 [ 954.160050][ T5028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.160067][ T5028] RIP: 0033:0x7f324839aeb9 [ 954.160083][ T5028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.160098][ T5028] RSP: 002b:00007f32465f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.160116][ T5028] RAX: ffffffffffffffda RBX: 00007f3248615fa0 RCX: 00007f324839aeb9 [ 954.160130][ T5028] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 954.160141][ T5028] RBP: 00007f32465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 954.160152][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.160163][ T5028] R13: 00007f3248616038 R14: 00007f3248615fa0 R15: 00007ffcad7c7bb8 [ 954.160191][ T5028] [ 954.835198][ T5046] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 954.846386][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7926'. [ 954.863195][ T5048] netlink: 'syz.0.7930': attribute type 21 has an invalid length. [ 954.888248][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7930'. [ 954.904669][ T5048] netlink: 'syz.0.7930': attribute type 21 has an invalid length. [ 954.913664][T15133] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.956781][T15133] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.965540][T15133] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.975764][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7930'. [ 955.016618][T15133] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 955.137389][ T5064] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7932'. [ 955.181534][ T5069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7935'. [ 955.287576][T25596] IPVS: starting estimator thread 0... [ 955.377495][ T5077] IPVS: using max 28 ests per chain, 67200 per kthread [ 955.404129][ T5084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.533630][ T5084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.554577][ T5095] FAULT_INJECTION: forcing a failure. [ 955.554577][ T5095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.570403][ T5095] CPU: 1 UID: 0 PID: 5095 Comm: syz.2.7943 Not tainted syzkaller #0 PREEMPT(full) [ 955.570429][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 955.570439][ T5095] Call Trace: [ 955.570445][ T5095] [ 955.570453][ T5095] dump_stack_lvl+0xe8/0x150 [ 955.570479][ T5095] should_fail_ex+0x412/0x560 [ 955.570504][ T5095] _copy_to_user+0x31/0xb0 [ 955.570531][ T5095] simple_read_from_buffer+0xe1/0x170 [ 955.570554][ T5095] proc_fail_nth_read+0x1bb/0x230 [ 955.570579][ T5095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 955.570603][ T5095] ? rw_verify_area+0x2a6/0x4d0 [ 955.570625][ T5095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 955.570648][ T5095] vfs_read+0x20c/0xa70 [ 955.570668][ T5095] ? fdget_pos+0x246/0x320 [ 955.570691][ T5095] ? __pfx___mutex_lock+0x10/0x10 [ 955.570712][ T5095] ? __pfx_vfs_read+0x10/0x10 [ 955.570736][ T5095] ? __fget_files+0x2a/0x420 [ 955.570759][ T5095] ? __fget_files+0x3a0/0x420 [ 955.570776][ T5095] ? __fget_files+0x2a/0x420 [ 955.570803][ T5095] ksys_read+0x150/0x270 [ 955.570828][ T5095] ? __pfx_ksys_read+0x10/0x10 [ 955.570847][ T5095] ? fput+0xa0/0xd0 [ 955.570877][ T5095] do_syscall_64+0xe2/0xf80 [ 955.570898][ T5095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.570914][ T5095] ? trace_irq_disable+0x37/0x100 [ 955.570930][ T5095] ? clear_bhb_loop+0x60/0xb0 [ 955.570950][ T5095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.570966][ T5095] RIP: 0033:0x7f4dc875b78e [ 955.570982][ T5095] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 955.570996][ T5095] RSP: 002b:00007f4dc959bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 955.571015][ T5095] RAX: ffffffffffffffda RBX: 00007f4dc959c6c0 RCX: 00007f4dc875b78e [ 955.571025][ T5095] RDX: 000000000000000f RSI: 00007f4dc959c0a0 RDI: 0000000000000006 [ 955.571035][ T5095] RBP: 00007f4dc959c090 R08: 0000000000000000 R09: 0000000000000000 [ 955.571045][ T5095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.571056][ T5095] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 955.571085][ T5095] [ 955.793356][ T5102] netlink: 'syz.3.7942': attribute type 30 has an invalid length. [ 955.893719][ T5102] bond2: option arp_missed_max: invalid value (0) [ 955.900505][ T5102] bond2: option arp_missed_max: allowed values 1 - 255 [ 955.915599][ T5102] bond2 (unregistering): Released all slaves [ 956.355837][ T5129] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7950'. [ 956.913019][ T5172] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7961'. [ 956.974890][ T5172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7961'. [ 957.012239][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7961'. [ 957.039380][ T5182] rdma_op ffff88807e72e9f0 conn xmit_rdma 0000000000000000 [ 957.063614][ T5178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7961'. [ 957.288489][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 957.539217][ T5211] netlink: 'syz.4.7971': attribute type 9 has an invalid length. [ 957.939162][ T5228] syzkaller0: entered promiscuous mode [ 957.950468][ T5228] syzkaller0: entered allmulticast mode [ 958.031757][ T5229] syzkaller0: entered promiscuous mode [ 958.063832][ T5229] syzkaller0: entered allmulticast mode [ 958.127997][ T5243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 958.148312][ T5242] xt_CT: You must specify a L4 protocol and not use inversions on it [ 958.322026][ T5258] xt_connbytes: Forcing CT accounting to be enabled [ 958.374078][ T5262] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 959.041928][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 959.050029][ C0] lec:lec_tx_timeout: lec0 [ 960.638862][ T5292] __nla_validate_parse: 7 callbacks suppressed [ 960.638882][ T5292] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7992'. [ 960.654281][ T5292] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7992'. [ 961.934644][ T5257] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 961.998337][ T5294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7992'. [ 962.050386][ T5294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7992'. [ 962.088875][ T5294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7992'. [ 962.138460][ T5294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7992'. [ 962.191671][ T5294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7992'. [ 962.245024][ T5294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7992'. [ 962.258465][ T5310] siw: device registration error -23 [ 962.278727][ T5294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7992'. [ 962.291459][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7998'. [ 962.492171][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.499995][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.852420][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.885722][ T5294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.247337][ T5310] bond1: left allmulticast mode [ 963.253732][ T5310] geneve2: left promiscuous mode [ 963.269380][ T5310] ipip0: left promiscuous mode [ 963.274268][ T5310] ipip0: left allmulticast mode [ 963.352917][T29273] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.373724][T29273] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.415634][ T5313] wg1 speed is unknown, defaulting to 1000 [ 963.426513][T29273] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.456913][T29273] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.479656][ T5313] ip6_vti0 speed is unknown, defaulting to 1000 [ 963.619236][ T5344] syzkaller0: entered promiscuous mode [ 963.624756][ T5344] syzkaller0: entered allmulticast mode [ 963.701631][T29273] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.726919][T29273] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.751185][T29273] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.780893][T29273] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.599888][T29273] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.606868][ T97] block nbd5: Possible stuck request ffff888025c48000: control (read@0,1024B). Runtime 300 seconds [ 965.609342][T29273] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.619555][ T97] block nbd5: Possible stuck request ffff888025c48200: control (read@1024,1024B). Runtime 300 seconds [ 965.639451][ T97] block nbd5: Possible stuck request ffff888025c48400: control (read@2048,1024B). Runtime 300 seconds [ 965.639606][T29273] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.656496][ T97] block nbd5: Possible stuck request ffff888025c48600: control (read@3072,1024B). Runtime 300 seconds [ 965.684483][T29273] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.276833][ T5420] __nla_validate_parse: 154 callbacks suppressed [ 966.276852][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8021'. [ 966.316242][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8021'. [ 966.387867][ T5420] bond0: entered promiscuous mode [ 966.393319][ T5420] bond_slave_0: entered promiscuous mode [ 966.399770][ T5420] bond_slave_1: entered promiscuous mode [ 966.439575][ T5420] bridge0: entered promiscuous mode [ 966.462458][ T5420] debugfs: 'hsr1' already exists in 'hsr' [ 966.484866][ T5420] Cannot create hsr debugfs directory [ 966.717401][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8027'. [ 966.782876][ T5445] bridge0: port 4(syz_tun) entered blocking state [ 966.809873][ T5445] bridge0: port 4(syz_tun) entered disabled state [ 966.829392][ T5445] syz_tun: entered allmulticast mode [ 966.841730][ T5445] syz_tun: entered promiscuous mode [ 966.896623][ T5445] netlink: 'syz.4.8027': attribute type 10 has an invalid length. [ 967.617986][ T5498] FAULT_INJECTION: forcing a failure. [ 967.617986][ T5498] name failslab, interval 1, probability 0, space 0, times 0 [ 967.676861][ T5498] CPU: 0 UID: 0 PID: 5498 Comm: syz.2.8041 Not tainted syzkaller #0 PREEMPT(full) [ 967.676908][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 967.676918][ T5498] Call Trace: [ 967.676925][ T5498] [ 967.676934][ T5498] dump_stack_lvl+0xe8/0x150 [ 967.676960][ T5498] should_fail_ex+0x412/0x560 [ 967.676985][ T5498] should_failslab+0xa8/0x100 [ 967.677006][ T5498] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 967.677029][ T5498] ? __alloc_skb+0x186/0x7d0 [ 967.677048][ T5498] ? __alloc_skb+0x1d0/0x7d0 [ 967.677065][ T5498] ? __local_bh_enable_ip+0xd0/0x130 [ 967.677083][ T5498] __alloc_skb+0x1d0/0x7d0 [ 967.677108][ T5498] alloc_skb_with_frags+0xca/0x890 [ 967.677133][ T5498] ? __lock_acquire+0x6b5/0x2cf0 [ 967.677157][ T5498] ? unwind_next_frame+0xa5/0x23c0 [ 967.677178][ T5498] sock_alloc_send_pskb+0x878/0x990 [ 967.677208][ T5498] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 967.677235][ T5498] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 967.677259][ T5498] ? dev_get_by_index+0x22/0x2e0 [ 967.677274][ T5498] ? dev_get_by_index+0x22/0x2e0 [ 967.677294][ T5498] packet_sendmsg+0x33e5/0x50f0 [ 967.677321][ T5498] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 967.677340][ T5498] ? trace_contention_begin+0xf6/0x120 [ 967.677388][ T5498] ? aa_sk_perm+0x15a/0x960 [ 967.677408][ T5498] ? aa_sk_perm+0x82d/0x960 [ 967.677424][ T5498] ? __pfx_packet_sendmsg+0x10/0x10 [ 967.677452][ T5498] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 967.677479][ T5498] ? aa_sock_msg_perm+0xf1/0x1b0 [ 967.677500][ T5498] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 967.677531][ T5498] __sys_sendto+0x709/0x7a0 [ 967.677555][ T5498] ? __pfx___sys_sendto+0x10/0x10 [ 967.677573][ T5498] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 967.677610][ T5498] ? __fget_files+0x3a0/0x420 [ 967.677638][ T5498] ? ksys_write+0x242/0x270 [ 967.677662][ T5498] ? __pfx_ksys_write+0x10/0x10 [ 967.677689][ T5498] __x64_sys_sendto+0xde/0x100 [ 967.677714][ T5498] do_syscall_64+0xe2/0xf80 [ 967.677734][ T5498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.677750][ T5498] ? trace_irq_disable+0x37/0x100 [ 967.677767][ T5498] ? clear_bhb_loop+0x60/0xb0 [ 967.677787][ T5498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.677804][ T5498] RIP: 0033:0x7f4dc879aeb9 [ 967.677821][ T5498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.677835][ T5498] RSP: 002b:00007f4dc959c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 967.677855][ T5498] RAX: ffffffffffffffda RBX: 00007f4dc8a15fa0 RCX: 00007f4dc879aeb9 [ 967.677868][ T5498] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 967.677879][ T5498] RBP: 00007f4dc959c090 R08: 0000200000000200 R09: 0000000000000014 [ 967.677891][ T5498] R10: 00000000000008c1 R11: 0000000000000246 R12: 0000000000000001 [ 967.677902][ T5498] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 967.677932][ T5498] [ 968.395956][ T5519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8044'. [ 968.413207][ T5519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8044'. [ 969.408698][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8052'. [ 970.204799][ T5533] macvlan0: entered allmulticast mode [ 970.284506][ T5544] bond0: option arp_validate: invalid value (55553) [ 970.320899][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8053'. [ 970.330035][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8053'. [ 970.354872][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8053'. [ 970.469249][ T5556] FAULT_INJECTION: forcing a failure. [ 970.469249][ T5556] name failslab, interval 1, probability 0, space 0, times 0 [ 970.560224][ T5556] CPU: 0 UID: 0 PID: 5556 Comm: syz.2.8057 Not tainted syzkaller #0 PREEMPT(full) [ 970.560250][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 970.560261][ T5556] Call Trace: [ 970.560269][ T5556] [ 970.560277][ T5556] dump_stack_lvl+0xe8/0x150 [ 970.560303][ T5556] should_fail_ex+0x412/0x560 [ 970.560352][ T5556] should_failslab+0xa8/0x100 [ 970.560374][ T5556] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 970.560397][ T5556] ? __alloc_skb+0x186/0x7d0 [ 970.560417][ T5556] ? __alloc_skb+0x1d0/0x7d0 [ 970.560433][ T5556] ? __local_bh_enable_ip+0xd0/0x130 [ 970.560452][ T5556] __alloc_skb+0x1d0/0x7d0 [ 970.560470][ T5556] ? is_bpf_text_address+0x26/0x2b0 [ 970.560493][ T5556] alloc_skb_with_frags+0xca/0x890 [ 970.560516][ T5556] ? __pfx_xfrm_state_find+0x10/0x10 [ 970.560540][ T5556] ? __lock_acquire+0x6b5/0x2cf0 [ 970.560565][ T5556] sock_alloc_send_pskb+0x878/0x990 [ 970.560604][ T5556] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 970.560633][ T5556] ? __lock_acquire+0x6b5/0x2cf0 [ 970.560662][ T5556] __ip_append_data+0x2bc5/0x3f30 [ 970.560703][ T5556] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 970.560728][ T5556] ? ipv4_mtu+0x23/0x650 [ 970.560757][ T5556] ? ipv4_mtu+0x23/0x650 [ 970.560778][ T5556] ? __pfx___ip_append_data+0x10/0x10 [ 970.560798][ T5556] ? ipv4_mtu+0x23/0x650 [ 970.560817][ T5556] ? __pfx_ipv4_mtu+0x10/0x10 [ 970.560836][ T5556] ? ip_setup_cork+0x57e/0xa50 [ 970.560859][ T5556] ip_make_skb+0x22e/0x450 [ 970.560886][ T5556] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 970.560907][ T5556] ? __pfx_ip_make_skb+0x10/0x10 [ 970.560947][ T5556] udp_sendmsg+0x19fb/0x22f0 [ 970.560982][ T5556] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 970.561007][ T5556] ? __pfx_udp_sendmsg+0x10/0x10 [ 970.561072][ T5556] ? sock_rps_record_flow+0x19/0x400 [ 970.561098][ T5556] ? inet_sendmsg+0x29c/0x370 [ 970.561118][ T5556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 970.561140][ T5556] ____sys_sendmsg+0x894/0xad0 [ 970.561162][ T5556] ? __might_fault+0xaf/0x130 [ 970.561191][ T5556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 970.561225][ T5556] ? import_iovec+0x73/0xa0 [ 970.561251][ T5556] ___sys_sendmsg+0x2a5/0x360 [ 970.561278][ T5556] ? __pfx____sys_sendmsg+0x10/0x10 [ 970.561298][ T5556] ? __lock_acquire+0x6b5/0x2cf0 [ 970.561375][ T5556] __sys_sendmmsg+0x27c/0x4e0 [ 970.561401][ T5556] ? __pfx___sys_sendmmsg+0x10/0x10 [ 970.561422][ T5556] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 970.561468][ T5556] ? ksys_write+0x242/0x270 [ 970.561493][ T5556] ? __pfx_ksys_write+0x10/0x10 [ 970.561522][ T5556] __x64_sys_sendmmsg+0xa0/0xc0 [ 970.561545][ T5556] do_syscall_64+0xe2/0xf80 [ 970.561565][ T5556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.561582][ T5556] ? trace_irq_disable+0x37/0x100 [ 970.561598][ T5556] ? clear_bhb_loop+0x60/0xb0 [ 970.561618][ T5556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.561634][ T5556] RIP: 0033:0x7f4dc879aeb9 [ 970.561651][ T5556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.561665][ T5556] RSP: 002b:00007f4dc959c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 970.561685][ T5556] RAX: ffffffffffffffda RBX: 00007f4dc8a15fa0 RCX: 00007f4dc879aeb9 [ 970.561698][ T5556] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 970.561710][ T5556] RBP: 00007f4dc959c090 R08: 0000000000000000 R09: 0000000000000000 [ 970.561722][ T5556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.561732][ T5556] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 970.561761][ T5556] [ 970.812355][ T5580] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8063'. [ 970.959660][ T5587] bond2: entered promiscuous mode [ 970.964805][ T5587] bond2: entered allmulticast mode [ 970.971045][ T5587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 971.699621][ T5626] team0 (unregistering): Port device team_slave_0 removed [ 971.772014][ T5626] team0 (unregistering): Port device team_slave_1 removed [ 972.087018][ T5649] FAULT_INJECTION: forcing a failure. [ 972.087018][ T5649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.132907][ T5649] CPU: 1 UID: 0 PID: 5649 Comm: syz.2.8082 Not tainted syzkaller #0 PREEMPT(full) [ 972.132933][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 972.132944][ T5649] Call Trace: [ 972.132952][ T5649] [ 972.132960][ T5649] dump_stack_lvl+0xe8/0x150 [ 972.132987][ T5649] should_fail_ex+0x412/0x560 [ 972.133013][ T5649] _copy_to_user+0x31/0xb0 [ 972.133040][ T5649] simple_read_from_buffer+0xe1/0x170 [ 972.133065][ T5649] proc_fail_nth_read+0x1bb/0x230 [ 972.133091][ T5649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.133117][ T5649] ? rw_verify_area+0x2a6/0x4d0 [ 972.133139][ T5649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 972.133162][ T5649] vfs_read+0x20c/0xa70 [ 972.133193][ T5649] ? fdget_pos+0x246/0x320 [ 972.133215][ T5649] ? __pfx___mutex_lock+0x10/0x10 [ 972.133239][ T5649] ? __pfx_vfs_read+0x10/0x10 [ 972.133262][ T5649] ? __fget_files+0x2a/0x420 [ 972.133284][ T5649] ? __fget_files+0x3a0/0x420 [ 972.133302][ T5649] ? __fget_files+0x2a/0x420 [ 972.133332][ T5649] ksys_read+0x150/0x270 [ 972.133357][ T5649] ? __pfx_ksys_read+0x10/0x10 [ 972.133392][ T5649] do_syscall_64+0xe2/0xf80 [ 972.133412][ T5649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.133428][ T5649] ? trace_irq_disable+0x37/0x100 [ 972.133444][ T5649] ? clear_bhb_loop+0x60/0xb0 [ 972.133465][ T5649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.133481][ T5649] RIP: 0033:0x7f4dc875b78e [ 972.133498][ T5649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 972.133512][ T5649] RSP: 002b:00007f4dc959bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 972.133530][ T5649] RAX: ffffffffffffffda RBX: 00007f4dc959c6c0 RCX: 00007f4dc875b78e [ 972.133543][ T5649] RDX: 000000000000000f RSI: 00007f4dc959c0a0 RDI: 0000000000000005 [ 972.133554][ T5649] RBP: 00007f4dc959c090 R08: 0000000000000000 R09: 0000000000000000 [ 972.133564][ T5649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.133582][ T5649] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 972.133613][ T5649] [ 972.630544][ T5671] netlink: 'syz.4.8089': attribute type 2 has an invalid length. [ 972.657430][ T5671] netlink: 'syz.4.8089': attribute type 1 has an invalid length. [ 972.665232][ T5671] __nla_validate_parse: 2 callbacks suppressed [ 972.665252][ T5671] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8089'. [ 972.993327][ T5688] syzkaller0: entered promiscuous mode [ 973.008630][ T5688] syzkaller0: entered allmulticast mode [ 973.169510][ T5707] FAULT_INJECTION: forcing a failure. [ 973.169510][ T5707] name failslab, interval 1, probability 0, space 0, times 0 [ 973.226654][ T5707] CPU: 1 UID: 0 PID: 5707 Comm: syz.4.8102 Not tainted syzkaller #0 PREEMPT(full) [ 973.226678][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 973.226688][ T5707] Call Trace: [ 973.226696][ T5707] [ 973.226703][ T5707] dump_stack_lvl+0xe8/0x150 [ 973.226728][ T5707] should_fail_ex+0x412/0x560 [ 973.226750][ T5707] should_failslab+0xa8/0x100 [ 973.226770][ T5707] kmem_cache_alloc_noprof+0x87/0x6e0 [ 973.226795][ T5707] ? dst_alloc+0x105/0x170 [ 973.226819][ T5707] dst_alloc+0x105/0x170 [ 973.226839][ T5707] ? ip_check_mc_rcu+0x400/0x680 [ 973.226862][ T5707] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 973.226894][ T5707] ? ip_route_output_key_hash+0xd8/0x2a0 [ 973.226917][ T5707] ip_route_output_key_hash+0x18d/0x2a0 [ 973.226942][ T5707] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 973.226980][ T5707] ip_route_output_flow+0x2a/0x150 [ 973.226999][ T5707] ? security_sk_classify_flow+0x6d/0x150 [ 973.227026][ T5707] udp_sendmsg+0x154a/0x22f0 [ 973.227060][ T5707] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 973.227085][ T5707] ? __pfx_udp_sendmsg+0x10/0x10 [ 973.227138][ T5707] ? __pfx_aa_sk_perm+0x10/0x10 [ 973.227156][ T5707] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 973.227181][ T5707] ? sock_rps_record_flow+0x19/0x400 [ 973.227206][ T5707] ? inet_sendmsg+0x29c/0x370 [ 973.227226][ T5707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 973.227248][ T5707] ____sys_sendmsg+0x894/0xad0 [ 973.227270][ T5707] ? __might_fault+0xaf/0x130 [ 973.227305][ T5707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 973.227336][ T5707] ? import_iovec+0x73/0xa0 [ 973.227362][ T5707] ___sys_sendmsg+0x2a5/0x360 [ 973.227390][ T5707] ? __pfx____sys_sendmsg+0x10/0x10 [ 973.227408][ T5707] ? __lock_acquire+0x6b5/0x2cf0 [ 973.227488][ T5707] __sys_sendmmsg+0x27c/0x4e0 [ 973.227516][ T5707] ? __pfx___sys_sendmmsg+0x10/0x10 [ 973.227536][ T5707] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 973.227584][ T5707] ? ksys_write+0x242/0x270 [ 973.227609][ T5707] ? __pfx_ksys_write+0x10/0x10 [ 973.227637][ T5707] __x64_sys_sendmmsg+0xa0/0xc0 [ 973.227661][ T5707] do_syscall_64+0xe2/0xf80 [ 973.227681][ T5707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.227697][ T5707] ? trace_irq_disable+0x37/0x100 [ 973.227713][ T5707] ? clear_bhb_loop+0x60/0xb0 [ 973.227733][ T5707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.227749][ T5707] RIP: 0033:0x7f6c5e59aeb9 [ 973.227767][ T5707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.227781][ T5707] RSP: 002b:00007f6c5f447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 973.227801][ T5707] RAX: ffffffffffffffda RBX: 00007f6c5e815fa0 RCX: 00007f6c5e59aeb9 [ 973.227813][ T5707] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 973.227825][ T5707] RBP: 00007f6c5f447090 R08: 0000000000000000 R09: 0000000000000000 [ 973.227836][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 973.227847][ T5707] R13: 00007f6c5e816038 R14: 00007f6c5e815fa0 R15: 00007fffc2a48bb8 [ 973.227878][ T5707] [ 973.666821][ T5721] FAULT_INJECTION: forcing a failure. [ 973.666821][ T5721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.708877][ T5721] CPU: 0 UID: 0 PID: 5721 Comm: syz.4.8107 Not tainted syzkaller #0 PREEMPT(full) [ 973.708902][ T5721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 973.708911][ T5721] Call Trace: [ 973.708919][ T5721] [ 973.708926][ T5721] dump_stack_lvl+0xe8/0x150 [ 973.708951][ T5721] should_fail_ex+0x412/0x560 [ 973.708975][ T5721] _copy_from_user+0x2d/0xb0 [ 973.708997][ T5721] __sys_bpf+0x229/0x920 [ 973.709011][ T5721] ? __pfx___sys_bpf+0x10/0x10 [ 973.709030][ T5721] ? ksys_write+0x242/0x270 [ 973.709045][ T5721] ? __pfx_ksys_write+0x10/0x10 [ 973.709063][ T5721] __x64_sys_bpf+0x7c/0x90 [ 973.709086][ T5721] do_syscall_64+0xe2/0xf80 [ 973.709099][ T5721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.709109][ T5721] ? trace_irq_disable+0x37/0x100 [ 973.709119][ T5721] ? clear_bhb_loop+0x60/0xb0 [ 973.709131][ T5721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.709140][ T5721] RIP: 0033:0x7f6c5e59aeb9 [ 973.709151][ T5721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.709160][ T5721] RSP: 002b:00007f6c5f447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 973.709171][ T5721] RAX: ffffffffffffffda RBX: 00007f6c5e815fa0 RCX: 00007f6c5e59aeb9 [ 973.709179][ T5721] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 973.709185][ T5721] RBP: 00007f6c5f447090 R08: 0000000000000000 R09: 0000000000000000 [ 973.709192][ T5721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.709197][ T5721] R13: 00007f6c5e816038 R14: 00007f6c5e815fa0 R15: 00007fffc2a48bb8 [ 973.709213][ T5721] [ 974.015986][ T5730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8112'. [ 974.328059][ T5745] IPv6: addrconf: prefix option has invalid lifetime [ 974.474290][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8114'. [ 975.782729][ T5726] smc: net device hsr0 applied user defined pnetid SYZ2 [ 975.881169][ T5723] wg1 speed is unknown, defaulting to 1000 [ 975.905770][ T5723] ip6_vti0 speed is unknown, defaulting to 1000 [ 975.927762][ T5764] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 976.271883][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8125'. [ 976.440443][ T5794] netlink: 372 bytes leftover after parsing attributes in process `syz.2.8127'. [ 976.784459][ T5806] syzkaller0: entered promiscuous mode [ 976.812036][ T5806] syzkaller0: entered allmulticast mode [ 978.989537][T29263] bridge_slave_0: left allmulticast mode [ 979.008538][T29263] bridge_slave_0: left promiscuous mode [ 979.045375][T29263] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.129225][T29263] veth11: left allmulticast mode [ 979.134228][T29263] veth11: left promiscuous mode [ 979.152926][T29263] bridge8: port 2(veth11) entered disabled state [ 979.190045][T29263] veth9: left allmulticast mode [ 979.195081][T29263] veth9: left promiscuous mode [ 979.211243][T29263] bridge8: port 1(veth9) entered disabled state [ 979.334908][T29263] ip6gretap0 (unregistering): left promiscuous mode [ 979.355140][ T5887] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8149'. [ 979.396643][ T5887] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8149'. [ 979.574012][ T5905] FAULT_INJECTION: forcing a failure. [ 979.574012][ T5905] name failslab, interval 1, probability 0, space 0, times 0 [ 979.587660][ T5905] CPU: 0 UID: 0 PID: 5905 Comm: syz.2.8154 Not tainted syzkaller #0 PREEMPT(full) [ 979.587685][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 979.587695][ T5905] Call Trace: [ 979.587702][ T5905] [ 979.587721][ T5905] dump_stack_lvl+0xe8/0x150 [ 979.587747][ T5905] should_fail_ex+0x412/0x560 [ 979.587771][ T5905] should_failslab+0xa8/0x100 [ 979.587791][ T5905] __kmalloc_noprof+0xde/0x7e0 [ 979.587806][ T5905] ? sk_prot_alloc+0xe7/0x210 [ 979.587830][ T5905] sk_prot_alloc+0xe7/0x210 [ 979.587848][ T5905] ? sk_alloc+0x27/0x390 [ 979.587869][ T5905] sk_alloc+0x3a/0x390 [ 979.587893][ T5905] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 979.587924][ T5905] ? __fget_files+0x2a/0x420 [ 979.587942][ T5905] ? __fget_files+0x3a0/0x420 [ 979.587958][ T5905] ? __fget_files+0x2a/0x420 [ 979.587980][ T5905] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 979.587999][ T5905] bpf_prog_test_run+0x2c7/0x340 [ 979.588021][ T5905] __sys_bpf+0x5cb/0x920 [ 979.588040][ T5905] ? __pfx___sys_bpf+0x10/0x10 [ 979.588066][ T5905] ? ksys_write+0x242/0x270 [ 979.588089][ T5905] ? __pfx_ksys_write+0x10/0x10 [ 979.588125][ T5905] __x64_sys_bpf+0x7c/0x90 [ 979.588147][ T5905] do_syscall_64+0xe2/0xf80 [ 979.588168][ T5905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.588185][ T5905] ? trace_irq_disable+0x37/0x100 [ 979.588200][ T5905] ? clear_bhb_loop+0x60/0xb0 [ 979.588219][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.588236][ T5905] RIP: 0033:0x7f4dc879aeb9 [ 979.588253][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.588267][ T5905] RSP: 002b:00007f4dc959c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 979.588287][ T5905] RAX: ffffffffffffffda RBX: 00007f4dc8a15fa0 RCX: 00007f4dc879aeb9 [ 979.588300][ T5905] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 979.588312][ T5905] RBP: 00007f4dc959c090 R08: 0000000000000000 R09: 0000000000000000 [ 979.588323][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.588335][ T5905] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 979.588365][ T5905] [ 979.941296][T29263] gretap0 (unregistering): left promiscuous mode [ 980.120439][T29263] bridge0 (unregistering): left promiscuous mode [ 980.177743][ T5927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8159'. [ 980.694783][T29263] .` (unregistering): (slave 30): Releasing backup interface [ 980.705288][T29263] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.714656][T29263] .` (unregistering): Released all slaves [ 980.825294][T29263] bond1 (unregistering): Released all slaves [ 980.941431][T29263] bond2 (unregistering): Released all slaves [ 980.960473][T29263] bond0 (unregistering): (slave bond3): Releasing backup interface [ 980.969340][T29263] bond0 (unregistering): Released all slaves [ 981.099532][T29263] bond3 (unregistering): Released all slaves [ 981.113645][T29263] bond4 (unregistering): Released all slaves [ 981.265220][T29263] bond5 (unregistering): Released all slaves [ 981.289801][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8142'. [ 981.305398][ T5887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 981.441700][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8162'. [ 981.510053][T29263] : left promiscuous mode [ 981.607930][T29263] : left promiscuous mode [ 981.768935][T29263] tipc: Left network mode [ 981.908991][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8170'. [ 982.030553][ T5977] netlink: 'syz.2.8173': attribute type 2 has an invalid length. [ 982.120991][ T5977] l24): entered promiscuous mode [ 982.552053][T29263] hsr_slave_0: left promiscuous mode [ 982.579511][T29263] hsr_slave_1: left promiscuous mode [ 982.585919][T29263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.647611][T29263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.803948][T29263] pimreg (unregistering): left allmulticast mode [ 983.369063][ T6027] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8184'. [ 983.641009][ T6036] netlink: 'syz.1.8185': attribute type 298 has an invalid length. [ 983.686351][ T6036] netlink: 'syz.1.8185': attribute type 4 has an invalid length. [ 983.709037][ T6036] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8185'. [ 984.033118][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8177'. [ 984.127587][ T6036] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 984.167775][ T6027] wg1 speed is unknown, defaulting to 1000 [ 984.210473][ T6027] ip6_vti0 speed is unknown, defaulting to 1000 [ 984.539334][T29263] IPVS: stop unused estimator thread 0... [ 985.224567][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8197'. [ 985.308479][ T6092] FAULT_INJECTION: forcing a failure. [ 985.308479][ T6092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.345532][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.2.8200 Not tainted syzkaller #0 PREEMPT(full) [ 985.345558][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 985.345569][ T6092] Call Trace: [ 985.345576][ T6092] [ 985.345585][ T6092] dump_stack_lvl+0xe8/0x150 [ 985.345612][ T6092] should_fail_ex+0x412/0x560 [ 985.345639][ T6092] _copy_from_user+0x2d/0xb0 [ 985.345663][ T6092] ___sys_sendmsg+0x1c6/0x360 [ 985.345690][ T6092] ? __pfx____sys_sendmsg+0x10/0x10 [ 985.345709][ T6092] ? __lock_acquire+0x6b5/0x2cf0 [ 985.345780][ T6092] __sys_sendmmsg+0x27c/0x4e0 [ 985.345807][ T6092] ? __pfx___sys_sendmmsg+0x10/0x10 [ 985.345827][ T6092] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 985.345873][ T6092] ? ksys_write+0x242/0x270 [ 985.345898][ T6092] ? __pfx_ksys_write+0x10/0x10 [ 985.345928][ T6092] __x64_sys_sendmmsg+0xa0/0xc0 [ 985.345951][ T6092] do_syscall_64+0xe2/0xf80 [ 985.345971][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.345987][ T6092] ? trace_irq_disable+0x37/0x100 [ 985.346002][ T6092] ? clear_bhb_loop+0x60/0xb0 [ 985.346021][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.346037][ T6092] RIP: 0033:0x7f4dc879aeb9 [ 985.346054][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.346068][ T6092] RSP: 002b:00007f4dc959c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 985.346088][ T6092] RAX: ffffffffffffffda RBX: 00007f4dc8a15fa0 RCX: 00007f4dc879aeb9 [ 985.346101][ T6092] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 985.346113][ T6092] RBP: 00007f4dc959c090 R08: 0000000000000000 R09: 0000000000000000 [ 985.346124][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 985.346134][ T6092] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 985.346163][ T6092] [ 985.389449][ T6094] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8198'. [ 985.779155][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8203'. [ 985.831958][ T6113] netlink: 'syz.4.8206': attribute type 10 has an invalid length. [ 985.848635][ T6113] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8206'. [ 986.259196][ T6140] FAULT_INJECTION: forcing a failure. [ 986.259196][ T6140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.277786][ T6131] syzkaller0: entered promiscuous mode [ 986.286465][ T6131] syzkaller0: entered allmulticast mode [ 986.293911][ T6140] CPU: 1 UID: 0 PID: 6140 Comm: syz.0.8212 Not tainted syzkaller #0 PREEMPT(full) [ 986.293935][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 986.293946][ T6140] Call Trace: [ 986.293953][ T6140] [ 986.293962][ T6140] dump_stack_lvl+0xe8/0x150 [ 986.293986][ T6140] should_fail_ex+0x412/0x560 [ 986.294010][ T6140] _copy_to_user+0x31/0xb0 [ 986.294035][ T6140] bpf_test_finish+0x1db/0x6b0 [ 986.294063][ T6140] ? __pfx_bpf_test_finish+0x10/0x10 [ 986.294081][ T6140] ? eth_type_trans+0x35e/0x6d0 [ 986.294111][ T6140] bpf_prog_test_run_skb+0x10c6/0x1c90 [ 986.294143][ T6140] ? __fget_files+0x2a/0x420 [ 986.294161][ T6140] ? __fget_files+0x3a0/0x420 [ 986.294178][ T6140] ? __fget_files+0x2a/0x420 [ 986.294209][ T6140] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 986.294226][ T6140] bpf_prog_test_run+0x2c7/0x340 [ 986.294249][ T6140] __sys_bpf+0x5cb/0x920 [ 986.294268][ T6140] ? __pfx___sys_bpf+0x10/0x10 [ 986.294301][ T6140] ? ksys_write+0x242/0x270 [ 986.294325][ T6140] ? __pfx_ksys_write+0x10/0x10 [ 986.294354][ T6140] __x64_sys_bpf+0x7c/0x90 [ 986.294377][ T6140] do_syscall_64+0xe2/0xf80 [ 986.294398][ T6140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.294413][ T6140] ? trace_irq_disable+0x37/0x100 [ 986.294429][ T6140] ? clear_bhb_loop+0x60/0xb0 [ 986.294448][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.294464][ T6140] RIP: 0033:0x7f6e5319aeb9 [ 986.294480][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.294494][ T6140] RSP: 002b:00007f6e540f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 986.294513][ T6140] RAX: ffffffffffffffda RBX: 00007f6e53415fa0 RCX: 00007f6e5319aeb9 [ 986.294525][ T6140] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 986.294536][ T6140] RBP: 00007f6e540f8090 R08: 0000000000000000 R09: 0000000000000000 [ 986.294545][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.294554][ T6140] R13: 00007f6e53416038 R14: 00007f6e53415fa0 R15: 00007ffd7df0d2c8 [ 986.294575][ T6140] [ 987.997015][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 988.437430][ T6149] wg1 speed is unknown, defaulting to 1000 [ 988.444882][ T6149] ip6_vti0 speed is unknown, defaulting to 1000 [ 988.468964][ T5323] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 988.837761][T29289] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 988.947974][ T6197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.977293][ T6197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.009095][ T6197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.042661][ T6199] FAULT_INJECTION: forcing a failure. [ 989.042661][ T6199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.087225][ T6199] CPU: 1 UID: 0 PID: 6199 Comm: syz.2.8227 Not tainted syzkaller #0 PREEMPT(full) [ 989.087251][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 989.087262][ T6199] Call Trace: [ 989.087269][ T6199] [ 989.087277][ T6199] dump_stack_lvl+0xe8/0x150 [ 989.087304][ T6199] should_fail_ex+0x412/0x560 [ 989.087328][ T6199] _copy_to_user+0x31/0xb0 [ 989.087354][ T6199] bpf_test_finish+0x22c/0x6b0 [ 989.087383][ T6199] ? __pfx_bpf_test_finish+0x10/0x10 [ 989.087402][ T6199] ? eth_type_trans+0x35e/0x6d0 [ 989.087434][ T6199] bpf_prog_test_run_skb+0x10c6/0x1c90 [ 989.087467][ T6199] ? __fget_files+0x2a/0x420 [ 989.087485][ T6199] ? __fget_files+0x3a0/0x420 [ 989.087502][ T6199] ? __fget_files+0x2a/0x420 [ 989.087525][ T6199] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 989.087544][ T6199] bpf_prog_test_run+0x2c7/0x340 [ 989.087568][ T6199] __sys_bpf+0x5cb/0x920 [ 989.087588][ T6199] ? __pfx___sys_bpf+0x10/0x10 [ 989.087621][ T6199] ? ksys_write+0x242/0x270 [ 989.087646][ T6199] ? __pfx_ksys_write+0x10/0x10 [ 989.087676][ T6199] __x64_sys_bpf+0x7c/0x90 [ 989.087700][ T6199] do_syscall_64+0xe2/0xf80 [ 989.087720][ T6199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.087736][ T6199] ? clear_bhb_loop+0x60/0xb0 [ 989.087757][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.087774][ T6199] RIP: 0033:0x7f4dc879aeb9 [ 989.087791][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.087806][ T6199] RSP: 002b:00007f4dc959c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 989.087825][ T6199] RAX: ffffffffffffffda RBX: 00007f4dc8a15fa0 RCX: 00007f4dc879aeb9 [ 989.087838][ T6199] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 989.087850][ T6199] RBP: 00007f4dc959c090 R08: 0000000000000000 R09: 0000000000000000 [ 989.087861][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.087870][ T6199] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 989.087900][ T6199] [ 989.567184][ T5322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 989.681059][ T6220] syzkaller0: entered promiscuous mode [ 989.687858][ T6220] syzkaller0: entered allmulticast mode [ 989.769370][ T6197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.787352][ T6197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.500082][ T6224] vlan2: entered promiscuous mode [ 991.505240][ T6224] batadv0: entered promiscuous mode [ 991.534755][T29289] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 991.544908][T29289] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 991.564117][T29273] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.590123][T29273] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.626772][T29273] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.635522][T29273] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.771350][ T6243] IPv4: Oversized IP packet from 127.202.26.0 [ 991.789614][ T6243] netlink: 'syz.1.8236': attribute type 10 has an invalid length. [ 991.798556][ T6243] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8236'. [ 991.809585][ T6243] hsr0: entered promiscuous mode [ 991.814941][ T6243] bridge0: port 3(hsr0) entered blocking state [ 991.822093][ T6246] FAULT_INJECTION: forcing a failure. [ 991.822093][ T6246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.836034][ T6243] bridge0: port 3(hsr0) entered disabled state [ 991.843474][ T6246] CPU: 1 UID: 0 PID: 6246 Comm: syz.2.8239 Not tainted syzkaller #0 PREEMPT(full) [ 991.843497][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 991.843509][ T6246] Call Trace: [ 991.843516][ T6246] [ 991.843524][ T6246] dump_stack_lvl+0xe8/0x150 [ 991.843551][ T6246] should_fail_ex+0x412/0x560 [ 991.843577][ T6246] _copy_to_user+0x31/0xb0 [ 991.843601][ T6246] bpf_test_finish+0x53c/0x6b0 [ 991.843631][ T6246] ? __pfx_bpf_test_finish+0x10/0x10 [ 991.843650][ T6246] ? eth_type_trans+0x35e/0x6d0 [ 991.843683][ T6246] bpf_prog_test_run_skb+0x10c6/0x1c90 [ 991.843716][ T6246] ? __fget_files+0x2a/0x420 [ 991.843734][ T6246] ? __fget_files+0x3a0/0x420 [ 991.843751][ T6246] ? __fget_files+0x2a/0x420 [ 991.843775][ T6246] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 991.843795][ T6246] bpf_prog_test_run+0x2c7/0x340 [ 991.843818][ T6246] __sys_bpf+0x5cb/0x920 [ 991.843839][ T6246] ? __pfx___sys_bpf+0x10/0x10 [ 991.843872][ T6246] ? ksys_write+0x242/0x270 [ 991.843898][ T6246] ? __pfx_ksys_write+0x10/0x10 [ 991.843927][ T6246] __x64_sys_bpf+0x7c/0x90 [ 991.843951][ T6246] do_syscall_64+0xe2/0xf80 [ 991.843972][ T6246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.843988][ T6246] ? trace_irq_disable+0x37/0x100 [ 991.844005][ T6246] ? clear_bhb_loop+0x60/0xb0 [ 991.844026][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.844044][ T6246] RIP: 0033:0x7f4dc879aeb9 [ 991.844061][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.844075][ T6246] RSP: 002b:00007f4dc959c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 991.844095][ T6246] RAX: ffffffffffffffda RBX: 00007f4dc8a15fa0 RCX: 00007f4dc879aeb9 [ 991.844108][ T6246] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 991.844120][ T6246] RBP: 00007f4dc959c090 R08: 0000000000000000 R09: 0000000000000000 [ 991.844132][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.844142][ T6246] R13: 00007f4dc8a16038 R14: 00007f4dc8a15fa0 R15: 00007ffe4c5189c8 [ 991.844180][ T6246] [ 991.845582][ T6243] hsr0: entered allmulticast mode [ 991.930209][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8238'. [ 991.933951][ T6243] hsr_slave_0: entered allmulticast mode [ 992.076997][ T6243] hsr_slave_1: entered allmulticast mode [ 992.085134][ T6243] bridge0: port 3(hsr0) entered blocking state [ 992.091485][ T6243] bridge0: port 3(hsr0) entered forwarding state [ 992.316724][ T5320] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 992.382908][ T6274] Bluetooth: MGMT ver 1.23 [ 992.459329][ T6274] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 992.472610][ T6274] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.551851][ T6275] syzkaller0: entered promiscuous mode [ 992.557972][ T6275] syzkaller0: entered allmulticast mode [ 992.659403][ T6274] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 992.688111][ T6274] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.716897][ C1] [ 992.719261][ C1] ============================================ [ 992.725410][ C1] WARNING: possible recursive locking detected [ 992.731581][ C1] syzkaller #0 Not tainted [ 992.736001][ C1] -------------------------------------------- [ 992.742165][ C1] rm/6286 is trying to acquire lock: [ 992.747449][ C1] ffff888030872f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 992.756526][ C1] [ 992.756526][ C1] but task is already holding lock: [ 992.763898][ C1] ffff888061a0ef70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 992.774188][ C1] [ 992.774188][ C1] other info that might help us debug this: [ 992.775335][ T6293] nbd: must specify at least one socket [ 992.782244][ C1] Possible unsafe locking scenario: [ 992.782244][ C1] [ 992.782255][ C1] CPU0 [ 992.782261][ C1] ---- [ 992.782265][ C1] lock(&hsr->seqnr_lock); [ 992.782283][ C1] lock(&hsr->seqnr_lock); [ 992.782294][ C1] [ 992.782294][ C1] *** DEADLOCK *** [ 992.782294][ C1] [ 992.782300][ C1] May be due to missing lock nesting notation [ 992.782300][ C1] [ 992.782307][ C1] 10 locks held by rm/6286: [ 992.782319][ C1] #0: ffffffff8ec5c278 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 992.782367][ C1] #1: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 992.782414][ C1] #2: ffffc90000a08ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5a0 [ 992.782461][ C1] #3: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 992.782505][ C1] #4: ffff888061a0ef70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 992.782550][ C1] #5: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 992.782588][ C1] #6: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 992.782636][ C1] #7: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1920 [ 992.782680][ C1] #8: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 992.782724][ C1] #9: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 992.928163][ C1] [ 992.928163][ C1] stack backtrace: [ 992.934035][ C1] CPU: 1 UID: 0 PID: 6286 Comm: rm Not tainted syzkaller #0 PREEMPT(full) [ 992.934053][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 992.934063][ C1] Call Trace: [ 992.934071][ C1] [ 992.934079][ C1] dump_stack_lvl+0xe8/0x150 [ 992.934099][ C1] print_deadlock_bug+0x279/0x290 [ 992.934116][ C1] __lock_acquire+0x253f/0x2cf0 [ 992.934138][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 992.934156][ C1] ? __pfx_skb_network_protocol+0x10/0x10 [ 992.934180][ C1] ? hsr_dev_xmit+0x237/0x360 [ 992.934193][ C1] lock_acquire+0x106/0x330 [ 992.934211][ C1] ? hsr_dev_xmit+0x237/0x360 [ 992.934228][ C1] ? hsr_dev_xmit+0x237/0x360 [ 992.934241][ C1] _raw_spin_lock_bh+0x36/0x50 [ 992.934257][ C1] ? hsr_dev_xmit+0x237/0x360 [ 992.934270][ C1] hsr_dev_xmit+0x237/0x360 [ 992.934282][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 992.934296][ C1] dev_hard_start_xmit+0x2cd/0x7f0 [ 992.934321][ C1] __dev_queue_xmit+0x168f/0x3850 [ 992.934344][ C1] ? ebt_do_table+0xe4/0x2830 [ 992.934361][ C1] ? __dev_queue_xmit+0x274/0x3850 [ 992.934384][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 992.934404][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 992.934423][ C1] ? ebt_do_table+0x2665/0x2830 [ 992.934439][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 992.934451][ C1] ? ebt_do_table+0x2665/0x2830 [ 992.934479][ C1] br_dev_queue_push_xmit+0x6d2/0x8b0 [ 992.934494][ C1] ? lock_acquire+0x106/0x330 [ 992.934514][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 992.934529][ C1] ? NF_HOOK+0xa2/0x3f0 [ 992.934543][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 992.934557][ C1] NF_HOOK+0x360/0x3f0 [ 992.934572][ C1] ? NF_HOOK+0xa2/0x3f0 [ 992.934584][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 992.934598][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 992.934612][ C1] ? lock_acquire+0x106/0x330 [ 992.934637][ C1] br_forward_finish+0xd3/0x130 [ 992.934651][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 992.934665][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 992.934679][ C1] NF_HOOK+0x360/0x3f0 [ 992.934694][ C1] ? NF_HOOK+0xa2/0x3f0 [ 992.934706][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 992.934720][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 992.934735][ C1] ? __skb_clone+0x483/0x7a0 [ 992.934753][ C1] ? br_handle_vlan+0x61/0x530 [ 992.934774][ C1] __br_forward+0x397/0x540 [ 992.934787][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 992.934807][ C1] br_flood+0x6ee/0xb80 [ 992.934825][ C1] ? br_dev_xmit+0x193/0x1920 [ 992.934842][ C1] br_dev_xmit+0x127a/0x1920 [ 992.934860][ C1] ? br_dev_xmit+0x193/0x1920 [ 992.934878][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 992.934895][ C1] ? netif_skb_features+0xa95/0x1560 [ 992.934915][ C1] ? __pfx___skb_get_hash_net+0x10/0x10 [ 992.934937][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 992.934960][ C1] dev_hard_start_xmit+0x2cd/0x7f0 [ 992.934985][ C1] __dev_queue_xmit+0x168f/0x3850 [ 992.935004][ C1] ? handle_softirqs+0x22a/0x7c0 [ 992.935018][ C1] ? rcu_is_watching+0x15/0xb0 [ 992.935033][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 992.935048][ C1] ? tomoyo_encode+0x28b/0x550 [ 992.935065][ C1] ? __dev_queue_xmit+0x274/0x3850 [ 992.935085][ C1] ? tomoyo_path_perm+0x283/0x560 [ 992.935098][ C1] ? security_inode_getattr+0x12b/0x310 [ 992.935118][ C1] ? do_syscall_64+0xe2/0xf80 [ 992.935135][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.935152][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 992.935175][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 992.935198][ C1] ? hsr_addr_subst_dest+0x30d/0xa90 [ 992.935213][ C1] ? skb_clone+0x246/0x3a0 [ 992.935233][ C1] hsr_forward_skb+0x157b/0x2860 [ 992.935254][ C1] ? hsr_forward_skb+0xb3/0x2860 [ 992.935270][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 992.935285][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 992.935303][ C1] ? __asan_memset+0x22/0x50 [ 992.935321][ C1] ? __skb_pad+0x405/0x610 [ 992.935343][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 992.935362][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 992.935377][ C1] hsr_announce+0x1db/0x370 [ 992.935391][ C1] ? hsr_announce+0x89/0x370 [ 992.935404][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 992.935417][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 992.935435][ C1] call_timer_fn+0x192/0x5a0 [ 992.935456][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 992.935469][ C1] ? call_timer_fn+0xd4/0x5a0 [ 992.935488][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 992.935512][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 992.935527][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 992.935541][ C1] __run_timer_base+0x652/0x8b0 [ 992.935559][ C1] ? ktime_get+0x45/0x200 [ 992.935579][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 992.935599][ C1] ? sched_clock_cpu+0x74/0x440 [ 992.935622][ C1] run_timer_softirq+0xb7/0x170 [ 992.935640][ C1] handle_softirqs+0x22a/0x7c0 [ 992.935654][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 992.935669][ C1] __irq_exit_rcu+0x5f/0x150 [ 992.935682][ C1] irq_exit_rcu+0x9/0x30 [ 992.935693][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 992.935711][ C1] [ 992.935716][ C1] [ 992.935722][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 992.935737][ C1] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 992.935759][ C1] Code: 20 39 07 8c 48 c7 c6 60 39 07 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 c7 46 5a 07 65 8b 0d bc 46 5a 07 f7 c1 ff [ 992.935772][ C1] RSP: 0018:ffffc9000be07530 EFLAGS: 00000282 [ 992.935786][ C1] RAX: 0000000000000001 RBX: ffffffff81ae069d RCX: ffff88807d2cbd00 [ 992.935801][ C1] RDX: 00000000b5de00dc RSI: ffffffff8c073960 RDI: ffffffff8c073920 [ 992.935811][ C1] RBP: 0000000000000000 R08: ffffffff81ae069d R09: ffffffff8e55a360 [ 992.935822][ C1] R10: ffffc9000be07638 R11: ffffffff81af9170 R12: ffff88807d2cbd00 [ 992.935833][ C1] R13: 0000000000000040 R14: 00007fc15e0eee87 R15: 1ffff920017c0ec6 [ 992.935845][ C1] ? is_module_text_address+0x1d/0x1e0 [ 992.935863][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 992.935880][ C1] ? is_module_text_address+0x1d/0x1e0 [ 992.935901][ C1] rcu_is_watching+0x15/0xb0 [ 992.935914][ C1] ? is_module_text_address+0x1d/0x1e0 [ 992.935931][ C1] is_module_text_address+0x147/0x1e0 [ 992.935950][ C1] kernel_text_address+0x94/0xe0 [ 992.935969][ C1] __kernel_text_address+0xd/0x30 [ 992.935986][ C1] unwind_get_return_address+0x4d/0x90 [ 992.936002][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 992.936019][ C1] arch_stack_walk+0xfb/0x150 [ 992.936038][ C1] stack_trace_save+0xa9/0x100 [ 992.936055][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 992.936071][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 992.936091][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 992.936108][ C1] kasan_save_track+0x3e/0x80 [ 992.936121][ C1] ? kasan_save_track+0x3e/0x80 [ 992.936133][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 992.936146][ C1] ? __kmalloc_noprof+0x40c/0x7e0 [ 992.936158][ C1] ? tomoyo_encode+0x28b/0x550 [ 992.936175][ C1] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 992.936192][ C1] ? tomoyo_path_perm+0x283/0x560 [ 992.936205][ C1] ? security_inode_getattr+0x12b/0x310 [ 992.936224][ C1] ? __x64_sys_newfstat+0x13b/0x270 [ 992.936240][ C1] ? do_syscall_64+0xe2/0xf80 [ 992.936257][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.936287][ C1] __kasan_kmalloc+0x93/0xb0 [ 992.936302][ C1] __kmalloc_noprof+0x40c/0x7e0 [ 992.936315][ C1] ? tomoyo_encode+0x28b/0x550 [ 992.936334][ C1] tomoyo_encode+0x28b/0x550 [ 992.936353][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 992.936377][ C1] tomoyo_path_perm+0x283/0x560 [ 992.936391][ C1] ? tomoyo_path_perm+0x251/0x560 [ 992.936406][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 992.936432][ C1] ? ext4_file_read_iter+0x185/0x660 [ 992.936450][ C1] ? vfs_read+0x854/0xa70 [ 992.936471][ C1] security_inode_getattr+0x12b/0x310 [ 992.936491][ C1] __x64_sys_newfstat+0x13b/0x270 [ 992.936509][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 992.936532][ C1] ? __pfx_ksys_read+0x10/0x10 [ 992.936554][ C1] do_syscall_64+0xe2/0xf80 [ 992.936573][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.936586][ C1] ? trace_irq_disable+0x37/0x100 [ 992.936600][ C1] ? clear_bhb_loop+0x60/0xb0 [ 992.936616][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.936630][ C1] RIP: 0033:0x7fc15e0eee87 [ 992.936643][ C1] Code: 00 00 00 b8 15 00 00 00 0f 05 48 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 28 44 01 00 b8 ff ff ff ff c3 66 90 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 f7 d8 89 05 08 44 01 00 b8 ff ff ff ff [ 992.936656][ C1] RSP: 002b:00007ffc30d567d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 992.936670][ C1] RAX: ffffffffffffffda RBX: 00007fc15e0c30c0 RCX: 00007fc15e0eee87 [ 992.936681][ C1] RDX: 0000000000000003 RSI: 00007ffc30d56870 RDI: 0000000000000003 [ 992.936690][ C1] RBP: 00007ffc30d56930 R08: 00007fc15e0c4a90 R09: 00007fc15e0c30c0 [ 992.936701][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.936710][ C1] R13: 0000000000000000 R14: 00007ffc30d569d0 R15: 0000000000000000 [ 992.936725][ C1] [ 993.841854][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.851593][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 993.857785][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 993.975406][ T6274] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 993.987716][ T6274] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.079938][ T6274] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 994.090483][ T6274] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.177864][T29273] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 994.191339][T29273] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.202897][T29273] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 994.211493][T29273] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.220128][T29273] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 994.230466][T29273] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.239058][T29273] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 994.248586][T29273] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.196593][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 995.686840][ T97] block nbd5: Possible stuck request ffff888025c48000: control (read@0,1024B). Runtime 330 seconds [ 995.699690][ T97] block nbd5: Possible stuck request ffff888025c48200: control (read@1024,1024B). Runtime 330 seconds [ 995.711174][ T97] block nbd5: Possible stuck request ffff888025c48400: control (read@2048,1024B). Runtime 330 seconds [ 995.722388][ T97] block nbd5: Possible stuck request ffff888025c48600: control (read@3072,1024B). Runtime 330 seconds [ 999.036655][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 999.044684][ C0] lec:lec_tx_timeout: lec0