last executing test programs: 7m31.806684913s ago: executing program 4 (id=8328): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 7m31.705062104s ago: executing program 4 (id=8331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb, 0x3, 0xa7, 0x101, 0xd8d6, 0x4001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 7m30.889737714s ago: executing program 4 (id=8339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r0) 7m30.730591952s ago: executing program 4 (id=8343): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000aff8d00"}) 7m30.506190413s ago: executing program 4 (id=8348): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) unshare(0xa020480) 7m30.089316047s ago: executing program 4 (id=8361): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0xccd4ddef28b9e90e}, 0x40094) 7m29.797342298s ago: executing program 32 (id=8361): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0xccd4ddef28b9e90e}, 0x40094) 2m32.561902164s ago: executing program 5 (id=12880): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x800000, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2m32.402537824s ago: executing program 5 (id=12886): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xb}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3c, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "9ede0000000000002000"}]}}}}}}}, 0x0) 2m32.3184521s ago: executing program 5 (id=12887): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r0, 0x100000000) 2m31.814290157s ago: executing program 5 (id=12893): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000019c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xb9, 0x80}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x38}}, 0x10004800) 2m31.611054961s ago: executing program 5 (id=12895): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m31.413837112s ago: executing program 5 (id=12902): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x14, 0x2, 0x4) listen(r1, 0xfffff800) sendmsg(0xffffffffffffffff, 0x0, 0x4008000) ioctl$SIOCX25GDTEFACILITIES(r1, 0x401061f4, 0x0) 2m16.384706591s ago: executing program 33 (id=12902): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x14, 0x2, 0x4) listen(r1, 0xfffff800) sendmsg(0xffffffffffffffff, 0x0, 0x4008000) ioctl$SIOCX25GDTEFACILITIES(r1, 0x401061f4, 0x0) 1.800157898s ago: executing program 6 (id=15356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.417578755s ago: executing program 2 (id=15366): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x4, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x0, 0x12}, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) r1 = socket(0x10, 0x803, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r7, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r9, 0x0, 0xcf, 0x0, 0x0) close(0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) 1.356702224s ago: executing program 6 (id=15368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f00000030c0)=[{r2, 0x1000}], 0x1, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB="677c97135e85d87277dfedea3fe3cb5e719e3929ffaca32c7c877e86b0d9a0f40d0c20039d8c20de385802e2e4aa6381d09c03f852f2e72f2e28011847d1a833ee66bfde114d7dff139f47bfd365cc6acbfb89cffc26e5"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000200)=@ethtool_channels={0x50, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x4}}) r9 = socket(0x1, 0x803, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000028fd645fbbe34b2244000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRESOCT=r10, @ANYBLOB="0500000000000008000000000000ffff00040000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="01000000030000000100000000000000000000000000000000000000cb5812702a5e1d07933f0fa498a52cac7dba8a68546a104cff59f88acd111fbaff3549ba43248bbe5c00f9b3c9ec459504aa7c0ec629a376a28990a7ffca4935f658dda60dee49ffb1c7bd48dae61b42ded643873947d7a3c714d362199ca4d2efffc3c74668f54f6949bab460"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x1a, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000fd0000131811000000000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007113300005000000183900000500000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r12, 0x40047459, &(0x7f0000000340)=0x441) pwritev(r12, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r13, 0x1, 0x28, &(0x7f0000000080)=0x6, 0xfffffffffffffd9a) bind$bt_hci(r13, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xfffffffffffffcdb) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6tnl0\x00', r7, 0x29, 0x8, 0x0, 0x5, 0x45, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8000, 0x10, 0x10000, 0x2}}) sendto$packet(r9, &(0x7f0000000480)="490339fce99e9cf17c2e4fad99af2b6c5d375dc6942573a37682643330d92fdfc3b75e832f43bbda975750747121e493d79f730a1cb9ff428955277261ec904cebaeae1e344c06f1281fbac0076b17fd5b9752601c2c2c6aecba8cc38731a3ebf82f26dee3d4aa27dcb0fac2447fecd55349cdb86449c5de191d1b751086277a39a51ca2cd129c14f2490860a22d1c4c016d06292dd7e94dcf62603e773c8cb62d4872d5a1ba495d002bbdedceec70cc32230668f3a6ab407516ecf588819b969e0bdf1343a66298ef62c9f5f150327623", 0xd1, 0x800, &(0x7f0000000640)={0x11, 0x2, r14, 0x1, 0x2, 0x6, @local}, 0x14) 1.155780939s ago: executing program 0 (id=15371): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x19, 0x0, &(0x7f0000000080)) setsockopt(r2, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000004000c002b8008000100", @ANYRES32, @ANYBLOB="04001400"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.020510796s ago: executing program 3 (id=15374): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x7, 0x3}]}}, 0x0, 0x26}, 0x20) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r2, 0xff, 0x3, &(0x7f0000000900)="7c73c6e9", 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x20002, @loopback, 0x4}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x2, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0xffffffffffffff6b, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0xffffffff}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x6c}, 0x1, 0xba01}, 0x0) 999.617963ms ago: executing program 0 (id=15375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x4, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0x11, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 895.775347ms ago: executing program 2 (id=15376): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) (async, rerun: 64) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="3400000012000100081c000000ecffff0f0000000c0000000000001014"], 0x34}], 0x1}, 0x40001) (async, rerun: 64) r2 = socket(0x1, 0x80802, 0x0) (async) r3 = epoll_create1(0x0) (async) pselect6(0x40, &(0x7f0000000140)={0x5, 0xdb4, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1000, 0x7}, &(0x7f0000000180)={0x3ff, 0x8, 0x8, 0xa34, 0x4, 0x9, 0x1000, 0xfff}, &(0x7f00000001c0)={0xfffffffffffffff6, 0x8, 0xd, 0x0, 0x9, 0x51f6, 0xaf30, 0x8}, &(0x7f0000000240)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x2]}, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000380)={0x14}) (async, rerun: 32) shutdown(r2, 0x1) (rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x44000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@typedef={0x3, 0x0, 0x0, 0xf, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x41}, 0x20) 895.426461ms ago: executing program 3 (id=15377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) 883.894309ms ago: executing program 1 (id=15378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001900)={&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x4000000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 857.810369ms ago: executing program 6 (id=15379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010000d04040000005c000000", @ANYRES32=0x0, @ANYBLOB="00000000195000001c0012800c0001006d6163766c616e000c0002800600020001000000140035006d6163766c616e30"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) socket$inet(0x2, 0x5, 0x8) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c, 0x0, 0x4}, {0x6}]}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0xe72, 0x10, 0x0, &(0x7f0000000200)="63eced8e46dc3fad77b7b3f7b986edf7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000013002f0a2bbd70000000000007006800", @ANYRES32=r5, @ANYBLOB="400900006522020018001a8009000100766c616e0000000004000580"], 0x38}}, 0x8004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[{0xb, 0xb, 0x5, 0x6f29}, {0x9, 0x6, 0x0, 0x8}, {0x3, 0xe1, 0x2, 0xfffffffd}, {0x1, 0xf9, 0x2, 0x8}, {0xfffc, 0xb, 0x9, 0xfffffffa}, {0x7, 0x2, 0x5, 0x3}, {0x2, 0x1, 0x61}]}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={r6, 0x9, 0x7, 0x8}) sendmsg$rds(r8, &(0x7f00000016c0)={&(0x7f0000000380)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000700)=""/157, 0x9d}], 0x2, &(0x7f00000015c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x6}, &(0x7f0000000400)=0x7, &(0x7f0000000480)=0x5, 0x0, 0xffff, 0x4, 0x80000000, 0x2, 0x8000}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x7f}, &(0x7f00000004c0)=0x3, &(0x7f0000000640)=0x7fff, 0x8, 0x4, 0x6, 0x0, 0x10, 0x9}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000007c0)=""/134, 0x86}, &(0x7f0000000680), 0x1}}], 0xf8, 0x800}, 0x4040) 788.870481ms ago: executing program 2 (id=15380): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x26}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 787.993545ms ago: executing program 3 (id=15381): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x34}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x300, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, r3}, [@IFA_FLAGS={0x8, 0x8, 0x205}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8045}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b27, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000370401000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="f6a1c51fbc1679d6a563890c040000000000240012800b000100677265746170000014000280080004000300"], 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x2, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x98, 0x10}, 0xc) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x2010, r6, 0xf2a9a000) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) 716.913921ms ago: executing program 1 (id=15382): bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4) 673.169899ms ago: executing program 2 (id=15383): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 650.836915ms ago: executing program 0 (id=15384): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000fffff0000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a}, 0x20) 619.186537ms ago: executing program 3 (id=15385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, 0xffffffffffffffff, 0x2000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008010) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x2d, 0x0, 0x1}, {0x40, 0x40}, {0x6}]}) 489.287882ms ago: executing program 1 (id=15386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES64=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x2012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r1, 0x952de000) 485.481981ms ago: executing program 6 (id=15387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @empty, @mcast1, 0x4, 0x8000, 0x40, 0x400, 0x7, 0x1cc0014}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$FICLONE(r4, 0x40049409, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) r6 = accept4$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x800) ioctl$FICLONE(r3, 0x40049409, r6) r7 = socket(0x1e, 0x4, 0x0) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x337) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES8=r1, @ANYBLOB="ed711e300e7f104c7e7250a61d1a7ee16c30e9f3041c043fd460f46e796a52e8373e2f7507022fce3509d3f00929e18c7c4b12039e81abc1ff0ab58c2e1c9a8885e48a94bccf8792b488115a00a6776fb688e263537ab71feae47b302df4d3cf1ffe99e14255c65b6cceabac3fc2367d9d21d3ced36d4e1ff559cc3dd100c7c9b7ee85082c3882599d7d09bb"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 465.145276ms ago: executing program 0 (id=15388): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000b40)=""/4096, &(0x7f0000000040)=0x1000) socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x28, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000002f0000340012800b00010067726574617000002400028003000000090000000800070064010101060010004e22000005000a000100080008000a00", @ANYRES32=r5, @ANYBLOB], 0x5c}}, 0x60000080) 297.386363ms ago: executing program 1 (id=15389): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 297.008723ms ago: executing program 6 (id=15390): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffe, 0x8000, 0x7, 0x81}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) 276.621793ms ago: executing program 2 (id=15391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) 254.97305ms ago: executing program 3 (id=15392): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@dev}, {@in6=@mcast2}, @in6=@local}}, [@mark={0xc}]}, 0x104}}, 0x0) 139.747442ms ago: executing program 1 (id=15393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a010e00000000000000000200ffff0900020073797a32000000000900010073797a30000000000c0006400000000000000042140000001100010000000000000000000700000a"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 139.314292ms ago: executing program 0 (id=15394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {0x5, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) 135.578257ms ago: executing program 2 (id=15395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x406, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 73.432533ms ago: executing program 6 (id=15396): socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a"], 0xc8}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 37.047418ms ago: executing program 1 (id=15397): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001000000800000001db15a97cb04940e924765f6687120cdd08118ba12eee303dcdc2559a3ba8fe228adb54d66d0fb5272a04051463ce291393e3c2293dae9efb3214141", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000007000000009fab000000da71fe57dc9acbeb9db4c8447fc8d4d92f821c2c7e0cfeb54afc1aa000000080b9e7a98f31d8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xd, 0x0}, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00005dcfbbe800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000006800e97800000000000000000a00000022000000100008800c00018008000100", @ANYRES32, @ANYBLOB="c7857cc0e55bbe44de10f96319557d1c789071da7518654f88f420b0868155d40e1383b35a4a198d49eba2d339aa707d9191dd"], 0x28}}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000000340)={{r4}, 0x4, &(0x7f0000000040)=[0x2000000000000005, 0xfffffffd, 0xfc, 0x0], 0xfffffffffffffffd, 0x4, 0x1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000000000007b8af84a0a153f81be6c65e38470ac1cce105b00000000007b8af0ff2c9ca13ebfa100000000020007010000f8ffffffbfa400000000000007040000f0ffffffb7020000c37cdbba7f4452b6e9609434d265255ea958b9fd11103a7ee3f65350aacd61341800"/125, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000000004fb7050000087d406ff532e500000000002800000000000000b7000000000000009500000000000000d0999a33beddf24db7ff030000465c6fcf7ae9c2f1979344625132db1f38c29fe964e775ddde7630d236886eb7e5872a1dad2cd100deeac28dc52bc1822eae20553722d80d1f5337a6505d1889ed69dd7f340b6687ea2120ac9dcbbcccf28e5479730af3e3294170f67fd84aba31369cf8290ba8ea65608aadd58609918257472e1639c6c4"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a40)=0x14) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r10}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000b00)={0x0, @loopback, @loopback}, &(0x7f0000000b40)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000d00)={0x12c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x8, 0xf8, 0x6}, {0x2, 0x5, 0xdb, 0x5}, {0x4, 0x8, 0xfe, 0x80000001}]}}}]}}, {{0x8, 0x1, r10}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8c1e}}}]}}, {{0x8}, {0x4}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4048811) 36.058507ms ago: executing program 0 (id=15398): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xc, 0xfffffffc}, 0x9c) (async) socket$kcm(0x29, 0x5, 0x0) (async) connect$inet(r6, &(0x7f0000000700)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) (async) getpeername(r6, 0x0, 0x0) 0s ago: executing program 3 (id=15399): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0xc00e}, 0x8000) kernel console output (not intermixed with test programs): 0000246 ORIG_RAX: 000000000000002e [ 803.461769][ T8515] RAX: ffffffffffffffda RBX: 00007f9ba19e5fa0 RCX: 00007f9ba178f6c9 [ 803.461782][ T8515] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 803.461793][ T8515] RBP: 00007f9ba2667090 R08: 0000000000000000 R09: 0000000000000000 [ 803.461804][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.461815][ T8515] R13: 00007f9ba19e6038 R14: 00007f9ba19e5fa0 R15: 00007ffc0e9046a8 [ 803.461845][ T8515] [ 803.834559][ T8526] FAULT_INJECTION: forcing a failure. [ 803.834559][ T8526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.848496][ T8526] CPU: 1 UID: 0 PID: 8526 Comm: syz.1.14622 Not tainted syzkaller #0 PREEMPT(full) [ 803.848519][ T8526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 803.848530][ T8526] Call Trace: [ 803.848536][ T8526] [ 803.848544][ T8526] dump_stack_lvl+0x189/0x250 [ 803.848572][ T8526] ? __pfx____ratelimit+0x10/0x10 [ 803.848594][ T8526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.848615][ T8526] ? __pfx__printk+0x10/0x10 [ 803.848634][ T8526] ? __might_fault+0xb0/0x130 [ 803.848667][ T8526] should_fail_ex+0x414/0x560 [ 803.848696][ T8526] _copy_from_user+0x2d/0xb0 [ 803.848718][ T8526] x25_setsockopt+0x13e/0x1f0 [ 803.848739][ T8526] ? __pfx_x25_setsockopt+0x10/0x10 [ 803.848755][ T8526] ? aa_sock_opt_perm+0xff/0x1b0 [ 803.848781][ T8526] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 803.848797][ T8526] ? __pfx_x25_setsockopt+0x10/0x10 [ 803.848816][ T8526] do_sock_setsockopt+0x17c/0x1b0 [ 803.848842][ T8526] __x64_sys_setsockopt+0x13f/0x1b0 [ 803.848864][ T8526] do_syscall_64+0xfa/0xfa0 [ 803.848885][ T8526] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.848908][ T8526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.848925][ T8526] ? clear_bhb_loop+0x60/0xb0 [ 803.848945][ T8526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.848962][ T8526] RIP: 0033:0x7f9ba178f6c9 [ 803.848984][ T8526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.848999][ T8526] RSP: 002b:00007f9ba2667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 803.849017][ T8526] RAX: ffffffffffffffda RBX: 00007f9ba19e5fa0 RCX: 00007f9ba178f6c9 [ 803.849030][ T8526] RDX: 0000000000000001 RSI: 0000000000000106 RDI: 0000000000000004 [ 803.849040][ T8526] RBP: 00007f9ba2667090 R08: 0000000000000004 R09: 0000000000000000 [ 803.849050][ T8526] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 803.849061][ T8526] R13: 00007f9ba19e6038 R14: 00007f9ba19e5fa0 R15: 00007ffc0e9046a8 [ 803.849093][ T8526] [ 804.285450][ T8547] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 804.379653][ T8552] syzkaller0: entered promiscuous mode [ 804.387552][ T8552] syzkaller0: entered allmulticast mode [ 804.442533][ T8555] syzkaller0: entered promiscuous mode [ 804.448715][ T8555] syzkaller0: entered allmulticast mode [ 804.490093][ T8557] netlink: 71 bytes leftover after parsing attributes in process `syz.6.14633'. [ 804.600074][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14636'. [ 804.743846][ T8569] FAULT_INJECTION: forcing a failure. [ 804.743846][ T8569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.777962][ T8576] xt_l2tp: invalid flags combination: 8 [ 804.790288][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14641'. [ 804.801146][ T8569] CPU: 0 UID: 0 PID: 8569 Comm: syz.1.14638 Not tainted syzkaller #0 PREEMPT(full) [ 804.801167][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 804.801178][ T8569] Call Trace: [ 804.801192][ T8569] [ 804.801200][ T8569] dump_stack_lvl+0x189/0x250 [ 804.801227][ T8569] ? __pfx____ratelimit+0x10/0x10 [ 804.801249][ T8569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 804.801271][ T8569] ? __pfx__printk+0x10/0x10 [ 804.801289][ T8569] ? __might_fault+0xb0/0x130 [ 804.801322][ T8569] should_fail_ex+0x414/0x560 [ 804.801353][ T8569] _copy_from_user+0x2d/0xb0 [ 804.801376][ T8569] ___sys_sendmsg+0x158/0x2a0 [ 804.801397][ T8569] ? __pfx____sys_sendmsg+0x10/0x10 [ 804.801449][ T8569] ? __fget_files+0x2a/0x420 [ 804.801465][ T8569] ? __fget_files+0x3a0/0x420 [ 804.801492][ T8569] __x64_sys_sendmsg+0x19b/0x260 [ 804.801513][ T8569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 804.801541][ T8569] ? __pfx_ksys_write+0x10/0x10 [ 804.801567][ T8569] ? do_syscall_64+0xbe/0xfa0 [ 804.801593][ T8569] do_syscall_64+0xfa/0xfa0 [ 804.801615][ T8569] ? lockdep_hardirqs_on+0x9c/0x150 [ 804.801638][ T8569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.801655][ T8569] ? clear_bhb_loop+0x60/0xb0 [ 804.801676][ T8569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.801693][ T8569] RIP: 0033:0x7f9ba178f6c9 [ 804.801708][ T8569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.801723][ T8569] RSP: 002b:00007f9ba2667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.801742][ T8569] RAX: ffffffffffffffda RBX: 00007f9ba19e5fa0 RCX: 00007f9ba178f6c9 [ 804.801755][ T8569] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 804.801766][ T8569] RBP: 00007f9ba2667090 R08: 0000000000000000 R09: 0000000000000000 [ 804.801778][ T8569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.801789][ T8569] R13: 00007f9ba19e6038 R14: 00007f9ba19e5fa0 R15: 00007ffc0e9046a8 [ 804.801820][ T8569] [ 805.240983][ T8597] FAULT_INJECTION: forcing a failure. [ 805.240983][ T8597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.261754][ T8597] CPU: 0 UID: 0 PID: 8597 Comm: syz.2.14650 Not tainted syzkaller #0 PREEMPT(full) [ 805.261776][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 805.261787][ T8597] Call Trace: [ 805.261794][ T8597] [ 805.261802][ T8597] dump_stack_lvl+0x189/0x250 [ 805.261829][ T8597] ? __pfx____ratelimit+0x10/0x10 [ 805.261851][ T8597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.261874][ T8597] ? __pfx__printk+0x10/0x10 [ 805.261892][ T8597] ? __might_fault+0xb0/0x130 [ 805.261927][ T8597] should_fail_ex+0x414/0x560 [ 805.261958][ T8597] _copy_from_user+0x2d/0xb0 [ 805.261981][ T8597] ___sys_sendmsg+0x158/0x2a0 [ 805.262003][ T8597] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.262058][ T8597] ? __fget_files+0x2a/0x420 [ 805.262074][ T8597] ? __fget_files+0x3a0/0x420 [ 805.262102][ T8597] __x64_sys_sendmsg+0x19b/0x260 [ 805.262124][ T8597] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 805.262152][ T8597] ? __pfx_ksys_write+0x10/0x10 [ 805.262179][ T8597] ? do_syscall_64+0xbe/0xfa0 [ 805.262205][ T8597] do_syscall_64+0xfa/0xfa0 [ 805.262226][ T8597] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.262248][ T8597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.262265][ T8597] ? clear_bhb_loop+0x60/0xb0 [ 805.262286][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.262303][ T8597] RIP: 0033:0x7fb44f78f6c9 [ 805.262318][ T8597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.262334][ T8597] RSP: 002b:00007fb4506f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.262354][ T8597] RAX: ffffffffffffffda RBX: 00007fb44f9e5fa0 RCX: 00007fb44f78f6c9 [ 805.262367][ T8597] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 805.262378][ T8597] RBP: 00007fb4506f8090 R08: 0000000000000000 R09: 0000000000000000 [ 805.262394][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.262404][ T8597] R13: 00007fb44f9e6038 R14: 00007fb44f9e5fa0 R15: 00007ffd32607658 [ 805.262435][ T8597] [ 805.306566][ T8593] syzkaller0: entered promiscuous mode [ 805.453362][ T8607] FAULT_INJECTION: forcing a failure. [ 805.453362][ T8607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.454686][ T8593] syzkaller0: entered allmulticast mode [ 805.465984][ T8607] CPU: 0 UID: 0 PID: 8607 Comm: syz.2.14653 Not tainted syzkaller #0 PREEMPT(full) [ 805.466005][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 805.466015][ T8607] Call Trace: [ 805.466023][ T8607] [ 805.466030][ T8607] dump_stack_lvl+0x189/0x250 [ 805.466057][ T8607] ? __pfx____ratelimit+0x10/0x10 [ 805.466080][ T8607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.466102][ T8607] ? __pfx__printk+0x10/0x10 [ 805.466119][ T8607] ? __might_fault+0xb0/0x130 [ 805.466153][ T8607] should_fail_ex+0x414/0x560 [ 805.466182][ T8607] _copy_from_user+0x2d/0xb0 [ 805.466205][ T8607] ___sys_sendmsg+0x158/0x2a0 [ 805.466225][ T8607] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.466278][ T8607] ? __fget_files+0x2a/0x420 [ 805.466294][ T8607] ? __fget_files+0x3a0/0x420 [ 805.466319][ T8607] __sys_sendmmsg+0x227/0x430 [ 805.466342][ T8607] ? __pfx___sys_sendmmsg+0x10/0x10 [ 805.466377][ T8607] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 805.466417][ T8607] ? ksys_write+0x22a/0x250 [ 805.466441][ T8607] ? __pfx_ksys_write+0x10/0x10 [ 805.466469][ T8607] __x64_sys_sendmmsg+0xa0/0xc0 [ 805.466489][ T8607] do_syscall_64+0xfa/0xfa0 [ 805.466510][ T8607] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.466531][ T8607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.466548][ T8607] ? clear_bhb_loop+0x60/0xb0 [ 805.466569][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.466585][ T8607] RIP: 0033:0x7fb44f78f6c9 [ 805.466600][ T8607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.466615][ T8607] RSP: 002b:00007fb4506f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 805.466633][ T8607] RAX: ffffffffffffffda RBX: 00007fb44f9e5fa0 RCX: 00007fb44f78f6c9 [ 805.466646][ T8607] RDX: 0000000000000001 RSI: 0000200000002240 RDI: 0000000000000003 [ 805.466656][ T8607] RBP: 00007fb4506f8090 R08: 0000000000000000 R09: 0000000000000000 [ 805.466667][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.466676][ T8607] R13: 00007fb44f9e6038 R14: 00007fb44f9e5fa0 R15: 00007ffd32607658 [ 805.466706][ T8607] [ 805.887174][ T8623] FAULT_INJECTION: forcing a failure. [ 805.887174][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.901964][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14658'. [ 805.912951][ T8623] CPU: 1 UID: 0 PID: 8623 Comm: syz.3.14659 Not tainted syzkaller #0 PREEMPT(full) [ 805.912972][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 805.912983][ T8623] Call Trace: [ 805.912991][ T8623] [ 805.912999][ T8623] dump_stack_lvl+0x189/0x250 [ 805.913026][ T8623] ? __pfx____ratelimit+0x10/0x10 [ 805.913048][ T8623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.913080][ T8623] ? __pfx__printk+0x10/0x10 [ 805.913098][ T8623] ? __might_fault+0xb0/0x130 [ 805.913133][ T8623] should_fail_ex+0x414/0x560 [ 805.913163][ T8623] _copy_from_user+0x2d/0xb0 [ 805.913186][ T8623] do_tcp_setsockopt+0x47d/0x1f20 [ 805.913212][ T8623] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 805.913228][ T8623] ? aa_sk_perm+0x81e/0x950 [ 805.913255][ T8623] ? __pfx_aa_sk_perm+0x10/0x10 [ 805.913279][ T8623] ? aa_sock_opt_perm+0xff/0x1b0 [ 805.913305][ T8623] ? sock_common_setsockopt+0x36/0xc0 [ 805.913326][ T8623] ? tcp_setsockopt+0x3d/0xe0 [ 805.913343][ T8623] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 805.913368][ T8623] do_sock_setsockopt+0x17c/0x1b0 [ 805.913391][ T8623] __x64_sys_setsockopt+0x13f/0x1b0 [ 805.913415][ T8623] do_syscall_64+0xfa/0xfa0 [ 805.913436][ T8623] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.913458][ T8623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.913476][ T8623] ? clear_bhb_loop+0x60/0xb0 [ 805.913497][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.913514][ T8623] RIP: 0033:0x7f5116f8f6c9 [ 805.913530][ T8623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.913544][ T8623] RSP: 002b:00007f5117ec2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 805.913562][ T8623] RAX: ffffffffffffffda RBX: 00007f51171e5fa0 RCX: 00007f5116f8f6c9 [ 805.913575][ T8623] RDX: 2000000000000020 RSI: 0000000000000006 RDI: 0000000000000003 [ 805.913587][ T8623] RBP: 00007f5117ec2090 R08: 000000001959cc36 R09: 0000000000000000 [ 805.913598][ T8623] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 805.913610][ T8623] R13: 00007f51171e6038 R14: 00007f51171e5fa0 R15: 00007ffde2d71f58 [ 805.913640][ T8623] [ 807.586431][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14662'. [ 807.638275][ T8640] netlink: 'syz.6.14665': attribute type 1 has an invalid length. [ 807.648896][ T8638] tipc: Enabling of bearer rejected, failed to enable media [ 807.674012][ T8638] syzkaller0: entered promiscuous mode [ 807.679491][ T8638] syzkaller0: entered allmulticast mode [ 807.751159][ T8640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 807.819650][ T8647] bond1: (slave veth3): Enslaving as an active interface with a down link [ 807.841348][ T8651] tipc: Enabling of bearer rejected, already enabled [ 807.885877][ T8640] veth5: entered promiscuous mode [ 807.915491][ T8640] bond1: (slave veth5): Enslaving as an active interface with a down link [ 808.002917][ T8640] vlan2: entered allmulticast mode [ 808.008539][ T8640] bond1: entered allmulticast mode [ 808.017185][ T8640] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 808.041379][ T8665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.146238][ T8671] FAULT_INJECTION: forcing a failure. [ 808.146238][ T8671] name failslab, interval 1, probability 0, space 0, times 0 [ 808.164584][ T8671] CPU: 1 UID: 0 PID: 8671 Comm: syz.1.14674 Not tainted syzkaller #0 PREEMPT(full) [ 808.164606][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 808.164617][ T8671] Call Trace: [ 808.164624][ T8671] [ 808.164631][ T8671] dump_stack_lvl+0x189/0x250 [ 808.164658][ T8671] ? __pfx____ratelimit+0x10/0x10 [ 808.164680][ T8671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.164703][ T8671] ? __pfx__printk+0x10/0x10 [ 808.164727][ T8671] ? __pfx___might_resched+0x10/0x10 [ 808.164746][ T8671] ? fs_reclaim_acquire+0x7d/0x100 [ 808.164776][ T8671] should_fail_ex+0x414/0x560 [ 808.164806][ T8671] should_failslab+0xa8/0x100 [ 808.164825][ T8671] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 808.164857][ T8671] ? __get_vm_area_node+0x13f/0x300 [ 808.164885][ T8671] __get_vm_area_node+0x13f/0x300 [ 808.164913][ T8671] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 808.164937][ T8671] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 808.164958][ T8671] ? __lock_acquire+0xab9/0xd20 [ 808.164989][ T8671] ? __lock_acquire+0xab9/0xd20 [ 808.165012][ T8671] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 808.165037][ T8671] ? __might_fault+0xb0/0x130 [ 808.165067][ T8671] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 808.165083][ T8671] __vmalloc_noprof+0xb1/0xf0 [ 808.165106][ T8671] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 808.165126][ T8671] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 808.165150][ T8671] bpf_prog_alloc+0x3c/0x1a0 [ 808.165170][ T8671] bpf_prog_load+0x735/0x19e0 [ 808.165200][ T8671] ? __pfx_bpf_prog_load+0x10/0x10 [ 808.165240][ T8671] ? bpf_lsm_bpf+0x9/0x20 [ 808.165258][ T8671] ? security_bpf+0x7e/0x300 [ 808.165281][ T8671] __sys_bpf+0x507/0x860 [ 808.165300][ T8671] ? __pfx___sys_bpf+0x10/0x10 [ 808.165334][ T8671] ? ksys_write+0x22a/0x250 [ 808.165359][ T8671] ? __pfx_ksys_write+0x10/0x10 [ 808.165388][ T8671] __x64_sys_bpf+0x7c/0x90 [ 808.165413][ T8671] do_syscall_64+0xfa/0xfa0 [ 808.165435][ T8671] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.165457][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.165474][ T8671] ? clear_bhb_loop+0x60/0xb0 [ 808.165496][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.165513][ T8671] RIP: 0033:0x7f9ba178f6c9 [ 808.165529][ T8671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.165544][ T8671] RSP: 002b:00007f9ba2667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 808.165564][ T8671] RAX: ffffffffffffffda RBX: 00007f9ba19e5fa0 RCX: 00007f9ba178f6c9 [ 808.165577][ T8671] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 808.165588][ T8671] RBP: 00007f9ba2667090 R08: 0000000000000000 R09: 0000000000000000 [ 808.165600][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.165611][ T8671] R13: 00007f9ba19e6038 R14: 00007f9ba19e5fa0 R15: 00007ffc0e9046a8 [ 808.165642][ T8671] [ 808.165649][ T8671] syz.1.14674: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 808.266342][ T8675] netlink: 'syz.3.14676': attribute type 1 has an invalid length. [ 808.321991][ T8671] ,cpuset= [ 808.351021][ T8675] 8021q: adding VLAN 0 to HW filter on device bond13 [ 808.381153][ T8679] FAULT_INJECTION: forcing a failure. [ 808.381153][ T8679] name failslab, interval 1, probability 0, space 0, times 0 [ 808.383430][ T8671] / [ 808.414305][ T8678] bond13: (slave gretap3): making interface the new active one [ 808.420795][ T8671] ,mems_allowed=0-1 [ 808.429911][ T8679] CPU: 1 UID: 0 PID: 8679 Comm: syz.6.14678 Not tainted syzkaller #0 PREEMPT(full) [ 808.429934][ T8679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 808.429944][ T8679] Call Trace: [ 808.429952][ T8679] [ 808.429959][ T8679] dump_stack_lvl+0x189/0x250 [ 808.429985][ T8679] ? __pfx____ratelimit+0x10/0x10 [ 808.430009][ T8679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.430031][ T8679] ? __pfx__printk+0x10/0x10 [ 808.430054][ T8679] ? __pfx___might_resched+0x10/0x10 [ 808.430072][ T8679] ? fs_reclaim_acquire+0x7d/0x100 [ 808.430101][ T8679] should_fail_ex+0x414/0x560 [ 808.430131][ T8679] should_failslab+0xa8/0x100 [ 808.430150][ T8679] kmem_cache_alloc_node_noprof+0x77/0x710 [ 808.430172][ T8679] ? __alloc_skb+0x112/0x2d0 [ 808.430195][ T8679] ? netlink_autobind+0xdb/0x300 [ 808.430217][ T8679] __alloc_skb+0x112/0x2d0 [ 808.430244][ T8679] netlink_sendmsg+0x5c6/0xb30 [ 808.430269][ T8679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.430289][ T8679] ? aa_sock_msg_perm+0xf1/0x1d0 [ 808.430313][ T8679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 808.430330][ T8679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.430347][ T8679] __sock_sendmsg+0x21c/0x270 [ 808.430371][ T8679] ____sys_sendmsg+0x505/0x830 [ 808.430395][ T8679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.430421][ T8679] ? import_iovec+0x74/0xa0 [ 808.430445][ T8679] ___sys_sendmsg+0x21f/0x2a0 [ 808.430466][ T8679] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.430517][ T8679] ? __fget_files+0x2a/0x420 [ 808.430532][ T8679] ? __fget_files+0x3a0/0x420 [ 808.430558][ T8679] __x64_sys_sendmsg+0x19b/0x260 [ 808.430578][ T8679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 808.430605][ T8679] ? __pfx_ksys_write+0x10/0x10 [ 808.430632][ T8679] ? do_syscall_64+0xbe/0xfa0 [ 808.430657][ T8679] do_syscall_64+0xfa/0xfa0 [ 808.430677][ T8679] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.430699][ T8679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.430716][ T8679] ? clear_bhb_loop+0x60/0xb0 [ 808.430735][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.430755][ T8679] RIP: 0033:0x7f0870f8f6c9 [ 808.430770][ T8679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.430784][ T8679] RSP: 002b:00007f0871d91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.430802][ T8679] RAX: ffffffffffffffda RBX: 00007f08711e5fa0 RCX: 00007f0870f8f6c9 [ 808.430820][ T8679] RDX: 0000000000000810 RSI: 0000200000000300 RDI: 0000000000000004 [ 808.430831][ T8679] RBP: 00007f0871d91090 R08: 0000000000000000 R09: 0000000000000000 [ 808.430840][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.430851][ T8679] R13: 00007f08711e6038 R14: 00007f08711e5fa0 R15: 00007ffcd5474b98 [ 808.430881][ T8679] [ 808.447923][ T8678] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 808.452323][ T8671] [ 808.568183][ T8683] FAULT_INJECTION: forcing a failure. [ 808.568183][ T8683] name failslab, interval 1, probability 0, space 0, times 0 [ 808.568211][ T8683] CPU: 1 UID: 0 PID: 8683 Comm: syz.0.14679 Not tainted syzkaller #0 PREEMPT(full) [ 808.568232][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 808.568246][ T8683] Call Trace: [ 808.568253][ T8683] [ 808.568261][ T8683] dump_stack_lvl+0x189/0x250 [ 808.568289][ T8683] ? __pfx____ratelimit+0x10/0x10 [ 808.568312][ T8683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.568335][ T8683] ? __pfx__printk+0x10/0x10 [ 808.568361][ T8683] ? __pfx___might_resched+0x10/0x10 [ 808.568380][ T8683] ? fs_reclaim_acquire+0x7d/0x100 [ 808.568410][ T8683] should_fail_ex+0x414/0x560 [ 808.568440][ T8683] should_failslab+0xa8/0x100 [ 808.568460][ T8683] kmem_cache_alloc_node_noprof+0x77/0x710 [ 808.568484][ T8683] ? __alloc_skb+0x112/0x2d0 [ 808.568507][ T8683] ? netlink_autobind+0xdb/0x300 [ 808.568530][ T8683] __alloc_skb+0x112/0x2d0 [ 808.568558][ T8683] netlink_sendmsg+0x5c6/0xb30 [ 808.568586][ T8683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.568606][ T8683] ? aa_sock_msg_perm+0xf1/0x1d0 [ 808.568632][ T8683] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 808.568650][ T8683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.568668][ T8683] __sock_sendmsg+0x21c/0x270 [ 808.568695][ T8683] ____sys_sendmsg+0x52d/0x830 [ 808.568720][ T8683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.568749][ T8683] ? import_iovec+0x74/0xa0 [ 808.568774][ T8683] ___sys_sendmsg+0x21f/0x2a0 [ 808.568795][ T8683] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.568856][ T8683] ? __fget_files+0x2a/0x420 [ 808.568873][ T8683] ? __fget_files+0x3a0/0x420 [ 808.568901][ T8683] __sys_sendmmsg+0x227/0x430 [ 808.568926][ T8683] ? __pfx___sys_sendmmsg+0x10/0x10 [ 808.568955][ T8683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 808.568997][ T8683] ? ksys_write+0x22a/0x250 [ 808.569023][ T8683] ? __pfx_ksys_write+0x10/0x10 [ 808.569051][ T8683] __x64_sys_sendmmsg+0xa0/0xc0 [ 808.569073][ T8683] do_syscall_64+0xfa/0xfa0 [ 808.569095][ T8683] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.569118][ T8683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.569136][ T8683] ? clear_bhb_loop+0x60/0xb0 [ 808.569158][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.569176][ T8683] RIP: 0033:0x7fe046f8f6c9 [ 808.569192][ T8683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.569207][ T8683] RSP: 002b:00007fe0451ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 808.569226][ T8683] RAX: ffffffffffffffda RBX: 00007fe0471e5fa0 RCX: 00007fe046f8f6c9 [ 808.569240][ T8683] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 808.569253][ T8683] RBP: 00007fe0451ee090 R08: 0000000000000000 R09: 0000000000000000 [ 808.569265][ T8683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.569276][ T8683] R13: 00007fe0471e6038 R14: 00007fe0471e5fa0 R15: 00007ffcc6e7d498 [ 808.569308][ T8683] [ 808.578499][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.588719][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.1.14674 Not tainted syzkaller #0 PREEMPT(full) [ 808.588740][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 808.588751][ T8671] Call Trace: [ 808.588758][ T8671] [ 808.588766][ T8671] dump_stack_lvl+0x189/0x250 [ 808.588792][ T8671] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 808.588818][ T8671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.588840][ T8671] ? __pfx__printk+0x10/0x10 [ 808.588858][ T8671] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 808.588880][ T8671] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 808.588910][ T8671] warn_alloc+0x214/0x310 [ 808.588939][ T8671] ? __pfx_warn_alloc+0x10/0x10 [ 808.588972][ T8671] ? __get_vm_area_node+0x2b5/0x300 [ 808.589001][ T8671] __vmalloc_node_range_noprof+0x331/0x12d0 [ 808.589026][ T8671] ? __lock_acquire+0xab9/0xd20 [ 808.589064][ T8671] ? __lock_acquire+0xab9/0xd20 [ 808.589086][ T8671] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 808.589111][ T8671] ? __might_fault+0xb0/0x130 [ 808.589140][ T8671] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 808.589157][ T8671] __vmalloc_noprof+0xb1/0xf0 [ 808.589180][ T8671] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 808.589200][ T8671] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 808.589221][ T8671] bpf_prog_alloc+0x3c/0x1a0 [ 808.589241][ T8671] bpf_prog_load+0x735/0x19e0 [ 808.589270][ T8671] ? __pfx_bpf_prog_load+0x10/0x10 [ 808.589307][ T8671] ? bpf_lsm_bpf+0x9/0x20 [ 808.589325][ T8671] ? security_bpf+0x7e/0x300 [ 808.589349][ T8671] __sys_bpf+0x507/0x860 [ 808.589366][ T8671] ? __pfx___sys_bpf+0x10/0x10 [ 808.589397][ T8671] ? ksys_write+0x22a/0x250 [ 808.589422][ T8671] ? __pfx_ksys_write+0x10/0x10 [ 808.589450][ T8671] __x64_sys_bpf+0x7c/0x90 [ 808.589474][ T8671] do_syscall_64+0xfa/0xfa0 [ 808.589496][ T8671] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.589517][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.589534][ T8671] ? clear_bhb_loop+0x60/0xb0 [ 808.589555][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.589572][ T8671] RIP: 0033:0x7f9ba178f6c9 [ 808.589587][ T8671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.589601][ T8671] RSP: 002b:00007f9ba2667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 808.589620][ T8671] RAX: ffffffffffffffda RBX: 00007f9ba19e5fa0 RCX: 00007f9ba178f6c9 [ 808.589633][ T8671] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 808.589644][ T8671] RBP: 00007f9ba2667090 R08: 0000000000000000 R09: 0000000000000000 [ 808.589655][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.589665][ T8671] R13: 00007f9ba19e6038 R14: 00007f9ba19e5fa0 R15: 00007ffc0e9046a8 [ 808.589694][ T8671] [ 808.589701][ T8671] Mem-Info: [ 808.605790][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 808.671218][ T8671] active_anon:9179 inactive_anon:0 isolated_anon:0 [ 808.671218][ T8671] active_file:3680 inactive_file:40258 isolated_file:0 [ 808.671218][ T8671] unevictable:768 dirty:506 writeback:0 [ 808.671218][ T8671] slab_reclaimable:12555 slab_unreclaimable:123230 [ 808.671218][ T8671] mapped:37816 shmem:4237 pagetables:1623 [ 808.671218][ T8671] sec_pagetables:0 bounce:0 [ 808.671218][ T8671] kernel_misc_reclaimable:0 [ 808.671218][ T8671] free:1284395 free_pcp:14847 free_cma:0 [ 808.716044][ T8688] FAULT_INJECTION: forcing a failure. [ 808.716044][ T8688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.759473][ T8671] Node 0 active_anon:36816kB inactive_anon:0kB active_file:14720kB inactive_file:160828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151364kB dirty:2024kB writeback:0kB shmem:15412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15012kB pagetables:6236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 808.844839][ T8688] CPU: 1 UID: 0 PID: 8688 Comm: syz.0.14682 Not tainted syzkaller #0 PREEMPT(full) [ 808.844862][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 808.844872][ T8688] Call Trace: [ 808.844880][ T8688] [ 808.844888][ T8688] dump_stack_lvl+0x189/0x250 [ 808.844917][ T8688] ? __pfx____ratelimit+0x10/0x10 [ 808.844940][ T8688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.844963][ T8688] ? __pfx__printk+0x10/0x10 [ 808.844983][ T8688] ? __might_fault+0xb0/0x130 [ 808.845017][ T8688] should_fail_ex+0x414/0x560 [ 808.845048][ T8688] _copy_from_user+0x2d/0xb0 [ 808.845071][ T8688] tcp_v6_parse_md5_keys+0xec/0x610 [ 808.845097][ T8688] ? __pfx_tcp_v6_parse_md5_keys+0x10/0x10 [ 808.845118][ T8688] ? __lock_acquire+0xab9/0xd20 [ 808.845155][ T8688] ? __local_bh_enable_ip+0x12d/0x1c0 [ 808.845174][ T8688] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 808.845204][ T8688] do_tcp_setsockopt+0x11dc/0x1f20 [ 808.845230][ T8688] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 808.845247][ T8688] ? aa_sk_perm+0x81e/0x950 [ 808.845275][ T8688] ? __pfx_aa_sk_perm+0x10/0x10 [ 808.845300][ T8688] ? aa_sock_opt_perm+0xff/0x1b0 [ 808.845326][ T8688] ? sock_common_setsockopt+0x36/0xc0 [ 808.845347][ T8688] ? tcp_setsockopt+0x3d/0xe0 [ 808.845365][ T8688] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 808.845390][ T8688] do_sock_setsockopt+0x17c/0x1b0 [ 808.845413][ T8688] __x64_sys_setsockopt+0x13f/0x1b0 [ 808.845436][ T8688] do_syscall_64+0xfa/0xfa0 [ 808.845464][ T8688] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.845487][ T8688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.845504][ T8688] ? clear_bhb_loop+0x60/0xb0 [ 808.845526][ T8688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.845543][ T8688] RIP: 0033:0x7fe046f8f6c9 [ 808.845559][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.845574][ T8688] RSP: 002b:00007fe0451ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 808.845593][ T8688] RAX: ffffffffffffffda RBX: 00007fe0471e5fa0 RCX: 00007fe046f8f6c9 [ 808.845607][ T8688] RDX: 2000000000000020 RSI: 0000000000000006 RDI: 0000000000000003 [ 808.845618][ T8688] RBP: 00007fe0451ee090 R08: 000000001959cc36 R09: 0000000000000000 [ 808.845630][ T8688] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 808.845642][ T8688] R13: 00007fe0471e6038 R14: 00007fe0471e5fa0 R15: 00007ffcc6e7d498 [ 808.845673][ T8688] [ 808.920861][ T8691] tipc: Enabled bearer , priority 0 [ 808.932768][ T8671] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 809.017887][ T8691] syzkaller0: entered promiscuous mode [ 809.033343][ T8671] Node 0 [ 809.056561][ T8691] syzkaller0: entered allmulticast mode [ 809.069556][ T8671] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 809.156722][ T8691] tipc: Resetting bearer [ 809.182947][ T8671] lowmem_reserve[]: [ 809.188933][ T8689] tipc: Enabled bearer , priority 0 [ 809.202759][ T8671] 0 [ 809.284344][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.286762][ T8671] 2505 [ 809.303848][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.308371][ T8671] 2505 [ 809.310718][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.316414][ T8696] syzkaller0: entered promiscuous mode [ 809.316433][ T8696] syzkaller0: entered allmulticast mode [ 809.317829][ T8671] 2505 [ 809.365942][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.402254][ T8671] 2505 [ 809.449114][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.530887][ T8671] [ 809.542341][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.545439][ T8671] Node 0 [ 809.549939][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.557407][ T8690] tipc: Resetting bearer [ 809.565503][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.567668][ T8671] DMA32 free:1232928kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36884kB inactive_anon:0kB active_file:14800kB inactive_file:160836kB unevictable:1536kB writepending:2132kB zspages:0kB present:3129332kB managed:2565164kB mlocked:0kB bounce:0kB free_pcp:38252kB local_pcp:20488kB free_cma:0kB [ 809.570610][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.576683][ T8671] lowmem_reserve[]: [ 809.583785][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.587971][ T8671] 0 [ 809.593985][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.612813][ T8671] 0 [ 809.643314][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.687740][ T8671] 0 [ 809.722791][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.727437][ T8671] 0 [ 809.745739][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.751097][ T8671] 0 [ 809.777533][ T8706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14687'. [ 809.782501][ T8671] [ 809.787920][ T8690] tipc: Disabling bearer [ 809.790741][ T8671] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 810.104227][ T8671] lowmem_reserve[]: 0 0 0 0 0 [ 810.113926][ T8671] Node 1 Normal free:3889388kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20168kB local_pcp:11068kB free_cma:0kB [ 810.150233][ T8671] lowmem_reserve[]: 0 0 0 0 0 [ 810.156199][ T8671] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 810.171330][ T8686] tipc: Resetting bearer [ 810.174324][ T8671] Node 0 DMA32: 1328*4kB (UM) 322*8kB (UM) 247*16kB (UM) 133*32kB (UME) 51*64kB (UM) 298*128kB (UM) 459*256kB (UME) 336*512kB (UM) 161*1024kB (U) 6*2048kB (UM) 173*4096kB (UM) = 1232800kB [ 810.196536][ T8671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 810.208738][ T8671] Node 1 Normal: 213*4kB (UE) 63*8kB (UME) 46*16kB (UME) 82*32kB (UME) 24*64kB (UME) 9*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3889388kB [ 810.227598][ T8671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 810.238092][ T8671] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 810.239272][ T8686] tipc: Disabling bearer [ 810.248047][ T8671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 810.264396][ T8671] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 810.273920][ T8671] 48193 total pagecache pages [ 810.278659][ T8671] 0 pages in swap cache [ 810.283029][ T8671] Free swap = 124996kB [ 810.285989][ T8718] syzkaller0: entered promiscuous mode [ 810.287304][ T8671] Total swap = 124996kB [ 810.294126][ T8718] syzkaller0: entered allmulticast mode [ 810.297548][ T8671] 2097051 pages RAM [ 810.306737][ T8671] 0 pages HighMem/MovableOnly [ 810.311528][ T8671] 424118 pages reserved [ 810.315872][ T8671] 0 pages cma reserved [ 810.685442][ T8749] FAULT_INJECTION: forcing a failure. [ 810.685442][ T8749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.699424][ T8749] CPU: 0 UID: 0 PID: 8749 Comm: syz.3.14700 Not tainted syzkaller #0 PREEMPT(full) [ 810.699447][ T8749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 810.699458][ T8749] Call Trace: [ 810.699465][ T8749] [ 810.699473][ T8749] dump_stack_lvl+0x189/0x250 [ 810.699501][ T8749] ? __pfx____ratelimit+0x10/0x10 [ 810.699524][ T8749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.699547][ T8749] ? __pfx__printk+0x10/0x10 [ 810.699577][ T8749] should_fail_ex+0x414/0x560 [ 810.699607][ T8749] _copy_to_user+0x31/0xb0 [ 810.699632][ T8749] simple_read_from_buffer+0xe1/0x170 [ 810.699663][ T8749] proc_fail_nth_read+0x1b3/0x220 [ 810.699688][ T8749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 810.699713][ T8749] ? rw_verify_area+0x2a6/0x4d0 [ 810.699735][ T8749] ? __lock_acquire+0xab9/0xd20 [ 810.699751][ T8749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 810.699775][ T8749] vfs_read+0x200/0xa30 [ 810.699796][ T8749] ? fdget_pos+0x247/0x320 [ 810.699818][ T8749] ? __pfx___mutex_lock+0x10/0x10 [ 810.699851][ T8749] ? __pfx_vfs_read+0x10/0x10 [ 810.699876][ T8749] ? __fget_files+0x2a/0x420 [ 810.699898][ T8749] ? __fget_files+0x3a0/0x420 [ 810.699913][ T8749] ? __fget_files+0x2a/0x420 [ 810.699940][ T8749] ksys_read+0x145/0x250 [ 810.699966][ T8749] ? __pfx_ksys_read+0x10/0x10 [ 810.699993][ T8749] ? do_syscall_64+0xbe/0xfa0 [ 810.700020][ T8749] do_syscall_64+0xfa/0xfa0 [ 810.700041][ T8749] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.700064][ T8749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.700082][ T8749] ? clear_bhb_loop+0x60/0xb0 [ 810.700104][ T8749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.700122][ T8749] RIP: 0033:0x7f5116f8e0dc [ 810.700138][ T8749] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 810.700153][ T8749] RSP: 002b:00007f5117ec2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 810.700172][ T8749] RAX: ffffffffffffffda RBX: 00007f51171e5fa0 RCX: 00007f5116f8e0dc [ 810.700186][ T8749] RDX: 000000000000000f RSI: 00007f5117ec20a0 RDI: 0000000000000005 [ 810.700197][ T8749] RBP: 00007f5117ec2090 R08: 0000000000000000 R09: 0000000000000000 [ 810.700208][ T8749] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.700220][ T8749] R13: 00007f51171e6038 R14: 00007f51171e5fa0 R15: 00007ffde2d71f58 [ 810.700253][ T8749] [ 810.940152][ T8753] netlink: 'syz.6.14702': attribute type 1 has an invalid length. [ 810.953975][ T8753] block nbd5: Unsupported socket: should be TCP or UNIX. [ 810.966441][ T8754] team0: left allmulticast mode [ 810.971341][ T8754] geneve0: left allmulticast mode [ 810.976520][ T8754] team0: left promiscuous mode [ 810.981296][ T8754] geneve0: left promiscuous mode [ 810.986776][ T8754] bridge0: port 1(team0) entered disabled state [ 810.999913][ T8754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 811.145722][ T8759] tipc: Enabled bearer , priority 0 [ 811.193362][ T8765] syzkaller0: entered promiscuous mode [ 811.199911][ T8765] syzkaller0: entered allmulticast mode [ 811.293473][ T8759] tipc: Resetting bearer [ 811.312355][ T8758] tipc: Resetting bearer [ 811.337080][ T8758] tipc: Disabling bearer [ 811.536222][ T8791] : renamed from hsr0 [ 811.832082][ T8815] FAULT_INJECTION: forcing a failure. [ 811.832082][ T8815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.859111][ T8815] CPU: 1 UID: 0 PID: 8815 Comm: syz.0.14722 Not tainted syzkaller #0 PREEMPT(full) [ 811.859136][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 811.859146][ T8815] Call Trace: [ 811.859152][ T8815] [ 811.859159][ T8815] dump_stack_lvl+0x189/0x250 [ 811.859186][ T8815] ? __pfx____ratelimit+0x10/0x10 [ 811.859207][ T8815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.859229][ T8815] ? __pfx__printk+0x10/0x10 [ 811.859247][ T8815] ? __might_fault+0xb0/0x130 [ 811.859281][ T8815] should_fail_ex+0x414/0x560 [ 811.859311][ T8815] _copy_from_iter+0x1de/0x1790 [ 811.859338][ T8815] ? rcu_is_watching+0x15/0xb0 [ 811.859363][ T8815] ? kmalloc_reserve+0xbd/0x290 [ 811.859380][ T8815] ? __pfx__copy_from_iter+0x10/0x10 [ 811.859401][ T8815] ? __build_skb_around+0x262/0x3f0 [ 811.859430][ T8815] ? netlink_sendmsg+0x642/0xb30 [ 811.859446][ T8815] ? skb_put+0x11b/0x210 [ 811.859466][ T8815] netlink_sendmsg+0x6b2/0xb30 [ 811.859491][ T8815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.859511][ T8815] ? aa_sock_msg_perm+0xf1/0x1d0 [ 811.859537][ T8815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 811.859554][ T8815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.859572][ T8815] __sock_sendmsg+0x21c/0x270 [ 811.859598][ T8815] ____sys_sendmsg+0x505/0x830 [ 811.859621][ T8815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.859649][ T8815] ? import_iovec+0x74/0xa0 [ 811.859674][ T8815] ___sys_sendmsg+0x21f/0x2a0 [ 811.859695][ T8815] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.859756][ T8815] ? __fget_files+0x2a/0x420 [ 811.859772][ T8815] ? __fget_files+0x3a0/0x420 [ 811.859799][ T8815] __x64_sys_sendmsg+0x19b/0x260 [ 811.859820][ T8815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 811.859848][ T8815] ? __pfx_ksys_write+0x10/0x10 [ 811.859876][ T8815] ? do_syscall_64+0xbe/0xfa0 [ 811.859901][ T8815] do_syscall_64+0xfa/0xfa0 [ 811.859921][ T8815] ? lockdep_hardirqs_on+0x9c/0x150 [ 811.859944][ T8815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.859961][ T8815] ? clear_bhb_loop+0x60/0xb0 [ 811.859982][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.859999][ T8815] RIP: 0033:0x7fe046f8f6c9 [ 811.860015][ T8815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.860030][ T8815] RSP: 002b:00007fe0451ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.860049][ T8815] RAX: ffffffffffffffda RBX: 00007fe0471e5fa0 RCX: 00007fe046f8f6c9 [ 811.860063][ T8815] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 811.860074][ T8815] RBP: 00007fe0451ee090 R08: 0000000000000000 R09: 0000000000000000 [ 811.860085][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.860095][ T8815] R13: 00007fe0471e6038 R14: 00007fe0471e5fa0 R15: 00007ffcc6e7d498 [ 811.860126][ T8815] [ 812.229504][ T8821] netlink: 'syz.2.14725': attribute type 25 has an invalid length. [ 812.520040][ T8845] FAULT_INJECTION: forcing a failure. [ 812.520040][ T8845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.536258][ T8845] CPU: 1 UID: 0 PID: 8845 Comm: syz.3.14735 Not tainted syzkaller #0 PREEMPT(full) [ 812.536281][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 812.536292][ T8845] Call Trace: [ 812.536299][ T8845] [ 812.536307][ T8845] dump_stack_lvl+0x189/0x250 [ 812.536334][ T8845] ? __pfx____ratelimit+0x10/0x10 [ 812.536356][ T8845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.536378][ T8845] ? __pfx__printk+0x10/0x10 [ 812.536409][ T8845] should_fail_ex+0x414/0x560 [ 812.536449][ T8845] _copy_to_user+0x31/0xb0 [ 812.536473][ T8845] simple_read_from_buffer+0xe1/0x170 [ 812.536503][ T8845] proc_fail_nth_read+0x1b3/0x220 [ 812.536527][ T8845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.536552][ T8845] ? rw_verify_area+0x2a6/0x4d0 [ 812.536573][ T8845] ? __lock_acquire+0xab9/0xd20 [ 812.536588][ T8845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.536612][ T8845] vfs_read+0x200/0xa30 [ 812.536633][ T8845] ? fdget_pos+0x247/0x320 [ 812.536652][ T8845] ? __pfx___mutex_lock+0x10/0x10 [ 812.536675][ T8845] ? __pfx_vfs_read+0x10/0x10 [ 812.536698][ T8845] ? __fget_files+0x2a/0x420 [ 812.536719][ T8845] ? __fget_files+0x3a0/0x420 [ 812.536734][ T8845] ? __fget_files+0x2a/0x420 [ 812.536759][ T8845] ksys_read+0x145/0x250 [ 812.536783][ T8845] ? __pfx_ksys_read+0x10/0x10 [ 812.536809][ T8845] ? do_syscall_64+0xbe/0xfa0 [ 812.536836][ T8845] do_syscall_64+0xfa/0xfa0 [ 812.536855][ T8845] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.536878][ T8845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.536895][ T8845] ? clear_bhb_loop+0x60/0xb0 [ 812.536914][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.536930][ T8845] RIP: 0033:0x7f5116f8e0dc [ 812.536945][ T8845] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 812.536960][ T8845] RSP: 002b:00007f5117ec2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 812.536979][ T8845] RAX: ffffffffffffffda RBX: 00007f51171e5fa0 RCX: 00007f5116f8e0dc [ 812.536992][ T8845] RDX: 000000000000000f RSI: 00007f5117ec20a0 RDI: 0000000000000004 [ 812.537004][ T8845] RBP: 00007f5117ec2090 R08: 0000000000000000 R09: 0000000000000000 [ 812.537014][ T8845] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 812.537026][ T8845] R13: 00007f51171e6038 R14: 00007f51171e5fa0 R15: 00007ffde2d71f58 [ 812.537059][ T8845] [ 812.844316][ T8856] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 813.046586][ T8870] FAULT_INJECTION: forcing a failure. [ 813.046586][ T8870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.069061][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: syz.6.14746 Not tainted syzkaller #0 PREEMPT(full) [ 813.069083][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 813.069092][ T8870] Call Trace: [ 813.069100][ T8870] [ 813.069107][ T8870] dump_stack_lvl+0x189/0x250 [ 813.069134][ T8870] ? __pfx____ratelimit+0x10/0x10 [ 813.069157][ T8870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.069179][ T8870] ? __pfx__printk+0x10/0x10 [ 813.069197][ T8870] ? __might_fault+0xb0/0x130 [ 813.069229][ T8870] should_fail_ex+0x414/0x560 [ 813.069257][ T8870] _copy_from_iter+0x1de/0x1790 [ 813.069283][ T8870] ? rcu_is_watching+0x15/0xb0 [ 813.069307][ T8870] ? kmalloc_reserve+0xbd/0x290 [ 813.069324][ T8870] ? __pfx__copy_from_iter+0x10/0x10 [ 813.069343][ T8870] ? __build_skb_around+0x262/0x3f0 [ 813.069369][ T8870] ? netlink_sendmsg+0x642/0xb30 [ 813.069383][ T8870] ? skb_put+0x11b/0x210 [ 813.069402][ T8870] netlink_sendmsg+0x6b2/0xb30 [ 813.069427][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.069448][ T8870] ? aa_sock_msg_perm+0xf1/0x1d0 [ 813.069474][ T8870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 813.069490][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.069508][ T8870] __sock_sendmsg+0x21c/0x270 [ 813.069534][ T8870] ____sys_sendmsg+0x505/0x830 [ 813.069558][ T8870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 813.069586][ T8870] ? import_iovec+0x74/0xa0 [ 813.069610][ T8870] ___sys_sendmsg+0x21f/0x2a0 [ 813.069637][ T8870] ? __pfx____sys_sendmsg+0x10/0x10 [ 813.069691][ T8870] ? __fget_files+0x2a/0x420 [ 813.069708][ T8870] ? __fget_files+0x3a0/0x420 [ 813.069736][ T8870] __x64_sys_sendmsg+0x19b/0x260 [ 813.069755][ T8870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 813.069781][ T8870] ? __pfx_ksys_write+0x10/0x10 [ 813.069808][ T8870] ? do_syscall_64+0xbe/0xfa0 [ 813.069833][ T8870] do_syscall_64+0xfa/0xfa0 [ 813.069854][ T8870] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.069876][ T8870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.069894][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 813.069914][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.069931][ T8870] RIP: 0033:0x7f0870f8f6c9 [ 813.069946][ T8870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.069961][ T8870] RSP: 002b:00007f0871d91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.069981][ T8870] RAX: ffffffffffffffda RBX: 00007f08711e5fa0 RCX: 00007f0870f8f6c9 [ 813.069995][ T8870] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 813.070007][ T8870] RBP: 00007f0871d91090 R08: 0000000000000000 R09: 0000000000000000 [ 813.070018][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.070028][ T8870] R13: 00007f08711e6038 R14: 00007f08711e5fa0 R15: 00007ffcd5474b98 [ 813.070056][ T8870] [ 813.596788][ T8891] netlink: 'syz.0.14753': attribute type 5 has an invalid length. [ 813.617706][ T8891] FAULT_INJECTION: forcing a failure. [ 813.617706][ T8891] name failslab, interval 1, probability 0, space 0, times 0 [ 813.648163][ T8891] CPU: 0 UID: 0 PID: 8891 Comm: syz.0.14753 Not tainted syzkaller #0 PREEMPT(full) [ 813.648185][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 813.648196][ T8891] Call Trace: [ 813.648203][ T8891] [ 813.648211][ T8891] dump_stack_lvl+0x189/0x250 [ 813.648238][ T8891] ? __pfx____ratelimit+0x10/0x10 [ 813.648261][ T8891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.648283][ T8891] ? __pfx__printk+0x10/0x10 [ 813.648309][ T8891] ? __pfx___might_resched+0x10/0x10 [ 813.648339][ T8891] should_fail_ex+0x414/0x560 [ 813.648367][ T8891] should_failslab+0xa8/0x100 [ 813.648387][ T8891] kmem_cache_alloc_node_noprof+0x77/0x710 [ 813.648411][ T8891] ? __alloc_skb+0x112/0x2d0 [ 813.648440][ T8891] __alloc_skb+0x112/0x2d0 [ 813.648468][ T8891] netlink_ack+0x146/0xa50 [ 813.648491][ T8891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 813.648533][ T8891] netlink_rcv_skb+0x28c/0x470 [ 813.648555][ T8891] ? __lock_acquire+0xab9/0xd20 [ 813.648573][ T8891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 813.648599][ T8891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 813.648635][ T8891] ? netlink_deliver_tap+0x2e/0x1b0 [ 813.648661][ T8891] netlink_unicast+0x82f/0x9e0 [ 813.648693][ T8891] ? __pfx_netlink_unicast+0x10/0x10 [ 813.648719][ T8891] ? netlink_sendmsg+0x642/0xb30 [ 813.648734][ T8891] ? skb_put+0x11b/0x210 [ 813.648755][ T8891] netlink_sendmsg+0x805/0xb30 [ 813.648782][ T8891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.648803][ T8891] ? aa_sock_msg_perm+0xf1/0x1d0 [ 813.648828][ T8891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 813.648846][ T8891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.648864][ T8891] __sock_sendmsg+0x21c/0x270 [ 813.648890][ T8891] ____sys_sendmsg+0x505/0x830 [ 813.648915][ T8891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 813.648943][ T8891] ? import_iovec+0x74/0xa0 [ 813.648967][ T8891] ___sys_sendmsg+0x21f/0x2a0 [ 813.648988][ T8891] ? __pfx____sys_sendmsg+0x10/0x10 [ 813.649042][ T8891] ? __fget_files+0x2a/0x420 [ 813.649058][ T8891] ? __fget_files+0x3a0/0x420 [ 813.649084][ T8891] __x64_sys_sendmsg+0x19b/0x260 [ 813.649105][ T8891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 813.649133][ T8891] ? __pfx_ksys_write+0x10/0x10 [ 813.649159][ T8891] ? do_syscall_64+0xbe/0xfa0 [ 813.649184][ T8891] do_syscall_64+0xfa/0xfa0 [ 813.649205][ T8891] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.649228][ T8891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.649246][ T8891] ? clear_bhb_loop+0x60/0xb0 [ 813.649267][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.649285][ T8891] RIP: 0033:0x7fe046f8f6c9 [ 813.649302][ T8891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.649317][ T8891] RSP: 002b:00007fe0451ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.649343][ T8891] RAX: ffffffffffffffda RBX: 00007fe0471e5fa0 RCX: 00007fe046f8f6c9 [ 813.649357][ T8891] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 813.649369][ T8891] RBP: 00007fe0451ee090 R08: 0000000000000000 R09: 0000000000000000 [ 813.649381][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.649392][ T8891] R13: 00007fe0471e6038 R14: 00007fe0471e5fa0 R15: 00007ffcc6e7d498 [ 813.649423][ T8891] [ 813.762843][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 813.974372][ C1] lec:lec_tx_timeout: lec0 [ 813.979916][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 814.138146][ T8905] FAULT_INJECTION: forcing a failure. [ 814.138146][ T8905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.181999][ T8905] CPU: 0 UID: 0 PID: 8905 Comm: syz.2.14762 Not tainted syzkaller #0 PREEMPT(full) [ 814.182024][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 814.182035][ T8905] Call Trace: [ 814.182043][ T8905] [ 814.182051][ T8905] dump_stack_lvl+0x189/0x250 [ 814.182079][ T8905] ? __pfx____ratelimit+0x10/0x10 [ 814.182102][ T8905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.182125][ T8905] ? __pfx__printk+0x10/0x10 [ 814.182144][ T8905] ? __might_fault+0xb0/0x130 [ 814.182179][ T8905] should_fail_ex+0x414/0x560 [ 814.182210][ T8905] _copy_from_iter+0x589/0x1790 [ 814.182265][ T8905] ? __pfx__copy_from_iter+0x10/0x10 [ 814.182287][ T8905] ? __build_skb_around+0x262/0x3f0 [ 814.182316][ T8905] ? netlink_sendmsg+0x642/0xb30 [ 814.182333][ T8905] ? skb_put+0x11b/0x210 [ 814.182354][ T8905] netlink_sendmsg+0x6b2/0xb30 [ 814.182381][ T8905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.182402][ T8905] ? aa_sock_msg_perm+0xf1/0x1d0 [ 814.182428][ T8905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 814.182446][ T8905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.182464][ T8905] __sock_sendmsg+0x21c/0x270 [ 814.182489][ T8905] ____sys_sendmsg+0x505/0x830 [ 814.182514][ T8905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 814.182542][ T8905] ? import_iovec+0x74/0xa0 [ 814.182567][ T8905] ___sys_sendmsg+0x21f/0x2a0 [ 814.182592][ T8905] ? __pfx____sys_sendmsg+0x10/0x10 [ 814.182639][ T8905] ? __fget_files+0x2a/0x420 [ 814.182656][ T8905] ? __fget_files+0x3a0/0x420 [ 814.182682][ T8905] __x64_sys_sendmsg+0x19b/0x260 [ 814.182703][ T8905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 814.182732][ T8905] ? __pfx_ksys_write+0x10/0x10 [ 814.182760][ T8905] ? do_syscall_64+0xbe/0xfa0 [ 814.182787][ T8905] do_syscall_64+0xfa/0xfa0 [ 814.182808][ T8905] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.182832][ T8905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.182850][ T8905] ? clear_bhb_loop+0x60/0xb0 [ 814.182871][ T8905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.182888][ T8905] RIP: 0033:0x7fb44f78f6c9 [ 814.182904][ T8905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.182919][ T8905] RSP: 002b:00007fb4506f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.182938][ T8905] RAX: ffffffffffffffda RBX: 00007fb44f9e5fa0 RCX: 00007fb44f78f6c9 [ 814.182950][ T8905] RDX: 0000000000008000 RSI: 0000200000000400 RDI: 0000000000000009 [ 814.182962][ T8905] RBP: 00007fb4506f8090 R08: 0000000000000000 R09: 0000000000000000 [ 814.182973][ T8905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.182984][ T8905] R13: 00007fb44f9e6038 R14: 00007fb44f9e5fa0 R15: 00007ffd32607658 [ 814.183016][ T8905] [ 814.560551][ T8916] FAULT_INJECTION: forcing a failure. [ 814.560551][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 814.573502][ T8916] CPU: 1 UID: 0 PID: 8916 Comm: syz.6.14765 Not tainted syzkaller #0 PREEMPT(full) [ 814.573525][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 814.573535][ T8916] Call Trace: [ 814.573542][ T8916] [ 814.573549][ T8916] dump_stack_lvl+0x189/0x250 [ 814.573572][ T8916] ? __pfx____ratelimit+0x10/0x10 [ 814.573591][ T8916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.573610][ T8916] ? __pfx__printk+0x10/0x10 [ 814.573629][ T8916] ? __lock_acquire+0xab9/0xd20 [ 814.573647][ T8916] should_fail_ex+0x414/0x560 [ 814.573672][ T8916] should_failslab+0xa8/0x100 [ 814.573688][ T8916] __kmalloc_noprof+0xcb/0x7f0 [ 814.573707][ T8916] ? tcp_sigpool_start+0x200/0x8d0 [ 814.573726][ T8916] ? do_tcp_setsockopt+0x188b/0x1f20 [ 814.573744][ T8916] ? tcp_sigpool_start+0x1f/0x8d0 [ 814.573764][ T8916] tcp_sigpool_start+0x200/0x8d0 [ 814.573786][ T8916] tcp_v6_md5_hash_skb+0x1b6/0x510 [ 814.573807][ T8916] ? __pfx_tcp_v6_md5_hash_skb+0x10/0x10 [ 814.573821][ T8916] ? tcp_options_write+0x5fe/0x12c0 [ 814.573846][ T8916] __tcp_transmit_skb+0x3938/0x3aa0 [ 814.573884][ T8916] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 814.573909][ T8916] ? tcp_init_nondata_skb+0x1f7/0x370 [ 814.573929][ T8916] ? tcp_xmit_probe_skb+0x14e/0x230 [ 814.573949][ T8916] do_tcp_setsockopt+0x188b/0x1f20 [ 814.573969][ T8916] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 814.573982][ T8916] ? aa_sk_perm+0x81e/0x950 [ 814.574005][ T8916] ? __pfx_aa_sk_perm+0x10/0x10 [ 814.574024][ T8916] ? aa_sock_opt_perm+0xff/0x1b0 [ 814.574046][ T8916] ? sock_common_setsockopt+0x36/0xc0 [ 814.574064][ T8916] ? tcp_setsockopt+0x3d/0xe0 [ 814.574077][ T8916] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 814.574098][ T8916] do_sock_setsockopt+0x17c/0x1b0 [ 814.574115][ T8916] __x64_sys_setsockopt+0x13f/0x1b0 [ 814.574134][ T8916] do_syscall_64+0xfa/0xfa0 [ 814.574152][ T8916] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.574171][ T8916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.574185][ T8916] ? clear_bhb_loop+0x60/0xb0 [ 814.574203][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.574218][ T8916] RIP: 0033:0x7f0870f8f6c9 [ 814.574231][ T8916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.574243][ T8916] RSP: 002b:00007f0871d91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 814.574259][ T8916] RAX: ffffffffffffffda RBX: 00007f08711e5fa0 RCX: 00007f0870f8f6c9 [ 814.574269][ T8916] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 814.574278][ T8916] RBP: 00007f0871d91090 R08: 0000000000000004 R09: 0000000000000000 [ 814.574287][ T8916] R10: 0000200000001840 R11: 0000000000000246 R12: 0000000000000001 [ 814.574296][ T8916] R13: 00007f08711e6038 R14: 00007f08711e5fa0 R15: 00007ffcd5474b98 [ 814.574320][ T8916] [ 815.037071][ T8923] syzkaller0: entered promiscuous mode [ 815.052871][ T8923] syzkaller0: entered allmulticast mode [ 815.452065][ T8953] netlink: 'syz.3.14775': attribute type 5 has an invalid length. [ 815.533980][ T8957] FAULT_INJECTION: forcing a failure. [ 815.533980][ T8957] name failslab, interval 1, probability 0, space 0, times 0 [ 815.552805][ T8957] CPU: 1 UID: 0 PID: 8957 Comm: syz.1.14776 Not tainted syzkaller #0 PREEMPT(full) [ 815.552829][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 815.552840][ T8957] Call Trace: [ 815.552849][ T8957] [ 815.552858][ T8957] dump_stack_lvl+0x189/0x250 [ 815.552885][ T8957] ? __pfx____ratelimit+0x10/0x10 [ 815.552909][ T8957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.552931][ T8957] ? __pfx__printk+0x10/0x10 [ 815.552956][ T8957] ? __pfx___might_resched+0x10/0x10 [ 815.552975][ T8957] ? fs_reclaim_acquire+0x7d/0x100 [ 815.553005][ T8957] should_fail_ex+0x414/0x560 [ 815.553036][ T8957] should_failslab+0xa8/0x100 [ 815.553057][ T8957] kmem_cache_alloc_node_noprof+0x77/0x710 [ 815.553081][ T8957] ? __alloc_skb+0x112/0x2d0 [ 815.553115][ T8957] ? __pfx___mutex_trylock_common+0x10/0x10 [ 815.553142][ T8957] __alloc_skb+0x112/0x2d0 [ 815.553171][ T8957] netlink_dump+0x1b7/0xe90 [ 815.553203][ T8957] ? __netlink_lookup+0xbd/0x8a0 [ 815.553226][ T8957] ? __pfx_netlink_dump+0x10/0x10 [ 815.553248][ T8957] ? __netlink_lookup+0x7db/0x8a0 [ 815.553282][ T8957] ? netlink_lookup+0x30/0x200 [ 815.553306][ T8957] ? netlink_lookup+0x30/0x200 [ 815.553327][ T8957] ? netlink_lookup+0x30/0x200 [ 815.553356][ T8957] __netlink_dump_start+0x5cb/0x7e0 [ 815.553388][ T8957] rtnetlink_rcv_msg+0x9eb/0xb70 [ 815.553414][ T8957] ? __pfx_ip6mr_rtm_dumproute+0x10/0x10 [ 815.553432][ T8957] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 815.553455][ T8957] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 815.553477][ T8957] ? ref_tracker_free+0x63a/0x7d0 [ 815.553493][ T8957] ? __pfx_rtnl_dumpit+0x10/0x10 [ 815.553517][ T8957] ? __pfx_ip6mr_rtm_dumproute+0x10/0x10 [ 815.553548][ T8957] netlink_rcv_skb+0x208/0x470 [ 815.553575][ T8957] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 815.553601][ T8957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 815.553638][ T8957] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.553664][ T8957] netlink_unicast+0x82f/0x9e0 [ 815.553696][ T8957] ? __pfx_netlink_unicast+0x10/0x10 [ 815.553723][ T8957] ? netlink_sendmsg+0x642/0xb30 [ 815.553738][ T8957] ? skb_put+0x11b/0x210 [ 815.553760][ T8957] netlink_sendmsg+0x805/0xb30 [ 815.553787][ T8957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.553807][ T8957] ? __lock_acquire+0xab9/0xd20 [ 815.553824][ T8957] ? aa_sock_msg_perm+0xf1/0x1d0 [ 815.553850][ T8957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 815.553868][ T8957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.553887][ T8957] __sock_sendmsg+0x21c/0x270 [ 815.553914][ T8957] sock_write_iter+0x279/0x360 [ 815.553938][ T8957] ? __pfx_sock_write_iter+0x10/0x10 [ 815.553972][ T8957] ? bpf_lsm_file_permission+0x9/0x20 [ 815.553990][ T8957] ? security_file_permission+0x75/0x290 [ 815.554020][ T8957] vfs_write+0x5c9/0xb30 [ 815.554049][ T8957] ? __pfx_sock_write_iter+0x10/0x10 [ 815.554071][ T8957] ? __pfx_vfs_write+0x10/0x10 [ 815.554112][ T8957] ? __fget_files+0x2a/0x420 [ 815.554139][ T8957] ksys_write+0x145/0x250 [ 815.554166][ T8957] ? __pfx_ksys_write+0x10/0x10 [ 815.554193][ T8957] ? do_syscall_64+0xbe/0xfa0 [ 815.554220][ T8957] do_syscall_64+0xfa/0xfa0 [ 815.554242][ T8957] ? lockdep_hardirqs_on+0x9c/0x150 [ 815.554264][ T8957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.554281][ T8957] ? clear_bhb_loop+0x60/0xb0 [ 815.554303][ T8957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.554320][ T8957] RIP: 0033:0x7f9ba178f6c9 [ 815.554337][ T8957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.554353][ T8957] RSP: 002b:00007f9ba2667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 815.554372][ T8957] RAX: ffffffffffffffda RBX: 00007f9ba19e5fa0 RCX: 00007f9ba178f6c9 [ 815.554386][ T8957] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 815.554398][ T8957] RBP: 00007f9ba2667090 R08: 0000000000000000 R09: 0000000000000000 [ 815.554410][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.554421][ T8957] R13: 00007f9ba19e6038 R14: 00007f9ba19e5fa0 R15: 00007ffc0e9046a8 [ 815.554454][ T8957] [ 815.560372][ T8959] netlink: 'syz.2.14778': attribute type 1 has an invalid length. [ 815.899078][ T8977] netlink: 'syz.1.14781': attribute type 1 has an invalid length. [ 816.008027][ T8967] veth17: entered promiscuous mode [ 816.029063][ T8978] syzkaller0: entered promiscuous mode [ 816.035482][ T8978] syzkaller0: entered allmulticast mode [ 816.045381][ T8959] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 816.113135][ T8977] 8021q: adding VLAN 0 to HW filter on device bond10 [ 816.140604][ T8986] veth17: entered promiscuous mode [ 816.148773][ T8986] bond10: (slave veth17): Enslaving as an active interface with a down link [ 816.191942][ T8983] syzkaller0: entered promiscuous mode [ 816.197602][ T8983] syzkaller0: entered allmulticast mode [ 816.217192][ T8988] vlan5: entered allmulticast mode [ 816.222414][ T8988] bond10: entered allmulticast mode [ 816.231769][ T8988] bond10: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 816.515876][ T9014] __nla_validate_parse: 24 callbacks suppressed [ 816.515893][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14789'. [ 816.555480][ T9012] syzkaller0: entered promiscuous mode [ 816.560965][ T9012] syzkaller0: entered allmulticast mode [ 816.571386][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14789'. [ 816.630859][ T9020] FAULT_INJECTION: forcing a failure. [ 816.630859][ T9020] name failslab, interval 1, probability 0, space 0, times 0 [ 816.657851][ T9020] CPU: 0 UID: 0 PID: 9020 Comm: syz.0.14794 Not tainted syzkaller #0 PREEMPT(full) [ 816.657888][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 816.657899][ T9020] Call Trace: [ 816.657907][ T9020] [ 816.657915][ T9020] dump_stack_lvl+0x189/0x250 [ 816.657944][ T9020] ? __pfx____ratelimit+0x10/0x10 [ 816.657967][ T9020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 816.657990][ T9020] ? __pfx__printk+0x10/0x10 [ 816.658012][ T9020] ? __pfx___might_resched+0x10/0x10 [ 816.658032][ T9020] ? fs_reclaim_acquire+0x7d/0x100 [ 816.658063][ T9020] should_fail_ex+0x414/0x560 [ 816.658093][ T9020] should_failslab+0xa8/0x100 [ 816.658114][ T9020] __kmalloc_cache_noprof+0x6f/0x6f0 [ 816.658137][ T9020] ? pcpu_memcg_post_alloc_hook+0xb8/0x520 [ 816.658161][ T9020] ? pcpu_alloc_noprof+0xf85/0x1720 [ 816.658184][ T9020] ? shrinker_alloc+0x59/0xa80 [ 816.658211][ T9020] shrinker_alloc+0x59/0xa80 [ 816.658230][ T9020] ? __raw_spin_lock_init+0x45/0x100 [ 816.658265][ T9020] ? __raw_spin_lock_init+0x45/0x100 [ 816.658295][ T9020] alloc_super+0x6a9/0x930 [ 816.658317][ T9020] ? do_raw_spin_unlock+0x122/0x240 [ 816.658345][ T9020] sget_fc+0x329/0xa40 [ 816.658369][ T9020] ? __pfx_set_anon_super_fc+0x10/0x10 [ 816.658391][ T9020] ? __pfx_mqueue_fill_super+0x10/0x10 [ 816.658415][ T9020] get_tree_nodev+0x2a/0x150 [ 816.658442][ T9020] vfs_get_tree+0x92/0x2b0 [ 816.658468][ T9020] fc_mount_longterm+0x1c/0x100 [ 816.658493][ T9020] mq_init_ns+0x3a1/0x510 [ 816.658518][ T9020] copy_ipcs+0x29c/0x460 [ 816.658545][ T9020] create_new_namespaces+0x218/0x720 [ 816.658570][ T9020] ? security_capable+0x7e/0x2e0 [ 816.658600][ T9020] unshare_nsproxy_namespaces+0x11c/0x170 [ 816.658624][ T9020] ksys_unshare+0x4c8/0x8c0 [ 816.658653][ T9020] ? __pfx_ksys_unshare+0x10/0x10 [ 816.658672][ T9020] ? ksys_write+0x22a/0x250 [ 816.658698][ T9020] ? __pfx_ksys_write+0x10/0x10 [ 816.658730][ T9020] __x64_sys_unshare+0x38/0x50 [ 816.658752][ T9020] do_syscall_64+0xfa/0xfa0 [ 816.658772][ T9020] ? lockdep_hardirqs_on+0x9c/0x150 [ 816.658795][ T9020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.658812][ T9020] ? clear_bhb_loop+0x60/0xb0 [ 816.658832][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.658849][ T9020] RIP: 0033:0x7fe046f8f6c9 [ 816.658866][ T9020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.658881][ T9020] RSP: 002b:00007fe0451ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 816.658901][ T9020] RAX: ffffffffffffffda RBX: 00007fe0471e5fa0 RCX: 00007fe046f8f6c9 [ 816.658914][ T9020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 816.658926][ T9020] RBP: 00007fe0451ee090 R08: 0000000000000000 R09: 0000000000000000 [ 816.658938][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.658949][ T9020] R13: 00007fe0471e6038 R14: 00007fe0471e5fa0 R15: 00007ffcc6e7d498 [ 816.658981][ T9020] [ 817.901810][ T9073] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14811'. [ 817.935815][ T9073] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 818.055485][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14814'. [ 818.078654][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14814'. [ 818.088363][ T9079] nbd: must specify a size in bytes for the device [ 818.145035][ T9081] syzkaller0: entered promiscuous mode [ 818.156806][ T9081] syzkaller0: entered allmulticast mode [ 818.179964][ T9083] FAULT_INJECTION: forcing a failure. [ 818.179964][ T9083] name failslab, interval 1, probability 0, space 0, times 0 [ 818.200058][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14818'. [ 818.206272][ T9083] CPU: 1 UID: 0 PID: 9083 Comm: syz.1.14816 Not tainted syzkaller #0 PREEMPT(full) [ 818.206294][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 818.206306][ T9083] Call Trace: [ 818.206314][ T9083] [ 818.206322][ T9083] dump_stack_lvl+0x189/0x250 [ 818.206349][ T9083] ? __pfx____ratelimit+0x10/0x10 [ 818.206372][ T9083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 818.206396][ T9083] ? __pfx__printk+0x10/0x10 [ 818.206417][ T9083] ? __pfx___might_resched+0x10/0x10 [ 818.206439][ T9083] ? fs_reclaim_acquire+0x7d/0x100 [ 818.206470][ T9083] should_fail_ex+0x414/0x560 [ 818.206500][ T9083] should_failslab+0xa8/0x100 [ 818.206522][ T9083] kmem_cache_alloc_node_noprof+0x77/0x710 [ 818.206546][ T9083] ? __alloc_skb+0x112/0x2d0 [ 818.206570][ T9083] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 818.206600][ T9083] __alloc_skb+0x112/0x2d0 [ 818.206629][ T9083] rtmsg_ifinfo_build_skb+0x84/0x260 [ 818.206661][ T9083] rtnetlink_event+0x1b7/0x270 [ 818.206690][ T9083] notifier_call_chain+0x1b6/0x3e0 [ 818.206719][ T9083] call_netdevice_notifiers+0x88/0xc0 [ 818.206744][ T9083] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 818.206766][ T9083] ? nla_memcpy+0x5b/0xc0 [ 818.206794][ T9083] do_setlink+0xb27/0x41c0 [ 818.206811][ T9083] ? rcu_is_watching+0x15/0xb0 [ 818.206835][ T9083] ? __schedule+0x17ae/0x4cc0 [ 818.206863][ T9083] ? __lock_acquire+0xab9/0xd20 [ 818.206890][ T9083] ? __pfx_do_setlink+0x10/0x10 [ 818.206907][ T9083] ? __lock_acquire+0xab9/0xd20 [ 818.206945][ T9083] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 818.206967][ T9083] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.206991][ T9083] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 818.207012][ T9083] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 818.207039][ T9083] ? rcu_is_watching+0x15/0xb0 [ 818.207062][ T9083] ? __mutex_lock+0xd3b/0x1350 [ 818.207089][ T9083] ? __mutex_lock+0x5bb/0x1350 [ 818.207118][ T9083] ? rtnl_newlink+0x8e9/0x1c80 [ 818.207145][ T9083] ? __pfx___mutex_lock+0x10/0x10 [ 818.207178][ T9083] ? ns_capable+0x8a/0xf0 [ 818.207199][ T9083] ? rtnl_link_get_net_capable+0x16a/0x350 [ 818.207220][ T9083] rtnl_newlink+0x14ad/0x1c80 [ 818.207242][ T9083] ? netlink_deliver_tap+0x19c/0x1b0 [ 818.207271][ T9083] ? __pfx_rtnl_newlink+0x10/0x10 [ 818.207319][ T9083] ? kasan_quarantine_put+0xdd/0x220 [ 818.207343][ T9083] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.207371][ T9083] ? nlmon_xmit+0xb0/0x100 [ 818.207389][ T9083] ? kmem_cache_free+0x19b/0x690 [ 818.207421][ T9083] ? __local_bh_enable_ip+0x12d/0x1c0 [ 818.207440][ T9083] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.207464][ T9083] ? __local_bh_enable_ip+0x12d/0x1c0 [ 818.207482][ T9083] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 818.207504][ T9083] ? __dev_queue_xmit+0x27b/0x3b50 [ 818.207524][ T9083] ? __dev_queue_xmit+0x27b/0x3b50 [ 818.207542][ T9083] ? __dev_queue_xmit+0x27b/0x3b50 [ 818.207563][ T9083] ? __dev_queue_xmit+0x1d79/0x3b50 [ 818.207580][ T9083] ? kasan_save_track+0x3e/0x80 [ 818.207603][ T9083] ? __kasan_slab_alloc+0x6c/0x80 [ 818.207631][ T9083] ? __lock_acquire+0xab9/0xd20 [ 818.207671][ T9083] ? __pfx_rtnl_newlink+0x10/0x10 [ 818.207695][ T9083] rtnetlink_rcv_msg+0x7cf/0xb70 [ 818.207724][ T9083] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 818.207747][ T9083] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 818.207769][ T9083] ? ref_tracker_free+0x63a/0x7d0 [ 818.207787][ T9083] ? __asan_memcpy+0x40/0x70 [ 818.207808][ T9083] ? __pfx_ref_tracker_free+0x10/0x10 [ 818.207836][ T9083] netlink_rcv_skb+0x208/0x470 [ 818.207862][ T9083] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 818.207892][ T9083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 818.207930][ T9083] ? netlink_deliver_tap+0x2e/0x1b0 [ 818.207955][ T9083] netlink_unicast+0x82f/0x9e0 [ 818.207987][ T9083] ? __pfx_netlink_unicast+0x10/0x10 [ 818.208012][ T9083] ? netlink_sendmsg+0x642/0xb30 [ 818.208027][ T9083] ? skb_put+0x11b/0x210 [ 818.208048][ T9083] netlink_sendmsg+0x805/0xb30 [ 818.208074][ T9083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.208095][ T9083] ? aa_sock_msg_perm+0xf1/0x1d0 [ 818.208121][ T9083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 818.208138][ T9083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.208156][ T9083] __sock_sendmsg+0x21c/0x270 [ 818.208182][ T9083] ____sys_sendmsg+0x505/0x830 [ 818.208206][ T9083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.208235][ T9083] ? import_iovec+0x74/0xa0 [ 818.208259][ T9083] ___sys_sendmsg+0x21f/0x2a0 [ 818.208280][ T9083] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.208336][ T9083] ? __fget_files+0x2a/0x420 [ 818.208352][ T9083] ? __fget_files+0x3a0/0x420 [ 818.208379][ T9083] __x64_sys_sendmsg+0x19b/0x260 [ 818.208400][ T9083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 818.208429][ T9083] ? __pfx_ksys_write+0x10/0x10 [ 818.208456][ T9083] ? do_syscall_64+0xbe/0xfa0 [ 818.208482][ T9083] do_syscall_64+0xfa/0xfa0 [ 818.208503][ T9083] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.208526][ T9083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.208544][ T9083] ? clear_bhb_loop+0x60/0xb0 [ 818.208565][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.208582][ T9083] RIP: 0033:0x7f9ba178f6c9 [ 818.208598][ T9083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.208614][ T9083] RSP: 002b:00007f9ba2667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.208634][ T9083] RAX: ffffffffffffffda RBX: 00007f9ba19e5fa0 RCX: 00007f9ba178f6c9 [ 818.208647][ T9083] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 818.208658][ T9083] RBP: 00007f9ba2667090 R08: 0000000000000000 R09: 0000000000000000 [ 818.208670][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.208681][ T9083] R13: 00007f9ba19e6038 R14: 00007f9ba19e5fa0 R15: 00007ffc0e9046a8 [ 818.208713][ T9083] [ 818.208812][ T9083] lo: entered promiscuous mode [ 818.777894][ T9083] tunl0: entered promiscuous mode [ 818.784932][ T9083] gre0: entered promiscuous mode [ 818.792383][ T9083] gretap0: entered promiscuous mode [ 818.801085][ T9083] erspan0: entered promiscuous mode [ 818.808560][ T9083] ip_vti0: entered promiscuous mode [ 818.989323][ T9102] netlink: 'syz.2.14823': attribute type 5 has an invalid length. [ 819.074284][ T9103] netlink: 180 bytes leftover after parsing attributes in process `syz.0.14822'. [ 819.079086][ T9113] FAULT_INJECTION: forcing a failure. [ 819.079086][ T9113] name failslab, interval 1, probability 0, space 0, times 0 [ 819.097322][ T9113] CPU: 1 UID: 0 PID: 9113 Comm: syz.2.14826 Not tainted syzkaller #0 PREEMPT(full) [ 819.097344][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 819.097361][ T9113] Call Trace: [ 819.097369][ T9113] [ 819.097378][ T9113] dump_stack_lvl+0x189/0x250 [ 819.097406][ T9113] ? __pfx____ratelimit+0x10/0x10 [ 819.097430][ T9113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 819.097454][ T9113] ? __pfx__printk+0x10/0x10 [ 819.097470][ T9113] ? netlink_sendmsg+0x805/0xb30 [ 819.097489][ T9113] ? __x64_sys_sendmsg+0x19b/0x260 [ 819.097509][ T9113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.097537][ T9113] should_fail_ex+0x414/0x560 [ 819.097569][ T9113] should_failslab+0xa8/0x100 [ 819.097590][ T9113] kmem_cache_alloc_noprof+0x74/0x6e0 [ 819.097626][ T9113] ? skb_clone+0x212/0x3a0 [ 819.097653][ T9113] skb_clone+0x212/0x3a0 [ 819.097676][ T9113] __netlink_deliver_tap+0x404/0x850 [ 819.097706][ T9113] ? netlink_deliver_tap+0x2e/0x1b0 [ 819.097725][ T9113] netlink_deliver_tap+0x19c/0x1b0 [ 819.097744][ T9113] netlink_sendskb+0x68/0x140 [ 819.097771][ T9113] netlink_unicast+0x397/0x9e0 [ 819.097792][ T9113] ? __asan_memcpy+0x40/0x70 [ 819.097825][ T9113] ? __pfx_netlink_unicast+0x10/0x10 [ 819.097860][ T9113] netlink_rcv_skb+0x28c/0x470 [ 819.097887][ T9113] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 819.097912][ T9113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 819.097954][ T9113] ? netlink_deliver_tap+0x2e/0x1b0 [ 819.097971][ T9113] ? netlink_deliver_tap+0x2e/0x1b0 [ 819.097992][ T9113] xfrm_netlink_rcv+0x79/0x90 [ 819.098019][ T9113] netlink_unicast+0x82f/0x9e0 [ 819.098053][ T9113] ? __pfx_netlink_unicast+0x10/0x10 [ 819.098080][ T9113] ? netlink_sendmsg+0x642/0xb30 [ 819.098096][ T9113] ? skb_put+0x11b/0x210 [ 819.098117][ T9113] netlink_sendmsg+0x805/0xb30 [ 819.098146][ T9113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.098168][ T9113] ? aa_sock_msg_perm+0xf1/0x1d0 [ 819.098196][ T9113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 819.098214][ T9113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.098233][ T9113] __sock_sendmsg+0x21c/0x270 [ 819.098260][ T9113] ____sys_sendmsg+0x505/0x830 [ 819.098287][ T9113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 819.098317][ T9113] ? import_iovec+0x74/0xa0 [ 819.098343][ T9113] ___sys_sendmsg+0x21f/0x2a0 [ 819.098367][ T9113] ? __pfx____sys_sendmsg+0x10/0x10 [ 819.098427][ T9113] ? __fget_files+0x2a/0x420 [ 819.098444][ T9113] ? __fget_files+0x3a0/0x420 [ 819.098474][ T9113] __x64_sys_sendmsg+0x19b/0x260 [ 819.098496][ T9113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 819.098527][ T9113] ? __pfx_ksys_write+0x10/0x10 [ 819.098556][ T9113] ? do_syscall_64+0xbe/0xfa0 [ 819.098585][ T9113] do_syscall_64+0xfa/0xfa0 [ 819.098606][ T9113] ? lockdep_hardirqs_on+0x9c/0x150 [ 819.098630][ T9113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.098648][ T9113] ? clear_bhb_loop+0x60/0xb0 [ 819.098671][ T9113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.098689][ T9113] RIP: 0033:0x7fb44f78f6c9 [ 819.098705][ T9113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.098721][ T9113] RSP: 002b:00007fb4506f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.098741][ T9113] RAX: ffffffffffffffda RBX: 00007fb44f9e5fa0 RCX: 00007fb44f78f6c9 [ 819.098754][ T9113] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 819.098766][ T9113] RBP: 00007fb4506f8090 R08: 0000000000000000 R09: 0000000000000000 [ 819.098778][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.098789][ T9113] R13: 00007fb44f9e6038 R14: 00007fb44f9e5fa0 R15: 00007ffd32607658 [ 819.098824][ T9113] [ 819.529940][ T9119] tipc: Enabled bearer , priority 0 [ 819.539026][ T9119] syzkaller0: entered promiscuous mode [ 819.544790][ T9119] syzkaller0: entered allmulticast mode [ 819.591760][ T9119] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14829'. [ 819.616511][ T9118] tipc: Resetting bearer [ 819.693016][ T9118] tipc: Disabling bearer [ 819.762621][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 819.770663][ C1] lec:lec_tx_timeout: lec0 [ 819.930834][ T9140] syzkaller0: entered promiscuous mode [ 819.943505][ T9140] syzkaller0: entered allmulticast mode [ 820.028277][ T9145] syzkaller0: entered promiscuous mode [ 820.030609][ T9147] netlink: 216 bytes leftover after parsing attributes in process `syz.1.14839'. [ 820.033824][ T9145] syzkaller0: entered allmulticast mode [ 820.057994][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14839'. [ 820.621280][ T9189] lo: entered promiscuous mode [ 820.636302][ T9189] tunl0: entered promiscuous mode [ 820.646876][ T9189] gre0: entered promiscuous mode [ 820.655506][ T9189] ip_vti0: entered promiscuous mode [ 821.001878][ T9218] syzkaller0: entered promiscuous mode [ 821.012847][ T9218] syzkaller0: entered allmulticast mode [ 821.055686][ T9219] syzkaller0: entered promiscuous mode [ 821.069941][ T9219] syzkaller0: entered allmulticast mode [ 821.349589][ T9234] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 821.376458][ T9234] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 821.442327][ T9251] tipc: Enabled bearer , priority 0 [ 821.468195][ T9251] syzkaller0: entered promiscuous mode [ 821.469381][ T9243] can: request_module (can-proto-0) failed. [ 821.474734][ T9251] syzkaller0: entered allmulticast mode [ 821.491746][ T9251] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 821.519601][ T9251] tipc: Resetting bearer [ 821.565987][ T9251] tipc: Resetting bearer [ 821.613688][ T9251] tipc: Disabling bearer [ 821.645956][ T9256] netlink: 'syz.2.14874': attribute type 5 has an invalid length. [ 821.746692][ T9262] __nla_validate_parse: 3 callbacks suppressed [ 821.746709][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14876'. [ 821.802031][ T9264] tipc: Enabling of bearer rejected, already enabled [ 821.835018][ T9264] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 821.850352][ T9264] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 821.859922][ T9266] syzkaller0: entered promiscuous mode [ 821.866805][ T9266] syzkaller0: entered allmulticast mode [ 821.929497][ T9270] syzkaller0: entered promiscuous mode [ 821.937469][ T9270] syzkaller0: entered allmulticast mode [ 822.024166][ T9275] FAULT_INJECTION: forcing a failure. [ 822.024166][ T9275] name failslab, interval 1, probability 0, space 0, times 0 [ 822.038179][ T9275] CPU: 1 UID: 0 PID: 9275 Comm: syz.1.14883 Not tainted syzkaller #0 PREEMPT(full) [ 822.038203][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 822.038214][ T9275] Call Trace: [ 822.038222][ T9275] [ 822.038231][ T9275] dump_stack_lvl+0x189/0x250 [ 822.038258][ T9275] ? __pfx____ratelimit+0x10/0x10 [ 822.038282][ T9275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.038305][ T9275] ? __pfx__printk+0x10/0x10 [ 822.038330][ T9275] ? __pfx___might_resched+0x10/0x10 [ 822.038355][ T9275] should_fail_ex+0x414/0x560 [ 822.038391][ T9275] should_failslab+0xa8/0x100 [ 822.038411][ T9275] __kmalloc_noprof+0xcb/0x7f0 [ 822.038433][ T9275] ? memcg_list_lru_alloc+0x261/0x7e0 [ 822.038464][ T9275] memcg_list_lru_alloc+0x261/0x7e0 [ 822.038490][ T9275] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 822.038519][ T9275] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 822.038541][ T9275] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 822.038566][ T9275] __memcg_slab_post_alloc_hook+0x13c/0x7d0 [ 822.038606][ T9275] kmem_cache_alloc_lru_noprof+0x410/0x6d0 [ 822.038631][ T9275] ? mqueue_alloc_inode+0x28/0x40 [ 822.038658][ T9275] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 822.038678][ T9275] mqueue_alloc_inode+0x28/0x40 [ 822.038698][ T9275] alloc_inode+0x6a/0x1b0 [ 822.038721][ T9275] ? __pfx_mqueue_fill_super+0x10/0x10 [ 822.038743][ T9275] new_inode+0x22/0x170 [ 822.038760][ T9275] ? sget_fc+0x962/0xa40 [ 822.038780][ T9275] ? __pfx_mqueue_fill_super+0x10/0x10 [ 822.038803][ T9275] mqueue_fill_super+0xdc/0x380 [ 822.038825][ T9275] ? __pfx_mqueue_fill_super+0x10/0x10 [ 822.038848][ T9275] get_tree_nodev+0xbb/0x150 [ 822.038875][ T9275] vfs_get_tree+0x92/0x2b0 [ 822.038902][ T9275] fc_mount_longterm+0x1c/0x100 [ 822.038927][ T9275] mq_init_ns+0x3a1/0x510 [ 822.038952][ T9275] copy_ipcs+0x29c/0x460 [ 822.038980][ T9275] create_new_namespaces+0x218/0x720 [ 822.039005][ T9275] ? security_capable+0x7e/0x2e0 [ 822.039035][ T9275] unshare_nsproxy_namespaces+0x11c/0x170 [ 822.039059][ T9275] ksys_unshare+0x4c8/0x8c0 [ 822.039088][ T9275] ? __pfx_ksys_unshare+0x10/0x10 [ 822.039107][ T9275] ? ksys_write+0x22a/0x250 [ 822.039134][ T9275] ? __pfx_ksys_write+0x10/0x10 [ 822.039167][ T9275] __x64_sys_unshare+0x38/0x50 [ 822.039189][ T9275] do_syscall_64+0xfa/0xfa0 [ 822.039211][ T9275] ? lockdep_hardirqs_on+0x9c/0x150 [ 822.039235][ T9275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.039252][ T9275] ? clear_bhb_loop+0x60/0xb0 [ 822.039282][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.039300][ T9275] RIP: 0033:0x7f9ba178f6c9 [ 822.039316][ T9275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.039332][ T9275] RSP: 002b:00007f9ba2667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 822.039352][ T9275] RAX: ffffffffffffffda RBX: 00007f9ba19e5fa0 RCX: 00007f9ba178f6c9 [ 822.039367][ T9275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 822.039379][ T9275] RBP: 00007f9ba2667090 R08: 0000000000000000 R09: 0000000000000000 [ 822.039391][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 822.039402][ T9275] R13: 00007f9ba19e6038 R14: 00007f9ba19e5fa0 R15: 00007ffc0e9046a8 [ 822.039436][ T9275] [ 822.573597][ T9292] netlink: 'syz.6.14889': attribute type 5 has an invalid length. [ 822.647652][ T9294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14890'. [ 822.772199][ T9307] sit1: entered promiscuous mode [ 822.798845][ T9307] sit1: entered allmulticast mode [ 822.894076][ T9314] geneve3: entered promiscuous mode [ 822.899984][ T9314] geneve3: entered allmulticast mode [ 822.918029][T25377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.932888][T25377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.960990][T25377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.996499][T25377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.064683][ T9325] netlink: 'syz.2.14905': attribute type 1 has an invalid length. [ 823.130766][ T9334] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 823.154277][ T9331] veth29: entered promiscuous mode [ 823.292326][ T9325] 8021q: adding VLAN 0 to HW filter on device bond7 [ 823.385619][ T9332] bond7: (slave veth17): Enslaving as an active interface with a down link [ 823.440633][ T9337] veth19: entered promiscuous mode [ 823.450112][ T9337] bond7: (slave veth19): Enslaving as an active interface with a down link [ 823.468079][ T9343] vlan3: entered allmulticast mode [ 823.473410][ T9343] bond7: entered allmulticast mode [ 823.480151][ T9343] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 823.527642][ T9358] lo: entered promiscuous mode [ 823.534054][ T9358] tunl0: entered promiscuous mode [ 823.546153][ T9358] gre0: entered promiscuous mode [ 823.556380][ T9362] netlink: 100 bytes leftover after parsing attributes in process `syz.6.14918'. [ 823.558192][ T9358] 0ªî{X¹¦: entered promiscuous mode [ 823.608452][ T9358] erspan0: entered promiscuous mode [ 823.615794][ T9360] raw_sendmsg: syz.3.14917 forgot to set AF_INET. Fix it! [ 823.634204][ T9358] ip_vti0: entered promiscuous mode [ 823.727537][ T9370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 823.901718][ T9382] C: entered promiscuous mode [ 823.943493][ T9382] tunl0: entered promiscuous mode [ 823.972061][ T9382] gre0: entered promiscuous mode [ 824.045615][ T9382] gretap0: entered promiscuous mode [ 824.172745][ T9382] erspan0: entered promiscuous mode [ 824.197009][ T9382] ip_vti0: entered promiscuous mode [ 824.608305][ T9428] FAULT_INJECTION: forcing a failure. [ 824.608305][ T9428] name failslab, interval 1, probability 0, space 0, times 0 [ 824.621953][ T9429] FAULT_INJECTION: forcing a failure. [ 824.621953][ T9429] name failslab, interval 1, probability 0, space 0, times 0 [ 824.624286][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz.2.14942 Not tainted syzkaller #0 PREEMPT(full) [ 824.624309][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 824.624321][ T9428] Call Trace: [ 824.624329][ T9428] [ 824.624337][ T9428] dump_stack_lvl+0x189/0x250 [ 824.624365][ T9428] ? __pfx____ratelimit+0x10/0x10 [ 824.624388][ T9428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.624412][ T9428] ? __pfx__printk+0x10/0x10 [ 824.624436][ T9428] ? __pfx___might_resched+0x10/0x10 [ 824.624454][ T9428] ? fs_reclaim_acquire+0x7d/0x100 [ 824.624484][ T9428] should_fail_ex+0x414/0x560 [ 824.624515][ T9428] should_failslab+0xa8/0x100 [ 824.624535][ T9428] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 824.624559][ T9428] ? __d_alloc+0x36/0x7a0 [ 824.624584][ T9428] __d_alloc+0x36/0x7a0 [ 824.624609][ T9428] d_make_root+0x4a/0xe0 [ 824.624630][ T9428] mqueue_fill_super+0x26e/0x380 [ 824.624652][ T9428] ? __pfx_mqueue_fill_super+0x10/0x10 [ 824.624675][ T9428] get_tree_nodev+0xbb/0x150 [ 824.624701][ T9428] vfs_get_tree+0x92/0x2b0 [ 824.624728][ T9428] fc_mount_longterm+0x1c/0x100 [ 824.624752][ T9428] mq_init_ns+0x3a1/0x510 [ 824.624777][ T9428] copy_ipcs+0x29c/0x460 [ 824.624803][ T9428] create_new_namespaces+0x218/0x720 [ 824.624826][ T9428] ? security_capable+0x7e/0x2e0 [ 824.624857][ T9428] unshare_nsproxy_namespaces+0x11c/0x170 [ 824.624878][ T9428] ksys_unshare+0x4c8/0x8c0 [ 824.624907][ T9428] ? __pfx_ksys_unshare+0x10/0x10 [ 824.624926][ T9428] ? ksys_write+0x22a/0x250 [ 824.624952][ T9428] ? __pfx_ksys_write+0x10/0x10 [ 824.624983][ T9428] __x64_sys_unshare+0x38/0x50 [ 824.625004][ T9428] do_syscall_64+0xfa/0xfa0 [ 824.625026][ T9428] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.625049][ T9428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.625066][ T9428] ? clear_bhb_loop+0x60/0xb0 [ 824.625087][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.625104][ T9428] RIP: 0033:0x7fb44f78f6c9 [ 824.625120][ T9428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.625136][ T9428] RSP: 002b:00007fb4506f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 824.625155][ T9428] RAX: ffffffffffffffda RBX: 00007fb44f9e5fa0 RCX: 00007fb44f78f6c9 [ 824.625168][ T9428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 824.625179][ T9428] RBP: 00007fb4506f8090 R08: 0000000000000000 R09: 0000000000000000 [ 824.625191][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 824.625211][ T9428] R13: 00007fb44f9e6038 R14: 00007fb44f9e5fa0 R15: 00007ffd32607658 [ 824.625242][ T9428] [ 824.727716][ T9426] netlink: 'syz.1.14941': attribute type 5 has an invalid length. [ 824.739764][ T9429] CPU: 0 UID: 0 PID: 9429 Comm: syz.0.14943 Not tainted syzkaller #0 PREEMPT(full) [ 824.739787][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 824.739798][ T9429] Call Trace: [ 824.739806][ T9429] [ 824.739814][ T9429] dump_stack_lvl+0x189/0x250 [ 824.739843][ T9429] ? __pfx____ratelimit+0x10/0x10 [ 824.739865][ T9429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.739888][ T9429] ? __pfx__printk+0x10/0x10 [ 824.739908][ T9429] ? __pfx___might_resched+0x10/0x10 [ 824.739928][ T9429] ? fs_reclaim_acquire+0x7d/0x100 [ 824.739959][ T9429] should_fail_ex+0x414/0x560 [ 824.739989][ T9429] should_failslab+0xa8/0x100 [ 824.740008][ T9429] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 824.740031][ T9429] ? __d_alloc+0x36/0x7a0 [ 824.740056][ T9429] __d_alloc+0x36/0x7a0 [ 824.740080][ T9429] d_alloc_pseudo+0x21/0xc0 [ 824.740100][ T9429] alloc_file_pseudo+0xcc/0x210 [ 824.740124][ T9429] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 824.740156][ T9429] anon_inode_getfd+0xca/0x1b0 [ 824.740181][ T9429] btf_new_fd+0x9aa/0xc90 [ 824.740197][ T9429] ? apparmor_capable+0x137/0x1b0 [ 824.740224][ T9429] ? __pfx_btf_new_fd+0x10/0x10 [ 824.740243][ T9429] ? bpf_token_put+0x143/0x160 [ 824.740263][ T9429] ? bpf_btf_load+0x126/0x190 [ 824.740283][ T9429] __sys_bpf+0x3ed/0x860 [ 824.740302][ T9429] ? __pfx___sys_bpf+0x10/0x10 [ 824.740334][ T9429] ? ksys_write+0x22a/0x250 [ 824.740360][ T9429] ? __pfx_ksys_write+0x10/0x10 [ 824.740388][ T9429] __x64_sys_bpf+0x7c/0x90 [ 824.740413][ T9429] do_syscall_64+0xfa/0xfa0 [ 824.740441][ T9429] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.740464][ T9429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.740481][ T9429] ? clear_bhb_loop+0x60/0xb0 [ 824.740502][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.740519][ T9429] RIP: 0033:0x7fe046f8f6c9 [ 824.740535][ T9429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.740551][ T9429] RSP: 002b:00007fe0451ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 824.740570][ T9429] RAX: ffffffffffffffda RBX: 00007fe0471e5fa0 RCX: 00007fe046f8f6c9 [ 824.740584][ T9429] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 824.740595][ T9429] RBP: 00007fe0451ee090 R08: 0000000000000000 R09: 0000000000000000 [ 824.740607][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 824.740618][ T9429] R13: 00007fe0471e6038 R14: 00007fe0471e5fa0 R15: 00007ffcc6e7d498 [ 824.740648][ T9429] [ 825.365910][ T9460] syzkaller0: entered promiscuous mode [ 825.376606][ T9460] syzkaller0: entered allmulticast mode [ 825.808103][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14963'. [ 825.821995][ T9484] netem: change failed [ 825.961223][ T9494] tipc: Enabled bearer , priority 0 [ 825.973511][ T9494] syzkaller0: entered promiscuous mode [ 825.978996][ T9494] syzkaller0: entered allmulticast mode [ 826.075205][ T9490] tipc: Resetting bearer [ 826.087737][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14970'. [ 826.102729][ T9504] bond0: entered allmulticast mode [ 826.180471][ T9489] tipc: Resetting bearer [ 826.283185][ T9489] tipc: Disabling bearer [ 826.338035][ T9521] netlink: 'syz.2.14976': attribute type 1 has an invalid length. [ 826.413112][ T9521] 8021q: adding VLAN 0 to HW filter on device bond8 [ 826.486932][ T25] block nbd4: Possible stuck request ffff888024d45080: control (read@0,1024B). Runtime 300 seconds [ 826.497872][ T25] block nbd4: Possible stuck request ffff888024d45240: control (read@1024,1024B). Runtime 300 seconds [ 826.510248][ T25] block nbd4: Possible stuck request ffff888024d45400: control (read@2048,1024B). Runtime 300 seconds [ 826.521447][ T25] block nbd4: Possible stuck request ffff888024d455c0: control (read@3072,1024B). Runtime 300 seconds [ 826.554858][ T9524] bond8: (slave veth21): Enslaving as an active interface with a down link [ 826.589595][ T9521] veth23: entered promiscuous mode [ 826.598776][ T9521] bond8: (slave veth23): Enslaving as an active interface with a down link [ 826.616552][ T9527] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20000 [ 826.627662][ T9539] IPVS: set_ctl: invalid protocol: 12 172.30.0.2:20003 [ 826.636855][ T9533] vlan3: entered allmulticast mode [ 826.642303][ T9527] IPVS: set_ctl: invalid protocol: 12 172.30.0.2:20003 [ 826.649819][ T9533] bond8: entered allmulticast mode [ 826.657822][ T9533] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 826.820521][ T9546] syzkaller1: entered promiscuous mode [ 826.839305][ T9546] syzkaller1: entered allmulticast mode [ 826.964406][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14983'. [ 827.028065][ T9569] sctp: [Deprecated]: syz.6.14988 (pid 9569) Use of int in maxseg socket option. [ 827.028065][ T9569] Use struct sctp_assoc_value instead [ 827.152916][ T9579] rdma_rxe: rxe_newlink: failed to add erspan0 [ 827.169728][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14994'. [ 827.186333][ T9581] gtp1: entered promiscuous mode [ 827.191512][ T9581] gtp1: entered allmulticast mode [ 827.200965][ T9581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14994'. [ 827.210317][ T9581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14994'. [ 827.303468][ T9590] netlink: 'syz.1.14998': attribute type 1 has an invalid length. [ 827.330080][ T9590] 8021q: adding VLAN 0 to HW filter on device bond11 [ 827.352898][ T9590] bond11: (slave veth21): Enslaving as an active interface with a down link [ 827.385965][ T9590] veth23: entered promiscuous mode [ 827.393924][ T9590] bond11: (slave veth23): Enslaving as an active interface with a down link [ 827.409043][ T9590] vlan5: entered allmulticast mode [ 827.414458][ T9590] bond11: entered allmulticast mode [ 827.420684][ T9590] bond11: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 827.865087][ T9602] netlink: 108 bytes leftover after parsing attributes in process `syz.2.15000'. [ 827.909310][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15000'. [ 827.953044][ T9613] syzkaller0: entered promiscuous mode [ 827.977562][ T9613] syzkaller0: entered allmulticast mode [ 828.540490][ T9652] netlink: 'syz.1.15017': attribute type 1 has an invalid length. [ 828.684581][ T9662] tipc: Enabled bearer , priority 0 [ 828.692019][ T9662] syzkaller0: entered promiscuous mode [ 828.700507][ T9662] syzkaller0: entered allmulticast mode [ 828.740274][ T9661] tipc: Resetting bearer [ 828.775142][ T9661] tipc: Disabling bearer [ 828.794494][ T9664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15021'. [ 829.182069][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15033'. [ 829.217036][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15033'. [ 829.248366][ T9688] netlink: 'syz.3.15033': attribute type 11 has an invalid length. [ 829.281719][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15033'. [ 829.305957][ T9688] netlink: 'syz.3.15033': attribute type 11 has an invalid length. [ 829.322336][ T9698] tipc: Enabled bearer , priority 0 [ 829.363815][ T9698] syzkaller0: entered promiscuous mode [ 829.369298][ T9698] syzkaller0: entered allmulticast mode [ 829.430770][ T9696] tipc: Resetting bearer [ 829.505892][ T9696] tipc: Disabling bearer [ 829.566252][ T9720] netlink: 'syz.3.15044': attribute type 1 has an invalid length. [ 829.646649][ T9720] 8021q: adding VLAN 0 to HW filter on device bond14 [ 829.798462][ T9720] veth9: entered promiscuous mode [ 829.800754][ T9739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.813695][ T9735] lo: entered promiscuous mode [ 829.818583][ T9735] lo: entered allmulticast mode [ 829.834473][ T9735] tunl0: entered promiscuous mode [ 829.844795][ T9735] tunl0: entered allmulticast mode [ 829.860114][ T9735] gre0: entered promiscuous mode [ 829.871517][ T9735] gre0: entered allmulticast mode [ 829.899138][ T9735] gretap0: entered promiscuous mode [ 829.904795][ T9735] gretap0: entered allmulticast mode [ 829.922569][ T9735] erspan0: entered promiscuous mode [ 829.928887][ T9735] erspan0: entered allmulticast mode [ 829.939558][ T9735] ip_vti0: entered promiscuous mode [ 829.945508][ T9735] ip_vti0: entered allmulticast mode [ 829.958531][ T9737] netlink: 'syz.2.15050': attribute type 5 has an invalid length. [ 830.127857][ T9754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.498125][ T9849] netlink: 'syz.3.15091': attribute type 1 has an invalid length. [ 831.616704][ T9849] bond15: entered promiscuous mode [ 831.624902][ T9849] 8021q: adding VLAN 0 to HW filter on device bond15 [ 831.654503][ T9849] bond15: entered allmulticast mode [ 831.700870][ T9865] netlink: 'syz.1.15100': attribute type 5 has an invalid length. [ 831.953776][ T9885] lo: left promiscuous mode [ 831.958493][ T9885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 832.075916][ T9893] tipc: Enabled bearer , priority 0 [ 832.092790][ T9893] tipc: Resetting bearer [ 832.117752][ T9892] tipc: Disabling bearer [ 832.231239][ T9903] openvswitch: netlink: Duplicate or invalid key (type 0). [ 832.251394][ T9903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.307345][ T9903] __nla_validate_parse: 10 callbacks suppressed [ 832.307361][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15113'. [ 832.358564][ T9903] vlan0: entered allmulticast mode [ 832.384497][ T9903] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 832.601474][ T9937] bridge24: entered promiscuous mode [ 832.613518][ T9937] bridge24: entered allmulticast mode [ 833.433932][ T9994] ip6t_REJECT: ECHOREPLY is not supported [ 833.456189][ T9995] ip6t_REJECT: ECHOREPLY is not supported [ 833.624014][T10005] lo: left allmulticast mode [ 833.629119][T10005] tunl0: left allmulticast mode [ 833.637756][T10005] FAULT_INJECTION: forcing a failure. [ 833.637756][T10005] name failslab, interval 1, probability 0, space 0, times 0 [ 833.651803][T10005] CPU: 0 UID: 0 PID: 10005 Comm: syz.6.15152 Not tainted syzkaller #0 PREEMPT(full) [ 833.651848][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 833.651872][T10005] Call Trace: [ 833.651888][T10005] [ 833.651904][T10005] dump_stack_lvl+0x189/0x250 [ 833.651958][T10005] ? __pfx____ratelimit+0x10/0x10 [ 833.651984][T10005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.652008][T10005] ? __pfx__printk+0x10/0x10 [ 833.652030][T10005] ? __pfx___might_resched+0x10/0x10 [ 833.652051][T10005] ? fs_reclaim_acquire+0x7d/0x100 [ 833.652082][T10005] should_fail_ex+0x414/0x560 [ 833.652112][T10005] should_failslab+0xa8/0x100 [ 833.652133][T10005] kmem_cache_alloc_node_noprof+0x77/0x710 [ 833.652157][T10005] ? __alloc_skb+0x112/0x2d0 [ 833.652179][T10005] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 833.652208][T10005] __alloc_skb+0x112/0x2d0 [ 833.652237][T10005] rtmsg_ifinfo_build_skb+0x84/0x260 [ 833.652265][T10005] rtnetlink_event+0x1b7/0x270 [ 833.652294][T10005] notifier_call_chain+0x1b6/0x3e0 [ 833.652323][T10005] call_netdevice_notifiers+0x88/0xc0 [ 833.652347][T10005] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 833.652368][T10005] ? nla_memcpy+0x5b/0xc0 [ 833.652398][T10005] do_setlink+0xb27/0x41c0 [ 833.652420][T10005] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 833.652455][T10005] ? __pfx_do_setlink+0x10/0x10 [ 833.652474][T10005] ? stack_trace_save+0x9c/0xe0 [ 833.652495][T10005] ? __pfx_stack_trace_save+0x10/0x10 [ 833.652528][T10005] ? __lock_acquire+0xab9/0xd20 [ 833.652555][T10005] ? __mutex_trylock_common+0x153/0x260 [ 833.652584][T10005] ? __pfx___mutex_trylock_common+0x10/0x10 [ 833.652615][T10005] ? rcu_is_watching+0x15/0xb0 [ 833.652636][T10005] ? trace_contention_end+0x39/0x120 [ 833.652657][T10005] ? __mutex_lock+0x335/0x1350 [ 833.652695][T10005] ? rtnl_newlink+0x8e9/0x1c80 [ 833.652722][T10005] ? __pfx___mutex_lock+0x10/0x10 [ 833.652757][T10005] ? ns_capable+0x8a/0xf0 [ 833.652778][T10005] ? rtnl_link_get_net_capable+0x16a/0x350 [ 833.652800][T10005] rtnl_newlink+0x14ad/0x1c80 [ 833.652824][T10005] ? netlink_deliver_tap+0x19c/0x1b0 [ 833.652853][T10005] ? __pfx_rtnl_newlink+0x10/0x10 [ 833.652904][T10005] ? kasan_quarantine_put+0xdd/0x220 [ 833.652927][T10005] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.652957][T10005] ? nlmon_xmit+0xb0/0x100 [ 833.652977][T10005] ? kmem_cache_free+0x19b/0x690 [ 833.653010][T10005] ? __local_bh_enable_ip+0x12d/0x1c0 [ 833.653030][T10005] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.653055][T10005] ? __local_bh_enable_ip+0x12d/0x1c0 [ 833.653074][T10005] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 833.653098][T10005] ? __dev_queue_xmit+0x27b/0x3b50 [ 833.653118][T10005] ? __dev_queue_xmit+0x27b/0x3b50 [ 833.653136][T10005] ? __dev_queue_xmit+0x27b/0x3b50 [ 833.653158][T10005] ? __dev_queue_xmit+0x1d79/0x3b50 [ 833.653177][T10005] ? kasan_save_track+0x3e/0x80 [ 833.653199][T10005] ? __kasan_slab_alloc+0x6c/0x80 [ 833.653227][T10005] ? __lock_acquire+0xab9/0xd20 [ 833.653271][T10005] ? __pfx_rtnl_newlink+0x10/0x10 [ 833.653295][T10005] rtnetlink_rcv_msg+0x7cf/0xb70 [ 833.653324][T10005] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 833.653347][T10005] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 833.653369][T10005] ? ref_tracker_free+0x63a/0x7d0 [ 833.653388][T10005] ? __asan_memcpy+0x40/0x70 [ 833.653409][T10005] ? __pfx_ref_tracker_free+0x10/0x10 [ 833.653438][T10005] netlink_rcv_skb+0x208/0x470 [ 833.653465][T10005] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 833.653492][T10005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 833.653530][T10005] ? netlink_deliver_tap+0x2e/0x1b0 [ 833.653556][T10005] netlink_unicast+0x82f/0x9e0 [ 833.653589][T10005] ? __pfx_netlink_unicast+0x10/0x10 [ 833.653621][T10005] ? netlink_sendmsg+0x642/0xb30 [ 833.653636][T10005] ? skb_put+0x11b/0x210 [ 833.653658][T10005] netlink_sendmsg+0x805/0xb30 [ 833.653685][T10005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.653705][T10005] ? aa_sock_msg_perm+0xf1/0x1d0 [ 833.653732][T10005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 833.653750][T10005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.653768][T10005] __sock_sendmsg+0x21c/0x270 [ 833.653793][T10005] ____sys_sendmsg+0x505/0x830 [ 833.653812][T10005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 833.653834][T10005] ? import_iovec+0x74/0xa0 [ 833.653855][T10005] ___sys_sendmsg+0x21f/0x2a0 [ 833.653871][T10005] ? __pfx____sys_sendmsg+0x10/0x10 [ 833.653913][T10005] ? __fget_files+0x2a/0x420 [ 833.653925][T10005] ? __fget_files+0x3a0/0x420 [ 833.653946][T10005] __x64_sys_sendmsg+0x19b/0x260 [ 833.653963][T10005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 833.653985][T10005] ? __pfx_ksys_write+0x10/0x10 [ 833.654007][T10005] ? do_syscall_64+0xbe/0xfa0 [ 833.654028][T10005] do_syscall_64+0xfa/0xfa0 [ 833.654045][T10005] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.654063][T10005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.654077][T10005] ? clear_bhb_loop+0x60/0xb0 [ 833.654094][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.654107][T10005] RIP: 0033:0x7f0870f8f6c9 [ 833.654120][T10005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.654133][T10005] RSP: 002b:00007f0871d91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.654148][T10005] RAX: ffffffffffffffda RBX: 00007f08711e5fa0 RCX: 00007f0870f8f6c9 [ 833.654159][T10005] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 833.654168][T10005] RBP: 00007f0871d91090 R08: 0000000000000000 R09: 0000000000000000 [ 833.654177][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 833.654186][T10005] R13: 00007f08711e6038 R14: 00007f08711e5fa0 R15: 00007ffcd5474b98 [ 833.654210][T10005] [ 834.198939][T10005] gre0: left allmulticast mode [ 834.228002][T10005] gretap0: left allmulticast mode [ 834.257342][T10005] erspan0: left allmulticast mode [ 834.294017][T10005] ip_vti0: left allmulticast mode [ 834.462010][T10020] netlink: 165 bytes leftover after parsing attributes in process `syz.2.15159'. [ 834.490326][T10020] netlink: 'syz.2.15159': attribute type 1 has an invalid length. [ 834.560987][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15160'. [ 834.584091][T10020] 8021q: adding VLAN 0 to HW filter on device bond9 [ 834.683947][T10028] vlan3: entered promiscuous mode [ 834.689005][T10028] bond9: entered promiscuous mode [ 834.708330][T10028] vlan3: entered allmulticast mode [ 834.714417][T10028] bond9: entered allmulticast mode [ 834.735312][T10034] tipc: Enabling of bearer rejected, already enabled [ 834.754217][T10038] ieee802154 phy1 wpan1: encryption failed: -126 [ 834.765660][T10038] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 834.957164][T10050] netlink: 'syz.1.15169': attribute type 1 has an invalid length. [ 835.040241][T10050] 8021q: adding VLAN 0 to HW filter on device bond13 [ 835.116493][T10050] veth27: entered promiscuous mode [ 835.127230][T10050] bond13: (slave veth27): Enslaving as an active interface with a down link [ 835.165172][T10058] bond13: (slave veth29): Enslaving as an active interface with a down link [ 835.192449][T10050] vlan5: entered allmulticast mode [ 835.197944][T10050] bond13: entered allmulticast mode [ 835.206306][T10050] bond13: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 835.281605][T10066] netlink: 'syz.0.15176': attribute type 5 has an invalid length. [ 835.422489][T10083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15180'. [ 835.494227][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15180'. [ 835.538705][T10091] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15182'. [ 835.614834][T10091] netlink: 2140 bytes leftover after parsing attributes in process `syz.0.15182'. [ 835.632527][T10094] FAULT_INJECTION: forcing a failure. [ 835.632527][T10094] name failslab, interval 1, probability 0, space 0, times 0 [ 835.645401][T10094] CPU: 1 UID: 0 PID: 10094 Comm: syz.1.15184 Not tainted syzkaller #0 PREEMPT(full) [ 835.645424][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 835.645435][T10094] Call Trace: [ 835.645443][T10094] [ 835.645451][T10094] dump_stack_lvl+0x189/0x250 [ 835.645479][T10094] ? __pfx____ratelimit+0x10/0x10 [ 835.645502][T10094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 835.645525][T10094] ? __pfx__printk+0x10/0x10 [ 835.645545][T10094] ? __pfx___might_resched+0x10/0x10 [ 835.645565][T10094] ? fs_reclaim_acquire+0x7d/0x100 [ 835.645595][T10094] should_fail_ex+0x414/0x560 [ 835.645627][T10094] should_failslab+0xa8/0x100 [ 835.645648][T10094] __kmalloc_cache_noprof+0x6f/0x6f0 [ 835.645673][T10094] ? netdevice_event+0x3a1/0x8a0 [ 835.645694][T10094] ? netdevice_event+0x364/0x8a0 [ 835.645721][T10094] netdevice_event+0x3a1/0x8a0 [ 835.645749][T10094] ? __up_read+0x280/0x680 [ 835.645770][T10094] ? __pfx_netdevice_event+0x10/0x10 [ 835.645792][T10094] ? __pfx_del_netdev_ips+0x10/0x10 [ 835.645812][T10094] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 835.645835][T10094] ? __pfx_add_default_gids+0x10/0x10 [ 835.645856][T10094] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 835.645880][T10094] ? __pfx_add_netdev_ips+0x10/0x10 [ 835.645902][T10094] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 835.645927][T10094] ? cfg802154_netdev_notifier_call+0xd8/0x930 [ 835.645959][T10094] notifier_call_chain+0x1b6/0x3e0 [ 835.645987][T10094] call_netdevice_notifiers+0x88/0xc0 [ 835.646011][T10094] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 835.646034][T10094] ? nla_memcpy+0x5b/0xc0 [ 835.646064][T10094] do_setlink+0xb27/0x41c0 [ 835.646085][T10094] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 835.646120][T10094] ? __pfx_do_setlink+0x10/0x10 [ 835.646139][T10094] ? stack_trace_save+0x9c/0xe0 [ 835.646161][T10094] ? __pfx_stack_trace_save+0x10/0x10 [ 835.646193][T10094] ? __lock_acquire+0xab9/0xd20 [ 835.646218][T10094] ? __mutex_trylock_common+0x153/0x260 [ 835.646243][T10094] ? __pfx___mutex_trylock_common+0x10/0x10 [ 835.646268][T10094] ? rcu_is_watching+0x15/0xb0 [ 835.646289][T10094] ? trace_contention_end+0x39/0x120 [ 835.646312][T10094] ? __mutex_lock+0x335/0x1350 [ 835.646355][T10094] ? rtnl_newlink+0x8e9/0x1c80 [ 835.646385][T10094] ? __pfx___mutex_lock+0x10/0x10 [ 835.646419][T10094] ? ns_capable+0x8a/0xf0 [ 835.646440][T10094] ? rtnl_link_get_net_capable+0x16a/0x350 [ 835.646463][T10094] rtnl_newlink+0x14ad/0x1c80 [ 835.646486][T10094] ? netlink_deliver_tap+0x19c/0x1b0 [ 835.646517][T10094] ? __pfx_rtnl_newlink+0x10/0x10 [ 835.646568][T10094] ? kasan_quarantine_put+0xdd/0x220 [ 835.646592][T10094] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.646623][T10094] ? nlmon_xmit+0xb0/0x100 [ 835.646643][T10094] ? kmem_cache_free+0x19b/0x690 [ 835.646677][T10094] ? __local_bh_enable_ip+0x12d/0x1c0 [ 835.646696][T10094] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.646718][T10094] ? __local_bh_enable_ip+0x12d/0x1c0 [ 835.646737][T10094] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 835.646761][T10094] ? __dev_queue_xmit+0x27b/0x3b50 [ 835.646782][T10094] ? __dev_queue_xmit+0x27b/0x3b50 [ 835.646799][T10094] ? __dev_queue_xmit+0x27b/0x3b50 [ 835.646821][T10094] ? __dev_queue_xmit+0x1d79/0x3b50 [ 835.646839][T10094] ? kasan_save_track+0x3e/0x80 [ 835.646861][T10094] ? __kasan_slab_alloc+0x6c/0x80 [ 835.646889][T10094] ? __lock_acquire+0xab9/0xd20 [ 835.646931][T10094] ? __pfx_rtnl_newlink+0x10/0x10 [ 835.646955][T10094] rtnetlink_rcv_msg+0x7cf/0xb70 [ 835.646984][T10094] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 835.647007][T10094] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 835.647030][T10094] ? ref_tracker_free+0x63a/0x7d0 [ 835.647049][T10094] ? __asan_memcpy+0x40/0x70 [ 835.647070][T10094] ? __pfx_ref_tracker_free+0x10/0x10 [ 835.647098][T10094] netlink_rcv_skb+0x208/0x470 [ 835.647126][T10094] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 835.647153][T10094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 835.647189][T10094] ? netlink_deliver_tap+0x2e/0x1b0 [ 835.647215][T10094] netlink_unicast+0x82f/0x9e0 [ 835.647248][T10094] ? __pfx_netlink_unicast+0x10/0x10 [ 835.647275][T10094] ? skb_put+0x11b/0x210 [ 835.647296][T10094] netlink_sendmsg+0x805/0xb30 [ 835.647322][T10094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.647350][T10094] ? aa_sock_msg_perm+0xf1/0x1d0 [ 835.647377][T10094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 835.647394][T10094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.647413][T10094] __sock_sendmsg+0x21c/0x270 [ 835.647440][T10094] ____sys_sendmsg+0x505/0x830 [ 835.647465][T10094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.647493][T10094] ? import_iovec+0x74/0xa0 [ 835.647518][T10094] ___sys_sendmsg+0x21f/0x2a0 [ 835.647540][T10094] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.647596][T10094] ? __fget_files+0x2a/0x420 [ 835.647613][T10094] ? __fget_files+0x3a0/0x420 [ 835.647641][T10094] __x64_sys_sendmsg+0x19b/0x260 [ 835.647662][T10094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 835.647691][T10094] ? __pfx_ksys_write+0x10/0x10 [ 835.647718][T10094] ? do_syscall_64+0xbe/0xfa0 [ 835.647745][T10094] do_syscall_64+0xfa/0xfa0 [ 835.647766][T10094] ? lockdep_hardirqs_on+0x9c/0x150 [ 835.647789][T10094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.647807][T10094] ? clear_bhb_loop+0x60/0xb0 [ 835.647829][T10094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.647846][T10094] RIP: 0033:0x7f9ba178f6c9 [ 835.647862][T10094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.647877][T10094] RSP: 002b:00007f9ba2667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.647897][T10094] RAX: ffffffffffffffda RBX: 00007f9ba19e5fa0 RCX: 00007f9ba178f6c9 [ 835.647911][T10094] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 835.647922][T10094] RBP: 00007f9ba2667090 R08: 0000000000000000 R09: 0000000000000000 [ 835.647934][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.647944][T10094] R13: 00007f9ba19e6038 R14: 00007f9ba19e5fa0 R15: 00007ffc0e9046a8 [ 835.647975][T10094] [ 836.540564][T10119] netlink: 'syz.0.15192': attribute type 5 has an invalid length. [ 836.685132][T10125] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15194'. [ 836.695828][T10128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 836.988265][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15200'. [ 837.262966][T10173] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15209'. [ 837.297234][T10173] netlink: 'syz.3.15209': attribute type 3 has an invalid length. [ 837.313001][T10173] netlink: 'syz.3.15209': attribute type 2 has an invalid length. [ 837.333518][T10173] __nla_validate_parse: 3 callbacks suppressed [ 837.333532][T10173] netlink: 31 bytes leftover after parsing attributes in process `syz.3.15209'. [ 837.595681][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15214'. [ 838.021599][T10223] netlink: 'syz.3.15226': attribute type 3 has an invalid length. [ 838.241022][T10238] syzkaller1: entered promiscuous mode [ 838.247149][T10238] syzkaller1: entered allmulticast mode [ 838.292256][T10246] bond16: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 838.309678][T10246] bond16 (unregistering): Released all slaves [ 838.388904][T10253] netlink: 'syz.6.15233': attribute type 1 has an invalid length. [ 838.557806][T10260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15236'. [ 838.630566][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15236'. [ 838.888098][T10268] veth9: entered promiscuous mode [ 839.157638][T10295] netlink: 96 bytes leftover after parsing attributes in process `syz.6.15246'. [ 839.187791][T10295] netlink: 132 bytes leftover after parsing attributes in process `syz.6.15246'. [ 839.318202][T10306] netlink: 'syz.1.15253': attribute type 25 has an invalid length. [ 839.344857][T10311] ip6tnl3: entered promiscuous mode [ 839.350184][T10311] ip6tnl3: entered allmulticast mode [ 839.363842][T10312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.484840][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15254'. [ 839.504167][T10326] lo: entered promiscuous mode [ 839.510504][T10326] FAULT_INJECTION: forcing a failure. [ 839.510504][T10326] name failslab, interval 1, probability 0, space 0, times 0 [ 839.520692][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15254'. [ 839.537894][T10326] CPU: 0 UID: 0 PID: 10326 Comm: syz.3.15259 Not tainted syzkaller #0 PREEMPT(full) [ 839.537917][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 839.537928][T10326] Call Trace: [ 839.537936][T10326] [ 839.537944][T10326] dump_stack_lvl+0x189/0x250 [ 839.537980][T10326] ? __pfx____ratelimit+0x10/0x10 [ 839.538003][T10326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.538026][T10326] ? __pfx__printk+0x10/0x10 [ 839.538051][T10326] ? __pfx___might_resched+0x10/0x10 [ 839.538074][T10326] should_fail_ex+0x414/0x560 [ 839.538104][T10326] should_failslab+0xa8/0x100 [ 839.538125][T10326] kmem_cache_alloc_node_noprof+0x77/0x710 [ 839.538149][T10326] ? __alloc_skb+0x112/0x2d0 [ 839.538180][T10326] __alloc_skb+0x112/0x2d0 [ 839.538207][T10326] netlink_ack+0x146/0xa50 [ 839.538231][T10326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 839.538271][T10326] netlink_rcv_skb+0x28c/0x470 [ 839.538295][T10326] ? __lock_acquire+0xab9/0xd20 [ 839.538313][T10326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 839.538339][T10326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 839.538376][T10326] ? netlink_deliver_tap+0x2e/0x1b0 [ 839.538401][T10326] netlink_unicast+0x82f/0x9e0 [ 839.538433][T10326] ? __pfx_netlink_unicast+0x10/0x10 [ 839.538458][T10326] ? netlink_sendmsg+0x642/0xb30 [ 839.538473][T10326] ? skb_put+0x11b/0x210 [ 839.538494][T10326] netlink_sendmsg+0x805/0xb30 [ 839.538519][T10326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.538540][T10326] ? aa_sock_msg_perm+0xf1/0x1d0 [ 839.538566][T10326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 839.538583][T10326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.538600][T10326] __sock_sendmsg+0x21c/0x270 [ 839.538627][T10326] ____sys_sendmsg+0x505/0x830 [ 839.538651][T10326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.538678][T10326] ? import_iovec+0x74/0xa0 [ 839.538703][T10326] ___sys_sendmsg+0x21f/0x2a0 [ 839.538723][T10326] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.538774][T10326] ? __fget_files+0x2a/0x420 [ 839.538791][T10326] ? __fget_files+0x3a0/0x420 [ 839.538818][T10326] __x64_sys_sendmsg+0x19b/0x260 [ 839.538840][T10326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.538869][T10326] ? __pfx_ksys_write+0x10/0x10 [ 839.538897][T10326] ? do_syscall_64+0xbe/0xfa0 [ 839.538924][T10326] do_syscall_64+0xfa/0xfa0 [ 839.538945][T10326] ? lockdep_hardirqs_on+0x9c/0x150 [ 839.538976][T10326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.538994][T10326] ? clear_bhb_loop+0x60/0xb0 [ 839.539015][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.539033][T10326] RIP: 0033:0x7f5116f8f6c9 [ 839.539049][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.539065][T10326] RSP: 002b:00007f5117ec2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.539085][T10326] RAX: ffffffffffffffda RBX: 00007f51171e5fa0 RCX: 00007f5116f8f6c9 [ 839.539099][T10326] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 839.539111][T10326] RBP: 00007f5117ec2090 R08: 0000000000000000 R09: 0000000000000000 [ 839.539123][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 839.539135][T10326] R13: 00007f51171e6038 R14: 00007f51171e5fa0 R15: 00007ffde2d71f58 [ 839.539166][T10326] [ 839.555541][T10312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15254'. [ 839.566827][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15254'. [ 839.886235][T10343] netlink: 'syz.1.15264': attribute type 1 has an invalid length. [ 840.005864][T10346] netlink: 'syz.6.15266': attribute type 25 has an invalid length. [ 840.030478][T10340] bond14: (slave gretap3): making interface the new active one [ 840.041606][T10340] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 840.363473][T10366] vlan1: entered promiscuous mode [ 840.385557][T10372] x_tables: duplicate underflow at hook 2 [ 840.561541][T10372] hsr_slave_0 (unregistering): left promiscuous mode [ 840.945222][T10408] ipt_rpfilter: unknown options [ 841.631337][T10446] netlink: 'syz.0.15302': attribute type 25 has an invalid length. [ 842.372159][T10504] __nla_validate_parse: 9 callbacks suppressed [ 842.372176][T10504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15323'. [ 842.401052][T10502] netlink: 'syz.6.15323': attribute type 10 has an invalid length. [ 842.414776][T10502] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15323'. [ 842.426331][T10502] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 842.452904][T10502] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 842.476888][T10502] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 842.947046][T10546] netlink: 'syz.6.15337': attribute type 1 has an invalid length. [ 843.007553][T10546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 843.118855][T10554] bond2: (slave veth11): Enslaving as an active interface with a down link [ 843.130363][T10565] netlink: 808 bytes leftover after parsing attributes in process `syz.3.15338'. [ 843.147448][T10562] netlink: 'syz.0.15342': attribute type 1 has an invalid length. [ 843.172144][T10546] veth13: entered promiscuous mode [ 843.181279][T10546] bond2: (slave veth13): Enslaving as an active interface with a down link [ 843.235070][T10554] vlan2: entered allmulticast mode [ 843.245864][T10554] bond2: entered allmulticast mode [ 843.256034][T10554] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 843.321229][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15343'. [ 843.354865][T10573] gre0: left promiscuous mode [ 843.583486][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15345'. [ 843.906144][T10608] veth29: entered promiscuous mode [ 843.919674][T10610] netlink: 'syz.6.15356': attribute type 1 has an invalid length. [ 843.930777][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15355'. [ 843.958575][T10614] netlink: 'syz.1.15358': attribute type 30 has an invalid length. [ 844.016368][T10610] 8021q: adding VLAN 0 to HW filter on device bond3 [ 844.112326][T10618] bond3: (slave veth15): Enslaving as an active interface with a down link [ 844.141490][T10621] veth17: entered promiscuous mode [ 844.153613][T10621] bond3: (slave veth17): Enslaving as an active interface with a down link [ 844.174699][T10610] vlan2: entered allmulticast mode [ 844.179975][T10610] bond3: entered allmulticast mode [ 844.188198][T10610] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 844.351100][T10636] netlink: 'syz.2.15366': attribute type 1 has an invalid length. [ 844.398439][T10641] netlink: 'syz.0.15367': attribute type 9 has an invalid length. [ 844.474791][T10645] veth19: entered promiscuous mode [ 844.499523][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15367'. [ 844.515741][T10641] x_tables: duplicate underflow at hook 1 [ 844.781845][T10664] tipc: Enabled bearer , priority 0 [ 844.801498][T10664] syzkaller0: entered promiscuous mode [ 844.827776][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15376'. [ 844.832684][T10664] syzkaller0: entered allmulticast mode [ 844.859264][T10664] tipc: Resetting bearer [ 844.875477][T10663] tipc: Resetting bearer [ 844.924828][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15379'. [ 844.937968][T10663] tipc: Disabling bearer [ 844.995181][T10683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15381'. [ 845.307465][ T30] audit: type=1800 audit(1762213958.739:3): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15386" name=FFFFFFFFA002 dev="tmpfs" ino=16266 res=0 errno=0 [ 845.334507][T10708] netlink: 'syz.0.15388': attribute type 1 has an invalid length. [ 845.644919][T10730] netlink: 'syz.2.15395': attribute type 1 has an invalid length. [ 845.684242][ T31] INFO: task syz.5.12902:3558 blocked for more than 143 seconds. [ 845.704040][ T31] Not tainted syzkaller #0 [ 845.717282][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 845.720941][T10730] 8021q: adding VLAN 0 to HW filter on device bond11 [ 845.747551][ T31] task:syz.5.12902 state:D stack:28264 pid:3558 tgid:3557 ppid:23534 task_flags:0x400140 flags:0x00080002 [ 845.770614][ T31] Call Trace: [ 845.774020][ T31] [ 845.777040][ T31] __schedule+0x1798/0x4cc0 [ 845.781586][ T31] ? do_raw_spin_lock+0x121/0x290 [ 845.786737][ T31] ? __lock_acquire+0xab9/0xd20 [ 845.791665][ T31] ? __pfx___schedule+0x10/0x10 [ 845.796792][ T31] ? schedule+0x91/0x360 [ 845.801054][ T31] schedule+0x165/0x360 [ 845.805539][ T31] svc_listen+0x2b7/0x4c0 [ 845.809872][ T31] ? __pfx_svc_listen+0x10/0x10 [ 845.815185][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 845.821367][ T31] ? __fget_files+0x2a/0x420 [ 845.826143][ T31] ? __fget_files+0x3a0/0x420 [ 845.830837][ T31] ? __fget_files+0x2a/0x420 [ 845.835897][ T31] __x64_sys_listen+0x1c7/0x240 [ 845.840792][ T31] do_syscall_64+0xfa/0xfa0 [ 845.846242][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 845.851467][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.857665][ T31] ? clear_bhb_loop+0x60/0xb0 [ 845.862369][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.868330][ T31] RIP: 0033:0x7fa883f8f6c9 [ 845.872801][ T31] RSP: 002b:00007fa884ef3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 845.881243][ T31] RAX: ffffffffffffffda RBX: 00007fa8841e5fa0 RCX: 00007fa883f8f6c9 [ 845.889351][ T31] RDX: 0000000000000000 RSI: 00000000fffff800 RDI: 0000000000000004 [ 845.897381][ T31] RBP: 00007fa884011f91 R08: 0000000000000000 R09: 0000000000000000 [ 845.905559][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.913574][ T31] R13: 00007fa8841e6038 R14: 00007fa8841e5fa0 R15: 00007ffca9607238 [ 845.921545][ T31] [ 845.924748][ T31] [ 845.924748][ T31] Showing all locks held in the system: [ 845.932648][ T31] 1 lock held by khungtaskd/31: [ 845.937503][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 845.948400][ T31] 2 locks held by getty/5583: [ 845.956709][ T31] #0: ffff88814d0c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 845.967036][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 845.977789][ T31] 1 lock held by udevd/5847: [ 845.982486][ T31] #0: ffff888142fd1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 845.992476][ T31] 1 lock held by syz.5.12902/3558: [ 845.997673][ T31] #0: ffff88807992d260 (sk_lock-AF_ATMSVC){+.+.}-{0:0}, at: svc_listen+0x133/0x4c0 [ 846.007369][ T31] 2 locks held by syz.2.15395/10730: [ 846.013172][ T31] #0: ffffffff8ea5c8c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 846.022884][ T31] #1: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 846.032069][ T31] 3 locks held by syz.2.15395/10736: [ 846.037617][ T31] #0: ffffffff8ea5c8c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 846.047335][ T31] #1: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 846.056500][ T31] #2: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 846.067508][ T31] 2 locks held by syz.2.15395/10744: [ 846.072858][ T31] #0: ffffffff8f7ed990 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 846.082437][ T31] #1: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 846.091562][ T31] 1 lock held by syz.1.15397/10739: [ 846.096889][ T31] #0: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x8140 [ 846.106267][ T31] 1 lock held by syz.1.15397/10743: [ 846.111460][ T31] #0: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x8140 [ 846.120919][ T31] 1 lock held by syz.1.15397/10745: [ 846.126260][ T31] #0: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_set_dstaddr+0xd4/0x2d0 [ 846.135891][ T31] 1 lock held by syz.0.15398/10735: [ 846.141084][ T31] #0: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 846.150529][ T31] 1 lock held by syz.0.15398/10737: [ 846.155752][ T31] #0: ffffffff8f2cb1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 846.165455][ T31] 1 lock held by syz.3.15399/10740: [ 846.170640][ T31] #0: ffff8880a1c12488 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 846.180880][ T31] [ 846.190852][T10736] bond11: (slave veth25): Enslaving as an active interface with a down link [ 846.192632][ T31] ============================================= [ 846.192632][ T31] [ 846.209465][T10737] netem: change failed [ 846.225596][ T31] NMI backtrace for cpu 1 [ 846.225611][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 846.225630][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 846.225641][ T31] Call Trace: [ 846.225649][ T31] [ 846.225657][ T31] dump_stack_lvl+0x189/0x250 [ 846.225686][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.225709][ T31] ? __pfx__printk+0x10/0x10 [ 846.225738][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 846.225761][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 846.225782][ T31] ? __pfx__printk+0x10/0x10 [ 846.225804][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 846.225830][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 846.225851][ T31] watchdog+0xf60/0xfa0 [ 846.225872][ T31] ? watchdog+0x1e2/0xfa0 [ 846.225894][ T31] kthread+0x711/0x8a0 [ 846.225918][ T31] ? __pfx_watchdog+0x10/0x10 [ 846.225934][ T31] ? __pfx_kthread+0x10/0x10 [ 846.225958][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 846.225980][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 846.226000][ T31] ? __pfx_kthread+0x10/0x10 [ 846.226030][ T31] ret_from_fork+0x4bc/0x870 [ 846.226051][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 846.226076][ T31] ? __switch_to_asm+0x39/0x70 [ 846.226091][ T31] ? __switch_to_asm+0x33/0x70 [ 846.226105][ T31] ? __pfx_kthread+0x10/0x10 [ 846.226128][ T31] ret_from_fork_asm+0x1a/0x30 [ 846.226160][ T31] [ 846.226167][ T31] Sending NMI from CPU 1 to CPUs 0: [ 846.371022][ C0] NMI backtrace for cpu 0 [ 846.371038][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 846.371056][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 846.371066][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 846.371091][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 846.371106][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 846.371121][ C0] RAX: eb07c40115da5900 RBX: ffffffff81967be7 RCX: eb07c40115da5900 [ 846.371134][ C0] RDX: 0000000000000001 RSI: ffffffff8d70d3d8 RDI: ffffffff8bbf05e0 [ 846.371146][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 846.371158][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cdb70 [ 846.371171][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 846.371182][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 846.371196][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.371208][ C0] CR2: 000000110c38d752 CR3: 00000000312aa000 CR4: 00000000003526f0 [ 846.371223][ C0] Call Trace: [ 846.371230][ C0] [ 846.371237][ C0] default_idle+0x13/0x20 [ 846.371252][ C0] default_idle_call+0x73/0xb0 [ 846.371273][ C0] do_idle+0x1e7/0x510 [ 846.371294][ C0] ? __pfx_do_idle+0x10/0x10 [ 846.371318][ C0] cpu_startup_entry+0x44/0x60 [ 846.371335][ C0] rest_init+0x2de/0x300 [ 846.371352][ C0] start_kernel+0x3ae/0x410 [ 846.371376][ C0] x86_64_start_reservations+0x24/0x30 [ 846.371395][ C0] x86_64_start_kernel+0x143/0x1c0 [ 846.371414][ C0] common_startup_64+0x13e/0x147 [ 846.371442][ C0] [ 846.550012][T10730] veth27: entered promiscuous mode [ 846.558136][T10730] bond11: (slave veth27): Enslaving as an active interface with a down link [ 846.572736][T10744] vlan4: entered allmulticast mode [ 846.577867][T10744] bond11: entered allmulticast mode [ 846.584671][T10744] bond11: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 849.122942][ T6084] page_pool_release_retry() stalled pool shutdown: id 155, 1 inflight 60 sec