last executing test programs: 3.567142944s ago: executing program 3 (id=26074): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xfffffe63, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x4080) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000013, 0x4000010, r5, 0xf8228000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{0x1, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)='%pI4 \x00'}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000017c0)={r5, &(0x7f00000016c0)='GPL\x00', 0xa4402, &(0x7f0000001700)={@_ha_fsid={[0x3, 0x10]}, {0x7, 0x8, 0xf, 0x8}}, 0x2, &(0x7f0000001740)={@_ha_fsid}, &(0x7f0000001780)=0x2}) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)={0x1b, 0x0, 0x0, 0x8345, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_tracing={0x1a, 0x23, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff2bc, 0x0, 0x0, 0x0, 0xb316}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffffffffffe0, 0xffffffffffffffe1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x6, 0xf, 0x7, 0x400, 0xc}]}, &(0x7f0000001200)='syzkaller\x00', 0x3, 0xc0, &(0x7f00000014c0)=""/192, 0x40f00, 0xc, '\x00', r7, 0x18, r9, 0x8, &(0x7f0000001240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001280)={0x5, 0xe, 0xc, 0x5}, 0x10, 0x163b1, r4, 0xa, &(0x7f0000001880)=[r10, r11, r12, r13], &(0x7f00000018c0)=[{0x4, 0x2, 0x2, 0x1}, {0x2, 0x2, 0xe, 0x7}, {0x0, 0x5, 0x8, 0xa}, {0x3, 0x4, 0x4, 0x2}, {0x4, 0x2, 0x8, 0x5}, {0x5, 0x2, 0xa, 0xa}, {0x4, 0x2, 0x9, 0x7}, {0xbeed, 0x4, 0x6, 0x9}, {0x1, 0x4, 0x10001, 0x3}, {0x5, 0x4, 0x0, 0x9}], 0x10, 0x8}, 0x94) sendmmsg(r3, &(0x7f0000001040)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="de5258687ad970e318e88641bd1c851c2b4d564857c3509b8381e66272128f5a472282a610ccbda0c73d9a66ebd70ebd2e4a1604ebf15a6bec4c1496de0fbd93b2ec1c061d7e6ce3940742deb1d57d45fd2acd6530a3ec603e5c2b72c66fa793d30349b2e0e973b021c2505131148de94f045aaae8a48aa0be571c21fd22e6a1b9526600cbd66c091e97905d03fb21fa56b0e16070bcf6b7d0f4ac61ee8c01401a2a76032347560b8e24403100159be63cce850819ceed678f5af2a74bca89f0f26e10af36e3527c4853d438104774c88043bd996977", 0xd6}, {&(0x7f00000002c0)="fb8f610dd2f87132a45560511d59c6bcc73b612b739474316236cad5d0a686a10cec83999c1cf215c75ebb7fed0279ff3422a6d47e6f156a136488b985b3eebcd2911637cc96a66ad2cb177de8db016a89c59d2fe6294a407d13352432c8a82c36decd0503d0a58834ba47d5fee97b9bf4ee1fe0a80523dbf904df299f93480809c4157d8464dc68acf4c3efa8216702aa9a2eac00109b4cc47b5d8b3861b99f910a225696e2cabf01cf7a69609008862983eeb17fcde954f047f8fe0c28ef", 0xbf}], 0x2}}, {{&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x3}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000001a40)="be9ffe81d2f2ca860b305a059bb5b5715cb662484feb902b7082ed6b2f8179e3db419db7ef33c2246d9b269807e94be09f6b1af225ae2e62c1e7127e245ae229749dd82312db42a57abd20f95093ea4a683b0737a7a5af55ee61461f5a31427002c58d11eb8e197543ac0ea23186dc1d1e115034420c7792f61ec911bdb207d077a33e40891ceaf2b3bd8d51acfc48b741db8b8ca3649170916ef905e7564276d0ffcb492bad9e817ee37633617eb99982ac308f4b82", 0xb6}, {&(0x7f0000000540)="9029bff54b874043a5e8e80c0d413c5b58bdce6b8b2a48d828f73af7f5fa65531015d605bb6bc3cc7d549ac061fd6e127fd670f665776af0bcf7b8cd380afafd903e1d91a94ee2df47b2c1d0f599add6c6c41538865f5066df624fd2040758705b35b4b0835a40121a0e7f6a4c0d77cd29d4546bfa57e6edfad92d15f32fe41fc44c07f877a642986f5fc754143b30a3db12888248a1383403c2185412f0de8cb7", 0xa1}, {&(0x7f0000000600)='ja', 0x2}, {&(0x7f0000000740)="96fadef2703845e1cf56ce901595ed4b19614afcd68d3dc3efcc3c9afea23cdd0ce09650de700328c31f710fd06096336b7aa1b4907f67e520c41c81cdef3de3e877103c01ae63a63658c1674344efd033edef002c0e96e8f7dabc1a046d883e7fc2a5834fc7a80b63f5d672346342ad2eae863cf36a869cd5d10490bef3f0045fd507fcf9ca0adc44cf1edbba553f677142b9a00a0292ed79da5020040bb3f8c6bbcd4abc6fd6653c32e181517049e1f24df07cf6aa49228b4073c3bec00906706c72289ae923305c052f19e3ea489844916d1cccdb60211a1c4c69077fd663e95f6292abc2f870f0c4b3eef6af982dcd8ef15b572ff270", 0xf8}], 0x4, &(0x7f0000000680)}}, {{&(0x7f0000000900)=@nfc_llcp={0x27, r6, 0x1, 0x1, 0xbe, 0x6, "214329645bf6b5877a9d0d57d0328fc4b2a05815a7e879533844fe6f577d55e45a0b3c88df715807cc362b451a8f1dbf92ef0faac5908904d746097de21f7c", 0x1000000000000030}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000980)="73c1cf1d1545e6721d20a8dd42ab0680eeb8cb712ea72814ed82cd4c47ffcf7c910239996d8a3903e12c2660528b540ab09df0582188e60821db590aba87b7e488113dfe4d5eff0024327d69c1941532caff5a31b8510207f0f6cb9e0b96e9004167626c8eedf9380662c09addaf679c3304f36b8bde5b36921081c4d4f73ccd1bb7986d8da852368d816e01d0d5f64aef9e848b092df6b6859a3e5eaf653e3a83579912770a58439b6eaab6f8eed89d94ab32f2e6eb0b8f87b8fa2f2e61eaafb818fcc4f14108756c546e5bca130d6c1e2547caf4567c6a9e", 0xd9}, {&(0x7f0000000a80)="8c6d48c188ab9046c2e7c2c82ee1dbb9df7f2ec13ff8828df7d7d1", 0x1b}, {&(0x7f0000000ac0)="219e99c59222de2d1b52960933aa71c7d25f3b75008bb90911ae8e186daa918e30793ed9df713a1ba9e729bc5f49d90a039b3c84e2b7f4a13f3a47d131705ca3946aa5425b88f8a09d1c67b871dde3dcf55e7742c536a62e948cc6f56962f6faa4b2cc034244e0503b4e9c3fedd8d8f5868991fc9b49d648645b3798c93e08253d7aef1d17d9dfeca5fd6e1dccd411e33085cf87", 0x94}, {&(0x7f0000000b80)="e80254dc630d8f686e03bf721ab7e997df1a7a36524f82f7f95dfc1eb86cafa6f58034fc9a3ab448ca888ea140871d2f01c8fece460d25abd42201af05c5d40f1baba786eab1f83a1f42640a6241dbfb10809efae6c6de239d882f7a64a1cc5693cb2943d1cd80ef8b9ab7776e946fa72468a06eb20a1dded9dc968f6f4f952b733a3d96c0188fa026", 0x89}, {&(0x7f0000000c40)="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", 0xfd}, {&(0x7f0000000d40)="791f08ae28382c7e9e3585e30f8219500ab6ebf70513c31aca52cc3fc2266ed506fed1e27f9837af29f54d4d96ebf14fff2809f5c99e58a9fb377c8a2384403143d19e6bc3c73fc8bfcccfc4c8a4b2a38282d5430923dac23f57fa15b31717c03d4480c16907b200810e2de65e417e536b186cce8b4b2aa217e2f84eff992ad261cc206713ecac7ff7320acca5ca652dd3bd12a7a954ae451c3e592d6698a3c896cc2dd22340ae13b9113136004c29652e5190f67a6599a6eb34db655584548254e1bca7c620da71a9fe8e8266b2677eeaef5cc98dfc649b5d6989ad7d67932df1eb451094fad2db1c739445d55e19f101694519a424a2dd", 0xf8}, {&(0x7f0000000e40)="337627e3d42e6d3a2ae3d8e595989eed66f8dab910bd4d2e235acfbe172f9670a426738d7c91e5b1fb78a30eaae1a87569c8f1a1d376d25565ada9db087caae5d8e84d625fe36ed02d5e690c0bb419165667b913af80d9fd12a6005effe1", 0x5e}, {&(0x7f0000000ec0)="1406a1fc6f54401e11cd71c2f055ea05f81cd5540a7433d135316edf1eedc95ff72e12e51d685f7d2f5d75821e0ee3ddf56b4bd9929f7495102778ceddf4384f43d34b5c490cb587f353265cada3c2f8064df6764dc8c8d9948e357467956cd878ced58add5a9da0d94c4b0b42979f0aebe58a98aa1c578bed8da72f9898adfa7050bfeeea640423b0dcaf40ff902b708541bc1b7a73d3372267c60b355cec57dd3ef121aaae7f4e7cb24698b0ae676798dc65ebb1e88e5d9636b50f1238d41afeefd4a5e39dd9d6ab921f98386e1018c539ad8f29c25f3198016fff472d20d76400865b719bf7450cefdc771ee6987e1a7bf4b26b", 0xf5}], 0x8, &(0x7f0000001940)=ANY=[], 0x5b8}}], 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000012c0)=ANY=[@ANYBLOB="28010000170000040000000000000000ac1414aa0000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000000000000001ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000008fc02002a3315227da3e50662a1", @ANYRES32=0x0, @ANYRES32=r15], 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r14, &(0x7f0000001180)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8000) ioctl$sock_SIOCETHTOOL(r17, 0x8946, &(0x7f00000008c0)={'hsr0\x00', &(0x7f0000000880)=@ethtool_cmd={0x19, 0x40, 0xcd4, 0x3, 0xf4, 0x1, 0xff, 0x2, 0x74, 0x0, 0x10000, 0xe7, 0x8001, 0x39, 0x7, 0x9, [0x800, 0x281]}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r16, @ANYRES32=r15, @ANYBLOB="08000700ac14144108000700ac14141708000200e0000001"], 0x3c}}, 0x0) 2.889418341s ago: executing program 2 (id=26083): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 2.827667787s ago: executing program 2 (id=26085): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x300000b, 0x10, r0, 0xe215a000) (async) mmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x300000b, 0x10, r0, 0xe215a000) socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000a00ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 2.683280718s ago: executing program 2 (id=26089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20001004) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r7, 0x101, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048880}, 0x10000) 2.682559636s ago: executing program 3 (id=26090): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000080)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.556046s ago: executing program 3 (id=26091): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1b, 0x0, 0x4000}, 0x20) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) recvfrom$inet6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7ff, 0x0, 0xe1ea}}, 0xe8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="330000005200100005bd7000889011c53df337f008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x800) 2.084461378s ago: executing program 2 (id=26105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bd4e00fbdbdf250400000008000c00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000225bd7000fcdbdf252500000008000300", @ANYRES32=r2, @ANYBLOB="080035000500000008003500030000000a00340008000000000000000800080001ac0202020202000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20001004) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r10, 0x101, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048880}, 0x10000) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040015}, 0xd1) 1.905856787s ago: executing program 1 (id=26109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c80)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10, @ANYBLOB="0300000000000000"], 0x20}}, 0x0) r11 = socket(0x5, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfd7e) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYRESDEC=r11], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xd4, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000180)="000102b765cca0", 0x7}], 0x2) r14 = socket(0x10, 0x3, 0x0) sendmmsg(r14, &(0x7f0000000cc0)=[{{&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}, 0x2}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000480)=[{0x58, 0x2, 0x3, "f42e7b8fda0c190e2133a88fef7709c1fec731e6b83a29a1f5832c2d728fa0a912d2d7974dd8e3fef9e4cbedc409ae9677115506b1d3e55e1b75de176b6ff28728d4"}, {0x50, 0x10b, 0x1a, "315e0c7fc2631464b9e56f49b784780e3ba93cff16557bda025b39319e2eed8a495338f874b17881e5828e914cfdd7379d1049486f5ba156f76fbbe9"}, {0x50, 0x112, 0x7, "cfdb5977d14215520d53d63b825834654c99391a9829c1c6d8d2e775e5236114e9f500b6028192ab7072a08d306a6e858db5044ed8ee0b437d"}, {0x90, 0x119, 0x6, "78087e17cf25746e74fc327344443c6ac2da6c25282300bdcac29b97baae85a4e695eb91d5356b413643fa5be9d42a52debf860df83d8c19964acfbc7aae3fab5f42fb811e79070a389558f337da71ab06d9355c5cf7cae962c066e0671bf8c93f99098315806a3a5c67b5c1162f8c44f56236aed3e376aa06"}, {0xf8, 0x29, 0x4, "dcca901c712f0203f08acf4d35a79edfa7ba0af5e22a4c1fedbb8b7ad9e6d21b24fce65e31bde77c1f8949ce0d232c5e120c176dec5bb70c94ba01ce98e7e6f73c1b92923c5c2445963e4915f9bf12c6e5ea834d714f86fc5445a969a40c0784c3ff6d6aa841de16e4110d914ae87b60a9aaef874ff558e5a3dce55d11e696ec4118d9757d2583c3f7008518a7742474dcb10d339030c72670423e29a7c59366b0abd66005993b5214c94eedc0821ba8ba339de6c590b92d005817cb35fec11401dc47bafdef50bd3861bce1716fbe54e5bf401fefd37b9e978ab104921e05344d2af6d402e8bfae"}, {0xc0, 0x115, 0x15f, "9fdc2cba26b67ec3e83fe30b5316d8a4259667c4ff8cfd32f5d7ac5fe58b8fe3a316ba3d1a2bc4d161d4106f48641dc7bac19af7d0b9845fa5d39724d3935e6f86c4984f04e86544eb3b97ce05944042dafe1207d595aa205bfc52336e7a9e11ffbf39a95024b85eb1448bd42194bf4c88a402d656a1e39b423af40e0d53a5621df25798ca949b2396e6539847ba38d0bf50f93c9a4ba147a4e803876f338898f85e539f5178575abdc632c7b2ed8f"}], 0x340}}, {{&(0x7f00000009c0)=@ethernet={0x51d261c03a438e60, @broadcast}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)="9821bb8467ad2547157f506f532e8c1a5bc1cd50331647e305a7efb940423fd94fc09716e97cac18b158355a7aedd6240a34af93ec05eee2db", 0x39}, {&(0x7f0000000b40)="6d8b2b5c702bb39ec58456680935b00573a0a8114adeffcdf29938168e50095c826e4cdb48e02f6feff552e1723f375d75f158cad9ed95c778fc09f2188bd7cbaa96316c67134e808820a10212c983c3f9af57aca43dcdbad73b85ae7f912d5aa621e96bb17c3e46cf93e490e3d4e2f2dc44d91dc48aebce1302b0c4789d595ffc91ec45df1677ea99a792be61d17bc96e5d5ff1f56b84634a9912e1e198a2be4ff5f960b0b5a79387cbe4b43e69e3882d9b251f1a0270e4bd3df591e86672176d84ac1d4a005e", 0xc7}], 0x2}}], 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r14, 0xf50f, 0x0) r15 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r15, 0x1, 0x5, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet(r15, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x4800) 1.876043225s ago: executing program 0 (id=26110): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.783782242s ago: executing program 0 (id=26111): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf250000000000000000000000000000000000000000000000000000ffffe000000200000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000003000000000000000000000000200000000000000000000000000000000000000100000000000000440005000000000000000300000000000000000000000002320000000a000000fe8000000000000000000000000000aa0000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x8800) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260", 0xf}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast}}}], 0x20}, 0x20000080) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) 1.601341135s ago: executing program 0 (id=26114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0xb01, 0x70bd25, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0xfffffffffffffff0, 0x24040015}, 0x40000) 1.530473929s ago: executing program 3 (id=26115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20001004) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r7, 0x101, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048880}, 0x10000) 1.404143809s ago: executing program 1 (id=26116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000010000000000000000000000850000006d000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0}, 0x48) 1.403977643s ago: executing program 0 (id=26117): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (fail_nth: 61) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 1.373013744s ago: executing program 4 (id=26118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2, r1}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800600180000800000040012000500160002"], 0x54}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x4) (async) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}], 0x4, 0x0) (async) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x5, 0x3, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0xf5, r6, 0x1, 0x4, 0x6, @broadcast}, 0x14) 1.312387585s ago: executing program 1 (id=26119): r0 = socket$caif_stream(0x25, 0x1, 0x2) recvmmsg(r0, &(0x7f0000000980)=[{{&(0x7f0000000400)=@un=@abs, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f00000007c0)=""/85, 0x55}], 0x5, &(0x7f00000008c0)=""/165, 0xa5}, 0xfffffffc}], 0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4c, 0x0, &(0x7f0000cab000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r2, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xff, 0x5, 0x23, @mcast2, @local, 0x1, 0x1, 0xf8, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'tunl0\x00', r5, 0x8, 0x7, 0x5, 0xc1, {{0x1f, 0x4, 0x2, 0x3d, 0x7c, 0x65, 0x0, 0xf, 0x6, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}, {[@rr={0x7, 0x2b, 0x44, [@rand_addr=0x64010102, @empty, @multicast1, @multicast2, @loopback, @private=0xa010102, @loopback, @multicast1, @local, @remote]}, @generic={0x86, 0x11, "ad3f39c081586edc405375ec6c6317"}, @timestamp_prespec={0x44, 0x2c, 0x2b, 0x3, 0x4, [{@broadcast, 0x93}, {@rand_addr=0x64010101, 0x10000}, {@remote, 0x5}, {@local, 0xe39b}, {@multicast1, 0x1}]}]}}}}}) preadv(r3, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, &(0x7f0000000240)) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r7, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) sendfile(r2, r2, 0x0, 0x10001) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100010000000024000000000000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) 1.254685355s ago: executing program 4 (id=26120): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003300)=ANY=[@ANYBLOB="1a0000000200000009000000a0d1000004200000", @ANYRES32, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000200000000000000f7ff00000000400000000000"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000003000000000400000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000200)={0x1c, 0xc, 0x1, 0x7, 0x0, [@mcast2, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback]}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080080000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000d00006a39bc150b6d930400850000007b00000095000000000000002a4f2f6e830c95af6cc08860ce1ddbd77804bc7aecb3b8f1a887b1993dc9b6c5f6bf6fcac64e8524414cc1241d60b823da0d5733b2bdf8a8c30ba87d6371c043006e4765d5b3252bbf95827c3f069a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="dc040000", @ANYRES16=r5, @ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x48890}, 0x4000040) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000340)="fa575f5a850b18dbba9da06549e4ad33c9f6a98706102d2214ecd1ffb045cc1117a9bf7cdfa94ace6b11dfe2dca7de5f94905763850be495a587dac7ff29da9e779840c77fd93f01930efe47d7ff8e06691dc3e90a93047744c8718453cea3bbbef0e6f5857b3a67224dc11e4bc1f9e6c066c9a6c59dfc4e15cd203cc321d43718e8885b862ef58aba7ad91c725e0db34f2fc789041ec34c3ce5c2e3982e684289e2e67f25a79c3c1c10d95f7ea413ed0fc2f08ae24247873167a945143e21b58da3418496", &(0x7f0000000500)=""/240}, 0x20) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717a70700000000030640710a069d317ebbaaa6721d5874f72cf86d73d32f462e5947e4ad380feb56a29357215d78fc44", 0x33}], 0x1, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffe18, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0x7c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe7, 0x17}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004094}, 0x400d0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) unshare(0x400) getsockopt(0xffffffffffffffff, 0x1ff, 0x9, 0x0, 0x0) unshare(0x2c020400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100df6435bfa0e54d64033b2d14f0627b664326833c558410daa8cf3bb04e127c253ed58b4993d31488d12513118b28b7187c00595f0890ce31d23cf5eed218fe79446cce7f", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 915.502398ms ago: executing program 3 (id=26121): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 904.032932ms ago: executing program 1 (id=26122): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@remote, 0x4e23, 0x1, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x5, 0x7c, 0xfffffffe}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a00)={@ifindex, 0xffffffffffffffff, 0xe}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x44000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1412, 0x300, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 858.256825ms ago: executing program 4 (id=26123): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000003000000000400000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@allocspi={0x124, 0x16, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x4e23, 0xf, 0x4e22, 0xe, 0x2, 0x20, 0x0, 0x5e}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@local, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x195d}, {0x9, 0x6, 0xfffff800}, 0x70bd25, 0x3501, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@lifetime_val={0x24, 0x9, {0x9, 0x2, 0x3, 0x8}}, @proto={0x5}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fddbdf255c00000008000300", @ANYRES32=r12, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20040002) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x70}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x29}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r14, 0x40, 0x10, 0x2}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_VLAN={0x6, 0x5, 0x2001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x7d, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r17}, &(0x7f0000000180), &(0x7f0000000280)=r15}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9916915ebab312fdd2cd2922f9071f2f8f0fb3cacfce9c00b67f2b90ab147f444928fd4216bb8ce702b526edadb4280eb95a64a0cc79388945bb3eab761eed5fcac41b1d80b174bc98f03f711ed4c9fd98c0e6e7f4e7a378148ca53feb8cc58f", @ANYRESHEX=r0, @ANYRES64=r16, @ANYRES8=r14, @ANYRES8=r15, @ANYRES64=r1, @ANYRESDEC=r13], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 816.43972ms ago: executing program 3 (id=26124): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) sendto$netrom(r0, &(0x7f0000000240)="f7577df17a7e5ad5978fa189f57367e15a2e046507fb9b7450e371024c64dfab87768539ba3c72138bf8c2c75b1df79f796d72c8465ffb776cc072f300a10305cfdba1ab575347525d1e2b9ea812c8d7b6b2bde1b7049414686c6ba6ec7ff9b88a4884d0192206", 0x67, 0x4008040, &(0x7f00000002c0)={{0x3, @null, 0x47}, [@default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@deltclass={0x48, 0x29, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xe}, {0x8, 0x4}, {0x3, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xb5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_RATE={0x6, 0x5, {0xb, 0x3}}, @tclass_kind_options=@c_prio={0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x4080) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0xfffffffc, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}, [@TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x8, 0xb}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffffd, 0x7, 0x7, 0xbf}}, @NETEM_LOSS_GI={0x18, 0x1, {0x841, 0x1, 0x2, 0x5, 0x33366f26}}]}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xe6, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)="616f9fa04ac500025552d86563ddcdd6badb59ed6764bd47d78da8c3f1cc", &(0x7f0000000680), 0x1006, r13}, 0x38) 768.970435ms ago: executing program 0 (id=26125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x2, 0x40801, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000b0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000a40)={{0xa, 0x4e00, 0x8, @mcast1, 0xd52}, {0xa, 0x4e21, 0x8, @private1, 0xca1}, 0x0, {[0x7fff, 0x6, 0x1ff, 0xda5, 0xccc, 0x6, 0x9, 0xfffffffd]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000010000000600000010000000", @ANYRES32, @ANYBLOB="41fc0e3800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r3, 0x1, 0x37, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, r6, 0x4, 0x3, 0x1}, 0x50) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0xb, 0x7, 0x0, 0x5, 0x8}, &(0x7f0000000240)=0x98) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x0, 0xc3, 0xc, 0x200, 0x10, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x1, 0xffff, 0x5}}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000030000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r12}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4000, r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x13, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000006007bc3c55b10dd1ab0d9960000000000001811000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018210000", @ANYRES32=r9, @ANYBLOB="00000000162d53a280c8f6f2130cb85641203097a79ecf95f04ea242ded115eabbcc29a3", @ANYRES32=r10, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000900), 0x41100, 0x30, '\x00', r11, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x2, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[r12, r13, r14], &(0x7f0000000540)=[{0x4, 0x4, 0x1, 0xc}, {0x3, 0x3, 0xb, 0x8}]}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, r5, 0x5, 0x5}, 0x50) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561"], 0x1508}}, 0x0) 768.800985ms ago: executing program 1 (id=26126): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb58b, 0x0, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffff442}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x2004c080) (fail_nth: 3) 768.238145ms ago: executing program 2 (id=26127): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24004000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r1], 0x24}}, 0x0) 715.810103ms ago: executing program 4 (id=26128): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffde6, &(0x7f0000000100)={&(0x7f0000001000)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@nested={0x0, 0x11b, 0x0, 0x1, [@generic="996fb09acf86159c154946ba15a088a5fc9bb98c18210624cbe69c8497bf17b949568e66ac8e800e60619038deee299e7c29f86534815f7fadcf9d44da4a850e65d5525f2a73386421a4b39a36549ec1db6b4197680d38f1edf45ad4ed2cda10df08ff7a5567", @typed={0x0, 0x56, 0x0, 0x0, @u64=0x180000000000000}, @typed={0x0, 0x24, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x0, 0x14, 0x0, 0x1, [@nested={0x0, 0xfa}, @nested={0x0, 0xb8}, @generic="ca02c2beac57e4d4ee66cd7c60757de9d9261b70425a8bbde2a6f00bfdc9bf614b61d7712e7d5e4503e7e93e5f3e9b0722ea96ff78"]}, @nested={0x0, 0x13f, 0x0, 0x1, [@generic="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", @generic="e5cf1f12233b45c11a85d63dd06a039b4f12924760ae82f022e6cd4d72a080537624e1c263272f6ab3c623a975a56aff123b0eec22198f877fc8dd39b4a4c55ee5aff7a5a353a1ec2eeb02a86cc72b8c0ac1fd06f7959ad491bbaf24efa1d47a180c378ed2a3494f6dee21ff0dc26396b156d21dce05a2f4cfd73d9567538747c4c6acca61d5c25c02a9d5f69ad8d1de1aba258721786687043a273bf9717d3ef003e6b6409d63c8725f85a9b3bfefa195600955091834837ac9f22ac754971cf9a4e675f932129e", @nested={0x0, 0x73}]}, @typed={0x0, 0xad, 0x0, 0x0, @pid}, @typed={0x0, 0x39, 0x0, 0x0, @fd}]}]}, 0x18}}, 0x8804) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa030490780300fffe45000000808259600cd9f714560000ffff002f0000ac14140ae00000"], 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x38}}], 0x1, 0xc080) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0xb4, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c4b74d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38d834c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x653c6aec}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x698f15cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d75df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x495ef80}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x20000040) sendmmsg$inet6(r2, &(0x7f0000003cc0), 0x0, 0x4001c00) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd720063e65fa1d749357dd400000008000300"/34, @ANYRES32=r9, @ANYBLOB="18005a80140001800500010030000000050002009e000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) r11 = socket(0x22, 0x4, 0x7) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)={0x24, r13, 0x1, 0xfffffffc, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r11, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00122b6a0000000800030000000000010000", @ANYRES32=r9, @ANYBLOB="0c00990007000000570000000500d200000000000500d2000b0000000500d200020000000a00060008021100000000000500d200020000000a000600ffffffffffff00000500d200070000000500d2000b000000"], 0x70}}, 0x4000001) sendmsg$rds(r10, &(0x7f0000001800)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/38, 0x26}, {&(0x7f0000001140)=""/108, 0x6c}], 0x4, &(0x7f0000001580)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x89}, 0x0, &(0x7f0000001240)=0x7ffffffe, 0x5, 0x9, 0x740, 0xfffffffffffffff9, 0x32, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0xffffffff}, &(0x7f0000001280)=0x80, &(0x7f00000012c0)=0x7ff, 0x4, 0x8000, 0x40, 0x6, 0x28, 0xfffffffffffffffd}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x5}, &(0x7f0000001300)=0x400, &(0x7f0000001340)=0x7fffffffffffffff, 0x8, 0xfc25, 0x1, 0x0, 0x0, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0xfffffffe}, &(0x7f0000001380)=0x7fff, &(0x7f00000013c0)=0x4, 0x0, 0x0, 0x6d5b50fd, 0x1fc, 0x40, 0x43e}}, @fadd={0x58, 0x114, 0x6, {{0x80000000, 0xffff0000}, &(0x7f0000001400)=0x7, 0x0, 0x1, 0x105, 0x1ff, 0xffffffffffffff97, 0x8, 0x100}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x8001}, &(0x7f0000001480)=0x99d, &(0x7f00000014c0)=0xb5f, 0xce, 0x0, 0x1000, 0x5, 0x2, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x4}, &(0x7f0000001500)=0x6, &(0x7f0000001540)=0x3, 0x8000000000000000, 0xfffffffffffffff7, 0x9, 0x0, 0x2, 0x8000000000000000}}], 0x268, 0x1}, 0x40) 649.586202ms ago: executing program 2 (id=26129): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff787) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x8, 0x0, 0x0, 0xd0, 0x6, 0x2}, 0x9c) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) unshare(0x2c020400) clock_gettime(0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="91101b0000000000956088fe00400000c23340409ea85cdecd04e03ffc4e2c18fe7acb2c2e499a881ee45808e330ce13e976df5deede5ec730df693343b39bb07be67742f415dcf064df6e5ab5f00246875366908ee8c6907427ff64c224492762886b70362f9717f9f3c272929889cd0d4555ccf6eb7fd38d4e8a1d0a9102e600f2875750"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 282.380657ms ago: executing program 4 (id=26130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xc00, &(0x7f0000000000)='d7\x00'/14, 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 211.613451ms ago: executing program 1 (id=26131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20001004) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r7, 0x101, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048880}, 0x10000) 93.270829ms ago: executing program 4 (id=26132): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{0x11, 0x0, 0xffff}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 0 (id=26133): socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x1800}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) kernel console output (not intermixed with test programs): 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.225442][ T8085] RSP: 002b:00007fbed5791028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1672.225468][ T8085] RAX: ffffffffffffffda RBX: 00007fbed4c15fa0 RCX: 00007fbed499bf79 [ 1672.225481][ T8085] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1672.225492][ T8085] RBP: 00007fbed5791090 R08: 0000000000000000 R09: 0000000000000000 [ 1672.225504][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.225515][ T8085] R13: 00007fbed4c16038 R14: 00007fbed4c15fa0 R15: 00007ffe7dbc1f58 [ 1672.225546][ T8085] [ 1672.485967][ T8089] netlink: 'syz.1.25320': attribute type 11 has an invalid length. [ 1672.677024][ T8101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25326'. [ 1672.714094][ T8104] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1672.945909][ T8109] lo speed is unknown, defaulting to 1000 [ 1672.957117][ T8109] wg1 speed is unknown, defaulting to 1000 [ 1673.001387][ T8118] lo speed is unknown, defaulting to 1000 [ 1673.001918][ T8109] lo speed is unknown, defaulting to 1000 [ 1673.012087][ T8114] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1673.040948][ T8118] wg1 speed is unknown, defaulting to 1000 [ 1673.071388][ T8122] FAULT_INJECTION: forcing a failure. [ 1673.071388][ T8122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.102876][ T8122] CPU: 1 UID: 0 PID: 8122 Comm: syz.1.25331 Not tainted syzkaller #0 PREEMPT(full) [ 1673.102902][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1673.102914][ T8122] Call Trace: [ 1673.102922][ T8122] [ 1673.102930][ T8122] dump_stack_lvl+0xe8/0x150 [ 1673.102958][ T8122] should_fail_ex+0x412/0x560 [ 1673.102987][ T8122] _copy_to_user+0x31/0xb0 [ 1673.103009][ T8122] bpf_test_finish+0x53c/0x6b0 [ 1673.103034][ T8122] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1673.103054][ T8122] ? __pfx_bpf_test_finish+0x10/0x10 [ 1673.103078][ T8122] ? _copy_from_user+0x94/0xb0 [ 1673.103096][ T8122] ? bpf_test_init+0x113/0x150 [ 1673.103115][ T8122] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1673.103151][ T8122] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1673.103174][ T8122] ? __fget_files+0x2a/0x420 [ 1673.103198][ T8122] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1673.103218][ T8122] bpf_prog_test_run+0x2c7/0x340 [ 1673.103243][ T8122] __sys_bpf+0x643/0x950 [ 1673.103266][ T8122] ? __pfx___sys_bpf+0x10/0x10 [ 1673.103309][ T8122] ? ksys_write+0x242/0x270 [ 1673.103332][ T8122] ? __pfx_ksys_write+0x10/0x10 [ 1673.103359][ T8122] __x64_sys_bpf+0x7c/0x90 [ 1673.103379][ T8122] do_syscall_64+0x14d/0xf80 [ 1673.103400][ T8122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.103417][ T8122] ? trace_irq_disable+0x37/0x100 [ 1673.103436][ T8122] ? clear_bhb_loop+0x40/0x90 [ 1673.103457][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.103475][ T8122] RIP: 0033:0x7f172fb9bf79 [ 1673.103491][ T8122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.103505][ T8122] RSP: 002b:00007f17309e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1673.103525][ T8122] RAX: ffffffffffffffda RBX: 00007f172fe15fa0 RCX: 00007f172fb9bf79 [ 1673.103538][ T8122] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1673.103550][ T8122] RBP: 00007f17309e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.103562][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1673.103572][ T8122] R13: 00007f172fe16038 R14: 00007f172fe15fa0 R15: 00007ffd3f997468 [ 1673.103603][ T8122] [ 1673.121850][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25330'. [ 1673.260192][ T8129] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1673.475197][ T8134] lo speed is unknown, defaulting to 1000 [ 1673.497906][ T8134] wg1 speed is unknown, defaulting to 1000 [ 1673.504286][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25335'. [ 1673.515209][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25335'. [ 1673.567279][ T8136] netlink: 'syz.2.25335': attribute type 12 has an invalid length. [ 1673.568644][ T8140] netlink: 48 bytes leftover after parsing attributes in process `syz.1.25337'. [ 1673.605781][ T8118] lo speed is unknown, defaulting to 1000 [ 1673.696797][ T8144] FAULT_INJECTION: forcing a failure. [ 1673.696797][ T8144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.711719][ T8142] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1673.720354][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.3.25339 Not tainted syzkaller #0 PREEMPT(full) [ 1673.720379][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1673.720391][ T8144] Call Trace: [ 1673.720399][ T8144] [ 1673.720408][ T8144] dump_stack_lvl+0xe8/0x150 [ 1673.720435][ T8144] should_fail_ex+0x412/0x560 [ 1673.720464][ T8144] _copy_from_user+0x2d/0xb0 [ 1673.720484][ T8144] ___sys_recvmsg+0x175/0x590 [ 1673.720511][ T8144] ? __pfx____sys_recvmsg+0x10/0x10 [ 1673.720536][ T8144] ? __fget_files+0x2a/0x420 [ 1673.720584][ T8144] do_recvmmsg+0x334/0x800 [ 1673.720614][ T8144] ? __pfx_do_recvmmsg+0x10/0x10 [ 1673.720647][ T8144] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1673.720687][ T8144] __x64_sys_recvmmsg+0x198/0x250 [ 1673.720711][ T8144] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1673.720744][ T8144] do_syscall_64+0x14d/0xf80 [ 1673.720764][ T8144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.720780][ T8144] ? trace_irq_disable+0x37/0x100 [ 1673.720798][ T8144] ? clear_bhb_loop+0x40/0x90 [ 1673.720819][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.720836][ T8144] RIP: 0033:0x7fbed499bf79 [ 1673.720853][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.720868][ T8144] RSP: 002b:00007fbed5791028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1673.720887][ T8144] RAX: ffffffffffffffda RBX: 00007fbed4c15fa0 RCX: 00007fbed499bf79 [ 1673.720899][ T8144] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000004 [ 1673.720912][ T8144] RBP: 00007fbed5791090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.720923][ T8144] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1673.720934][ T8144] R13: 00007fbed4c16038 R14: 00007fbed4c15fa0 R15: 00007ffe7dbc1f58 [ 1673.720965][ T8144] [ 1673.879276][ T8134] lo speed is unknown, defaulting to 1000 [ 1673.927429][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1673.935499][ C0] lec:lec_tx_timeout: lec0 [ 1674.011705][ T8149] netlink: 'syz.3.25341': attribute type 1 has an invalid length. [ 1674.026604][ T8149] netlink: 174 bytes leftover after parsing attributes in process `syz.3.25341'. [ 1674.904077][ T8161] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1675.283330][ T8169] netlink: 48 bytes leftover after parsing attributes in process `syz.4.25348'. [ 1675.642874][ T8188] netlink: 'syz.4.25357': attribute type 3 has an invalid length. [ 1675.748202][ T8192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25359'. [ 1675.769602][ T8196] syzkaller0: entered promiscuous mode [ 1675.775105][ T8196] syzkaller0: entered allmulticast mode [ 1675.790687][ T8195] FAULT_INJECTION: forcing a failure. [ 1675.790687][ T8195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.843533][ T8195] CPU: 0 UID: 0 PID: 8195 Comm: syz.4.25361 Not tainted syzkaller #0 PREEMPT(full) [ 1675.843559][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1675.843570][ T8195] Call Trace: [ 1675.843578][ T8195] [ 1675.843586][ T8195] dump_stack_lvl+0xe8/0x150 [ 1675.843614][ T8195] should_fail_ex+0x412/0x560 [ 1675.843642][ T8195] _copy_to_user+0x31/0xb0 [ 1675.843664][ T8195] simple_read_from_buffer+0xe1/0x170 [ 1675.843694][ T8195] proc_fail_nth_read+0x1bb/0x230 [ 1675.843720][ T8195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1675.843746][ T8195] ? rw_verify_area+0x2a6/0x4d0 [ 1675.843765][ T8195] ? __fget_files+0x2a/0x420 [ 1675.843780][ T8195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1675.843803][ T8195] vfs_read+0x20c/0xa70 [ 1675.843821][ T8195] ? fdget_pos+0x246/0x320 [ 1675.843842][ T8195] ? __pfx___mutex_lock+0x10/0x10 [ 1675.843866][ T8195] ? __pfx_vfs_read+0x10/0x10 [ 1675.843888][ T8195] ? __fget_files+0x2a/0x420 [ 1675.843909][ T8195] ? __fget_files+0x3a0/0x420 [ 1675.843926][ T8195] ? __fget_files+0x2a/0x420 [ 1675.843951][ T8195] ksys_read+0x150/0x270 [ 1675.843974][ T8195] ? __pfx_ksys_read+0x10/0x10 [ 1675.844006][ T8195] do_syscall_64+0x14d/0xf80 [ 1675.844027][ T8195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.844044][ T8195] ? trace_irq_disable+0x37/0x100 [ 1675.844063][ T8195] ? clear_bhb_loop+0x40/0x90 [ 1675.844084][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.844102][ T8195] RIP: 0033:0x7f412275c84e [ 1675.844124][ T8195] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1675.844139][ T8195] RSP: 002b:00007f412367afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1675.844157][ T8195] RAX: ffffffffffffffda RBX: 00007f412367b6c0 RCX: 00007f412275c84e [ 1675.844168][ T8195] RDX: 000000000000000f RSI: 00007f412367b0a0 RDI: 0000000000000004 [ 1675.844179][ T8195] RBP: 00007f412367b090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.844189][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1675.844199][ T8195] R13: 00007f4122a16038 R14: 00007f4122a15fa0 R15: 00007fff72cb5b28 [ 1675.844230][ T8195] [ 1676.454275][ T8223] netlink: 'syz.2.25369': attribute type 13 has an invalid length. [ 1676.475985][ T8223] netlink: 'syz.2.25369': attribute type 17 has an invalid length. [ 1676.582719][ T8223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1676.650125][ T8235] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1676.683955][ T30] audit: type=1800 audit(1771305296.914:133): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.25365" name="memory.events" dev="tmpfs" ino=25443 res=0 errno=0 [ 1676.723973][ T8235] netlink: 92 bytes leftover after parsing attributes in process `syz.3.25371'. [ 1676.920199][ T8249] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1677.351130][ T8255] syzkaller0: entered promiscuous mode [ 1677.356789][ T8255] syzkaller0: entered allmulticast mode [ 1677.631896][ T30] audit: type=1800 audit(1771305297.874:134): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.25378" name="memory.events" dev="tmpfs" ino=25449 res=0 errno=0 [ 1677.703473][ T8272] __nla_validate_parse: 3 callbacks suppressed [ 1677.703493][ T8272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25384'. [ 1677.750501][ T8269] lo speed is unknown, defaulting to 1000 [ 1677.817299][ T8269] wg1 speed is unknown, defaulting to 1000 [ 1677.844191][ T8269] lo speed is unknown, defaulting to 1000 [ 1677.852467][ T8279] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1678.221900][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25391'. [ 1678.553464][ T8308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25396'. [ 1678.624814][ T8310] netlink: 36 bytes leftover after parsing attributes in process `syz.3.25395'. [ 1678.753944][ T8317] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1678.964194][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25400'. [ 1679.007492][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25400'. [ 1679.060842][ T30] audit: type=1800 audit(1771305299.304:135): pid=8320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.25397" name="memory.events" dev="tmpfs" ino=26565 res=0 errno=0 [ 1679.130804][ T8323] syzkaller0: entered promiscuous mode [ 1679.148042][ T8323] syzkaller0: entered allmulticast mode [ 1679.190156][ T8337] netlink: 72 bytes leftover after parsing attributes in process `syz.3.25402'. [ 1679.388050][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25404'. [ 1679.468651][ T8342] netlink: 'syz.3.25405': attribute type 20 has an invalid length. [ 1679.655202][ T8356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25408'. [ 1679.758194][ T8354] lo speed is unknown, defaulting to 1000 [ 1679.785483][ T8354] wg1 speed is unknown, defaulting to 1000 [ 1679.824085][ T8354] lo speed is unknown, defaulting to 1000 [ 1679.824828][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25411'. [ 1679.962810][ T8368] tipc: Resetting bearer [ 1679.985526][ T8369] tunl0: Caught tx_queue_len zero misconfig [ 1680.161424][ T8380] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1680.383098][ T30] audit: type=1800 audit(1771305300.624:136): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25413" name="memory.events" dev="tmpfs" ino=25482 res=0 errno=0 [ 1680.669896][ T8398] FAULT_INJECTION: forcing a failure. [ 1680.669896][ T8398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.684585][ T8398] CPU: 0 UID: 0 PID: 8398 Comm: syz.0.25422 Not tainted syzkaller #0 PREEMPT(full) [ 1680.684609][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1680.684621][ T8398] Call Trace: [ 1680.684628][ T8398] [ 1680.684636][ T8398] dump_stack_lvl+0xe8/0x150 [ 1680.684662][ T8398] should_fail_ex+0x412/0x560 [ 1680.684691][ T8398] _copy_from_user+0x2d/0xb0 [ 1680.684710][ T8398] ___sys_recvmsg+0x175/0x590 [ 1680.684738][ T8398] ? __pfx____sys_recvmsg+0x10/0x10 [ 1680.684765][ T8398] ? __fget_files+0x2a/0x420 [ 1680.684814][ T8398] do_recvmmsg+0x334/0x800 [ 1680.684843][ T8398] ? __pfx_do_recvmmsg+0x10/0x10 [ 1680.684877][ T8398] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1680.684917][ T8398] __x64_sys_recvmmsg+0x198/0x250 [ 1680.684942][ T8398] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1680.684976][ T8398] do_syscall_64+0x14d/0xf80 [ 1680.684996][ T8398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.685013][ T8398] ? trace_irq_disable+0x37/0x100 [ 1680.685032][ T8398] ? clear_bhb_loop+0x40/0x90 [ 1680.685052][ T8398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.685069][ T8398] RIP: 0033:0x7f0add99bf79 [ 1680.685085][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.685099][ T8398] RSP: 002b:00007f0ade8f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1680.685118][ T8398] RAX: ffffffffffffffda RBX: 00007f0addc15fa0 RCX: 00007f0add99bf79 [ 1680.685132][ T8398] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000004 [ 1680.685144][ T8398] RBP: 00007f0ade8f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.685156][ T8398] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1680.685167][ T8398] R13: 00007f0addc16038 R14: 00007f0addc15fa0 R15: 00007fff6832b7a8 [ 1680.685198][ T8398] [ 1681.267225][ T30] audit: type=1800 audit(1771305301.504:137): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.25420" name="memory.events" dev="tmpfs" ino=25914 res=0 errno=0 [ 1681.728575][ T30] audit: type=1800 audit(1771305301.974:138): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25429" name="memory.events" dev="tmpfs" ino=25488 res=0 errno=0 [ 1681.763126][ T8436] FAULT_INJECTION: forcing a failure. [ 1681.763126][ T8436] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.776269][ T8436] CPU: 0 UID: 0 PID: 8436 Comm: syz.0.25435 Not tainted syzkaller #0 PREEMPT(full) [ 1681.776293][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1681.776305][ T8436] Call Trace: [ 1681.776312][ T8436] [ 1681.776320][ T8436] dump_stack_lvl+0xe8/0x150 [ 1681.776347][ T8436] should_fail_ex+0x412/0x560 [ 1681.776374][ T8436] should_failslab+0xa8/0x100 [ 1681.776399][ T8436] __kvmalloc_node_noprof+0x178/0x8a0 [ 1681.776421][ T8436] ? page_pool_create_percpu+0x2dd/0xb80 [ 1681.776444][ T8436] ? page_pool_create_percpu+0xaf/0xb80 [ 1681.776479][ T8436] page_pool_create_percpu+0x2dd/0xb80 [ 1681.776501][ T8436] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1681.776528][ T8436] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 1681.776557][ T8436] ? wake_up_q+0x99/0xd0 [ 1681.776583][ T8436] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1681.776607][ T8436] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1681.776633][ T8436] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1681.776673][ T8436] ? 0xffffffffa020164c [ 1681.776688][ T8436] ? 0xffffffffa02016d4 [ 1681.776702][ T8436] ? 0xffffffffa020171c [ 1681.776740][ T8436] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1681.776765][ T8436] ? rep_movs_alternative+0x4a/0x90 [ 1681.776783][ T8436] ? _copy_from_user+0x94/0xb0 [ 1681.776801][ T8436] ? bpf_test_init+0x113/0x150 [ 1681.776817][ T8436] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1681.776839][ T8436] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1681.776873][ T8436] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1681.776897][ T8436] ? __fget_files+0x2a/0x420 [ 1681.776920][ T8436] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1681.776940][ T8436] bpf_prog_test_run+0x2c7/0x340 [ 1681.776965][ T8436] __sys_bpf+0x643/0x950 [ 1681.776987][ T8436] ? __pfx___sys_bpf+0x10/0x10 [ 1681.777024][ T8436] ? ksys_write+0x242/0x270 [ 1681.777050][ T8436] ? __pfx_ksys_write+0x10/0x10 [ 1681.777076][ T8436] __x64_sys_bpf+0x7c/0x90 [ 1681.777095][ T8436] do_syscall_64+0x14d/0xf80 [ 1681.777115][ T8436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.777130][ T8436] ? trace_irq_disable+0x37/0x100 [ 1681.777147][ T8436] ? clear_bhb_loop+0x40/0x90 [ 1681.777166][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.777182][ T8436] RIP: 0033:0x7f0add99bf79 [ 1681.777196][ T8436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.777210][ T8436] RSP: 002b:00007f0ade8f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1681.777228][ T8436] RAX: ffffffffffffffda RBX: 00007f0addc15fa0 RCX: 00007f0add99bf79 [ 1681.777241][ T8436] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 1681.777251][ T8436] RBP: 00007f0ade8f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.777261][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.777271][ T8436] R13: 00007f0addc16038 R14: 00007f0addc15fa0 R15: 00007fff6832b7a8 [ 1681.777298][ T8436] [ 1682.124690][ T8436] page_pool_create_percpu() gave up with errno -12 [ 1682.143729][ T8439] syzkaller0: entered promiscuous mode [ 1682.150084][ T8439] syzkaller0: entered allmulticast mode [ 1682.162877][ T8439] netlink: 'syz.4.25436': attribute type 1 has an invalid length. [ 1682.170961][ T8439] netlink: 'syz.4.25436': attribute type 2 has an invalid length. [ 1682.178977][ T8439] netlink: 'syz.4.25436': attribute type 1 has an invalid length. [ 1682.197845][ T8439] netlink: 'syz.4.25436': attribute type 3 has an invalid length. [ 1682.485279][ T8450] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1682.496047][ T30] audit: type=1800 audit(1771305302.724:139): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.25439" name="memory.events" dev="tmpfs" ino=25920 res=0 errno=0 [ 1682.547112][ T8450] bond14 (unregistering): Released all slaves [ 1682.607346][ T8453] tipc: Enabling of bearer rejected, failed to enable media [ 1683.085467][ T8474] lo speed is unknown, defaulting to 1000 [ 1683.093717][ T8474] wg1 speed is unknown, defaulting to 1000 [ 1683.104631][ T8474] lo speed is unknown, defaulting to 1000 [ 1683.108581][ T8479] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1683.212566][ T8482] __nla_validate_parse: 13 callbacks suppressed [ 1683.212585][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25448'. [ 1683.243841][ T8482] netlink: 64 bytes leftover after parsing attributes in process `syz.2.25448'. [ 1683.271754][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25452'. [ 1683.281756][ T8482] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1683.288103][ T8487] Cannot find del_set index 4 as target [ 1683.547039][ T8496] lo speed is unknown, defaulting to 1000 [ 1683.556172][ T8496] wg1 speed is unknown, defaulting to 1000 [ 1683.569740][ T8496] lo speed is unknown, defaulting to 1000 [ 1683.593781][ T8501] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1683.653972][ T8503] tipc: Enabled bearer , priority 0 [ 1683.663164][ T8503] syzkaller0: entered promiscuous mode [ 1683.670143][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25455'. [ 1683.680588][ T8503] syzkaller0: entered allmulticast mode [ 1683.691628][ T8504] netlink: 64 bytes leftover after parsing attributes in process `syz.3.25455'. [ 1683.735388][ T8502] tipc: Resetting bearer [ 1683.768133][ T8506] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1683.808431][ T8502] tipc: Disabling bearer [ 1684.020302][ T8512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25460'. [ 1684.608452][ T8524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25464'. [ 1684.867800][ T30] audit: type=1800 audit(1771305305.104:140): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.25462" name="memory.events" dev="tmpfs" ino=25573 res=0 errno=0 [ 1685.223554][ T8551] FAULT_INJECTION: forcing a failure. [ 1685.223554][ T8551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1685.238083][ T8551] CPU: 0 UID: 0 PID: 8551 Comm: syz.2.25471 Not tainted syzkaller #0 PREEMPT(full) [ 1685.238107][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1685.238119][ T8551] Call Trace: [ 1685.238132][ T8551] [ 1685.238140][ T8551] dump_stack_lvl+0xe8/0x150 [ 1685.238169][ T8551] should_fail_ex+0x412/0x560 [ 1685.238198][ T8551] _copy_from_user+0x2d/0xb0 [ 1685.238218][ T8551] ___sys_recvmsg+0x175/0x590 [ 1685.238247][ T8551] ? __pfx____sys_recvmsg+0x10/0x10 [ 1685.238272][ T8551] ? __fget_files+0x2a/0x420 [ 1685.238321][ T8551] do_recvmmsg+0x334/0x800 [ 1685.238351][ T8551] ? __pfx_do_recvmmsg+0x10/0x10 [ 1685.238382][ T8551] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1685.238422][ T8551] __x64_sys_recvmmsg+0x198/0x250 [ 1685.238446][ T8551] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1685.238480][ T8551] do_syscall_64+0x14d/0xf80 [ 1685.238501][ T8551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.238517][ T8551] ? trace_irq_disable+0x37/0x100 [ 1685.238537][ T8551] ? clear_bhb_loop+0x40/0x90 [ 1685.238558][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.238575][ T8551] RIP: 0033:0x7feedb59bf79 [ 1685.238592][ T8551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.238606][ T8551] RSP: 002b:00007feedc543028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1685.238626][ T8551] RAX: ffffffffffffffda RBX: 00007feedb815fa0 RCX: 00007feedb59bf79 [ 1685.238639][ T8551] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 1685.238652][ T8551] RBP: 00007feedc543090 R08: 0000000000000000 R09: 0000000000000000 [ 1685.238663][ T8551] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1685.238674][ T8551] R13: 00007feedb816038 R14: 00007feedb815fa0 R15: 00007ffe5493da98 [ 1685.238705][ T8551] [ 1685.242837][ T8547] lo speed is unknown, defaulting to 1000 [ 1685.451054][ T8547] wg1 speed is unknown, defaulting to 1000 [ 1685.461759][ T8547] lo speed is unknown, defaulting to 1000 [ 1685.810597][ T8566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25476'. [ 1685.891794][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25478'. [ 1685.915783][ T8572] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25478'. [ 1686.226348][ T8586] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 1686.292311][ T30] audit: type=1800 audit(1771305306.534:141): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.25474" name="memory.events" dev="tmpfs" ino=25579 res=0 errno=0 [ 1686.789519][ T8596] bond0: entered promiscuous mode [ 1686.806248][ T8596] bond0: left promiscuous mode [ 1686.989730][ T8608] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1687.005654][ T8608] batman_adv: batadv0: Adding interface: gretap3 [ 1687.044030][ T8608] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1687.079631][ T8608] batman_adv: batadv0: Interface activated: gretap3 [ 1687.355124][ T8634] lo speed is unknown, defaulting to 1000 [ 1687.365151][ T8634] wg1 speed is unknown, defaulting to 1000 [ 1687.400271][ T8634] lo speed is unknown, defaulting to 1000 [ 1687.481716][ T8637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1687.800339][ T8639] netlink: 'syz.1.25499': attribute type 2 has an invalid length. [ 1688.337777][ T8665] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1688.400252][ T8673] __nla_validate_parse: 3 callbacks suppressed [ 1688.400270][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25508'. [ 1688.517547][ T8665] netlink: 64 bytes leftover after parsing attributes in process `syz.1.25508'. [ 1688.686188][ T8662] lo speed is unknown, defaulting to 1000 [ 1688.722359][ T8662] wg1 speed is unknown, defaulting to 1000 [ 1688.836343][ T8662] lo speed is unknown, defaulting to 1000 [ 1688.866314][ T8690] FAULT_INJECTION: forcing a failure. [ 1688.866314][ T8690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1688.917319][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.3.25512 Not tainted syzkaller #0 PREEMPT(full) [ 1688.917352][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1688.917363][ T8690] Call Trace: [ 1688.917371][ T8690] [ 1688.917380][ T8690] dump_stack_lvl+0xe8/0x150 [ 1688.917408][ T8690] should_fail_ex+0x412/0x560 [ 1688.917436][ T8690] _copy_from_iter+0x1d3/0x1670 [ 1688.917470][ T8690] ? rcu_is_watching+0x15/0xb0 [ 1688.917492][ T8690] ? __pfx__copy_from_iter+0x10/0x10 [ 1688.917522][ T8690] ? netlink_sendmsg+0x650/0xb40 [ 1688.917538][ T8690] ? skb_put+0x11b/0x210 [ 1688.917561][ T8690] netlink_sendmsg+0x6c0/0xb40 [ 1688.917587][ T8690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1688.917609][ T8690] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1688.917632][ T8690] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1688.917656][ T8690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1688.917673][ T8690] ____sys_sendmsg+0xa68/0xad0 [ 1688.917694][ T8690] ? __might_fault+0xaf/0x130 [ 1688.917721][ T8690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1688.917751][ T8690] ? import_iovec+0x73/0xa0 [ 1688.917772][ T8690] ___sys_sendmsg+0x2a5/0x360 [ 1688.917791][ T8690] ? __lock_acquire+0x6b5/0x2cf0 [ 1688.917814][ T8690] ? __pfx____sys_sendmsg+0x10/0x10 [ 1688.917870][ T8690] ? __fget_files+0x2a/0x420 [ 1688.917887][ T8690] ? __fget_files+0x3a0/0x420 [ 1688.917913][ T8690] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1688.917934][ T8690] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1688.917963][ T8690] ? __pfx_ksys_write+0x10/0x10 [ 1688.917995][ T8690] do_syscall_64+0x14d/0xf80 [ 1688.918016][ T8690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.918032][ T8690] ? trace_irq_disable+0x37/0x100 [ 1688.918058][ T8690] ? clear_bhb_loop+0x40/0x90 [ 1688.918079][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.918096][ T8690] RIP: 0033:0x7fbed499bf79 [ 1688.918113][ T8690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.918127][ T8690] RSP: 002b:00007fbed5791028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.918147][ T8690] RAX: ffffffffffffffda RBX: 00007fbed4c15fa0 RCX: 00007fbed499bf79 [ 1688.918160][ T8690] RDX: 0000000004008014 RSI: 0000200000000240 RDI: 0000000000000003 [ 1688.918172][ T8690] RBP: 00007fbed5791090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.918183][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.918193][ T8690] R13: 00007fbed4c16038 R14: 00007fbed4c15fa0 R15: 00007ffe7dbc1f58 [ 1688.918224][ T8690] [ 1689.619174][ T8710] FAULT_INJECTION: forcing a failure. [ 1689.619174][ T8710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1689.667326][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.0.25518 Not tainted syzkaller #0 PREEMPT(full) [ 1689.667351][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1689.667362][ T8710] Call Trace: [ 1689.667370][ T8710] [ 1689.667378][ T8710] dump_stack_lvl+0xe8/0x150 [ 1689.667406][ T8710] should_fail_ex+0x412/0x560 [ 1689.667435][ T8710] _copy_from_user+0x2d/0xb0 [ 1689.667455][ T8710] ___sys_recvmsg+0x175/0x590 [ 1689.667485][ T8710] ? __pfx____sys_recvmsg+0x10/0x10 [ 1689.667511][ T8710] ? __fget_files+0x2a/0x420 [ 1689.667560][ T8710] do_recvmmsg+0x334/0x800 [ 1689.667591][ T8710] ? __pfx_do_recvmmsg+0x10/0x10 [ 1689.667625][ T8710] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1689.667665][ T8710] __x64_sys_recvmmsg+0x198/0x250 [ 1689.667690][ T8710] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1689.667724][ T8710] do_syscall_64+0x14d/0xf80 [ 1689.667752][ T8710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.667769][ T8710] ? trace_irq_disable+0x37/0x100 [ 1689.667788][ T8710] ? clear_bhb_loop+0x40/0x90 [ 1689.667809][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.667826][ T8710] RIP: 0033:0x7f0add99bf79 [ 1689.667842][ T8710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.667857][ T8710] RSP: 002b:00007f0ade8f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1689.667876][ T8710] RAX: ffffffffffffffda RBX: 00007f0addc15fa0 RCX: 00007f0add99bf79 [ 1689.667889][ T8710] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000004 [ 1689.667901][ T8710] RBP: 00007f0ade8f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.667913][ T8710] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1689.667924][ T8710] R13: 00007f0addc16038 R14: 00007f0addc15fa0 R15: 00007fff6832b7a8 [ 1689.667955][ T8710] [ 1689.910259][ T8712] FAULT_INJECTION: forcing a failure. [ 1689.910259][ T8712] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.946028][ T8717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25520'. [ 1689.955935][ T8717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25520'. [ 1689.998945][ T8712] CPU: 0 UID: 0 PID: 8712 Comm: syz.3.25519 Not tainted syzkaller #0 PREEMPT(full) [ 1689.998971][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1689.998983][ T8712] Call Trace: [ 1689.998991][ T8712] [ 1689.998999][ T8712] dump_stack_lvl+0xe8/0x150 [ 1689.999027][ T8712] should_fail_ex+0x412/0x560 [ 1689.999057][ T8712] should_failslab+0xa8/0x100 [ 1689.999083][ T8712] __kvmalloc_node_noprof+0x178/0x8a0 [ 1689.999107][ T8712] ? alloc_netdev_mqs+0xc89/0x11b0 [ 1689.999131][ T8712] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 1689.999159][ T8712] alloc_netdev_mqs+0xc89/0x11b0 [ 1689.999189][ T8712] rtnl_create_link+0x31f/0xd70 [ 1689.999218][ T8712] rtnl_newlink_create+0x277/0xb70 [ 1689.999243][ T8712] ? __mutex_lock+0x5ac/0x1300 [ 1689.999269][ T8712] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1689.999293][ T8712] ? __pfx___mutex_lock+0x10/0x10 [ 1689.999327][ T8712] ? ns_capable+0x89/0xe0 [ 1689.999350][ T8712] rtnl_newlink+0x1666/0x1be0 [ 1689.999386][ T8712] ? __pfx_rtnl_newlink+0x10/0x10 [ 1689.999412][ T8712] ? __lock_acquire+0x6b5/0x2cf0 [ 1689.999439][ T8712] ? __lock_acquire+0x6b5/0x2cf0 [ 1689.999461][ T8712] ? __lock_acquire+0x6b5/0x2cf0 [ 1689.999489][ T8712] ? unwind_next_frame+0xa5/0x23c0 [ 1689.999519][ T8712] ? unwind_next_frame+0xa5/0x23c0 [ 1689.999544][ T8712] ? is_bpf_text_address+0x26/0x2b0 [ 1689.999577][ T8712] ? __lock_acquire+0x6b5/0x2cf0 [ 1689.999602][ T8712] ? is_bpf_text_address+0x292/0x2b0 [ 1689.999622][ T8712] ? is_bpf_text_address+0x26/0x2b0 [ 1689.999647][ T8712] ? kernel_text_address+0xa5/0xe0 [ 1689.999680][ T8712] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1689.999716][ T8712] ? __pfx_rtnl_newlink+0x10/0x10 [ 1689.999739][ T8712] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1689.999762][ T8712] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1689.999780][ T8712] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1689.999798][ T8712] ? __lock_acquire+0x6b5/0x2cf0 [ 1689.999832][ T8712] netlink_rcv_skb+0x232/0x4b0 [ 1689.999852][ T8712] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1689.999873][ T8712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1689.999904][ T8712] ? netlink_deliver_tap+0x2e/0x1b0 [ 1689.999931][ T8712] netlink_unicast+0x80f/0x9b0 [ 1689.999968][ T8712] ? __pfx_netlink_unicast+0x10/0x10 [ 1689.999993][ T8712] ? netlink_sendmsg+0x650/0xb40 [ 1690.000009][ T8712] ? skb_put+0x11b/0x210 [ 1690.000033][ T8712] netlink_sendmsg+0x813/0xb40 [ 1690.000062][ T8712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1690.000085][ T8712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1690.000110][ T8712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1690.000134][ T8712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1690.000151][ T8712] ____sys_sendmsg+0xa68/0xad0 [ 1690.000173][ T8712] ? __might_fault+0xaf/0x130 [ 1690.000200][ T8712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1690.000229][ T8712] ? import_iovec+0x73/0xa0 [ 1690.000252][ T8712] ___sys_sendmsg+0x2a5/0x360 [ 1690.000272][ T8712] ? __lock_acquire+0x6b5/0x2cf0 [ 1690.000295][ T8712] ? __pfx____sys_sendmsg+0x10/0x10 [ 1690.000355][ T8712] ? __fget_files+0x2a/0x420 [ 1690.000372][ T8712] ? __fget_files+0x3a0/0x420 [ 1690.000401][ T8712] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1690.000425][ T8712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1690.000456][ T8712] ? __pfx_ksys_write+0x10/0x10 [ 1690.000490][ T8712] do_syscall_64+0x14d/0xf80 [ 1690.000511][ T8712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.000528][ T8712] ? trace_irq_disable+0x37/0x100 [ 1690.000546][ T8712] ? clear_bhb_loop+0x40/0x90 [ 1690.000568][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.000590][ T8712] RIP: 0033:0x7fbed499bf79 [ 1690.000607][ T8712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.000622][ T8712] RSP: 002b:00007fbed5791028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1690.000641][ T8712] RAX: ffffffffffffffda RBX: 00007fbed4c15fa0 RCX: 00007fbed499bf79 [ 1690.000676][ T8712] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1690.000687][ T8712] RBP: 00007fbed5791090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.000698][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.000710][ T8712] R13: 00007fbed4c16038 R14: 00007fbed4c15fa0 R15: 00007ffe7dbc1f58 [ 1690.000746][ T8712] [ 1690.529777][ T8722] netlink: 332 bytes leftover after parsing attributes in process `syz.0.25524'. [ 1690.569817][ T8723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25522'. [ 1690.592659][ T8722] netlink: 'syz.0.25524': attribute type 9 has an invalid length. [ 1690.601085][ T8722] netlink: 108 bytes leftover after parsing attributes in process `syz.0.25524'. [ 1690.611301][ T8722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.25524'. [ 1690.635568][ T8723] bond21: option arp_interval: invalid value (18446744072937799682) [ 1690.651703][ T8723] bond21: option arp_interval: allowed values 0 - 2147483647 [ 1690.660792][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25522'. [ 1690.692523][ T8723] bond21 (unregistering): Released all slaves [ 1690.721044][ T8725] ip6gre2: entered promiscuous mode [ 1690.830550][ T8734] netlink: 'syz.3.25527': attribute type 46 has an invalid length. [ 1690.943602][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25529'. [ 1691.188072][ T8760] FAULT_INJECTION: forcing a failure. [ 1691.188072][ T8760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.228545][ T8760] CPU: 1 UID: 0 PID: 8760 Comm: syz.3.25538 Not tainted syzkaller #0 PREEMPT(full) [ 1691.228570][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1691.228582][ T8760] Call Trace: [ 1691.228589][ T8760] [ 1691.228597][ T8760] dump_stack_lvl+0xe8/0x150 [ 1691.228625][ T8760] should_fail_ex+0x412/0x560 [ 1691.228653][ T8760] _copy_from_user+0x2d/0xb0 [ 1691.228673][ T8760] ___sys_recvmsg+0x175/0x590 [ 1691.228700][ T8760] ? __pfx____sys_recvmsg+0x10/0x10 [ 1691.228726][ T8760] ? __fget_files+0x2a/0x420 [ 1691.228775][ T8760] do_recvmmsg+0x334/0x800 [ 1691.228804][ T8760] ? __pfx_do_recvmmsg+0x10/0x10 [ 1691.228837][ T8760] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1691.228883][ T8760] __x64_sys_recvmmsg+0x198/0x250 [ 1691.228907][ T8760] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1691.228941][ T8760] do_syscall_64+0x14d/0xf80 [ 1691.228961][ T8760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.228978][ T8760] ? trace_irq_disable+0x37/0x100 [ 1691.228996][ T8760] ? clear_bhb_loop+0x40/0x90 [ 1691.229018][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.229035][ T8760] RIP: 0033:0x7fbed499bf79 [ 1691.229052][ T8760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.229067][ T8760] RSP: 002b:00007fbed5791028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1691.229086][ T8760] RAX: ffffffffffffffda RBX: 00007fbed4c15fa0 RCX: 00007fbed499bf79 [ 1691.229099][ T8760] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 1691.229111][ T8760] RBP: 00007fbed5791090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.229123][ T8760] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1691.229134][ T8760] R13: 00007fbed4c16038 R14: 00007fbed4c15fa0 R15: 00007ffe7dbc1f58 [ 1691.229164][ T8760] [ 1691.300884][ T8756] netlink: 'syz.2.25536': attribute type 46 has an invalid length. [ 1691.447404][ T8762] netlink: 'syz.1.25539': attribute type 2 has an invalid length. [ 1691.484053][ T8762] : entered promiscuous mode [ 1691.514048][ T30] audit: type=1800 audit(1771305311.754:142): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.25533" name="memory.events" dev="tmpfs" ino=25633 res=0 errno=0 [ 1691.630471][ T8770] netlink: 'syz.2.25541': attribute type 3 has an invalid length. [ 1691.773944][ T8772] Can't find ip_set type hash:i‘,port,ip [ 1691.860519][ T8783] xt_CT: No such helper "syz0" [ 1691.864588][ T8786] tipc: Enabled bearer , priority 0 [ 1691.916210][ T8786] syzkaller0: entered promiscuous mode [ 1691.922243][ T8786] syzkaller0: entered allmulticast mode [ 1691.931041][ T8786] tipc: Resetting bearer [ 1691.955177][ T8785] tipc: Resetting bearer [ 1692.027614][ T8794] FAULT_INJECTION: forcing a failure. [ 1692.027614][ T8794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1692.041030][ T8794] CPU: 1 UID: 0 PID: 8794 Comm: syz.3.25549 Not tainted syzkaller #0 PREEMPT(full) [ 1692.041055][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1692.041065][ T8794] Call Trace: [ 1692.041072][ T8794] [ 1692.041079][ T8794] dump_stack_lvl+0xe8/0x150 [ 1692.041105][ T8794] should_fail_ex+0x412/0x560 [ 1692.041132][ T8794] _copy_from_user+0x2d/0xb0 [ 1692.041150][ T8794] ___sys_sendmsg+0x1c6/0x360 [ 1692.041170][ T8794] ? __lock_acquire+0x6b5/0x2cf0 [ 1692.041191][ T8794] ? __pfx____sys_sendmsg+0x10/0x10 [ 1692.041242][ T8794] ? __fget_files+0x2a/0x420 [ 1692.041257][ T8794] ? __fget_files+0x3a0/0x420 [ 1692.041281][ T8794] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1692.041303][ T8794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1692.041330][ T8794] ? __pfx_ksys_write+0x10/0x10 [ 1692.041359][ T8794] do_syscall_64+0x14d/0xf80 [ 1692.041378][ T8794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.041393][ T8794] ? trace_irq_disable+0x37/0x100 [ 1692.041410][ T8794] ? clear_bhb_loop+0x40/0x90 [ 1692.041429][ T8794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.041444][ T8794] RIP: 0033:0x7fbed499bf79 [ 1692.041460][ T8794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.041474][ T8794] RSP: 002b:00007fbed5791028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1692.041491][ T8794] RAX: ffffffffffffffda RBX: 00007fbed4c15fa0 RCX: 00007fbed499bf79 [ 1692.041503][ T8794] RDX: 000000002400c800 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1692.041513][ T8794] RBP: 00007fbed5791090 R08: 0000000000000000 R09: 0000000000000000 [ 1692.041523][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1692.041533][ T8794] R13: 00007fbed4c16038 R14: 00007fbed4c15fa0 R15: 00007ffe7dbc1f58 [ 1692.041560][ T8794] [ 1694.127347][ T8785] tipc: Disabling bearer [ 1694.142644][ T8798] tipc: Enabling of bearer rejected, failed to enable media [ 1694.229093][ T8824] __nla_validate_parse: 7 callbacks suppressed [ 1694.229113][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25556'. [ 1694.265681][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25556'. [ 1694.450446][ T8836] FAULT_INJECTION: forcing a failure. [ 1694.450446][ T8836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1694.464724][ T8836] CPU: 0 UID: 0 PID: 8836 Comm: syz.3.25560 Not tainted syzkaller #0 PREEMPT(full) [ 1694.464750][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1694.464761][ T8836] Call Trace: [ 1694.464768][ T8836] [ 1694.464776][ T8836] dump_stack_lvl+0xe8/0x150 [ 1694.464803][ T8836] should_fail_ex+0x412/0x560 [ 1694.464832][ T8836] _copy_from_user+0x2d/0xb0 [ 1694.464852][ T8836] ___sys_recvmsg+0x175/0x590 [ 1694.464880][ T8836] ? __pfx____sys_recvmsg+0x10/0x10 [ 1694.464906][ T8836] ? __fget_files+0x2a/0x420 [ 1694.464956][ T8836] do_recvmmsg+0x334/0x800 [ 1694.464986][ T8836] ? __pfx_do_recvmmsg+0x10/0x10 [ 1694.465020][ T8836] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1694.465061][ T8836] __x64_sys_recvmmsg+0x198/0x250 [ 1694.465085][ T8836] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1694.465119][ T8836] do_syscall_64+0x14d/0xf80 [ 1694.465140][ T8836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.465157][ T8836] ? trace_irq_disable+0x37/0x100 [ 1694.465175][ T8836] ? clear_bhb_loop+0x40/0x90 [ 1694.465197][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.465213][ T8836] RIP: 0033:0x7fbed499bf79 [ 1694.465231][ T8836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1694.465245][ T8836] RSP: 002b:00007fbed5791028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1694.465272][ T8836] RAX: ffffffffffffffda RBX: 00007fbed4c15fa0 RCX: 00007fbed499bf79 [ 1694.465285][ T8836] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000004 [ 1694.465297][ T8836] RBP: 00007fbed5791090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.465308][ T8836] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1694.465320][ T8836] R13: 00007fbed4c16038 R14: 00007fbed4c15fa0 R15: 00007ffe7dbc1f58 [ 1694.465352][ T8836] [ 1694.725359][ T8838] netlink: 'syz.1.25559': attribute type 1 has an invalid length. [ 1694.737264][ T8838] netlink: 'syz.1.25559': attribute type 2 has an invalid length. [ 1694.774137][ T8844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25564'. [ 1694.805118][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25561'. [ 1694.884849][ T8841] lo speed is unknown, defaulting to 1000 [ 1694.892719][ T8841] wg1 speed is unknown, defaulting to 1000 [ 1694.922436][ T8851] FAULT_INJECTION: forcing a failure. [ 1694.922436][ T8851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1694.937513][ T8851] CPU: 1 UID: 0 PID: 8851 Comm: syz.4.25566 Not tainted syzkaller #0 PREEMPT(full) [ 1694.937537][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1694.937548][ T8851] Call Trace: [ 1694.937556][ T8851] [ 1694.937563][ T8851] dump_stack_lvl+0xe8/0x150 [ 1694.937590][ T8851] should_fail_ex+0x412/0x560 [ 1694.937618][ T8851] _copy_from_user+0x2d/0xb0 [ 1694.937637][ T8851] ___sys_sendmsg+0x1c6/0x360 [ 1694.937658][ T8851] ? __lock_acquire+0x6b5/0x2cf0 [ 1694.937682][ T8851] ? __pfx____sys_sendmsg+0x10/0x10 [ 1694.937738][ T8851] ? __fget_files+0x2a/0x420 [ 1694.937755][ T8851] ? __fget_files+0x3a0/0x420 [ 1694.937782][ T8851] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1694.937805][ T8851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1694.937835][ T8851] ? __pfx_ksys_write+0x10/0x10 [ 1694.937863][ T8851] do_syscall_64+0x14d/0xf80 [ 1694.937882][ T8851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.937894][ T8851] ? trace_irq_disable+0x37/0x100 [ 1694.937910][ T8851] ? clear_bhb_loop+0x40/0x90 [ 1694.937927][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.937939][ T8851] RIP: 0033:0x7f412279bf79 [ 1694.937951][ T8851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1694.937962][ T8851] RSP: 002b:00007f412367b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1694.937976][ T8851] RAX: ffffffffffffffda RBX: 00007f4122a15fa0 RCX: 00007f412279bf79 [ 1694.937985][ T8851] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 1694.937994][ T8851] RBP: 00007f412367b090 R08: 0000000000000000 R09: 0000000000000000 [ 1694.938001][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1694.938009][ T8851] R13: 00007f4122a16038 R14: 00007f4122a15fa0 R15: 00007fff72cb5b28 [ 1694.938030][ T8851] [ 1695.185666][ T8841] lo speed is unknown, defaulting to 1000 [ 1695.211246][ T8857] tipc: Enabled bearer , priority 0 [ 1695.228202][ T8857] syzkaller0: entered promiscuous mode [ 1695.246389][ T8857] syzkaller0: entered allmulticast mode [ 1695.261347][ T8862] FAULT_INJECTION: forcing a failure. [ 1695.261347][ T8862] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.307634][ T8862] CPU: 1 UID: 0 PID: 8862 Comm: syz.1.25569 Not tainted syzkaller #0 PREEMPT(full) [ 1695.307658][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1695.307669][ T8862] Call Trace: [ 1695.307676][ T8862] [ 1695.307683][ T8862] dump_stack_lvl+0xe8/0x150 [ 1695.307708][ T8862] should_fail_ex+0x412/0x560 [ 1695.307736][ T8862] should_failslab+0xa8/0x100 [ 1695.307760][ T8862] __kmalloc_noprof+0xe8/0x760 [ 1695.307780][ T8862] ? bpf_test_init+0x9f/0x150 [ 1695.307800][ T8862] bpf_test_init+0x9f/0x150 [ 1695.307820][ T8862] bpf_prog_test_run_xdp+0x529/0x1160 [ 1695.307852][ T8862] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1695.307875][ T8862] ? __fget_files+0x2a/0x420 [ 1695.307898][ T8862] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1695.307917][ T8862] bpf_prog_test_run+0x2c7/0x340 [ 1695.307942][ T8862] __sys_bpf+0x643/0x950 [ 1695.307966][ T8862] ? __pfx___sys_bpf+0x10/0x10 [ 1695.308001][ T8862] ? ksys_write+0x242/0x270 [ 1695.308024][ T8862] ? __pfx_ksys_write+0x10/0x10 [ 1695.308052][ T8862] __x64_sys_bpf+0x7c/0x90 [ 1695.308072][ T8862] do_syscall_64+0x14d/0xf80 [ 1695.308092][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.308108][ T8862] ? trace_irq_disable+0x37/0x100 [ 1695.308127][ T8862] ? clear_bhb_loop+0x40/0x90 [ 1695.308148][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.308163][ T8862] RIP: 0033:0x7f172fb9bf79 [ 1695.308180][ T8862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.308195][ T8862] RSP: 002b:00007f17309e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1695.308213][ T8862] RAX: ffffffffffffffda RBX: 00007f172fe15fa0 RCX: 00007f172fb9bf79 [ 1695.308226][ T8862] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1695.308237][ T8862] RBP: 00007f17309e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.308248][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.308259][ T8862] R13: 00007f172fe16038 R14: 00007f172fe15fa0 R15: 00007ffd3f997468 [ 1695.308290][ T8862] [ 1695.556104][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25570'. [ 1695.598688][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25570'. [ 1695.701126][ T8856] tipc: Resetting bearer [ 1695.812679][ T8856] tipc: Disabling bearer [ 1696.195731][ T8886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25578'. [ 1698.172271][ T8904] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1698.215214][ T8905] smc: adding net device hsr0 with user defined pnetid SYZ2 [ 1698.240597][ T8905] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 1698.304025][ T8910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25582'. [ 1698.325493][ T8912] tipc: Enabled bearer , priority 0 [ 1698.342929][ T8912] syzkaller0: entered promiscuous mode [ 1698.352427][ T8912] syzkaller0: entered allmulticast mode [ 1698.478040][ T8911] tipc: Resetting bearer [ 1698.716598][ T8911] tipc: Disabling bearer [ 1699.244892][ T8952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.25594'. [ 1699.388444][ T8962] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.25596'. [ 1699.400768][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25598'. [ 1699.499993][ T8969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25598'. [ 1699.600756][ T8980] netlink: 64 bytes leftover after parsing attributes in process `syz.2.25604'. [ 1699.612200][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25604'. [ 1699.796247][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25604'. [ 1699.806140][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25606'. [ 1699.824397][ T8995] FAULT_INJECTION: forcing a failure. [ 1699.824397][ T8995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.838272][ T8995] CPU: 0 UID: 0 PID: 8995 Comm: syz.1.25609 Not tainted syzkaller #0 PREEMPT(full) [ 1699.838297][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1699.838308][ T8995] Call Trace: [ 1699.838316][ T8995] [ 1699.838323][ T8995] dump_stack_lvl+0xe8/0x150 [ 1699.838352][ T8995] should_fail_ex+0x412/0x560 [ 1699.838380][ T8995] _copy_from_iter+0x1d3/0x1670 [ 1699.838409][ T8995] ? __lock_acquire+0x6b5/0x2cf0 [ 1699.838432][ T8995] ? __pfx__copy_from_iter+0x10/0x10 [ 1699.838462][ T8995] ? __lock_acquire+0x6b5/0x2cf0 [ 1699.838486][ T8995] tun_get_user+0x516/0x3dd0 [ 1699.838522][ T8995] ? aa_file_perm+0x12d/0x1630 [ 1699.838550][ T8995] ? aa_file_perm+0x440/0x1630 [ 1699.838572][ T8995] ? __pfx_tun_get_user+0x10/0x10 [ 1699.838597][ T8995] ? __lock_acquire+0x6b5/0x2cf0 [ 1699.838617][ T8995] ? kstrtoull+0x12f/0x1d0 [ 1699.838647][ T8995] ? ref_tracker_alloc+0x363/0x4d0 [ 1699.838672][ T8995] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1699.838696][ T8995] ? tun_get+0x1c/0x2f0 [ 1699.838718][ T8995] ? tun_get+0x1c/0x2f0 [ 1699.838743][ T8995] ? tun_get+0x1c/0x2f0 [ 1699.838763][ T8995] ? tun_get+0x1c/0x2f0 [ 1699.838790][ T8995] tun_chr_write_iter+0x113/0x200 [ 1699.838815][ T8995] vfs_write+0x61d/0xb90 [ 1699.838843][ T8995] ? __pfx_vfs_write+0x10/0x10 [ 1699.838874][ T8995] ? __fget_files+0x2a/0x420 [ 1699.838900][ T8995] ksys_write+0x150/0x270 [ 1699.838922][ T8995] ? __pfx_ksys_write+0x10/0x10 [ 1699.838954][ T8995] do_syscall_64+0x14d/0xf80 [ 1699.838973][ T8995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.838996][ T8995] ? trace_irq_disable+0x37/0x100 [ 1699.839014][ T8995] ? clear_bhb_loop+0x40/0x90 [ 1699.839034][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.839050][ T8995] RIP: 0033:0x7f172fb9bf79 [ 1699.839065][ T8995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.839079][ T8995] RSP: 002b:00007f17309e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1699.839097][ T8995] RAX: ffffffffffffffda RBX: 00007f172fe15fa0 RCX: 00007f172fb9bf79 [ 1699.839110][ T8995] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005 [ 1699.839121][ T8995] RBP: 00007f17309e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.839132][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.839143][ T8995] R13: 00007f172fe16038 R14: 00007f172fe15fa0 R15: 00007ffd3f997468 [ 1699.839172][ T8995] [ 1700.232518][ T9007] syzkaller1: entered promiscuous mode [ 1700.279055][ T9007] syzkaller1: entered allmulticast mode [ 1700.293384][ T9004] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1700.295632][ T9007] vlan3: entered allmulticast mode [ 1700.335152][ T9009] lo speed is unknown, defaulting to 1000 [ 1700.393027][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25612'. [ 1700.434416][ T9016] netlink: 64 bytes leftover after parsing attributes in process `syz.4.25612'. [ 1700.473434][ T9013] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1700.486158][ T9009] wg1 speed is unknown, defaulting to 1000 [ 1700.545554][ T9009] lo speed is unknown, defaulting to 1000 [ 1700.552710][ T9013] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1700.707359][ T9030] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1700.731274][ T9021] lo speed is unknown, defaulting to 1000 [ 1700.761238][ T9021] wg1 speed is unknown, defaulting to 1000 [ 1700.812208][ T30] audit: type=1800 audit(1771305321.054:143): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.25613" name="memory.events" dev="tmpfs" ino=25569 res=0 errno=0 [ 1700.825529][ T9021] lo speed is unknown, defaulting to 1000 [ 1701.909993][ T9082] syzkaller0: entered promiscuous mode [ 1701.930755][ T9082] syzkaller0: entered allmulticast mode [ 1702.336559][ T9105] FAULT_INJECTION: forcing a failure. [ 1702.336559][ T9105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1702.363201][ T9105] CPU: 1 UID: 0 PID: 9105 Comm: syz.3.25642 Not tainted syzkaller #0 PREEMPT(full) [ 1702.363226][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1702.363236][ T9105] Call Trace: [ 1702.363244][ T9105] [ 1702.363252][ T9105] dump_stack_lvl+0xe8/0x150 [ 1702.363278][ T9105] should_fail_ex+0x412/0x560 [ 1702.363306][ T9105] _copy_from_user+0x2d/0xb0 [ 1702.363324][ T9105] kstrtouint_from_user+0xd6/0x180 [ 1702.363350][ T9105] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1702.363394][ T9105] proc_fail_nth_write+0x8e/0x210 [ 1702.363417][ T9105] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1702.363443][ T9105] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1702.363466][ T9105] vfs_write+0x29a/0xb90 [ 1702.363504][ T9105] ? __pfx_vfs_write+0x10/0x10 [ 1702.363526][ T9105] ? __fget_files+0x2a/0x420 [ 1702.363548][ T9105] ? __fget_files+0x3a0/0x420 [ 1702.363563][ T9105] ? __fget_files+0x2a/0x420 [ 1702.363590][ T9105] ksys_write+0x150/0x270 [ 1702.363611][ T9105] ? __pfx_ksys_write+0x10/0x10 [ 1702.363642][ T9105] do_syscall_64+0x14d/0xf80 [ 1702.363664][ T9105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.363679][ T9105] ? trace_irq_disable+0x37/0x100 [ 1702.363697][ T9105] ? clear_bhb_loop+0x40/0x90 [ 1702.363717][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.363739][ T9105] RIP: 0033:0x7fbed495c84e [ 1702.363755][ T9105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1702.363771][ T9105] RSP: 002b:00007fbed5790fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1702.363790][ T9105] RAX: ffffffffffffffda RBX: 00007fbed57916c0 RCX: 00007fbed495c84e [ 1702.363802][ T9105] RDX: 0000000000000001 RSI: 00007fbed57910a0 RDI: 0000000000000004 [ 1702.363813][ T9105] RBP: 00007fbed5791090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.363823][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.363833][ T9105] R13: 00007fbed4c16038 R14: 00007fbed4c15fa0 R15: 00007ffe7dbc1f58 [ 1702.363865][ T9105] [ 1702.608131][ T9108] FAULT_INJECTION: forcing a failure. [ 1702.608131][ T9108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1702.635973][ T9108] CPU: 1 UID: 0 PID: 9108 Comm: syz.0.25644 Not tainted syzkaller #0 PREEMPT(full) [ 1702.635999][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1702.636010][ T9108] Call Trace: [ 1702.636017][ T9108] [ 1702.636024][ T9108] dump_stack_lvl+0xe8/0x150 [ 1702.636053][ T9108] should_fail_ex+0x412/0x560 [ 1702.636082][ T9108] _copy_from_user+0x2d/0xb0 [ 1702.636100][ T9108] ___sys_recvmsg+0x175/0x590 [ 1702.636125][ T9108] ? __pfx____sys_recvmsg+0x10/0x10 [ 1702.636150][ T9108] ? __fget_files+0x2a/0x420 [ 1702.636194][ T9108] do_recvmmsg+0x334/0x800 [ 1702.636224][ T9108] ? __pfx_do_recvmmsg+0x10/0x10 [ 1702.636253][ T9108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1702.636286][ T9108] __x64_sys_recvmmsg+0x198/0x250 [ 1702.636308][ T9108] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1702.636337][ T9108] do_syscall_64+0x14d/0xf80 [ 1702.636356][ T9108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.636371][ T9108] ? trace_irq_disable+0x37/0x100 [ 1702.636387][ T9108] ? clear_bhb_loop+0x40/0x90 [ 1702.636405][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.636420][ T9108] RIP: 0033:0x7f0add99bf79 [ 1702.636436][ T9108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.636449][ T9108] RSP: 002b:00007f0ade8f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1702.636477][ T9108] RAX: ffffffffffffffda RBX: 00007f0addc15fa0 RCX: 00007f0add99bf79 [ 1702.636488][ T9108] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 1702.636499][ T9108] RBP: 00007f0ade8f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.636509][ T9108] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1702.636519][ T9108] R13: 00007f0addc16038 R14: 00007f0addc15fa0 R15: 00007fff6832b7a8 [ 1702.636544][ T9108] [ 1703.009354][ T9122] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1703.818274][ T9161] FAULT_INJECTION: forcing a failure. [ 1703.818274][ T9161] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.842266][ T9161] CPU: 0 UID: 0 PID: 9161 Comm: syz.1.25663 Not tainted syzkaller #0 PREEMPT(full) [ 1703.842293][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1703.842304][ T9161] Call Trace: [ 1703.842312][ T9161] [ 1703.842320][ T9161] dump_stack_lvl+0xe8/0x150 [ 1703.842348][ T9161] should_fail_ex+0x412/0x560 [ 1703.842378][ T9161] should_failslab+0xa8/0x100 [ 1703.842410][ T9161] __kmalloc_cache_noprof+0x88/0x660 [ 1703.842433][ T9161] ? tcf_action_init_1+0x1c2/0x740 [ 1703.842462][ T9161] tcf_action_init_1+0x1c2/0x740 [ 1703.842491][ T9161] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1703.842514][ T9161] ? _raw_read_unlock+0x28/0x50 [ 1703.842532][ T9161] ? tc_action_load_ops+0x247/0x540 [ 1703.842574][ T9161] ? __nla_parse+0x40/0x60 [ 1703.842594][ T9161] tcf_action_init+0x31e/0xb40 [ 1703.842629][ T9161] ? __pfx_tcf_action_init+0x10/0x10 [ 1703.842681][ T9161] ? __pfx___nla_validate_parse+0x10/0x10 [ 1703.842737][ T9161] tc_ctl_action+0x43b/0xc70 [ 1703.842774][ T9161] ? __pfx_tc_ctl_action+0x10/0x10 [ 1703.842800][ T9161] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1703.842820][ T9161] ? lockdep_hardirqs_on+0x7a/0x110 [ 1703.842888][ T9161] ? __pfx_tc_ctl_action+0x10/0x10 [ 1703.842910][ T9161] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1703.842935][ T9161] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1703.842953][ T9161] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1703.842971][ T9161] ? __lock_acquire+0x6b5/0x2cf0 [ 1703.843005][ T9161] netlink_rcv_skb+0x232/0x4b0 [ 1703.843026][ T9161] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1703.843052][ T9161] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1703.843087][ T9161] ? netlink_deliver_tap+0x2e/0x1b0 [ 1703.843114][ T9161] netlink_unicast+0x80f/0x9b0 [ 1703.843147][ T9161] ? __pfx_netlink_unicast+0x10/0x10 [ 1703.843172][ T9161] ? netlink_sendmsg+0x650/0xb40 [ 1703.843188][ T9161] ? skb_put+0x11b/0x210 [ 1703.843212][ T9161] netlink_sendmsg+0x813/0xb40 [ 1703.843238][ T9161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.843258][ T9161] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1703.843282][ T9161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1703.843308][ T9161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.843325][ T9161] ____sys_sendmsg+0xa68/0xad0 [ 1703.843346][ T9161] ? __might_fault+0xaf/0x130 [ 1703.843373][ T9161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1703.843411][ T9161] ? import_iovec+0x73/0xa0 [ 1703.843434][ T9161] ___sys_sendmsg+0x2a5/0x360 [ 1703.843454][ T9161] ? __lock_acquire+0x6b5/0x2cf0 [ 1703.843477][ T9161] ? __pfx____sys_sendmsg+0x10/0x10 [ 1703.843535][ T9161] ? __fget_files+0x2a/0x420 [ 1703.843553][ T9161] ? __fget_files+0x3a0/0x420 [ 1703.843581][ T9161] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1703.843606][ T9161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1703.843636][ T9161] ? __pfx_ksys_write+0x10/0x10 [ 1703.843668][ T9161] do_syscall_64+0x14d/0xf80 [ 1703.843689][ T9161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.843706][ T9161] ? trace_irq_disable+0x37/0x100 [ 1703.843724][ T9161] ? clear_bhb_loop+0x40/0x90 [ 1703.843745][ T9161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.843762][ T9161] RIP: 0033:0x7f172fb9bf79 [ 1703.843780][ T9161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.843794][ T9161] RSP: 002b:00007f17309e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.843813][ T9161] RAX: ffffffffffffffda RBX: 00007f172fe15fa0 RCX: 00007f172fb9bf79 [ 1703.843827][ T9161] RDX: 000000002400c800 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1703.843839][ T9161] RBP: 00007f17309e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.843851][ T9161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.843862][ T9161] R13: 00007f172fe16038 R14: 00007f172fe15fa0 R15: 00007ffd3f997468 [ 1703.843893][ T9161] [ 1704.236774][ T9162] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!!bíÓÙ.˜>„nS‡#^‘§' [ 1704.252854][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.4.25661 Not tainted syzkaller #0 PREEMPT(full) [ 1704.252884][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1704.252898][ T9162] Call Trace: [ 1704.252907][ T9162] [ 1704.252917][ T9162] dump_stack_lvl+0xe8/0x150 [ 1704.252949][ T9162] sysfs_warn_dup+0x8e/0xa0 [ 1704.252976][ T9162] sysfs_do_create_link_sd+0xc0/0x110 [ 1704.253006][ T9162] device_add_class_symlinks+0x1cf/0x240 [ 1704.253035][ T9162] device_add+0x475/0xb70 [ 1704.253063][ T9162] wiphy_register+0x1d73/0x2d50 [ 1704.253106][ T9162] ? __pfx_wiphy_register+0x10/0x10 [ 1704.253131][ T9162] ? __pfx_netdev_run_todo+0x10/0x10 [ 1704.253159][ T9162] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1704.253196][ T9162] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1704.253227][ T9162] ieee80211_register_hw+0x3571/0x4220 [ 1704.253271][ T9162] ? ieee80211_register_hw+0x13e1/0x4220 [ 1704.253311][ T9162] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1704.253366][ T9162] ? __hrtimer_setup+0x181/0x200 [ 1704.253388][ T9162] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1704.253417][ T9162] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1704.253473][ T9162] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1704.253494][ T9162] ? kstrndup+0xbf/0x160 [ 1704.253523][ T9162] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1704.253570][ T9162] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1704.253609][ T9162] ? rcu_is_watching+0x15/0xb0 [ 1704.253638][ T9162] ? __nla_parse+0x40/0x60 [ 1704.253662][ T9162] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1704.253700][ T9162] genl_family_rcv_msg_doit+0x22a/0x330 [ 1704.253734][ T9162] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1704.253775][ T9162] ? bpf_lsm_capable+0x9/0x20 [ 1704.253796][ T9162] ? security_capable+0x7e/0x2c0 [ 1704.253831][ T9162] genl_rcv_msg+0x61c/0x7a0 [ 1704.253870][ T9162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1704.253892][ T9162] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1704.253931][ T9162] netlink_rcv_skb+0x232/0x4b0 [ 1704.253952][ T9162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1704.253978][ T9162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1704.253994][ T9162] ? genl_rcv+0x19/0x40 [ 1704.254038][ T9162] ? down_read+0x272/0x2e0 [ 1704.254062][ T9162] ? genl_rcv+0xd/0x40 [ 1704.254088][ T9162] genl_rcv+0x28/0x40 [ 1704.254110][ T9162] netlink_unicast+0x80f/0x9b0 [ 1704.254150][ T9162] ? __pfx_netlink_unicast+0x10/0x10 [ 1704.254181][ T9162] ? netlink_sendmsg+0x650/0xb40 [ 1704.254200][ T9162] ? skb_put+0x11b/0x210 [ 1704.254229][ T9162] netlink_sendmsg+0x813/0xb40 [ 1704.254263][ T9162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.254288][ T9162] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1704.254318][ T9162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1704.254354][ T9162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.254374][ T9162] ____sys_sendmsg+0xa68/0xad0 [ 1704.254402][ T9162] ? __might_fault+0xaf/0x130 [ 1704.254434][ T9162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.254472][ T9162] ? import_iovec+0x73/0xa0 [ 1704.254497][ T9162] ___sys_sendmsg+0x2a5/0x360 [ 1704.254522][ T9162] ? __lock_acquire+0x6b5/0x2cf0 [ 1704.254549][ T9162] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.254584][ T9162] ? futex_wake+0x4ac/0x580 [ 1704.254639][ T9162] ? __fget_files+0x2a/0x420 [ 1704.254660][ T9162] ? __fget_files+0x3a0/0x420 [ 1704.254693][ T9162] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1704.254724][ T9162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1704.254762][ T9162] ? rcu_is_watching+0x15/0xb0 [ 1704.254801][ T9162] do_syscall_64+0x14d/0xf80 [ 1704.254826][ T9162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.254845][ T9162] ? trace_irq_disable+0x37/0x100 [ 1704.254867][ T9162] ? clear_bhb_loop+0x40/0x90 [ 1704.254891][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.254911][ T9162] RIP: 0033:0x7f412279bf79 [ 1704.254930][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.254947][ T9162] RSP: 002b:00007f412365a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.254969][ T9162] RAX: ffffffffffffffda RBX: 00007f4122a16090 RCX: 00007f412279bf79 [ 1704.254984][ T9162] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d [ 1704.254999][ T9162] RBP: 00007f41228327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1704.255014][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1704.255028][ T9162] R13: 00007f4122a16128 R14: 00007f4122a16090 R15: 00007fff72cb5b28 [ 1704.255066][ T9162] [ 1704.874060][ T9189] __nla_validate_parse: 14 callbacks suppressed [ 1704.874080][ T9189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25672'. [ 1704.955304][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25674'. [ 1704.966343][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25672'. [ 1705.003230][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25674'. [ 1705.064693][ T9189] bond22: option arp_interval: invalid value (18446744072937799682) [ 1705.109063][ T9189] bond22: option arp_interval: allowed values 0 - 2147483647 [ 1705.161934][ T9189] bond22 (unregistering): Released all slaves [ 1705.310805][ T30] audit: type=1800 audit(1771305325.554:144): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.25671" name="memory.events" dev="tmpfs" ino=25782 res=0 errno=0 [ 1705.592521][ T9222] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.25683'. [ 1705.879593][ T9238] netlink: 16362 bytes leftover after parsing attributes in process `syz.2.25687'. [ 1705.897737][ T9238] syz_tun: left allmulticast mode [ 1705.972486][ T9240] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1706.187894][ T9252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25693'. [ 1706.283244][ T9260] siw: device registration error -23 [ 1706.289520][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25693'. [ 1706.319788][ T9252] bond23: option arp_interval: invalid value (18446744072937799682) [ 1706.329633][ T9252] bond23: option arp_interval: allowed values 0 - 2147483647 [ 1706.336899][ T9267] FAULT_INJECTION: forcing a failure. [ 1706.336899][ T9267] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.351922][ T9252] bond23 (unregistering): Released all slaves [ 1706.357252][ T9267] CPU: 0 UID: 0 PID: 9267 Comm: syz.4.25697 Not tainted syzkaller #0 PREEMPT(full) [ 1706.357277][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1706.357289][ T9267] Call Trace: [ 1706.357297][ T9267] [ 1706.357306][ T9267] dump_stack_lvl+0xe8/0x150 [ 1706.357334][ T9267] should_fail_ex+0x412/0x560 [ 1706.357369][ T9267] should_failslab+0xa8/0x100 [ 1706.357394][ T9267] __kmalloc_cache_noprof+0x88/0x660 [ 1706.357417][ T9267] ? rtnl_newlink+0x136/0x1be0 [ 1706.357440][ T9267] rtnl_newlink+0x136/0x1be0 [ 1706.357470][ T9267] ? __pfx_rtnl_newlink+0x10/0x10 [ 1706.357493][ T9267] ? __lock_acquire+0x6b5/0x2cf0 [ 1706.357518][ T9267] ? __lock_acquire+0x6b5/0x2cf0 [ 1706.357538][ T9267] ? __lock_acquire+0x6b5/0x2cf0 [ 1706.357564][ T9267] ? unwind_next_frame+0xa5/0x23c0 [ 1706.357592][ T9267] ? unwind_next_frame+0xa5/0x23c0 [ 1706.357615][ T9267] ? is_bpf_text_address+0x26/0x2b0 [ 1706.357645][ T9267] ? __lock_acquire+0x6b5/0x2cf0 [ 1706.357668][ T9267] ? is_bpf_text_address+0x292/0x2b0 [ 1706.357687][ T9267] ? is_bpf_text_address+0x26/0x2b0 [ 1706.357711][ T9267] ? kernel_text_address+0xa5/0xe0 [ 1706.357742][ T9267] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1706.357773][ T9267] ? __pfx_rtnl_newlink+0x10/0x10 [ 1706.357790][ T9267] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1706.357811][ T9267] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1706.357828][ T9267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1706.357845][ T9267] ? __lock_acquire+0x6b5/0x2cf0 [ 1706.357876][ T9267] netlink_rcv_skb+0x232/0x4b0 [ 1706.357895][ T9267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1706.357914][ T9267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1706.357941][ T9267] ? netlink_deliver_tap+0x2e/0x1b0 [ 1706.357966][ T9267] netlink_unicast+0x80f/0x9b0 [ 1706.357997][ T9267] ? __pfx_netlink_unicast+0x10/0x10 [ 1706.358020][ T9267] ? netlink_sendmsg+0x650/0xb40 [ 1706.358034][ T9267] ? skb_put+0x11b/0x210 [ 1706.358054][ T9267] netlink_sendmsg+0x813/0xb40 [ 1706.358078][ T9267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1706.358097][ T9267] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1706.358119][ T9267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1706.358141][ T9267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1706.358156][ T9267] ____sys_sendmsg+0xa68/0xad0 [ 1706.358178][ T9267] ? __might_fault+0xaf/0x130 [ 1706.358203][ T9267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1706.358232][ T9267] ? import_iovec+0x73/0xa0 [ 1706.358253][ T9267] ___sys_sendmsg+0x2a5/0x360 [ 1706.358276][ T9267] ? get_pid_task+0x20/0x1f0 [ 1706.358300][ T9267] ? __pfx____sys_sendmsg+0x10/0x10 [ 1706.358341][ T9267] ? sb_end_write+0xe9/0x1c0 [ 1706.358381][ T9267] ? __pfx_vfs_write+0x10/0x10 [ 1706.358410][ T9267] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1706.358432][ T9267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1706.358462][ T9267] ? __pfx_ksys_write+0x10/0x10 [ 1706.358492][ T9267] do_syscall_64+0x14d/0xf80 [ 1706.358513][ T9267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.358529][ T9267] ? trace_irq_disable+0x37/0x100 [ 1706.358546][ T9267] ? clear_bhb_loop+0x40/0x90 [ 1706.358566][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.358583][ T9267] RIP: 0033:0x7f412279bf79 [ 1706.358599][ T9267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.358612][ T9267] RSP: 002b:00007f412367b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1706.358631][ T9267] RAX: ffffffffffffffda RBX: 00007f4122a15fa0 RCX: 00007f412279bf79 [ 1706.358643][ T9267] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1706.358654][ T9267] RBP: 00007f412367b090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.358665][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.358676][ T9267] R13: 00007f4122a16038 R14: 00007f4122a15fa0 R15: 00007fff72cb5b28 [ 1706.358705][ T9267] [ 1706.746729][ T9258] netlink: 72 bytes leftover after parsing attributes in process `syz.0.25695'. [ 1706.766389][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25699'. [ 1706.789133][ T9276] openvswitch: netlink: Unknown nsh attribute 0 [ 1707.056281][ T9288] wlan1 speed is unknown, defaulting to 1000 [ 1707.079185][ T9288] wlan1 speed is unknown, defaulting to 1000 [ 1707.086132][ T9288] wlan1 speed is unknown, defaulting to 1000 [ 1707.148011][ T9288] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1707.277336][ T9288] wlan1 speed is unknown, defaulting to 1000 [ 1707.337645][ T9288] wlan1 speed is unknown, defaulting to 1000 [ 1707.345999][ T9288] wlan1 speed is unknown, defaulting to 1000 [ 1707.353985][ T9288] wlan1 speed is unknown, defaulting to 1000 [ 1707.389246][ T9288] wlan1 speed is unknown, defaulting to 1000 [ 1707.510719][ T9306] FAULT_INJECTION: forcing a failure. [ 1707.510719][ T9306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1707.537720][ T9306] CPU: 0 UID: 0 PID: 9306 Comm: syz.1.25709 Not tainted syzkaller #0 PREEMPT(full) [ 1707.537746][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1707.537757][ T9306] Call Trace: [ 1707.537765][ T9306] [ 1707.537772][ T9306] dump_stack_lvl+0xe8/0x150 [ 1707.537800][ T9306] should_fail_ex+0x412/0x560 [ 1707.537828][ T9306] _copy_from_iter+0x1d3/0x1670 [ 1707.537861][ T9306] ? rcu_is_watching+0x15/0xb0 [ 1707.537882][ T9306] ? __pfx__copy_from_iter+0x10/0x10 [ 1707.537914][ T9306] ? netlink_sendmsg+0x650/0xb40 [ 1707.537931][ T9306] ? skb_put+0x11b/0x210 [ 1707.537954][ T9306] netlink_sendmsg+0x6c0/0xb40 [ 1707.537980][ T9306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1707.538002][ T9306] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1707.538025][ T9306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1707.538048][ T9306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1707.538063][ T9306] ____sys_sendmsg+0xa68/0xad0 [ 1707.538083][ T9306] ? __might_fault+0xaf/0x130 [ 1707.538108][ T9306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1707.538136][ T9306] ? import_iovec+0x73/0xa0 [ 1707.538158][ T9306] ___sys_sendmsg+0x2a5/0x360 [ 1707.538178][ T9306] ? __lock_acquire+0x6b5/0x2cf0 [ 1707.538199][ T9306] ? __pfx____sys_sendmsg+0x10/0x10 [ 1707.538261][ T9306] ? __fget_files+0x2a/0x420 [ 1707.538278][ T9306] ? __fget_files+0x3a0/0x420 [ 1707.538305][ T9306] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1707.538329][ T9306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1707.538360][ T9306] ? __pfx_ksys_write+0x10/0x10 [ 1707.538393][ T9306] do_syscall_64+0x14d/0xf80 [ 1707.538414][ T9306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.538431][ T9306] ? trace_irq_disable+0x37/0x100 [ 1707.538449][ T9306] ? clear_bhb_loop+0x40/0x90 [ 1707.538470][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.538487][ T9306] RIP: 0033:0x7f172fb9bf79 [ 1707.538504][ T9306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1707.538519][ T9306] RSP: 002b:00007f17309e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1707.538537][ T9306] RAX: ffffffffffffffda RBX: 00007f172fe15fa0 RCX: 00007f172fb9bf79 [ 1707.538550][ T9306] RDX: 0000000004004050 RSI: 0000200000000040 RDI: 0000000000000003 [ 1707.538562][ T9306] RBP: 00007f17309e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.538573][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.538584][ T9306] R13: 00007f172fe16038 R14: 00007f172fe15fa0 R15: 00007ffd3f997468 [ 1707.538614][ T9306] [ 1707.596909][ T30] audit: type=1800 audit(1771305327.814:145): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.25706" name="memory.events" dev="tmpfs" ino=26832 res=0 errno=0 [ 1707.867524][ T9311] bond23: option arp_interval: invalid value (18446744072937799682) [ 1707.875813][ T9311] bond23: option arp_interval: allowed values 0 - 2147483647 [ 1707.890952][ T9311] bond23 (unregistering): Released all slaves [ 1708.254149][ T9330] lo speed is unknown, defaulting to 1000 [ 1708.283640][ T9330] wg1 speed is unknown, defaulting to 1000 [ 1708.293303][ T9330] lo speed is unknown, defaulting to 1000 [ 1708.564670][ T9330] wlan1 speed is unknown, defaulting to 1000 [ 1709.461588][ T9397] xt_CT: No such helper "syz0" [ 1709.608451][ T9413] sock: sock_set_timeout: `syz.0.25748' (pid 9413) tries to set negative timeout [ 1709.653059][ T9413] netlink: 'syz.0.25748': attribute type 1 has an invalid length. [ 1710.104789][ T9438] __nla_validate_parse: 16 callbacks suppressed [ 1710.104807][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25754'. [ 1710.126810][ T9435] bond22: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1710.140332][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25752'. [ 1710.196349][ T9435] bond22 (unregistering): Released all slaves [ 1710.286071][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25752'. [ 1710.296112][ T9440] tipc: Enabling of bearer rejected, failed to enable media [ 1711.242191][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25761'. [ 1711.258323][ T30] audit: type=1800 audit(1771305331.504:146): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25757" name="memory.events" dev="tmpfs" ino=25757 res=0 errno=0 [ 1711.278841][ T9467] tunl0: Caught tx_queue_len zero misconfig [ 1711.696636][ T9496] syzkaller0: entered promiscuous mode [ 1711.703326][ T9496] syzkaller0: entered allmulticast mode [ 1711.750377][ T9503] gretap4: entered promiscuous mode [ 1711.756575][ T9503] batman_adv: batadv0: Adding interface: gretap4 [ 1711.764162][ T9503] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 1711.911817][T11701] lec:lec_start_xmit: lec0:No lecd attached [ 1713.638878][ T9505] veth1: entered promiscuous mode [ 1713.643930][ T9505] veth1: entered allmulticast mode [ 1713.854828][ T9543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25787'. [ 1714.027619][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.25791'. [ 1714.220831][ T9560] bond22: option arp_all_targets: invalid value (129) [ 1714.264191][ T9560] bond22 (unregistering): Released all slaves [ 1714.296534][ T9575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25797'. [ 1714.381815][ T9564] tipc: Enabled bearer , priority 0 [ 1714.389813][ T9564] syzkaller0: entered promiscuous mode [ 1714.401553][ T9564] syzkaller0: entered allmulticast mode [ 1714.439792][ T9564] tipc: Resetting bearer [ 1714.610421][ T9586] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) ! [ 1714.631007][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25800'. [ 1714.724440][ T9589] FAULT_INJECTION: forcing a failure. [ 1714.724440][ T9589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1714.744177][ T9589] CPU: 0 UID: 0 PID: 9589 Comm: syz.2.25801 Not tainted syzkaller #0 PREEMPT(full) [ 1714.744201][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1714.744211][ T9589] Call Trace: [ 1714.744218][ T9589] [ 1714.744227][ T9589] dump_stack_lvl+0xe8/0x150 [ 1714.744255][ T9589] should_fail_ex+0x412/0x560 [ 1714.744283][ T9589] _copy_from_user+0x2d/0xb0 [ 1714.744302][ T9589] ___sys_recvmsg+0x175/0x590 [ 1714.744330][ T9589] ? __pfx____sys_recvmsg+0x10/0x10 [ 1714.744355][ T9589] ? __fget_files+0x2a/0x420 [ 1714.744403][ T9589] do_recvmmsg+0x334/0x800 [ 1714.744432][ T9589] ? __pfx_do_recvmmsg+0x10/0x10 [ 1714.744463][ T9589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1714.744503][ T9589] __x64_sys_recvmmsg+0x198/0x250 [ 1714.744526][ T9589] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1714.744557][ T9589] do_syscall_64+0x14d/0xf80 [ 1714.744577][ T9589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.744601][ T9589] ? trace_irq_disable+0x37/0x100 [ 1714.744619][ T9589] ? clear_bhb_loop+0x40/0x90 [ 1714.744639][ T9589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.744655][ T9589] RIP: 0033:0x7feedb59bf79 [ 1714.744671][ T9589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.744685][ T9589] RSP: 002b:00007feedc543028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1714.744704][ T9589] RAX: ffffffffffffffda RBX: 00007feedb815fa0 RCX: 00007feedb59bf79 [ 1714.744714][ T9589] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000004 [ 1714.744727][ T9589] RBP: 00007feedc543090 R08: 0000000000000000 R09: 0000000000000000 [ 1714.744737][ T9589] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1714.744747][ T9589] R13: 00007feedb816038 R14: 00007feedb815fa0 R15: 00007ffe5493da98 [ 1714.744776][ T9589] [ 1715.061945][ T9555] tipc: Resetting bearer [ 1715.124400][ T9600] netlink: 260 bytes leftover after parsing attributes in process `syz.2.25804'. [ 1715.147803][ T9555] tipc: Disabling bearer [ 1715.431438][ T9619] FAULT_INJECTION: forcing a failure. [ 1715.431438][ T9619] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.433533][ T9614] lo speed is unknown, defaulting to 1000 [ 1715.452750][ T9620] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1715.463260][ T9614] wg1 speed is unknown, defaulting to 1000 [ 1715.475348][ T9614] lo speed is unknown, defaulting to 1000 [ 1715.487392][ T9619] CPU: 1 UID: 0 PID: 9619 Comm: syz.1.25812 Not tainted syzkaller #0 PREEMPT(full) [ 1715.487418][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1715.487429][ T9619] Call Trace: [ 1715.487436][ T9619] [ 1715.487445][ T9619] dump_stack_lvl+0xe8/0x150 [ 1715.487473][ T9619] should_fail_ex+0x412/0x560 [ 1715.487501][ T9619] should_failslab+0xa8/0x100 [ 1715.487527][ T9619] __kmalloc_noprof+0xe8/0x760 [ 1715.487549][ T9619] ? bpf_test_init+0x9f/0x150 [ 1715.487571][ T9619] bpf_test_init+0x9f/0x150 [ 1715.487592][ T9619] bpf_prog_test_run_xdp+0x529/0x1160 [ 1715.487627][ T9619] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1715.487650][ T9619] ? __fget_files+0x2a/0x420 [ 1715.487673][ T9619] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1715.487692][ T9619] bpf_prog_test_run+0x2c7/0x340 [ 1715.487719][ T9619] __sys_bpf+0x643/0x950 [ 1715.487741][ T9619] ? __pfx___sys_bpf+0x10/0x10 [ 1715.487776][ T9619] ? ksys_write+0x242/0x270 [ 1715.487799][ T9619] ? __pfx_ksys_write+0x10/0x10 [ 1715.487825][ T9619] __x64_sys_bpf+0x7c/0x90 [ 1715.487845][ T9619] do_syscall_64+0x14d/0xf80 [ 1715.487866][ T9619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.487883][ T9619] ? trace_irq_disable+0x37/0x100 [ 1715.487902][ T9619] ? clear_bhb_loop+0x40/0x90 [ 1715.487923][ T9619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.487939][ T9619] RIP: 0033:0x7f172fb9bf79 [ 1715.487956][ T9619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.487970][ T9619] RSP: 002b:00007f17309e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1715.487990][ T9619] RAX: ffffffffffffffda RBX: 00007f172fe15fa0 RCX: 00007f172fb9bf79 [ 1715.488007][ T9619] RDX: 0000000000000022 RSI: 0000200000001bc0 RDI: 000000000000000a [ 1715.488017][ T9619] RBP: 00007f17309e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.488028][ T9619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1715.488037][ T9619] R13: 00007f172fe16038 R14: 00007f172fe15fa0 R15: 00007ffd3f997468 [ 1715.488066][ T9619] [ 1715.883528][ T9614] wlan1 speed is unknown, defaulting to 1000 [ 1716.002218][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25811'. [ 1716.056067][ T9623] netlink: 64 bytes leftover after parsing attributes in process `syz.3.25811'. [ 1716.096206][ T9614] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1716.105878][ T9626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25813'. [ 1716.129852][ T9627] netlink: 68 bytes leftover after parsing attributes in process `syz.4.25814'. [ 1716.230666][ T9629] sctp: [Deprecated]: syz.0.25815 (pid 9629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1716.230666][ T9629] Use struct sctp_sack_info instead [ 1716.247480][ T9631] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.25816'. [ 1716.247729][ T9629] sctp: [Deprecated]: syz.0.25815 (pid 9629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1716.247729][ T9629] Use struct sctp_sack_info instead [ 1716.274022][ T9633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25817'. [ 1716.297473][ T9629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25815'. [ 1716.335038][ T9633] syzkaller0: entered promiscuous mode [ 1716.348924][ T9633] syzkaller0: entered allmulticast mode [ 1716.363884][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.386822][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25818'. [ 1716.550812][ T9639] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1716.642825][ T9650] FAULT_INJECTION: forcing a failure. [ 1716.642825][ T9650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.674577][ T9650] CPU: 1 UID: 0 PID: 9650 Comm: syz.3.25824 Not tainted syzkaller #0 PREEMPT(full) [ 1716.674603][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1716.674614][ T9650] Call Trace: [ 1716.674622][ T9650] [ 1716.674630][ T9650] dump_stack_lvl+0xe8/0x150 [ 1716.674659][ T9650] should_fail_ex+0x412/0x560 [ 1716.674687][ T9650] _copy_from_user+0x2d/0xb0 [ 1716.674706][ T9650] ___sys_recvmsg+0x175/0x590 [ 1716.674735][ T9650] ? __pfx____sys_recvmsg+0x10/0x10 [ 1716.674761][ T9650] ? __fget_files+0x2a/0x420 [ 1716.674810][ T9650] do_recvmmsg+0x334/0x800 [ 1716.674840][ T9650] ? __pfx_do_recvmmsg+0x10/0x10 [ 1716.674869][ T9650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1716.674907][ T9650] __x64_sys_recvmmsg+0x198/0x250 [ 1716.674932][ T9650] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1716.674965][ T9650] do_syscall_64+0x14d/0xf80 [ 1716.674986][ T9650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.675003][ T9650] ? trace_irq_disable+0x37/0x100 [ 1716.675021][ T9650] ? clear_bhb_loop+0x40/0x90 [ 1716.675042][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.675059][ T9650] RIP: 0033:0x7fbed499bf79 [ 1716.675075][ T9650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.675089][ T9650] RSP: 002b:00007fbed5791028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1716.675108][ T9650] RAX: ffffffffffffffda RBX: 00007fbed4c15fa0 RCX: 00007fbed499bf79 [ 1716.675126][ T9650] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 1716.675138][ T9650] RBP: 00007fbed5791090 R08: 0000000000000000 R09: 0000000000000000 [ 1716.675157][ T9650] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1716.675168][ T9650] R13: 00007fbed4c16038 R14: 00007fbed4c15fa0 R15: 00007ffe7dbc1f58 [ 1716.675199][ T9650] [ 1716.891542][ T9649] tipc: Resetting bearer [ 1716.967248][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 1716.975334][ C0] lec:lec_tx_timeout: lec0 [ 1717.032321][ T9663] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1717.071784][ T9667] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1717.117626][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25828'. [ 1717.175382][ T9658] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1717.203133][ T9672] bond15: option arp_interval: invalid value (18446744072937799682) [ 1717.212551][ T9672] bond15: option arp_interval: allowed values 0 - 2147483647 [ 1717.226717][ T9672] bond15 (unregistering): Released all slaves [ 1717.314804][ T9662] lo speed is unknown, defaulting to 1000 [ 1717.326967][ T9662] wg1 speed is unknown, defaulting to 1000 [ 1717.363636][ T9662] lo speed is unknown, defaulting to 1000 [ 1717.443332][ T9683] netlink: 'syz.1.25834': attribute type 1 has an invalid length. [ 1717.604146][ T9688] netlink: 'syz.3.25837': attribute type 3 has an invalid length. [ 1717.632971][ T9691] syzkaller0: entered promiscuous mode [ 1717.643272][ T9691] syzkaller0: entered allmulticast mode [ 1717.725609][ T9693] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1717.753402][ T9662] wlan1 speed is unknown, defaulting to 1000 [ 1717.781840][ T9696] lo speed is unknown, defaulting to 1000 [ 1717.814338][ T9696] wg1 speed is unknown, defaulting to 1000 [ 1717.815448][ T9699] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1717.824052][ T9696] lo speed is unknown, defaulting to 1000 [ 1717.963304][ T9710] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1717.965422][ T9703] syzkaller0: entered promiscuous mode [ 1717.982756][ T9703] syzkaller0: entered allmulticast mode [ 1718.023251][ T9701] netlink: 'syz.2.25840': attribute type 1 has an invalid length. [ 1718.104518][ T9701] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1718.142858][ T9701] netlink: 'syz.2.25840': attribute type 20 has an invalid length. [ 1718.170790][ T9709] bond22: (slave syz_tun): Enslaving as an active interface with a down link [ 1718.218830][ T9696] wlan1 speed is unknown, defaulting to 1000 [ 1718.582552][ T9729] FAULT_INJECTION: forcing a failure. [ 1718.582552][ T9729] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.637872][ T9729] CPU: 1 UID: 0 PID: 9729 Comm: syz.1.25847 Not tainted syzkaller #0 PREEMPT(full) [ 1718.637897][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1718.637907][ T9729] Call Trace: [ 1718.637915][ T9729] [ 1718.637928][ T9729] dump_stack_lvl+0xe8/0x150 [ 1718.637956][ T9729] should_fail_ex+0x412/0x560 [ 1718.637985][ T9729] should_failslab+0xa8/0x100 [ 1718.638010][ T9729] __kmalloc_noprof+0xe8/0x760 [ 1718.638031][ T9729] ? bpf_test_init+0x9f/0x150 [ 1718.638053][ T9729] bpf_test_init+0x9f/0x150 [ 1718.638075][ T9729] bpf_prog_test_run_xdp+0x529/0x1160 [ 1718.638107][ T9729] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1718.638130][ T9729] ? __fget_files+0x2a/0x420 [ 1718.638154][ T9729] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1718.638173][ T9729] bpf_prog_test_run+0x2c7/0x340 [ 1718.638199][ T9729] __sys_bpf+0x643/0x950 [ 1718.638220][ T9729] ? __pfx___sys_bpf+0x10/0x10 [ 1718.638256][ T9729] ? ksys_write+0x242/0x270 [ 1718.638278][ T9729] ? __pfx_ksys_write+0x10/0x10 [ 1718.638305][ T9729] __x64_sys_bpf+0x7c/0x90 [ 1718.638323][ T9729] do_syscall_64+0x14d/0xf80 [ 1718.638344][ T9729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.638361][ T9729] ? trace_irq_disable+0x37/0x100 [ 1718.638379][ T9729] ? clear_bhb_loop+0x40/0x90 [ 1718.638399][ T9729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.638415][ T9729] RIP: 0033:0x7f172fb9bf79 [ 1718.638433][ T9729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.638447][ T9729] RSP: 002b:00007f17309e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1718.638466][ T9729] RAX: ffffffffffffffda RBX: 00007f172fe15fa0 RCX: 00007f172fb9bf79 [ 1718.638479][ T9729] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1718.638491][ T9729] RBP: 00007f17309e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.638502][ T9729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1718.638512][ T9729] R13: 00007f172fe16038 R14: 00007f172fe15fa0 R15: 00007ffd3f997468 [ 1718.638543][ T9729] [ 1718.986147][ T9748] netlink: 'syz.4.25857': attribute type 4 has an invalid length. [ 1719.035504][ T9753] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1719.038873][ T9750] syzkaller0: entered promiscuous mode [ 1719.047530][ T9750] syzkaller0: entered allmulticast mode [ 1719.223461][ T9752] vlan4: entered promiscuous mode [ 1719.230307][ T9752] ..1ªî{X¹¦: entered promiscuous mode [ 1719.273165][ T9751] vlan4: left promiscuous mode [ 1719.283357][ T9751] ..1ªî{X¹¦: left promiscuous mode [ 1719.468557][ T9771] FAULT_INJECTION: forcing a failure. [ 1719.468557][ T9771] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.504634][ T9771] CPU: 0 UID: 0 PID: 9771 Comm: syz.2.25865 Not tainted syzkaller #0 PREEMPT(full) [ 1719.504660][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1719.504672][ T9771] Call Trace: [ 1719.504679][ T9771] [ 1719.504688][ T9771] dump_stack_lvl+0xe8/0x150 [ 1719.504715][ T9771] should_fail_ex+0x412/0x560 [ 1719.504744][ T9771] should_failslab+0xa8/0x100 [ 1719.504769][ T9771] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1719.504791][ T9771] ? __alloc_skb+0x186/0x7d0 [ 1719.504809][ T9771] ? __alloc_skb+0x1d0/0x7d0 [ 1719.504825][ T9771] ? __local_bh_enable_ip+0xd0/0x130 [ 1719.504849][ T9771] __alloc_skb+0x1d0/0x7d0 [ 1719.504873][ T9771] netlink_sendmsg+0x5d4/0xb40 [ 1719.504902][ T9771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1719.504922][ T9771] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1719.504945][ T9771] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1719.504970][ T9771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1719.504986][ T9771] ____sys_sendmsg+0xa68/0xad0 [ 1719.505008][ T9771] ? __might_fault+0xaf/0x130 [ 1719.505034][ T9771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1719.505071][ T9771] ? import_iovec+0x73/0xa0 [ 1719.505094][ T9771] ___sys_sendmsg+0x2a5/0x360 [ 1719.505117][ T9771] ? __lock_acquire+0x6b5/0x2cf0 [ 1719.505140][ T9771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1719.505197][ T9771] ? __fget_files+0x2a/0x420 [ 1719.505214][ T9771] ? __fget_files+0x3a0/0x420 [ 1719.505242][ T9771] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1719.505265][ T9771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1719.505296][ T9771] ? __pfx_ksys_write+0x10/0x10 [ 1719.505328][ T9771] do_syscall_64+0x14d/0xf80 [ 1719.505349][ T9771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.505367][ T9771] ? trace_irq_disable+0x37/0x100 [ 1719.505385][ T9771] ? clear_bhb_loop+0x40/0x90 [ 1719.505406][ T9771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.505424][ T9771] RIP: 0033:0x7feedb59bf79 [ 1719.505441][ T9771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1719.505455][ T9771] RSP: 002b:00007feedc543028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1719.505475][ T9771] RAX: ffffffffffffffda RBX: 00007feedb815fa0 RCX: 00007feedb59bf79 [ 1719.505487][ T9771] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1719.505499][ T9771] RBP: 00007feedc543090 R08: 0000000000000000 R09: 0000000000000000 [ 1719.505510][ T9771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1719.505520][ T9771] R13: 00007feedb816038 R14: 00007feedb815fa0 R15: 00007ffe5493da98 [ 1719.505551][ T9771] [ 1719.918433][ T9776] lo speed is unknown, defaulting to 1000 [ 1719.922441][ T9786] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1719.926507][ T9776] wg1 speed is unknown, defaulting to 1000 [ 1719.943183][ T9776] lo speed is unknown, defaulting to 1000 [ 1720.005614][ T9786] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1720.067809][ T9795] syzkaller0: entered promiscuous mode [ 1720.073573][ T9795] syzkaller0: entered allmulticast mode [ 1720.302875][ T9776] wlan1 speed is unknown, defaulting to 1000 [ 1720.375371][ T9809] __nla_validate_parse: 16 callbacks suppressed [ 1720.375393][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25877'. [ 1720.496939][ T9817] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1720.504853][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25882'. [ 1720.580475][ T9812] tunl0: Caught tx_queue_len zero misconfig [ 1720.609335][ T9824] netlink: 292 bytes leftover after parsing attributes in process `syz.3.25884'. [ 1720.626218][ T30] audit: type=1804 audit(1771305340.864:147): pid=9824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.25884" name="/newroot/5229/memory.events" dev="tmpfs" ino=26526 res=1 errno=0 [ 1720.677214][ T30] audit: type=1800 audit(1771305340.894:148): pid=9824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.25884" name="memory.events" dev="tmpfs" ino=26526 res=0 errno=0 [ 1720.734771][ T9831] netlink: 'syz.2.25887': attribute type 1 has an invalid length. [ 1720.758911][ T9833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.25888'. [ 1720.769640][ T9826] xt_CT: No such helper "syz0" [ 1720.896752][ T9833] syzkaller0: entered promiscuous mode [ 1720.930640][ T9833] syzkaller0: entered allmulticast mode [ 1721.210248][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25895'. [ 1721.574283][ T9864] syzkaller0: entered promiscuous mode [ 1721.587905][ T9864] syzkaller0: entered allmulticast mode [ 1721.711544][ T9869] netlink: 'syz.4.25901': attribute type 15 has an invalid length. [ 1721.782253][ T9875] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25904'. [ 1721.814297][ T9878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25905'. [ 1721.817854][ T9875] syzkaller0: entered promiscuous mode [ 1721.829729][ T9875] syzkaller0: entered allmulticast mode [ 1721.906148][ T9879] bond22: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1721.908831][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.25906'. [ 1721.945032][ T9879] bond22 (unregistering): Released all slaves [ 1722.032366][ T9878] bond23: option arp_interval: invalid value (18446744072937799682) [ 1722.040876][ T9878] bond23: option arp_interval: allowed values 0 - 2147483647 [ 1722.052518][ T9878] bond23 (unregistering): Released all slaves [ 1722.065251][ T9891] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1722.115569][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25906'. [ 1722.128180][ T9879] tipc: Enabling of bearer rejected, failed to enable media [ 1722.139144][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25907'. [ 1722.156797][ T9886] lo speed is unknown, defaulting to 1000 [ 1722.228233][ T9886] wg1 speed is unknown, defaulting to 1000 [ 1722.275146][ T9895] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1722.295471][ T9886] lo speed is unknown, defaulting to 1000 [ 1722.635974][ T9913] netlink: 'syz.1.25916': attribute type 3 has an invalid length. [ 1722.653781][ T9912] syzkaller0: entered promiscuous mode [ 1722.677287][ T9912] syzkaller0: entered allmulticast mode [ 1722.699749][ T9886] wlan1 speed is unknown, defaulting to 1000 [ 1723.020619][ T9925] FAULT_INJECTION: forcing a failure. [ 1723.020619][ T9925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1723.035065][ T9924] syzkaller0: entered promiscuous mode [ 1723.046377][ T9925] CPU: 1 UID: 0 PID: 9925 Comm: syz.1.25921 Not tainted syzkaller #0 PREEMPT(full) [ 1723.046401][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1723.046412][ T9925] Call Trace: [ 1723.046420][ T9925] [ 1723.046428][ T9925] dump_stack_lvl+0xe8/0x150 [ 1723.046456][ T9925] should_fail_ex+0x412/0x560 [ 1723.046484][ T9925] _copy_from_user+0x2d/0xb0 [ 1723.046504][ T9925] ___sys_recvmsg+0x175/0x590 [ 1723.046532][ T9925] ? __pfx____sys_recvmsg+0x10/0x10 [ 1723.046558][ T9925] ? __fget_files+0x2a/0x420 [ 1723.046605][ T9925] do_recvmmsg+0x334/0x800 [ 1723.046635][ T9925] ? __pfx_do_recvmmsg+0x10/0x10 [ 1723.046669][ T9925] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1723.046708][ T9925] __x64_sys_recvmmsg+0x198/0x250 [ 1723.046732][ T9925] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1723.046773][ T9925] do_syscall_64+0x14d/0xf80 [ 1723.046793][ T9925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.046810][ T9925] ? trace_irq_disable+0x37/0x100 [ 1723.046829][ T9925] ? clear_bhb_loop+0x40/0x90 [ 1723.046849][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.046866][ T9925] RIP: 0033:0x7f172fb9bf79 [ 1723.046882][ T9925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.046896][ T9925] RSP: 002b:00007f17309e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1723.046913][ T9925] RAX: ffffffffffffffda RBX: 00007f172fe15fa0 RCX: 00007f172fb9bf79 [ 1723.046924][ T9925] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 1723.046934][ T9925] RBP: 00007f17309e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.046945][ T9925] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1723.046954][ T9925] R13: 00007f172fe16038 R14: 00007f172fe15fa0 R15: 00007ffd3f997468 [ 1723.046981][ T9925] [ 1723.047276][ T9924] syzkaller0: entered allmulticast mode [ 1723.763364][ T9959] tipc: Enabled bearer , priority 0 [ 1723.773480][ T9959] tipc: Resetting bearer [ 1723.785085][ T9956] tipc: Disabling bearer [ 1723.891298][ T9969] FAULT_INJECTION: forcing a failure. [ 1723.891298][ T9969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1723.912613][ T9973] netlink: 'syz.3.25937': attribute type 1 has an invalid length. [ 1723.986304][ T9973] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1723.992005][ T9969] CPU: 0 UID: 0 PID: 9969 Comm: syz.4.25934 Not tainted syzkaller #0 PREEMPT(full) [ 1723.992031][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1723.992042][ T9969] Call Trace: [ 1723.992050][ T9969] [ 1723.992057][ T9969] dump_stack_lvl+0xe8/0x150 [ 1723.992085][ T9969] should_fail_ex+0x412/0x560 [ 1723.992112][ T9969] _copy_from_iter+0x1d3/0x1670 [ 1723.992145][ T9969] ? rcu_is_watching+0x15/0xb0 [ 1723.992164][ T9969] ? __pfx__copy_from_iter+0x10/0x10 [ 1723.992184][ T9969] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1723.992214][ T9969] ? netlink_sendmsg+0x650/0xb40 [ 1723.992230][ T9969] ? skb_put+0x11b/0x210 [ 1723.992252][ T9969] netlink_sendmsg+0x6c0/0xb40 [ 1723.992278][ T9969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1723.992299][ T9969] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1723.992323][ T9969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1723.992347][ T9969] sock_write_iter+0x503/0x550 [ 1723.992373][ T9969] ? __pfx_sock_write_iter+0x10/0x10 [ 1723.992404][ T9969] ? bpf_lsm_file_permission+0x9/0x20 [ 1723.992426][ T9969] ? security_file_permission+0x75/0x260 [ 1723.992453][ T9969] vfs_write+0x61d/0xb90 [ 1723.992487][ T9969] ? __pfx_vfs_write+0x10/0x10 [ 1723.992516][ T9969] ? __fget_files+0x2a/0x420 [ 1723.992542][ T9969] ksys_write+0x150/0x270 [ 1723.992564][ T9969] ? __pfx_ksys_write+0x10/0x10 [ 1723.992594][ T9969] do_syscall_64+0x14d/0xf80 [ 1723.992614][ T9969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.992631][ T9969] ? trace_irq_disable+0x37/0x100 [ 1723.992649][ T9969] ? clear_bhb_loop+0x40/0x90 [ 1723.992670][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.992685][ T9969] RIP: 0033:0x7f412279bf79 [ 1723.992701][ T9969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.992715][ T9969] RSP: 002b:00007f412367b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1723.992734][ T9969] RAX: ffffffffffffffda RBX: 00007f4122a15fa0 RCX: 00007f412279bf79 [ 1723.992748][ T9969] RDX: 000000000000033a RSI: 0000200000000040 RDI: 0000000000000003 [ 1723.992759][ T9969] RBP: 00007f412367b090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.992770][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.992781][ T9969] R13: 00007f4122a16038 R14: 00007f4122a15fa0 R15: 00007fff72cb5b28 [ 1723.992810][ T9969] [ 1724.037987][ T9971] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1724.273629][ T9977] bond23: (slave veth29): Enslaving as an active interface with a down link [ 1724.322888][ T9973] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1724.330760][ T9973] bond23: (slave batadv5): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1724.549782][ T9996] syzkaller0: entered promiscuous mode [ 1724.567388][ T9996] syzkaller0: entered allmulticast mode [ 1724.720228][T10013] netlink: 'syz.0.25951': attribute type 20 has an invalid length. [ 1725.114416][T10032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1725.121715][T10032] IPv6: NLM_F_CREATE should be set when creating new route [ 1725.330072][T16616] wg1 speed is unknown, defaulting to 1000 [ 1725.346013][T15480] wlan1 speed is unknown, defaulting to 1000 [ 1725.494117][T10054] __nla_validate_parse: 9 callbacks suppressed [ 1725.494139][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25968'. [ 1725.524849][T10057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25969'. [ 1725.774128][T10077] netlink: 'syz.2.25978': attribute type 1 has an invalid length. [ 1725.782368][T10077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25978'. [ 1726.238602][T10104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1726.509763][T10123] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25993'. [ 1726.536092][T10123] syzkaller0: entered promiscuous mode [ 1726.557335][T10123] syzkaller0: entered allmulticast mode [ 1726.605723][T10126] "syz.1.25994" (10126) uses obsolete ecb(arc4) skcipher [ 1726.615395][T10124] lo speed is unknown, defaulting to 1000 [ 1726.629672][T10124] wg1 speed is unknown, defaulting to 1000 [ 1726.638011][T10124] lo speed is unknown, defaulting to 1000 [ 1726.951786][T10143] bond20: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1727.029040][T10143] bond20 (unregistering): Released all slaves [ 1727.218416][T10124] wlan1 speed is unknown, defaulting to 1000 [ 1727.369000][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26002'. [ 1727.494232][T10167] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26005'. [ 1727.569658][T10167] syzkaller0: entered promiscuous mode [ 1727.575179][T10167] syzkaller0: entered allmulticast mode [ 1727.674522][T10169] A link change request failed with some changes committed already. Interface veth2 may have been left with an inconsistent configuration, please check. [ 1727.702349][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26009'. [ 1728.016261][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26014'. [ 1728.165338][T10193] FAULT_INJECTION: forcing a failure. [ 1728.165338][T10193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.178988][T10193] CPU: 1 UID: 0 PID: 10193 Comm: syz.0.26016 Not tainted syzkaller #0 PREEMPT(full) [ 1728.179021][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1728.179032][T10193] Call Trace: [ 1728.179039][T10193] [ 1728.179047][T10193] dump_stack_lvl+0xe8/0x150 [ 1728.179075][T10193] should_fail_ex+0x412/0x560 [ 1728.179104][T10193] _copy_from_user+0x2d/0xb0 [ 1728.179124][T10193] bpf_test_init+0xd8/0x150 [ 1728.179146][T10193] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 1728.179178][T10193] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1728.179200][T10193] ? __fget_files+0x2a/0x420 [ 1728.179221][T10193] ? __fget_files+0x2a/0x420 [ 1728.179236][T10193] ? __fget_files+0x3a0/0x420 [ 1728.179252][T10193] ? __fget_files+0x2a/0x420 [ 1728.179273][T10193] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1728.179293][T10193] bpf_prog_test_run+0x2c7/0x340 [ 1728.179319][T10193] __sys_bpf+0x643/0x950 [ 1728.179339][T10193] ? __pfx___sys_bpf+0x10/0x10 [ 1728.179374][T10193] ? ksys_write+0x242/0x270 [ 1728.179397][T10193] ? __pfx_ksys_write+0x10/0x10 [ 1728.179424][T10193] __x64_sys_bpf+0x7c/0x90 [ 1728.179442][T10193] do_syscall_64+0x14d/0xf80 [ 1728.179464][T10193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.179477][T10193] ? trace_irq_disable+0x37/0x100 [ 1728.179492][T10193] ? clear_bhb_loop+0x40/0x90 [ 1728.179512][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.179528][T10193] RIP: 0033:0x7f0add99bf79 [ 1728.179544][T10193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.179560][T10193] RSP: 002b:00007f0ade8f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1728.179579][T10193] RAX: ffffffffffffffda RBX: 00007f0addc15fa0 RCX: 00007f0add99bf79 [ 1728.179592][T10193] RDX: 0000000000000014 RSI: 0000200000001a80 RDI: 000000000000000a [ 1728.179604][T10193] RBP: 00007f0ade8f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.179616][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.179625][T10193] R13: 00007f0addc16038 R14: 00007f0addc15fa0 R15: 00007fff6832b7a8 [ 1728.179653][T10193] [ 1728.504828][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26020'. [ 1728.637760][T10206] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26022'. [ 1728.678780][T10206] syzkaller0: entered promiscuous mode [ 1728.684404][T10206] syzkaller0: entered allmulticast mode [ 1728.839988][T10215] netlink: 'syz.1.26024': attribute type 3 has an invalid length. [ 1728.845984][T10214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1729.005957][T10224] FAULT_INJECTION: forcing a failure. [ 1729.005957][T10224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.019792][T10224] CPU: 0 UID: 0 PID: 10224 Comm: syz.2.26030 Not tainted syzkaller #0 PREEMPT(full) [ 1729.019818][T10224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1729.019829][T10224] Call Trace: [ 1729.019837][T10224] [ 1729.019845][T10224] dump_stack_lvl+0xe8/0x150 [ 1729.019872][T10224] should_fail_ex+0x412/0x560 [ 1729.019901][T10224] _copy_from_user+0x2d/0xb0 [ 1729.019930][T10224] ___sys_recvmsg+0x175/0x590 [ 1729.019958][T10224] ? __pfx____sys_recvmsg+0x10/0x10 [ 1729.019984][T10224] ? __fget_files+0x2a/0x420 [ 1729.020031][T10224] do_recvmmsg+0x334/0x800 [ 1729.020060][T10224] ? __pfx_do_recvmmsg+0x10/0x10 [ 1729.020092][T10224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1729.020132][T10224] __x64_sys_recvmmsg+0x198/0x250 [ 1729.020156][T10224] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1729.020187][T10224] do_syscall_64+0x14d/0xf80 [ 1729.020209][T10224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.020226][T10224] ? trace_irq_disable+0x37/0x100 [ 1729.020244][T10224] ? clear_bhb_loop+0x40/0x90 [ 1729.020264][T10224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.020281][T10224] RIP: 0033:0x7feedb59bf79 [ 1729.020297][T10224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.020312][T10224] RSP: 002b:00007feedc543028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1729.020331][T10224] RAX: ffffffffffffffda RBX: 00007feedb815fa0 RCX: 00007feedb59bf79 [ 1729.020344][T10224] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 1729.020356][T10224] RBP: 00007feedc543090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.020368][T10224] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 1729.020379][T10224] R13: 00007feedb816038 R14: 00007feedb815fa0 R15: 00007ffe5493da98 [ 1729.020409][T10224] [ 1729.319421][T10219] netlink: 'syz.4.26029': attribute type 6 has an invalid length. [ 1729.328649][T10219] netlink: 'syz.4.26029': attribute type 6 has an invalid length. [ 1729.596497][T10249] FAULT_INJECTION: forcing a failure. [ 1729.596497][T10249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.627360][T10253] C: renamed from team_slave_0 [ 1729.632299][T10249] CPU: 0 UID: 0 PID: 10249 Comm: syz.2.26038 Not tainted syzkaller #0 PREEMPT(full) [ 1729.632320][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1729.632330][T10249] Call Trace: [ 1729.632337][T10249] [ 1729.632344][T10249] dump_stack_lvl+0xe8/0x150 [ 1729.632371][T10249] should_fail_ex+0x412/0x560 [ 1729.632399][T10249] _copy_from_user+0x2d/0xb0 [ 1729.632418][T10249] ___sys_sendmsg+0x1c6/0x360 [ 1729.632438][T10249] ? __lock_acquire+0x6b5/0x2cf0 [ 1729.632461][T10249] ? __pfx____sys_sendmsg+0x10/0x10 [ 1729.632514][T10249] ? __fget_files+0x2a/0x420 [ 1729.632532][T10249] ? __fget_files+0x3a0/0x420 [ 1729.632557][T10249] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1729.632581][T10249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1729.632611][T10249] ? __pfx_ksys_write+0x10/0x10 [ 1729.632644][T10249] do_syscall_64+0x14d/0xf80 [ 1729.632664][T10249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.632680][T10249] ? trace_irq_disable+0x37/0x100 [ 1729.632696][T10249] ? clear_bhb_loop+0x40/0x90 [ 1729.632716][T10249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.632732][T10249] RIP: 0033:0x7feedb59bf79 [ 1729.632747][T10249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.632761][T10249] RSP: 002b:00007feedc543028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1729.632778][T10249] RAX: ffffffffffffffda RBX: 00007feedb815fa0 RCX: 00007feedb59bf79 [ 1729.632790][T10249] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 1729.632799][T10249] RBP: 00007feedc543090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.632815][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.632821][T10249] R13: 00007feedb816038 R14: 00007feedb815fa0 R15: 00007ffe5493da98 [ 1729.632838][T10249] [ 1729.873206][T10251] syzkaller0: entered promiscuous mode [ 1729.880388][T10258] netlink: 'syz.0.26042': attribute type 9 has an invalid length. [ 1729.902133][T10251] syzkaller0: entered allmulticast mode [ 1730.111561][T16616] lo speed is unknown, defaulting to 1000 [ 1730.155501][T10266] syzkaller0: entered promiscuous mode [ 1730.163803][T10266] syzkaller0: entered allmulticast mode [ 1730.335079][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1730.342240][ T1296] aoe: packet could not be sent on bridge1. consider increasing tx_queue_len [ 1730.896132][ T30] audit: type=1800 audit(1771305351.134:149): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.26054" name="memory.events" dev="tmpfs" ino=26654 res=0 errno=0 [ 1730.960647][T10309] __nla_validate_parse: 10 callbacks suppressed [ 1730.960666][T10309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26060'. [ 1730.994549][T10309] syzkaller0: entered promiscuous mode [ 1731.006836][T10309] syzkaller0: entered allmulticast mode [ 1731.356790][T10322] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1731.477986][T10331] netlink: 'syz.4.26068': attribute type 3 has an invalid length. [ 1731.485912][T10331] netlink: 3 bytes leftover after parsing attributes in process `syz.4.26068'. [ 1731.531887][T10325] tipc: Resetting bearer [ 1731.723983][T10348] netlink: 40 bytes leftover after parsing attributes in process `syz.1.26073'. [ 1731.785322][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26074'. [ 1731.870737][T10354] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.26075'. [ 1732.194700][ T30] audit: type=1800 audit(1771305352.434:150): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.26076" name="memory.events" dev="tmpfs" ino=27164 res=0 errno=0 [ 1732.292834][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26078'. [ 1732.333244][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26079'. [ 1732.347668][T10367] netlink: 36 bytes leftover after parsing attributes in process `syz.0.26080'. [ 1732.356995][T10367] netlink: 36 bytes leftover after parsing attributes in process `syz.0.26080'. [ 1732.368249][T10367] netlink: 36 bytes leftover after parsing attributes in process `syz.0.26080'. [ 1733.019232][T10418] netlink: 'syz.1.26100': attribute type 9 has an invalid length. [ 1733.156394][T10422] tipc: Resetting bearer [ 1733.630444][T10453] netlink: 'syz.0.26111': attribute type 3 has an invalid length. [ 1733.793825][ T30] audit: type=1800 audit(1771305354.034:151): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.26105" name="memory.events" dev="tmpfs" ino=26144 res=0 errno=0 [ 1733.931968][T10468] FAULT_INJECTION: forcing a failure. [ 1733.931968][T10468] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1733.946972][T10468] CPU: 1 UID: 0 PID: 10468 Comm: syz.0.26117 Not tainted syzkaller #0 PREEMPT(full) [ 1733.946997][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1733.947008][T10468] Call Trace: [ 1733.947015][T10468] [ 1733.947023][T10468] dump_stack_lvl+0xe8/0x150 [ 1733.947050][T10468] should_fail_ex+0x412/0x560 [ 1733.947078][T10468] prepare_alloc_pages+0x22a/0x650 [ 1733.947107][T10468] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1733.947136][T10468] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1733.947160][T10468] ? __pfx_policy_nodemask+0x10/0x10 [ 1733.947188][T10468] alloc_pages_mpol+0x232/0x4a0 [ 1733.947214][T10468] folio_alloc_mpol_noprof+0x39/0x70 [ 1733.947239][T10468] shmem_alloc_and_add_folio+0x445/0xf80 [ 1733.947263][T10468] ? filemap_get_entry+0xca/0x320 [ 1733.947284][T10468] ? filemap_get_entry+0xca/0x320 [ 1733.947305][T10468] ? filemap_get_entry+0x2ac/0x320 [ 1733.947324][T10468] ? __pfx_filemap_get_entry+0x10/0x10 [ 1733.947345][T10468] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1733.947365][T10468] ? filemap_map_pages+0x1bbe/0x2000 [ 1733.947385][T10468] ? shmem_allowable_huge_orders+0x1bb/0x690 [ 1733.947420][T10468] shmem_get_folio_gfp+0x5a9/0x1670 [ 1733.947458][T10468] shmem_fault+0x179/0x390 [ 1733.947484][T10468] __do_fault+0x138/0x390 [ 1733.947506][T10468] do_pte_missing+0x21a2/0x37a0 [ 1733.947525][T10468] ? do_pte_missing+0x1258/0x37a0 [ 1733.947554][T10468] ? handle_mm_fault+0xee/0x32a0 [ 1733.947575][T10468] handle_mm_fault+0x1b8c/0x32a0 [ 1733.947605][T10468] ? handle_mm_fault+0xee/0x32a0 [ 1733.947628][T10468] ? __pfx_handle_mm_fault+0x10/0x10 [ 1733.947647][T10468] ? follow_page_pte+0x825/0x1460 [ 1733.947673][T10468] ? __pfx_follow_page_pte+0x10/0x10 [ 1733.947702][T10468] __get_user_pages+0x165b/0x29d0 [ 1733.947750][T10468] populate_vma_page_range+0x2be/0x3c0 [ 1733.947771][T10468] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1733.947793][T10468] ? down_read+0x272/0x2e0 [ 1733.947812][T10468] ? __mm_populate+0x173/0x390 [ 1733.947832][T10468] __mm_populate+0x25f/0x390 [ 1733.947852][T10468] ? __pfx___mm_populate+0x10/0x10 [ 1733.947878][T10468] vm_mmap_pgoff+0x3aa/0x4f0 [ 1733.947901][T10468] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1733.947917][T10468] ? ksys_write+0x242/0x270 [ 1733.947938][T10468] ? __pfx_ksys_write+0x10/0x10 [ 1733.947960][T10468] ? ksys_mmap_pgoff+0xf3/0x760 [ 1733.947978][T10468] ? __x64_sys_mmap+0x7f/0x140 [ 1733.948001][T10468] do_syscall_64+0x14d/0xf80 [ 1733.948019][T10468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.948034][T10468] ? trace_irq_disable+0x37/0x100 [ 1733.948052][T10468] ? clear_bhb_loop+0x40/0x90 [ 1733.948073][T10468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.948090][T10468] RIP: 0033:0x7f0add99bf79 [ 1733.948107][T10468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1733.948122][T10468] RSP: 002b:00007f0ade8f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1733.948141][T10468] RAX: ffffffffffffffda RBX: 00007f0addc15fa0 RCX: 00007f0add99bf79 [ 1733.948155][T10468] RDX: 0000000002000004 RSI: 0000000000c00000 RDI: 0000200000001000 [ 1733.948167][T10468] RBP: 00007f0ade8f9090 R08: ffffffffffffffff R09: 0000000000000000 [ 1733.948179][T10468] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000002 [ 1733.948189][T10468] R13: 00007f0addc16038 R14: 00007f0addc15fa0 R15: 00007fff6832b7a8 [ 1733.948221][T10468] [ 1734.053800][T10478] bond0: left promiscuous mode [ 1734.323865][T10478] bond19: left promiscuous mode [ 1734.330453][T10478] geneve7: left promiscuous mode [ 1734.641541][T10493] FAULT_INJECTION: forcing a failure. [ 1734.641541][T10493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.693380][T10493] CPU: 1 UID: 0 PID: 10493 Comm: syz.1.26126 Not tainted syzkaller #0 PREEMPT(full) [ 1734.693407][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1734.693417][T10493] Call Trace: [ 1734.693425][T10493] [ 1734.693433][T10493] dump_stack_lvl+0xe8/0x150 [ 1734.693461][T10493] should_fail_ex+0x412/0x560 [ 1734.693489][T10493] _copy_from_iter+0x1d3/0x1670 [ 1734.693521][T10493] ? rcu_is_watching+0x15/0xb0 [ 1734.693543][T10493] ? __pfx__copy_from_iter+0x10/0x10 [ 1734.693583][T10493] ? netlink_sendmsg+0x650/0xb40 [ 1734.693602][T10493] ? skb_put+0x11b/0x210 [ 1734.693624][T10493] netlink_sendmsg+0x6c0/0xb40 [ 1734.693651][T10493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1734.693672][T10493] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1734.693696][T10493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1734.693720][T10493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1734.693737][T10493] ____sys_sendmsg+0xa68/0xad0 [ 1734.693757][T10493] ? __might_fault+0xaf/0x130 [ 1734.693783][T10493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1734.693813][T10493] ? import_iovec+0x73/0xa0 [ 1734.693835][T10493] ___sys_sendmsg+0x2a5/0x360 [ 1734.693854][T10493] ? __lock_acquire+0x6b5/0x2cf0 [ 1734.693877][T10493] ? __pfx____sys_sendmsg+0x10/0x10 [ 1734.693928][T10493] ? __fget_files+0x2a/0x420 [ 1734.693941][T10493] ? __fget_files+0x3a0/0x420 [ 1734.693961][T10493] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1734.693982][T10493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1734.694012][T10493] ? __pfx_ksys_write+0x10/0x10 [ 1734.694044][T10493] do_syscall_64+0x14d/0xf80 [ 1734.694067][T10493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.694083][T10493] ? trace_irq_disable+0x37/0x100 [ 1734.694102][T10493] ? clear_bhb_loop+0x40/0x90 [ 1734.694122][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.694139][T10493] RIP: 0033:0x7f172fb9bf79 [ 1734.694156][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.694170][T10493] RSP: 002b:00007f17309e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1734.694190][T10493] RAX: ffffffffffffffda RBX: 00007f172fe15fa0 RCX: 00007f172fb9bf79 [ 1734.694203][T10493] RDX: 000000002004c080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1734.694216][T10493] RBP: 00007f17309e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1734.694227][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.694238][T10493] R13: 00007f172fe16038 R14: 00007f172fe15fa0 R15: 00007ffd3f997468 [ 1734.694268][T10493] [ 1734.997386][T10502] syzkaller0: entered promiscuous mode [ 1735.002908][T10502] syzkaller0: entered allmulticast mode [ 1735.449466][ C1] ------------[ cut here ]------------ [ 1735.455492][ C1] ODEBUG: free active (active state 0) object: ffff88809fdde890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 1735.468447][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz.3.26124/10494 [ 1735.479331][ C1] Modules linked in: [ 1735.483600][ C1] CPU: 1 UID: 0 PID: 10494 Comm: syz.3.26124 Not tainted syzkaller #0 PREEMPT(full) [ 1735.493120][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1735.503234][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1735.509630][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1735.529282][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 1735.535348][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a4798e8 RCX: 0000000000000000 [ 1735.543394][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 1735.551430][ C1] RBP: ffffffff8bcf4a00 R08: ffff88809fdde890 R09: ffffffff8bcf5d20 [ 1735.559479][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88809fddea00 [ 1735.567509][ C1] R13: ffffffff901b4570 R14: ffff88809fdde000 R15: ffff88809fdde890 [ 1735.575504][ C1] FS: 000055556e6ad500(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 1735.584514][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1735.591144][ C1] CR2: 00007feedc4beff8 CR3: 0000000080ec0000 CR4: 00000000003526f0 [ 1735.599182][ C1] Call Trace: [ 1735.602482][ C1] [ 1735.605331][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1735.611019][ C1] kfree+0x13a/0x610 [ 1735.614925][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1735.620081][ C1] rose_timer_expiry+0x4cb/0x600 [ 1735.625037][ C1] ? call_timer_fn+0x178/0x5a0 [ 1735.629857][ C1] call_timer_fn+0x192/0x5a0 [ 1735.634469][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1735.639994][ C1] ? call_timer_fn+0xd4/0x5a0 [ 1735.644686][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1735.649875][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1735.655088][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1735.660607][ C1] __run_timer_base+0x652/0x8b0 [ 1735.665471][ C1] ? ktime_get+0x45/0x200 [ 1735.669855][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1735.675241][ C1] ? sched_clock_cpu+0x74/0x440 [ 1735.680155][ C1] run_timer_softirq+0xb7/0x170 [ 1735.685025][ C1] handle_softirqs+0x22a/0x7c0 [ 1735.689826][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1735.694607][ C1] __irq_exit_rcu+0x5f/0x150 [ 1735.699282][ C1] irq_exit_rcu+0x9/0x30 [ 1735.703545][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1735.709243][ C1] [ 1735.712182][ C1] [ 1735.715116][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1735.721141][ C1] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 1735.726961][ C1] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 03 5f f3 f5 e8 de 9f 2c f6 fb bf 01 00 00 00 03 a7 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 64 a1 2c f6 bf 01 [ 1735.746602][ C1] RSP: 0018:ffffc9000e33f860 EFLAGS: 00000206 [ 1735.752717][ C1] RAX: 0000000000002aa5 RBX: 0000000000000000 RCX: 0000000000000001 [ 1735.760722][ C1] RDX: 0000000000000006 RSI: ffffffff8dee2508 RDI: 0000000000000001 [ 1735.768760][ C1] RBP: 0000000000000000 R08: ffffffff90109077 R09: 1ffffffff202120e [ 1735.776756][ C1] R10: dffffc0000000000 R11: fffffbfff202120f R12: 0000000000000000 [ 1735.784797][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1735.792848][ C1] irqentry_exit+0x599/0x620 [ 1735.797510][ C1] ? rcu_is_watching+0x15/0xb0 [ 1735.802303][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1735.807817][ C1] RIP: 0010:lockdep_unregister_key+0x2d5/0x350 [ 1735.813985][ C1] Code: 11 01 09 00 89 c6 48 c7 c7 90 58 1f 96 e8 13 56 00 0a 90 e9 65 fe ff ff e8 28 a3 fd 09 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff [ 1735.833631][ C1] RSP: 0018:ffffc9000e33f980 EFLAGS: 00000246 [ 1735.839753][ C1] RAX: 0000000000000046 RBX: ffff88807ef60268 RCX: 0000000000000046 [ 1735.847782][ C1] RDX: ffffffff93dad3f8 RSI: ffffffff8defc77e RDI: ffffffff8c276500 [ 1735.855777][ C1] RBP: ffff88807a6c0000 R08: ffffffff81adbb78 R09: ffffffff8e75e0a0 [ 1735.863814][ C1] R10: dffffc0000000000 R11: fffffbfff202120f R12: 0000000000000000 [ 1735.871862][ C1] R13: ffff88807ef60269 R14: 0000000000001000 R15: 0000000000000a07 [ 1735.879904][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 1735.885758][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 1735.891359][ C1] __qdisc_destroy+0x1ab/0x450 [ 1735.896139][ C1] dev_shutdown+0x93/0x440 [ 1735.900622][ C1] unregister_netdevice_many_notify+0x11a9/0x2370 [ 1735.907065][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1735.913875][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1735.919050][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1735.924883][ C1] unregister_netdevice_queue+0x31f/0x360 [ 1735.930670][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1735.936944][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1735.937252][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 1735.942194][ C1] ? queue_delayed_work_on+0x171/0x1e0 [ 1735.950158][ C0] lec:lec_tx_timeout: lec0 [ 1735.955608][ C1] __tun_detach+0x6d9/0x15d0 [ 1735.964616][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1735.969815][ C1] tun_chr_close+0x10a/0x1c0 [ 1735.974432][ C1] __fput+0x44f/0xa70 [ 1735.978463][ C1] task_work_run+0x1d9/0x270 [ 1735.983052][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1735.988219][ C1] exit_to_user_mode_loop+0xed/0x480 [ 1735.993521][ C1] ? rcu_is_watching+0x15/0xb0 [ 1735.998342][ C1] do_syscall_64+0x32d/0xf80 [ 1736.002942][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.009038][ C1] ? trace_irq_disable+0x37/0x100 [ 1736.014072][ C1] ? clear_bhb_loop+0x40/0x90 [ 1736.018785][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.024689][ C1] RIP: 0033:0x7fbed499bf79 [ 1736.029135][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.048786][ C1] RSP: 002b:00007ffe7dbc20b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1736.057248][ C1] RAX: 0000000000000000 RBX: 00007ffe7dbc21a0 RCX: 00007fbed499bf79 [ 1736.065230][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1736.073246][ C1] RBP: 00000000001a77c5 R08: 0000000000000001 R09: 0000000000000000 [ 1736.081279][ C1] R10: 0000001b30b20000 R11: 0000000000000246 R12: 00007ffe7dbc21e0 [ 1736.089295][ C1] R13: 00007fbed4c15fac R14: 00000000001a79c6 R15: 00007fbed4c15fa0 [ 1736.097339][ C1] [ 1736.100391][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1736.107783][ C1] CPU: 1 UID: 0 PID: 10494 Comm: syz.3.26124 Not tainted syzkaller #0 PREEMPT(full) [ 1736.117262][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1736.127309][ C1] Call Trace: [ 1736.130582][ C1] [ 1736.133429][ C1] vpanic+0x1e0/0x670 [ 1736.137417][ C1] panic+0xc5/0xd0 [ 1736.141145][ C1] ? __pfx_panic+0x10/0x10 [ 1736.145577][ C1] __warn+0x315/0x4a0 [ 1736.149554][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1736.155268][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1736.160993][ C1] __report_bug+0x29a/0x540 [ 1736.165523][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1736.171328][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1736.177042][ C1] ? __pfx___report_bug+0x10/0x10 [ 1736.182063][ C1] ? kfree+0x1c1/0x610 [ 1736.186130][ C1] ? rose_timer_expiry+0x4c3/0x600 [ 1736.191240][ C1] ? call_timer_fn+0x192/0x5a0 [ 1736.195993][ C1] ? __run_timer_base+0x652/0x8b0 [ 1736.201004][ C1] ? run_timer_softirq+0xb7/0x170 [ 1736.206017][ C1] ? handle_softirqs+0x22a/0x7c0 [ 1736.210950][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1736.215738][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1736.221562][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1736.227724][ C1] ? preempt_schedule_irq+0x48/0xa0 [ 1736.232937][ C1] ? irqentry_exit+0x599/0x620 [ 1736.237710][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1736.243346][ C1] report_bug_entry+0x19a/0x290 [ 1736.248206][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 1736.253941][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 1736.259670][ C1] handle_bug+0xca/0x200 [ 1736.263944][ C1] exc_invalid_op+0x1a/0x50 [ 1736.268470][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1736.273329][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1736.279660][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1736.299264][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 1736.305325][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a4798e8 RCX: 0000000000000000 [ 1736.313282][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 1736.321241][ C1] RBP: ffffffff8bcf4a00 R08: ffff88809fdde890 R09: ffffffff8bcf5d20 [ 1736.329199][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88809fddea00 [ 1736.337172][ C1] R13: ffffffff901b4570 R14: ffff88809fdde000 R15: ffff88809fdde890 [ 1736.345155][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 1736.350530][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1736.356167][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1736.361805][ C1] kfree+0x13a/0x610 [ 1736.365695][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1736.370805][ C1] rose_timer_expiry+0x4cb/0x600 [ 1736.375734][ C1] ? call_timer_fn+0x178/0x5a0 [ 1736.380490][ C1] call_timer_fn+0x192/0x5a0 [ 1736.385074][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1736.390522][ C1] ? call_timer_fn+0xd4/0x5a0 [ 1736.395184][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1736.400288][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1736.405471][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1736.410926][ C1] __run_timer_base+0x652/0x8b0 [ 1736.415764][ C1] ? ktime_get+0x45/0x200 [ 1736.420094][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1736.425457][ C1] ? sched_clock_cpu+0x74/0x440 [ 1736.430305][ C1] run_timer_softirq+0xb7/0x170 [ 1736.435142][ C1] handle_softirqs+0x22a/0x7c0 [ 1736.439895][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1736.444651][ C1] __irq_exit_rcu+0x5f/0x150 [ 1736.449228][ C1] irq_exit_rcu+0x9/0x30 [ 1736.453456][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1736.459082][ C1] [ 1736.461999][ C1] [ 1736.464915][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1736.470880][ C1] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 1736.476674][ C1] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 03 5f f3 f5 e8 de 9f 2c f6 fb bf 01 00 00 00 03 a7 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 64 a1 2c f6 bf 01 [ 1736.496269][ C1] RSP: 0018:ffffc9000e33f860 EFLAGS: 00000206 [ 1736.502328][ C1] RAX: 0000000000002aa5 RBX: 0000000000000000 RCX: 0000000000000001 [ 1736.510286][ C1] RDX: 0000000000000006 RSI: ffffffff8dee2508 RDI: 0000000000000001 [ 1736.518247][ C1] RBP: 0000000000000000 R08: ffffffff90109077 R09: 1ffffffff202120e [ 1736.526205][ C1] R10: dffffc0000000000 R11: fffffbfff202120f R12: 0000000000000000 [ 1736.534161][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1736.542135][ C1] irqentry_exit+0x599/0x620 [ 1736.546723][ C1] ? rcu_is_watching+0x15/0xb0 [ 1736.551478][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1736.557449][ C1] RIP: 0010:lockdep_unregister_key+0x2d5/0x350 [ 1736.563596][ C1] Code: 11 01 09 00 89 c6 48 c7 c7 90 58 1f 96 e8 13 56 00 0a 90 e9 65 fe ff ff e8 28 a3 fd 09 41 f7 c7 00 02 00 00 74 b3 fb 40 84 ed <75> b2 eb c3 90 0f 0b 90 e9 26 ff ff ff 90 0f 0b 90 e9 2e ff ff ff [ 1736.583185][ C1] RSP: 0018:ffffc9000e33f980 EFLAGS: 00000246 [ 1736.589242][ C1] RAX: 0000000000000046 RBX: ffff88807ef60268 RCX: 0000000000000046 [ 1736.597200][ C1] RDX: ffffffff93dad3f8 RSI: ffffffff8defc77e RDI: ffffffff8c276500 [ 1736.605167][ C1] RBP: ffff88807a6c0000 R08: ffffffff81adbb78 R09: ffffffff8e75e0a0 [ 1736.613130][ C1] R10: dffffc0000000000 R11: fffffbfff202120f R12: 0000000000000000 [ 1736.621094][ C1] R13: ffff88807ef60269 R14: 0000000000001000 R15: 0000000000000a07 [ 1736.629059][ C1] ? __is_module_percpu_address+0x28/0x3f0 [ 1736.634867][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 1736.640396][ C1] __qdisc_destroy+0x1ab/0x450 [ 1736.645148][ C1] dev_shutdown+0x93/0x440 [ 1736.649559][ C1] unregister_netdevice_many_notify+0x11a9/0x2370 [ 1736.655986][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1736.662742][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1736.667851][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1736.673649][ C1] unregister_netdevice_queue+0x31f/0x360 [ 1736.679361][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1736.685589][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1736.690776][ C1] ? queue_delayed_work_on+0x171/0x1e0 [ 1736.696228][ C1] __tun_detach+0x6d9/0x15d0 [ 1736.700814][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 1736.705920][ C1] tun_chr_close+0x10a/0x1c0 [ 1736.710506][ C1] __fput+0x44f/0xa70 [ 1736.714491][ C1] task_work_run+0x1d9/0x270 [ 1736.719074][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1736.724184][ C1] exit_to_user_mode_loop+0xed/0x480 [ 1736.729456][ C1] ? rcu_is_watching+0x15/0xb0 [ 1736.734212][ C1] do_syscall_64+0x32d/0xf80 [ 1736.738793][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.744844][ C1] ? trace_irq_disable+0x37/0x100 [ 1736.749858][ C1] ? clear_bhb_loop+0x40/0x90 [ 1736.754523][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.760400][ C1] RIP: 0033:0x7fbed499bf79 [ 1736.764801][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.784397][ C1] RSP: 002b:00007ffe7dbc20b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1736.792798][ C1] RAX: 0000000000000000 RBX: 00007ffe7dbc21a0 RCX: 00007fbed499bf79 [ 1736.800752][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1736.808707][ C1] RBP: 00000000001a77c5 R08: 0000000000000001 R09: 0000000000000000 [ 1736.816665][ C1] R10: 0000001b30b20000 R11: 0000000000000246 R12: 00007ffe7dbc21e0 [ 1736.824621][ C1] R13: 00007fbed4c15fac R14: 00000000001a79c6 R15: 00007fbed4c15fa0 [ 1736.832591][ C1] [ 1736.835943][ C1] Kernel Offset: disabled [ 1736.840250][ C1] Rebooting in 86400 seconds..