last executing test programs: 1.735276282s ago: executing program 3 (id=9130): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) getsockopt(r2, 0x1ff, 0x7fff, &(0x7f0000000140)=""/180, &(0x7f0000000040)=0xb4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, 0x0) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x92, 0xff, 0x5, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x10, 0x8000, 0x4, 0x4}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000201030000000000000000000a0000040c0019800800020011000000300002802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50af8, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}]}, 0x5c}}, 0x24000800) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000f40)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880) 1.635091514s ago: executing program 4 (id=9132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x10448) unshare(0x24060400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000580)={0x0, 0xfffffffffffffe77, &(0x7f0000000540)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x801}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x19}, @void, @val={0xc, 0x99, {0x4, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a318000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000140)) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) 1.620403307s ago: executing program 2 (id=9133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.504691494s ago: executing program 2 (id=9134): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100340004"], 0x44}}, 0x0) 1.494938745s ago: executing program 0 (id=9135): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0x1, 0x5ae7}, {0x20, 0xa, 0x6}, {0x6, 0xff, 0xc, 0x401}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.462598457s ago: executing program 3 (id=9136): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) unshare(0x28000600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000000000000000000000207912080000000000000000000000bb45687ca71a886f5a63ed1d079d60bbd1076b2777107912349c3b7bf56cd25156e412803a6c15747b2f0304561e809b66438479c4b9900d1c50e8d57611ad53a13ec9c4c93d22b4287a4d23da204081aef5904d045a16f87cd5ce272083e9373bc0f74f5400db83c62628d1f92b7c1198a3aaa9955fcf618d0851f281debc9afa99dfda0422cc855085af2d7abe523a140fbf955c19724177df587854cd439bec7c1d6e201bdca6ac50eee3c241f7ead7b106d7e934370500000020ad8a4ea06425086bfb5f43516347d5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x29c, 0x8, 0x9, 0x14, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0xfffffffe, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000640)={0x41, 0x1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000680)={@val={0x70}, @void, @llc={@llc={0x4e, 0x42, "34fb", "9d0a76619ec2239d2b6fade098a5b48dccc0ba0300000000000000d94757dd28778ec5866f06d4b24f297e0029721ae6192fb4585101857391211fb112c00357e90f4894a02f518e1723f2a9c3f33cb4c96998beeb094ffc3d5b2a2a35a000a5ebbcf16d90aca05eb2d42454cc2c66270c2f034c1fb8a131c8bc6b39a2120bba799d09d4f1ff80cd5d1570947dac38ecbc9799b39bd1"}}}, 0x9e) bind$tipc(r3, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x70bd2d, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x10001, 0x0, 0x2100000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x1004) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18fa0eadf5efff0000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3fcb}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) 1.394705181s ago: executing program 2 (id=9138): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) 1.391182695s ago: executing program 4 (id=9139): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f00000003c0)={0x0, 0x20, 0x80000001, 0x20, 0x8000000000006}, 0xfeb0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000780)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "1590732cddcee5a8c86e83f982d3b40d4a4f82e71332d5c3be56b1aaeabafbc2", 0x3ff, 0xc6, 0xf12, 0x1}, 0x3c) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="880000000314000229bd7000fcdbdf25090002007355b132f500000008004100727865001400330076657468315f746f5f626f6e640000000900020073797a3200000000080041007278650014003300766574683000000000000000000000000900020073797a320000000008004100736977001400330076657468315f746f5f62617461647600dc5f82622e694b667953b13386c2e712bd955ad32203d89069cc1a483018df0d2f1e77e73b809adaff82d7767c3e7c7d666596bb987f388d8e"], 0x88}, 0x1, 0x0, 0x0, 0x4048055}, 0x4008004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=@RTM_DELMDB={0xb8, 0x55, 0x4, 0x70bd2b, 0x25dfdbfe, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x2, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x4, {@in6_addr=@empty, 0x9edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x2, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x1, {@in6_addr=@local, 0x82dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0xb8}}, 0x40840d4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x4000010) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="18010000", @ANYRES16=r7, @ANYBLOB="000826bd7000fedbdf251a0000000400cc000400cc002400228014000080080005003e70000008000200feffffff0c00028008000600060000000700210061610000ac0022803c00008008000300090000000800060089000000080005004000000008000100060000000800060004000000080001000200000008000300050000000c00008008000700050000003c000080080003009f00000008000100bcffffff08000700080000000800030001000100080006003f07000008000300ef010000080004000000000024000080080003000900000008000100090000000800030001000000080002000100000008009a000100000008009a400200000008009a00020000000400cc00080001005b000000"], 0x118}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2010840}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r11, 0x89810c735e15e8cc, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '.#\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, ']!*%(\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r14], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 1.248873141s ago: executing program 0 (id=9140): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r1, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000597656b6850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) (async) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', r1, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x3, &(0x7f00000004c0)=[r5, r5, r5, r5, r5, r6], &(0x7f0000000500)=[{0x0, 0x5, 0x4, 0xb}, {0x2, 0x3}, {0x0, 0x3, 0x10}], 0x10, 0x30000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r13, 0x0, 0xbe, 0x5a, &(0x7f0000000600)="69db2a137f066b13d2a3032b729125275cc325e1bd69be7320a58ff4b4a039939c550aa048dce6dec23849a06408206f817e62773414762e3acec7f3cf80e675499c65c7d90df203d13d869cbf390000076bc422dc0a8aa18c6ae4be4c8a2d2c7854915cd2eaccf63db00c2636b0004719ad0e18cc5d2530c8c6497f8f3721457194b717fa94013aa6ed10109aacc3dea30b5ef078ea97408ddae07db2b45d1c44ec24d6c7859f871e9184e86048538f09cd1618713d44dd46879edfe18c", &(0x7f0000000780)=""/90, 0x9, 0x0, 0x1000, 0xef, &(0x7f0000001700)="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", &(0x7f00000009c0)="e0518d0b2f1505ec43fe6471540a743408cc162962150550f15c5d8f559e59898c4ba3ba83b01fb90cd3702a4c924e25fa4a80133eb941d9476b43a386341ef18cdd38f84bf1a1d9a03a7cdb7131b67b3ac3cd52a68ed33b9cfc414f755383f1ba64b124ddff00bb046ecd295b537213703997b609fb6c17b95b3652faf0b536811a25701f4aaaa3c71a98daa059665406314e57118a1864ae131a4ea3d18027b5c3220e98cb44f6056cd1603fc7c4f83f87334075141781bf8802838370fd0597c4e7e5064971ddf44caf51bfa1d05751ee1fcc7975b31965c44a5376cbd752548ea3429beecbb8c78287a83792f2", 0x2, 0x0, 0x5}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r12) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="3f9d00018000000000000800000008000300", @ANYRES32=r14, @ANYBLOB="2000308014000400359f6ef711e7273d"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x240048c0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0x1, 0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.238788141s ago: executing program 1 (id=9141): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x3b}], 0x10}}], 0x1, 0x4000000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000800)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000840)=0x2c) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000102c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xfbfffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) r8 = socket$packet(0x11, 0x2, 0x300) bind$packet(r8, &(0x7f00000001c0)={0x11, 0xf5}, 0x14) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x6, 0xffffffff, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x68, 0x0, 0x5, 0x29, 0x0, @multicast1, @rand_addr=0x64010102}}}}) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, &(0x7f0000000400)=0xa, r4, 0x0, 0x1, 0x6) setsockopt$inet_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f0000000000)={0x200}, 0x4) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000027c0)=""/4094, 0xffe}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000780)=""/45, 0x2d}, {&(0x7f0000000480)=""/142, 0x8e}], 0x7}, 0x22) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r10) 1.181412064s ago: executing program 3 (id=9142): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.131440937s ago: executing program 0 (id=9143): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc100}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x23) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @broadcast, r11}, 0xc) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r13 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r14, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000f"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.031244869s ago: executing program 1 (id=9144): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x3c}}, 0x20000090) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 928.293318ms ago: executing program 2 (id=9145): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x90000009}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/73, 0x0, 0x1800, 0x80000, 0x1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 807.864705ms ago: executing program 3 (id=9146): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)=')%\x11](-\x00', 0x40800, &(0x7f0000000040)={@align=0xc, {0x5, 0x8, 0x9, 0xffffffffffffff80}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x200}, {[0x5, 0x3, 0xffffffff, 0x6]}, 0xfdf, 0xdb, &(0x7f0000000100)=""/219}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x184, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x8, 0x1}, {0x9, 0x95}, {0x1, 0x7}, {0xd5, 0x4}, {0xe3, 0x7}, {0x7f, 0x1}, {0x2, 0x2}, {0x5, 0x3}, {0x4, 0x5}, {0x4a, 0x1}, {0xf7, 0x4}, {0x4, 0x1}, {0x2, 0x5}, {}], "c13fccdc39b2d931"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x7}, {0x0, 0x5}, {0xcb, 0x1}, {0x79, 0x4}, {0xd, 0x3}, {0x6, 0x4}, {0x7, 0x3}], "a2d04d6f4fde7bfe"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x7}, {0xf3}, {0xb, 0x2}, {0xff}, {0x8, 0x6}, {0x5e, 0x3}, {0xc, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x3, 0x4}, {0x9, 0x3}, {0x6, 0x3}, {0x21, 0x3}, {0x3, 0x6}, {0x2, 0x5}, {0x7, 0x4}], "971173897b6f0337"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x5b, 0x3}, {0x9, 0x4}, {0xe2, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x23, 0x7}, {0x4}, {0x3, 0x4}, {0x2, 0x4}, {0x5, 0x2}], "404b0c9bdc214de6"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x1, 0x7}, {0xa}, {0x5, 0x7}, {0x6, 0x3}, {0x9, 0x7}, {0x5, 0x3}, {0x15, 0x7}, {0x24, 0x2}, {0x1, 0x2}, {0x9, 0x6}, {0x3, 0x6}, {0x7, 0x5}, {0x2}, {0x80, 0x4}, {0x52, 0x2}, {0x2}, {0xeb, 0x4}, {0x70}, {0x83, 0x6}], "a6eb285e5e79cea7"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x3, 0x1}], "8ab0edd269ae682a"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x9}, {0xe, 0x2}, {0x8, 0x5}, {0xff, 0x1}, {0x3, 0x5}, {0x5, 0x7}, {0xce, 0x7}, {0xd, 0x6}, {0x1, 0x7}, {0x5, 0x7}, {0x9, 0x2}, {0x4, 0x1}, {0x9, 0x4}, {0x7d}, {0x8, 0x1}], "7ced28958765a4da"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x45, 0x6}, {0x81, 0x7}, {0x99, 0x3}, {0x2}, {0x8, 0x4}, {0xc}, {0xd, 0x1}, {0x9}, {0xe, 0x5}, {0x0, 0x2}, {0x0, 0x1}, {0x80, 0x5}, {0x9, 0x3}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x5}, {0x8b, 0x6}, {0x2, 0x3}, {0x1, 0x1}, {0x5, 0x4}], "95e4b56e9e97e1e3"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x9, 0x4}, {0x4, 0x4}, {0x1, 0x5}, {0x2}, {0x6, 0x1}, {0x9, 0x3}, {0x4, 0x6}, {0xf}, {0x1, 0x5}, {0x81, 0x4}, {0x8, 0x3}, {0x8, 0x4}, {0x2, 0x6}], "68f84fe66cc1a048"}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x400e1) ioctl$FITHAW(r0, 0xc0045878) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000500)) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) r2 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={r2, r4, r5}, 0xc) sendmsg$kcm(r0, &(0x7f0000000f40)={&(0x7f0000000a40)=@hci={0x1f, 0x3, 0x1}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="c161af", 0x3}, {&(0x7f0000000b00)="77c4437eae1eab65f37f88f19d6690d3637430cfb563c8ef8a6bd2c4d268a74715ea", 0x22}, {&(0x7f0000000b40)="4f234811d4a2cb891791187101e952b25f69b56adf72deeeb12b353465df9595cedb0a36906ff1cdd54b494960d2d0353ebc930edcc4ce4b55b6ad873de0be74c30f6057e16aad1b20817fad764f3eb3d90b2b146011fbb0884e70d488ca098ddd8a91677462ad2b013e5ed6c71a99892f4893083420a21ca11e642122d8ad23eb8083e73d80af73f7539f31ef210c8a8f6baa32cf0f59beaf", 0x99}, {&(0x7f0000000c00)="e8ddb10a70ed17", 0x7}], 0x4, &(0x7f0000000c80)=[{0x10, 0x119, 0x20000000}, {0x30, 0x109, 0x8, "acc5f200de16e42bab9bbd45409c401df161a2c5c592bfccfe"}, {0x48, 0x117, 0x6, "2cefa5d8a117e941d4e3939a5e2cc0c584ed2f7027e102ff53fbd459e380a356c19472cf27cb158a13948d99e1ed80116e203d"}, {0xe8, 0x108, 0xaa, "ed30baa97749ab39eb37aea3ec12bb0775f57769bed1356fff99750518382304e80e4098bd33d65a0808e7dcd5d338b8e2140d5ea9f51e503f34b211266af798f54a52a405abf0b4fe9abdb1321bc037f3fab825557f2b26f411c23a52d1b2e18344d121cb8d60cfe9911372669e5c238bd6078f8fa55f6e8376f8334d8f065d1232c13834ff5405ed520fb176ce9261298909b30dbcc5d101822944a2ae293d6a9ffc3581459caecb363ef3bc32e31d151bd80706940b025065db09df124b18ad73c2f70afd9a2d013cbe4ed818aa2eadcbf0c0d71ee66f"}, {0x40, 0x117, 0x9, "a87e117cdc836583b56107876f0423bb5954f6fd0210bcf581832b2d4905b0caffedec704fe94c64ad"}, {0x110, 0x10b, 0x8, "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"}], 0x2c0}, 0x4000800) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f80)={r0, r3, 0x25, 0x1, @void}, 0x10) getpeername$llc(r0, &(0x7f0000000fc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001000)=0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r7, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x18, 0x1406, 0x8, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40008) getsockopt$packet_buf(r6, 0x107, 0xd, &(0x7f0000001140)=""/156, &(0x7f0000001200)=0x9c) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xa, 0xffff}, {0xe, 0xfffd}, {0xffff, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40880) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001380)={0x0, 0x3c, &(0x7f0000001340)=[@in6={0xa, 0x4e22, 0xffff0001, @rand_addr=' \x01\x00', 0x7}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @local}]}, &(0x7f00000013c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001400)={0x5, 0xebe1, 0x200, 0x2, 0x7, 0x4, 0x40000000, 0x1, r8}, &(0x7f0000001440)=0x20) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000001480)={'TPROXY\x00'}, &(0x7f00000014c0)=0x1e) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x18, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xadf}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x7, 0x3, 0xc, 0x7, 0x2}]}, &(0x7f00000015c0)='GPL\x00', 0x7fff, 0x0, &(0x7f0000001600), 0x41100, 0xc5957140b72a04c6, '\x00', r3, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x4, 0x2, 0xe0, 0x3}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001680)=[{0x5, 0x5, 0xe, 0xa}, {0x3, 0x3, 0xb, 0x3}, {0x2, 0x3, 0xb, 0x9}, {0x0, 0x4, 0x8, 0x7}], 0x10, 0x200}, 0x94) r10 = socket(0x9, 0xa, 0x4) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000017c0)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x6, 0x4, 0xf0, 0x6c1d, 0xfffffffffffffffb], 0x1, &(0x7f0000001780)=[{}, {}, {}], 0x0, [{}]}, 0x88) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000001880)={r10, r0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x38, r12, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x48804}, 0x8000) listen(r1, 0x19b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x11, &(0x7f0000001a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xbacc, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001b40)='GPL\x00', 0xd4, 0x77, &(0x7f0000001b80)=""/119, 0x100, 0x42, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001c40)={0x0, 0x8, 0x10000, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001e40)=[r0, r0, r0, r0, 0xffffffffffffffff, r0, r9, 0xffffffffffffffff], 0x0, 0x10, 0x81}, 0x94) 782.58034ms ago: executing program 4 (id=9147): syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x10000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x4, &(0x7f0000000000)=""/141, &(0x7f00000001c0)=0x8d) 736.925792ms ago: executing program 0 (id=9148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000104010400000000000000000a0000000a0002"], 0x20}, 0x1, 0x0, 0x0, 0x40ebe4ecb8a1c3e7}, 0x50) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000104010400000000000000000a0000000a0002"], 0x20}, 0x1, 0x0, 0x0, 0x40ebe4ecb8a1c3e7}, 0x50) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 673.917387ms ago: executing program 1 (id=9149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="600000f310000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) 659.567818ms ago: executing program 3 (id=9150): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x5}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) sendto$inet6(r0, &(0x7f0000000240)="78b73129fcc645293bb903f040a5176a58f806771304ed6d241e487113ab93ad7dd006e8f0f145943973e86015cb8fbf9e4887ab6045bb35618c5bc0435967649ca5dc3c34ec2626ebefadcff6bee15fff148ffe00a5560c3e8a2304073351be8b92590d723f9f215d646f", 0x6b, 0x4849, &(0x7f0000000180)={0xa, 0x4e24, 0x9, @loopback, 0x2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x8}, {0xfff3}}}, 0x24}}, 0x0) 616.991888ms ago: executing program 4 (id=9151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000002002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x0) 527.587847ms ago: executing program 1 (id=9152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 527.367756ms ago: executing program 0 (id=9153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (fail_nth: 1) 524.864452ms ago: executing program 2 (id=9154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) close(0x3) 501.317527ms ago: executing program 4 (id=9155): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x400000000000000], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) 442.486713ms ago: executing program 1 (id=9156): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 338.618238ms ago: executing program 2 (id=9157): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/118, 0x76}, {&(0x7f00000027c0)=""/4105, 0x1009}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000480)=""/139, 0x8b}], 0x7}, 0x22) 185.437544ms ago: executing program 4 (id=9158): getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000040)=""/107, &(0x7f00000000c0)=0x6b) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000002c0)={0x2, 'syzkaller0\x00', {0x9}, 0x33c}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) write(r7, 0x0, 0x0) unshare(0x400) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x2c, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x44010) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r13 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$sock_netdev_private(r13, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 156.787915ms ago: executing program 0 (id=9159): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x3, 0x84) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r5, 0x1}, {0xffffffffffffffff, 0x502}, {r2, 0x4}], 0x3, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000dd58cef7e544bac128e454601711bd98131b10943052430a9aa8d82619868024a788a1504886709ba1222714fe8eec739cf8b38c5fa8d23a", @ANYRES16=r7, @ANYBLOB="010028bd7000000003001a00000020000180140002007465616d30000000000000000000000008000100", @ANYRES16=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000900000004000000030000a400"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4, @ANYRES64=r0, @ANYRES16=r7, @ANYRES64=0x0, @ANYRES8=r5, @ANYRESOCT=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff00", 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000500)=ANY=[@ANYRES16=r1], &(0x7f0000000480)='syzkaller\x00', 0x200005, 0xce, &(0x7f0000000740)=""/206, 0x0, 0x47, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc73, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffdffff, 0x7fffffff}, 0x0, 0x0) r9 = accept(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xe20, @local, 0xfffffff8}, 0x1c) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001214200028bd70f2fcdbdf250800150003000000080015000000000008001500020000000861dcf52f000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20008001) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 91.628003ms ago: executing program 3 (id=9160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)=@delpolicy={0x5c, 0x14, 0x513, 0x70bd26, 0x25dfdbfd, {{@in=@local, @in=@multicast2, 0x4e20, 0xb, 0x4e23, 0x2, 0x2, 0x20, 0x20, 0x3c}, 0x0, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040818}, 0x20000802) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="824900000000000028003780090021007665746800000000180002000000000000000000", @ANYRES32=r6, @ANYBLOB="0000010024810400050027"], 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x4}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9185}, {0x4, 0x1, 0x8, 0x2, 0x8, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7}, {{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, &(0x7f0000000140)={&(0x7f0000002500)=""/4096, 0x1000}) 0s ago: executing program 1 (id=9161): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0xfffffffc, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x1d00, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast2}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3509}]}, 0x78}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): 30][T31628] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1199.558501][T31628] bond10: (slave ip6gre2): making interface the new active one [ 1199.566430][T31628] ip6gre2: entered promiscuous mode [ 1199.573645][T31628] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 1199.757172][T31645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7994'. [ 1199.998832][T31651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7997'. [ 1200.087185][T31651] openvswitch: netlink: Message has 2 unknown bytes. [ 1200.299466][T31655] x_tables: duplicate underflow at hook 2 [ 1200.441305][ T6390] lec:lec_start_xmit: lec0:No lecd attached [ 1200.682337][T31673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8005'. [ 1200.839960][T31675] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8007'. [ 1201.433422][T31713] syzkaller1: entered promiscuous mode [ 1201.441077][T31713] syzkaller1: entered allmulticast mode [ 1201.453516][T31716] ip6tnl4: entered promiscuous mode [ 1201.667041][T31726] netlink: 'syz.1.8024': attribute type 1 has an invalid length. [ 1201.718828][T31729] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20004 [ 1202.208852][T31757] syzkaller1: entered promiscuous mode [ 1202.226322][T31757] syzkaller1: entered allmulticast mode [ 1202.539368][T31770] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1203.066414][T31777] lo speed is unknown, defaulting to 1000 [ 1203.074520][T31777] ±ÿ speed is unknown, defaulting to 1000 [ 1203.224157][T31794] netlink: 'syz.0.8051': attribute type 3 has an invalid length. [ 1203.246001][T31794] __nla_validate_parse: 10 callbacks suppressed [ 1203.246022][T31794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8051'. [ 1203.836813][T31812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8058'. [ 1204.461096][T31807] bond1: Removing last ns target with arp_interval on [ 1204.560616][T31838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.602909][T31842] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1204.632522][T31845] netlink: 'syz.4.8068': attribute type 1 has an invalid length. [ 1204.757396][T31845] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1204.840526][T31852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8070'. [ 1205.229312][T31871] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8074'. [ 1205.444696][T31875] netlink: 'syz.1.8075': attribute type 8 has an invalid length. [ 1205.593899][T31889] tipc: Failed to remove unknown binding: 66,0,0/711376975:4230729489/4230729491 [ 1205.603645][T31889] tipc: Failed to remove unknown binding: 66,0,0/711376975:4230729489/4230729490 [ 1205.623036][T31889] tipc: Failed to remove unknown binding: 66,0,0/711376975:4230729489/4230729491 [ 1205.652063][T31889] tipc: Failed to remove unknown binding: 66,0,0/711376975:4230729489/4230729490 [ 1205.705539][T31888] siw: device registration error -23 [ 1205.760161][T31894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8080'. [ 1205.846585][T31900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8083'. [ 1205.880546][T31894] bridge10: port 1(erspan0) entered blocking state [ 1205.887464][T31894] bridge10: port 1(erspan0) entered disabled state [ 1205.902032][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 1205.910105][ C0] lec:lec_tx_timeout: lec0 [ 1205.927906][T31894] erspan0: entered allmulticast mode [ 1205.936136][T31894] erspan0: left allmulticast mode [ 1205.990927][ T5489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1206.356450][T31933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8091'. [ 1206.469622][T31940] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8093'. [ 1206.551263][T31943] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8094'. [ 1206.572630][T31943] unsupported nlmsg_type 40 [ 1206.585024][T31943] netlink: 'syz.3.8094': attribute type 1 has an invalid length. [ 1206.652816][T31943] bond11: entered promiscuous mode [ 1206.674250][T31943] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1206.873100][T31957] sctp: [Deprecated]: syz.3.8094 (pid 31957) Use of int in max_burst socket option. [ 1206.873100][T31957] Use struct sctp_assoc_value instead [ 1206.963156][T31943] bond11: (slave bridge14): making interface the new active one [ 1206.984642][T31943] bridge14: entered promiscuous mode [ 1207.031538][T31943] bridge14: left promiscuous mode [ 1207.330378][T31953] bond11: (slave bridge14): making interface the new active one [ 1207.361774][T31953] bridge14: entered promiscuous mode [ 1207.421006][T31953] bridge14: left promiscuous mode [ 1207.428785][T31974] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8099'. [ 1208.639851][T32017] syzkaller0: entered promiscuous mode [ 1208.650359][T32017] syzkaller0: entered allmulticast mode [ 1208.687173][T32017] tipc: Enabled bearer , priority 0 [ 1208.709609][T32016] tipc: Resetting bearer [ 1208.718158][T32020] xt_recent: Unsupported userspace flags (000000b1) [ 1208.751674][T32016] tipc: Disabling bearer [ 1208.883394][T32026] __nla_validate_parse: 4 callbacks suppressed [ 1208.883413][T32026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8113'. [ 1209.068315][T32035] : renamed from bond_slave_0 [ 1209.535418][T32062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8125'. [ 1209.558580][T32062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1209.684853][T32068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8127'. [ 1209.705790][T32068] openvswitch: netlink: Message has 2 unknown bytes. [ 1209.717711][T32068] FAULT_INJECTION: forcing a failure. [ 1209.717711][T32068] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.731635][T32068] CPU: 1 UID: 0 PID: 32068 Comm: syz.1.8127 Not tainted syzkaller #0 PREEMPT(full) [ 1209.731663][T32068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1209.731677][T32068] Call Trace: [ 1209.731685][T32068] [ 1209.731695][T32068] dump_stack_lvl+0xe8/0x150 [ 1209.731732][T32068] should_fail_ex+0x412/0x560 [ 1209.731781][T32068] should_failslab+0xa8/0x100 [ 1209.731813][T32068] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1209.731840][T32068] ? __alloc_skb+0x1d0/0x7d0 [ 1209.731864][T32068] ? __local_bh_enable_ip+0xd0/0x130 [ 1209.731898][T32068] __alloc_skb+0x1d0/0x7d0 [ 1209.731921][T32068] ? netlink_ack_tlv_len+0x6c/0x210 [ 1209.731949][T32068] netlink_ack+0x146/0xa50 [ 1209.731969][T32068] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1209.732000][T32068] ? __lock_acquire+0x6b5/0x2cf0 [ 1209.732039][T32068] netlink_rcv_skb+0x2b6/0x4b0 [ 1209.732062][T32068] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1209.732111][T32068] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1209.732152][T32068] ? down_read+0x272/0x2e0 [ 1209.732175][T32068] ? genl_rcv+0xd/0x40 [ 1209.732205][T32068] genl_rcv+0x28/0x40 [ 1209.732233][T32068] netlink_unicast+0x80f/0x9b0 [ 1209.732277][T32068] ? __pfx_netlink_unicast+0x10/0x10 [ 1209.732314][T32068] ? netlink_sendmsg+0x650/0xb40 [ 1209.732336][T32068] ? skb_put+0x11b/0x210 [ 1209.732367][T32068] netlink_sendmsg+0x813/0xb40 [ 1209.732402][T32068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.732430][T32068] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1209.732466][T32068] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1209.732496][T32068] ____sys_sendmsg+0x972/0x9f0 [ 1209.732536][T32068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1209.732575][T32068] ? import_iovec+0x73/0xa0 [ 1209.732605][T32068] ___sys_sendmsg+0x2a5/0x360 [ 1209.732641][T32068] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.732729][T32068] ? __fget_files+0x2a/0x420 [ 1209.732769][T32068] ? __fget_files+0x3a0/0x420 [ 1209.732814][T32068] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1209.732847][T32068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1209.732887][T32068] ? __pfx_ksys_write+0x10/0x10 [ 1209.732926][T32068] do_syscall_64+0x14d/0xf80 [ 1209.732959][T32068] ? trace_irq_disable+0x3b/0x150 [ 1209.732978][T32068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.733002][T32068] ? clear_bhb_loop+0x40/0x90 [ 1209.733029][T32068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.733052][T32068] RIP: 0033:0x7fb94159c799 [ 1209.733074][T32068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.733094][T32068] RSP: 002b:00007fb942403028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1209.733118][T32068] RAX: ffffffffffffffda RBX: 00007fb941815fa0 RCX: 00007fb94159c799 [ 1209.733135][T32068] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1209.733150][T32068] RBP: 00007fb942403090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.733164][T32068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.733178][T32068] R13: 00007fb941816038 R14: 00007fb941815fa0 R15: 00007ffc8b6a9048 [ 1209.733214][T32068] [ 1210.097385][T32077] xt_recent: Unsupported userspace flags (000000b1) [ 1210.300755][T32088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8134'. [ 1210.441081][T32047] lo speed is unknown, defaulting to 1000 [ 1210.451466][T32047] ±ÿ speed is unknown, defaulting to 1000 [ 1210.690901][T32106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.110721][T32127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8146'. [ 1211.275266][T32135] xt_recent: Unsupported userspace flags (000000b1) [ 1211.285762][T32137] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8148'. [ 1211.494850][T32146] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8151'. [ 1211.667992][T32152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8154'. [ 1211.696809][T32152] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1212.062637][T32163] netlink: 'syz.2.8158': attribute type 1 has an invalid length. [ 1212.198783][T32163] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1212.230616][T32169] netlink: 'syz.3.8160': attribute type 39 has an invalid length. [ 1212.270880][T32167] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1212.280956][T32163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8158'. [ 1212.291696][T32175] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8160'. [ 1212.303477][T32167] bond15: (slave batadv3): making interface the new active one [ 1212.322206][T32175] netlink: 'syz.3.8160': attribute type 5 has an invalid length. [ 1212.334980][T32167] bond15: (slave batadv3): Enslaving as an active interface with an up link [ 1212.418768][T32181] xt_recent: Unsupported userspace flags (000000b1) [ 1212.433569][T32183] xt_recent: Unsupported userspace flags (000000b1) [ 1212.440531][T32163] bond15 (unregistering): (slave batadv3): Releasing active interface [ 1212.460675][T32163] bond15 (unregistering): Released all slaves [ 1212.965076][T32205] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 1213.787200][T32228] netlink: 'syz.3.8176': attribute type 39 has an invalid length. [ 1213.796419][T32228] netlink: 'syz.3.8176': attribute type 5 has an invalid length. [ 1214.036905][T32244] __nla_validate_parse: 9 callbacks suppressed [ 1214.036925][T32244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8181'. [ 1214.071920][T32244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8181'. [ 1214.213206][T32256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8185'. [ 1215.060071][T32245] lo speed is unknown, defaulting to 1000 [ 1215.084274][T32245] ±ÿ speed is unknown, defaulting to 1000 [ 1215.742804][T32288] netlink: 'syz.0.8195': attribute type 39 has an invalid length. [ 1215.779473][T32288] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8195'. [ 1215.789081][T32288] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8195'. [ 1215.798408][T32288] netlink: 'syz.0.8195': attribute type 5 has an invalid length. [ 1215.806514][T32288] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8195'. [ 1216.203151][T32296] netlink: 'syz.2.8198': attribute type 1 has an invalid length. [ 1216.483304][T32296] bond15: (slave bridge12): Enslaving as a backup interface with an up link [ 1216.528472][T32300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8199'. [ 1216.713992][T32318] FAULT_INJECTION: forcing a failure. [ 1216.713992][T32318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1216.760742][T32318] CPU: 0 UID: 0 PID: 32318 Comm: syz.0.8205 Not tainted syzkaller #0 PREEMPT(full) [ 1216.760773][T32318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1216.760788][T32318] Call Trace: [ 1216.760797][T32318] [ 1216.760810][T32318] dump_stack_lvl+0xe8/0x150 [ 1216.760848][T32318] should_fail_ex+0x412/0x560 [ 1216.760886][T32318] _copy_to_user+0x31/0xb0 [ 1216.760914][T32318] simple_read_from_buffer+0xe1/0x170 [ 1216.760952][T32318] proc_fail_nth_read+0x1bb/0x230 [ 1216.760988][T32318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1216.761023][T32318] ? rw_verify_area+0x2a6/0x4d0 [ 1216.761047][T32318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1216.761080][T32318] vfs_read+0x20c/0xa70 [ 1216.761102][T32318] ? fdget_pos+0x246/0x320 [ 1216.761127][T32318] ? __pfx___mutex_lock+0x10/0x10 [ 1216.761150][T32318] ? __pfx_vfs_read+0x10/0x10 [ 1216.761175][T32318] ? __fget_files+0x2a/0x420 [ 1216.761213][T32318] ? __fget_files+0x3a0/0x420 [ 1216.761243][T32318] ? __fget_files+0x2a/0x420 [ 1216.761285][T32318] ksys_read+0x150/0x270 [ 1216.761311][T32318] ? __pfx_ksys_read+0x10/0x10 [ 1216.761348][T32318] do_syscall_64+0x14d/0xf80 [ 1216.761379][T32318] ? trace_irq_disable+0x3b/0x150 [ 1216.761398][T32318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.761420][T32318] ? clear_bhb_loop+0x40/0x90 [ 1216.761448][T32318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.761470][T32318] RIP: 0033:0x7fb923b5cfce [ 1216.761491][T32318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1216.761510][T32318] RSP: 002b:00007fb924ac7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1216.761540][T32318] RAX: ffffffffffffffda RBX: 00007fb924ac86c0 RCX: 00007fb923b5cfce [ 1216.761556][T32318] RDX: 000000000000000f RSI: 00007fb924ac80a0 RDI: 0000000000000003 [ 1216.761570][T32318] RBP: 00007fb924ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.761583][T32318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.761596][T32318] R13: 00007fb923e16038 R14: 00007fb923e15fa0 R15: 00007ffc1707be18 [ 1216.761631][T32318] [ 1217.038149][T32323] FAULT_INJECTION: forcing a failure. [ 1217.038149][T32323] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.077264][T32324] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1217.092899][T32323] CPU: 1 UID: 0 PID: 32323 Comm: syz.0.8207 Not tainted syzkaller #0 PREEMPT(full) [ 1217.092925][T32323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1217.092937][T32323] Call Trace: [ 1217.092945][T32323] [ 1217.092954][T32323] dump_stack_lvl+0xe8/0x150 [ 1217.092988][T32323] should_fail_ex+0x412/0x560 [ 1217.093019][T32323] ? sock_alloc_inode+0x28/0xc0 [ 1217.093040][T32323] should_failslab+0xa8/0x100 [ 1217.093068][T32323] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1217.093098][T32323] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1217.093115][T32323] sock_alloc_inode+0x28/0xc0 [ 1217.093134][T32323] alloc_inode+0x6a/0x1b0 [ 1217.093163][T32323] do_accept+0x13e/0x760 [ 1217.093190][T32323] ? __pfx_do_accept+0x10/0x10 [ 1217.093234][T32323] __sys_accept4+0x139/0x230 [ 1217.093258][T32323] ? __pfx___sys_accept4+0x10/0x10 [ 1217.093285][T32323] ? __pfx_ksys_write+0x10/0x10 [ 1217.093317][T32323] __x64_sys_accept+0x7d/0x90 [ 1217.093341][T32323] do_syscall_64+0x14d/0xf80 [ 1217.093371][T32323] ? trace_irq_disable+0x3b/0x150 [ 1217.093389][T32323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.093409][T32323] ? clear_bhb_loop+0x40/0x90 [ 1217.093433][T32323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.093453][T32323] RIP: 0033:0x7fb923b9c799 [ 1217.093471][T32323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.093489][T32323] RSP: 002b:00007fb924ac8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1217.093509][T32323] RAX: ffffffffffffffda RBX: 00007fb923e15fa0 RCX: 00007fb923b9c799 [ 1217.093524][T32323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1217.093537][T32323] RBP: 00007fb924ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1217.093549][T32323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.093567][T32323] R13: 00007fb923e16038 R14: 00007fb923e15fa0 R15: 00007ffc1707be18 [ 1217.093598][T32323] [ 1217.864848][T32353] xt_recent: Unsupported userspace flags (000000b1) [ 1218.240362][T32376] netlink: 'syz.2.8222': attribute type 4 has an invalid length. [ 1218.307560][T32381] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8224'. [ 1218.358621][T32383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8222'. [ 1218.443526][T32387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8226'. [ 1218.556690][T32395] erspan0: left allmulticast mode [ 1218.561820][T32395] erspan0: left promiscuous mode [ 1218.583203][T32395] bridge9: port 1(erspan0) entered disabled state [ 1219.282145][T32433] bond7: left promiscuous mode [ 1219.455410][ T353] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.482202][ T353] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.533171][ T353] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.546870][ T353] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.738085][T32458] netlink: 'syz.0.8249': attribute type 4 has an invalid length. [ 1219.893981][T32466] __nla_validate_parse: 1 callbacks suppressed [ 1219.894001][T32466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8249'. [ 1220.071928][T32468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8252'. [ 1220.543784][T32482] FAULT_INJECTION: forcing a failure. [ 1220.543784][T32482] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.600131][T32482] CPU: 1 UID: 0 PID: 32482 Comm: syz.4.8258 Not tainted syzkaller #0 PREEMPT(full) [ 1220.600160][T32482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1220.600174][T32482] Call Trace: [ 1220.600183][T32482] [ 1220.600193][T32482] dump_stack_lvl+0xe8/0x150 [ 1220.600230][T32482] should_fail_ex+0x412/0x560 [ 1220.600270][T32482] should_failslab+0xa8/0x100 [ 1220.600299][T32482] ? __kernfs_new_node+0xe9/0x8e0 [ 1220.600333][T32482] kmem_cache_alloc_noprof+0x87/0x650 [ 1220.600367][T32482] __kernfs_new_node+0xe9/0x8e0 [ 1220.600408][T32482] ? __pfx___kernfs_new_node+0x10/0x10 [ 1220.600442][T32482] ? kernfs_root+0x1c/0x230 [ 1220.600481][T32482] ? kernfs_root+0x1c/0x230 [ 1220.600514][T32482] ? kernfs_root+0x1c/0x230 [ 1220.600550][T32482] kernfs_new_node+0x102/0x210 [ 1220.600590][T32482] kernfs_create_link+0xa7/0x200 [ 1220.600622][T32482] sysfs_do_create_link_sd+0x83/0x110 [ 1220.600656][T32482] device_add_class_symlinks+0x1cf/0x240 [ 1220.600691][T32482] device_add+0x475/0xb70 [ 1220.600739][T32482] ? device_initialize+0x26a/0x460 [ 1220.600768][T32482] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1220.600804][T32482] wakeup_source_register+0x18a/0x380 [ 1220.600835][T32482] ep_insert+0x1022/0x1a40 [ 1220.600872][T32482] ? __pfx_ep_insert+0x10/0x10 [ 1220.600906][T32482] ? bpf_lsm_capable+0x9/0x20 [ 1220.600946][T32482] do_epoll_ctl+0x7f4/0xe80 [ 1220.600989][T32482] __x64_sys_epoll_ctl+0x165/0x1b0 [ 1220.601015][T32482] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1220.601049][T32482] do_syscall_64+0x14d/0xf80 [ 1220.601082][T32482] ? trace_irq_disable+0x3b/0x150 [ 1220.601101][T32482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.601123][T32482] ? clear_bhb_loop+0x40/0x90 [ 1220.601151][T32482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.601173][T32482] RIP: 0033:0x7f53b2b9c799 [ 1220.601193][T32482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.601212][T32482] RSP: 002b:00007f53b3a66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1220.601236][T32482] RAX: ffffffffffffffda RBX: 00007f53b2e15fa0 RCX: 00007f53b2b9c799 [ 1220.601252][T32482] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1220.601265][T32482] RBP: 00007f53b3a66090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.601279][T32482] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000002 [ 1220.601293][T32482] R13: 00007f53b2e16038 R14: 00007f53b2e15fa0 R15: 00007ffd682f3e88 [ 1220.601328][T32482] [ 1221.012913][T32493] netlink: 'syz.2.8265': attribute type 1 has an invalid length. [ 1221.048680][T32493] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1221.061743][T32493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8265'. [ 1221.076723][T32491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8262'. [ 1221.126346][T32500] sctp: [Deprecated]: syz.4.8266 (pid 32500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1221.126346][T32500] Use struct sctp_sack_info instead [ 1221.148853][T32500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8266'. [ 1221.294584][T32510] netlink: 'syz.0.8269': attribute type 10 has an invalid length. [ 1221.303594][T32510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8269'. [ 1221.318860][T32510] team0: Port device geneve0 added [ 1221.326719][ T353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.350004][ T353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.419490][ T353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.437332][ T353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.463633][T32517] FAULT_INJECTION: forcing a failure. [ 1221.463633][T32517] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.492225][T32517] CPU: 1 UID: 0 PID: 32517 Comm: syz.2.8272 Not tainted syzkaller #0 PREEMPT(full) [ 1221.492254][T32517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1221.492268][T32517] Call Trace: [ 1221.492277][T32517] [ 1221.492286][T32517] dump_stack_lvl+0xe8/0x150 [ 1221.492322][T32517] should_fail_ex+0x412/0x560 [ 1221.492360][T32517] should_failslab+0xa8/0x100 [ 1221.492388][T32517] ? skb_clone+0x212/0x3a0 [ 1221.492416][T32517] kmem_cache_alloc_noprof+0x87/0x650 [ 1221.492439][T32517] ? __netlink_lookup+0xc6/0x8b0 [ 1221.492472][T32517] skb_clone+0x212/0x3a0 [ 1221.492505][T32517] __netlink_deliver_tap+0x404/0x850 [ 1221.492540][T32517] ? netlink_deliver_tap+0x2e/0x1b0 [ 1221.492565][T32517] netlink_deliver_tap+0x19c/0x1b0 [ 1221.492590][T32517] netlink_unicast+0x7e3/0x9b0 [ 1221.492634][T32517] ? __pfx_netlink_unicast+0x10/0x10 [ 1221.492669][T32517] ? netlink_sendmsg+0x650/0xb40 [ 1221.492691][T32517] ? skb_put+0x11b/0x210 [ 1221.492718][T32517] netlink_sendmsg+0x813/0xb40 [ 1221.492751][T32517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.492779][T32517] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1221.492812][T32517] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1221.492841][T32517] ____sys_sendmsg+0x972/0x9f0 [ 1221.492878][T32517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1221.492913][T32517] ? import_iovec+0x73/0xa0 [ 1221.492940][T32517] ___sys_sendmsg+0x2a5/0x360 [ 1221.492973][T32517] ? __pfx____sys_sendmsg+0x10/0x10 [ 1221.493047][T32517] ? __fget_files+0x2a/0x420 [ 1221.493079][T32517] ? __fget_files+0x3a0/0x420 [ 1221.493120][T32517] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1221.493151][T32517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1221.493189][T32517] ? __pfx_ksys_write+0x10/0x10 [ 1221.493226][T32517] do_syscall_64+0x14d/0xf80 [ 1221.493258][T32517] ? trace_irq_disable+0x3b/0x150 [ 1221.493276][T32517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.493298][T32517] ? clear_bhb_loop+0x40/0x90 [ 1221.493324][T32517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.493346][T32517] RIP: 0033:0x7ff01a39c799 [ 1221.493367][T32517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.493385][T32517] RSP: 002b:00007ff01b2f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1221.493408][T32517] RAX: ffffffffffffffda RBX: 00007ff01a615fa0 RCX: 00007ff01a39c799 [ 1221.493423][T32517] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1221.493437][T32517] RBP: 00007ff01b2f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.493450][T32517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.493462][T32517] R13: 00007ff01a616038 R14: 00007ff01a615fa0 R15: 00007fff8ea2bdb8 [ 1221.493496][T32517] [ 1221.959727][T32525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1222.066192][T32530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8278'. [ 1222.242139][T32542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8281'. [ 1222.259438][T32543] ipt_ECN: cannot use operation on non-tcp rule [ 1222.294150][T32538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8278'. [ 1222.335018][T32538] nbd: device at index 64 is going down [ 1222.494263][T32551] vlan0: entered promiscuous mode [ 1222.523207][T32551] veth1_macvtap: entered promiscuous mode [ 1222.578836][T32520] udevd[32520]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1222.597996][T32554] FAULT_INJECTION: forcing a failure. [ 1222.597996][T32554] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.655787][T32554] CPU: 0 UID: 0 PID: 32554 Comm: syz.4.8284 Not tainted syzkaller #0 PREEMPT(full) [ 1222.655815][T32554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1222.655829][T32554] Call Trace: [ 1222.655837][T32554] [ 1222.655847][T32554] dump_stack_lvl+0xe8/0x150 [ 1222.655882][T32554] should_fail_ex+0x412/0x560 [ 1222.655919][T32554] should_failslab+0xa8/0x100 [ 1222.655948][T32554] __kvmalloc_node_noprof+0x178/0x8a0 [ 1222.655982][T32554] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1222.656016][T32554] ? arch_stack_walk+0xfb/0x150 [ 1222.656052][T32554] alloc_netdev_mqs+0xa6/0x11b0 [ 1222.656081][T32554] ? __pfx_veth_setup+0x10/0x10 [ 1222.656120][T32554] rtnl_create_link+0x31f/0xd70 [ 1222.656158][T32554] veth_newlink+0x2d0/0xb70 [ 1222.656195][T32554] ? __pfx_veth_newlink+0x10/0x10 [ 1222.656225][T32554] ? alloc_netdev_mqs+0xc89/0x11b0 [ 1222.656253][T32554] ? rtnl_create_link+0x31f/0xd70 [ 1222.656282][T32554] ? rtnl_newlink_create+0x277/0xb70 [ 1222.656306][T32554] ? rtnl_newlink+0x1666/0x1be0 [ 1222.656327][T32554] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1222.656347][T32554] ? netlink_rcv_skb+0x232/0x4b0 [ 1222.656368][T32554] ? netlink_unicast+0x80f/0x9b0 [ 1222.656397][T32554] ? netlink_sendmsg+0x813/0xb40 [ 1222.656436][T32554] ? ____sys_sendmsg+0x972/0x9f0 [ 1222.656470][T32554] ? do_syscall_64+0x14d/0xf80 [ 1222.656502][T32554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.656586][T32554] ? validate_linkmsg+0x765/0x950 [ 1222.656634][T32554] ? __pfx_veth_newlink+0x10/0x10 [ 1222.656669][T32554] rtnl_newlink_create+0x329/0xb70 [ 1222.656696][T32554] ? __pfx___nla_validate_parse+0x10/0x10 [ 1222.656730][T32554] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1222.656761][T32554] ? __pfx___mutex_lock+0x10/0x10 [ 1222.656792][T32554] ? ns_capable+0x89/0xe0 [ 1222.656828][T32554] rtnl_newlink+0x1666/0x1be0 [ 1222.656869][T32554] ? __pfx_rtnl_newlink+0x10/0x10 [ 1222.656904][T32554] ? __lock_acquire+0x6b5/0x2cf0 [ 1222.656998][T32554] ? is_bpf_text_address+0x26/0x2b0 [ 1222.657025][T32554] ? kernel_text_address+0xa5/0xe0 [ 1222.657079][T32554] ? __pfx_rtnl_newlink+0x10/0x10 [ 1222.657102][T32554] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1222.657129][T32554] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1222.657153][T32554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1222.657180][T32554] ? __lock_acquire+0x6b5/0x2cf0 [ 1222.657220][T32554] netlink_rcv_skb+0x232/0x4b0 [ 1222.657244][T32554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1222.657270][T32554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1222.657305][T32554] ? netlink_deliver_tap+0x2e/0x1b0 [ 1222.657337][T32554] netlink_unicast+0x80f/0x9b0 [ 1222.657380][T32554] ? __pfx_netlink_unicast+0x10/0x10 [ 1222.657416][T32554] ? netlink_sendmsg+0x650/0xb40 [ 1222.657438][T32554] ? skb_put+0x11b/0x210 [ 1222.657467][T32554] netlink_sendmsg+0x813/0xb40 [ 1222.657502][T32554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1222.657530][T32554] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1222.657565][T32554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1222.657593][T32554] ____sys_sendmsg+0x972/0x9f0 [ 1222.657631][T32554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1222.657669][T32554] ? import_iovec+0x73/0xa0 [ 1222.657697][T32554] ___sys_sendmsg+0x2a5/0x360 [ 1222.657731][T32554] ? __pfx____sys_sendmsg+0x10/0x10 [ 1222.657797][T32554] ? __fget_files+0x2a/0x420 [ 1222.657840][T32554] ? __fget_files+0x3a0/0x420 [ 1222.657882][T32554] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1222.657912][T32554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1222.657950][T32554] ? __pfx_ksys_write+0x10/0x10 [ 1222.657992][T32554] do_syscall_64+0x14d/0xf80 [ 1222.658021][T32554] ? trace_irq_disable+0x3b/0x150 [ 1222.658040][T32554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.658061][T32554] ? clear_bhb_loop+0x40/0x90 [ 1222.658086][T32554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.658106][T32554] RIP: 0033:0x7f53b2b9c799 [ 1222.658127][T32554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.658145][T32554] RSP: 002b:00007f53b3a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.658166][T32554] RAX: ffffffffffffffda RBX: 00007f53b2e15fa0 RCX: 00007f53b2b9c799 [ 1222.658182][T32554] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1222.658194][T32554] RBP: 00007f53b3a66090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.658207][T32554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1222.658218][T32554] R13: 00007f53b2e16038 R14: 00007f53b2e15fa0 R15: 00007ffd682f3e88 [ 1222.658252][T32554] [ 1223.309213][T32540] lo speed is unknown, defaulting to 1000 [ 1223.317015][T32540] ±ÿ speed is unknown, defaulting to 1000 [ 1223.694641][T32572] netlink: 'syz.4.8290': attribute type 1 has an invalid length. [ 1224.276197][T32596] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1224.364602][T32601] : renamed from veth0_to_bond [ 1224.687546][T32613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.996915][T32623] __nla_validate_parse: 2 callbacks suppressed [ 1224.996931][T32623] netlink: 171836 bytes leftover after parsing attributes in process `syz.0.8310'. [ 1225.047437][T32633] netlink: 280 bytes leftover after parsing attributes in process `syz.2.8314'. [ 1225.661133][T32654] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8324'. [ 1225.700660][T32652] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1225.726422][T32654] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8324'. [ 1225.741451][T32657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8326'. [ 1225.944131][T32663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8328'. [ 1226.007850][T32668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8328'. [ 1227.948196][T32732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8348'. [ 1228.202513][T32741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8346'. [ 1228.270269][T32743] syzkaller0: entered promiscuous mode [ 1228.276194][T32743] syzkaller0: entered allmulticast mode [ 1228.568184][T32752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8355'. [ 1229.175364][ T304] netlink: 'syz.4.8360': attribute type 1 has an invalid length. [ 1229.307386][ T304] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1229.338655][ T314] FAULT_INJECTION: forcing a failure. [ 1229.338655][ T314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1229.352102][ T314] CPU: 0 UID: 0 PID: 314 Comm: syz.3.8365 Not tainted syzkaller #0 PREEMPT(full) [ 1229.352127][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1229.352140][ T314] Call Trace: [ 1229.352147][ T314] [ 1229.352156][ T314] dump_stack_lvl+0xe8/0x150 [ 1229.352190][ T314] should_fail_ex+0x412/0x560 [ 1229.352224][ T314] _copy_from_user+0x2d/0xb0 [ 1229.352248][ T314] ____sys_sendmsg+0x308/0x9f0 [ 1229.352274][ T314] ? __lock_acquire+0x6b5/0x2cf0 [ 1229.352317][ T314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1229.352354][ T314] ? import_iovec+0x73/0xa0 [ 1229.352381][ T314] ___sys_sendmsg+0x2a5/0x360 [ 1229.352432][ T314] ? __pfx____sys_sendmsg+0x10/0x10 [ 1229.352466][ T314] ? kstrtouint+0x6e/0xe0 [ 1229.352523][ T314] ? __fget_files+0x2a/0x420 [ 1229.352556][ T314] ? __fget_files+0x3a0/0x420 [ 1229.352599][ T314] __sys_sendmmsg+0x27c/0x4e0 [ 1229.352632][ T314] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1229.352658][ T314] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1229.352707][ T314] ? ksys_write+0x242/0x270 [ 1229.352734][ T314] ? __pfx_ksys_write+0x10/0x10 [ 1229.352766][ T314] __x64_sys_sendmmsg+0xa0/0xc0 [ 1229.352796][ T314] do_syscall_64+0x14d/0xf80 [ 1229.352828][ T314] ? trace_irq_disable+0x3b/0x150 [ 1229.352846][ T314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.352869][ T314] ? clear_bhb_loop+0x40/0x90 [ 1229.352896][ T314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.352918][ T314] RIP: 0033:0x7f668559c799 [ 1229.352938][ T314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.352957][ T314] RSP: 002b:00007f66863ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1229.352979][ T314] RAX: ffffffffffffffda RBX: 00007f6685815fa0 RCX: 00007f668559c799 [ 1229.352996][ T314] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 1229.353010][ T314] RBP: 00007f66863ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.353023][ T314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.353035][ T314] R13: 00007f6685816038 R14: 00007f6685815fa0 R15: 00007ffeeb19f3d8 [ 1229.353069][ T314] [ 1229.855980][ T323] erspan0: entered promiscuous mode [ 1229.867233][ T323] erspan0: entered allmulticast mode [ 1229.875449][ T327] xt_recent: Unsupported userspace flags (000000b1) [ 1229.967403][ T332] ip6gre1: left promiscuous mode [ 1229.975644][ T332] ip6gre1: left allmulticast mode [ 1230.066213][ T332] bridge12: left promiscuous mode [ 1230.102649][ T332] bond10: left promiscuous mode [ 1230.107616][ T332] ip6gre2: left promiscuous mode [ 1230.116202][ T332] bond11: left promiscuous mode [ 1230.466365][ T350] netlink: 'syz.4.8380': attribute type 2 has an invalid length. [ 1230.474671][ T350] netlink: 'syz.4.8380': attribute type 17 has an invalid length. [ 1230.490372][ T350] macsec2: entered allmulticast mode [ 1230.504077][ T350] dummy0: entered allmulticast mode [ 1231.595702][ T369] xt_recent: Unsupported userspace flags (000000b1) [ 1231.668508][ T371] FAULT_INJECTION: forcing a failure. [ 1231.668508][ T371] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.712096][ T371] CPU: 0 UID: 0 PID: 371 Comm: syz.3.8387 Not tainted syzkaller #0 PREEMPT(full) [ 1231.712123][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1231.712136][ T371] Call Trace: [ 1231.712145][ T371] [ 1231.712154][ T371] dump_stack_lvl+0xe8/0x150 [ 1231.712188][ T371] should_fail_ex+0x412/0x560 [ 1231.712223][ T371] should_failslab+0xa8/0x100 [ 1231.712249][ T371] ? __kernfs_new_node+0xe9/0x8e0 [ 1231.712289][ T371] kmem_cache_alloc_noprof+0x87/0x650 [ 1231.712319][ T371] __kernfs_new_node+0xe9/0x8e0 [ 1231.712355][ T371] ? __pfx___kernfs_new_node+0x10/0x10 [ 1231.712386][ T371] ? kernfs_root+0x1c/0x230 [ 1231.712420][ T371] ? kernfs_root+0x1c/0x230 [ 1231.712447][ T371] ? kernfs_root+0x1c/0x230 [ 1231.712473][ T371] ? kernfs_root+0x1c/0x230 [ 1231.712506][ T371] kernfs_new_node+0x102/0x210 [ 1231.712548][ T371] __kernfs_create_file+0x4b/0x2e0 [ 1231.712575][ T371] sysfs_add_file_mode_ns+0x238/0x300 [ 1231.712609][ T371] internal_create_group+0x673/0x1180 [ 1231.712654][ T371] ? __pfx_internal_create_group+0x10/0x10 [ 1231.712681][ T371] ? kernfs_add_one+0x477/0x5c0 [ 1231.712715][ T371] ? up_write+0x1ab/0x410 [ 1231.712738][ T371] sysfs_create_groups+0x59/0x120 [ 1231.712770][ T371] device_add_attrs+0x1bf/0x5b0 [ 1231.712795][ T371] ? kernfs_put+0x40e/0x470 [ 1231.712825][ T371] ? __pfx_device_add_attrs+0x10/0x10 [ 1231.712848][ T371] ? kobject_put+0x516/0x560 [ 1231.712875][ T371] ? device_add_class_symlinks+0x21f/0x240 [ 1231.712903][ T371] device_add+0x496/0xb70 [ 1231.712926][ T371] ? device_initialize+0x26a/0x460 [ 1231.712952][ T371] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1231.712984][ T371] wakeup_source_register+0x18a/0x380 [ 1231.713012][ T371] ep_insert+0x1022/0x1a40 [ 1231.713047][ T371] ? __pfx_ep_insert+0x10/0x10 [ 1231.713079][ T371] ? bpf_lsm_capable+0x9/0x20 [ 1231.713116][ T371] do_epoll_ctl+0x7f4/0xe80 [ 1231.713156][ T371] __x64_sys_epoll_ctl+0x165/0x1b0 [ 1231.713179][ T371] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1231.713211][ T371] do_syscall_64+0x14d/0xf80 [ 1231.713239][ T371] ? trace_irq_disable+0x3b/0x150 [ 1231.713257][ T371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.713277][ T371] ? clear_bhb_loop+0x40/0x90 [ 1231.713302][ T371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.713322][ T371] RIP: 0033:0x7f668559c799 [ 1231.713341][ T371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.713358][ T371] RSP: 002b:00007f66863ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1231.713380][ T371] RAX: ffffffffffffffda RBX: 00007f6685815fa0 RCX: 00007f668559c799 [ 1231.713395][ T371] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1231.713406][ T371] RBP: 00007f66863ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.713418][ T371] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000002 [ 1231.713431][ T371] R13: 00007f6685816038 R14: 00007f6685815fa0 R15: 00007ffeeb19f3d8 [ 1231.713463][ T371] [ 1232.290304][ T395] __nla_validate_parse: 3 callbacks suppressed [ 1232.290326][ T395] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8396'. [ 1232.525355][ T411] netlink: 'syz.0.8401': attribute type 1 has an invalid length. [ 1232.544741][ T411] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8401'. [ 1232.821673][ T422] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1233.010447][ T431] bridge11: entered promiscuous mode [ 1233.016395][ T431] bridge11: entered allmulticast mode [ 1233.024555][ T431] team0: Port device bridge11 added [ 1233.315904][ T449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8416'. [ 1233.442978][ T456] bridge9: port 1(erspan0) entered blocking state [ 1233.449841][ T456] bridge9: port 1(erspan0) entered disabled state [ 1233.457394][ T456] erspan0: entered allmulticast mode [ 1233.465828][ T456] erspan0: left allmulticast mode [ 1233.905676][ T434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1234.116680][ T465] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1234.385437][ T482] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8427'. [ 1234.484021][ T490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8432'. [ 1234.502550][ T491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8431'. [ 1234.580552][ T495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8433'. [ 1234.652975][ T491] bridge12: port 1(erspan0) entered blocking state [ 1234.665254][ T491] bridge12: port 1(erspan0) entered disabled state [ 1234.672151][ T491] erspan0: entered allmulticast mode [ 1234.680130][ T491] erspan0: left allmulticast mode [ 1234.699800][ T503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8437'. [ 1234.850830][ T506] FAULT_INJECTION: forcing a failure. [ 1234.850830][ T506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1234.870374][ T510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8439'. [ 1234.892437][ T506] CPU: 1 UID: 0 PID: 506 Comm: syz.3.8440 Not tainted syzkaller #0 PREEMPT(full) [ 1234.892463][ T506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1234.892474][ T506] Call Trace: [ 1234.892481][ T506] [ 1234.892489][ T506] dump_stack_lvl+0xe8/0x150 [ 1234.892522][ T506] should_fail_ex+0x412/0x560 [ 1234.892554][ T506] _copy_from_iter+0x1d3/0x1670 [ 1234.892593][ T506] ? __pfx__copy_from_iter+0x10/0x10 [ 1234.892619][ T506] ? lockdep_hardirqs_on+0x7a/0x110 [ 1234.892646][ T506] ? irqentry_exit+0x59e/0x620 [ 1234.892671][ T506] ? trace_irq_disable+0x3b/0x150 [ 1234.892703][ T506] skb_copy_datagram_from_iter+0xf5/0x710 [ 1234.892748][ T506] ? iov_iter_single_seg_count+0xc9/0x2f0 [ 1234.892770][ T506] tun_get_user+0xc38/0x3dd0 [ 1234.892802][ T506] ? aa_file_perm+0x192/0x15e0 [ 1234.892825][ T506] ? aa_file_perm+0x50e/0x15e0 [ 1234.892840][ T506] ? __pfx_tun_get_user+0x10/0x10 [ 1234.892858][ T506] ? aa_file_perm+0x192/0x15e0 [ 1234.892880][ T506] ? __lock_acquire+0x6b5/0x2cf0 [ 1234.892914][ T506] ? ref_tracker_alloc+0x35c/0x4c0 [ 1234.892944][ T506] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1234.892978][ T506] ? tun_get+0x1c/0x2f0 [ 1234.893007][ T506] ? tun_get+0x1c/0x2f0 [ 1234.893047][ T506] ? tun_get+0x1c/0x2f0 [ 1234.893075][ T506] tun_chr_write_iter+0x113/0x200 [ 1234.893105][ T506] vfs_write+0x61d/0xb90 [ 1234.893142][ T506] ? __pfx_vfs_write+0x10/0x10 [ 1234.893180][ T506] ? __fget_files+0x2a/0x420 [ 1234.893222][ T506] ksys_write+0x150/0x270 [ 1234.893248][ T506] ? __pfx_ksys_write+0x10/0x10 [ 1234.893283][ T506] do_syscall_64+0x14d/0xf80 [ 1234.893314][ T506] ? trace_irq_disable+0x3b/0x150 [ 1234.893333][ T506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.893356][ T506] ? clear_bhb_loop+0x40/0x90 [ 1234.893382][ T506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.893404][ T506] RIP: 0033:0x7f668559c799 [ 1234.893425][ T506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.893444][ T506] RSP: 002b:00007f66863ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1234.893467][ T506] RAX: ffffffffffffffda RBX: 00007f6685815fa0 RCX: 00007f668559c799 [ 1234.893484][ T506] RDX: 000000000000009e RSI: 0000200000000200 RDI: 0000000000000005 [ 1234.893498][ T506] RBP: 00007f66863ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.893512][ T506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.893525][ T506] R13: 00007f6685816038 R14: 00007f6685815fa0 R15: 00007ffeeb19f3d8 [ 1234.893562][ T506] [ 1235.205117][ T512] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8441'. [ 1235.465554][T22988] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1235.482278][T22988] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1235.493085][ T5901] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1235.682306][T28040] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1235.821723][ T541] xt_l2tp: v2 doesn't support IP mode [ 1235.895084][T28040] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1235.933752][ T548] bridge10: port 1(erspan0) entered blocking state [ 1235.940451][ T548] bridge10: port 1(erspan0) entered disabled state [ 1235.947937][ T548] erspan0: entered allmulticast mode [ 1235.966343][ T548] erspan0: left allmulticast mode [ 1236.531632][ T581] netlink: 'syz.0.8467': attribute type 1 has an invalid length. [ 1236.562241][ T581] netlink: 'syz.0.8467': attribute type 11 has an invalid length. [ 1237.330053][ T626] FAULT_INJECTION: forcing a failure. [ 1237.330053][ T626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.344079][ T626] CPU: 0 UID: 0 PID: 626 Comm: syz.0.8482 Not tainted syzkaller #0 PREEMPT(full) [ 1237.344108][ T626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1237.344122][ T626] Call Trace: [ 1237.344131][ T626] [ 1237.344140][ T626] dump_stack_lvl+0xe8/0x150 [ 1237.344177][ T626] should_fail_ex+0x412/0x560 [ 1237.344215][ T626] _copy_to_user+0x31/0xb0 [ 1237.344243][ T626] simple_read_from_buffer+0xe1/0x170 [ 1237.344280][ T626] proc_fail_nth_read+0x1bb/0x230 [ 1237.344317][ T626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1237.344352][ T626] ? rw_verify_area+0x2a6/0x4d0 [ 1237.344376][ T626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1237.344410][ T626] vfs_read+0x20c/0xa70 [ 1237.344432][ T626] ? fdget_pos+0x246/0x320 [ 1237.344458][ T626] ? __pfx___mutex_lock+0x10/0x10 [ 1237.344481][ T626] ? __pfx_vfs_read+0x10/0x10 [ 1237.344507][ T626] ? __fget_files+0x2a/0x420 [ 1237.344553][ T626] ? __fget_files+0x3a0/0x420 [ 1237.344584][ T626] ? __fget_files+0x2a/0x420 [ 1237.344626][ T626] ksys_read+0x150/0x270 [ 1237.344656][ T626] ? __pfx_ksys_read+0x10/0x10 [ 1237.344693][ T626] do_syscall_64+0x14d/0xf80 [ 1237.344724][ T626] ? trace_irq_disable+0x3b/0x150 [ 1237.344743][ T626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.344767][ T626] ? clear_bhb_loop+0x40/0x90 [ 1237.344794][ T626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.344816][ T626] RIP: 0033:0x7fb923b5cfce [ 1237.344836][ T626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1237.344856][ T626] RSP: 002b:00007fb924ac7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1237.344879][ T626] RAX: ffffffffffffffda RBX: 00007fb924ac86c0 RCX: 00007fb923b5cfce [ 1237.344896][ T626] RDX: 000000000000000f RSI: 00007fb924ac80a0 RDI: 0000000000000005 [ 1237.344909][ T626] RBP: 00007fb924ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.344922][ T626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.344935][ T626] R13: 00007fb923e16038 R14: 00007fb923e15fa0 R15: 00007ffc1707be18 [ 1237.344970][ T626] [ 1238.080233][ T661] FAULT_INJECTION: forcing a failure. [ 1238.080233][ T661] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.097470][ T661] CPU: 1 UID: 0 PID: 661 Comm: syz.1.8494 Not tainted syzkaller #0 PREEMPT(full) [ 1238.097499][ T661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1238.097514][ T661] Call Trace: [ 1238.097523][ T661] [ 1238.097533][ T661] dump_stack_lvl+0xe8/0x150 [ 1238.097570][ T661] should_fail_ex+0x412/0x560 [ 1238.097608][ T661] should_failslab+0xa8/0x100 [ 1238.097640][ T661] __kmalloc_cache_noprof+0x88/0x660 [ 1238.097666][ T661] ? sctp_add_bind_addr+0x8c/0x370 [ 1238.097705][ T661] sctp_add_bind_addr+0x8c/0x370 [ 1238.097741][ T661] sctp_copy_local_addr_list+0x314/0x4f0 [ 1238.097778][ T661] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1238.097810][ T661] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1238.097844][ T661] ? sctp_v6_is_any+0x64/0x80 [ 1238.097867][ T661] ? sctp_copy_one_addr+0x93/0x360 [ 1238.097902][ T661] sctp_bind_addr_copy+0xb3/0x3c0 [ 1238.097935][ T661] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1238.097967][ T661] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1238.097995][ T661] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1238.098034][ T661] ? __local_bh_enable_ip+0xd0/0x130 [ 1238.098063][ T661] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1238.098090][ T661] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1238.098122][ T661] sctp_sendmsg+0x1528/0x2c10 [ 1238.098163][ T661] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1238.098191][ T661] ? aa_sk_perm+0x6d5/0x900 [ 1238.098231][ T661] ? __pfx_aa_sk_perm+0x10/0x10 [ 1238.098265][ T661] ? sock_rps_record_flow+0x19/0x350 [ 1238.098297][ T661] ? inet_sendmsg+0x2f4/0x370 [ 1238.098328][ T661] ____sys_sendmsg+0x80a/0x9f0 [ 1238.098367][ T661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.098405][ T661] ? import_iovec+0x73/0xa0 [ 1238.098451][ T661] ___sys_sendmsg+0x2a5/0x360 [ 1238.098484][ T661] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.098552][ T661] ? __fget_files+0x2a/0x420 [ 1238.098584][ T661] ? __fget_files+0x3a0/0x420 [ 1238.098629][ T661] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1238.098664][ T661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1238.098704][ T661] ? __pfx_ksys_write+0x10/0x10 [ 1238.098743][ T661] do_syscall_64+0x14d/0xf80 [ 1238.098776][ T661] ? trace_irq_disable+0x3b/0x150 [ 1238.098796][ T661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.098819][ T661] ? clear_bhb_loop+0x40/0x90 [ 1238.098847][ T661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.098869][ T661] RIP: 0033:0x7fb94159c799 [ 1238.098891][ T661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.098910][ T661] RSP: 002b:00007fb942403028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.098934][ T661] RAX: ffffffffffffffda RBX: 00007fb941815fa0 RCX: 00007fb94159c799 [ 1238.098951][ T661] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 1238.098965][ T661] RBP: 00007fb942403090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.098979][ T661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.098993][ T661] R13: 00007fb941816038 R14: 00007fb941815fa0 R15: 00007ffc8b6a9048 [ 1238.099037][ T661] [ 1238.101674][ T663] netlink: 'syz.3.8495': attribute type 1 has an invalid length. [ 1238.329502][ T667] __nla_validate_parse: 2 callbacks suppressed [ 1238.330281][ T667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8495'. [ 1238.779927][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1238.997010][ T704] openvswitch: netlink: Invalid VLAN frame [ 1239.172170][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1239.653560][ T731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8515'. [ 1239.912772][ T741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8519'. [ 1239.968368][ T746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8519'. [ 1240.272970][ T766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8526'. [ 1240.351423][ T770] FAULT_INJECTION: forcing a failure. [ 1240.351423][ T770] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.391449][ T770] CPU: 1 UID: 0 PID: 770 Comm: syz.1.8528 Not tainted syzkaller #0 PREEMPT(full) [ 1240.391478][ T770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1240.391493][ T770] Call Trace: [ 1240.391502][ T770] [ 1240.391512][ T770] dump_stack_lvl+0xe8/0x150 [ 1240.391548][ T770] should_fail_ex+0x412/0x560 [ 1240.391587][ T770] should_failslab+0xa8/0x100 [ 1240.391619][ T770] __kmalloc_noprof+0xe8/0x760 [ 1240.391645][ T770] ? ethnl_default_start+0x14b/0x620 [ 1240.391670][ T770] ? __kmalloc_noprof+0x1b8/0x760 [ 1240.391698][ T770] ethnl_default_start+0x14b/0x620 [ 1240.391732][ T770] genl_start+0x4c3/0x6c0 [ 1240.391767][ T770] __netlink_dump_start+0x469/0x7e0 [ 1240.391800][ T770] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1240.391834][ T770] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1240.391864][ T770] ? genl_get_cmd+0x6cb/0x960 [ 1240.391894][ T770] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1240.391921][ T770] ? __pfx_genl_start+0x10/0x10 [ 1240.391948][ T770] ? __pfx_genl_dumpit+0x10/0x10 [ 1240.391978][ T770] ? __pfx_genl_done+0x10/0x10 [ 1240.392013][ T770] ? __lock_acquire+0x6b5/0x2cf0 [ 1240.392047][ T770] genl_rcv_msg+0x5e8/0x7a0 [ 1240.392085][ T770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1240.392112][ T770] ? __pfx_ethnl_default_start+0x10/0x10 [ 1240.392136][ T770] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1240.392161][ T770] ? __pfx_ethnl_default_done+0x10/0x10 [ 1240.392188][ T770] ? __lock_acquire+0x6b5/0x2cf0 [ 1240.392228][ T770] netlink_rcv_skb+0x232/0x4b0 [ 1240.392265][ T770] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1240.392296][ T770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1240.392340][ T770] ? down_read+0x272/0x2e0 [ 1240.392360][ T770] ? genl_rcv+0xd/0x40 [ 1240.392390][ T770] genl_rcv+0x28/0x40 [ 1240.392416][ T770] netlink_unicast+0x80f/0x9b0 [ 1240.392459][ T770] ? __pfx_netlink_unicast+0x10/0x10 [ 1240.392494][ T770] ? netlink_sendmsg+0x650/0xb40 [ 1240.392516][ T770] ? skb_put+0x11b/0x210 [ 1240.392546][ T770] netlink_sendmsg+0x813/0xb40 [ 1240.392580][ T770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1240.392608][ T770] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1240.392643][ T770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1240.392673][ T770] ____sys_sendmsg+0x972/0x9f0 [ 1240.392712][ T770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1240.392751][ T770] ? import_iovec+0x73/0xa0 [ 1240.392779][ T770] ___sys_sendmsg+0x2a5/0x360 [ 1240.392815][ T770] ? __pfx____sys_sendmsg+0x10/0x10 [ 1240.392883][ T770] ? __fget_files+0x2a/0x420 [ 1240.392915][ T770] ? __fget_files+0x3a0/0x420 [ 1240.392959][ T770] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1240.392991][ T770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1240.393031][ T770] ? __pfx_ksys_write+0x10/0x10 [ 1240.393069][ T770] do_syscall_64+0x14d/0xf80 [ 1240.393100][ T770] ? trace_irq_disable+0x3b/0x150 [ 1240.393119][ T770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.393142][ T770] ? clear_bhb_loop+0x40/0x90 [ 1240.393170][ T770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.393191][ T770] RIP: 0033:0x7fb94159c799 [ 1240.393212][ T770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.393231][ T770] RSP: 002b:00007fb942403028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1240.393262][ T770] RAX: ffffffffffffffda RBX: 00007fb941815fa0 RCX: 00007fb94159c799 [ 1240.393278][ T770] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1240.393291][ T770] RBP: 00007fb942403090 R08: 0000000000000000 R09: 0000000000000000 [ 1240.393304][ T770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1240.393316][ T770] R13: 00007fb941816038 R14: 00007fb941815fa0 R15: 00007ffc8b6a9048 [ 1240.393352][ T770] [ 1240.399747][ T773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8529'. [ 1241.102048][ T799] FAULT_INJECTION: forcing a failure. [ 1241.102048][ T799] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1241.122395][ T799] CPU: 1 UID: 0 PID: 799 Comm: syz.3.8539 Not tainted syzkaller #0 PREEMPT(full) [ 1241.122424][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1241.122438][ T799] Call Trace: [ 1241.122447][ T799] [ 1241.122456][ T799] dump_stack_lvl+0xe8/0x150 [ 1241.122493][ T799] should_fail_ex+0x412/0x560 [ 1241.122532][ T799] prepare_alloc_pages+0x22a/0x650 [ 1241.122570][ T799] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1241.122604][ T799] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1241.122636][ T799] ? __pfx_policy_nodemask+0x10/0x10 [ 1241.122677][ T799] alloc_pages_mpol+0x232/0x4a0 [ 1241.122711][ T799] vma_alloc_folio_noprof+0xea/0x210 [ 1241.122743][ T799] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1241.122784][ T799] do_wp_page+0x1204/0x5a00 [ 1241.122822][ T799] ? __pfx_css_rstat_updated+0x10/0x10 [ 1241.122899][ T799] ? __pfx_do_wp_page+0x10/0x10 [ 1241.122928][ T799] ? do_raw_spin_lock+0x12b/0x2f0 [ 1241.122954][ T799] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1241.122988][ T799] handle_mm_fault+0x1520/0x3310 [ 1241.123036][ T799] ? handle_mm_fault+0xee/0x3310 [ 1241.123078][ T799] ? __pfx_handle_mm_fault+0x10/0x10 [ 1241.123134][ T799] ? __pfx___up_read+0x10/0x10 [ 1241.123162][ T799] ? lock_mm_and_find_vma+0xa7/0x340 [ 1241.123190][ T799] do_user_addr_fault+0x75b/0x1340 [ 1241.123238][ T799] exc_page_fault+0x6a/0xc0 [ 1241.123271][ T799] asm_exc_page_fault+0x26/0x30 [ 1241.123292][ T799] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1241.123318][ T799] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1241.123336][ T799] RSP: 0018:ffffc9001054f3d8 EFLAGS: 00050206 [ 1241.123356][ T799] RAX: ffffffff84acb901 RBX: ffff8880903f8000 RCX: 0000000000000480 [ 1241.123372][ T799] RDX: 0000000000000000 RSI: ffff8880903ffb80 RDI: 000020000000a000 [ 1241.123387][ T799] RBP: ffffc9001054f558 R08: ffff8880903fffff R09: 1ffff1101207ffff [ 1241.123403][ T799] R10: dffffc0000000000 R11: ffffed1012080000 R12: 1ffff920020a9fbf [ 1241.123419][ T799] R13: 0000200000002480 R14: ffffc9001054fe08 R15: 0000000000008000 [ 1241.123443][ T799] ? _copy_to_iter+0x161/0x17d0 [ 1241.123484][ T799] _copy_to_iter+0x255/0x17d0 [ 1241.123517][ T799] ? __mutex_trylock_common+0x158/0x260 [ 1241.123553][ T799] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1241.123589][ T799] ? rcu_is_watching+0x15/0xb0 [ 1241.123622][ T799] ? __pfx__copy_to_iter+0x10/0x10 [ 1241.123653][ T799] ? __lock_acquire+0x6b5/0x2cf0 [ 1241.123698][ T799] __skb_datagram_iter+0x41a/0x980 [ 1241.123730][ T799] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1241.123770][ T799] skb_copy_datagram_iter+0xb5/0x270 [ 1241.123806][ T799] unix_stream_read_actor+0x6c/0xb0 [ 1241.123837][ T799] unix_stream_read_generic+0xa67/0x2390 [ 1241.123900][ T799] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1241.123926][ T799] ? unwind_next_frame+0xa5/0x23c0 [ 1241.123983][ T799] unix_stream_recvmsg+0x16b/0x1d0 [ 1241.124011][ T799] ? __lock_acquire+0x6b5/0x2cf0 [ 1241.124040][ T799] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1241.124068][ T799] ? is_bpf_text_address+0x26/0x2b0 [ 1241.124104][ T799] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1241.124136][ T799] ? aa_sock_msg_perm+0xda/0x1b0 [ 1241.124170][ T799] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1241.124194][ T799] ? security_socket_recvmsg+0x7e/0x2c0 [ 1241.124219][ T799] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1241.124249][ T799] sock_recvmsg+0x172/0x1b0 [ 1241.124275][ T799] ____sys_recvmsg+0x1e6/0x4a0 [ 1241.124314][ T799] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1241.124361][ T799] ? import_iovec+0x73/0xa0 [ 1241.124390][ T799] ___sys_recvmsg+0x215/0x590 [ 1241.124416][ T799] ? get_pid_task+0x20/0x1f0 [ 1241.124443][ T799] ? __pfx____sys_recvmsg+0x10/0x10 [ 1241.124500][ T799] ? __fget_files+0x3a0/0x420 [ 1241.124544][ T799] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1241.124577][ T799] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1241.124618][ T799] ? __pfx_ksys_write+0x10/0x10 [ 1241.124655][ T799] do_syscall_64+0x14d/0xf80 [ 1241.124686][ T799] ? trace_irq_disable+0x3b/0x150 [ 1241.124705][ T799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.124727][ T799] ? clear_bhb_loop+0x40/0x90 [ 1241.124753][ T799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.124800][ T799] RIP: 0033:0x7f668559c799 [ 1241.124820][ T799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.124838][ T799] RSP: 002b:00007f66863de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1241.124859][ T799] RAX: ffffffffffffffda RBX: 00007f6685816090 RCX: 00007f668559c799 [ 1241.124875][ T799] RDX: 0000000040000300 RSI: 0000200000001140 RDI: 0000000000000006 [ 1241.124888][ T799] RBP: 00007f66863de090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.124902][ T799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1241.124915][ T799] R13: 00007f6685816128 R14: 00007f6685816090 R15: 00007ffeeb19f3d8 [ 1241.124956][ T799] [ 1241.259396][ T802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1241.668904][ T804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8533'. [ 1241.695504][ T804] : entered promiscuous mode [ 1241.966837][ T811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8543'. [ 1241.985828][ T811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8543'. [ 1242.015075][ T809] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1242.089379][ T787] lo speed is unknown, defaulting to 1000 [ 1242.097012][ T816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8545'. [ 1242.106382][ T787] ±ÿ speed is unknown, defaulting to 1000 [ 1243.067659][ T851] vlan5: entered promiscuous mode [ 1243.894186][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 1243.902269][ C0] lec:lec_tx_timeout: lec0 [ 1247.092576][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1262.452350][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1262.641412][ T882] __nla_validate_parse: 2 callbacks suppressed [ 1262.641436][ T882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8568'. [ 1262.838945][ T893] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8574'. [ 1263.009063][ T903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8580'. [ 1263.098259][ T915] FAULT_INJECTION: forcing a failure. [ 1263.098259][ T915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.124382][ T912] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1263.129518][ T915] CPU: 1 UID: 0 PID: 915 Comm: syz.1.8579 Not tainted syzkaller #0 PREEMPT(full) [ 1263.129594][ T915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1263.129637][ T915] Call Trace: [ 1263.129666][ T915] [ 1263.129689][ T915] dump_stack_lvl+0xe8/0x150 [ 1263.129785][ T915] should_fail_ex+0x412/0x560 [ 1263.129888][ T915] _copy_to_iter+0x1e4/0x17d0 [ 1263.129990][ T915] ? sock_recvmsg+0x172/0x1b0 [ 1263.130044][ T915] ? ____sys_recvmsg+0x1e6/0x4a0 [ 1263.130130][ T915] ? ___sys_recvmsg+0x215/0x590 [ 1263.130223][ T915] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 1263.130331][ T915] ? __pfx__copy_to_iter+0x10/0x10 [ 1263.130421][ T915] ? __lock_acquire+0x6b5/0x2cf0 [ 1263.130529][ T915] __skb_datagram_iter+0x41a/0x980 [ 1263.130612][ T915] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1263.130732][ T915] skb_copy_datagram_iter+0xb5/0x270 [ 1263.130812][ T915] unix_stream_read_actor+0x6c/0xb0 [ 1263.130886][ T915] unix_stream_read_generic+0xa67/0x2390 [ 1263.131055][ T915] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1263.131127][ T915] ? unwind_next_frame+0xa5/0x23c0 [ 1263.131258][ T915] unix_stream_recvmsg+0x16b/0x1d0 [ 1263.131336][ T915] ? __lock_acquire+0x6b5/0x2cf0 [ 1263.131427][ T915] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1263.131502][ T915] ? is_bpf_text_address+0x26/0x2b0 [ 1263.131575][ T915] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1263.131664][ T915] ? aa_sock_msg_perm+0xda/0x1b0 [ 1263.131757][ T915] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1263.131820][ T915] ? security_socket_recvmsg+0x7e/0x2c0 [ 1263.131883][ T915] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1263.131983][ T915] sock_recvmsg+0x172/0x1b0 [ 1263.132046][ T915] ____sys_recvmsg+0x1e6/0x4a0 [ 1263.132136][ T915] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1263.132263][ T915] ? import_iovec+0x73/0xa0 [ 1263.132336][ T915] ___sys_recvmsg+0x215/0x590 [ 1263.132401][ T915] ? get_pid_task+0x20/0x1f0 [ 1263.132476][ T915] ? __pfx____sys_recvmsg+0x10/0x10 [ 1263.132628][ T915] ? __fget_files+0x3a0/0x420 [ 1263.132715][ T915] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1263.132747][ T915] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1263.132787][ T915] ? __pfx_ksys_write+0x10/0x10 [ 1263.132835][ T915] do_syscall_64+0x14d/0xf80 [ 1263.132914][ T915] ? trace_irq_disable+0x3b/0x150 [ 1263.132986][ T915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.133057][ T915] ? clear_bhb_loop+0x40/0x90 [ 1263.133129][ T915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.133201][ T915] RIP: 0033:0x7fb94159c799 [ 1263.133253][ T915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.133295][ T915] RSP: 002b:00007fb9423e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1263.133358][ T915] RAX: ffffffffffffffda RBX: 00007fb941816090 RCX: 00007fb94159c799 [ 1263.133398][ T915] RDX: 0000000040000300 RSI: 0000200000001140 RDI: 0000000000000006 [ 1263.133440][ T915] RBP: 00007fb9423e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.133481][ T915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1263.133511][ T915] R13: 00007fb941816128 R14: 00007fb941816090 R15: 00007ffc8b6a9048 [ 1263.133602][ T915] [ 1263.459945][T22998] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1263.472422][T22998] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1263.480702][T22998] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1263.498376][T22998] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1263.704769][ T943] netlink: 'syz.2.8590': attribute type 1 has an invalid length. [ 1263.773392][ T943] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1264.339803][ T990] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8606'. [ 1264.539878][ T1002] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 1264.717268][ T1012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8612'. [ 1264.923537][ T6390] lec:lec_start_xmit: lec0:No lecd attached [ 1265.532743][ T1035] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8618'. [ 1265.756842][ T1049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8624'. [ 1265.766187][ T1049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8624'. [ 1265.907426][ T1063] xt_recent: Unsupported userspace flags (000000b1) [ 1265.965655][ T1065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8628'. [ 1266.026647][ T1067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8629'. [ 1266.039976][ T1067] netlink: 'syz.2.8629': attribute type 14 has an invalid length. [ 1266.047960][ T1067] netlink: 'syz.2.8629': attribute type 13 has an invalid length. [ 1266.649637][ T1102] xt_recent: Unsupported userspace flags (000000b1) [ 1267.191539][ T1128] netlink: 'syz.2.8651': attribute type 1 has an invalid length. [ 1267.381017][ T1128] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1267.584793][ T1137] bond18 (unregistering): Released all slaves [ 1267.661902][ T1147] xt_recent: Unsupported userspace flags (000000b1) [ 1267.871471][ T1152] __nla_validate_parse: 7 callbacks suppressed [ 1267.871493][ T1152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8658'. [ 1267.944902][ T1152] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1267.958014][ T1156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8660'. [ 1267.970149][ T1152] bond10 (unregistering): Released all slaves [ 1267.996982][ T1157] netlink: 203340 bytes leftover after parsing attributes in process `syz.0.8658'. [ 1268.064180][ T1157] xt_hashlimit: max too large, truncated to 1048576 [ 1268.252163][ T1170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8664'. [ 1268.349789][ T1170] netlink: 'syz.0.8664': attribute type 2 has an invalid length. [ 1268.359215][ T1170] netlink: 'syz.0.8664': attribute type 1 has an invalid length. [ 1268.367327][ T1170] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8664'. [ 1268.441484][ T1179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8668'. [ 1268.502681][ T1182] netlink: 'syz.4.8670': attribute type 1 has an invalid length. [ 1268.523915][ T1182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8670'. [ 1268.569870][ T1182] vlan5: entered allmulticast mode [ 1268.575252][ T1182] bridge11: entered allmulticast mode [ 1268.592967][ T1182] bridge11: port 1(erspan0) entered blocking state [ 1268.599629][ T1182] bridge11: port 1(erspan0) entered disabled state [ 1268.607015][ T1182] erspan0: entered allmulticast mode [ 1268.618552][ T1182] erspan0: left allmulticast mode [ 1268.774036][ T1195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.794219][ T1192] tipc: Enabling of bearer rejected, failed to enable media [ 1268.809697][ T1195] sctp: [Deprecated]: syz.1.8675 (pid 1195) Use of int in maxseg socket option. [ 1268.809697][ T1195] Use struct sctp_assoc_value instead [ 1268.976691][ T1201] netlink: 'syz.4.8678': attribute type 39 has an invalid length. [ 1269.001127][ T1201] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8678'. [ 1269.024025][ T1201] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8678'. [ 1269.033331][ T1201] netlink: 'syz.4.8678': attribute type 5 has an invalid length. [ 1269.041180][ T1201] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8678'. [ 1269.084520][ T1212] FAULT_INJECTION: forcing a failure. [ 1269.084520][ T1212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1269.145930][ T1212] CPU: 0 UID: 0 PID: 1212 Comm: syz.1.8681 Not tainted syzkaller #0 PREEMPT(full) [ 1269.145961][ T1212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1269.145975][ T1212] Call Trace: [ 1269.145984][ T1212] [ 1269.145993][ T1212] dump_stack_lvl+0xe8/0x150 [ 1269.146028][ T1212] should_fail_ex+0x412/0x560 [ 1269.146064][ T1212] prepare_alloc_pages+0x22a/0x650 [ 1269.146101][ T1212] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1269.146141][ T1212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1269.146174][ T1212] ? __pfx_policy_nodemask+0x10/0x10 [ 1269.146213][ T1212] alloc_pages_mpol+0x232/0x4a0 [ 1269.146247][ T1212] vma_alloc_folio_noprof+0xea/0x210 [ 1269.146279][ T1212] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1269.146319][ T1212] do_wp_page+0x1204/0x5a00 [ 1269.146357][ T1212] ? __pfx_css_rstat_updated+0x10/0x10 [ 1269.146396][ T1212] ? __pfx_do_wp_page+0x10/0x10 [ 1269.146425][ T1212] ? do_raw_spin_lock+0x12b/0x2f0 [ 1269.146452][ T1212] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1269.146486][ T1212] handle_mm_fault+0x1520/0x3310 [ 1269.146535][ T1212] ? handle_mm_fault+0xee/0x3310 [ 1269.146577][ T1212] ? __pfx_handle_mm_fault+0x10/0x10 [ 1269.146628][ T1212] ? lock_mm_and_find_vma+0xa7/0x340 [ 1269.146658][ T1212] do_user_addr_fault+0x75b/0x1340 [ 1269.146705][ T1212] exc_page_fault+0x6a/0xc0 [ 1269.146739][ T1212] asm_exc_page_fault+0x26/0x30 [ 1269.146777][ T1212] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1269.146810][ T1212] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1269.146829][ T1212] RSP: 0018:ffffc9001bc8f3d8 EFLAGS: 00050206 [ 1269.146849][ T1212] RAX: ffffffff84acb901 RBX: ffff888034780000 RCX: 0000000000007340 [ 1269.146865][ T1212] RDX: 0000000000000000 RSI: ffff888034780cc0 RDI: 000020000000c000 [ 1269.146879][ T1212] RBP: ffffc9001bc8f558 R08: ffff888034787fff R09: 1ffff110068f0fff [ 1269.146894][ T1212] R10: dffffc0000000000 R11: ffffed10068f1000 R12: 1ffff92003791fbf [ 1269.146910][ T1212] R13: 000020000000b340 R14: ffffc9001bc8fe08 R15: 0000000000008000 [ 1269.146934][ T1212] ? _copy_to_iter+0x161/0x17d0 [ 1269.146976][ T1212] _copy_to_iter+0x255/0x17d0 [ 1269.147008][ T1212] ? sock_recvmsg+0x172/0x1b0 [ 1269.147027][ T1212] ? ____sys_recvmsg+0x1e6/0x4a0 [ 1269.147054][ T1212] ? ___sys_recvmsg+0x215/0x590 [ 1269.147079][ T1212] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 1269.147122][ T1212] ? __pfx__copy_to_iter+0x10/0x10 [ 1269.147154][ T1212] ? __lock_acquire+0x6b5/0x2cf0 [ 1269.147198][ T1212] __skb_datagram_iter+0x41a/0x980 [ 1269.147231][ T1212] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1269.147270][ T1212] skb_copy_datagram_iter+0xb5/0x270 [ 1269.147306][ T1212] unix_stream_read_actor+0x6c/0xb0 [ 1269.147337][ T1212] unix_stream_read_generic+0xa67/0x2390 [ 1269.147400][ T1212] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1269.147426][ T1212] ? unwind_next_frame+0xa5/0x23c0 [ 1269.147483][ T1212] unix_stream_recvmsg+0x16b/0x1d0 [ 1269.147510][ T1212] ? __lock_acquire+0x6b5/0x2cf0 [ 1269.147540][ T1212] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1269.147569][ T1212] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1269.147602][ T1212] ? aa_sock_msg_perm+0xda/0x1b0 [ 1269.147637][ T1212] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1269.147661][ T1212] ? security_socket_recvmsg+0x7e/0x2c0 [ 1269.147685][ T1212] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1269.147716][ T1212] sock_recvmsg+0x172/0x1b0 [ 1269.147741][ T1212] ____sys_recvmsg+0x1e6/0x4a0 [ 1269.147780][ T1212] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1269.147834][ T1212] ? import_iovec+0x73/0xa0 [ 1269.147861][ T1212] ___sys_recvmsg+0x215/0x590 [ 1269.147888][ T1212] ? get_pid_task+0x20/0x1f0 [ 1269.147914][ T1212] ? __pfx____sys_recvmsg+0x10/0x10 [ 1269.147970][ T1212] ? __fget_files+0x3a0/0x420 [ 1269.148015][ T1212] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1269.148048][ T1212] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1269.148088][ T1212] ? rcu_is_watching+0x15/0xb0 [ 1269.148132][ T1212] do_syscall_64+0x14d/0xf80 [ 1269.148162][ T1212] ? trace_irq_disable+0x3b/0x150 [ 1269.148181][ T1212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.148203][ T1212] ? clear_bhb_loop+0x40/0x90 [ 1269.148229][ T1212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.148250][ T1212] RIP: 0033:0x7fb94159c799 [ 1269.148270][ T1212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.148289][ T1212] RSP: 002b:00007fb9423e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1269.148311][ T1212] RAX: ffffffffffffffda RBX: 00007fb941816090 RCX: 00007fb94159c799 [ 1269.148327][ T1212] RDX: 0000000040000300 RSI: 0000200000001140 RDI: 0000000000000006 [ 1269.148342][ T1212] RBP: 00007fb9423e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.148355][ T1212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1269.148367][ T1212] R13: 00007fb941816128 R14: 00007fb941816090 R15: 00007ffc8b6a9048 [ 1269.148420][ T1212] [ 1269.932036][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1269.940150][ C0] lec:lec_tx_timeout: lec0 [ 1270.546426][ T1273] netlink: 'syz.2.8700': attribute type 1 has an invalid length. [ 1270.627838][ T1263] bond18 (unregistering): Released all slaves [ 1270.991029][ T1298] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 1271.184253][ T1307] netlink: 'syz.1.8712': attribute type 3 has an invalid length. [ 1271.245529][ T1280] lo speed is unknown, defaulting to 1000 [ 1271.265690][ T1280] ±ÿ speed is unknown, defaulting to 1000 [ 1272.211797][ T1356] FAULT_INJECTION: forcing a failure. [ 1272.211797][ T1356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1272.225782][ T1356] CPU: 0 UID: 0 PID: 1356 Comm: syz.1.8727 Not tainted syzkaller #0 PREEMPT(full) [ 1272.225813][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1272.225823][ T1356] Call Trace: [ 1272.225830][ T1356] [ 1272.225836][ T1356] dump_stack_lvl+0xe8/0x150 [ 1272.225863][ T1356] should_fail_ex+0x412/0x560 [ 1272.225889][ T1356] _copy_to_user+0x31/0xb0 [ 1272.225909][ T1356] simple_read_from_buffer+0xe1/0x170 [ 1272.225935][ T1356] proc_fail_nth_read+0x1bb/0x230 [ 1272.225959][ T1356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1272.225983][ T1356] ? rw_verify_area+0x2a6/0x4d0 [ 1272.225998][ T1356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1272.226048][ T1356] vfs_read+0x20c/0xa70 [ 1272.226069][ T1356] ? fdget_pos+0x246/0x320 [ 1272.226094][ T1356] ? __pfx___mutex_lock+0x10/0x10 [ 1272.226122][ T1356] ? __pfx_vfs_read+0x10/0x10 [ 1272.226139][ T1356] ? __fget_files+0x2a/0x420 [ 1272.226165][ T1356] ? __fget_files+0x3a0/0x420 [ 1272.226186][ T1356] ? __fget_files+0x2a/0x420 [ 1272.226215][ T1356] ksys_read+0x150/0x270 [ 1272.226232][ T1356] ? __pfx_ksys_read+0x10/0x10 [ 1272.226257][ T1356] do_syscall_64+0x14d/0xf80 [ 1272.226279][ T1356] ? trace_irq_disable+0x3b/0x150 [ 1272.226292][ T1356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.226307][ T1356] ? clear_bhb_loop+0x40/0x90 [ 1272.226326][ T1356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.226341][ T1356] RIP: 0033:0x7fb94155cfce [ 1272.226355][ T1356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1272.226368][ T1356] RSP: 002b:00007fb942402fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1272.226384][ T1356] RAX: ffffffffffffffda RBX: 00007fb9424036c0 RCX: 00007fb94155cfce [ 1272.226395][ T1356] RDX: 000000000000000f RSI: 00007fb9424030a0 RDI: 0000000000000004 [ 1272.226404][ T1356] RBP: 00007fb942403090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.226413][ T1356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.226422][ T1356] R13: 00007fb941816038 R14: 00007fb941815fa0 R15: 00007ffc8b6a9048 [ 1272.226445][ T1356] [ 1273.574423][ T1390] __nla_validate_parse: 8 callbacks suppressed [ 1273.574438][ T1390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8740'. [ 1273.675985][ T1391] bridge11: port 1(erspan0) entered blocking state [ 1273.683028][ T1391] bridge11: port 1(erspan0) entered disabled state [ 1273.689714][ T1391] erspan0: entered allmulticast mode [ 1273.697197][ T1391] erspan0: left allmulticast mode [ 1274.248584][ T1314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1274.459619][ T1406] netlink: 360 bytes leftover after parsing attributes in process `syz.0.8744'. [ 1274.468969][ T1406] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.8744'. [ 1274.742873][ T1414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1274.953967][ T1434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8753'. [ 1274.991046][ T1436] netlink: 'syz.4.8760': attribute type 3 has an invalid length. [ 1275.000741][ T1436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8760'. [ 1275.130715][ T1440] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8761'. [ 1275.541797][ T1460] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1275.570947][ T1447] lo speed is unknown, defaulting to 1000 [ 1275.579181][ T1447] ±ÿ speed is unknown, defaulting to 1000 [ 1275.709226][ T1465] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.8773'. [ 1275.721205][ T1465] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1275.842557][ T1470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8775'. [ 1275.862336][ T1471] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8774'. [ 1275.899877][ T1474] nft_compat: unsupported protocol 0 [ 1275.929922][ T1475] xt_hashlimit: size too large, truncated to 1048576 [ 1275.946704][ T1475] xt_hashlimit: max too large, truncated to 1048576 [ 1276.079625][ T1481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.112260][ T1481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.288545][ T1487] netlink: 'syz.1.8781': attribute type 10 has an invalid length. [ 1276.360352][ T1493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8785'. [ 1276.483224][ T1504] netlink: 'syz.3.8785': attribute type 2 has an invalid length. [ 1276.491202][ T1504] netlink: 'syz.3.8785': attribute type 1 has an invalid length. [ 1277.020136][ T1521] netlink: 'syz.3.8792': attribute type 1 has an invalid length. [ 1277.618500][ T1512] lo speed is unknown, defaulting to 1000 [ 1277.626815][ T1512] ±ÿ speed is unknown, defaulting to 1000 [ 1278.511520][ T1557] xt_hashlimit: size too large, truncated to 1048576 [ 1278.631601][ T1562] syzkaller1: entered promiscuous mode [ 1278.638154][ T1562] syzkaller1: entered allmulticast mode [ 1278.719183][ T1573] __nla_validate_parse: 4 callbacks suppressed [ 1278.719207][ T1573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8805'. [ 1278.871483][ T1578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8809'. [ 1279.426336][ T1599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8818'. [ 1279.552320][ T1601] bridge12: port 1(erspan0) entered blocking state [ 1279.562483][ T1601] bridge12: port 1(erspan0) entered disabled state [ 1279.569396][ T1601] erspan0: entered allmulticast mode [ 1279.577578][ T1601] erspan0: left allmulticast mode [ 1279.656036][ T1610] FAULT_INJECTION: forcing a failure. [ 1279.656036][ T1610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1279.685169][ T1610] CPU: 0 UID: 0 PID: 1610 Comm: syz.1.8821 Not tainted syzkaller #0 PREEMPT(full) [ 1279.685194][ T1610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1279.685207][ T1610] Call Trace: [ 1279.685216][ T1610] [ 1279.685224][ T1610] dump_stack_lvl+0xe8/0x150 [ 1279.685259][ T1610] should_fail_ex+0x412/0x560 [ 1279.685295][ T1610] prepare_alloc_pages+0x22a/0x650 [ 1279.685327][ T1610] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1279.685356][ T1610] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1279.685391][ T1610] ? __pfx_policy_nodemask+0x10/0x10 [ 1279.685445][ T1610] alloc_pages_mpol+0x232/0x4a0 [ 1279.685478][ T1610] vma_alloc_folio_noprof+0xea/0x210 [ 1279.685508][ T1610] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1279.685547][ T1610] do_wp_page+0x1204/0x5a00 [ 1279.685585][ T1610] ? __pfx_css_rstat_updated+0x10/0x10 [ 1279.685621][ T1610] ? __pfx_do_wp_page+0x10/0x10 [ 1279.685649][ T1610] ? do_raw_spin_lock+0x12b/0x2f0 [ 1279.685675][ T1610] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1279.685724][ T1610] handle_mm_fault+0x1520/0x3310 [ 1279.685771][ T1610] ? handle_mm_fault+0xee/0x3310 [ 1279.685810][ T1610] ? __pfx_handle_mm_fault+0x10/0x10 [ 1279.685855][ T1610] ? __pfx___up_read+0x10/0x10 [ 1279.685882][ T1610] ? lock_mm_and_find_vma+0xa7/0x340 [ 1279.685909][ T1610] do_user_addr_fault+0x75b/0x1340 [ 1279.685954][ T1610] exc_page_fault+0x6a/0xc0 [ 1279.685986][ T1610] asm_exc_page_fault+0x26/0x30 [ 1279.686005][ T1610] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1279.686030][ T1610] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1279.686047][ T1610] RSP: 0018:ffffc900106073d8 EFLAGS: 00050206 [ 1279.686065][ T1610] RAX: ffffffff84acb901 RBX: ffff888034280000 RCX: 0000000000005340 [ 1279.686080][ T1610] RDX: 0000000000000000 RSI: ffff888034282cc0 RDI: 000020000000e000 [ 1279.686093][ T1610] RBP: ffffc90010607558 R08: ffff888034287fff R09: 1ffff11006850fff [ 1279.686108][ T1610] R10: dffffc0000000000 R11: ffffed1006851000 R12: 1ffff920020c0fbf [ 1279.686123][ T1610] R13: 000020000000b340 R14: ffffc90010607e08 R15: 0000000000008000 [ 1279.686146][ T1610] ? _copy_to_iter+0x161/0x17d0 [ 1279.686193][ T1610] _copy_to_iter+0x255/0x17d0 [ 1279.686225][ T1610] ? sock_recvmsg+0x172/0x1b0 [ 1279.686244][ T1610] ? ____sys_recvmsg+0x1e6/0x4a0 [ 1279.686270][ T1610] ? ___sys_recvmsg+0x215/0x590 [ 1279.686296][ T1610] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 1279.686338][ T1610] ? __pfx__copy_to_iter+0x10/0x10 [ 1279.686371][ T1610] ? __lock_acquire+0x6b5/0x2cf0 [ 1279.686423][ T1610] __skb_datagram_iter+0x41a/0x980 [ 1279.686456][ T1610] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1279.686496][ T1610] skb_copy_datagram_iter+0xb5/0x270 [ 1279.686531][ T1610] unix_stream_read_actor+0x6c/0xb0 [ 1279.686563][ T1610] unix_stream_read_generic+0xa67/0x2390 [ 1279.686625][ T1610] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1279.686651][ T1610] ? unwind_next_frame+0xa5/0x23c0 [ 1279.686708][ T1610] unix_stream_recvmsg+0x16b/0x1d0 [ 1279.686737][ T1610] ? __lock_acquire+0x6b5/0x2cf0 [ 1279.686766][ T1610] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1279.686794][ T1610] ? is_bpf_text_address+0x26/0x2b0 [ 1279.686816][ T1610] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1279.686849][ T1610] ? aa_sock_msg_perm+0xda/0x1b0 [ 1279.686884][ T1610] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1279.686908][ T1610] ? security_socket_recvmsg+0x7e/0x2c0 [ 1279.686934][ T1610] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1279.686964][ T1610] sock_recvmsg+0x172/0x1b0 [ 1279.686989][ T1610] ____sys_recvmsg+0x1e6/0x4a0 [ 1279.687028][ T1610] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1279.687074][ T1610] ? import_iovec+0x73/0xa0 [ 1279.687103][ T1610] ___sys_recvmsg+0x215/0x590 [ 1279.687129][ T1610] ? get_pid_task+0x20/0x1f0 [ 1279.687156][ T1610] ? __pfx____sys_recvmsg+0x10/0x10 [ 1279.687214][ T1610] ? __fget_files+0x3a0/0x420 [ 1279.687258][ T1610] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1279.687291][ T1610] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1279.687332][ T1610] ? __pfx_ksys_write+0x10/0x10 [ 1279.687370][ T1610] do_syscall_64+0x14d/0xf80 [ 1279.687406][ T1610] ? trace_irq_disable+0x3b/0x150 [ 1279.687424][ T1610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.687445][ T1610] ? clear_bhb_loop+0x40/0x90 [ 1279.687470][ T1610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.687490][ T1610] RIP: 0033:0x7fb94159c799 [ 1279.687509][ T1610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.687526][ T1610] RSP: 002b:00007fb9423e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1279.687546][ T1610] RAX: ffffffffffffffda RBX: 00007fb941816090 RCX: 00007fb94159c799 [ 1279.687561][ T1610] RDX: 0000000040000300 RSI: 0000200000001140 RDI: 0000000000000006 [ 1279.687575][ T1610] RBP: 00007fb9423e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.687588][ T1610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1279.687600][ T1610] R13: 00007fb941816128 R14: 00007fb941816090 R15: 00007ffc8b6a9048 [ 1279.687644][ T1610] [ 1280.367214][ T1617] "syz.3.8824" (1617) uses obsolete ecb(arc4) skcipher [ 1280.732540][ T1638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1280.913601][ T1649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1280.941867][ T1650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8831'. [ 1281.016846][ T1638] bond2: entered promiscuous mode [ 1281.124424][ T1638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1281.146619][ T1649] 8021q: VLANs not supported on ip6gre0 [ 1281.219042][ T1660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8836'. [ 1281.637765][ T1624] lo speed is unknown, defaulting to 1000 [ 1281.681478][ T1624] ±ÿ speed is unknown, defaulting to 1000 [ 1282.221204][ T1633] lo speed is unknown, defaulting to 1000 [ 1282.300675][ T1633] ±ÿ speed is unknown, defaulting to 1000 [ 1282.790757][ T1712] netlink: 'syz.2.8851': attribute type 16 has an invalid length. [ 1283.179236][ T1721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8853'. [ 1283.713613][ T1744] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8858'. [ 1283.868425][ T1744] netlink: 'syz.4.8858': attribute type 11 has an invalid length. [ 1283.876815][ T1744] netlink: 'syz.4.8858': attribute type 23 has an invalid length. [ 1283.885194][ T1744] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8858'. [ 1284.029528][ T1750] tipc: Enabling of bearer rejected, failed to enable media [ 1284.651768][ T1770] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1285.097895][ T1787] xt_recent: Unsupported userspace flags (000000b1) [ 1285.417762][ T1796] tap0: tun_chr_ioctl cmd 1074025677 [ 1285.433276][ T1796] tap0: linktype set to 778 [ 1285.476379][ T1800] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8877'. [ 1285.525753][ T1800] vcan0: tx drop: invalid sa for name 0x0001000000000000 [ 1285.580313][ T1806] "syz.0.8879" (1806) uses obsolete ecb(arc4) skcipher [ 1285.645291][ T1802] tipc: Enabled bearer , priority 0 [ 1285.796468][ T1802] syzkaller0: entered promiscuous mode [ 1285.823983][ T1802] syzkaller0: entered allmulticast mode [ 1285.882501][ T1802] tipc: Resetting bearer [ 1285.901108][ T1801] tipc: Resetting bearer [ 1286.898413][ T1835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8887'. [ 1287.682707][ T1801] tipc: Disabling bearer [ 1287.691896][ T1824] sch_tbf: burst 545 is lower than device lo mtu (1294) ! [ 1287.707954][ T1829] FAULT_INJECTION: forcing a failure. [ 1287.707954][ T1829] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.720807][ T1829] CPU: 0 UID: 0 PID: 1829 Comm: syz.2.8885 Not tainted syzkaller #0 PREEMPT(full) [ 1287.720839][ T1829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1287.720856][ T1829] Call Trace: [ 1287.720863][ T1829] [ 1287.720870][ T1829] dump_stack_lvl+0xe8/0x150 [ 1287.720905][ T1829] should_fail_ex+0x412/0x560 [ 1287.720935][ T1829] should_failslab+0xa8/0x100 [ 1287.720958][ T1829] __kmalloc_cache_noprof+0x88/0x660 [ 1287.720975][ T1829] ? __asan_memset+0x22/0x50 [ 1287.720989][ T1829] ? alloc_netdev_mqs+0xb97/0x11b0 [ 1287.721012][ T1829] ? __xdp_rxq_info_reg+0x171/0x280 [ 1287.721034][ T1829] alloc_netdev_mqs+0xb97/0x11b0 [ 1287.721061][ T1829] rtnl_create_link+0x31f/0xd70 [ 1287.721088][ T1829] veth_newlink+0x2d0/0xb70 [ 1287.721117][ T1829] ? __pfx_veth_newlink+0x10/0x10 [ 1287.721138][ T1829] ? alloc_netdev_mqs+0xc89/0x11b0 [ 1287.721158][ T1829] ? rtnl_create_link+0x31f/0xd70 [ 1287.721179][ T1829] ? rtnl_newlink_create+0x277/0xb70 [ 1287.721196][ T1829] ? rtnl_newlink+0x1666/0x1be0 [ 1287.721211][ T1829] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1287.721225][ T1829] ? netlink_rcv_skb+0x232/0x4b0 [ 1287.721240][ T1829] ? netlink_unicast+0x80f/0x9b0 [ 1287.721261][ T1829] ? netlink_sendmsg+0x813/0xb40 [ 1287.721276][ T1829] ? ____sys_sendmsg+0x972/0x9f0 [ 1287.721296][ T1829] ? do_syscall_64+0x14d/0xf80 [ 1287.721319][ T1829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.721379][ T1829] ? validate_linkmsg+0x765/0x950 [ 1287.721409][ T1829] ? __pfx_veth_newlink+0x10/0x10 [ 1287.721439][ T1829] rtnl_newlink_create+0x329/0xb70 [ 1287.721462][ T1829] ? __mutex_lock+0x5ac/0x1300 [ 1287.721480][ T1829] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1287.721502][ T1829] ? __pfx___mutex_lock+0x10/0x10 [ 1287.721524][ T1829] ? ns_capable+0x89/0xe0 [ 1287.721547][ T1829] rtnl_newlink+0x1666/0x1be0 [ 1287.721576][ T1829] ? __pfx_rtnl_newlink+0x10/0x10 [ 1287.721591][ T1829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.721662][ T1829] ? __local_bh_enable_ip+0xd0/0x130 [ 1287.721686][ T1829] ? lockdep_hardirqs_on+0x7a/0x110 [ 1287.721709][ T1829] ? __dev_queue_xmit+0x28b/0x3870 [ 1287.721728][ T1829] ? __local_bh_enable_ip+0xd0/0x130 [ 1287.721747][ T1829] ? __dev_queue_xmit+0x28b/0x3870 [ 1287.721786][ T1829] ? __pfx_rtnl_newlink+0x10/0x10 [ 1287.721803][ T1829] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1287.721822][ T1829] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1287.721838][ T1829] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1287.721853][ T1829] ? ref_tracker_free+0x693/0x840 [ 1287.721866][ T1829] ? __copy_skb_header+0xa3/0x4a0 [ 1287.721888][ T1829] ? __pfx_ref_tracker_free+0x10/0x10 [ 1287.721911][ T1829] netlink_rcv_skb+0x232/0x4b0 [ 1287.721930][ T1829] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1287.721976][ T1829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1287.722011][ T1829] ? netlink_deliver_tap+0x2e/0x1b0 [ 1287.722044][ T1829] netlink_unicast+0x80f/0x9b0 [ 1287.722074][ T1829] ? __pfx_netlink_unicast+0x10/0x10 [ 1287.722099][ T1829] ? netlink_sendmsg+0x650/0xb40 [ 1287.722114][ T1829] ? skb_put+0x11b/0x210 [ 1287.722136][ T1829] netlink_sendmsg+0x813/0xb40 [ 1287.722161][ T1829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1287.722181][ T1829] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1287.722206][ T1829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1287.722227][ T1829] ____sys_sendmsg+0x972/0x9f0 [ 1287.722253][ T1829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1287.722280][ T1829] ? import_iovec+0x73/0xa0 [ 1287.722300][ T1829] ___sys_sendmsg+0x2a5/0x360 [ 1287.722324][ T1829] ? __pfx____sys_sendmsg+0x10/0x10 [ 1287.722371][ T1829] ? __fget_files+0x2a/0x420 [ 1287.722393][ T1829] ? __fget_files+0x3a0/0x420 [ 1287.722429][ T1829] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1287.722451][ T1829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1287.722478][ T1829] ? rcu_is_watching+0x15/0xb0 [ 1287.722510][ T1829] do_syscall_64+0x14d/0xf80 [ 1287.722532][ T1829] ? trace_irq_disable+0x3b/0x150 [ 1287.722545][ T1829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.722561][ T1829] ? clear_bhb_loop+0x40/0x90 [ 1287.722580][ T1829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.722596][ T1829] RIP: 0033:0x7ff01a39c799 [ 1287.722611][ T1829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.722624][ T1829] RSP: 002b:00007ff01b2f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1287.722641][ T1829] RAX: ffffffffffffffda RBX: 00007ff01a615fa0 RCX: 00007ff01a39c799 [ 1287.722652][ T1829] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1287.722662][ T1829] RBP: 00007ff01b2f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.722672][ T1829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1287.722681][ T1829] R13: 00007ff01a616038 R14: 00007ff01a615fa0 R15: 00007fff8ea2bdb8 [ 1287.722706][ T1829] [ 1288.298527][ T1846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8891'. [ 1288.512921][ T1858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8896'. [ 1288.990242][ T1879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8903'. [ 1289.111619][ T1877] bridge14: port 1(erspan0) entered blocking state [ 1289.119884][ T1877] bridge14: port 1(erspan0) entered disabled state [ 1289.127528][ T1877] erspan0: entered allmulticast mode [ 1289.138319][ T1877] erspan0: entered promiscuous mode [ 1289.215895][ T1881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8904'. [ 1289.424408][ T1894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8908'. [ 1289.464900][ T1896] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1289.863452][ T1918] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8917'. [ 1290.111034][ T1928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8920'. [ 1290.306628][ T1934] netlink: 'syz.4.8923': attribute type 10 has an invalid length. [ 1290.821284][ T1948] FAULT_INJECTION: forcing a failure. [ 1290.821284][ T1948] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.860479][ T1948] CPU: 0 UID: 0 PID: 1948 Comm: syz.2.8927 Not tainted syzkaller #0 PREEMPT(full) [ 1290.860509][ T1948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1290.860522][ T1948] Call Trace: [ 1290.860531][ T1948] [ 1290.860541][ T1948] dump_stack_lvl+0xe8/0x150 [ 1290.860578][ T1948] should_fail_ex+0x412/0x560 [ 1290.860617][ T1948] should_failslab+0xa8/0x100 [ 1290.860650][ T1948] __kmalloc_noprof+0xe8/0x760 [ 1290.860676][ T1948] ? kobject_get_path+0xc5/0x2f0 [ 1290.860698][ T1948] ? __kasan_kmalloc+0x93/0xb0 [ 1290.860728][ T1948] kobject_get_path+0xc5/0x2f0 [ 1290.860748][ T1948] ? kobject_uevent_env+0x28c/0x9e0 [ 1290.860780][ T1948] kobject_uevent_env+0x2a1/0x9e0 [ 1290.860816][ T1948] device_add+0x557/0xb70 [ 1290.860850][ T1948] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1290.860886][ T1948] wakeup_source_register+0x18a/0x380 [ 1290.860919][ T1948] ep_insert+0x1022/0x1a40 [ 1290.860958][ T1948] ? __pfx_ep_insert+0x10/0x10 [ 1290.860994][ T1948] ? bpf_lsm_capable+0x9/0x20 [ 1290.861034][ T1948] do_epoll_ctl+0x7f4/0xe80 [ 1290.861078][ T1948] __x64_sys_epoll_ctl+0x165/0x1b0 [ 1290.861104][ T1948] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1290.861147][ T1948] do_syscall_64+0x14d/0xf80 [ 1290.861178][ T1948] ? trace_irq_disable+0x3b/0x150 [ 1290.861197][ T1948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.861220][ T1948] ? clear_bhb_loop+0x40/0x90 [ 1290.861247][ T1948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.861269][ T1948] RIP: 0033:0x7ff01a39c799 [ 1290.861290][ T1948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.861309][ T1948] RSP: 002b:00007ff01b2f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1290.861332][ T1948] RAX: ffffffffffffffda RBX: 00007ff01a615fa0 RCX: 00007ff01a39c799 [ 1290.861348][ T1948] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1290.861361][ T1948] RBP: 00007ff01b2f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1290.861375][ T1948] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000002 [ 1290.861388][ T1948] R13: 00007ff01a616038 R14: 00007ff01a615fa0 R15: 00007fff8ea2bdb8 [ 1290.861423][ T1948] [ 1291.255297][ T1952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8930'. [ 1291.422750][ T1962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8934'. [ 1291.444977][ T1960] xt_TCPMSS: Only works on TCP SYN packets [ 1291.455885][ T1960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8932'. [ 1291.579475][ T1969] "syz.4.8933" (1969) uses obsolete ecb(arc4) skcipher [ 1291.607580][ T1969] netlink: 'syz.4.8933': attribute type 7 has an invalid length. [ 1292.970487][ T2019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8950'. [ 1293.016784][ T2020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8950'. [ 1293.172420][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1294.455517][ T2025] netlink: 'syz.2.8952': attribute type 16 has an invalid length. [ 1294.484601][ T2026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.735794][ T2043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8961'. [ 1295.123157][ T2059] FAULT_INJECTION: forcing a failure. [ 1295.123157][ T2059] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.172149][ T2059] CPU: 0 UID: 0 PID: 2059 Comm: syz.0.8966 Not tainted syzkaller #0 PREEMPT(full) [ 1295.172180][ T2059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1295.172195][ T2059] Call Trace: [ 1295.172203][ T2059] [ 1295.172213][ T2059] dump_stack_lvl+0xe8/0x150 [ 1295.172251][ T2059] should_fail_ex+0x412/0x560 [ 1295.172289][ T2059] should_failslab+0xa8/0x100 [ 1295.172319][ T2059] __kmalloc_cache_noprof+0x88/0x660 [ 1295.172344][ T2059] ? nr_add_node+0xc44/0x2630 [ 1295.172370][ T2059] ? nr_add_node+0xcc4/0x2630 [ 1295.172392][ T2059] ? __local_bh_enable_ip+0xd0/0x130 [ 1295.172427][ T2059] nr_add_node+0xcc4/0x2630 [ 1295.172463][ T2059] ? nr_call_to_digi+0x126/0x1b0 [ 1295.172493][ T2059] nr_rt_ioctl+0xe59/0xf90 [ 1295.172529][ T2059] ? kasan_quarantine_put+0xbb/0x1f0 [ 1295.172553][ T2059] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1295.172591][ T2059] ? apparmor_capable+0x126/0x170 [ 1295.172626][ T2059] ? capable+0x88/0xe0 [ 1295.172656][ T2059] ? nr_ioctl+0x1b1/0x3b0 [ 1295.172718][ T2059] sock_do_ioctl+0x101/0x320 [ 1295.172755][ T2059] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1295.172785][ T2059] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1295.172824][ T2059] sock_ioctl+0x5c6/0x7f0 [ 1295.172860][ T2059] ? __pfx_sock_ioctl+0x10/0x10 [ 1295.172893][ T2059] ? __fget_files+0x2a/0x420 [ 1295.172926][ T2059] ? __fget_files+0x3a0/0x420 [ 1295.172958][ T2059] ? __fget_files+0x2a/0x420 [ 1295.172995][ T2059] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1295.173024][ T2059] ? __pfx_sock_ioctl+0x10/0x10 [ 1295.173056][ T2059] __se_sys_ioctl+0xfc/0x170 [ 1295.173088][ T2059] do_syscall_64+0x14d/0xf80 [ 1295.173120][ T2059] ? trace_irq_disable+0x3b/0x150 [ 1295.173140][ T2059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.173164][ T2059] ? clear_bhb_loop+0x40/0x90 [ 1295.173192][ T2059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.173214][ T2059] RIP: 0033:0x7fb923b9c799 [ 1295.173237][ T2059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.173257][ T2059] RSP: 002b:00007fb924ac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1295.173282][ T2059] RAX: ffffffffffffffda RBX: 00007fb923e15fa0 RCX: 00007fb923b9c799 [ 1295.173298][ T2059] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 1295.173312][ T2059] RBP: 00007fb924ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.173326][ T2059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.173340][ T2059] R13: 00007fb923e16038 R14: 00007fb923e15fa0 R15: 00007ffc1707be18 [ 1295.173375][ T2059] [ 1295.357158][ T2065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8968'. [ 1295.788117][ T2070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8969'. [ 1296.055041][ T2065] bridge13: port 1(erspan0) entered blocking state [ 1296.064619][ T2065] bridge13: port 1(erspan0) entered disabled state [ 1296.083811][ T2065] erspan0: entered allmulticast mode [ 1296.094058][ T2065] erspan0: left allmulticast mode [ 1296.099441][ T2074] bridge14: port 1(erspan0) entered blocking state [ 1296.106407][ T2074] bridge14: port 1(erspan0) entered disabled state [ 1296.138851][ T2074] erspan0: entered allmulticast mode [ 1296.162639][ T2074] erspan0: left allmulticast mode [ 1296.185625][ T2044] lo speed is unknown, defaulting to 1000 [ 1296.196906][ T2044] ±ÿ speed is unknown, defaulting to 1000 [ 1296.332140][ T2087] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8973'. [ 1296.395395][ T2090] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1296.569383][ T2093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8975'. [ 1296.749564][ T2047] lo speed is unknown, defaulting to 1000 [ 1296.926337][ T2047] ±ÿ speed is unknown, defaulting to 1000 [ 1296.947706][ T2109] netlink: 'syz.4.8980': attribute type 3 has an invalid length. [ 1297.063570][ T2111] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1297.261690][ T2112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8980'. [ 1297.595125][ T2132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8983'. [ 1298.311142][ T2144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8984'. [ 1298.556251][ T2143] bridge14: port 1(erspan0) entered blocking state [ 1298.586207][ T2143] bridge14: port 1(erspan0) entered disabled state [ 1298.641295][ T2143] erspan0: entered allmulticast mode [ 1298.702450][ T2143] erspan0: left allmulticast mode [ 1298.822143][ T30] audit: type=1800 audit(1774628730.131:11): pid=2152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8985" name="memory.events" dev="tmpfs" ino=8964 res=0 errno=0 [ 1299.202025][ T30] audit: type=1800 audit(1774628730.511:12): pid=2162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8988" name="memory.events" dev="tmpfs" ino=8970 res=0 errno=0 [ 1299.365724][ T2168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8989'. [ 1299.743184][ T2190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8995'. [ 1299.837723][ T2192] batman_adv: batadv0: Removing interface: macsec1 [ 1299.851397][ T2185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8993'. [ 1299.918847][ T2194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8996'. [ 1300.217770][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1300.510764][ T2209] syzkaller1: entered promiscuous mode [ 1300.529037][ T2209] syzkaller1: entered allmulticast mode [ 1300.554447][ T2191] lo speed is unknown, defaulting to 1000 [ 1300.561924][ T2191] ±ÿ speed is unknown, defaulting to 1000 [ 1300.692860][ T30] audit: type=1107 audit(1774628732.001:13): pid=2217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1300.796548][ T2221] tipc: Enabled bearer , priority 0 [ 1300.809685][ T2222] syzkaller0: entered promiscuous mode [ 1300.829951][ T2222] syzkaller0: entered allmulticast mode [ 1300.860270][ T2230] netlink: 'syz.2.9003': attribute type 1 has an invalid length. [ 1301.005918][ T2237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9008'. [ 1301.056429][ T2220] tipc: Resetting bearer [ 1301.149165][ T2220] tipc: Disabling bearer [ 1301.266075][ T2247] syzkaller0: entered promiscuous mode [ 1301.271596][ T2247] syzkaller0: entered allmulticast mode [ 1301.997697][ T2262] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.9012'. [ 1302.171799][ T2270] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9015'. [ 1302.228856][ T2272] FAULT_INJECTION: forcing a failure. [ 1302.228856][ T2272] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.244361][ T2272] CPU: 0 UID: 0 PID: 2272 Comm: syz.0.9016 Not tainted syzkaller #0 PREEMPT(full) [ 1302.244391][ T2272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1302.244405][ T2272] Call Trace: [ 1302.244414][ T2272] [ 1302.244423][ T2272] dump_stack_lvl+0xe8/0x150 [ 1302.244460][ T2272] should_fail_ex+0x412/0x560 [ 1302.244499][ T2272] should_failslab+0xa8/0x100 [ 1302.244530][ T2272] __kmalloc_cache_noprof+0x88/0x660 [ 1302.244556][ T2272] ? kobject_uevent_env+0x28c/0x9e0 [ 1302.244581][ T2272] ? __pfx_bus_add_device+0x10/0x10 [ 1302.244696][ T2272] ? __pfx_dev_uevent_name+0x10/0x10 [ 1302.244718][ T2272] kobject_uevent_env+0x28c/0x9e0 [ 1302.244754][ T2272] device_add+0x557/0xb70 [ 1302.244787][ T2272] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1302.244821][ T2272] wakeup_source_register+0x18a/0x380 [ 1302.244854][ T2272] ep_insert+0x1022/0x1a40 [ 1302.244892][ T2272] ? __pfx_ep_insert+0x10/0x10 [ 1302.244927][ T2272] ? bpf_lsm_capable+0x9/0x20 [ 1302.244967][ T2272] do_epoll_ctl+0x7f4/0xe80 [ 1302.245011][ T2272] __x64_sys_epoll_ctl+0x165/0x1b0 [ 1302.245036][ T2272] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1302.245072][ T2272] do_syscall_64+0x14d/0xf80 [ 1302.245110][ T2272] ? trace_irq_disable+0x3b/0x150 [ 1302.245129][ T2272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.245152][ T2272] ? clear_bhb_loop+0x40/0x90 [ 1302.245179][ T2272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.245201][ T2272] RIP: 0033:0x7fb923b9c799 [ 1302.245223][ T2272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.245243][ T2272] RSP: 002b:00007fb924ac8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1302.245267][ T2272] RAX: ffffffffffffffda RBX: 00007fb923e15fa0 RCX: 00007fb923b9c799 [ 1302.245283][ T2272] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1302.245296][ T2272] RBP: 00007fb924ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.245309][ T2272] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000002 [ 1302.245322][ T2272] R13: 00007fb923e16038 R14: 00007fb923e15fa0 R15: 00007ffc1707be18 [ 1302.245358][ T2272] [ 1303.574840][ T2214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1303.710739][ T2277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9018'. [ 1303.756989][ T2282] FAULT_INJECTION: forcing a failure. [ 1303.756989][ T2282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1303.791414][ T2282] CPU: 1 UID: 0 PID: 2282 Comm: syz.0.9021 Not tainted syzkaller #0 PREEMPT(full) [ 1303.791444][ T2282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1303.791458][ T2282] Call Trace: [ 1303.791468][ T2282] [ 1303.791477][ T2282] dump_stack_lvl+0xe8/0x150 [ 1303.791514][ T2282] should_fail_ex+0x412/0x560 [ 1303.791553][ T2282] _copy_to_user+0x31/0xb0 [ 1303.791580][ T2282] simple_read_from_buffer+0xe1/0x170 [ 1303.791621][ T2282] proc_fail_nth_read+0x1bb/0x230 [ 1303.791658][ T2282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1303.791695][ T2282] ? rw_verify_area+0x2a6/0x4d0 [ 1303.791719][ T2282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1303.791754][ T2282] vfs_read+0x20c/0xa70 [ 1303.791777][ T2282] ? fdget_pos+0x246/0x320 [ 1303.791803][ T2282] ? __pfx___mutex_lock+0x10/0x10 [ 1303.791827][ T2282] ? __pfx_vfs_read+0x10/0x10 [ 1303.791854][ T2282] ? __fget_files+0x2a/0x420 [ 1303.791892][ T2282] ? __fget_files+0x3a0/0x420 [ 1303.791928][ T2282] ? __fget_files+0x2a/0x420 [ 1303.791971][ T2282] ksys_read+0x150/0x270 [ 1303.791997][ T2282] ? __pfx_ksys_read+0x10/0x10 [ 1303.792034][ T2282] do_syscall_64+0x14d/0xf80 [ 1303.792067][ T2282] ? trace_irq_disable+0x3b/0x150 [ 1303.792087][ T2282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.792110][ T2282] ? clear_bhb_loop+0x40/0x90 [ 1303.792137][ T2282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.792160][ T2282] RIP: 0033:0x7fb923b5cfce [ 1303.792181][ T2282] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1303.792201][ T2282] RSP: 002b:00007fb924ac7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1303.792223][ T2282] RAX: ffffffffffffffda RBX: 00007fb924ac86c0 RCX: 00007fb923b5cfce [ 1303.792240][ T2282] RDX: 000000000000000f RSI: 00007fb924ac80a0 RDI: 0000000000000004 [ 1303.792254][ T2282] RBP: 00007fb924ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1303.792268][ T2282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1303.792282][ T2282] R13: 00007fb923e16038 R14: 00007fb923e15fa0 R15: 00007ffc1707be18 [ 1303.792327][ T2282] [ 1304.130402][ T2288] FAULT_INJECTION: forcing a failure. [ 1304.130402][ T2288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.180161][ T2288] CPU: 0 UID: 0 PID: 2288 Comm: syz.1.9023 Not tainted syzkaller #0 PREEMPT(full) [ 1304.180189][ T2288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1304.180203][ T2288] Call Trace: [ 1304.180211][ T2288] [ 1304.180220][ T2288] dump_stack_lvl+0xe8/0x150 [ 1304.180255][ T2288] should_fail_ex+0x412/0x560 [ 1304.180291][ T2288] _copy_to_user+0x31/0xb0 [ 1304.180317][ T2288] simple_read_from_buffer+0xe1/0x170 [ 1304.180353][ T2288] proc_fail_nth_read+0x1bb/0x230 [ 1304.180386][ T2288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1304.180419][ T2288] ? rw_verify_area+0x2a6/0x4d0 [ 1304.180442][ T2288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1304.180473][ T2288] vfs_read+0x20c/0xa70 [ 1304.180493][ T2288] ? fdget_pos+0x246/0x320 [ 1304.180516][ T2288] ? __pfx___mutex_lock+0x10/0x10 [ 1304.180538][ T2288] ? __pfx_vfs_read+0x10/0x10 [ 1304.180561][ T2288] ? __fget_files+0x2a/0x420 [ 1304.180595][ T2288] ? __fget_files+0x3a0/0x420 [ 1304.180624][ T2288] ? __fget_files+0x2a/0x420 [ 1304.180662][ T2288] ksys_read+0x150/0x270 [ 1304.180688][ T2288] ? __pfx_ksys_read+0x10/0x10 [ 1304.180722][ T2288] do_syscall_64+0x14d/0xf80 [ 1304.180751][ T2288] ? trace_irq_disable+0x3b/0x150 [ 1304.180768][ T2288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.180789][ T2288] ? clear_bhb_loop+0x40/0x90 [ 1304.180814][ T2288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.180835][ T2288] RIP: 0033:0x7fb94155cfce [ 1304.180853][ T2288] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1304.180871][ T2288] RSP: 002b:00007fb942402fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1304.180893][ T2288] RAX: ffffffffffffffda RBX: 00007fb9424036c0 RCX: 00007fb94155cfce [ 1304.180908][ T2288] RDX: 000000000000000f RSI: 00007fb9424030a0 RDI: 0000000000000004 [ 1304.180927][ T2288] RBP: 00007fb942403090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.180940][ T2288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.180952][ T2288] R13: 00007fb941816038 R14: 00007fb941815fa0 R15: 00007ffc8b6a9048 [ 1304.180985][ T2288] [ 1304.744677][ T2311] "syz.3.9028" (2311) uses obsolete ecb(arc4) skcipher [ 1304.794902][ T2316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9029'. [ 1304.928127][ T2321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9030'. [ 1304.965671][ T2325] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9037'. [ 1305.103320][ T2334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9040'. [ 1305.281525][ T2343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1305.300128][ T2343] netlink: 'syz.3.9045': attribute type 2 has an invalid length. [ 1305.308748][ T2343] netlink: 'syz.3.9045': attribute type 1 has an invalid length. [ 1305.317458][ T2343] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1305.440746][ T2352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9049'. [ 1305.582687][ T2359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9050'. [ 1305.642288][T22998] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.691099][ T2363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9052'. [ 1305.702072][T22998] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.710491][T22998] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.713188][ T2363] openvswitch: netlink: Message has 2 unknown bytes. [ 1305.748774][T22998] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.817463][ T2366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9054'. [ 1305.865938][ T2369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.885431][ T2369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.896755][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1305.896787][ C0] lec:lec_tx_timeout: lec0 [ 1306.000843][ T2376] netlink: 'syz.1.9058': attribute type 12 has an invalid length. [ 1306.003449][ T2374] netlink: 'syz.0.9057': attribute type 2 has an invalid length. [ 1306.017216][ T2374] netlink: 'syz.0.9057': attribute type 1 has an invalid length. [ 1306.084435][ T2377] netlink: 'syz.1.9058': attribute type 12 has an invalid length. [ 1306.327306][ T2353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1306.588141][ T2407] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1306.776873][ T2409] netlink: 'syz.2.9069': attribute type 2 has an invalid length. [ 1306.788573][ T2409] netlink: 'syz.2.9069': attribute type 1 has an invalid length. [ 1307.216933][ T2441] vlan2: entered promiscuous mode [ 1307.238838][ T2441] bridge0: entered promiscuous mode [ 1307.306031][ T2454] netlink: 'syz.0.9082': attribute type 2 has an invalid length. [ 1307.315575][ T2454] netlink: 'syz.0.9082': attribute type 1 has an invalid length. [ 1307.897522][T22998] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.924900][T22998] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.950195][T22998] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1307.986931][T22998] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1308.232548][ T2492] FAULT_INJECTION: forcing a failure. [ 1308.232548][ T2492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.257622][ T2492] CPU: 1 UID: 0 PID: 2492 Comm: syz.4.9093 Not tainted syzkaller #0 PREEMPT(full) [ 1308.257652][ T2492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1308.257666][ T2492] Call Trace: [ 1308.257675][ T2492] [ 1308.257684][ T2492] dump_stack_lvl+0xe8/0x150 [ 1308.257737][ T2492] should_fail_ex+0x412/0x560 [ 1308.257776][ T2492] _copy_from_iter+0x1d3/0x1670 [ 1308.257812][ T2492] ? unwind_next_frame+0xa5/0x23c0 [ 1308.257892][ T2492] ? __lock_acquire+0x6b5/0x2cf0 [ 1308.257923][ T2492] ? __pfx__copy_from_iter+0x10/0x10 [ 1308.257974][ T2492] tun_get_user+0x516/0x3dd0 [ 1308.258014][ T2492] ? aa_file_perm+0x192/0x15e0 [ 1308.258040][ T2492] ? aa_file_perm+0x50e/0x15e0 [ 1308.258062][ T2492] ? __pfx_tun_get_user+0x10/0x10 [ 1308.258085][ T2492] ? aa_file_perm+0x192/0x15e0 [ 1308.258112][ T2492] ? __lock_acquire+0x6b5/0x2cf0 [ 1308.258152][ T2492] ? ref_tracker_alloc+0x35c/0x4c0 [ 1308.258189][ T2492] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1308.258228][ T2492] ? tun_get+0x1c/0x2f0 [ 1308.258260][ T2492] ? tun_get+0x1c/0x2f0 [ 1308.258285][ T2492] ? tun_get+0x1c/0x2f0 [ 1308.258314][ T2492] tun_chr_write_iter+0x113/0x200 [ 1308.258343][ T2492] vfs_write+0x61d/0xb90 [ 1308.258384][ T2492] ? __pfx_vfs_write+0x10/0x10 [ 1308.258420][ T2492] ? __fget_files+0x2a/0x420 [ 1308.258464][ T2492] ksys_write+0x150/0x270 [ 1308.258492][ T2492] ? __pfx_ksys_write+0x10/0x10 [ 1308.258530][ T2492] do_syscall_64+0x14d/0xf80 [ 1308.258562][ T2492] ? trace_irq_disable+0x3b/0x150 [ 1308.258582][ T2492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.258606][ T2492] ? clear_bhb_loop+0x40/0x90 [ 1308.258633][ T2492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.258655][ T2492] RIP: 0033:0x7f53b2b9c799 [ 1308.258676][ T2492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.258696][ T2492] RSP: 002b:00007f53b3a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1308.258720][ T2492] RAX: ffffffffffffffda RBX: 00007f53b2e15fa0 RCX: 00007f53b2b9c799 [ 1308.258737][ T2492] RDX: 0000000000000fce RSI: 0000200000000a40 RDI: 0000000000000003 [ 1308.258751][ T2492] RBP: 00007f53b3a66090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.258765][ T2492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1308.258777][ T2492] R13: 00007f53b2e16038 R14: 00007f53b2e15fa0 R15: 00007ffd682f3e88 [ 1308.258813][ T2492] [ 1308.643744][ T2506] FAULT_INJECTION: forcing a failure. [ 1308.643744][ T2506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.657278][ T2506] CPU: 1 UID: 0 PID: 2506 Comm: syz.3.9097 Not tainted syzkaller #0 PREEMPT(full) [ 1308.657305][ T2506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1308.657318][ T2506] Call Trace: [ 1308.657326][ T2506] [ 1308.657334][ T2506] dump_stack_lvl+0xe8/0x150 [ 1308.657368][ T2506] should_fail_ex+0x412/0x560 [ 1308.657403][ T2506] _copy_from_user+0x2d/0xb0 [ 1308.657427][ T2506] __sys_bpf+0x229/0x950 [ 1308.657449][ T2506] ? __pfx___sys_bpf+0x10/0x10 [ 1308.657480][ T2506] ? ksys_write+0x242/0x270 [ 1308.657504][ T2506] ? __pfx_ksys_write+0x10/0x10 [ 1308.657532][ T2506] __x64_sys_bpf+0x7c/0x90 [ 1308.657560][ T2506] do_syscall_64+0x14d/0xf80 [ 1308.657588][ T2506] ? trace_irq_disable+0x3b/0x150 [ 1308.657605][ T2506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.657623][ T2506] ? clear_bhb_loop+0x40/0x90 [ 1308.657647][ T2506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.657667][ T2506] RIP: 0033:0x7f668559c799 [ 1308.657686][ T2506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.657703][ T2506] RSP: 002b:00007f66863ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1308.657725][ T2506] RAX: ffffffffffffffda RBX: 00007f6685815fa0 RCX: 00007f668559c799 [ 1308.657738][ T2506] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1308.657751][ T2506] RBP: 00007f66863ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.657762][ T2506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1308.657774][ T2506] R13: 00007f6685816038 R14: 00007f6685815fa0 R15: 00007ffeeb19f3d8 [ 1308.657803][ T2506] [ 1308.915535][ T2518] siw: device registration error -23 [ 1309.095232][ T2534] xt_recent: Unsupported userspace flags (000000b1) [ 1309.824250][ T2579] __nla_validate_parse: 20 callbacks suppressed [ 1309.824280][ T2579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9113'. [ 1309.916906][ T2580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1309.944046][ T2580] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1310.037045][ T2584] xt_recent: Unsupported userspace flags (000000b1) [ 1310.119318][ T2593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1310.211210][ T2595] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9123'. [ 1310.226483][ T2595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1310.457449][ T2615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9130'. [ 1310.508944][ T2615] validate_nla: 9 callbacks suppressed [ 1310.508966][ T2615] netlink: 'syz.3.9130': attribute type 2 has an invalid length. [ 1310.535049][ T2615] netlink: 'syz.3.9130': attribute type 1 has an invalid length. [ 1310.552344][ T2615] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9130'. [ 1310.566496][ T2619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9131'. [ 1310.570390][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9132'. [ 1310.758566][ T2632] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9137'. [ 1310.781062][ T2633] xt_recent: Unsupported userspace flags (000000b1) [ 1311.010582][ T2649] team0: Port device syz_tun added [ 1311.119554][ T2649] team0: Port device syz_tun removed [ 1311.133388][ T2649] bridge_slave_0: left allmulticast mode [ 1311.139090][ T2649] bridge_slave_0: left promiscuous mode [ 1311.148854][ T2649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.176365][ T2649] bond0: (slave bridge_slave_1): Releasing backup interface [ 1311.202842][ T2649] team0: Port device team_slave_0 removed [ 1311.211814][ T2649] team0: Port device team_slave_1 removed [ 1311.220374][ T2649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.232385][ T2649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.241533][ T2649] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1311.261035][ T2659] bridge15: port 1(erspan0) entered blocking state [ 1311.274757][ T2659] bridge15: port 1(erspan0) entered disabled state [ 1311.281672][ T2659] erspan0: entered allmulticast mode [ 1311.289631][ T2659] erspan0: left allmulticast mode [ 1311.440588][ T2673] netlink: 'syz.0.9148': attribute type 12 has an invalid length. [ 1311.519194][ T2682] tipc: Failed to remove unknown binding: 66,0,0/1704303050:2619978666/2619978667 [ 1311.550853][ T2682] tipc: Failed to remove unknown binding: 66,0,0/1704303050:2619978666/2619978667 [ 1311.679888][ T2693] FAULT_INJECTION: forcing a failure. [ 1311.679888][ T2693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1311.742077][ T2693] CPU: 1 UID: 0 PID: 2693 Comm: syz.0.9153 Not tainted syzkaller #0 PREEMPT(full) [ 1311.742123][ T2693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1311.742138][ T2693] Call Trace: [ 1311.742147][ T2693] [ 1311.742157][ T2693] dump_stack_lvl+0xe8/0x150 [ 1311.742193][ T2693] should_fail_ex+0x412/0x560 [ 1311.742231][ T2693] _copy_from_user+0x2d/0xb0 [ 1311.742257][ T2693] __sys_bpf+0x229/0x950 [ 1311.742281][ T2693] ? __pfx___sys_bpf+0x10/0x10 [ 1311.742318][ T2693] ? ksys_write+0x242/0x270 [ 1311.742345][ T2693] ? __pfx_ksys_write+0x10/0x10 [ 1311.742378][ T2693] __x64_sys_bpf+0x7c/0x90 [ 1311.742410][ T2693] do_syscall_64+0x14d/0xf80 [ 1311.742441][ T2693] ? trace_irq_disable+0x3b/0x150 [ 1311.742459][ T2693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.742481][ T2693] ? clear_bhb_loop+0x40/0x90 [ 1311.742524][ T2693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.742564][ T2693] RIP: 0033:0x7fb923b9c799 [ 1311.742585][ T2693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.742604][ T2693] RSP: 002b:00007fb924ac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1311.742628][ T2693] RAX: ffffffffffffffda RBX: 00007fb923e15fa0 RCX: 00007fb923b9c799 [ 1311.742645][ T2693] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 1311.742660][ T2693] RBP: 00007fb924ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.742674][ T2693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.742710][ T2693] R13: 00007fb923e16038 R14: 00007fb923e15fa0 R15: 00007ffc1707be18 [ 1311.742747][ T2693] [ 1324.049320][ C1] hrtimer: interrupt took 11908200438 ns [ 1356.532143][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1429.071907][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1429.078927][ C0] rcu: 1-...!: (1 GPs behind) idle=ae24/0/0x1 softirq=211983/211984 fqs=1 [ 1429.088585][ C0] rcu: (detected by 0, t=10502 jiffies, g=196469, q=324 ncpus=2) [ 1429.096442][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1429.096479][ C1] NMI backtrace for cpu 1 [ 1429.096495][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1429.096516][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1429.096528][ C1] RIP: 0010:do_raw_spin_lock+0xe3/0x2f0 [ 1429.096568][ C1] Code: 18 49 8b 06 65 48 8b 0d d3 82 7a 11 48 89 4c 24 08 48 39 c8 0f 84 21 01 00 00 4c 8d 6b 08 4d 89 ef 49 c1 ef 03 41 0f b6 04 17 <84> c0 0f 85 af 01 00 00 41 8b 45 00 65 8b 0d ce 82 7a 11 39 c8 0f [ 1429.096584][ C1] RSP: 0018:ffffc90000a08c80 EFLAGS: 00000802 [ 1429.096600][ C1] RAX: 0000000000000000 RBX: ffff8880b8728280 RCX: ffff88801dac8000 [ 1429.096612][ C1] RDX: dffffc0000000000 RSI: ffffffff8e19ac64 RDI: ffff8880b8728280 [ 1429.096625][ C1] RBP: ffffc90000a08d30 R08: ffffffff81b28963 R09: ffff8880b8728298 [ 1429.096638][ C1] R10: dffffc0000000000 R11: fffffbfff2023197 R12: 1ffff92000141194 [ 1429.096650][ C1] R13: ffff8880b8728288 R14: ffff8880b8728290 R15: 1ffff110170e5051 [ 1429.096663][ C1] FS: 0000000000000000(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 1429.096676][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1429.096687][ C1] CR2: 00007fb94164eddd CR3: 000000002c320000 CR4: 00000000003526f0 [ 1429.096702][ C1] Call Trace: [ 1429.096709][ C1] [ 1429.096722][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1429.096746][ C1] __hrtimer_run_queues+0x603/0xcc0 [ 1429.096782][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1429.096807][ C1] ? rcu_is_watching+0x15/0xb0 [ 1429.096831][ C1] ? trace_softirq_raise+0x3b/0x150 [ 1429.096856][ C1] hrtimer_interrupt+0x42b/0x1010 [ 1429.096886][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1429.096917][ C1] __sysvec_apic_timer_interrupt+0x102/0x460 [ 1429.096945][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1429.096973][ C1] [ 1429.096978][ C1] [ 1429.096985][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1429.097004][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1429.097028][ C1] Code: 1e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 42 18 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1429.097042][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1429.097056][ C1] RAX: 0000000000248da5 RBX: ffffffff819a913a RCX: 0000000080000001 [ 1429.097067][ C1] RDX: 0000000000000001 RSI: ffffffff8df28bae RDI: ffffffff8c27ca80 [ 1429.097079][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 1429.097091][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 1429.097102][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 1429.097116][ C1] ? do_idle+0x36a/0x5f0 [ 1429.097163][ C1] default_idle+0x9/0x20 [ 1429.097180][ C1] default_idle_call+0x72/0xb0 [ 1429.097198][ C1] do_idle+0x36a/0x5f0 [ 1429.097226][ C1] ? __pfx_do_idle+0x10/0x10 [ 1429.097266][ C1] cpu_startup_entry+0x43/0x60 [ 1429.097289][ C1] start_secondary+0x101/0x110 [ 1429.097309][ C1] common_startup_64+0x13e/0x147 [ 1429.097368][ C1] [ 1429.097472][ C0] rcu: rcu_preempt kthread starved for 10490 jiffies! g196469 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1429.408678][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1429.418667][ C0] rcu: RCU grace-period kthread stack dump: [ 1429.424572][ C0] task:rcu_preempt state:R running task stack:27656 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1429.438106][ C0] Call Trace: [ 1429.441407][ C0] [ 1429.444368][ C0] __schedule+0x15dd/0x52d0 [ 1429.448911][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1429.453911][ C0] ? __pfx___schedule+0x10/0x10 [ 1429.458889][ C0] ? schedule+0x90/0x360 [ 1429.463170][ C0] schedule+0x164/0x360 [ 1429.467360][ C0] schedule_timeout+0x158/0x2c0 [ 1429.472243][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1429.477648][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1429.483220][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1429.489063][ C0] ? prepare_to_swait_event+0x340/0x370 [ 1429.494642][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 1429.499547][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1429.505475][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1429.510826][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1429.516080][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1429.521927][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1429.526549][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1429.531779][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1429.537626][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1429.542596][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 1429.547660][ C0] kthread+0x388/0x470 [ 1429.551755][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1429.556994][ C0] ? __pfx_kthread+0x10/0x10 [ 1429.561618][ C0] ret_from_fork+0x51e/0xb90 [ 1429.566246][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.571385][ C0] ? __switch_to+0xc7d/0x1450 [ 1429.576096][ C0] ? __pfx_kthread+0x10/0x10 [ 1429.580753][ C0] ret_from_fork_asm+0x1a/0x30 [ 1429.585580][ C0] [ 1429.588618][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1429.594969][ C0] CPU: 0 UID: 0 PID: 22991 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1429.604559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1429.614644][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1429.621186][ C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x12c0 [ 1429.627899][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 b4 e6 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5f e2 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 43 e2 [ 1429.647549][ C0] RSP: 0018:ffffc9000c907700 EFLAGS: 00000293 [ 1429.653663][ C0] RAX: ffffffff81b9cc2d RBX: 1ffff110170e813d RCX: ffff888036953d00 [ 1429.661659][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1429.669665][ C0] RBP: ffffc9000c907840 R08: ffffffff90118cb7 R09: 1ffffffff2023196 [ 1429.677664][ C0] R10: dffffc0000000000 R11: fffffbfff2023197 R12: ffff8880b87409e8 [ 1429.685664][ C0] R13: dffffc0000000000 R14: ffff8880b863c000 R15: 0000000000000001 [ 1429.693668][ C0] FS: 0000000000000000(0000) GS:ffff888125455000(0000) knlGS:0000000000000000 [ 1429.702620][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1429.709224][ C0] CR2: 0000200000219030 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1429.717314][ C0] Call Trace: [ 1429.720612][ C0] [ 1429.723567][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1429.728632][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1429.734992][ C0] ? kmem_cache_alloc_bulk_noprof+0xae/0x7e0 [ 1429.741006][ C0] ? __pfx___text_poke+0x10/0x10 [ 1429.745971][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1429.751026][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1429.756170][ C0] smp_text_poke_batch_finish+0x5f5/0x1160 [ 1429.762009][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1429.767064][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1429.773333][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1429.779615][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1429.785638][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 1429.791596][ C0] static_key_enable+0x1a/0x20 [ 1429.796401][ C0] toggle_allocation_gate+0xab/0x290 [ 1429.801721][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1429.807652][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1429.813406][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1429.819166][ C0] process_scheduled_works+0xb6e/0x18c0 [ 1429.824779][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1429.830813][ C0] ? assign_work+0x3d5/0x5e0 [ 1429.835482][ C0] worker_thread+0xa53/0xfc0 [ 1429.840148][ C0] kthread+0x388/0x470 [ 1429.844248][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1429.849392][ C0] ? __pfx_kthread+0x10/0x10 [ 1429.854010][ C0] ret_from_fork+0x51e/0xb90 [ 1429.858633][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.863775][ C0] ? __switch_to+0xc7d/0x1450 [ 1429.868485][ C0] ? __pfx_kthread+0x10/0x10 [ 1429.873117][ C0] ret_from_fork_asm+0x1a/0x30 [ 1429.877957][ C0]