last executing test programs: 2.396760544s ago: executing program 2 (id=5875): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x44, r1, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "161b6b4eab0b2773d10994fc1f"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000000c0)={0x281}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 1.994960494s ago: executing program 4 (id=5882): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESOCT], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd92, 0xffffffffffffffff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000ffffffffffffffe70202000900010073797a30000000001400020065727370616e30000000000000000000"], 0x34}, 0x1, 0x40030000000000}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100), 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r12, 0x0) r13 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r13, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="32cdc85ee750e451868fc9d4b1b049d91554609ccdfd11d10d56f11472ed20a2fc263ee3180a6057bf466b90bf9e240f547620caa8654972844a3be837490136e08f46be22f4a573b0511a8394e92628164b7de6cb2a85e397d907b76a3bdcf0263206e2d2c2493816f1ce6de4e3ce968149abaa65d97ddcfcf48ddd38ed47", @ANYRES16=r3, @ANYBLOB="100000000000000000001400000014000980080002000d0000000800020006000000"], 0x28}}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000ec0)='%){:-\x00', 0x6) 1.800234379s ago: executing program 2 (id=5887): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x100000, 0x4) pipe(&(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffd704000020000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20de2d9b0c35608d402ccdd9069bd50b994fda7a960512318a969ad6206b6c5de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c0356916f9862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe45ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a093189af4967064878a6404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000000c0)={0x7, 'bond_slave_1\x00', {0x7}, 0x2f}) bind(r3, &(0x7f0000000100)=@generic={0x2b, "3b4f38c60dc3454e52d51ada330c3658390488c1cc1e4e9d8b45927bde7844c4d6149db8c8c41503ca43a14f82cae37f3361a968b979ccff85ff449e8e998ca365d2651ce331b40c59bc4fd98f41459b173c3ea9f5f97e9694afb7b50e7aca054b15feab26a2a03bf9a6df31fcb10132d9f83312fb02a83271e35a7e3f54"}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd, 0xd}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xa, 0xc}}]}, 0x2c}}, 0x4048) 1.787786296s ago: executing program 4 (id=5888): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 1.670141368s ago: executing program 2 (id=5891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xa, 0xa, 0x101, 0x3000000, 0x0, {}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400000c0}, 0x880) 1.643939947s ago: executing program 4 (id=5892): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.568699932s ago: executing program 2 (id=5896): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1.452516428s ago: executing program 1 (id=5898): syz_emit_ethernet(0xb8, &(0x7f0000000300)={@random="0448a599dc4c", @local, @void, {@llc_tr={0x11, {@llc={0x7e, 0xff, "fc5b", "0014248134ee2493ca2db9f0b54bde199e8eabe3fc26d5a5673412017e69cef75780612ee72aa116652cfd09a6f4131e73c2aac968f45c0e41f2034d8922090cf88b0f19ed6b3da027cb893d436ed29250001c391adb5555ca234d97481f2004b005b10392091b7270bb865ac84415b6b34f81f0dc84f44adf342dbedc5c6827bc3fada0f82a387c530a96bbafaf981c03a704b43974c003c72f1278a8a4c32c56a256573559"}}}}}, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x7, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @dev}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0xb0}}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 980.358019ms ago: executing program 1 (id=5902): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 979.699758ms ago: executing program 4 (id=5903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "a8bd"}]}}}]}, 0x54}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056128ff16b2a141a2288e717", 0x2c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x1, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) write$cgroup_int(r8, &(0x7f0000000200), 0x12) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x20000000) socket$packet(0x11, 0x2, 0x300) 848.638721ms ago: executing program 0 (id=5905): r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x89a0, &(0x7f0000000000)={'macsec0\x00', 0xf29}) 825.661162ms ago: executing program 1 (id=5906): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="f4ffcd"], 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.freeze\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="09000000010001", 0x7) 825.405383ms ago: executing program 3 (id=5907): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f) 686.194923ms ago: executing program 3 (id=5908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461b007d444012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfdfe4f3a4745a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) 679.837762ms ago: executing program 0 (id=5909): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'macsec0\x00', 0xf29}) 643.958042ms ago: executing program 2 (id=5910): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000000000000a00000000000000000000000c001400", @ANYRES16], 0x28}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb0a, 0x14}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8bf}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2d}, @NL80211_ATTR_PMK={0x14, 0xfe, "4c3e06de9de7d6cfaa865562642b24d5"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40090) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r5) close(0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x1c8}}, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) 547.941413ms ago: executing program 1 (id=5911): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000ec0)='%){:-\x00', 0x6) 547.752901ms ago: executing program 0 (id=5912): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x4}}]}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x8, 0xfff, 0xfffffffa, 0x6}, &(0x7f0000000080)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x4, 0x5, 0x7}, 0x20) sendmsg$nl_generic(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x24, 0x2b, 0xb, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x8d, 0x0, 0x0, @binary}]}]}, 0x24}}, 0x8000) 494.908968ms ago: executing program 3 (id=5913): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x4004001) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 467.742871ms ago: executing program 0 (id=5914): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x4004000) 465.77759ms ago: executing program 2 (id=5915): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0xffd}], 0x2}, 0x101}], 0x4, 0x40000020, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0xf, 0xa, 0x8, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x1418, 0x1, 0x8000, 0xffffffff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x4008000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80003, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7f}}}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x98, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x6c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x9}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3ff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x7}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x407}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x5}}]}}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newtfilter={0x24, 0x28, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r12, {0x10}, {0xffe0}, {0xfff1, 0x40}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5749df93aece32b1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd0c00fbdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 399.690238ms ago: executing program 1 (id=5916): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 394.434633ms ago: executing program 4 (id=5917): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 370.951712ms ago: executing program 3 (id=5918): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f) 287.948872ms ago: executing program 0 (id=5919): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x300, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x0, 0x15555555555556f6, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x951a1ae4009cda78, 0x30]}}, &(0x7f00000020c0)=""/144, 0x39, 0x90, 0x1}, 0x20) 204.004053ms ago: executing program 0 (id=5920): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 181.985188ms ago: executing program 1 (id=5921): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x28, 0x80000, 0x0) shutdown(r0, 0x1) 181.243297ms ago: executing program 3 (id=5922): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x301, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 150.760545ms ago: executing program 4 (id=5923): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xa, @private2, 0xffffad37}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000100)={0x1, {{0xa, 0x4e21, 0xc, @loopback, 0xdaf4}}, {{0xa, 0x4e23, 0xa0f4, @private2, 0x6}}}, 0x108) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) close(r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=5924): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08000000851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): earer [ 431.819215][T19760] tipc: Enabled bearer , priority 0 [ 431.829631][T19762] tipc: Enabled bearer , priority 0 [ 431.837966][T19764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5114'. [ 431.853445][T19760] syzkaller0: entered promiscuous mode [ 431.859108][T19760] syzkaller0: entered allmulticast mode [ 431.867621][T19762] syzkaller0: entered promiscuous mode [ 431.875444][T19762] syzkaller0: entered allmulticast mode [ 431.924267][T19762] tipc: Resetting bearer [ 431.943596][T19766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5114'. [ 431.954180][T19761] tipc: Resetting bearer [ 431.977212][T19761] tipc: Disabling bearer [ 431.998278][T19760] tipc: Resetting bearer [ 432.006700][T19759] tipc: Resetting bearer [ 432.053597][T19759] tipc: Disabling bearer [ 432.114335][T19772] syz_tun: entered allmulticast mode [ 432.319243][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5119'. [ 432.397970][T19789] tipc: Enabling of bearer rejected, already enabled [ 432.566546][T19794] tipc: Enabled bearer , priority 0 [ 432.581458][T19794] syzkaller0: entered promiscuous mode [ 432.588428][T19794] syzkaller0: entered allmulticast mode [ 432.648935][T19794] tipc: Resetting bearer [ 432.694778][T19793] tipc: Resetting bearer [ 432.751458][T19793] tipc: Disabling bearer [ 432.791009][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5127'. [ 432.823973][T19813] netlink: 'syz.1.5127': attribute type 1 has an invalid length. [ 432.838047][T19813] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5127'. [ 432.871928][T19812] tipc: Enabled bearer , priority 0 [ 432.921118][T19812] syzkaller0: entered promiscuous mode [ 432.938617][T19812] syzkaller0: entered allmulticast mode [ 432.973909][ T55] block nbd2: Possible stuck request ffff88802522e000: control (read@0,1024B). Runtime 30 seconds [ 432.992391][ T55] block nbd2: Possible stuck request ffff88802522e1c0: control (read@1024,1024B). Runtime 30 seconds [ 433.003400][ T55] block nbd2: Possible stuck request ffff88802522e380: control (read@2048,1024B). Runtime 30 seconds [ 433.014622][ T55] block nbd2: Possible stuck request ffff88802522e540: control (read@3072,1024B). Runtime 30 seconds [ 433.066446][T19812] netem: change failed [ 433.124636][T19830] tipc: Resetting bearer [ 433.137244][T19825] tipc: Enabled bearer , priority 0 [ 433.150623][T19829] tipc: Enabled bearer , priority 0 [ 433.158237][T19829] syzkaller0: entered promiscuous mode [ 433.163955][T19829] syzkaller0: entered allmulticast mode [ 433.188251][T19810] tipc: Resetting bearer [ 433.230897][T19810] tipc: Disabling bearer [ 433.257226][T19825] syzkaller0: entered promiscuous mode [ 433.268553][T19825] syzkaller0: entered allmulticast mode [ 433.285249][T19829] tipc: Resetting bearer [ 433.329242][T19827] tipc: Resetting bearer [ 433.404151][T19827] tipc: Disabling bearer [ 433.415250][T19843] netlink: 'syz.2.5135': attribute type 39 has an invalid length. [ 433.429824][T19828] tipc: Resetting bearer [ 433.478709][T19822] tipc: Resetting bearer [ 433.532348][T19822] tipc: Disabling bearer [ 433.551749][T19852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5138'. [ 433.604696][T19848] tipc: Enabled bearer , priority 0 [ 433.735138][T19848] syzkaller0: entered promiscuous mode [ 433.741797][T19848] syzkaller0: entered allmulticast mode [ 433.748325][T19848] tipc: Resetting bearer [ 433.802214][T19861] tipc: Enabled bearer , priority 0 [ 433.814123][T19846] tipc: Resetting bearer [ 433.960188][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 433.968295][ C1] lec:lec_tx_timeout: lec0 [ 433.973321][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 435.366798][T19846] tipc: Disabling bearer [ 435.378154][T19861] syzkaller0: entered promiscuous mode [ 435.389669][T19861] syzkaller0: entered allmulticast mode [ 435.409811][T19878] tipc: Resetting bearer [ 435.446785][T19860] tipc: Resetting bearer [ 435.496685][T19860] tipc: Disabling bearer [ 435.525249][T19894] tipc: Enabled bearer , priority 0 [ 435.537242][T19895] syzkaller0: entered promiscuous mode [ 435.543997][T19895] syzkaller0: entered allmulticast mode [ 435.580144][T19903] tipc: Resetting bearer [ 435.603741][T19909] tipc: Enabling of bearer rejected, already enabled [ 435.673926][T19891] tipc: Resetting bearer [ 435.711696][T19891] tipc: Disabling bearer [ 435.746739][T19922] syz_tun (unregistering): left allmulticast mode [ 436.103712][T19945] __nla_validate_parse: 1 callbacks suppressed [ 436.103730][T19945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5161'. [ 436.215557][T19952] tipc: Enabled bearer , priority 0 [ 436.223441][T19952] syzkaller0: entered promiscuous mode [ 436.232632][T19952] syzkaller0: entered allmulticast mode [ 436.248163][T19952] tipc: Resetting bearer [ 436.264679][T19951] tipc: Resetting bearer [ 436.294223][T19951] tipc: Disabling bearer [ 436.310004][T19956] tipc: Enabling of bearer rejected, already enabled [ 436.468102][T19967] tipc: Enabling of bearer rejected, already enabled [ 436.669637][T19980] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5171'. [ 436.717000][T19983] tipc: Enabled bearer , priority 0 [ 436.728378][T19983] syzkaller0: entered promiscuous mode [ 436.740752][T19983] syzkaller0: entered allmulticast mode [ 436.755653][T19985] tipc: Enabling of bearer rejected, already enabled [ 436.767928][T19983] tipc: Resetting bearer [ 436.806678][T19982] tipc: Resetting bearer [ 436.869454][T19982] tipc: Disabling bearer [ 436.888812][T19987] tipc: Enabling of bearer rejected, already enabled [ 436.905590][T19991] tipc: Enabled bearer , priority 0 [ 436.913782][T19991] syzkaller0: entered promiscuous mode [ 436.919442][T19991] syzkaller0: entered allmulticast mode [ 436.944524][T19991] tipc: Resetting bearer [ 436.956946][T19990] tipc: Resetting bearer [ 437.010981][T19990] tipc: Disabling bearer [ 437.208241][T20007] tipc: Enabled bearer , priority 0 [ 437.227137][T20007] tipc: Resetting bearer [ 437.259076][T20004] tipc: Disabling bearer [ 437.378650][T20015] tipc: Enabled bearer , priority 0 [ 437.398249][T20015] syzkaller0: entered promiscuous mode [ 437.419989][T20015] syzkaller0: entered allmulticast mode [ 437.439881][T20019] tipc: Enabled bearer , priority 0 [ 437.452496][T20019] syzkaller0: entered promiscuous mode [ 437.457998][T20019] syzkaller0: entered allmulticast mode [ 437.468514][T20015] netem: change failed [ 437.492123][T20015] tipc: Resetting bearer [ 437.517536][T20019] tipc: Resetting bearer [ 437.527400][T20012] tipc: Resetting bearer [ 437.563658][T20012] tipc: Disabling bearer [ 437.575678][T20018] tipc: Resetting bearer [ 437.593213][T20018] tipc: Disabling bearer [ 437.662201][T20031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5194'. [ 437.983197][T20051] tipc: Enabled bearer , priority 0 [ 437.995508][T20051] syzkaller0: entered promiscuous mode [ 438.004101][T20051] syzkaller0: entered allmulticast mode [ 438.057866][T20051] tipc: Resetting bearer [ 438.073010][T20059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5201'. [ 438.082549][T20048] tipc: Resetting bearer [ 438.134016][T20048] tipc: Disabling bearer [ 438.184089][T20062] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5205'. [ 438.194032][T20064] tipc: Enabling of bearer rejected, already enabled [ 438.205479][T20064] netem: change failed [ 438.256085][T20066] tipc: Enabling of bearer rejected, already enabled [ 438.773157][T20101] tipc: Enabled bearer , priority 0 [ 438.795192][T20101] syzkaller0: entered promiscuous mode [ 438.811913][T20101] syzkaller0: entered allmulticast mode [ 438.872329][T20101] tipc: Resetting bearer [ 438.917130][T20099] tipc: Resetting bearer [ 438.924862][T20111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5225'. [ 438.975349][T20099] tipc: Disabling bearer [ 438.981362][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 438.981390][ C1] lec:lec_tx_timeout: lec0 [ 438.989789][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 439.244842][T20131] delete_channel: no stack [ 439.307302][T20134] tipc: Enabling of bearer rejected, already enabled [ 439.541144][T20151] netlink: 71 bytes leftover after parsing attributes in process `syz.3.5242'. [ 439.692492][T20161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5247'. [ 440.020844][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.467697][T20187] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5254'. [ 441.423490][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5281'. [ 441.541135][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5283'. [ 442.198837][T20283] netlink: 'syz.1.5293': attribute type 5 has an invalid length. [ 442.302093][T20294] netlink: 'syz.1.5297': attribute type 1 has an invalid length. [ 442.309962][T20294] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5297'. [ 442.557408][T20300] netlink: 51 bytes leftover after parsing attributes in process `syz.4.5300'. [ 442.796257][T20325] tipc: Enabled bearer , priority 0 [ 442.809979][T20325] syzkaller0: entered promiscuous mode [ 442.820875][T20325] syzkaller0: entered allmulticast mode [ 442.846324][T20325] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 442.876997][T20325] tipc: Resetting bearer [ 442.886457][T20324] tipc: Resetting bearer [ 442.904277][T20324] tipc: Disabling bearer [ 442.914132][T20329] sit0: entered promiscuous mode [ 442.923558][T20329] netlink: 'syz.2.5308': attribute type 1 has an invalid length. [ 442.932002][T20329] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5308'. [ 442.996745][T20332] netlink: 'syz.2.5309': attribute type 1 has an invalid length. [ 443.005663][T20332] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5309'. [ 443.433793][T20358] tipc: Enabled bearer , priority 0 [ 443.506730][T20358] syzkaller0: entered promiscuous mode [ 443.513005][T20358] syzkaller0: entered allmulticast mode [ 443.519318][T20358] tipc: Resetting bearer [ 443.530806][T20359] netlink: 'syz.2.5321': attribute type 1 has an invalid length. [ 443.544475][T20357] tipc: Resetting bearer [ 443.550907][T20359] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5321'. [ 443.990056][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 443.998127][ C1] lec:lec_tx_timeout: lec0 [ 444.003227][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 445.069276][T20357] tipc: Disabling bearer [ 445.107210][T20376] tipc: Enabling of bearer rejected, failed to enable media [ 445.280478][T20402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5331'. [ 445.353242][T20406] netlink: 'syz.3.5334': attribute type 1 has an invalid length. [ 445.382896][T20406] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5334'. [ 445.418144][T20409] tipc: Enabled bearer , priority 0 [ 445.441674][T20409] syzkaller0: entered promiscuous mode [ 445.447179][T20409] syzkaller0: entered allmulticast mode [ 445.541021][T20409] tipc: Resetting bearer [ 445.560708][T20408] tipc: Resetting bearer [ 445.616735][T20408] tipc: Disabling bearer [ 445.654696][T20419] lo speed is unknown, defaulting to 1000 [ 445.752524][T20427] syz_tun: entered allmulticast mode [ 445.772669][T20427] syz_tun: left allmulticast mode [ 446.017117][T20441] tipc: Enabling of bearer rejected, failed to enable media [ 446.069622][T20440] netlink: 'syz.4.5348': attribute type 1 has an invalid length. [ 446.085803][T20440] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5348'. [ 446.734330][T20487] netlink: 'syz.2.5363': attribute type 1 has an invalid length. [ 446.742418][T20487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5363'. [ 446.831845][T20493] macvlan0: entered promiscuous mode [ 446.857524][T20493] macvlan0: entered allmulticast mode [ 446.870488][T20493] veth1_to_bond: entered allmulticast mode [ 446.876328][T20493] veth1_to_bond: entered promiscuous mode [ 446.893106][T20493] team0: Port device macvlan0 added [ 446.895201][T20498] FAULT_INJECTION: forcing a failure. [ 446.895201][T20498] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 446.907950][T20496] tipc: Enabled bearer , priority 0 [ 446.922811][T20498] CPU: 1 UID: 0 PID: 20498 Comm: syz.2.5367 Not tainted syzkaller #0 PREEMPT(full) [ 446.922834][T20498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.922848][T20498] Call Trace: [ 446.922856][T20498] [ 446.922864][T20498] dump_stack_lvl+0x189/0x250 [ 446.922891][T20498] ? __pfx____ratelimit+0x10/0x10 [ 446.922915][T20498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.922936][T20498] ? __pfx__printk+0x10/0x10 [ 446.922959][T20498] ? __might_fault+0xb0/0x130 [ 446.923002][T20498] should_fail_ex+0x414/0x560 [ 446.923030][T20498] _copy_from_user+0x2d/0xb0 [ 446.923051][T20498] __sys_bpf+0x1ed/0x870 [ 446.923077][T20498] ? __pfx___sys_bpf+0x10/0x10 [ 446.923113][T20498] ? ksys_write+0x22a/0x250 [ 446.923138][T20498] ? __pfx_ksys_write+0x10/0x10 [ 446.923169][T20498] __x64_sys_bpf+0x7c/0x90 [ 446.923191][T20498] do_syscall_64+0xfa/0x3b0 [ 446.923213][T20498] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.923235][T20498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.923253][T20498] ? clear_bhb_loop+0x60/0xb0 [ 446.923275][T20498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.923296][T20498] RIP: 0033:0x7f0451b8ebe9 [ 446.923313][T20498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.923329][T20498] RSP: 002b:00007f0452952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.923348][T20498] RAX: ffffffffffffffda RBX: 00007f0451db5fa0 RCX: 00007f0451b8ebe9 [ 446.923361][T20498] RDX: 0000000000000020 RSI: 0000200000002180 RDI: 0000000000000012 [ 446.923373][T20498] RBP: 00007f0452952090 R08: 0000000000000000 R09: 0000000000000000 [ 446.923384][T20498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.923395][T20498] R13: 00007f0451db6038 R14: 00007f0451db5fa0 R15: 00007ffe137b3ae8 [ 446.923426][T20498] [ 446.940403][T20496] syzkaller0: entered promiscuous mode [ 447.151320][T20507] FAULT_INJECTION: forcing a failure. [ 447.151320][T20507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.155910][T20496] syzkaller0: entered allmulticast mode [ 447.191727][T20495] tipc: Resetting bearer [ 447.207573][T20507] CPU: 1 UID: 0 PID: 20507 Comm: syz.0.5371 Not tainted syzkaller #0 PREEMPT(full) [ 447.207596][T20507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.207607][T20507] Call Trace: [ 447.207618][T20507] [ 447.207626][T20507] dump_stack_lvl+0x189/0x250 [ 447.207650][T20507] ? __pfx____ratelimit+0x10/0x10 [ 447.207674][T20507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.207695][T20507] ? __pfx__printk+0x10/0x10 [ 447.207719][T20507] ? __might_fault+0xb0/0x130 [ 447.207754][T20507] should_fail_ex+0x414/0x560 [ 447.207782][T20507] _copy_from_user+0x2d/0xb0 [ 447.207804][T20507] ___sys_sendmsg+0x158/0x2a0 [ 447.207826][T20507] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.207884][T20507] ? __fget_files+0x2a/0x420 [ 447.207908][T20507] ? __fget_files+0x3a0/0x420 [ 447.207943][T20507] __x64_sys_sendmsg+0x19b/0x260 [ 447.207971][T20507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.208001][T20507] ? __pfx_ksys_write+0x10/0x10 [ 447.208021][T20507] ? rcu_is_watching+0x15/0xb0 [ 447.208046][T20507] ? do_syscall_64+0xbe/0x3b0 [ 447.208073][T20507] do_syscall_64+0xfa/0x3b0 [ 447.208095][T20507] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.208117][T20507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.208135][T20507] ? clear_bhb_loop+0x60/0xb0 [ 447.208157][T20507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.208174][T20507] RIP: 0033:0x7f9444f8ebe9 [ 447.208190][T20507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.208205][T20507] RSP: 002b:00007f9445dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.208224][T20507] RAX: ffffffffffffffda RBX: 00007f94451b5fa0 RCX: 00007f9444f8ebe9 [ 447.208237][T20507] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 447.208249][T20507] RBP: 00007f9445dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 447.208260][T20507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.208270][T20507] R13: 00007f94451b6038 R14: 00007f94451b5fa0 R15: 00007ffc31ed3be8 [ 447.208301][T20507] [ 447.464009][T20495] tipc: Disabling bearer [ 447.492488][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5373'. [ 447.907683][T20538] tipc: Enabled bearer , priority 0 [ 447.933583][T20538] syzkaller0: entered promiscuous mode [ 447.967705][T20538] syzkaller0: entered allmulticast mode [ 448.027912][T20538] tipc: Resetting bearer [ 448.041706][T20536] tipc: Resetting bearer [ 448.066384][T20536] tipc: Disabling bearer [ 448.099498][T20551] tipc: Enabled bearer , priority 0 [ 448.122513][T20548] syzkaller0: entered promiscuous mode [ 448.128003][T20548] syzkaller0: entered allmulticast mode [ 448.147870][T20548] tipc: Resetting bearer [ 448.158235][T20547] tipc: Resetting bearer [ 448.177929][T20556] FAULT_INJECTION: forcing a failure. [ 448.177929][T20556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.194378][T20556] CPU: 0 UID: 0 PID: 20556 Comm: syz.3.5389 Not tainted syzkaller #0 PREEMPT(full) [ 448.194401][T20556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.194411][T20556] Call Trace: [ 448.194418][T20556] [ 448.194426][T20556] dump_stack_lvl+0x189/0x250 [ 448.194452][T20556] ? __pfx____ratelimit+0x10/0x10 [ 448.194475][T20556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.194496][T20556] ? __pfx__printk+0x10/0x10 [ 448.194520][T20556] ? __might_fault+0xb0/0x130 [ 448.194554][T20556] should_fail_ex+0x414/0x560 [ 448.194583][T20556] _copy_from_user+0x2d/0xb0 [ 448.194603][T20556] ___sys_sendmsg+0x158/0x2a0 [ 448.194625][T20556] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.194683][T20556] ? __fget_files+0x2a/0x420 [ 448.194706][T20556] ? __fget_files+0x3a0/0x420 [ 448.194741][T20556] __x64_sys_sendmsg+0x19b/0x260 [ 448.194763][T20556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.194791][T20556] ? __pfx_ksys_write+0x10/0x10 [ 448.194811][T20556] ? rcu_is_watching+0x15/0xb0 [ 448.194834][T20556] ? do_syscall_64+0xbe/0x3b0 [ 448.194862][T20556] do_syscall_64+0xfa/0x3b0 [ 448.194883][T20556] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.194906][T20556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.194923][T20556] ? clear_bhb_loop+0x60/0xb0 [ 448.194945][T20556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.194963][T20556] RIP: 0033:0x7ff79398ebe9 [ 448.194979][T20556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.194994][T20556] RSP: 002b:00007ff791bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.195013][T20556] RAX: ffffffffffffffda RBX: 00007ff793bb5fa0 RCX: 00007ff79398ebe9 [ 448.195026][T20556] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 448.195037][T20556] RBP: 00007ff791bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 448.195049][T20556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.195059][T20556] R13: 00007ff793bb6038 R14: 00007ff793bb5fa0 R15: 00007ffdb37786f8 [ 448.195098][T20556] [ 448.407280][T20547] tipc: Disabling bearer [ 448.543933][T20568] FAULT_INJECTION: forcing a failure. [ 448.543933][T20568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.597788][T20568] CPU: 0 UID: 0 PID: 20568 Comm: syz.0.5393 Not tainted syzkaller #0 PREEMPT(full) [ 448.597823][T20568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.597834][T20568] Call Trace: [ 448.597841][T20568] [ 448.597849][T20568] dump_stack_lvl+0x189/0x250 [ 448.597876][T20568] ? __pfx____ratelimit+0x10/0x10 [ 448.597900][T20568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.597921][T20568] ? __pfx__printk+0x10/0x10 [ 448.597943][T20568] ? __might_fault+0xb0/0x130 [ 448.597978][T20568] should_fail_ex+0x414/0x560 [ 448.598006][T20568] _copy_from_user+0x2d/0xb0 [ 448.598027][T20568] ___sys_sendmsg+0x158/0x2a0 [ 448.598048][T20568] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.598104][T20568] ? __fget_files+0x2a/0x420 [ 448.598128][T20568] ? __fget_files+0x3a0/0x420 [ 448.598204][T20568] __x64_sys_sendmsg+0x19b/0x260 [ 448.598226][T20568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.598255][T20568] ? __pfx_ksys_write+0x10/0x10 [ 448.598276][T20568] ? rcu_is_watching+0x15/0xb0 [ 448.598298][T20568] ? do_syscall_64+0xbe/0x3b0 [ 448.598325][T20568] do_syscall_64+0xfa/0x3b0 [ 448.598346][T20568] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.598368][T20568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.598386][T20568] ? clear_bhb_loop+0x60/0xb0 [ 448.598407][T20568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.598424][T20568] RIP: 0033:0x7f9444f8ebe9 [ 448.598440][T20568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.598455][T20568] RSP: 002b:00007f9445dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.598474][T20568] RAX: ffffffffffffffda RBX: 00007f94451b5fa0 RCX: 00007f9444f8ebe9 [ 448.598487][T20568] RDX: 0000000000000880 RSI: 0000200000000180 RDI: 0000000000000003 [ 448.598499][T20568] RBP: 00007f9445dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 448.598509][T20568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.598520][T20568] R13: 00007f94451b6038 R14: 00007f94451b5fa0 R15: 00007ffc31ed3be8 [ 448.598550][T20568] [ 448.609513][T20574] tipc: Enabled bearer , priority 0 [ 448.821697][T20566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5392'. [ 448.824573][T20578] syzkaller0: entered promiscuous mode [ 448.837085][T20578] syzkaller0: entered allmulticast mode [ 448.918171][T20574] tipc: Resetting bearer [ 448.945866][T20573] tipc: Resetting bearer [ 448.961132][T20582] FAULT_INJECTION: forcing a failure. [ 448.961132][T20582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.010063][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 449.018092][ C1] lec:lec_tx_timeout: lec0 [ 449.023281][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 449.024512][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.2.5397 Not tainted syzkaller #0 PREEMPT(full) [ 449.024534][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.024544][T20582] Call Trace: [ 449.024551][T20582] [ 449.024558][T20582] dump_stack_lvl+0x189/0x250 [ 449.024583][T20582] ? __pfx____ratelimit+0x10/0x10 [ 449.024607][T20582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.024626][T20582] ? __pfx__printk+0x10/0x10 [ 449.024650][T20582] ? __might_fault+0xb0/0x130 [ 449.024684][T20582] should_fail_ex+0x414/0x560 [ 449.024711][T20582] _copy_from_user+0x2d/0xb0 [ 449.024732][T20582] do_sock_getsockopt+0x17d/0x450 [ 449.024753][T20582] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 449.024769][T20582] ? write_ibpb+0x30/0x40 [ 449.024798][T20582] ? __fget_files+0x3a0/0x420 [ 449.024823][T20582] ? __fget_files+0x2a/0x420 [ 449.024853][T20582] __x64_sys_getsockopt+0x1a5/0x250 [ 449.024869][T20582] ? write_ibpb+0x30/0x40 [ 449.024893][T20582] ? write_ibpb+0x30/0x40 [ 449.024918][T20582] do_syscall_64+0xfa/0x3b0 [ 449.024940][T20582] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.024961][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.024982][T20582] ? clear_bhb_loop+0x60/0xb0 [ 449.025003][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.025019][T20582] RIP: 0033:0x7f0451b8ebe9 [ 449.025035][T20582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.025049][T20582] RSP: 002b:00007f0452952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 449.025068][T20582] RAX: ffffffffffffffda RBX: 00007f0451db5fa0 RCX: 00007f0451b8ebe9 [ 449.025080][T20582] RDX: 0100000000000001 RSI: 00000000000000ff RDI: 0000000000000003 [ 449.025092][T20582] RBP: 00007f0452952090 R08: 0000000000000000 R09: 0000000000000000 [ 449.025102][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.025113][T20582] R13: 00007f0451db6038 R14: 00007f0451db5fa0 R15: 00007ffe137b3ae8 [ 449.025142][T20582] [ 449.229208][T20573] tipc: Disabling bearer [ 449.274598][T20593] tipc: Enabling of bearer rejected, already enabled [ 449.405290][T20600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.414747][T20602] FAULT_INJECTION: forcing a failure. [ 449.414747][T20602] name failslab, interval 1, probability 0, space 0, times 1 [ 449.436327][T20602] CPU: 1 UID: 0 PID: 20602 Comm: syz.1.5408 Not tainted syzkaller #0 PREEMPT(full) [ 449.436350][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.436361][T20602] Call Trace: [ 449.436368][T20602] [ 449.436377][T20602] dump_stack_lvl+0x189/0x250 [ 449.436402][T20602] ? __pfx____ratelimit+0x10/0x10 [ 449.436426][T20602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.436447][T20602] ? __pfx__printk+0x10/0x10 [ 449.436477][T20602] ? __pfx___might_resched+0x10/0x10 [ 449.436494][T20602] ? fs_reclaim_acquire+0x7d/0x100 [ 449.436525][T20602] should_fail_ex+0x414/0x560 [ 449.436553][T20602] should_failslab+0xa8/0x100 [ 449.436580][T20602] __kmalloc_noprof+0xcb/0x4f0 [ 449.436600][T20602] ? kfree+0x4d/0x440 [ 449.436618][T20602] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 449.436641][T20602] tomoyo_realpath_from_path+0xe3/0x5d0 [ 449.436662][T20602] ? tomoyo_domain+0xd9/0x130 [ 449.436686][T20602] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 449.436710][T20602] tomoyo_path_number_perm+0x1e8/0x5a0 [ 449.436744][T20602] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 449.436786][T20602] ? __lock_acquire+0xab9/0xd20 [ 449.436832][T20602] ? __fget_files+0x2a/0x420 [ 449.436860][T20602] ? __fget_files+0x2a/0x420 [ 449.436883][T20602] ? __fget_files+0x3a0/0x420 [ 449.436904][T20602] ? __fget_files+0x2a/0x420 [ 449.436933][T20602] security_file_ioctl+0xcb/0x2d0 [ 449.436957][T20602] __se_sys_ioctl+0x47/0x170 [ 449.436981][T20602] do_syscall_64+0xfa/0x3b0 [ 449.437003][T20602] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.437025][T20602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.437043][T20602] ? clear_bhb_loop+0x60/0xb0 [ 449.437066][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.437082][T20602] RIP: 0033:0x7f632d18ebe9 [ 449.437098][T20602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.437113][T20602] RSP: 002b:00007f632df42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.437132][T20602] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18ebe9 [ 449.437144][T20602] RDX: 0000200000003680 RSI: 00000000400454d9 RDI: 0000000000000003 [ 449.437156][T20602] RBP: 00007f632df42090 R08: 0000000000000000 R09: 0000000000000000 [ 449.437167][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.437178][T20602] R13: 00007f632d3b6038 R14: 00007f632d3b5fa0 R15: 00007ffcb5b3eca8 [ 449.437210][T20602] [ 449.437218][T20602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 449.517035][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5407'. [ 449.558064][T20608] netlink: 'syz.4.5409': attribute type 2 has an invalid length. [ 449.608186][T20610] FAULT_INJECTION: forcing a failure. [ 449.608186][T20610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.646660][T20612] netlink: 'syz.0.5410': attribute type 4 has an invalid length. [ 449.654884][T20608] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5409'. [ 449.694837][T20610] CPU: 1 UID: 0 PID: 20610 Comm: syz.2.5411 Not tainted syzkaller #0 PREEMPT(full) [ 449.694862][T20610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.694873][T20610] Call Trace: [ 449.694880][T20610] [ 449.694888][T20610] dump_stack_lvl+0x189/0x250 [ 449.694914][T20610] ? __pfx____ratelimit+0x10/0x10 [ 449.694937][T20610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.694957][T20610] ? __pfx__printk+0x10/0x10 [ 449.694981][T20610] ? __might_fault+0xb0/0x130 [ 449.695015][T20610] should_fail_ex+0x414/0x560 [ 449.695042][T20610] _copy_from_user+0x2d/0xb0 [ 449.695062][T20610] ___sys_sendmsg+0x158/0x2a0 [ 449.695083][T20610] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.695138][T20610] ? __fget_files+0x2a/0x420 [ 449.695161][T20610] ? __fget_files+0x3a0/0x420 [ 449.695196][T20610] __x64_sys_sendmsg+0x19b/0x260 [ 449.695216][T20610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.695244][T20610] ? __pfx_ksys_write+0x10/0x10 [ 449.695262][T20610] ? rcu_is_watching+0x15/0xb0 [ 449.695285][T20610] ? do_syscall_64+0xbe/0x3b0 [ 449.695312][T20610] do_syscall_64+0xfa/0x3b0 [ 449.695336][T20610] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.695358][T20610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.695375][T20610] ? clear_bhb_loop+0x60/0xb0 [ 449.695396][T20610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.695413][T20610] RIP: 0033:0x7f0451b8ebe9 [ 449.695428][T20610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.695443][T20610] RSP: 002b:00007f0452952038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.695460][T20610] RAX: ffffffffffffffda RBX: 00007f0451db5fa0 RCX: 00007f0451b8ebe9 [ 449.695473][T20610] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 449.695484][T20610] RBP: 00007f0452952090 R08: 0000000000000000 R09: 0000000000000000 [ 449.695495][T20610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.695505][T20610] R13: 00007f0451db6038 R14: 00007f0451db5fa0 R15: 00007ffe137b3ae8 [ 449.695534][T20610] [ 449.778217][T20614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5407'. [ 450.013468][T20618] netlink: 'syz.0.5413': attribute type 1 has an invalid length. [ 450.021764][T20618] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5413'. [ 450.095279][T20625] FAULT_INJECTION: forcing a failure. [ 450.095279][T20625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.115063][T20625] CPU: 0 UID: 0 PID: 20625 Comm: syz.3.5414 Not tainted syzkaller #0 PREEMPT(full) [ 450.115086][T20625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.115097][T20625] Call Trace: [ 450.115105][T20625] [ 450.115113][T20625] dump_stack_lvl+0x189/0x250 [ 450.115139][T20625] ? __pfx____ratelimit+0x10/0x10 [ 450.115162][T20625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.115183][T20625] ? __pfx__printk+0x10/0x10 [ 450.115208][T20625] ? __might_fault+0xb0/0x130 [ 450.115243][T20625] should_fail_ex+0x414/0x560 [ 450.115272][T20625] _copy_from_user+0x2d/0xb0 [ 450.115293][T20625] ___sys_sendmsg+0x158/0x2a0 [ 450.115315][T20625] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.115372][T20625] ? __fget_files+0x2a/0x420 [ 450.115396][T20625] ? __fget_files+0x3a0/0x420 [ 450.115436][T20625] __x64_sys_sendmsg+0x19b/0x260 [ 450.115459][T20625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.115487][T20625] ? __pfx_ksys_write+0x10/0x10 [ 450.115508][T20625] ? rcu_is_watching+0x15/0xb0 [ 450.115531][T20625] ? do_syscall_64+0xbe/0x3b0 [ 450.115559][T20625] do_syscall_64+0xfa/0x3b0 [ 450.115581][T20625] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.115602][T20625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.115620][T20625] ? clear_bhb_loop+0x60/0xb0 [ 450.115641][T20625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.115656][T20625] RIP: 0033:0x7ff79398ebe9 [ 450.115672][T20625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.115686][T20625] RSP: 002b:00007ff791bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.115705][T20625] RAX: ffffffffffffffda RBX: 00007ff793bb5fa0 RCX: 00007ff79398ebe9 [ 450.115718][T20625] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 450.115729][T20625] RBP: 00007ff791bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.115740][T20625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.115750][T20625] R13: 00007ff793bb6038 R14: 00007ff793bb5fa0 R15: 00007ffdb37786f8 [ 450.115779][T20625] [ 450.404417][T20628] netlink: 'syz.1.5415': attribute type 1 has an invalid length. [ 450.404596][T20636] netlink: 'syz.3.5418': attribute type 28 has an invalid length. [ 450.412298][T20628] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5415'. [ 450.430370][T20636] netlink: 'syz.3.5418': attribute type 3 has an invalid length. [ 450.438126][T20636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5418'. [ 450.450698][T20633] FAULT_INJECTION: forcing a failure. [ 450.450698][T20633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.463934][T20633] CPU: 0 UID: 0 PID: 20633 Comm: syz.0.5416 Not tainted syzkaller #0 PREEMPT(full) [ 450.463955][T20633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.463964][T20633] Call Trace: [ 450.463971][T20633] [ 450.463979][T20633] dump_stack_lvl+0x189/0x250 [ 450.464004][T20633] ? __pfx____ratelimit+0x10/0x10 [ 450.464027][T20633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.464047][T20633] ? __pfx__printk+0x10/0x10 [ 450.464071][T20633] ? __might_fault+0xb0/0x130 [ 450.464105][T20633] should_fail_ex+0x414/0x560 [ 450.464131][T20633] _copy_from_user+0x2d/0xb0 [ 450.464151][T20633] ___sys_sendmsg+0x158/0x2a0 [ 450.464173][T20633] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.464225][T20633] ? __fget_files+0x2a/0x420 [ 450.464248][T20633] ? __fget_files+0x3a0/0x420 [ 450.464281][T20633] __x64_sys_sendmsg+0x19b/0x260 [ 450.464301][T20633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.464326][T20633] ? __pfx_ksys_write+0x10/0x10 [ 450.464345][T20633] ? rcu_is_watching+0x15/0xb0 [ 450.464365][T20633] ? do_syscall_64+0xbe/0x3b0 [ 450.464392][T20633] do_syscall_64+0xfa/0x3b0 [ 450.464413][T20633] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.464434][T20633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.464451][T20633] ? clear_bhb_loop+0x60/0xb0 [ 450.464472][T20633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.464488][T20633] RIP: 0033:0x7f9444f8ebe9 [ 450.464505][T20633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.464520][T20633] RSP: 002b:00007f9445db5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.464539][T20633] RAX: ffffffffffffffda RBX: 00007f94451b6090 RCX: 00007f9444f8ebe9 [ 450.464552][T20633] RDX: 0000000004000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 450.464564][T20633] RBP: 00007f9445db5090 R08: 0000000000000000 R09: 0000000000000000 [ 450.464575][T20633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.464586][T20633] R13: 00007f94451b6128 R14: 00007f94451b6090 R15: 00007ffc31ed3be8 [ 450.464615][T20633] [ 450.749494][T20641] netlink: 'syz.3.5418': attribute type 58 has an invalid length. [ 450.758585][T20641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5418'. [ 450.777205][T20643] FAULT_INJECTION: forcing a failure. [ 450.777205][T20643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.794951][T20643] CPU: 0 UID: 0 PID: 20643 Comm: syz.1.5419 Not tainted syzkaller #0 PREEMPT(full) [ 450.794974][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.794984][T20643] Call Trace: [ 450.794992][T20643] [ 450.795000][T20643] dump_stack_lvl+0x189/0x250 [ 450.795025][T20643] ? __pfx____ratelimit+0x10/0x10 [ 450.795049][T20643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.795070][T20643] ? __pfx__printk+0x10/0x10 [ 450.795093][T20643] ? __might_fault+0xb0/0x130 [ 450.795129][T20643] should_fail_ex+0x414/0x560 [ 450.795157][T20643] _copy_from_user+0x2d/0xb0 [ 450.795177][T20643] ___sys_sendmsg+0x158/0x2a0 [ 450.795199][T20643] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.795255][T20643] ? __fget_files+0x2a/0x420 [ 450.795279][T20643] ? __fget_files+0x3a0/0x420 [ 450.795313][T20643] __x64_sys_sendmsg+0x19b/0x260 [ 450.795332][T20643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.795360][T20643] ? __pfx_ksys_write+0x10/0x10 [ 450.795379][T20643] ? rcu_is_watching+0x15/0xb0 [ 450.795400][T20643] ? do_syscall_64+0xbe/0x3b0 [ 450.795426][T20643] do_syscall_64+0xfa/0x3b0 [ 450.795446][T20643] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.795467][T20643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.795484][T20643] ? clear_bhb_loop+0x60/0xb0 [ 450.795505][T20643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.795522][T20643] RIP: 0033:0x7f632d18ebe9 [ 450.795537][T20643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.795552][T20643] RSP: 002b:00007f632df42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.795569][T20643] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18ebe9 [ 450.795582][T20643] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 450.795592][T20643] RBP: 00007f632df42090 R08: 0000000000000000 R09: 0000000000000000 [ 450.795602][T20643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.795612][T20643] R13: 00007f632d3b6038 R14: 00007f632d3b5fa0 R15: 00007ffcb5b3eca8 [ 450.795648][T20643] [ 451.264901][T20658] FAULT_INJECTION: forcing a failure. [ 451.264901][T20658] name failslab, interval 1, probability 0, space 0, times 0 [ 451.293059][T20657] netlink: 'syz.4.5424': attribute type 1 has an invalid length. [ 451.310138][T20658] CPU: 0 UID: 0 PID: 20658 Comm: syz.0.5422 Not tainted syzkaller #0 PREEMPT(full) [ 451.310162][T20658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.310173][T20658] Call Trace: [ 451.310181][T20658] [ 451.310189][T20658] dump_stack_lvl+0x189/0x250 [ 451.310214][T20658] ? __pfx____ratelimit+0x10/0x10 [ 451.310245][T20658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.310266][T20658] ? __pfx__printk+0x10/0x10 [ 451.310295][T20658] ? __pfx___might_resched+0x10/0x10 [ 451.310310][T20658] ? fs_reclaim_acquire+0x7d/0x100 [ 451.310341][T20658] should_fail_ex+0x414/0x560 [ 451.310369][T20658] should_failslab+0xa8/0x100 [ 451.310395][T20658] kmem_cache_alloc_noprof+0x73/0x3c0 [ 451.310417][T20658] ? create_new_namespaces+0x31/0x720 [ 451.310462][T20658] create_new_namespaces+0x31/0x720 [ 451.310486][T20658] ? apparmor_capable+0x137/0x1b0 [ 451.310509][T20658] ? bpf_lsm_capable+0x9/0x20 [ 451.310530][T20658] ? security_capable+0x7e/0x2e0 [ 451.310562][T20658] unshare_nsproxy_namespaces+0x11c/0x170 [ 451.310589][T20658] ksys_unshare+0x4c8/0x8c0 [ 451.310617][T20658] ? __pfx_ksys_unshare+0x10/0x10 [ 451.310638][T20658] ? __pfx_ksys_write+0x10/0x10 [ 451.310658][T20658] ? rcu_is_watching+0x15/0xb0 [ 451.310686][T20658] __x64_sys_unshare+0x38/0x50 [ 451.310707][T20658] do_syscall_64+0xfa/0x3b0 [ 451.310728][T20658] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.310750][T20658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.310767][T20658] ? clear_bhb_loop+0x60/0xb0 [ 451.310789][T20658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.310807][T20658] RIP: 0033:0x7f9444f8ebe9 [ 451.310827][T20658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.310841][T20658] RSP: 002b:00007f9445db5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 451.310859][T20658] RAX: ffffffffffffffda RBX: 00007f94451b6090 RCX: 00007f9444f8ebe9 [ 451.310872][T20658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 451.310882][T20658] RBP: 00007f9445db5090 R08: 0000000000000000 R09: 0000000000000000 [ 451.310893][T20658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.310903][T20658] R13: 00007f94451b6128 R14: 00007f94451b6090 R15: 00007ffc31ed3be8 [ 451.310932][T20658] [ 451.786506][T20680] FAULT_INJECTION: forcing a failure. [ 451.786506][T20680] name failslab, interval 1, probability 0, space 0, times 0 [ 451.800605][T20680] CPU: 0 UID: 0 PID: 20680 Comm: syz.1.5430 Not tainted syzkaller #0 PREEMPT(full) [ 451.800629][T20680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.800639][T20680] Call Trace: [ 451.800647][T20680] [ 451.800654][T20680] dump_stack_lvl+0x189/0x250 [ 451.800680][T20680] ? __pfx____ratelimit+0x10/0x10 [ 451.800704][T20680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.800724][T20680] ? __pfx__printk+0x10/0x10 [ 451.800761][T20680] ? __pfx___might_resched+0x10/0x10 [ 451.800785][T20680] should_fail_ex+0x414/0x560 [ 451.800812][T20680] should_failslab+0xa8/0x100 [ 451.800839][T20680] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 451.800863][T20680] ? __alloc_skb+0x112/0x2d0 [ 451.800892][T20680] __alloc_skb+0x112/0x2d0 [ 451.800920][T20680] netlink_sendmsg+0x5c6/0xb30 [ 451.800955][T20680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.800983][T20680] ? aa_sock_msg_perm+0xf1/0x1d0 [ 451.801011][T20680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.801030][T20680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.801055][T20680] __sock_sendmsg+0x21c/0x270 [ 451.801080][T20680] ____sys_sendmsg+0x505/0x830 [ 451.801105][T20680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.801133][T20680] ? import_iovec+0x74/0xa0 [ 451.801157][T20680] ___sys_sendmsg+0x21f/0x2a0 [ 451.801178][T20680] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.801238][T20680] ? __fget_files+0x2a/0x420 [ 451.801262][T20680] ? __fget_files+0x3a0/0x420 [ 451.801295][T20680] __x64_sys_sendmsg+0x19b/0x260 [ 451.801313][T20680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.801335][T20680] ? __pfx_ksys_write+0x10/0x10 [ 451.801351][T20680] ? rcu_is_watching+0x15/0xb0 [ 451.801369][T20680] ? do_syscall_64+0xbe/0x3b0 [ 451.801391][T20680] do_syscall_64+0xfa/0x3b0 [ 451.801409][T20680] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.801427][T20680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.801442][T20680] ? clear_bhb_loop+0x60/0xb0 [ 451.801459][T20680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.801472][T20680] RIP: 0033:0x7f632d18ebe9 [ 451.801486][T20680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.801498][T20680] RSP: 002b:00007f632df42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.801514][T20680] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18ebe9 [ 451.801525][T20680] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 451.801536][T20680] RBP: 00007f632df42090 R08: 0000000000000000 R09: 0000000000000000 [ 451.801547][T20680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.801557][T20680] R13: 00007f632d3b6038 R14: 00007f632d3b5fa0 R15: 00007ffcb5b3eca8 [ 451.801584][T20680] [ 452.166683][T20684] tipc: Enabling of bearer rejected, already enabled [ 452.248519][T20686] __nla_validate_parse: 1 callbacks suppressed [ 452.248537][T20686] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5433'. [ 452.280822][T20692] netlink: 'syz.4.5436': attribute type 1 has an invalid length. [ 452.288767][T20692] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5436'. [ 452.304027][T20693] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5434'. [ 452.393903][T20698] netlink: 'syz.2.5438': attribute type 1 has an invalid length. [ 452.402391][T20698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5438'. [ 452.519470][T20704] FAULT_INJECTION: forcing a failure. [ 452.519470][T20704] name failslab, interval 1, probability 0, space 0, times 0 [ 452.546658][T20704] CPU: 1 UID: 0 PID: 20704 Comm: syz.1.5439 Not tainted syzkaller #0 PREEMPT(full) [ 452.546682][T20704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.546700][T20704] Call Trace: [ 452.546707][T20704] [ 452.546714][T20704] dump_stack_lvl+0x189/0x250 [ 452.546740][T20704] ? __pfx____ratelimit+0x10/0x10 [ 452.546762][T20704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.546780][T20704] ? __pfx__printk+0x10/0x10 [ 452.546807][T20704] ? __pfx___might_resched+0x10/0x10 [ 452.546828][T20704] should_fail_ex+0x414/0x560 [ 452.546854][T20704] should_failslab+0xa8/0x100 [ 452.546879][T20704] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 452.546902][T20704] ? __get_vm_area_node+0x13f/0x300 [ 452.546927][T20704] __get_vm_area_node+0x13f/0x300 [ 452.546952][T20704] __vmalloc_node_range_noprof+0x301/0x12f0 [ 452.546975][T20704] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 452.546996][T20704] ? __lock_acquire+0xab9/0xd20 [ 452.547043][T20704] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 452.547063][T20704] ? __might_fault+0xb0/0x130 [ 452.547085][T20704] ? _parse_integer_limit+0x1ae/0x1f0 [ 452.547114][T20704] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 452.547134][T20704] __vmalloc_noprof+0xb1/0xf0 [ 452.547156][T20704] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 452.547182][T20704] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 452.547214][T20704] bpf_prog_alloc+0x3c/0x1a0 [ 452.547237][T20704] bpf_prog_load+0x735/0x1930 [ 452.547269][T20704] ? __pfx_bpf_prog_load+0x10/0x10 [ 452.547311][T20704] ? bpf_lsm_bpf+0x9/0x20 [ 452.547329][T20704] ? security_bpf+0x7e/0x300 [ 452.547355][T20704] __sys_bpf+0x528/0x870 [ 452.547379][T20704] ? __pfx___sys_bpf+0x10/0x10 [ 452.547411][T20704] ? ksys_write+0x22a/0x250 [ 452.547435][T20704] ? __pfx_ksys_write+0x10/0x10 [ 452.547453][T20704] ? rcu_is_watching+0x15/0xb0 [ 452.547476][T20704] __x64_sys_bpf+0x7c/0x90 [ 452.547497][T20704] do_syscall_64+0xfa/0x3b0 [ 452.547519][T20704] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.547541][T20704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.547558][T20704] ? clear_bhb_loop+0x60/0xb0 [ 452.547579][T20704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.547594][T20704] RIP: 0033:0x7f632d18ebe9 [ 452.547610][T20704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.547624][T20704] RSP: 002b:00007f632df42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.547642][T20704] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18ebe9 [ 452.547655][T20704] RDX: 0000000000000090 RSI: 0000200000000800 RDI: 0000000000000005 [ 452.547666][T20704] RBP: 00007f632df42090 R08: 0000000000000000 R09: 0000000000000000 [ 452.547676][T20704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.547695][T20704] R13: 00007f632d3b6038 R14: 00007f632d3b5fa0 R15: 00007ffcb5b3eca8 [ 452.547725][T20704] [ 452.560689][T20704] syz.1.5439: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 452.856945][T20704] CPU: 0 UID: 0 PID: 20704 Comm: syz.1.5439 Not tainted syzkaller #0 PREEMPT(full) [ 452.856966][T20704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.856977][T20704] Call Trace: [ 452.856984][T20704] [ 452.856992][T20704] dump_stack_lvl+0x189/0x250 [ 452.857016][T20704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.857037][T20704] ? __pfx__printk+0x10/0x10 [ 452.857058][T20704] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 452.857078][T20704] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 452.857101][T20704] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 452.857125][T20704] warn_alloc+0x214/0x310 [ 452.857157][T20704] ? __pfx_warn_alloc+0x10/0x10 [ 452.857185][T20704] ? __get_vm_area_node+0x13f/0x300 [ 452.857212][T20704] ? __get_vm_area_node+0x2b5/0x300 [ 452.857241][T20704] __vmalloc_node_range_noprof+0x326/0x12f0 [ 452.857265][T20704] ? __lock_acquire+0xab9/0xd20 [ 452.857318][T20704] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 452.857340][T20704] ? __might_fault+0xb0/0x130 [ 452.857365][T20704] ? _parse_integer_limit+0x1ae/0x1f0 [ 452.857396][T20704] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 452.857426][T20704] __vmalloc_noprof+0xb1/0xf0 [ 452.857449][T20704] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 452.857475][T20704] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 452.857503][T20704] bpf_prog_alloc+0x3c/0x1a0 [ 452.857528][T20704] bpf_prog_load+0x735/0x1930 [ 452.857563][T20704] ? __pfx_bpf_prog_load+0x10/0x10 [ 452.857609][T20704] ? bpf_lsm_bpf+0x9/0x20 [ 452.857628][T20704] ? security_bpf+0x7e/0x300 [ 452.857652][T20704] __sys_bpf+0x528/0x870 [ 452.857675][T20704] ? __pfx___sys_bpf+0x10/0x10 [ 452.857708][T20704] ? ksys_write+0x22a/0x250 [ 452.857732][T20704] ? __pfx_ksys_write+0x10/0x10 [ 452.857750][T20704] ? rcu_is_watching+0x15/0xb0 [ 452.857774][T20704] __x64_sys_bpf+0x7c/0x90 [ 452.857792][T20704] do_syscall_64+0xfa/0x3b0 [ 452.857814][T20704] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.857836][T20704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.857854][T20704] ? clear_bhb_loop+0x60/0xb0 [ 452.857876][T20704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.857893][T20704] RIP: 0033:0x7f632d18ebe9 [ 452.857909][T20704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.857924][T20704] RSP: 002b:00007f632df42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.857943][T20704] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18ebe9 [ 452.857955][T20704] RDX: 0000000000000090 RSI: 0000200000000800 RDI: 0000000000000005 [ 452.857966][T20704] RBP: 00007f632df42090 R08: 0000000000000000 R09: 0000000000000000 [ 452.857977][T20704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.857988][T20704] R13: 00007f632d3b6038 R14: 00007f632d3b5fa0 R15: 00007ffcb5b3eca8 [ 452.858018][T20704] [ 452.858034][T20704] Mem-Info: [ 453.034587][T20715] FAULT_INJECTION: forcing a failure. [ 453.034587][T20715] name failslab, interval 1, probability 0, space 0, times 0 [ 453.037129][T20704] active_anon:7087 inactive_anon:0 isolated_anon:0 [ 453.037129][T20704] active_file:3392 inactive_file:40003 isolated_file:0 [ 453.037129][T20704] unevictable:768 dirty:200 writeback:0 [ 453.037129][T20704] slab_reclaimable:11862 slab_unreclaimable:112841 [ 453.037129][T20704] mapped:29426 shmem:1367 pagetables:1391 [ 453.037129][T20704] sec_pagetables:0 bounce:0 [ 453.037129][T20704] kernel_misc_reclaimable:0 [ 453.037129][T20704] free:1308507 free_pcp:14025 free_cma:0 [ 453.106023][T20715] CPU: 1 UID: 0 PID: 20715 Comm: syz.4.5442 Not tainted syzkaller #0 PREEMPT(full) [ 453.106046][T20715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.106057][T20715] Call Trace: [ 453.106065][T20715] [ 453.106073][T20715] dump_stack_lvl+0x189/0x250 [ 453.106102][T20715] ? __pfx____ratelimit+0x10/0x10 [ 453.106125][T20715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.106145][T20715] ? __pfx__printk+0x10/0x10 [ 453.106174][T20715] ? __pfx___might_resched+0x10/0x10 [ 453.106196][T20715] should_fail_ex+0x414/0x560 [ 453.106223][T20715] should_failslab+0xa8/0x100 [ 453.106249][T20715] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 453.106272][T20715] ? __alloc_skb+0x112/0x2d0 [ 453.106301][T20715] __alloc_skb+0x112/0x2d0 [ 453.106328][T20715] netlink_sendmsg+0x5c6/0xb30 [ 453.106363][T20715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.106390][T20715] ? aa_sock_msg_perm+0xf1/0x1d0 [ 453.106417][T20715] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.106435][T20715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.106460][T20715] __sock_sendmsg+0x21c/0x270 [ 453.106485][T20715] ____sys_sendmsg+0x505/0x830 [ 453.106509][T20715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.106536][T20715] ? import_iovec+0x74/0xa0 [ 453.106559][T20715] ___sys_sendmsg+0x21f/0x2a0 [ 453.106579][T20715] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.106633][T20715] ? __fget_files+0x2a/0x420 [ 453.106662][T20715] ? __fget_files+0x3a0/0x420 [ 453.106697][T20715] __x64_sys_sendmsg+0x19b/0x260 [ 453.106717][T20715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.106745][T20715] ? __pfx_ksys_write+0x10/0x10 [ 453.106764][T20715] ? rcu_is_watching+0x15/0xb0 [ 453.106787][T20715] ? do_syscall_64+0xbe/0x3b0 [ 453.106814][T20715] do_syscall_64+0xfa/0x3b0 [ 453.106836][T20715] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.106857][T20715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.106874][T20715] ? clear_bhb_loop+0x60/0xb0 [ 453.106896][T20715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.106912][T20715] RIP: 0033:0x7f0db158ebe9 [ 453.106928][T20715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.106943][T20715] RSP: 002b:00007f0db24ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.106961][T20715] RAX: ffffffffffffffda RBX: 00007f0db17b5fa0 RCX: 00007f0db158ebe9 [ 453.106974][T20715] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 453.106985][T20715] RBP: 00007f0db24ac090 R08: 0000000000000000 R09: 0000000000000000 [ 453.106996][T20715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.107006][T20715] R13: 00007f0db17b6038 R14: 00007f0db17b5fa0 R15: 00007fffdf3bc5a8 [ 453.107036][T20715] [ 453.300783][T20717] tipc: Enabled bearer , priority 0 [ 453.304546][T20704] Node 0 active_anon:24748kB inactive_anon:0kB active_file:13568kB inactive_file:159808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117704kB dirty:800kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13372kB pagetables:5444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 453.411838][T20717] tipc: Resetting bearer [ 453.490148][T20704] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 453.557852][T20704] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.587948][T20704] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 453.594078][T20704] Node 0 DMA32 free:1336308kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24996kB inactive_anon:0kB active_file:13568kB inactive_file:158248kB unevictable:1536kB writepending:800kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:37432kB local_pcp:20292kB free_cma:0kB [ 453.638860][T20704] lowmem_reserve[]: 0 0 1 1 1 [ 453.645274][T20704] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 453.659507][T20719] syzkaller0: entered promiscuous mode [ 453.681505][T20727] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5447'. [ 453.752491][T20736] RDS: rds_bind could not find a transport for ::ffff:172.20.20.10, load rds_tcp or rds_rdma? [ 453.763303][T20716] tipc: Resetting bearer [ 453.795490][T20716] tipc: Disabling bearer [ 453.817214][T20704] lowmem_reserve[]: 0 0 0 0 0 [ 453.830474][T20704] Node 1 Normal free:3882336kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22228kB local_pcp:9248kB free_cma:0kB [ 453.863422][T20704] lowmem_reserve[]: 0 0 0 0 0 [ 453.868162][T20704] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 453.884158][T20704] Node 0 DMA32: 2289*4kB (UME) 1138*8kB (UME) 562*16kB (UME) 312*32kB (UM) 132*64kB (UME) 113*128kB (UME) 69*256kB (UM) 48*512kB (UME) 19*1024kB (UM) 7*2048kB (UME) 293*4096kB (UM) = 1336308kB [ 453.904029][T20704] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 453.917535][T20704] Node 1 Normal: 214*4kB (UE) 63*8kB (UME) 43*16kB (UME) 83*32kB (UME) 32*64kB (UME) 8*128kB (UME) 5*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 944*4096kB (M) = 3882336kB [ 453.936790][T20704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.004511][T20704] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 454.069289][T20704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.082841][T20750] FAULT_INJECTION: forcing a failure. [ 454.082841][T20750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.122078][T20704] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 454.151182][T20704] 44842 total pagecache pages [ 454.165668][T20704] 0 pages in swap cache [ 454.171009][T20750] CPU: 0 UID: 0 PID: 20750 Comm: syz.3.5453 Not tainted syzkaller #0 PREEMPT(full) [ 454.171033][T20750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.171044][T20750] Call Trace: [ 454.171051][T20750] [ 454.171059][T20750] dump_stack_lvl+0x189/0x250 [ 454.171085][T20750] ? __pfx____ratelimit+0x10/0x10 [ 454.171108][T20750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.171128][T20750] ? __pfx__printk+0x10/0x10 [ 454.171164][T20750] should_fail_ex+0x414/0x560 [ 454.171193][T20750] _copy_to_user+0x31/0xb0 [ 454.171215][T20750] simple_read_from_buffer+0xe1/0x170 [ 454.171245][T20750] proc_fail_nth_read+0x1b3/0x220 [ 454.171268][T20750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.171292][T20750] ? rw_verify_area+0x2a6/0x4d0 [ 454.171321][T20750] ? __lock_acquire+0xab9/0xd20 [ 454.171343][T20750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.171364][T20750] vfs_read+0x200/0xa30 [ 454.171385][T20750] ? fdget_pos+0x247/0x320 [ 454.171405][T20750] ? __pfx___mutex_lock+0x10/0x10 [ 454.171429][T20750] ? __pfx_vfs_read+0x10/0x10 [ 454.171454][T20750] ? __fget_files+0x2a/0x420 [ 454.171483][T20750] ? __fget_files+0x3a0/0x420 [ 454.171504][T20750] ? __fget_files+0x2a/0x420 [ 454.171534][T20750] ksys_read+0x145/0x250 [ 454.171555][T20750] ? __pfx_ksys_read+0x10/0x10 [ 454.171585][T20750] ? do_syscall_64+0xbe/0x3b0 [ 454.171613][T20750] do_syscall_64+0xfa/0x3b0 [ 454.171634][T20750] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.171655][T20750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.171676][T20750] ? clear_bhb_loop+0x60/0xb0 [ 454.171698][T20750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.171716][T20750] RIP: 0033:0x7ff79398d5fc [ 454.171732][T20750] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 454.171747][T20750] RSP: 002b:00007ff791bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.171767][T20750] RAX: ffffffffffffffda RBX: 00007ff793bb5fa0 RCX: 00007ff79398d5fc [ 454.171780][T20750] RDX: 000000000000000f RSI: 00007ff791bf60a0 RDI: 0000000000000004 [ 454.171791][T20750] RBP: 00007ff791bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 454.171802][T20750] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 454.171813][T20750] R13: 00007ff793bb6038 R14: 00007ff793bb5fa0 R15: 00007ffdb37786f8 [ 454.171845][T20750] [ 454.199724][T20704] Free swap = 124996kB [ 454.423633][T20704] Total swap = 124996kB [ 454.427797][T20704] 2097051 pages RAM [ 454.431684][T20704] 0 pages HighMem/MovableOnly [ 454.436356][T20704] 425656 pages reserved [ 454.440571][T20704] 0 pages cma reserved [ 454.489300][T20766] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5459'. [ 454.586199][T20773] tipc: Enabling of bearer rejected, already enabled [ 454.624583][T20773] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 454.768719][T20782] lo speed is unknown, defaulting to 1000 [ 454.793645][T20786] tipc: Enabling of bearer rejected, already enabled [ 454.810042][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 454.818102][ C1] lec:lec_tx_timeout: lec0 [ 454.823883][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 454.959273][T20794] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5469'. [ 455.032780][T20796] validate_nla: 2 callbacks suppressed [ 455.032798][T20796] netlink: 'syz.4.5471': attribute type 10 has an invalid length. [ 455.079603][T20796] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 455.124122][T20796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.193337][T20805] tipc: Enabled bearer , priority 0 [ 455.204323][T20803] netlink: 'syz.3.5472': attribute type 1 has an invalid length. [ 455.204846][T20805] syzkaller0: entered promiscuous mode [ 455.218351][T20805] syzkaller0: entered allmulticast mode [ 455.219025][T20803] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5472'. [ 455.242386][T20805] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 455.318600][T20806] vxcan1: tx address claim with dest, not broadcast [ 455.342670][T20813] tipc: Resetting bearer [ 455.375530][T20804] tipc: Resetting bearer [ 455.460710][T20804] tipc: Disabling bearer [ 455.473295][T20819] netlink: 'syz.3.5478': attribute type 1 has an invalid length. [ 455.488608][T20821] tipc: Enabling of bearer rejected, already enabled [ 455.506465][T20824] FAULT_INJECTION: forcing a failure. [ 455.506465][T20824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.523698][T20824] CPU: 0 UID: 0 PID: 20824 Comm: syz.4.5480 Not tainted syzkaller #0 PREEMPT(full) [ 455.523722][T20824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 455.523733][T20824] Call Trace: [ 455.523739][T20824] [ 455.523747][T20824] dump_stack_lvl+0x189/0x250 [ 455.523773][T20824] ? __pfx____ratelimit+0x10/0x10 [ 455.523796][T20824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.523816][T20824] ? __pfx__printk+0x10/0x10 [ 455.523839][T20824] ? __might_fault+0xb0/0x130 [ 455.523874][T20824] should_fail_ex+0x414/0x560 [ 455.523902][T20824] _copy_from_iter+0x1db/0x16f0 [ 455.523924][T20824] ? rcu_is_watching+0x15/0xb0 [ 455.523943][T20824] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 455.523968][T20824] ? __pfx__copy_from_iter+0x10/0x10 [ 455.523988][T20824] ? __build_skb_around+0x257/0x3e0 [ 455.524016][T20824] ? netlink_sendmsg+0x642/0xb30 [ 455.524037][T20824] ? skb_put+0x11b/0x210 [ 455.524063][T20824] netlink_sendmsg+0x6b2/0xb30 [ 455.524095][T20824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.524122][T20824] ? aa_sock_msg_perm+0xf1/0x1d0 [ 455.524147][T20824] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.524165][T20824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.524196][T20824] __sock_sendmsg+0x21c/0x270 [ 455.524221][T20824] ____sys_sendmsg+0x505/0x830 [ 455.524246][T20824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.524275][T20824] ? import_iovec+0x74/0xa0 [ 455.524298][T20824] ___sys_sendmsg+0x21f/0x2a0 [ 455.524319][T20824] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.524373][T20824] ? __fget_files+0x2a/0x420 [ 455.524396][T20824] ? __fget_files+0x3a0/0x420 [ 455.524430][T20824] __x64_sys_sendmsg+0x19b/0x260 [ 455.524451][T20824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.524480][T20824] ? __pfx_ksys_write+0x10/0x10 [ 455.524500][T20824] ? rcu_is_watching+0x15/0xb0 [ 455.524522][T20824] ? do_syscall_64+0xbe/0x3b0 [ 455.524548][T20824] do_syscall_64+0xfa/0x3b0 [ 455.524569][T20824] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.524590][T20824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.524606][T20824] ? clear_bhb_loop+0x60/0xb0 [ 455.524626][T20824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.524643][T20824] RIP: 0033:0x7f0db158ebe9 [ 455.524659][T20824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.524673][T20824] RSP: 002b:00007f0db24ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.524691][T20824] RAX: ffffffffffffffda RBX: 00007f0db17b5fa0 RCX: 00007f0db158ebe9 [ 455.524704][T20824] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 455.524715][T20824] RBP: 00007f0db24ac090 R08: 0000000000000000 R09: 0000000000000000 [ 455.524726][T20824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.524737][T20824] R13: 00007f0db17b6038 R14: 00007f0db17b5fa0 R15: 00007fffdf3bc5a8 [ 455.524767][T20824] [ 455.864250][T20819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5478'. [ 455.917556][T20826] bond7: (slave gretap2): making interface the new active one [ 455.932942][T20826] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 455.986682][T20819] 8021q: adding VLAN 0 to HW filter on device bond7 [ 456.066453][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5487'. [ 456.181088][T20850] tipc: Enabling of bearer rejected, already enabled [ 456.203922][T20845] netlink: 'syz.4.5488': attribute type 1 has an invalid length. [ 456.225662][T20853] netlink: 'syz.2.5491': attribute type 32 has an invalid length. [ 456.277063][T20853] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 456.384927][T20857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.385060][T20858] tipc: Enabled bearer , priority 0 [ 456.403689][T20858] syzkaller0: entered promiscuous mode [ 456.409181][T20858] syzkaller0: entered allmulticast mode [ 456.421258][T20858] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 456.438258][T20863] vxcan1: tx address claim with dest, not broadcast [ 456.458448][T20858] tipc: Resetting bearer [ 456.485353][T20864] netlink: 'syz.2.5494': attribute type 4 has an invalid length. [ 456.499450][T20866] FAULT_INJECTION: forcing a failure. [ 456.499450][T20866] name failslab, interval 1, probability 0, space 0, times 0 [ 456.512454][T20856] tipc: Resetting bearer [ 456.516415][T20866] CPU: 0 UID: 0 PID: 20866 Comm: syz.4.5497 Not tainted syzkaller #0 PREEMPT(full) [ 456.516437][T20866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.516447][T20866] Call Trace: [ 456.516455][T20866] [ 456.516463][T20866] dump_stack_lvl+0x189/0x250 [ 456.516487][T20866] ? __pfx____ratelimit+0x10/0x10 [ 456.516510][T20866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.516530][T20866] ? __pfx__printk+0x10/0x10 [ 456.516555][T20866] ? __lock_acquire+0xab9/0xd20 [ 456.516590][T20866] should_fail_ex+0x414/0x560 [ 456.516617][T20866] should_failslab+0xa8/0x100 [ 456.516644][T20866] kmem_cache_alloc_noprof+0x73/0x3c0 [ 456.516665][T20866] ? skb_clone+0x212/0x3a0 [ 456.516688][T20866] skb_clone+0x212/0x3a0 [ 456.516710][T20866] __netlink_deliver_tap+0x404/0x850 [ 456.516747][T20866] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.516773][T20866] netlink_deliver_tap+0x19c/0x1b0 [ 456.516797][T20866] netlink_unicast+0x7fa/0x9e0 [ 456.516828][T20866] ? __pfx_netlink_unicast+0x10/0x10 [ 456.516851][T20866] ? netlink_sendmsg+0x642/0xb30 [ 456.516872][T20866] ? skb_put+0x11b/0x210 [ 456.516900][T20866] netlink_sendmsg+0x805/0xb30 [ 456.516933][T20866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.516970][T20866] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.516997][T20866] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.517015][T20866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.517039][T20866] __sock_sendmsg+0x21c/0x270 [ 456.517065][T20866] ____sys_sendmsg+0x505/0x830 [ 456.517088][T20866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.517122][T20866] ? import_iovec+0x74/0xa0 [ 456.517144][T20866] ___sys_sendmsg+0x21f/0x2a0 [ 456.517164][T20866] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.517220][T20866] ? __fget_files+0x2a/0x420 [ 456.517243][T20866] ? __fget_files+0x3a0/0x420 [ 456.517278][T20866] __x64_sys_sendmsg+0x19b/0x260 [ 456.517299][T20866] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.517326][T20866] ? __pfx_ksys_write+0x10/0x10 [ 456.517345][T20866] ? rcu_is_watching+0x15/0xb0 [ 456.517369][T20866] ? do_syscall_64+0xbe/0x3b0 [ 456.517396][T20866] do_syscall_64+0xfa/0x3b0 [ 456.517417][T20866] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.517438][T20866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.517455][T20866] ? clear_bhb_loop+0x60/0xb0 [ 456.517475][T20866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.517492][T20866] RIP: 0033:0x7f0db158ebe9 [ 456.517507][T20866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.517521][T20866] RSP: 002b:00007f0db24ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.517539][T20866] RAX: ffffffffffffffda RBX: 00007f0db17b5fa0 RCX: 00007f0db158ebe9 [ 456.517552][T20866] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 456.517563][T20866] RBP: 00007f0db24ac090 R08: 0000000000000000 R09: 0000000000000000 [ 456.517573][T20866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.517583][T20866] R13: 00007f0db17b6038 R14: 00007f0db17b5fa0 R15: 00007fffdf3bc5a8 [ 456.517613][T20866] [ 456.845529][ T30] audit: type=1804 audit(1755691789.767:5): pid=20875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5500" name="/newroot/1099/cgroup.controllers" dev="tmpfs" ino=5578 res=1 errno=0 [ 456.868880][ T30] audit: type=1800 audit(1755691789.767:6): pid=20875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5500" name="cgroup.controllers" dev="tmpfs" ino=5578 res=0 errno=0 [ 456.906574][T20856] tipc: Disabling bearer [ 456.935738][T20883] tipc: Enabling of bearer rejected, already enabled [ 457.082575][T20890] netlink: 'syz.4.5506': attribute type 1 has an invalid length. [ 457.232341][T20897] tipc: Enabled bearer , priority 0 [ 457.248180][T20897] syzkaller0: entered promiscuous mode [ 457.268737][T20899] blkio.reset_stats is deprecated [ 457.272384][T20897] syzkaller0: entered allmulticast mode [ 457.289874][T20903] netlink: 'syz.3.5512': attribute type 32 has an invalid length. [ 457.301737][T20903] __nla_validate_parse: 5 callbacks suppressed [ 457.301750][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5512'. [ 457.317882][T20903] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 457.399893][T20912] netlink: 'syz.4.5514': attribute type 1 has an invalid length. [ 457.405959][T20897] tipc: Resetting bearer [ 457.411903][T20912] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5514'. [ 457.441508][T20895] tipc: Resetting bearer [ 457.476452][T20895] tipc: Disabling bearer [ 457.527826][T20921] tipc: Enabled bearer , priority 0 [ 457.542445][T20921] syzkaller0: entered promiscuous mode [ 457.548074][T20921] syzkaller0: entered allmulticast mode [ 457.589981][T20925] netlink: 'syz.0.5518': attribute type 23 has an invalid length. [ 457.625546][T20921] tipc: Resetting bearer [ 457.645704][T20928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5519'. [ 457.655355][T20919] tipc: Resetting bearer [ 457.704058][T20919] tipc: Disabling bearer [ 457.848089][T20941] FAULT_INJECTION: forcing a failure. [ 457.848089][T20941] name failslab, interval 1, probability 0, space 0, times 0 [ 457.866439][T20941] CPU: 1 UID: 0 PID: 20941 Comm: syz.0.5523 Not tainted syzkaller #0 PREEMPT(full) [ 457.866463][T20941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.866475][T20941] Call Trace: [ 457.866481][T20941] [ 457.866489][T20941] dump_stack_lvl+0x189/0x250 [ 457.866515][T20941] ? __pfx____ratelimit+0x10/0x10 [ 457.866537][T20941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.866554][T20941] ? __pfx__printk+0x10/0x10 [ 457.866574][T20941] ? __lock_acquire+0xab9/0xd20 [ 457.866601][T20941] should_fail_ex+0x414/0x560 [ 457.866623][T20941] should_failslab+0xa8/0x100 [ 457.866643][T20941] kmem_cache_alloc_noprof+0x73/0x3c0 [ 457.866661][T20941] ? skb_clone+0x212/0x3a0 [ 457.866679][T20941] skb_clone+0x212/0x3a0 [ 457.866696][T20941] __netlink_deliver_tap+0x404/0x850 [ 457.866726][T20941] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.866745][T20941] netlink_deliver_tap+0x19c/0x1b0 [ 457.866764][T20941] netlink_unicast+0x7fa/0x9e0 [ 457.866788][T20941] ? __pfx_netlink_unicast+0x10/0x10 [ 457.866807][T20941] ? netlink_sendmsg+0x642/0xb30 [ 457.866824][T20941] ? skb_put+0x11b/0x210 [ 457.866847][T20941] netlink_sendmsg+0x805/0xb30 [ 457.866873][T20941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.866894][T20941] ? aa_sock_msg_perm+0xf1/0x1d0 [ 457.866916][T20941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.866931][T20941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.866950][T20941] __sock_sendmsg+0x21c/0x270 [ 457.866970][T20941] ____sys_sendmsg+0x505/0x830 [ 457.866989][T20941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.867011][T20941] ? import_iovec+0x74/0xa0 [ 457.867029][T20941] ___sys_sendmsg+0x21f/0x2a0 [ 457.867045][T20941] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.867088][T20941] ? __fget_files+0x2a/0x420 [ 457.867107][T20941] ? __fget_files+0x3a0/0x420 [ 457.867138][T20941] __x64_sys_sendmsg+0x19b/0x260 [ 457.867154][T20941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.867176][T20941] ? __pfx_ksys_write+0x10/0x10 [ 457.867192][T20941] ? rcu_is_watching+0x15/0xb0 [ 457.867210][T20941] ? do_syscall_64+0xbe/0x3b0 [ 457.867231][T20941] do_syscall_64+0xfa/0x3b0 [ 457.867260][T20941] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.867278][T20941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.867291][T20941] ? clear_bhb_loop+0x60/0xb0 [ 457.867308][T20941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.867322][T20941] RIP: 0033:0x7f9444f8ebe9 [ 457.867334][T20941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.867350][T20941] RSP: 002b:00007f9445dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.867365][T20941] RAX: ffffffffffffffda RBX: 00007f94451b5fa0 RCX: 00007f9444f8ebe9 [ 457.867402][T20941] RDX: 0000000000000880 RSI: 0000200000000180 RDI: 0000000000000003 [ 457.867411][T20941] RBP: 00007f9445dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 457.867429][T20941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.867437][T20941] R13: 00007f94451b6038 R14: 00007f94451b5fa0 R15: 00007ffc31ed3be8 [ 457.867460][T20941] [ 457.887445][T20943] tipc: Enabled bearer , priority 0 [ 458.182798][T20950] syzkaller0: entered promiscuous mode [ 458.202191][T20950] syzkaller0: entered allmulticast mode [ 458.248002][T20943] tipc: Resetting bearer [ 458.266817][T20942] tipc: Resetting bearer [ 458.331644][T20942] tipc: Disabling bearer [ 458.375289][T20963] tipc: Enabling of bearer rejected, already enabled [ 458.547005][T20974] tipc: Enabled bearer , priority 0 [ 458.580976][T20974] tipc: Resetting bearer [ 458.688534][T20971] tipc: Disabling bearer [ 458.737159][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5537'. [ 458.823662][T20986] 8021q: adding VLAN 0 to HW filter on device bond6 [ 458.909699][T20988] 8021q: adding VLAN 0 to HW filter on device bond6 [ 458.948985][T20988] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 458.976059][T20988] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 459.137948][T21007] FAULT_INJECTION: forcing a failure. [ 459.137948][T21007] name failslab, interval 1, probability 0, space 0, times 0 [ 459.144106][T21005] tipc: Enabling of bearer rejected, already enabled [ 459.193675][T21007] CPU: 0 UID: 0 PID: 21007 Comm: syz.1.5542 Not tainted syzkaller #0 PREEMPT(full) [ 459.193698][T21007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.193709][T21007] Call Trace: [ 459.193716][T21007] [ 459.193725][T21007] dump_stack_lvl+0x189/0x250 [ 459.193752][T21007] ? __pfx____ratelimit+0x10/0x10 [ 459.193775][T21007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.193795][T21007] ? __pfx__printk+0x10/0x10 [ 459.193823][T21007] ? __pfx___might_resched+0x10/0x10 [ 459.193838][T21007] ? fs_reclaim_acquire+0x7d/0x100 [ 459.193868][T21007] should_fail_ex+0x414/0x560 [ 459.193905][T21007] should_failslab+0xa8/0x100 [ 459.193930][T21007] __kmalloc_cache_noprof+0x70/0x3d0 [ 459.193952][T21007] ? genl_start+0x1c9/0x6c0 [ 459.193975][T21007] genl_start+0x1c9/0x6c0 [ 459.193991][T21007] ? netlink_lookup+0x30/0x200 [ 459.194019][T21007] __netlink_dump_start+0x466/0x7e0 [ 459.194050][T21007] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 459.194074][T21007] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 459.194091][T21007] ? genl_get_cmd+0x496/0x910 [ 459.194115][T21007] ? __pfx_genl_start+0x10/0x10 [ 459.194129][T21007] ? __pfx_genl_dumpit+0x10/0x10 [ 459.194144][T21007] ? __pfx_genl_done+0x10/0x10 [ 459.194168][T21007] ? stack_trace_save+0x9c/0xe0 [ 459.194195][T21007] genl_rcv_msg+0x5da/0x790 [ 459.194221][T21007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.194238][T21007] ? __pfx_netdev_nl_napi_get_dumpit+0x10/0x10 [ 459.194279][T21007] netlink_rcv_skb+0x208/0x470 [ 459.194300][T21007] ? __lock_acquire+0xab9/0xd20 [ 459.194325][T21007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.194346][T21007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.194391][T21007] ? down_read+0x1ad/0x2e0 [ 459.194418][T21007] genl_rcv+0x28/0x40 [ 459.194435][T21007] netlink_unicast+0x82c/0x9e0 [ 459.194467][T21007] ? __pfx_netlink_unicast+0x10/0x10 [ 459.194491][T21007] ? netlink_sendmsg+0x642/0xb30 [ 459.194511][T21007] ? skb_put+0x11b/0x210 [ 459.194539][T21007] netlink_sendmsg+0x805/0xb30 [ 459.194572][T21007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.194600][T21007] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.194628][T21007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.194645][T21007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.194675][T21007] __sock_sendmsg+0x21c/0x270 [ 459.194700][T21007] ____sys_sendmsg+0x505/0x830 [ 459.194724][T21007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.194753][T21007] ? import_iovec+0x74/0xa0 [ 459.194778][T21007] ___sys_sendmsg+0x21f/0x2a0 [ 459.194798][T21007] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.194856][T21007] ? __fget_files+0x2a/0x420 [ 459.194880][T21007] ? __fget_files+0x3a0/0x420 [ 459.194924][T21007] __x64_sys_sendmsg+0x19b/0x260 [ 459.194945][T21007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.194973][T21007] ? __pfx_ksys_write+0x10/0x10 [ 459.194993][T21007] ? rcu_is_watching+0x15/0xb0 [ 459.195016][T21007] ? do_syscall_64+0xbe/0x3b0 [ 459.195043][T21007] do_syscall_64+0xfa/0x3b0 [ 459.195062][T21007] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.195083][T21007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.195099][T21007] ? clear_bhb_loop+0x60/0xb0 [ 459.195120][T21007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.195136][T21007] RIP: 0033:0x7f632d18ebe9 [ 459.195152][T21007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.195167][T21007] RSP: 002b:00007f632df42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.195187][T21007] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18ebe9 [ 459.195199][T21007] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 459.195210][T21007] RBP: 00007f632df42090 R08: 0000000000000000 R09: 0000000000000000 [ 459.195222][T21007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.195232][T21007] R13: 00007f632d3b6038 R14: 00007f632d3b5fa0 R15: 00007ffcb5b3eca8 [ 459.195262][T21007] [ 459.681552][T21018] tipc: Enabled bearer , priority 0 [ 459.705262][T21022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.741522][T21018] syzkaller0: entered promiscuous mode [ 459.747030][T21018] syzkaller0: entered allmulticast mode [ 459.850816][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 459.857571][T21018] tipc: Resetting bearer [ 459.858847][ C1] lec:lec_tx_timeout: lec0 [ 459.859402][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 459.901368][T21017] tipc: Resetting bearer [ 459.984538][T21017] tipc: Disabling bearer [ 460.060686][T21044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.085918][T21046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5558'. [ 460.132923][T21046] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 460.143767][T21048] tipc: Enabled bearer , priority 0 [ 460.153749][T21048] syzkaller0: entered promiscuous mode [ 460.163140][T21048] syzkaller0: entered allmulticast mode [ 460.188909][T21047] tipc: Resetting bearer [ 460.224205][T21047] tipc: Disabling bearer [ 460.489195][T21072] FAULT_INJECTION: forcing a failure. [ 460.489195][T21072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.509817][T21072] CPU: 1 UID: 0 PID: 21072 Comm: syz.1.5568 Not tainted syzkaller #0 PREEMPT(full) [ 460.509840][T21072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.509851][T21072] Call Trace: [ 460.509858][T21072] [ 460.509865][T21072] dump_stack_lvl+0x189/0x250 [ 460.509891][T21072] ? __pfx____ratelimit+0x10/0x10 [ 460.509915][T21072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.509935][T21072] ? __pfx__printk+0x10/0x10 [ 460.509961][T21072] ? __asan_memcpy+0x40/0x70 [ 460.509999][T21072] should_fail_ex+0x414/0x560 [ 460.510027][T21072] _copy_to_user+0x31/0xb0 [ 460.510049][T21072] bpf_verifier_vlog+0x48c/0x900 [ 460.510082][T21072] __btf_verifier_log+0xd4/0x120 [ 460.510110][T21072] ? __pfx___btf_verifier_log+0x10/0x10 [ 460.510128][T21072] ? __might_fault+0xb0/0x130 [ 460.510154][T21072] ? btf_parse_hdr+0x1e2/0x6d0 [ 460.510175][T21072] btf_parse_hdr+0x2d8/0x6d0 [ 460.510199][T21072] btf_new_fd+0x36d/0xc90 [ 460.510217][T21072] ? apparmor_capable+0x137/0x1b0 [ 460.510245][T21072] ? __pfx_btf_new_fd+0x10/0x10 [ 460.510265][T21072] ? bpf_token_put+0x143/0x160 [ 460.510289][T21072] ? bpf_btf_load+0x126/0x190 [ 460.510313][T21072] __sys_bpf+0x406/0x870 [ 460.510336][T21072] ? __pfx___sys_bpf+0x10/0x10 [ 460.510371][T21072] ? ksys_write+0x22a/0x250 [ 460.510395][T21072] ? __pfx_ksys_write+0x10/0x10 [ 460.510424][T21072] __x64_sys_bpf+0x7c/0x90 [ 460.510445][T21072] do_syscall_64+0xfa/0x3b0 [ 460.510466][T21072] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.510487][T21072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.510504][T21072] ? clear_bhb_loop+0x60/0xb0 [ 460.510526][T21072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.510543][T21072] RIP: 0033:0x7f632d18ebe9 [ 460.510558][T21072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.510574][T21072] RSP: 002b:00007f632df42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.510593][T21072] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18ebe9 [ 460.510606][T21072] RDX: 0000000000000020 RSI: 0000200000002180 RDI: 0000000000000012 [ 460.510618][T21072] RBP: 00007f632df42090 R08: 0000000000000000 R09: 0000000000000000 [ 460.510628][T21072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.510638][T21072] R13: 00007f632d3b6038 R14: 00007f632d3b5fa0 R15: 00007ffcb5b3eca8 [ 460.510669][T21072] [ 460.570327][T21076] tipc: Enabled bearer , priority 0 [ 460.714011][T21077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5567'. [ 460.772015][T21076] tipc: Resetting bearer [ 460.793024][T21075] tipc: Disabling bearer [ 460.822142][T21080] validate_nla: 2 callbacks suppressed [ 460.822160][T21080] netlink: 'syz.1.5570': attribute type 4 has an invalid length. [ 460.878901][T21082] netlink: 'syz.4.5571': attribute type 1 has an invalid length. [ 460.894066][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5572'. [ 460.912016][T21084] macvtap1: entered allmulticast mode [ 460.917636][T21084] veth0_macvtap: entered allmulticast mode [ 461.105465][T21095] tipc: Enabled bearer , priority 0 [ 461.141753][T21095] syzkaller0: entered promiscuous mode [ 461.157813][T21095] syzkaller0: entered allmulticast mode [ 461.164410][T21100] FAULT_INJECTION: forcing a failure. [ 461.164410][T21100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.187776][T21100] CPU: 1 UID: 0 PID: 21100 Comm: syz.2.5578 Not tainted syzkaller #0 PREEMPT(full) [ 461.187798][T21100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.187808][T21100] Call Trace: [ 461.187815][T21100] [ 461.187822][T21100] dump_stack_lvl+0x189/0x250 [ 461.187848][T21100] ? __pfx____ratelimit+0x10/0x10 [ 461.187871][T21100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.187892][T21100] ? __pfx__printk+0x10/0x10 [ 461.187934][T21100] should_fail_ex+0x414/0x560 [ 461.187962][T21100] _copy_to_user+0x31/0xb0 [ 461.187984][T21100] simple_read_from_buffer+0xe1/0x170 [ 461.188014][T21100] proc_fail_nth_read+0x1b3/0x220 [ 461.188036][T21100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.188059][T21100] ? rw_verify_area+0x2a6/0x4d0 [ 461.188079][T21100] ? __lock_acquire+0xab9/0xd20 [ 461.188102][T21100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.188127][T21100] vfs_read+0x200/0xa30 [ 461.188148][T21100] ? fdget_pos+0x247/0x320 [ 461.188169][T21100] ? __pfx___mutex_lock+0x10/0x10 [ 461.188194][T21100] ? __pfx_vfs_read+0x10/0x10 [ 461.188217][T21100] ? __fget_files+0x2a/0x420 [ 461.188246][T21100] ? __fget_files+0x3a0/0x420 [ 461.188269][T21100] ? __fget_files+0x2a/0x420 [ 461.188303][T21100] ksys_read+0x145/0x250 [ 461.188328][T21100] ? __pfx_ksys_read+0x10/0x10 [ 461.188347][T21100] ? rcu_is_watching+0x15/0xb0 [ 461.188372][T21100] ? do_syscall_64+0xbe/0x3b0 [ 461.188401][T21100] do_syscall_64+0xfa/0x3b0 [ 461.188421][T21100] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.188443][T21100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.188461][T21100] ? clear_bhb_loop+0x60/0xb0 [ 461.188483][T21100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.188500][T21100] RIP: 0033:0x7f0451b8d5fc [ 461.188516][T21100] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 461.188531][T21100] RSP: 002b:00007f0452952030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.188549][T21100] RAX: ffffffffffffffda RBX: 00007f0451db5fa0 RCX: 00007f0451b8d5fc [ 461.188563][T21100] RDX: 000000000000000f RSI: 00007f04529520a0 RDI: 0000000000000003 [ 461.188574][T21100] RBP: 00007f0452952090 R08: 0000000000000000 R09: 0000000000000000 [ 461.188586][T21100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.188596][T21100] R13: 00007f0451db6038 R14: 00007f0451db5fa0 R15: 00007ffe137b3ae8 [ 461.188628][T21100] [ 461.503317][T21095] tipc: Resetting bearer [ 461.510909][T21105] FAULT_INJECTION: forcing a failure. [ 461.510909][T21105] name failslab, interval 1, probability 0, space 0, times 0 [ 461.528282][T21105] CPU: 0 UID: 0 PID: 21105 Comm: syz.0.5580 Not tainted syzkaller #0 PREEMPT(full) [ 461.528303][T21105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.528314][T21105] Call Trace: [ 461.528321][T21105] [ 461.528329][T21105] dump_stack_lvl+0x189/0x250 [ 461.528354][T21105] ? __pfx____ratelimit+0x10/0x10 [ 461.528377][T21105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.528397][T21105] ? __pfx__printk+0x10/0x10 [ 461.528426][T21105] ? __pfx___might_resched+0x10/0x10 [ 461.528441][T21105] ? fs_reclaim_acquire+0x7d/0x100 [ 461.528470][T21105] should_fail_ex+0x414/0x560 [ 461.528497][T21105] should_failslab+0xa8/0x100 [ 461.528523][T21105] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 461.528547][T21105] ? __alloc_skb+0x112/0x2d0 [ 461.528577][T21105] __alloc_skb+0x112/0x2d0 [ 461.528605][T21105] netlink_ack+0x146/0xa50 [ 461.528635][T21105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.528654][T21105] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 461.528675][T21105] ? __pfx_nl802154_post_doit+0x10/0x10 [ 461.528713][T21105] netlink_rcv_skb+0x28c/0x470 [ 461.528734][T21105] ? __lock_acquire+0xab9/0xd20 [ 461.528759][T21105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.528780][T21105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.528825][T21105] ? down_read+0x1ad/0x2e0 [ 461.528853][T21105] genl_rcv+0x28/0x40 [ 461.528869][T21105] netlink_unicast+0x82c/0x9e0 [ 461.528901][T21105] ? __pfx_netlink_unicast+0x10/0x10 [ 461.528925][T21105] ? netlink_sendmsg+0x642/0xb30 [ 461.528954][T21105] netlink_sendmsg+0x805/0xb30 [ 461.528987][T21105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.529015][T21105] ? __lock_acquire+0xab9/0xd20 [ 461.529036][T21105] ? aa_sock_msg_perm+0xf1/0x1d0 [ 461.529064][T21105] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.529083][T21105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.529108][T21105] __sock_sendmsg+0x21c/0x270 [ 461.529134][T21105] ____sys_sendmsg+0x505/0x830 [ 461.529159][T21105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.529195][T21105] ? import_iovec+0x74/0xa0 [ 461.529219][T21105] ___sys_sendmsg+0x21f/0x2a0 [ 461.529240][T21105] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.529305][T21105] ? __fget_files+0x2a/0x420 [ 461.529329][T21105] ? __fget_files+0x3a0/0x420 [ 461.529365][T21105] __x64_sys_sendmsg+0x19b/0x260 [ 461.529387][T21105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.529417][T21105] ? __pfx_ksys_write+0x10/0x10 [ 461.529446][T21105] ? do_syscall_64+0xbe/0x3b0 [ 461.529474][T21105] do_syscall_64+0xfa/0x3b0 [ 461.529511][T21105] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.529533][T21105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.529551][T21105] ? clear_bhb_loop+0x60/0xb0 [ 461.529573][T21105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.529591][T21105] RIP: 0033:0x7f9444f8ebe9 [ 461.529607][T21105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.529623][T21105] RSP: 002b:00007f9445db5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.529651][T21105] RAX: ffffffffffffffda RBX: 00007f94451b6090 RCX: 00007f9444f8ebe9 [ 461.529664][T21105] RDX: 0000000004000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 461.529677][T21105] RBP: 00007f9445db5090 R08: 0000000000000000 R09: 0000000000000000 [ 461.529688][T21105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.529698][T21105] R13: 00007f94451b6128 R14: 00007f94451b6090 R15: 00007ffc31ed3be8 [ 461.529730][T21105] [ 461.555000][T21112] FAULT_INJECTION: forcing a failure. [ 461.555000][T21112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.567020][T21093] tipc: Resetting bearer [ 461.602071][T21112] CPU: 1 UID: 0 PID: 21112 Comm: syz.1.5582 Not tainted syzkaller #0 PREEMPT(full) [ 461.602096][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.602107][T21112] Call Trace: [ 461.602114][T21112] [ 461.602122][T21112] dump_stack_lvl+0x189/0x250 [ 461.602146][T21112] ? __pfx____ratelimit+0x10/0x10 [ 461.602170][T21112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.602190][T21112] ? __pfx__printk+0x10/0x10 [ 461.602226][T21112] should_fail_ex+0x414/0x560 [ 461.602254][T21112] _copy_to_user+0x31/0xb0 [ 461.602276][T21112] simple_read_from_buffer+0xe1/0x170 [ 461.602305][T21112] proc_fail_nth_read+0x1b3/0x220 [ 461.602327][T21112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.602351][T21112] ? rw_verify_area+0x2a6/0x4d0 [ 461.602370][T21112] ? __lock_acquire+0xab9/0xd20 [ 461.602393][T21112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.602413][T21112] vfs_read+0x200/0xa30 [ 461.602433][T21112] ? fdget_pos+0x247/0x320 [ 461.602453][T21112] ? __pfx___mutex_lock+0x10/0x10 [ 461.602478][T21112] ? __pfx_vfs_read+0x10/0x10 [ 461.602501][T21112] ? __fget_files+0x2a/0x420 [ 461.602529][T21112] ? __fget_files+0x3a0/0x420 [ 461.602552][T21112] ? __fget_files+0x2a/0x420 [ 461.602586][T21112] ksys_read+0x145/0x250 [ 461.602609][T21112] ? __pfx_ksys_read+0x10/0x10 [ 461.602627][T21112] ? rcu_is_watching+0x15/0xb0 [ 461.602650][T21112] ? do_syscall_64+0xbe/0x3b0 [ 461.602678][T21112] do_syscall_64+0xfa/0x3b0 [ 461.602699][T21112] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.602721][T21112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.602737][T21112] ? clear_bhb_loop+0x60/0xb0 [ 461.602759][T21112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.602775][T21112] RIP: 0033:0x7f632d18d5fc [ 461.602792][T21112] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 461.602805][T21112] RSP: 002b:00007f632df42030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.602823][T21112] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18d5fc [ 461.602836][T21112] RDX: 000000000000000f RSI: 00007f632df420a0 RDI: 0000000000000004 [ 461.602846][T21112] RBP: 00007f632df42090 R08: 0000000000000000 R09: 0000000000000000 [ 461.602857][T21112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.602873][T21112] R13: 00007f632d3b6038 R14: 00007f632d3b5fa0 R15: 00007ffcb5b3eca8 [ 461.602903][T21112] [ 461.891686][T21121] sctp: [Deprecated]: syz.3.5586 (pid 21121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.891686][T21121] Use struct sctp_sack_info instead [ 461.985642][T21128] FAULT_INJECTION: forcing a failure. [ 461.985642][T21128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.170862][T21128] CPU: 0 UID: 0 PID: 21128 Comm: syz.1.5588 Not tainted syzkaller #0 PREEMPT(full) [ 462.170884][T21128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 462.170893][T21128] Call Trace: [ 462.170900][T21128] [ 462.170907][T21128] dump_stack_lvl+0x189/0x250 [ 462.170930][T21128] ? __pfx____ratelimit+0x10/0x10 [ 462.170955][T21128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.170974][T21128] ? __pfx__printk+0x10/0x10 [ 462.170995][T21128] ? __might_fault+0xb0/0x130 [ 462.171027][T21128] should_fail_ex+0x414/0x560 [ 462.171052][T21128] _copy_from_user+0x2d/0xb0 [ 462.171070][T21128] rfkill_fop_write+0x136/0x570 [ 462.171095][T21128] ? __pfx_rfkill_fop_write+0x10/0x10 [ 462.171116][T21128] ? __pfx_security_file_permission+0x10/0x10 [ 462.171138][T21128] ? rw_verify_area+0x255/0x4d0 [ 462.171155][T21128] ? __lock_acquire+0xab9/0xd20 [ 462.171174][T21128] ? __pfx_rfkill_fop_write+0x10/0x10 [ 462.171197][T21128] vfs_write+0x27b/0xb30 [ 462.171226][T21128] ? __pfx_vfs_write+0x10/0x10 [ 462.171247][T21128] ? __fget_files+0x2a/0x420 [ 462.171272][T21128] ? __fget_files+0x2a/0x420 [ 462.171292][T21128] ? __fget_files+0x3a0/0x420 [ 462.171312][T21128] ? __fget_files+0x2a/0x420 [ 462.171342][T21128] ksys_write+0x145/0x250 [ 462.171364][T21128] ? __pfx_ksys_write+0x10/0x10 [ 462.171381][T21128] ? rcu_is_watching+0x15/0xb0 [ 462.171402][T21128] ? do_syscall_64+0xbe/0x3b0 [ 462.171427][T21128] do_syscall_64+0xfa/0x3b0 [ 462.171446][T21128] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.171466][T21128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.171481][T21128] ? clear_bhb_loop+0x60/0xb0 [ 462.171500][T21128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.171515][T21128] RIP: 0033:0x7f632d18ebe9 [ 462.171531][T21128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.171544][T21128] RSP: 002b:00007f632df42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.171561][T21128] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18ebe9 [ 462.171573][T21128] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 462.171583][T21128] RBP: 00007f632df42090 R08: 0000000000000000 R09: 0000000000000000 [ 462.171593][T21128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.171602][T21128] R13: 00007f632d3b6038 R14: 00007f632d3b5fa0 R15: 00007ffcb5b3eca8 [ 462.171630][T21128] [ 462.176362][T21093] tipc: Disabling bearer [ 462.438987][T21114] tipc: Enabling of bearer rejected, already enabled [ 462.909582][T21165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5599'. [ 462.954514][T21166] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 463.015909][T21168] tipc: Enabled bearer , priority 0 [ 463.045723][T21168] syzkaller0: entered promiscuous mode [ 463.056454][ T55] block nbd2: Possible stuck request ffff88802522e000: control (read@0,1024B). Runtime 60 seconds [ 463.067293][ T55] block nbd2: Possible stuck request ffff88802522e1c0: control (read@1024,1024B). Runtime 60 seconds [ 463.070290][T21168] syzkaller0: entered allmulticast mode [ 463.079432][ T55] block nbd2: Possible stuck request ffff88802522e380: control (read@2048,1024B). Runtime 60 seconds [ 463.095368][ T55] block nbd2: Possible stuck request ffff88802522e540: control (read@3072,1024B). Runtime 60 seconds [ 463.123402][T21171] tipc: Enabling of bearer rejected, already enabled [ 463.247752][T21167] tipc: Resetting bearer [ 463.315119][T21167] tipc: Disabling bearer [ 463.355003][T21188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.525659][T21201] lo: entered promiscuous mode [ 463.530791][T21201] netlink: 'syz.1.5611': attribute type 2 has an invalid length. [ 463.538520][T21201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.733927][T21214] tipc: Enabling of bearer rejected, already enabled [ 463.754643][T21217] netlink: 'syz.0.5617': attribute type 4 has an invalid length. [ 463.986742][T21234] FAULT_INJECTION: forcing a failure. [ 463.986742][T21234] name failslab, interval 1, probability 0, space 0, times 0 [ 464.006080][T21234] CPU: 1 UID: 0 PID: 21234 Comm: syz.4.5625 Not tainted syzkaller #0 PREEMPT(full) [ 464.006104][T21234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.006114][T21234] Call Trace: [ 464.006121][T21234] [ 464.006129][T21234] dump_stack_lvl+0x189/0x250 [ 464.006155][T21234] ? __pfx____ratelimit+0x10/0x10 [ 464.006179][T21234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.006200][T21234] ? __pfx__printk+0x10/0x10 [ 464.006220][T21234] ? genl_rcv+0x28/0x40 [ 464.006239][T21234] ? ____sys_sendmsg+0x505/0x830 [ 464.006255][T21234] ? __x64_sys_sendmsg+0x19b/0x260 [ 464.006284][T21234] should_fail_ex+0x414/0x560 [ 464.006313][T21234] should_failslab+0xa8/0x100 [ 464.006346][T21234] kmem_cache_alloc_noprof+0x73/0x3c0 [ 464.006368][T21234] ? skb_clone+0x212/0x3a0 [ 464.006391][T21234] skb_clone+0x212/0x3a0 [ 464.006413][T21234] __netlink_deliver_tap+0x404/0x850 [ 464.006448][T21234] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.006474][T21234] netlink_deliver_tap+0x19c/0x1b0 [ 464.006498][T21234] netlink_sendskb+0x68/0x140 [ 464.006523][T21234] netlink_unicast+0x397/0x9e0 [ 464.006541][T21234] ? __asan_memcpy+0x40/0x70 [ 464.006576][T21234] ? __pfx_netlink_unicast+0x10/0x10 [ 464.006609][T21234] netlink_rcv_skb+0x28c/0x470 [ 464.006630][T21234] ? __lock_acquire+0xab9/0xd20 [ 464.006661][T21234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.006681][T21234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.006723][T21234] ? down_read+0x1ad/0x2e0 [ 464.006748][T21234] genl_rcv+0x28/0x40 [ 464.006764][T21234] netlink_unicast+0x82c/0x9e0 [ 464.006797][T21234] ? __pfx_netlink_unicast+0x10/0x10 [ 464.006820][T21234] ? netlink_sendmsg+0x642/0xb30 [ 464.006842][T21234] ? skb_put+0x11b/0x210 [ 464.006871][T21234] netlink_sendmsg+0x805/0xb30 [ 464.006903][T21234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.006931][T21234] ? aa_sock_msg_perm+0xf1/0x1d0 [ 464.006959][T21234] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.006977][T21234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.007001][T21234] __sock_sendmsg+0x21c/0x270 [ 464.007025][T21234] ____sys_sendmsg+0x505/0x830 [ 464.007049][T21234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.007078][T21234] ? import_iovec+0x74/0xa0 [ 464.007102][T21234] ___sys_sendmsg+0x21f/0x2a0 [ 464.007124][T21234] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.007184][T21234] ? __fget_files+0x2a/0x420 [ 464.007209][T21234] ? __fget_files+0x3a0/0x420 [ 464.007245][T21234] __x64_sys_sendmsg+0x19b/0x260 [ 464.007267][T21234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.007297][T21234] ? __pfx_ksys_write+0x10/0x10 [ 464.007317][T21234] ? rcu_is_watching+0x15/0xb0 [ 464.007340][T21234] ? do_syscall_64+0xbe/0x3b0 [ 464.007369][T21234] do_syscall_64+0xfa/0x3b0 [ 464.007390][T21234] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.007411][T21234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.007428][T21234] ? clear_bhb_loop+0x60/0xb0 [ 464.007450][T21234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.007467][T21234] RIP: 0033:0x7f0db158ebe9 [ 464.007484][T21234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.007499][T21234] RSP: 002b:00007f0db24ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.007518][T21234] RAX: ffffffffffffffda RBX: 00007f0db17b5fa0 RCX: 00007f0db158ebe9 [ 464.007531][T21234] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 464.007543][T21234] RBP: 00007f0db24ac090 R08: 0000000000000000 R09: 0000000000000000 [ 464.007553][T21234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.007564][T21234] R13: 00007f0db17b6038 R14: 00007f0db17b5fa0 R15: 00007fffdf3bc5a8 [ 464.007596][T21234] [ 464.442949][T21243] tipc: Bearer : already 2 bearers with priority 10 [ 464.460106][T21243] tipc: Bearer : trying with adjusted priority [ 464.467234][T21243] tipc: Enabling of bearer rejected, failed to enable media [ 464.616163][T21254] FAULT_INJECTION: forcing a failure. [ 464.616163][T21254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.633574][T21254] CPU: 1 UID: 0 PID: 21254 Comm: syz.4.5632 Not tainted syzkaller #0 PREEMPT(full) [ 464.633598][T21254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.633609][T21254] Call Trace: [ 464.633622][T21254] [ 464.633631][T21254] dump_stack_lvl+0x189/0x250 [ 464.633656][T21254] ? __pfx____ratelimit+0x10/0x10 [ 464.633680][T21254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.633701][T21254] ? __pfx__printk+0x10/0x10 [ 464.633738][T21254] should_fail_ex+0x414/0x560 [ 464.633767][T21254] _copy_to_user+0x31/0xb0 [ 464.633790][T21254] simple_read_from_buffer+0xe1/0x170 [ 464.633820][T21254] proc_fail_nth_read+0x1b3/0x220 [ 464.633844][T21254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.633868][T21254] ? rw_verify_area+0x2a6/0x4d0 [ 464.633889][T21254] ? __lock_acquire+0xab9/0xd20 [ 464.633912][T21254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.633933][T21254] vfs_read+0x200/0xa30 [ 464.633954][T21254] ? fdget_pos+0x247/0x320 [ 464.633975][T21254] ? __pfx___mutex_lock+0x10/0x10 [ 464.633999][T21254] ? __pfx_vfs_read+0x10/0x10 [ 464.634024][T21254] ? __fget_files+0x2a/0x420 [ 464.634053][T21254] ? __fget_files+0x3a0/0x420 [ 464.634076][T21254] ? __fget_files+0x2a/0x420 [ 464.634110][T21254] ksys_read+0x145/0x250 [ 464.634136][T21254] ? __pfx_ksys_read+0x10/0x10 [ 464.634164][T21254] ? do_syscall_64+0xbe/0x3b0 [ 464.634192][T21254] do_syscall_64+0xfa/0x3b0 [ 464.634214][T21254] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.634236][T21254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.634254][T21254] ? clear_bhb_loop+0x60/0xb0 [ 464.634276][T21254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.634293][T21254] RIP: 0033:0x7f0db158d5fc [ 464.634310][T21254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 464.634325][T21254] RSP: 002b:00007f0db248b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 464.634344][T21254] RAX: ffffffffffffffda RBX: 00007f0db17b6090 RCX: 00007f0db158d5fc [ 464.634358][T21254] RDX: 000000000000000f RSI: 00007f0db248b0a0 RDI: 0000000000000003 [ 464.634369][T21254] RBP: 00007f0db248b090 R08: 0000000000000000 R09: 0000000000000000 [ 464.634380][T21254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.634390][T21254] R13: 00007f0db17b6128 R14: 00007f0db17b6090 R15: 00007fffdf3bc5a8 [ 464.634422][T21254] [ 464.880043][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 464.888076][ C1] lec:lec_tx_timeout: lec0 [ 464.899506][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 464.983304][T21260] vxcan1: tx address claim with dest, not broadcast [ 465.062096][T21264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5636'. [ 465.571071][T21292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5645'. [ 465.585460][T21271] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5641'. [ 465.605806][T21271] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5641'. [ 465.678507][T21302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5645'. [ 465.708004][T21293] tipc: Enabled bearer , priority 0 [ 465.767847][T21295] syzkaller0: entered promiscuous mode [ 465.787204][T21295] syzkaller0: entered allmulticast mode [ 465.855471][T21288] tipc: Resetting bearer [ 465.931447][ T5232] udevd[5232]: worker [18120] /devices/virtual/block/nbd2 is taking a long time [ 465.942673][T21286] tipc: Resetting bearer [ 466.000899][T21286] tipc: Disabling bearer [ 466.035409][T21321] netlink: 'syz.0.5653': attribute type 1 has an invalid length. [ 466.052992][T21321] netlink: 'syz.0.5653': attribute type 1 has an invalid length. [ 466.066083][T21321] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5653'. [ 466.066830][T21318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.151789][T21327] netlink: 'syz.2.5655': attribute type 4 has an invalid length. [ 466.293118][T21336] tipc: Enabling of bearer rejected, failed to enable media [ 466.335974][T21330] tipc: Enabling of bearer rejected, already enabled [ 466.740326][T21364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.881123][T21377] sctp: [Deprecated]: syz.2.5671 (pid 21377) Use of int in max_burst socket option. [ 466.881123][T21377] Use struct sctp_assoc_value instead [ 466.899483][T21376] tipc: Enabled bearer , priority 0 [ 466.907096][T21376] syzkaller0: entered promiscuous mode [ 466.912680][T21376] syzkaller0: entered allmulticast mode [ 466.944938][T21376] tipc: Resetting bearer [ 466.983955][T21374] tipc: Resetting bearer [ 467.041030][T21374] tipc: Disabling bearer [ 467.216066][T21402] vxcan1: tx address claim with dest, not broadcast [ 467.286547][T21404] tipc: Enabling of bearer rejected, failed to enable media [ 467.641072][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5682'. [ 467.783818][T21436] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5683'. [ 467.998425][T21447] netlink: 'syz.2.5689': attribute type 2 has an invalid length. [ 468.192031][T21463] FAULT_INJECTION: forcing a failure. [ 468.192031][T21463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.227401][T21465] tipc: Enabling of bearer rejected, failed to enable media [ 468.269801][T21463] CPU: 1 UID: 0 PID: 21463 Comm: syz.1.5694 Not tainted syzkaller #0 PREEMPT(full) [ 468.269826][T21463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.269837][T21463] Call Trace: [ 468.269845][T21463] [ 468.269852][T21463] dump_stack_lvl+0x189/0x250 [ 468.269878][T21463] ? __pfx____ratelimit+0x10/0x10 [ 468.269902][T21463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.269923][T21463] ? __pfx__printk+0x10/0x10 [ 468.269958][T21463] should_fail_ex+0x414/0x560 [ 468.269985][T21463] _copy_to_user+0x31/0xb0 [ 468.270010][T21463] bpf_verifier_vlog+0x48c/0x900 [ 468.270045][T21463] __btf_verifier_log+0xd4/0x120 [ 468.270069][T21463] ? btf_sec_info_cmp+0x5d/0x110 [ 468.270090][T21463] ? __pfx___btf_verifier_log+0x10/0x10 [ 468.270127][T21463] __btf_verifier_log_type+0x360/0x630 [ 468.270164][T21463] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 468.270201][T21463] btf_datasec_check_meta+0x3e2/0xa80 [ 468.270221][T21463] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 468.270245][T21463] ? __pfx_sort+0x10/0x10 [ 468.270261][T21463] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 468.270289][T21463] btf_parse_type_sec+0x44d/0x24a0 [ 468.270318][T21463] ? __pfx_btf_check_sec_info+0x10/0x10 [ 468.270342][T21463] ? btf_parse_str_sec+0x212/0x2a0 [ 468.270365][T21463] btf_new_fd+0x40e/0xc90 [ 468.270383][T21463] ? apparmor_capable+0x137/0x1b0 [ 468.270412][T21463] ? __pfx_btf_new_fd+0x10/0x10 [ 468.270431][T21463] ? bpf_token_put+0x143/0x160 [ 468.270454][T21463] ? bpf_btf_load+0x126/0x190 [ 468.270480][T21463] __sys_bpf+0x406/0x870 [ 468.270504][T21463] ? __pfx___sys_bpf+0x10/0x10 [ 468.270539][T21463] ? ksys_write+0x22a/0x250 [ 468.270564][T21463] ? __pfx_ksys_write+0x10/0x10 [ 468.270594][T21463] __x64_sys_bpf+0x7c/0x90 [ 468.270616][T21463] do_syscall_64+0xfa/0x3b0 [ 468.270638][T21463] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.270660][T21463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.270676][T21463] ? clear_bhb_loop+0x60/0xb0 [ 468.270697][T21463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.270713][T21463] RIP: 0033:0x7f632d18ebe9 [ 468.270729][T21463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.270743][T21463] RSP: 002b:00007f632df42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.270761][T21463] RAX: ffffffffffffffda RBX: 00007f632d3b5fa0 RCX: 00007f632d18ebe9 [ 468.270773][T21463] RDX: 0000000000000020 RSI: 0000200000002180 RDI: 0000000000000012 [ 468.270783][T21463] RBP: 00007f632df42090 R08: 0000000000000000 R09: 0000000000000000 [ 468.270794][T21463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.270804][T21463] R13: 00007f632d3b6038 R14: 00007f632d3b5fa0 R15: 00007ffcb5b3eca8 [ 468.270833][T21463] [ 468.908286][T21488] vxcan1: tx address claim with dest, not broadcast [ 469.197196][T21509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5707'. [ 469.318427][T21513] lo speed is unknown, defaulting to 1000 [ 469.342335][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5709'. [ 469.739465][T21540] tipc: Enabling of bearer rejected, already enabled [ 469.910057][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 469.918142][ C1] lec:lec_tx_timeout: lec0 [ 469.923587][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 469.969115][T21559] tipc: Enabling of bearer rejected, already enabled [ 470.085328][T21563] netlink: 'syz.4.5723': attribute type 1 has an invalid length. [ 470.244875][T21579] netlink: 'syz.3.5726': attribute type 1 has an invalid length. [ 470.253885][T21579] netlink: 'syz.3.5726': attribute type 2 has an invalid length. [ 470.316248][T21583] vxcan1: tx address claim with dest, not broadcast [ 470.355727][T21585] tipc: Enabling of bearer rejected, already enabled [ 470.446795][T21590] tipc: Enabling of bearer rejected, already enabled [ 470.557444][T21598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.828761][T21618] tipc: Enabling of bearer rejected, failed to enable media [ 470.961592][T21626] tipc: Enabling of bearer rejected, already enabled [ 471.194687][T21637] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 471.427748][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5754'. [ 471.441447][T21656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5752'. [ 471.539734][T21655] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 471.657215][T21662] tipc: Enabled bearer , priority 0 [ 471.681745][T21662] syzkaller0: entered promiscuous mode [ 471.687950][T21662] syzkaller0: entered allmulticast mode [ 471.746321][T21671] erspan0: entered promiscuous mode [ 471.765239][T21662] tipc: Resetting bearer [ 471.792070][T21672] tipc: Enabling of bearer rejected, already enabled [ 471.815153][T21661] tipc: Resetting bearer [ 471.823042][T21674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.860846][T21661] tipc: Disabling bearer [ 471.879643][T21676] tipc: Enabling of bearer rejected, failed to enable media [ 471.894257][T21678] tipc: Enabling of bearer rejected, already enabled [ 472.257724][T21698] netlink: 'syz.1.5770': attribute type 30 has an invalid length. [ 472.520236][T21707] netlink: 'syz.4.5773': attribute type 178 has an invalid length. [ 472.593113][T21712] netlink: 'syz.1.5774': attribute type 13 has an invalid length. [ 472.683362][T21716] tipc: Enabled bearer , priority 0 [ 472.700971][T21716] syzkaller0: entered promiscuous mode [ 472.706473][T21716] syzkaller0: entered allmulticast mode [ 472.900532][T21720] tipc: Resetting bearer [ 472.935606][T21715] tipc: Resetting bearer [ 472.983335][T21715] tipc: Disabling bearer [ 473.074716][T21730] tipc: Enabling of bearer rejected, failed to enable media [ 473.738759][T21758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.933361][T21775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5795'. [ 474.149803][T21786] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5797'. [ 474.214802][T21796] netlink: 'syz.0.5800': attribute type 1 has an invalid length. [ 474.224129][T21795] tipc: Enabling of bearer rejected, failed to enable media [ 474.225203][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5800'. [ 474.242467][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5800'. [ 474.358804][T21800] tipc: Enabled bearer , priority 0 [ 474.402010][T21800] syzkaller0: entered promiscuous mode [ 474.407546][T21800] syzkaller0: entered allmulticast mode [ 474.575666][T21797] tipc: Resetting bearer [ 474.592935][T21818] netlink: 'syz.2.5805': attribute type 1 has an invalid length. [ 474.631962][T21818] netlink: 'syz.2.5805': attribute type 3 has an invalid length. [ 474.663296][T21818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5805'. [ 474.678878][T21797] tipc: Disabling bearer [ 474.687362][T21818] NCSI netlink: No device for ifindex 0 [ 474.717414][T21824] netlink: 'syz.0.5803': attribute type 1 has an invalid length. [ 474.725925][T21824] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5803'. [ 474.930202][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 474.938279][ C1] lec:lec_tx_timeout: lec0 [ 474.952500][T21839] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20002 [ 475.003237][T21838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.046935][T21839] bond11 (unregistering): Released all slaves [ 475.171459][T21844] netlink: 'syz.1.5811': attribute type 10 has an invalid length. [ 475.318625][T21862] netlink: 'syz.1.5811': attribute type 10 has an invalid length. [ 475.380583][T21865] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5815'. [ 475.691366][T21872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.704766][T21872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.728086][T21878] tipc: Enabling of bearer rejected, failed to enable media [ 475.759987][T21882] netlink: 'syz.0.5818': attribute type 1 has an invalid length. [ 475.768279][T21882] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5818'. [ 475.813170][T21872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.828863][T21872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.019917][T21872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.073309][T21872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.191197][T21894] 8021q: adding VLAN 0 to HW filter on device bond11 [ 476.288433][T21872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.312907][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5824'. [ 476.331618][T21872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.409967][T21899] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 476.473580][T21914] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5828'. [ 476.598795][ T7921] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.607880][ T7921] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.628104][ T7921] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.636832][ T7921] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.693534][ T7921] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.702905][ T7921] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.715140][T21921] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5829'. [ 476.765884][ T7921] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.789801][ T7921] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.845108][T21930] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 476.907909][T21935] tipc: Enabled bearer , priority 0 [ 476.919755][T21935] tipc: Resetting bearer [ 476.931284][T21932] tipc: Disabling bearer [ 477.034959][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5837'. [ 477.296661][T21955] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 477.313202][T21955] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 477.474854][T21973] sctp: [Deprecated]: syz.3.5846 (pid 21973) Use of int in maxseg socket option. [ 477.474854][T21973] Use struct sctp_assoc_value instead [ 477.540934][T21978] validate_nla: 3 callbacks suppressed [ 477.540952][T21978] netlink: 'syz.4.5849': attribute type 4 has an invalid length. [ 477.631350][T21981] tipc: Enabling of bearer rejected, failed to enable media [ 477.944973][T22003] lo speed is unknown, defaulting to 1000 [ 478.561818][T22043] tipc: Enabling of bearer rejected, failed to enable media [ 478.831805][T22063] sctp: [Deprecated]: syz.1.5876 (pid 22063) Use of int in maxseg socket option. [ 478.831805][T22063] Use struct sctp_assoc_value instead [ 478.884425][T22063] sctp: [Deprecated]: syz.1.5876 (pid 22063) Use of int in maxseg socket option. [ 478.884425][T22063] Use struct sctp_assoc_value instead [ 479.234868][T22088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.387964][T22098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.556272][T22104] bond3: (slave veth0_to_bond): Releasing active interface [ 479.576629][T22111] __nla_validate_parse: 8 callbacks suppressed [ 479.576646][T22111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5895'. [ 479.644480][T22104] bond0: (slave bond1): Releasing backup interface [ 479.659464][T22104] bond1: left promiscuous mode [ 479.701261][T22104] bond3: (slave veth9): Releasing active interface [ 479.717354][T22110] tipc: Enabling of bearer rejected, failed to enable media [ 479.978941][T22133] IPVS: Error connecting to the multicast addr [ 480.037323][T22134] IPVS: Error connecting to the multicast addr [ 480.148059][T22142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5901'. [ 480.161754][T22141] syzkaller0: entered promiscuous mode [ 480.167308][T22141] syzkaller0: entered allmulticast mode [ 480.549413][T22166] netlink: 'syz.0.5912': attribute type 1 has an invalid length. [ 480.666654][T22171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.767404][T22180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5915'. [ 480.962209][T22174] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5915'. [ 480.986766][T22191] batman_adv: batadv0: Interface deactivated: dummy0 [ 480.994423][T22191] batman_adv: batadv0: Removing interface: dummy0 [ 481.056882][T22191] bond9: (slave geneve3): Releasing active interface [ 481.071382][ T980] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 481.083291][ T980] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 481.092841][ T980] CPU: 0 UID: 0 PID: 980 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 481.102129][ T980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 481.112169][ T980] Workqueue: mld mld_ifc_work [ 481.116836][ T980] RIP: 0010:add_grec+0x79f/0x1740 [ 481.121845][ T980] Code: c6 e8 25 48 87 f7 45 85 ff 0f 84 b1 00 00 00 e8 d7 43 87 f7 eb 05 e8 d0 43 87 f7 4c 89 e0 48 c1 e8 03 48 89 84 24 a0 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 02 ad ea f7 4d 8b 3c 24 48 8b 7c [ 481.141436][ T980] RSP: 0018:ffffc90003a3f8f8 EFLAGS: 00010206 [ 481.147485][ T980] RAX: 000000001fffe000 RBX: ffff88805203cc80 RCX: ffff888025bcda00 [ 481.155442][ T980] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 481.163396][ T980] RBP: 0000000000000000 R08: ffff888025bcda00 R09: 0000000000000002 [ 481.171348][ T980] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000ffff0000 [ 481.179300][ T980] R13: 0000000000000005 R14: dffffc0000000000 R15: 0000000000000001 [ 481.187252][ T980] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 481.196160][ T980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.202723][ T980] CR2: 00007f632b3f5f98 CR3: 0000000056b90000 CR4: 00000000003526f0 [ 481.210678][ T980] Call Trace: [ 481.213939][ T980] [ 481.216863][ T980] mld_ifc_work+0x676/0xd60 [ 481.221352][ T980] ? process_scheduled_works+0x9ef/0x17b0 [ 481.227054][ T980] process_scheduled_works+0xae1/0x17b0 [ 481.232598][ T980] ? __pfx_process_scheduled_works+0x10/0x10 [ 481.238569][ T980] worker_thread+0x8a0/0xda0 [ 481.243142][ T980] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 481.249454][ T980] ? __kthread_parkme+0x7b/0x200 [ 481.254373][ T980] kthread+0x711/0x8a0 [ 481.258425][ T980] ? __pfx_worker_thread+0x10/0x10 [ 481.263514][ T980] ? __pfx_kthread+0x10/0x10 [ 481.268092][ T980] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.273279][ T980] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.278458][ T980] ? __pfx_kthread+0x10/0x10 [ 481.283032][ T980] ret_from_fork+0x3f9/0x770 [ 481.287605][ T980] ? __pfx_ret_from_fork+0x10/0x10 [ 481.292698][ T980] ? __switch_to_asm+0x39/0x70 [ 481.297445][ T980] ? __switch_to_asm+0x33/0x70 [ 481.302192][ T980] ? __pfx_kthread+0x10/0x10 [ 481.306765][ T980] ret_from_fork_asm+0x1a/0x30 [ 481.311516][ T980] [ 481.314529][ T980] Modules linked in: [ 481.318996][ T980] ---[ end trace 0000000000000000 ]--- [ 481.328346][ T980] RIP: 0010:add_grec+0x79f/0x1740 [ 481.333593][ T980] Code: c6 e8 25 48 87 f7 45 85 ff 0f 84 b1 00 00 00 e8 d7 43 87 f7 eb 05 e8 d0 43 87 f7 4c 89 e0 48 c1 e8 03 48 89 84 24 a0 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 02 ad ea f7 4d 8b 3c 24 48 8b 7c [ 481.353580][ T980] RSP: 0018:ffffc90003a3f8f8 EFLAGS: 00010206 [ 481.359715][ T980] RAX: 000000001fffe000 RBX: ffff88805203cc80 RCX: ffff888025bcda00 [ 481.387936][T22200] lo speed is unknown, defaulting to 1000 [ 481.416383][ T980] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 481.416528][ T3501] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.424482][ T980] RBP: 0000000000000000 R08: ffff888025bcda00 R09: 0000000000000002 [ 481.424501][ T980] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000ffff0000 [ 481.424513][ T980] R13: 0000000000000005 R14: dffffc0000000000 R15: 0000000000000001 [ 481.424525][ T980] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 481.424541][ T980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.424554][ T980] CR2: 000055556d33e5c8 CR3: 0000000079b8c000 CR4: 00000000003526f0 [ 481.424572][ T980] Kernel panic - not syncing: Fatal exception [ 481.424855][ T980] Kernel Offset: disabled