last executing test programs: 13.849878116s ago: executing program 2 (id=2024): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000000000071120b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x27) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x73000000}, 0x70) 13.687416114s ago: executing program 2 (id=2026): bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @fallback=0xb9d5d6c946f3b17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) r3 = accept$alg(r0, 0x0, 0x0) recvmsg(r3, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$inet(r3, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a", 0x47}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[], 0x6) write(r6, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r7, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12.528271497s ago: executing program 2 (id=2036): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = syz_genetlink_get_family_id$nl80211(0x0, r0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8000}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000340)=0x14) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x18, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004300), 0x0, 0xc0000122, 0x0) 10.980811245s ago: executing program 2 (id=2051): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d0, 0x318, 0x450, 0x0, 0x0, 0x318, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ip={@empty, @empty, 0xff000000, 0x0, '\x00', '\x00', {0xff}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:sshd_var_run_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x7, 0xc, [0x1f, 0xa, 0x4, 0x10, 0x1b, 0x32, 0x3a, 0x1c, 0x13, 0x2d, 0x24, 0x3f, 0x6, 0x3d, 0x15, 0x5], 0x0, 0x2, 0x7fffffffffffffff}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xb, 0xd, @local, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x530) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x234, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x130, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x37}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x390}, 0x1, 0x0, 0x0, 0xc041}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x201, 0x2000000, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x800) 8.958364971s ago: executing program 0 (id=2069): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x6, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x800, 0x8, 0x400c, 0x4, 0x9, 0x7ff, 0x8, 0xff, 0x5, 0x1}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000008031ed097f2a75f488b90265b30bfd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@ldst={0x6, 0x2, 0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x5, &(0x7f0000000680)=[{0x6, 0x0, 0x2, 0xe5e1}, {0xded9, 0x4d, 0x2, 0x8}, {0x7c3f, 0x7, 0x0, 0x6b7}, {0x8, 0xfa, 0x0, 0x808}, {0x7, 0x73, 0xa, 0xc}]}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x12, 0x1f, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r1, @ANYBLOB="000400005a6dfaf43497c09d7800000200"/29, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="010000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.699241868s ago: executing program 0 (id=2076): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000040000001000000000000000", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000700)="00112233445566778899aabb0800", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x467}, &(0x7f0000000100)=0x8) r6 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r6, 0x0, 0x101f1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={r5}, &(0x7f0000000200)=0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000005010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff000000007ba100000000000007010000f8ffffffb702000005000000b703000009000080850000007100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040)={r10}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000080)={r10}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) 7.553530917s ago: executing program 3 (id=2078): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @val={0x76, 0x6, {0x81, 0x1, 0x29}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc2}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) pread64(r10, &(0x7f0000000580)=""/224, 0xe0, 0x200000000000002) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x48010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x2502e4a8f499143, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xd, 0xb}, {0x10, 0xfff1}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f00000002c0)={0x5b, 0x5, 0x9, 0xc}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x16, 0x2, 0xffff, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0xf}, @timestamp={0x8, 0xa, 0x18}, @sack={0x5, 0x1e, [0x3, 0x5, 0xffffffff, 0x8, 0x5, 0x8000, 0x0]}, @md5sig={0x13, 0x12, "1d84e6a66d55953b1f80f150d3d20782"}]}}}}}}}, 0x0) 7.379364669s ago: executing program 4 (id=2080): clock_gettime(0xfffffffffffffff6, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="81000000000000000000010000000500010000000000"], 0x1c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x18, 0x80000, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000000)={0x7, 'vlan1\x00', {0xa}, 0x6}) accept4(r2, 0x0, 0x0, 0x81800) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r3 = epoll_create1(0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.time\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r5], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x20) socket$igmp(0x2, 0x3, 0x2) 7.031563757s ago: executing program 3 (id=2081): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="ed1afe65", 0x4, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="13080000000000000000110000003c000980080001"], 0x84}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x80000}, &(0x7f00000003c0)=0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000400)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}], 0x2c) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}]}, 0x44}}, 0x8008) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r10, @ANYBLOB="1300000010000000", @ANYRES32, @ANYBLOB="558daab0c1c1e6a8b6b0d9d49e6df14f4b3fa04f662bf84c439d6830a03d45fa5bacf4db06f4713c4b3d16dd3df3ed65604c41ac84f795923e79dda1124702d9b377c96c1684ef71e6b60a76249f4aa395f0c9e35559c680034d9189cf18226197a0307a2d27dc4b49d76a4f62253b187eeca3811300e1f07ad924cc04fc1d63f67c222b6d77", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r10, 0x0, 0x5e, 0x64, &(0x7f0000000480)="5a9debb490b858a1b9da76791fb416b01d1d522b483f4cf606cab93f6fa4a7ee5682897228468b33a5c44a86865bf6ccc810c610d3586bd02a086839a5439cc0e5ad0e73baf637475cc1ae31bda9e505543911fda520aa29afafa59b60db", &(0x7f0000000500)=""/100, 0x1, 0x0, 0x75, 0x1000, &(0x7f00000005c0)="3b28dfec7c55dc38b29f29f4e31283cd28b73cd32c1720ba77f08ebd02451b7f4d7a5e334cafac2165725df41a98fb76f2241387cf88824e1bb66395b3e9441347a42a57a134d722a36dce0b66022ed122d9aca96aab3838f003c512b71a4789a5de80db6e2233fb3a4069cb57caaa8469a3a92a22", &(0x7f0000001300)="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", 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0x603, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ct={0x2c, 0x21, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="4760a500000000000000", @ANYRES32=0x0, @ANYBLOB="0200480a1400030007000000040000000900000008000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCGNPMODE(r11, 0x4008744b, &(0x7f0000000100)={0x283}) 6.515210137s ago: executing program 0 (id=2083): bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x5ddb343c6bddcfb5, 0x0, '\x00', 0x0, @fallback=0xb9d5d6c946f3b17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) r3 = accept$alg(r0, 0x0, 0x0) recvmsg(r3, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$inet(r3, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a", 0x47}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x6) write(r6, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.458740329s ago: executing program 4 (id=2084): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000700)={0x0, {{0xa, 0x4e23, 0xffff8e27, @mcast2, 0xc}}}, 0x20000) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 6.351830381s ago: executing program 3 (id=2085): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x5c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x5c}, 0x1, 0x100000000000000}, 0x0) 6.252988009s ago: executing program 4 (id=2086): unshare(0x100000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0920000000000055090100048000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x61}, 0x94) unshare(0x22020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000200000001000000000001000000030000002f942d000000000000000f010000009a002e2e00"], 0x0, 0x44, 0x0, 0x1}, 0x28) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'pim6reg0\x00', 0x5}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf37, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x81, @private1, 0x9}], 0x3c) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf250f00000004000380240007800c00030006000000000000000c0004000b00000000000000080002008310ffffc26299"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 6.205395624s ago: executing program 1 (id=2087): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@migrate={0xa0, 0x21, 0x1, 0x350, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, @in6=@local, 0x32, 0x0, 0x0, 0xffffffff, 0x2, 0x2}]}]}, 0xa0}}, 0x0) 6.0982026s ago: executing program 4 (id=2088): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x380}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x80}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0x4e26, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e040000000000000100b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0bab566913ef2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000440)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f0000000340)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00000000000000000000000000dcfc79aa30d51b47ae8a658993ace0c6117a176d8ed928b70fac29b5a92b9f2396ca48579b0a02b5d56469b7684cea6a38457c8575115b97022eb30415bb47f4de4b7029a2dec1d1b3cdee060907e10129873640a61de4ae4b797cc0ce85532990d1d493e2779311d22a296ad682a656635959f78ea547fc7cd635c83f4f0905641f66a8e9a02c01001b83cbdcd90a6260ff", 0xc2}, {&(0x7f0000000b40)="853d812375877866806fdff43051b4023fa2334c45b8d31dff2233f12c7ffec14b58976722a067ecd394dcf55ad8bc6adf88e0dd053d47e5ddc3b08ac01e128339844430d1033bc401927fd38018f2b0e9b713aa160d7b265e90ca90a88cbb0b1493ccdd35f17ed434451c742e3d9c7607fb338490fb578a48c1853a42bbd171367e33a75c9cde0160143ad61ffad513ae1059f9e31087c6448fae895aa68e70fa53628160525c97bf79f68247bf691e8e46c94c3c0fa018fd9d10c19d7bf717ef1da47e10b55a09cb5e411146c03b26abef74a1b955c2202b9a4838f5b2495c6728602328820e2df2acfb22138f1d86c29f73641d1a55e8deadd320d9e951b33370ccebbd05a4d4358c514b5c7b695a9ec90b36ac77e9dd4e03569065d281b1b727a1692e26b8f363d7540e8ca2e806164a6fc46f8e2d2a6c128daf63a398077a13fbc0d539bda7fb8b904638e612482b548f1a089ec8d80fe0e6baf6379a037ce7efdf6ede864f2c8736b1abb71991ba15f2fd1372314390de9a3fa1a4eefc12dfd5bbf5c6606a4a5d2e08742f02fbc8aaa140a652369a2200736851cf259dde2999c8b2539d7702d0b37aae943e160e14d24b3eaa0b025d55a16c924f16e9eecebbc52b2069ba5223df0e252c78372aa13958a89a2b3a2044aa2275817ac942b261d2f2c25c45984b8af9dfa7652f7530aa4e714ad4c66b65ebaf42e223e415f1326bfd00d98bdaa4396a23aaa3623d0324beb61843f685a4e577247ae9b833aee04e55ae6d336d73513fbdcc62af87d2ba946a9c25d175e66990c636df62f853377274c1a04fb1fb235ee080cad746e239cdc728474812e995ac0c670f9885ad7704a281044948efd5170cab39daa5b034349741fb857260796231aa7864e9517c159e7a5e05d86dd4f4185d0ece85f3bcdaf83dab3e2dfbe8ee2786b23b7f0dda7243e217382da2d3f481447f", 0x2af}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x10000000}], 0x1, 0x40012) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000040)={0x8000000000000001, 0x8000000000000001}) 5.973118078s ago: executing program 1 (id=2089): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xf4240, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.956220454s ago: executing program 4 (id=2090): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a809000008000b000000000006000100070000000c000f000500000000000000050005"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 5.932323832s ago: executing program 3 (id=2091): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r2 = socket$kcm(0x29, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = socket$pptp(0x18, 0x1, 0x2) (async) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000140), 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) (async) r8 = gettid() r9 = socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r7, @ANYBLOB="089805000750050008001300", @ANYRES32=r8, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x2004c802}, 0x4000010) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000080)={r5, r3, 0x7f, 0x67, &(0x7f0000000000)="747031bf1a64ec1ea06f4cc52da0e296a67955a892422442bcd3c14ae66cc1e6aa7f071e7a1752c8daa6a6950e6fc83495a030bf57e9f4973689890c869ce90f24fe1322a7fe6e3833a03d86a3d948677241e915a3a47971fcd8d8518a6f79ab1782b6d2134968", 0xa, 0xe, 0x4, 0xffff, 0x81, 0x0, 0x1, 'syz0\x00'}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000091"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r11, r11, 0x2f, 0x0, @void}, 0x10) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r10, 0xfef94000) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x8004f, 0x10000}) sendmsg$kcm(r2, &(0x7f0000003540)={&(0x7f0000000180)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x80, &(0x7f0000003280)=[{&(0x7f0000000200)="9b0cb3494ef0eab91da596070ca3c7b06d43d6f22897591591244c8159fe5ed699060125522768c7fd3f5f5e878ec2951c787fc3a7e6342355b5a013e64e7a2ab67cd26b8dbbcb9b55d80d1e00361dc6bbaf6c9d", 0x54}, {&(0x7f0000000280)="834222337d3b32cbf50cb7c9eb50d105a8204632edc761519f29c58916bfe3b79c15be21c6823bb4d4373c74d851d4a8a1eaf9776a7a68c97ca2c40610d690e62889a5afd4ae9a270efd8719ecf83697a3dbb325b98ab1686f1fbf5c8a60bd9182fed3d6dbf4d24e064eee832753168157f3dd9340810c43a9d169a2ded6911a7c2cd925b088742defdddb0c88c6331748d71e00f9428e3c9da5d41994f37c24712a1e9286027ba7e8fb9c148fda8af212b8015b73f1e994a7eac03c8f78", 0xbe}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000003200)="6a86ec97aa56d6b802dce1234c0eb8ca50a8445645beb6e439fd0bd3126f934a0a8c1c2e879c2a2e362fb39f855bcf1a94ed7f140247b5a585d6313119f515edec0bb367a3d82e30b3", 0x49}], 0x5, &(0x7f0000003300)=[{0xc0, 0x10c, 0x5, "4d8c08f5ef519e844b1cb462dc570b2e1afdce547064f37bddfb7e3d475e5dc2c4ef7ae0783a5c7982b09f339d5fb9d7a9eca425bc48de3aca857c92a9e7c228c62f366855e78537a87c127593282b89ab94ee83d09af46fb9955b76fd836e71fd689ba9d12ed08ade16450e1f935c55e07d0a185bb0d488f8bd48a80754abebb97f0b349f1c292c6e93db052b48659717ce343d2a8b751f5a55ef01f74f49d426163961b1de51884942056477fe"}, {0x90, 0x113, 0x4, "c1aa096ba81fcfa41e358cfb5abe9974a85acfcb226b0bfd2e4ccd74ba3b40c452c3f2a29d95ee83f6c60c4f914a9067ff19c3a8df3e2760b772bb93f9691c33e867a7dbd5b322ffe1e0ad24c6421332943f0a86f7d5499ffee596580328fe5e78efe3fc5fba708500afe9de10a36303c35f216e85b2dc00f2b209"}, {0x90, 0x84, 0x800, "ca3e52633e4ddcbbec909983e5ac6129fcfedb6af6c78a227b050a1f1697fd0a29abe09d976ad345cfc59a8f6fd50881a1695b68a19096fc3a709ed3fb0e5743addd8ccaa64e161c1301212fb7d973055bb64b17c316e79abb9a031f069e9d8eac7debf5be5189a85dcd83c864ecae854df5d5f68ca6345cb1a7bbdb7b"}, {0x48, 0x115, 0xffffff00, "3748e4a5c214c3493610b2ac9c753995566eb11883a0025f8986650223e027f4f40f248183243896ef1827b325194b8fdd6e3bda8d9269c5"}], 0x228}, 0x20044004) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x10, &(0x7f00000010c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000efff85000000630000001500020000000000bf010000000000008500000056000000b70000000200100095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r12, 0x0, 0xe, 0x0, &(0x7f0000000000)="001122332f64d0d1c6d80ffe85f1", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendto$inet6(r1, &(0x7f0000000000)="f90e832ea73f81024ac203918ea2cec163a4eb9d567145b97745777b69257b6d12e269d5b56d0651b8a27d7129b587c91f06c4463b4acb24616022c0c60ae1b18d7e42b6aa820165f59681440b8ad686ef07619205a1259541a4e48275e17b3455f35a64590a883ac5aab26ba81ad3d47ddc96d37cd11667b2e04ddc93d841969cab47c0435ec41d8f", 0x89, 0x4050, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) 5.812510322s ago: executing program 1 (id=2092): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x2, 0x420, 0x3e0, 0x1c0, 0xffffffff, 0x1c0, 0x3e0, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ipv6={@remote, @private2, [], [], 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@mcast1, @gre_key=0x6, @gre_key=0x73b}}}, {{@ipv6={@loopback, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @private0, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4a8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) 5.759132684s ago: executing program 1 (id=2093): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, 0x41, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@private0}]}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@local}]}, 0x4c}, 0x1, 0x0, 0x50000000, 0x400c801}, 0x200080c4) 5.676477489s ago: executing program 1 (id=2094): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async, rerun: 64) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}}, 0x2) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000000000200000000000006000000000d4e17007f4a20c6b2020e73f176b9ffd7e1b0af3685c6239e3c1da4fc839d470d8cf89f00ff9f84725370dbf8210ed015ef094c4b0f4d3b40193aaa83629b9523120fdd8b28373b1e8ee2002751b248f80bbfa0048c052af2a5a7b8d7d125924337c2b7db2e4ac6ae3dc9861f58c3a0abe87d594a86cfe81ce4b43781048ca119fad44600"/170], 0x24}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="20040000faffbfff07001b0000000000f73aebf057b7f9ee555301b5a817f60e9428468cf2fa4e263073"], 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) (async, rerun: 32) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000000540), 0x0, 0x12040, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bind$tipc(r5, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) (async) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[], 0x50d8}}, 0xc000) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000000000050000000000800004"], 0x1c}}, 0x0) (rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000480)=@ethtool_pauseparam={0x11}}) (async) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.567850717s ago: executing program 2 (id=2095): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x408, 0x66, 0x0, 0xb, 0x6c, 0x0, @private=0xa010101, @broadcast, {[@rr={0x7, 0x3, 0x27}]}}, "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"}}, 0x416) 5.333535686s ago: executing program 3 (id=2096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x24}, 0x404f444) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0x29, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b4000000000000000000000000000000001ffffc0", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x54b8, 0x50ff, {{0x14, 0x4, 0x2, 0x10, 0x50, 0x65, 0x0, 0xd9, 0x4, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x23, 0x39, [@multicast2, @empty, @multicast2, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}, @noop, @lsrr={0x83, 0xb, 0x58, [@dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010102]}, @end, @generic={0x88, 0x9, "123df00f37da06"}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x1ff, '\x00', r4, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) 5.308408006s ago: executing program 0 (id=2097): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000140)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7084000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029"], 0x108}}], 0x2, 0xc040) 5.26916572s ago: executing program 1 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) listen(r2, 0x28) poll(&(0x7f0000000000), 0x0, 0x40000400) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) shutdown(r2, 0x0) 5.241590729s ago: executing program 4 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0xe0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c40)=@newqdisc={0xb0, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xb0}}, 0x0) getpeername(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) setsockopt(r2, 0x5, 0x3, &(0x7f00000001c0)="c784b53508d1a919ad9a88e01eed5230f878f95c1b3ed41cb9eeae7654dc1fb134a779d0ff3334adf34be3530a40fd7257ecaa18d4cda7", 0x37) 5.145570936s ago: executing program 0 (id=2100): close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x5, 0x0, 0x4, 0x1, 0x5640, 0x0, 0x10000101}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c000100060006dd86000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 3.307744ms ago: executing program 0 (id=2101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa210102, @broadcast}, {0x11, 0xff, 0x0, @multicast1}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000f6620170000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000180)="da", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 654.408µs ago: executing program 3 (id=2102): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000140)=0xdf6, 0x4) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 0s ago: executing program 2 (id=2103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x200, 0x70bf28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7, 0x14}, {0xa, 0xffff}, {0xa, 0xffe8}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44090}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="556f89067cd3f034658d25e61e4dc6d77c6a5feb7e7a541a33c2589d60ffc4e6d171c4cd443421960f24fcc61b3a66a0cccd588c1311593e8d7dcaa0e3dc2726b9aa9155c81cd1b43c61b6892e1c23cf33cc55a111f5f8992d3f0cf841b7e29f78f1501af51aac07746295721c34a52239a8cf9f0914f700203a4443c017c6d56edd0fd6d7779a464c1f349011b2b2184fc73fe41dee37060d09aed0ce924b1e9266173737415e1c1d2a2a15bb07a38407f02d74ecc4140fe9d6628700267c43447957a5885cf728", @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="2000308014000400403a050c5baee2004ef2b6d713459a7a0500020002000000"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) kernel console output (not intermixed with test programs): BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 210.955570][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 210.955601][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 210.970290][ C0] TC_ACT_REPEAT abuse ? [ 211.050600][ C1] TC_ACT_REPEAT abuse ? [ 212.321128][ T9590] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 212.874151][ T9627] Cannot find map_set index 2 as target [ 212.978358][ T9631] dummy0 speed is unknown, defaulting to 1000 [ 213.780022][ T9664] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 214.090097][ C0] net_ratelimit: 6 callbacks suppressed [ 214.090118][ C0] TC_ACT_REPEAT abuse ? [ 214.092200][ T9676] __nla_validate_parse: 8 callbacks suppressed [ 214.092220][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 214.329853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.489568][ T9689] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 214.964056][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 215.130109][ C0] TC_ACT_REPEAT abuse ? [ 215.370641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.406930][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 215.838246][ T9743] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 216.065839][ T9761] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1219'. [ 216.170287][ C0] TC_ACT_REPEAT abuse ? [ 216.276228][ T9766] syzkaller0: entered promiscuous mode [ 216.276252][ T9766] syzkaller0: entered allmulticast mode [ 216.285675][ T9766] tipc: Started in network mode [ 216.285703][ T9766] tipc: Node identity 960b7d84c9ad, cluster identity 4711 [ 216.289223][ T9766] tipc: Enabled bearer , priority 0 [ 216.294202][ T9766] tipc: Resetting bearer [ 216.409917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.475482][ T9775] syzkaller1: entered promiscuous mode [ 216.475506][ T9775] syzkaller1: entered allmulticast mode [ 216.686471][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 216.779482][ T9796] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1233'. [ 216.779522][ T9796] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1233'. [ 216.922109][ T9807] xt_CONNSECMARK: invalid mode: 254 [ 217.149867][ T9817] openvswitch: netlink: IPv4 tun info is not correct [ 217.211772][ C0] TC_ACT_REPEAT abuse ? [ 217.230187][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.230359][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.230537][ T9819] bridge_slave_0: entered allmulticast mode [ 217.232384][ T9819] bridge_slave_0: entered promiscuous mode [ 217.261069][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.261169][ T9819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.322008][ T9824] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 217.407658][ T9834] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 217.449800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.500556][ T9841] FAULT_INJECTION: forcing a failure. [ 217.500556][ T9841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.500591][ T9841] CPU: 1 UID: 0 PID: 9841 Comm: syz.0.1249 Not tainted syzkaller #0 PREEMPT(full) [ 217.500616][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.500628][ T9841] Call Trace: [ 217.500636][ T9841] [ 217.500643][ T9841] dump_stack_lvl+0xe8/0x150 [ 217.500676][ T9841] should_fail_ex+0x410/0x560 [ 217.500704][ T9841] _copy_from_user+0x2d/0xb0 [ 217.500729][ T9841] ___sys_sendmsg+0x1c6/0x360 [ 217.500760][ T9841] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.500809][ T9841] ? vfs_write+0x9ce/0xba0 [ 217.500852][ T9841] ? do_sys_openat2+0x14e/0x200 [ 217.500883][ T9841] __x64_sys_sendmsg+0x1b1/0x290 [ 217.500911][ T9841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.500958][ T9841] do_syscall_64+0x166/0x520 [ 217.500983][ T9841] ? trace_irq_disable+0x3b/0x140 [ 217.501001][ T9841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.501019][ T9841] ? clear_bhb_loop+0x70/0xc0 [ 217.501040][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.501058][ T9841] RIP: 0033:0x7fdcc6b9e199 [ 217.501074][ T9841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.501091][ T9841] RSP: 002b:00007fdcc7a0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.501113][ T9841] RAX: ffffffffffffffda RBX: 00007fdcc6e25fa0 RCX: 00007fdcc6b9e199 [ 217.501126][ T9841] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000008 [ 217.501136][ T9841] RBP: 00007fdcc7a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 217.501148][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.501159][ T9841] R13: 00007fdcc6e26038 R14: 00007fdcc6e25fa0 R15: 00007ffc76f694f8 [ 217.501190][ T9841] [ 217.508743][ T9824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.552087][ T9842] netlink: 'syz.1.1250': attribute type 11 has an invalid length. [ 217.744253][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 217.749003][ T9847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 217.760410][ T9832] bond5: (slave veth11): Enslaving as an active interface with a down link [ 217.763063][ T9695] tipc: Node number set to 1604746628 [ 217.804304][ T9836] bond4: (slave macvlan0): Releasing active interface [ 217.834478][ T9836] bond5: (slave macvlan0): making interface the new active one [ 217.849244][ T9836] macvlan0: entered promiscuous mode [ 217.854789][ T9836] bond5: (slave macvlan0): Enslaving as an active interface with an up link [ 218.089906][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.113431][ T9856] dummy0 speed is unknown, defaulting to 1000 [ 218.236245][ T9876] FAULT_INJECTION: forcing a failure. [ 218.236245][ T9876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.236279][ T9876] CPU: 1 UID: 0 PID: 9876 Comm: syz.1.1257 Not tainted syzkaller #0 PREEMPT(full) [ 218.236302][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.236314][ T9876] Call Trace: [ 218.236321][ T9876] [ 218.236329][ T9876] dump_stack_lvl+0xe8/0x150 [ 218.236371][ T9876] should_fail_ex+0x410/0x560 [ 218.236397][ T9876] _copy_from_iter+0x1d3/0x1660 [ 218.236419][ T9876] ? __alloc_skb+0x27a/0x7a0 [ 218.236443][ T9876] ? __alloc_skb+0x27a/0x7a0 [ 218.236466][ T9876] ? __alloc_skb+0x27a/0x7a0 [ 218.236487][ T9876] ? __pfx__copy_from_iter+0x10/0x10 [ 218.236507][ T9876] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 218.236537][ T9876] ? __alloc_skb+0x27a/0x7a0 [ 218.236558][ T9876] ? __alloc_skb+0x27a/0x7a0 [ 218.236587][ T9876] ? netlink_sendmsg+0x650/0xb40 [ 218.236607][ T9876] ? skb_put+0x112/0x210 [ 218.236635][ T9876] netlink_sendmsg+0x6c0/0xb40 [ 218.236664][ T9876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.236691][ T9876] ? apparmor_socket_sendmsg+0x98/0x360 [ 218.236716][ T9876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.236735][ T9876] sock_sendmsg_nosec+0x14e/0x190 [ 218.236762][ T9876] ____sys_sendmsg+0x54e/0x850 [ 218.236791][ T9876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.236833][ T9876] ? import_iovec+0x73/0xa0 [ 218.236861][ T9876] ___sys_sendmsg+0x2a5/0x360 [ 218.236886][ T9876] ? __lock_acquire+0x747/0x2de0 [ 218.236911][ T9876] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.236970][ T9876] ? __fget_files+0x2a/0x420 [ 218.236996][ T9876] ? __fget_files+0x3a2/0x420 [ 218.237032][ T9876] __x64_sys_sendmsg+0x1b1/0x290 [ 218.237061][ T9876] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.237105][ T9876] do_syscall_64+0x166/0x520 [ 218.237131][ T9876] ? trace_irq_disable+0x3b/0x140 [ 218.237150][ T9876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.237169][ T9876] ? clear_bhb_loop+0x70/0xc0 [ 218.237191][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.237210][ T9876] RIP: 0033:0x7f917fb9e199 [ 218.237228][ T9876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.237246][ T9876] RSP: 002b:00007f91809d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.237267][ T9876] RAX: ffffffffffffffda RBX: 00007f917fe25fa0 RCX: 00007f917fb9e199 [ 218.237282][ T9876] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 218.237295][ T9876] RBP: 00007f91809d7090 R08: 0000000000000000 R09: 0000000000000000 [ 218.237307][ T9876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.237319][ T9876] R13: 00007f917fe26038 R14: 00007f917fe25fa0 R15: 00007ffc43662628 [ 218.237349][ T9876] [ 218.566988][ T9886] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1260'. [ 218.567012][ T9886] netlink: 'syz.3.1260': attribute type 1 has an invalid length. [ 218.567474][ T9885] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1260'. [ 218.567490][ T9885] netlink: 'syz.3.1260': attribute type 1 has an invalid length. [ 218.886251][ T9899] syzkaller1: entered promiscuous mode [ 218.886285][ T9899] syzkaller1: entered allmulticast mode [ 218.900466][ T9899] FAULT_INJECTION: forcing a failure. [ 218.900466][ T9899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.900499][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.0.1267 Not tainted syzkaller #0 PREEMPT(full) [ 218.900521][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.900532][ T9899] Call Trace: [ 218.900540][ T9899] [ 218.900548][ T9899] dump_stack_lvl+0xe8/0x150 [ 218.900580][ T9899] should_fail_ex+0x410/0x560 [ 218.900607][ T9899] _copy_from_iter+0x1d3/0x1660 [ 218.900638][ T9899] ? __lock_acquire+0x747/0x2de0 [ 218.900661][ T9899] ? __pfx__copy_from_iter+0x10/0x10 [ 218.900698][ T9899] tun_get_user+0x52f/0x44d0 [ 218.900733][ T9899] ? aa_file_perm+0x18b/0x15f0 [ 218.900764][ T9899] ? aa_file_perm+0x4ed/0x15f0 [ 218.900797][ T9899] ? __pfx_tun_get_user+0x10/0x10 [ 218.900820][ T9899] ? __lock_acquire+0x747/0x2de0 [ 218.900842][ T9899] ? kstrtoull+0x137/0x1d0 [ 218.900867][ T9899] ? ref_tracker_alloc+0x172/0x530 [ 218.900890][ T9899] ? lock_acquire+0x115/0x350 [ 218.900910][ T9899] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 218.900935][ T9899] ? lock_acquire+0x115/0x350 [ 218.900954][ T9899] ? tun_get+0x1c/0x2f0 [ 218.900979][ T9899] ? tun_get+0x1c/0x2f0 [ 218.900998][ T9899] ? tun_get+0x1c/0x2f0 [ 218.901022][ T9899] tun_chr_write_iter+0x113/0x200 [ 218.901044][ T9899] vfs_write+0x612/0xba0 [ 218.901082][ T9899] ? __pfx_vfs_write+0x10/0x10 [ 218.901119][ T9899] ? __fget_files+0x2a/0x420 [ 218.901153][ T9899] ksys_write+0x150/0x270 [ 218.901183][ T9899] ? __pfx_ksys_write+0x10/0x10 [ 218.901222][ T9899] do_syscall_64+0x166/0x520 [ 218.901249][ T9899] ? trace_irq_disable+0x3b/0x140 [ 218.901269][ T9899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.901288][ T9899] ? clear_bhb_loop+0x70/0xc0 [ 218.901311][ T9899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.901330][ T9899] RIP: 0033:0x7fdcc6b9e199 [ 218.901348][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.901364][ T9899] RSP: 002b:00007fdcc7a0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.901385][ T9899] RAX: ffffffffffffffda RBX: 00007fdcc6e25fa0 RCX: 00007fdcc6b9e199 [ 218.901398][ T9899] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 218.901411][ T9899] RBP: 00007fdcc7a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 218.901423][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.901434][ T9899] R13: 00007fdcc6e26038 R14: 00007fdcc6e25fa0 R15: 00007ffc76f694f8 [ 218.901464][ T9899] [ 218.912100][ T9901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 219.285138][ T9912] __nla_validate_parse: 1 callbacks suppressed [ 219.285161][ T9912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1268'. [ 219.290352][ C0] net_ratelimit: 4 callbacks suppressed [ 219.290372][ C0] TC_ACT_REPEAT abuse ? [ 219.416247][ T9919] ip6t_hbh: Not strict - not implemented [ 219.427616][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1272'. [ 219.539858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.678599][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 219.678625][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 219.678703][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 219.896030][ T9942] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1280'. [ 220.067414][ T9945] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 220.090000][ T5631] Bluetooth: hci4: command 0x0405 tx timeout [ 220.330684][ C0] TC_ACT_REPEAT abuse ? [ 220.424922][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 220.427442][ T9964] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 220.505879][ T9964] bond4 (unregistering): Released all slaves [ 220.569837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.959958][ T61] macvlan0: left promiscuous mode [ 221.004278][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1292'. [ 221.004315][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1292'. [ 221.045093][ T9990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1291'. [ 221.130883][ T9997] Cannot find map_set index 2 as target [ 221.243800][ T9999] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 221.371809][ C0] TC_ACT_REPEAT abuse ? [ 221.609763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.929560][T10033] netlink: 'syz.0.1309': attribute type 21 has an invalid length. [ 221.929623][T10033] netlink: 'syz.0.1309': attribute type 6 has an invalid length. [ 222.410900][ C0] TC_ACT_REPEAT abuse ? [ 222.649797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.685520][T10064] netlink: zone id is out of range [ 222.699899][T10064] netlink: zone id is out of range [ 223.117925][T10082] tipc: Can't bind to reserved service type 2 [ 223.822615][T10090] syzkaller0: entered promiscuous mode [ 223.822638][T10090] syzkaller0: entered allmulticast mode [ 223.855582][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 223.911426][T10090] tipc: Enabling of bearer rejected, already enabled [ 224.044322][T10103] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 224.083518][T10108] FAULT_INJECTION: forcing a failure. [ 224.083518][T10108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.083551][T10108] CPU: 1 UID: 0 PID: 10108 Comm: syz.1.1337 Not tainted syzkaller #0 PREEMPT(full) [ 224.083573][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.083585][T10108] Call Trace: [ 224.083593][T10108] [ 224.083602][T10108] dump_stack_lvl+0xe8/0x150 [ 224.083635][T10108] should_fail_ex+0x410/0x560 [ 224.083663][T10108] _copy_from_user+0x2d/0xb0 [ 224.083690][T10108] __sys_connect+0x155/0x450 [ 224.083717][T10108] ? __pfx___sys_connect+0x10/0x10 [ 224.083758][T10108] ? __pfx_ksys_write+0x10/0x10 [ 224.083796][T10108] __x64_sys_connect+0x7a/0x90 [ 224.083821][T10108] do_syscall_64+0x166/0x520 [ 224.083883][T10108] ? trace_irq_disable+0x3b/0x140 [ 224.083903][T10108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.083924][T10108] ? clear_bhb_loop+0x70/0xc0 [ 224.083948][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.083967][T10108] RIP: 0033:0x7f917fb9e199 [ 224.083986][T10108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.084005][T10108] RSP: 002b:00007f91809d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 224.084026][T10108] RAX: ffffffffffffffda RBX: 00007f917fe25fa0 RCX: 00007f917fb9e199 [ 224.084041][T10108] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000004 [ 224.084054][T10108] RBP: 00007f91809d7090 R08: 0000000000000000 R09: 0000000000000000 [ 224.084067][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.084079][T10108] R13: 00007f917fe26038 R14: 00007f917fe25fa0 R15: 00007ffc43662628 [ 224.084111][T10108] [ 225.047067][T10146] FAULT_INJECTION: forcing a failure. [ 225.047067][T10146] name failslab, interval 1, probability 0, space 0, times 0 [ 225.047102][T10146] CPU: 1 UID: 0 PID: 10146 Comm: syz.4.1353 Not tainted syzkaller #0 PREEMPT(full) [ 225.047125][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.047137][T10146] Call Trace: [ 225.047145][T10146] [ 225.047153][T10146] dump_stack_lvl+0xe8/0x150 [ 225.047185][T10146] should_fail_ex+0x410/0x560 [ 225.047211][T10146] ? __alloc_skb+0x1db/0x7a0 [ 225.047234][T10146] should_failslab+0xa8/0x100 [ 225.047256][T10146] ? __alloc_skb+0x1db/0x7a0 [ 225.047277][T10146] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 225.047309][T10146] ? tcp_fastopen_cache_get+0x2f/0x4c0 [ 225.047334][T10146] ? __alloc_skb+0x1db/0x7a0 [ 225.047363][T10146] __alloc_skb+0x1db/0x7a0 [ 225.047389][T10146] tcp_stream_alloc_skb+0x3f/0x580 [ 225.047411][T10146] ? skb_page_frag_refill+0x119/0x460 [ 225.047448][T10146] tcp_connect+0x25a1/0x54e0 [ 225.047492][T10146] ? lock_acquire+0x115/0x350 [ 225.047521][T10146] ? __pfx_tcp_connect+0x10/0x10 [ 225.047557][T10146] ? ktime_get_with_offset+0x93/0x2d0 [ 225.047576][T10146] ? seqcount_lockdep_reader_access+0xea/0x100 [ 225.047606][T10146] ? __asan_memset+0x22/0x50 [ 225.047630][T10146] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 225.047676][T10146] ? inet6_hash_connect+0xeb/0x170 [ 225.047706][T10146] tcp_v6_connect+0x14ed/0x1cf0 [ 225.047726][T10146] ? tcp_sendmsg_locked+0x4b02/0x5400 [ 225.047749][T10146] ? tcp_sendmsg+0x2f/0x50 [ 225.047788][T10146] ? __pfx_tcp_v6_connect+0x10/0x10 [ 225.047822][T10146] __inet_stream_connect+0x258/0xe00 [ 225.047858][T10146] ? __pfx___inet_stream_connect+0x10/0x10 [ 225.047881][T10146] ? __kasan_kmalloc+0x93/0xb0 [ 225.047906][T10146] ? __kmalloc_cache_noprof+0x321/0x600 [ 225.047927][T10146] ? __kmalloc_cache_noprof+0x14d/0x600 [ 225.047945][T10146] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 225.047979][T10146] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 225.048011][T10146] tcp_sendmsg_locked+0x4b02/0x5400 [ 225.048062][T10146] ? __lock_acquire+0x747/0x2de0 [ 225.048088][T10146] ? kstrtouint+0x6e/0xe0 [ 225.048111][T10146] ? lock_acquire+0x115/0x350 [ 225.048138][T10146] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 225.048173][T10146] ? tcp_sendmsg+0x21/0x50 [ 225.048200][T10146] ? __local_bh_enable_ip+0xd6/0x140 [ 225.048226][T10146] tcp_sendmsg+0x2f/0x50 [ 225.048249][T10146] ? __pfx_inet6_sendmsg+0x10/0x10 [ 225.048268][T10146] sock_sendmsg_nosec+0x90/0x190 [ 225.048292][T10146] __sys_sendto+0x408/0x5a0 [ 225.048316][T10146] ? ksys_write+0x1e6/0x270 [ 225.048349][T10146] ? __pfx___sys_sendto+0x10/0x10 [ 225.048371][T10146] ? __mutex_unlock_slowpath+0x731/0x900 [ 225.048430][T10146] ? __pfx_ksys_write+0x10/0x10 [ 225.048463][T10146] __x64_sys_sendto+0xde/0x100 [ 225.048490][T10146] do_syscall_64+0x166/0x520 [ 225.048518][T10146] ? trace_irq_disable+0x3b/0x140 [ 225.048537][T10146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.048566][T10146] ? clear_bhb_loop+0x70/0xc0 [ 225.048590][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.048609][T10146] RIP: 0033:0x7efe2099e199 [ 225.048628][T10146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.048645][T10146] RSP: 002b:00007efe217f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 225.048666][T10146] RAX: ffffffffffffffda RBX: 00007efe20c25fa0 RCX: 00007efe2099e199 [ 225.048681][T10146] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 225.048694][T10146] RBP: 00007efe217f5090 R08: 0000200000000140 R09: 000000000000001c [ 225.048707][T10146] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 225.048720][T10146] R13: 00007efe20c26038 R14: 00007efe20c25fa0 R15: 00007fff6ea0dcb8 [ 225.048752][T10146] [ 225.254410][T10151] FAULT_INJECTION: forcing a failure. [ 225.254410][T10151] name failslab, interval 1, probability 0, space 0, times 0 [ 225.254442][T10151] CPU: 1 UID: 0 PID: 10151 Comm: syz.0.1355 Not tainted syzkaller #0 PREEMPT(full) [ 225.254464][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.254476][T10151] Call Trace: [ 225.254483][T10151] [ 225.254491][T10151] dump_stack_lvl+0xe8/0x150 [ 225.254527][T10151] should_fail_ex+0x410/0x560 [ 225.254553][T10151] should_failslab+0xa8/0x100 [ 225.254579][T10151] __kmalloc_noprof+0xfe/0x720 [ 225.254599][T10151] ? sock_kmalloc+0xd6/0x160 [ 225.254624][T10151] ? sock_kmalloc+0xd6/0x160 [ 225.254655][T10151] sock_kmalloc+0xd6/0x160 [ 225.254685][T10151] ____sys_sendmsg+0x1be/0x850 [ 225.254717][T10151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.254751][T10151] ? import_iovec+0x73/0xa0 [ 225.254779][T10151] ___sys_sendmsg+0x2a5/0x360 [ 225.254804][T10151] ? __lock_acquire+0x747/0x2de0 [ 225.254828][T10151] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.254886][T10151] ? __fget_files+0x2a/0x420 [ 225.254911][T10151] ? __fget_files+0x3a2/0x420 [ 225.254947][T10151] __x64_sys_sendmsg+0x1b1/0x290 [ 225.254975][T10151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.255021][T10151] do_syscall_64+0x166/0x520 [ 225.255048][T10151] ? trace_irq_disable+0x3b/0x140 [ 225.255067][T10151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.255086][T10151] ? clear_bhb_loop+0x70/0xc0 [ 225.255109][T10151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.255128][T10151] RIP: 0033:0x7fdcc6b9e199 [ 225.255186][T10151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.255203][T10151] RSP: 002b:00007fdcc7a0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.255224][T10151] RAX: ffffffffffffffda RBX: 00007fdcc6e25fa0 RCX: 00007fdcc6b9e199 [ 225.255238][T10151] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 225.255250][T10151] RBP: 00007fdcc7a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 225.255262][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.255274][T10151] R13: 00007fdcc6e26038 R14: 00007fdcc6e25fa0 R15: 00007ffc76f694f8 [ 225.255304][T10151] [ 225.306884][T10153] __nla_validate_parse: 13 callbacks suppressed [ 225.306906][T10153] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1356'. [ 225.458404][T10158] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 225.584942][T10163] net_ratelimit: 118 callbacks suppressed [ 225.584962][T10163] ip_tables: iptables: counters copy to user failed while replacing table [ 226.218350][T10178] netlink: zone id is out of range [ 226.218365][T10178] netlink: zone id is out of range [ 226.218375][T10178] netlink: zone id is out of range [ 226.218383][T10178] netlink: zone id is out of range [ 226.218393][T10178] netlink: zone id is out of range [ 226.218407][T10178] netlink: zone id is out of range [ 226.218418][T10178] netlink: zone id is out of range [ 226.218429][T10178] netlink: zone id is out of range [ 226.218442][T10178] netlink: zone id is out of range [ 226.324086][T10181] FAULT_INJECTION: forcing a failure. [ 226.324086][T10181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.324123][T10181] CPU: 1 UID: 0 PID: 10181 Comm: syz.0.1364 Not tainted syzkaller #0 PREEMPT(full) [ 226.324145][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.324157][T10181] Call Trace: [ 226.324164][T10181] [ 226.324173][T10181] dump_stack_lvl+0xe8/0x150 [ 226.324206][T10181] should_fail_ex+0x410/0x560 [ 226.324235][T10181] _copy_to_iter+0x1e4/0x1810 [ 226.324256][T10181] ? sock_recvmsg+0x196/0x1e0 [ 226.324275][T10181] ? ____sys_recvmsg+0x1e6/0x4a0 [ 226.324300][T10181] ? ___sys_recvmsg+0x213/0x5a0 [ 226.324325][T10181] ? __x64_sys_recvmsg+0x1ae/0x290 [ 226.324366][T10181] ? __pfx__copy_to_iter+0x10/0x10 [ 226.324406][T10181] __skb_datagram_iter+0xf8/0x980 [ 226.324440][T10181] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 226.324471][T10181] ? do_raw_spin_lock+0x12b/0x2f0 [ 226.324504][T10181] skb_copy_datagram_iter+0xb5/0x240 [ 226.324543][T10181] unix_stream_read_actor+0x6c/0xb0 [ 226.324577][T10181] unix_stream_read_generic+0xa73/0x22e0 [ 226.324638][T10181] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 226.324668][T10181] ? __pfx_autoremove_wake_function+0x10/0x10 [ 226.324709][T10181] ? __lock_acquire+0x747/0x2de0 [ 226.324733][T10181] unix_stream_recvmsg+0x16b/0x1d0 [ 226.324755][T10181] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 226.324774][T10181] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 226.324805][T10181] ? aa_sock_msg_perm+0x129/0x210 [ 226.324834][T10181] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 226.324858][T10181] ? security_socket_recvmsg+0x7e/0x2c0 [ 226.324888][T10181] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 226.324908][T10181] sock_recvmsg+0x196/0x1e0 [ 226.324932][T10181] ____sys_recvmsg+0x1e6/0x4a0 [ 226.324967][T10181] ? __pfx_____sys_recvmsg+0x10/0x10 [ 226.325011][T10181] ? import_iovec+0x73/0xa0 [ 226.325039][T10181] ___sys_recvmsg+0x213/0x5a0 [ 226.325072][T10181] ? __pfx____sys_recvmsg+0x10/0x10 [ 226.325106][T10181] ? lock_acquire+0x115/0x350 [ 226.325143][T10181] ? __fget_files+0x3a2/0x420 [ 226.325181][T10181] __x64_sys_recvmsg+0x1ae/0x290 [ 226.325213][T10181] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 226.325262][T10181] do_syscall_64+0x166/0x520 [ 226.325290][T10181] ? trace_irq_disable+0x3b/0x140 [ 226.325310][T10181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.325327][T10181] ? clear_bhb_loop+0x70/0xc0 [ 226.325350][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.325369][T10181] RIP: 0033:0x7fdcc6b9e199 [ 226.325386][T10181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.325401][T10181] RSP: 002b:00007fdcc79a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 226.325419][T10181] RAX: ffffffffffffffda RBX: 00007fdcc6e26270 RCX: 00007fdcc6b9e199 [ 226.325432][T10181] RDX: 0000000040000300 RSI: 0000200000001140 RDI: 0000000000000005 [ 226.325444][T10181] RBP: 00007fdcc79a7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.325455][T10181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.325465][T10181] R13: 00007fdcc6e26308 R14: 00007fdcc6e26270 R15: 00007ffc76f694f8 [ 226.325493][T10181] [ 227.073970][T10192] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 227.090595][T10192] bond4 (unregistering): Released all slaves [ 227.215773][T10198] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 227.286290][T10198] bridge2: entered promiscuous mode [ 227.299963][T10198] bond6: (slave bridge2): making interface the new active one [ 227.300914][T10198] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 227.334500][T10198] bridge3: entered promiscuous mode [ 227.339046][T10198] bond6: (slave bridge3): Enslaving as a backup interface with an up link [ 227.396289][T10202] syzkaller1: entered promiscuous mode [ 227.396316][T10202] syzkaller1: entered allmulticast mode [ 227.524225][T10209] syzkaller1: entered promiscuous mode [ 227.524248][T10209] syzkaller1: entered allmulticast mode [ 227.671611][T10204] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1372'. [ 227.671648][T10204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1372'. [ 227.762551][T10224] FAULT_INJECTION: forcing a failure. [ 227.762551][T10224] name failslab, interval 1, probability 0, space 0, times 0 [ 227.762583][T10224] CPU: 1 UID: 0 PID: 10224 Comm: syz.1.1379 Not tainted syzkaller #0 PREEMPT(full) [ 227.762603][T10224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.762613][T10224] Call Trace: [ 227.762620][T10224] [ 227.762627][T10224] dump_stack_lvl+0xe8/0x150 [ 227.762657][T10224] should_fail_ex+0x410/0x560 [ 227.762684][T10224] should_failslab+0xa8/0x100 [ 227.762708][T10224] __kmalloc_cache_noprof+0xa3/0x600 [ 227.762727][T10224] ? sctp_inet6addr_event+0x358/0x710 [ 227.762748][T10224] ? sctp_inet6addr_event+0x358/0x710 [ 227.762776][T10224] sctp_inet6addr_event+0x358/0x710 [ 227.762801][T10224] ? ieee80211_ifa6_changed+0xd1/0x3c0 [ 227.762832][T10224] notifier_call_chain+0x1a5/0x3d0 [ 227.762863][T10224] ? atomic_notifier_call_chain+0x26/0x180 [ 227.762893][T10224] atomic_notifier_call_chain+0xda/0x180 [ 227.762922][T10224] ipv6_add_addr+0xe18/0x1110 [ 227.762946][T10224] ? __pfx_ipv6_add_addr+0x10/0x10 [ 227.762978][T10224] add_addr+0x8b/0x2d0 [ 227.763011][T10224] addrconf_notify+0xb1e/0x1050 [ 227.763039][T10224] notifier_call_chain+0x1a5/0x3d0 [ 227.763076][T10224] netif_state_change+0x27d/0x3a0 [ 227.763100][T10224] ? __pfx___dev_change_flags+0x10/0x10 [ 227.763125][T10224] ? __pfx_netif_state_change+0x10/0x10 [ 227.763151][T10224] ? netif_change_flags+0xde/0x1b0 [ 227.763180][T10224] do_setlink+0x3d64/0x47a0 [ 227.763206][T10224] ? lockdep_hardirqs_on+0x7b/0x110 [ 227.763242][T10224] ? __lock_acquire+0x747/0x2de0 [ 227.763265][T10224] ? __pfx_do_setlink+0x10/0x10 [ 227.763319][T10224] ? do_raw_spin_lock+0x12b/0x2f0 [ 227.763364][T10224] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 227.763396][T10224] ? __mutex_lock+0x1096/0x1550 [ 227.763429][T10224] ? __mutex_lock+0x5d4/0x1550 [ 227.763460][T10224] ? rtnl_newlink+0xc1d/0x1c30 [ 227.763509][T10224] ? __pfx___mutex_lock+0x10/0x10 [ 227.763544][T10224] ? ns_capable+0x89/0xe0 [ 227.763568][T10224] ? rtnl_nets_add+0x16c/0x300 [ 227.763592][T10224] ? refcount_inc+0x46/0x70 [ 227.763616][T10224] rtnl_newlink+0x147c/0x1c30 [ 227.763652][T10224] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.763674][T10224] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 227.763695][T10224] ? netlink_deliver_tap+0x19c/0x1b0 [ 227.763713][T10224] ? netlink_unicast+0x781/0x940 [ 227.763738][T10224] ? netlink_sendmsg+0x813/0xb40 [ 227.763756][T10224] ? sock_sendmsg_nosec+0x14e/0x190 [ 227.763773][T10224] ? ____sys_sendmsg+0x54e/0x850 [ 227.763797][T10224] ? ___sys_sendmsg+0x2a5/0x360 [ 227.763821][T10224] ? __x64_sys_sendmsg+0x1b1/0x290 [ 227.763845][T10224] ? do_syscall_64+0x166/0x520 [ 227.763872][T10224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.763929][T10224] ? kasan_quarantine_put+0xbb/0x1f0 [ 227.763950][T10224] ? lockdep_hardirqs_on+0x7b/0x110 [ 227.763982][T10224] ? nlmon_xmit+0xb0/0x100 [ 227.764001][T10224] ? kmem_cache_free+0x182/0x650 [ 227.764032][T10224] ? __lock_acquire+0x747/0x2de0 [ 227.764057][T10224] ? __dev_queue_xmit+0x29b/0x3920 [ 227.764087][T10224] ? __local_bh_enable_ip+0xd6/0x140 [ 227.764111][T10224] ? lockdep_hardirqs_on+0x7b/0x110 [ 227.764145][T10224] ? lock_acquire+0x115/0x350 [ 227.764164][T10224] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.764197][T10224] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.764220][T10224] rtnetlink_rcv_msg+0x802/0xc00 [ 227.764248][T10224] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 227.764271][T10224] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.764306][T10224] ? __copy_skb_header+0xa3/0x4a0 [ 227.764346][T10224] netlink_rcv_skb+0x226/0x4a0 [ 227.764367][T10224] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.764393][T10224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.764426][T10224] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.764445][T10224] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.764472][T10224] netlink_unicast+0x7bd/0x940 [ 227.764513][T10224] netlink_sendmsg+0x813/0xb40 [ 227.764543][T10224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.764573][T10224] ? apparmor_socket_sendmsg+0x98/0x360 [ 227.764599][T10224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.764619][T10224] sock_sendmsg_nosec+0x14e/0x190 [ 227.764642][T10224] ____sys_sendmsg+0x54e/0x850 [ 227.764675][T10224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.764712][T10224] ? import_iovec+0x73/0xa0 [ 227.764741][T10224] ___sys_sendmsg+0x2a5/0x360 [ 227.764767][T10224] ? __lock_acquire+0x747/0x2de0 [ 227.764791][T10224] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.764855][T10224] ? __fget_files+0x2a/0x420 [ 227.764881][T10224] ? __fget_files+0x3a2/0x420 [ 227.764919][T10224] __x64_sys_sendmsg+0x1b1/0x290 [ 227.764950][T10224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.765000][T10224] do_syscall_64+0x166/0x520 [ 227.765028][T10224] ? trace_irq_disable+0x3b/0x140 [ 227.765048][T10224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.765068][T10224] ? clear_bhb_loop+0x70/0xc0 [ 227.765091][T10224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.765111][T10224] RIP: 0033:0x7f917fb9e199 [ 227.765130][T10224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.765148][T10224] RSP: 002b:00007f91809d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.765169][T10224] RAX: ffffffffffffffda RBX: 00007f917fe25fa0 RCX: 00007f917fb9e199 [ 227.765183][T10224] RDX: 0000000004004090 RSI: 0000200000000280 RDI: 0000000000000003 [ 227.765195][T10224] RBP: 00007f91809d7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.765207][T10224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.765219][T10224] R13: 00007f917fe26038 R14: 00007f917fe25fa0 R15: 00007ffc43662628 [ 227.765252][T10224] [ 228.198589][T10232] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 228.486834][T10247] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 228.648086][T10253] netlink: 'syz.0.1386': attribute type 10 has an invalid length. [ 228.648112][T10253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1386'. [ 228.719668][T10255] xt_addrtype: ipv6 does not support BROADCAST matching [ 229.366527][T10247] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 229.380810][T10253] dummy0: entered promiscuous mode [ 229.386503][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'. [ 229.410447][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1389'. [ 229.511613][ T13] macvlan0: left promiscuous mode [ 229.751439][T10281] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 229.773519][ T10] dummy0 speed is unknown, defaulting to 1000 [ 229.784040][T10275] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1395'. [ 229.784167][T10276] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1395'. [ 229.900222][T10285] syzkaller1: entered promiscuous mode [ 229.900246][T10285] syzkaller1: entered allmulticast mode [ 230.013209][T10294] dummy0 speed is unknown, defaulting to 1000 [ 230.105773][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1399'. [ 230.187254][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 230.375453][T10312] FAULT_INJECTION: forcing a failure. [ 230.375453][T10312] name failslab, interval 1, probability 0, space 0, times 0 [ 230.375484][T10312] CPU: 0 UID: 0 PID: 10312 Comm: syz.2.1402 Not tainted syzkaller #0 PREEMPT(full) [ 230.375507][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.375518][T10312] Call Trace: [ 230.375526][T10312] [ 230.375533][T10312] dump_stack_lvl+0xe8/0x150 [ 230.375571][T10312] should_fail_ex+0x410/0x560 [ 230.375596][T10312] should_failslab+0xa8/0x100 [ 230.375620][T10312] __kvmalloc_node_noprof+0x176/0x820 [ 230.375641][T10312] ? __kvmalloc_node_noprof+0x345/0x820 [ 230.375659][T10312] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 230.375697][T10312] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 230.375723][T10312] bpf_compute_subprog_arg_access+0x187/0x14d0 [ 230.375743][T10312] ? bpf_tracing_func_proto+0x72/0x180 [ 230.375788][T10312] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 230.375817][T10312] ? __kvmalloc_node_noprof+0x345/0x820 [ 230.375835][T10312] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 230.375855][T10312] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 230.375885][T10312] bpf_compute_live_registers+0x8d3/0x1ff0 [ 230.375923][T10312] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 230.375955][T10312] bpf_check+0x2746/0x2ef0 [ 230.375993][T10312] ? __pfx_bpf_check+0x10/0x10 [ 230.376018][T10312] ? bpf_obj_name_cpy+0x194/0x1e0 [ 230.376048][T10312] bpf_prog_load+0x14d6/0x1c20 [ 230.376083][T10312] ? __pfx_bpf_prog_load+0x10/0x10 [ 230.376130][T10312] __sys_bpf+0xd0d/0xd90 [ 230.376158][T10312] ? __pfx___sys_bpf+0x10/0x10 [ 230.376191][T10312] ? __fget_files+0x2a/0x420 [ 230.376235][T10312] ? ksys_write+0x242/0x270 [ 230.376267][T10312] ? __pfx_ksys_write+0x10/0x10 [ 230.376301][T10312] __x64_sys_bpf+0xba/0xd0 [ 230.376324][T10312] do_syscall_64+0x166/0x520 [ 230.376351][T10312] ? trace_irq_disable+0x3b/0x140 [ 230.376371][T10312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.376391][T10312] ? clear_bhb_loop+0x70/0xc0 [ 230.376415][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.376433][T10312] RIP: 0033:0x7ff6eeb9e199 [ 230.376452][T10312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.376469][T10312] RSP: 002b:00007ff6ef9f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.376490][T10312] RAX: ffffffffffffffda RBX: 00007ff6eee25fa0 RCX: 00007ff6eeb9e199 [ 230.376516][T10312] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 230.376529][T10312] RBP: 00007ff6ef9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 230.376548][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.376561][T10312] R13: 00007ff6eee26038 R14: 00007ff6eee25fa0 R15: 00007ffd7146a928 [ 230.376592][T10312] [ 231.152556][T10339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 231.221414][T10337] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 231.239196][T10347] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.246604][T10347] net_ratelimit: 49 callbacks suppressed [ 231.246626][T10347] netlink: NAT attribute has 5 unknown bytes [ 231.246650][T10347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.316247][T10342] dummy0 speed is unknown, defaulting to 1000 [ 231.514586][T10356] siw: device registration error -23 [ 231.536488][T10363] siw: device registration error -23 [ 231.601164][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 231.746588][T10374] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 231.830243][T10379] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1419'. [ 231.901652][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 231.967421][T10386] netlink: zone id is out of range [ 231.967438][T10386] netlink: zone id is out of range [ 231.967448][T10386] netlink: zone id is out of range [ 231.967455][T10386] netlink: zone id is out of range [ 231.967465][T10386] netlink: zone id is out of range [ 231.967478][T10386] netlink: zone id is out of range [ 231.967490][T10386] netlink: zone id is out of range [ 231.967500][T10386] netlink: zone id is out of range [ 232.239130][T10399] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (32769) ! [ 232.312142][T10357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.424023][T10402] dummy0 speed is unknown, defaulting to 1000 [ 232.522513][T10410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 233.609226][T10452] dummy0 speed is unknown, defaulting to 1000 [ 233.679640][T10459] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 234.166221][T10483] : renamed from bond_slave_0 [ 234.173642][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1450'. [ 234.455982][T10492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1454'. [ 234.544890][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1461'. [ 234.694845][T10505] syzkaller1: entered promiscuous mode [ 234.694870][T10505] syzkaller1: entered allmulticast mode [ 234.761929][T10511] dummy0 speed is unknown, defaulting to 1000 [ 235.328203][T10530] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1467'. [ 235.379090][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 235.791360][T10544] FAULT_INJECTION: forcing a failure. [ 235.791360][T10544] name failslab, interval 1, probability 0, space 0, times 0 [ 235.791396][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.0.1472 Not tainted syzkaller #0 PREEMPT(full) [ 235.791418][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.791446][T10544] Call Trace: [ 235.791454][T10544] [ 235.791463][T10544] dump_stack_lvl+0xe8/0x150 [ 235.791496][T10544] should_fail_ex+0x410/0x560 [ 235.791524][T10544] should_failslab+0xa8/0x100 [ 235.791549][T10544] ? skb_clone+0x212/0x3a0 [ 235.791577][T10544] kmem_cache_alloc_noprof+0xa1/0x600 [ 235.791618][T10544] ? skb_clone+0x212/0x3a0 [ 235.791652][T10544] skb_clone+0x212/0x3a0 [ 235.791687][T10544] __netlink_deliver_tap+0x355/0x6e0 [ 235.791719][T10544] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.791742][T10544] netlink_deliver_tap+0x19c/0x1b0 [ 235.791763][T10544] netlink_unicast+0x781/0x940 [ 235.791803][T10544] netlink_sendmsg+0x813/0xb40 [ 235.791833][T10544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.791863][T10544] ? apparmor_socket_sendmsg+0x98/0x360 [ 235.791885][T10544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.791904][T10544] sock_sendmsg_nosec+0x14e/0x190 [ 235.791927][T10544] ____sys_sendmsg+0x54e/0x850 [ 235.791960][T10544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.791996][T10544] ? import_iovec+0x73/0xa0 [ 235.792025][T10544] ___sys_sendmsg+0x2a5/0x360 [ 235.792051][T10544] ? __lock_acquire+0x747/0x2de0 [ 235.792076][T10544] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.792138][T10544] ? __fget_files+0x2a/0x420 [ 235.792165][T10544] ? __fget_files+0x3a2/0x420 [ 235.792203][T10544] __x64_sys_sendmsg+0x1b1/0x290 [ 235.792233][T10544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.792282][T10544] do_syscall_64+0x166/0x520 [ 235.792311][T10544] ? trace_irq_disable+0x3b/0x140 [ 235.792330][T10544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.792351][T10544] ? clear_bhb_loop+0x70/0xc0 [ 235.792375][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.792395][T10544] RIP: 0033:0x7fdcc6b9e199 [ 235.792413][T10544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.792431][T10544] RSP: 002b:00007fdcc7a0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.792451][T10544] RAX: ffffffffffffffda RBX: 00007fdcc6e25fa0 RCX: 00007fdcc6b9e199 [ 235.792466][T10544] RDX: 0000000000000040 RSI: 0000200000000b40 RDI: 0000000000000005 [ 235.792479][T10544] RBP: 00007fdcc7a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 235.792491][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.792503][T10544] R13: 00007fdcc6e26038 R14: 00007fdcc6e25fa0 R15: 00007ffc76f694f8 [ 235.792535][T10544] [ 235.915940][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1473'. [ 236.222925][T10556] dummy0 speed is unknown, defaulting to 1000 [ 236.250154][T10559] net_ratelimit: 73 callbacks suppressed [ 236.250176][T10559] netlink: NAT attribute has 5 unknown bytes [ 236.250202][T10559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.466746][T10573] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 236.466770][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'. [ 236.504876][T10579] ip_tables: iptables: counters copy to user failed while replacing table [ 237.953452][T10628] openvswitch: netlink: IPv4 tun info is not correct [ 238.127809][T10640] FAULT_INJECTION: forcing a failure. [ 238.127809][T10640] name failslab, interval 1, probability 0, space 0, times 0 [ 238.127867][T10640] CPU: 1 UID: 0 PID: 10640 Comm: syz.4.1503 Not tainted syzkaller #0 PREEMPT(full) [ 238.127889][T10640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.127901][T10640] Call Trace: [ 238.127909][T10640] [ 238.127918][T10640] dump_stack_lvl+0xe8/0x150 [ 238.127949][T10640] should_fail_ex+0x410/0x560 [ 238.127977][T10640] should_failslab+0xa8/0x100 [ 238.128004][T10640] __kmalloc_cache_noprof+0xa3/0x600 [ 238.128025][T10640] ? nsim_fib_event_nb+0x185/0x11d0 [ 238.128046][T10640] ? nsim_fib_event_nb+0x185/0x11d0 [ 238.128071][T10640] nsim_fib_event_nb+0x185/0x11d0 [ 238.128093][T10640] ? lock_acquire+0x115/0x350 [ 238.128119][T10640] notifier_call_chain+0x1a5/0x3d0 [ 238.128151][T10640] ? atomic_notifier_call_chain+0x26/0x180 [ 238.128181][T10640] atomic_notifier_call_chain+0xda/0x180 [ 238.128210][T10640] call_fib_notifiers+0x31/0x60 [ 238.128237][T10640] fib6_del+0xf72/0x15a0 [ 238.128262][T10640] ? fib6_del+0x1151/0x15a0 [ 238.128298][T10640] ? __pfx_fib6_del+0x10/0x10 [ 238.128318][T10640] ? lock_acquire+0x115/0x350 [ 238.128345][T10640] ? fib6_ifdown+0x2c2/0x4c0 [ 238.128372][T10640] fib6_clean_node+0x297/0x580 [ 238.128401][T10640] ? __pfx_fib6_clean_node+0x10/0x10 [ 238.128436][T10640] fib6_walk_continue+0x688/0x8e0 [ 238.128471][T10640] __fib6_clean_all+0x37b/0x5d0 [ 238.128495][T10640] ? __fib6_clean_all+0xb8/0x5d0 [ 238.128520][T10640] ? __pfx_fib6_ifdown+0x10/0x10 [ 238.128542][T10640] ? __pfx___fib6_clean_all+0x10/0x10 [ 238.128568][T10640] ? __pfx_fib6_clean_node+0x10/0x10 [ 238.128590][T10640] ? __pfx_fib6_ifdown+0x10/0x10 [ 238.128619][T10640] ? __mutex_trylock_common+0x15f/0x270 [ 238.128645][T10640] rt6_disable_ip+0x149/0x7e0 [ 238.128670][T10640] ? rcu_is_watching+0x16/0xb0 [ 238.128691][T10640] ? trace_contention_end+0x3d/0x140 [ 238.128714][T10640] ? __pfx_rt6_disable_ip+0x10/0x10 [ 238.128747][T10640] addrconf_ifdown+0x155/0x1ad0 [ 238.128768][T10640] ? __mutex_unlock_slowpath+0x731/0x900 [ 238.128797][T10640] ? net_generic+0x1e/0x240 [ 238.128816][T10640] ? __pfx_addrconf_ifdown+0x10/0x10 [ 238.128838][T10640] ? net_generic+0x1e/0x240 [ 238.128873][T10640] addrconf_notify+0x1bc/0x1050 [ 238.128901][T10640] notifier_call_chain+0x1a5/0x3d0 [ 238.128934][T10640] netif_set_mtu_ext+0x5ac/0x830 [ 238.128963][T10640] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 238.128999][T10640] ? validate_linkmsg+0x809/0xa50 [ 238.129023][T10640] do_setlink+0xa81/0x47a0 [ 238.129045][T10640] ? unwind_get_return_address+0x4d/0x90 [ 238.129079][T10640] ? __pfx_do_setlink+0x10/0x10 [ 238.129102][T10640] ? __lock_acquire+0x747/0x2de0 [ 238.129131][T10640] ? kasan_save_track+0x4f/0x80 [ 238.129148][T10640] ? kasan_save_track+0x3e/0x80 [ 238.129164][T10640] ? __kasan_kmalloc+0x93/0xb0 [ 238.129181][T10640] ? __kmalloc_cache_noprof+0x321/0x600 [ 238.129208][T10640] ? __mutex_trylock_common+0x15f/0x270 [ 238.129232][T10640] ? __pfx___mutex_trylock_common+0x10/0x10 [ 238.129257][T10640] ? rcu_is_watching+0x16/0xb0 [ 238.129277][T10640] ? trace_contention_end+0x3d/0x140 [ 238.129300][T10640] ? __mutex_lock+0x30b/0x1550 [ 238.129334][T10640] ? rtnl_newlink+0xc1d/0x1c30 [ 238.129358][T10640] ? __pfx___mutex_lock+0x10/0x10 [ 238.129392][T10640] ? ns_capable+0x89/0xe0 [ 238.129414][T10640] ? rtnl_nets_add+0x16c/0x300 [ 238.129436][T10640] ? refcount_inc+0x46/0x70 [ 238.129456][T10640] rtnl_newlink+0x147c/0x1c30 [ 238.129494][T10640] ? __pfx_rtnl_newlink+0x10/0x10 [ 238.129514][T10640] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 238.129531][T10640] ? netlink_deliver_tap+0x19c/0x1b0 [ 238.129547][T10640] ? netlink_unicast+0x781/0x940 [ 238.129569][T10640] ? netlink_sendmsg+0x813/0xb40 [ 238.129586][T10640] ? sock_sendmsg_nosec+0x14e/0x190 [ 238.129602][T10640] ? ____sys_sendmsg+0x54e/0x850 [ 238.129623][T10640] ? ___sys_sendmsg+0x2a5/0x360 [ 238.129644][T10640] ? __x64_sys_sendmsg+0x1b1/0x290 [ 238.129665][T10640] ? do_syscall_64+0x166/0x520 [ 238.129688][T10640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.129738][T10640] ? kasan_quarantine_put+0xbb/0x1f0 [ 238.129757][T10640] ? lockdep_hardirqs_on+0x7b/0x110 [ 238.129786][T10640] ? nlmon_xmit+0xb0/0x100 [ 238.129804][T10640] ? kmem_cache_free+0x182/0x650 [ 238.129831][T10640] ? __lock_acquire+0x747/0x2de0 [ 238.129868][T10640] ? __dev_queue_xmit+0x29b/0x3920 [ 238.129901][T10640] ? __local_bh_enable_ip+0xd6/0x140 [ 238.129927][T10640] ? lockdep_hardirqs_on+0x7b/0x110 [ 238.129964][T10640] ? lock_acquire+0x115/0x350 [ 238.129985][T10640] ? __pfx_rtnl_newlink+0x10/0x10 [ 238.130023][T10640] ? __pfx_rtnl_newlink+0x10/0x10 [ 238.130047][T10640] rtnetlink_rcv_msg+0x802/0xc00 [ 238.130077][T10640] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 238.130102][T10640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.130130][T10640] ? __copy_skb_header+0xa3/0x4a0 [ 238.130171][T10640] netlink_rcv_skb+0x226/0x4a0 [ 238.130193][T10640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.130220][T10640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.130253][T10640] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.130273][T10640] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.130299][T10640] netlink_unicast+0x7bd/0x940 [ 238.130341][T10640] netlink_sendmsg+0x813/0xb40 [ 238.130372][T10640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.130402][T10640] ? apparmor_socket_sendmsg+0x98/0x360 [ 238.130429][T10640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.130449][T10640] sock_sendmsg_nosec+0x14e/0x190 [ 238.130473][T10640] ____sys_sendmsg+0x54e/0x850 [ 238.130506][T10640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.130544][T10640] ? import_iovec+0x73/0xa0 [ 238.130573][T10640] ___sys_sendmsg+0x2a5/0x360 [ 238.130598][T10640] ? __lock_acquire+0x747/0x2de0 [ 238.130621][T10640] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.130682][T10640] ? __fget_files+0x2a/0x420 [ 238.130709][T10640] ? __fget_files+0x3a2/0x420 [ 238.130748][T10640] __x64_sys_sendmsg+0x1b1/0x290 [ 238.130779][T10640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.130830][T10640] do_syscall_64+0x166/0x520 [ 238.130870][T10640] ? trace_irq_disable+0x3b/0x140 [ 238.130890][T10640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.130910][T10640] ? clear_bhb_loop+0x70/0xc0 [ 238.130935][T10640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.130955][T10640] RIP: 0033:0x7efe2099e199 [ 238.130975][T10640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.130992][T10640] RSP: 002b:00007efe217f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.131013][T10640] RAX: ffffffffffffffda RBX: 00007efe20c25fa0 RCX: 00007efe2099e199 [ 238.131028][T10640] RDX: 0000000004004090 RSI: 0000200000000280 RDI: 0000000000000003 [ 238.131041][T10640] RBP: 00007efe217f5090 R08: 0000000000000000 R09: 0000000000000000 [ 238.131054][T10640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.131066][T10640] R13: 00007efe20c26038 R14: 00007efe20c25fa0 R15: 00007fff6ea0dcb8 [ 238.131101][T10640] [ 238.760277][T10652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1507'. [ 238.760313][T10652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1507'. [ 239.006356][T10661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.490295][T10676] netlink: 'syz.3.1515': attribute type 1 has an invalid length. [ 239.708798][T10686] FAULT_INJECTION: forcing a failure. [ 239.708798][T10686] name failslab, interval 1, probability 0, space 0, times 0 [ 239.708834][T10686] CPU: 0 UID: 0 PID: 10686 Comm: syz.2.1519 Not tainted syzkaller #0 PREEMPT(full) [ 239.708855][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.708867][T10686] Call Trace: [ 239.708875][T10686] [ 239.708883][T10686] dump_stack_lvl+0xe8/0x150 [ 239.708915][T10686] should_fail_ex+0x410/0x560 [ 239.708942][T10686] ? __alloc_skb+0x1db/0x7a0 [ 239.708966][T10686] should_failslab+0xa8/0x100 [ 239.708991][T10686] ? __alloc_skb+0x1db/0x7a0 [ 239.709013][T10686] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 239.709043][T10686] ? __alloc_skb+0x18d/0x7a0 [ 239.709067][T10686] ? __alloc_skb+0x1db/0x7a0 [ 239.709097][T10686] __alloc_skb+0x1db/0x7a0 [ 239.709125][T10686] netlink_ack+0x136/0xb30 [ 239.709144][T10686] ? kasan_quarantine_put+0xbb/0x1f0 [ 239.709165][T10686] ? lockdep_hardirqs_on+0x7b/0x110 [ 239.709208][T10686] nfnetlink_rcv+0x260c/0x28c0 [ 239.709273][T10686] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 239.709337][T10686] ? skb_clone+0x246/0x3a0 [ 239.709375][T10686] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.709393][T10686] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.709416][T10686] netlink_unicast+0x7bd/0x940 [ 239.709456][T10686] netlink_sendmsg+0x813/0xb40 [ 239.709486][T10686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.709514][T10686] ? apparmor_socket_sendmsg+0x98/0x360 [ 239.709539][T10686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.709559][T10686] sock_sendmsg_nosec+0x14e/0x190 [ 239.709583][T10686] ____sys_sendmsg+0x54e/0x850 [ 239.709615][T10686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.709652][T10686] ? import_iovec+0x73/0xa0 [ 239.709683][T10686] ___sys_sendmsg+0x2a5/0x360 [ 239.709704][T10686] ? __lock_acquire+0x747/0x2de0 [ 239.709728][T10686] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.709785][T10686] ? __fget_files+0x2a/0x420 [ 239.709812][T10686] ? __fget_files+0x3a2/0x420 [ 239.709849][T10686] __x64_sys_sendmsg+0x1b1/0x290 [ 239.709879][T10686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.709926][T10686] do_syscall_64+0x166/0x520 [ 239.709952][T10686] ? trace_irq_disable+0x3b/0x140 [ 239.709970][T10686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.709990][T10686] ? clear_bhb_loop+0x70/0xc0 [ 239.710015][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.710035][T10686] RIP: 0033:0x7ff6eeb9e199 [ 239.710054][T10686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.710071][T10686] RSP: 002b:00007ff6ef9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.710093][T10686] RAX: ffffffffffffffda RBX: 00007ff6eee25fa0 RCX: 00007ff6eeb9e199 [ 239.710108][T10686] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 239.710121][T10686] RBP: 00007ff6ef9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 239.710134][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.710146][T10686] R13: 00007ff6eee26038 R14: 00007ff6eee25fa0 R15: 00007ffd7146a928 [ 239.710178][T10686] [ 240.098072][T10693] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1521'. [ 240.455704][T10715] sctp: [Deprecated]: syz.0.1526 (pid 10715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.455704][T10715] Use struct sctp_sack_info instead [ 240.457122][T10717] sctp: [Deprecated]: syz.0.1526 (pid 10717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.457122][T10717] Use struct sctp_sack_info instead [ 240.578267][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'. [ 241.425313][T10735] openvswitch: netlink: Unknown key attributes 2 [ 241.493175][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1538'. [ 241.556515][T10740] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1538'. [ 241.852959][T10763] SET target dimension over the limit! [ 241.867062][T10757] xt_CT: No such helper "syz1" [ 241.868468][T10758] bond0: (slave syz_tun): Releasing backup interface [ 241.943494][T10758] bridge_slave_0: left allmulticast mode [ 241.943523][T10758] bridge_slave_0: left promiscuous mode [ 241.943746][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.020885][T10758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 242.105555][T10770] openvswitch: netlink: Unknown key attributes 2 [ 242.611759][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1550'. [ 242.617536][T10791] macsec0: entered promiscuous mode [ 242.645581][T10789] macsec0: left promiscuous mode [ 242.743566][T10796] openvswitch: netlink: Unknown key attributes 2 [ 242.808805][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 243.167809][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1566'. [ 243.579167][T10822] x_tables: duplicate underflow at hook 1 [ 243.935365][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'. [ 244.013066][T10831] openvswitch: netlink: Unknown key attributes 2 [ 244.065014][T10834] xt_nfacct: accounting object `' does not exist [ 244.145056][T10841] syzkaller0: left promiscuous mode [ 244.145089][T10841] syzkaller0: left allmulticast mode [ 244.212913][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1576'. [ 244.849496][T10869] openvswitch: netlink: Unknown key attributes 2 [ 245.169210][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'. [ 245.207682][T10883] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1587'. [ 245.208286][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 245.212240][ T995] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.212342][ T995] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.212375][ T995] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.212408][ T995] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.223968][T10882] batman_adv: batadv0: Adding interface: virt_wifi0 [ 245.223986][T10882] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.224088][T10882] batman_adv: batadv0: Interface activated: virt_wifi0 [ 245.387011][T10884] sctp: [Deprecated]: syz.2.1588 (pid 10884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.387011][T10884] Use struct sctp_sack_info instead [ 245.488467][T10895] block nbd0: shutting down sockets [ 245.790600][T10903] openvswitch: netlink: Unknown key attributes 2 [ 245.901258][T10907] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1598'. [ 246.308550][T10927] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 246.833127][T10960] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1617'. [ 247.016931][T10971] netlink: zone id is out of range [ 247.016950][T10971] netlink: zone id is out of range [ 247.016983][T10971] netlink: zone id is out of range [ 247.016998][T10971] netlink: zone id is out of range [ 247.017009][T10971] netlink: zone id is out of range [ 247.017018][T10971] netlink: zone id is out of range [ 247.017031][T10971] netlink: zone id is out of range [ 247.017040][T10971] netlink: zone id is out of range [ 247.017056][T10971] netlink: zone id is out of range [ 247.017065][T10971] netlink: zone id is out of range [ 247.337189][T10985] FAULT_INJECTION: forcing a failure. [ 247.337189][T10985] name failslab, interval 1, probability 0, space 0, times 0 [ 247.337223][T10985] CPU: 1 UID: 0 PID: 10985 Comm: syz.2.1627 Not tainted syzkaller #0 PREEMPT(full) [ 247.337245][T10985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.337257][T10985] Call Trace: [ 247.337264][T10985] [ 247.337273][T10985] dump_stack_lvl+0xe8/0x150 [ 247.337305][T10985] should_fail_ex+0x410/0x560 [ 247.337334][T10985] should_failslab+0xa8/0x100 [ 247.337358][T10985] ? sctp_get_port_local+0x6bd/0x1700 [ 247.337384][T10985] kmem_cache_alloc_noprof+0xa1/0x600 [ 247.337411][T10985] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.337438][T10985] ? sctp_get_port_local+0x6bd/0x1700 [ 247.337471][T10985] sctp_get_port_local+0x6bd/0x1700 [ 247.337496][T10985] ? lock_acquire+0x115/0x350 [ 247.337528][T10985] ? __pfx_sctp_get_port_local+0x10/0x10 [ 247.337555][T10985] ? sctp_bind_addr_match+0x30/0x2b0 [ 247.337576][T10985] ? sctp_bind_addr_match+0x28b/0x2b0 [ 247.337602][T10985] sctp_do_bind+0x4d9/0x9a0 [ 247.337638][T10985] sctp_connect_new_asoc+0x270/0x6b0 [ 247.337668][T10985] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 247.337701][T10985] ? __local_bh_enable_ip+0xd6/0x140 [ 247.337725][T10985] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 247.337753][T10985] ? security_sctp_bind_connect+0x7e/0x2c0 [ 247.337778][T10985] sctp_sendmsg+0x159b/0x2d00 [ 247.337817][T10985] ? __pfx_sctp_sendmsg+0x10/0x10 [ 247.337865][T10985] ? aa_sock_msg_perm+0xf5/0x210 [ 247.337892][T10985] ? sock_rps_record_flow+0x19/0x350 [ 247.337926][T10985] ? inet_sendmsg+0x298/0x320 [ 247.337950][T10985] ? __pfx_inet_sendmsg+0x10/0x10 [ 247.337970][T10985] sock_sendmsg_nosec+0x10f/0x190 [ 247.337995][T10985] ____sys_sendmsg+0x54e/0x850 [ 247.338036][T10985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.338073][T10985] ? import_iovec+0x73/0xa0 [ 247.338103][T10985] ___sys_sendmsg+0x2a5/0x360 [ 247.338129][T10985] ? __lock_acquire+0x747/0x2de0 [ 247.338154][T10985] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.338211][T10985] ? __fget_files+0x2a/0x420 [ 247.338237][T10985] ? __fget_files+0x3a2/0x420 [ 247.338275][T10985] __x64_sys_sendmsg+0x1b1/0x290 [ 247.338305][T10985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.338355][T10985] do_syscall_64+0x166/0x520 [ 247.338384][T10985] ? trace_irq_disable+0x3b/0x140 [ 247.338403][T10985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.338423][T10985] ? clear_bhb_loop+0x70/0xc0 [ 247.338447][T10985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.338467][T10985] RIP: 0033:0x7ff6eeb9e199 [ 247.338485][T10985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.338502][T10985] RSP: 002b:00007ff6ef9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.338523][T10985] RAX: ffffffffffffffda RBX: 00007ff6eee25fa0 RCX: 00007ff6eeb9e199 [ 247.338538][T10985] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 247.338551][T10985] RBP: 00007ff6ef9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 247.338564][T10985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.338576][T10985] R13: 00007ff6eee26038 R14: 00007ff6eee25fa0 R15: 00007ffd7146a928 [ 247.338609][T10985] [ 247.626255][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1630'. [ 247.746272][T10998] netlink: 79 bytes leftover after parsing attributes in process `syz.2.1629'. [ 248.809926][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.980389][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 249.602971][T11063] xt_TCPMSS: Only works on TCP SYN packets [ 249.805057][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 250.125366][T11088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.125382][T11088] IPv6: NLM_F_CREATE should be set when creating new route [ 250.126855][T11088] IPv6: NLM_F_CREATE should be set when creating new route [ 250.150751][T11088] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1668'. [ 250.158740][T11092] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1669'. [ 250.200376][T11092] tipc: Resetting bearer [ 250.298181][T11092] tipc: Disabling bearer [ 250.423625][ T38] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.424420][ T38] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.424464][ T38] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.424496][ T38] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.424789][T11102] hsr0: entered allmulticast mode [ 250.424808][T11102] hsr_slave_0: entered allmulticast mode [ 250.424826][T11102] hsr_slave_1: entered allmulticast mode [ 250.549041][T11102] hsr0: left allmulticast mode [ 250.549066][T11102] hsr_slave_0: left allmulticast mode [ 250.549085][T11102] hsr_slave_1: left allmulticast mode [ 250.677036][T11121] netlink: 'syz.1.1678': attribute type 11 has an invalid length. [ 250.878614][T11132] syzkaller0: left promiscuous mode [ 250.878638][T11132] syzkaller0: left allmulticast mode [ 251.571425][T11180] FAULT_INJECTION: forcing a failure. [ 251.571425][T11180] name failslab, interval 1, probability 0, space 0, times 0 [ 251.571457][T11180] CPU: 0 UID: 0 PID: 11180 Comm: syz.0.1691 Not tainted syzkaller #0 PREEMPT(full) [ 251.571480][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.571492][T11180] Call Trace: [ 251.571500][T11180] [ 251.571507][T11180] dump_stack_lvl+0xe8/0x150 [ 251.571538][T11180] should_fail_ex+0x410/0x560 [ 251.571564][T11180] ? __alloc_skb+0x1db/0x7a0 [ 251.571586][T11180] should_failslab+0xa8/0x100 [ 251.571610][T11180] ? __alloc_skb+0x1db/0x7a0 [ 251.571631][T11180] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 251.571662][T11180] ? __alloc_skb+0x18d/0x7a0 [ 251.571685][T11180] ? __alloc_skb+0x1db/0x7a0 [ 251.571714][T11180] __alloc_skb+0x1db/0x7a0 [ 251.571744][T11180] netlink_sendmsg+0x5d4/0xb40 [ 251.571775][T11180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.571804][T11180] ? apparmor_socket_sendmsg+0x98/0x360 [ 251.571830][T11180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.571850][T11180] sock_sendmsg_nosec+0x14e/0x190 [ 251.571872][T11180] ____sys_sendmsg+0x54e/0x850 [ 251.571905][T11180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.571940][T11180] ? import_iovec+0x73/0xa0 [ 251.571968][T11180] ___sys_sendmsg+0x2a5/0x360 [ 251.571994][T11180] ? __lock_acquire+0x747/0x2de0 [ 251.572020][T11180] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.572089][T11180] ? __fget_files+0x2a/0x420 [ 251.572113][T11180] ? __fget_files+0x3a2/0x420 [ 251.572147][T11180] __x64_sys_sendmsg+0x1b1/0x290 [ 251.572176][T11180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.572221][T11180] do_syscall_64+0x166/0x520 [ 251.572249][T11180] ? trace_irq_disable+0x3b/0x140 [ 251.572269][T11180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.572288][T11180] ? clear_bhb_loop+0x70/0xc0 [ 251.572311][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.572330][T11180] RIP: 0033:0x7fdcc6b9e199 [ 251.572348][T11180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.572363][T11180] RSP: 002b:00007fdcc79e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.572383][T11180] RAX: ffffffffffffffda RBX: 00007fdcc6e26090 RCX: 00007fdcc6b9e199 [ 251.572397][T11180] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 251.572409][T11180] RBP: 00007fdcc79e9090 R08: 0000000000000000 R09: 0000000000000000 [ 251.572420][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.572431][T11180] R13: 00007fdcc6e26128 R14: 00007fdcc6e26090 R15: 00007ffc76f694f8 [ 251.572463][T11180] [ 251.699031][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.702279][T11182] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.702472][T11182] bridge_slave_0: entered allmulticast mode [ 251.718135][T11182] bridge_slave_0: entered promiscuous mode [ 251.742386][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.742491][T11182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.309935][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.309982][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.310017][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.310050][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.523740][T11224] netlink: 'syz.0.1703': attribute type 1 has an invalid length. [ 252.651402][T11224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.730632][T11226] bond5: (slave veth7): Enslaving as an active interface with a down link [ 252.775641][T11229] bond4: (slave macvlan0): Releasing active interface [ 252.815982][T11229] bond5: (slave macvlan0): making interface the new active one [ 252.826146][T11229] macvlan0: entered promiscuous mode [ 252.837247][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1704'. [ 252.837448][T11229] bond5: (slave macvlan0): Enslaving as an active interface with an up link [ 253.161011][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'. [ 253.944527][T11276] FAULT_INJECTION: forcing a failure. [ 253.944527][T11276] name failslab, interval 1, probability 0, space 0, times 0 [ 253.944561][T11276] CPU: 1 UID: 0 PID: 11276 Comm: syz.1.1712 Not tainted syzkaller #0 PREEMPT(full) [ 253.944582][T11276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.944594][T11276] Call Trace: [ 253.944602][T11276] [ 253.944610][T11276] dump_stack_lvl+0xe8/0x150 [ 253.944641][T11276] should_fail_ex+0x410/0x560 [ 253.944666][T11276] ? __alloc_skb+0x1db/0x7a0 [ 253.944689][T11276] should_failslab+0xa8/0x100 [ 253.944715][T11276] ? __alloc_skb+0x1db/0x7a0 [ 253.944736][T11276] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 253.944774][T11276] ? __alloc_skb+0x18d/0x7a0 [ 253.944797][T11276] ? __alloc_skb+0x1db/0x7a0 [ 253.944827][T11276] __alloc_skb+0x1db/0x7a0 [ 253.944852][T11276] netlink_ack+0x136/0xb30 [ 253.944869][T11276] ? __pfx___mutex_trylock_common+0x10/0x10 [ 253.944897][T11276] ? rcu_is_watching+0x16/0xb0 [ 253.944921][T11276] ? trace_contention_end+0x3d/0x140 [ 253.944952][T11276] netlink_rcv_skb+0x2a4/0x4a0 [ 253.944973][T11276] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 253.945000][T11276] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.945037][T11276] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.945057][T11276] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.945080][T11276] xfrm_netlink_rcv+0x79/0x90 [ 253.945103][T11276] netlink_unicast+0x7bd/0x940 [ 253.945142][T11276] netlink_sendmsg+0x813/0xb40 [ 253.945172][T11276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.945200][T11276] ? apparmor_socket_sendmsg+0x98/0x360 [ 253.945225][T11276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.945245][T11276] sock_sendmsg_nosec+0x14e/0x190 [ 253.945268][T11276] ____sys_sendmsg+0x54e/0x850 [ 253.945301][T11276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.945338][T11276] ? import_iovec+0x73/0xa0 [ 253.945367][T11276] ___sys_sendmsg+0x2a5/0x360 [ 253.945393][T11276] ? __lock_acquire+0x747/0x2de0 [ 253.945417][T11276] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.945480][T11276] ? __fget_files+0x2a/0x420 [ 253.945506][T11276] ? __fget_files+0x3a2/0x420 [ 253.945544][T11276] __x64_sys_sendmsg+0x1b1/0x290 [ 253.945574][T11276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.945623][T11276] do_syscall_64+0x166/0x520 [ 253.945648][T11276] ? trace_irq_disable+0x3b/0x140 [ 253.945671][T11276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.945690][T11276] ? clear_bhb_loop+0x70/0xc0 [ 253.945715][T11276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.945734][T11276] RIP: 0033:0x7f917fb9e199 [ 253.945760][T11276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.945778][T11276] RSP: 002b:00007f91809d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.945799][T11276] RAX: ffffffffffffffda RBX: 00007f917fe25fa0 RCX: 00007f917fb9e199 [ 253.945814][T11276] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 253.945827][T11276] RBP: 00007f91809d7090 R08: 0000000000000000 R09: 0000000000000000 [ 253.945839][T11276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.945851][T11276] R13: 00007f917fe26038 R14: 00007f917fe25fa0 R15: 00007ffc43662628 [ 253.945884][T11276] [ 254.301030][T11288] net_ratelimit: 3 callbacks suppressed [ 254.301050][T11288] openvswitch: netlink: IPv4 tun info is not correct [ 254.556286][T11299] netlink: 'syz.0.1718': attribute type 10 has an invalid length. [ 254.604407][T11299] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.615935][T11299] bond0: (slave team0): Enslaving as an active interface with an up link [ 254.825016][T11320] Cannot find map_set index 2 as target [ 254.932522][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1729'. [ 254.994899][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 255.017944][T11323] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.037808][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 255.094438][T11332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.169627][T11333] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.173628][T11333] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 255.177836][T11333] bond4: (slave sit1): Error -95 calling set_mac_address [ 255.277950][T11333] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 255.280744][T11333] bond4: (slave sit1): Error -95 calling set_mac_address [ 255.417493][T11333] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 255.417971][T11333] bond4: (slave sit1): Error -95 calling set_mac_address [ 255.559890][T11333] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 255.560353][T11333] bond4: (slave sit1): Error -95 calling set_mac_address [ 255.625976][T11333] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 255.626515][T11333] bond4: (slave sit1): Error -95 calling set_mac_address [ 255.711297][T11333] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 255.711784][T11333] bond4: (slave sit1): Error -95 calling set_mac_address [ 255.792489][T11344] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 255.844940][T11344] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 255.880958][T11344] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1735'. [ 255.968395][T11350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1738'. [ 256.039471][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'. [ 256.086689][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'. [ 256.108104][T11359] gretap0: entered promiscuous mode [ 256.318269][T11366] syzkaller0: entered promiscuous mode [ 256.318295][T11366] syzkaller0: entered allmulticast mode [ 256.528980][T11373] dummy0 speed is unknown, defaulting to 1000 [ 256.552749][T11376] netlink: NAT attribute has 5 unknown bytes [ 256.552783][T11376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.826338][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 257.494747][T11414] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1762'. [ 257.509391][T11414] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1762'. [ 257.526731][T11414] : renamed from virt_wifi0 [ 258.129191][T11398] Set syz0 is full, maxelem 65536 reached [ 258.577689][T11437] netlink: zone id is out of range [ 258.587750][T11436] dummy0 speed is unknown, defaulting to 1000 [ 258.688452][T11440] netlink: NAT attribute has 5 unknown bytes [ 258.688492][T11440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.305807][T11461] netlink: 'syz.1.1779': attribute type 10 has an invalid length. [ 259.397313][T11462] netlink: 'syz.1.1779': attribute type 10 has an invalid length. [ 259.426478][T11461] team0: Port device dummy0 added [ 259.471430][T11462] team0: Port device dummy0 removed [ 260.306198][T11495] netlink: NAT attribute has 5 unknown bytes [ 260.306237][T11495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.343480][T11493] dummy0 speed is unknown, defaulting to 1000 [ 260.594656][T11505] netlink: Unknown conntrack attr (type=252, max=9) [ 260.759751][T11516] __nla_validate_parse: 3 callbacks suppressed [ 260.759773][T11516] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1796'. [ 261.967377][T11530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'. [ 262.017518][T11531] Bluetooth: MGMT ver 1.23 [ 262.200048][T11531] syzkaller1: entered promiscuous mode [ 262.200073][T11531] syzkaller1: entered allmulticast mode [ 262.242250][T11536] netlink: NAT attribute has 5 unknown bytes [ 262.242286][T11536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.598797][T11537] dummy0 speed is unknown, defaulting to 1000 [ 263.108738][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'. [ 263.375735][T11447] Set syz0 is full, maxelem 65536 reached [ 263.725284][T11574] FAULT_INJECTION: forcing a failure. [ 263.725284][T11574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.725320][T11574] CPU: 1 UID: 0 PID: 11574 Comm: syz.1.1817 Not tainted syzkaller #0 PREEMPT(full) [ 263.725359][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.725372][T11574] Call Trace: [ 263.725379][T11574] [ 263.725386][T11574] dump_stack_lvl+0xe8/0x150 [ 263.725418][T11574] should_fail_ex+0x410/0x560 [ 263.725443][T11574] _copy_to_user+0x31/0xb0 [ 263.725470][T11574] simple_read_from_buffer+0xe1/0x170 [ 263.725502][T11574] proc_fail_nth_read+0x1bb/0x230 [ 263.725520][T11574] ? common_file_perm+0x20e/0x2b0 [ 263.725546][T11574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.725569][T11574] ? rw_verify_area+0x24a/0x4c0 [ 263.725598][T11574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.725617][T11574] vfs_read+0x213/0xa80 [ 263.725659][T11574] ? __pfx___mutex_lock+0x10/0x10 [ 263.725690][T11574] ? __pfx_vfs_read+0x10/0x10 [ 263.725719][T11574] ? __fget_files+0x2a/0x420 [ 263.725747][T11574] ? __fget_files+0x3a2/0x420 [ 263.725772][T11574] ? __fget_files+0x2a/0x420 [ 263.725805][T11574] ksys_read+0x150/0x270 [ 263.725836][T11574] ? __pfx_ksys_read+0x10/0x10 [ 263.725874][T11574] do_syscall_64+0x166/0x520 [ 263.725902][T11574] ? trace_irq_disable+0x3b/0x140 [ 263.725921][T11574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.725942][T11574] ? clear_bhb_loop+0x70/0xc0 [ 263.725966][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.725986][T11574] RIP: 0033:0x7f917fb5e9ce [ 263.726005][T11574] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.726023][T11574] RSP: 002b:00007f91809d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.726045][T11574] RAX: ffffffffffffffda RBX: 00007f91809d76c0 RCX: 00007f917fb5e9ce [ 263.726058][T11574] RDX: 000000000000000f RSI: 00007f91809d70a0 RDI: 0000000000000006 [ 263.726070][T11574] RBP: 00007f91809d7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.726082][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.726097][T11574] R13: 00007f917fe26038 R14: 00007f917fe25fa0 R15: 00007ffc43662628 [ 263.726129][T11574] [ 263.804485][T11579] dummy0 speed is unknown, defaulting to 1000 [ 263.899016][T11580] netlink: NAT attribute has 5 unknown bytes [ 263.899051][T11580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.067121][T11587] ip_tables: iptables: counters copy to user failed while replacing table [ 264.140088][T11584] macsec0: entered promiscuous mode [ 264.147856][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1819'. [ 264.175402][T11584] veth1_macvtap: left promiscuous mode [ 264.241562][T11584] macsec0 (unregistering): left promiscuous mode [ 264.513849][T11589] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 264.765404][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 264.860649][ T12] macvlan0: left promiscuous mode [ 265.492533][T11648] dummy0 speed is unknown, defaulting to 1000 [ 265.557800][T11654] netlink: NAT attribute has 5 unknown bytes [ 265.557835][T11654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.755456][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 265.887477][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1840'. [ 266.033340][T11673] FAULT_INJECTION: forcing a failure. [ 266.033340][T11673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.033374][T11673] CPU: 0 UID: 0 PID: 11673 Comm: syz.4.1839 Not tainted syzkaller #0 PREEMPT(full) [ 266.033395][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.033424][T11673] Call Trace: [ 266.033432][T11673] [ 266.033441][T11673] dump_stack_lvl+0xe8/0x150 [ 266.033472][T11673] should_fail_ex+0x410/0x560 [ 266.033507][T11673] _copy_to_iter+0x1e4/0x1810 [ 266.033541][T11673] ? sock_recvmsg+0x196/0x1e0 [ 266.033565][T11673] ? ____sys_recvmsg+0x1e6/0x4a0 [ 266.033589][T11673] ? ___sys_recvmsg+0x213/0x5a0 [ 266.033617][T11673] ? __x64_sys_recvmsg+0x1ae/0x290 [ 266.033666][T11673] ? __pfx__copy_to_iter+0x10/0x10 [ 266.033710][T11673] __skb_datagram_iter+0x419/0x980 [ 266.033741][T11673] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 266.033776][T11673] skb_copy_datagram_iter+0xb5/0x240 [ 266.033810][T11673] unix_stream_read_actor+0x6c/0xb0 [ 266.033842][T11673] unix_stream_read_generic+0xa73/0x22e0 [ 266.033901][T11673] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 266.033931][T11673] ? __pfx_autoremove_wake_function+0x10/0x10 [ 266.033978][T11673] ? __lock_acquire+0x747/0x2de0 [ 266.034002][T11673] unix_stream_recvmsg+0x16b/0x1d0 [ 266.034026][T11673] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 266.034043][T11673] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 266.034071][T11673] ? aa_sock_msg_perm+0x129/0x210 [ 266.034099][T11673] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 266.034120][T11673] ? security_socket_recvmsg+0x7e/0x2c0 [ 266.034147][T11673] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 266.034166][T11673] sock_recvmsg+0x196/0x1e0 [ 266.034189][T11673] ____sys_recvmsg+0x1e6/0x4a0 [ 266.034221][T11673] ? __pfx_____sys_recvmsg+0x10/0x10 [ 266.034260][T11673] ? import_iovec+0x73/0xa0 [ 266.034297][T11673] ___sys_recvmsg+0x213/0x5a0 [ 266.034339][T11673] ? __pfx____sys_recvmsg+0x10/0x10 [ 266.034373][T11673] ? lock_acquire+0x115/0x350 [ 266.034410][T11673] ? __fget_files+0x3a2/0x420 [ 266.034448][T11673] __x64_sys_recvmsg+0x1ae/0x290 [ 266.034477][T11673] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 266.034537][T11673] do_syscall_64+0x166/0x520 [ 266.034566][T11673] ? trace_irq_disable+0x3b/0x140 [ 266.034585][T11673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.034606][T11673] ? clear_bhb_loop+0x70/0xc0 [ 266.034631][T11673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.034650][T11673] RIP: 0033:0x7efe2099e199 [ 266.034668][T11673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.034685][T11673] RSP: 002b:00007efe21792028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 266.034706][T11673] RAX: ffffffffffffffda RBX: 00007efe20c26270 RCX: 00007efe2099e199 [ 266.034721][T11673] RDX: 0000000040000300 RSI: 0000200000001140 RDI: 0000000000000005 [ 266.034734][T11673] RBP: 00007efe21792090 R08: 0000000000000000 R09: 0000000000000000 [ 266.034755][T11673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.034767][T11673] R13: 00007efe20c26308 R14: 00007efe20c26270 R15: 00007fff6ea0dcb8 [ 266.034800][T11673] [ 266.528324][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'. [ 266.550997][T11685] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1845'. [ 266.551026][T11685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.551305][T11687] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 266.818348][T11695] dummy0 speed is unknown, defaulting to 1000 [ 266.975983][T11695] netlink: NAT attribute has 5 unknown bytes [ 266.976019][T11695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.073793][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 267.406592][T11711] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 267.708293][T11742] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 267.708448][T11742] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 267.708593][T11742] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 267.708726][T11742] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 267.708878][T11742] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 267.856769][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1870'. [ 267.935402][T11747] dummy0 speed is unknown, defaulting to 1000 [ 268.247602][T11770] bond0: (slave team0): Releasing backup interface [ 269.068360][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1881'. [ 269.137680][T11802] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (32769) ! [ 269.331420][T11816] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1887'. [ 269.416920][T11820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1884'. [ 269.653548][T11827] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 269.701366][T11827] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.189133][T11827] bond7: (slave veth15): Enslaving as an active interface with a down link [ 270.220805][T11833] bond5: (slave macvlan0): Releasing active interface [ 270.242466][T11833] bond7: (slave macvlan0): making interface the new active one [ 270.245699][T11833] macvlan0: entered promiscuous mode [ 270.247541][T11833] bond7: (slave macvlan0): Enslaving as an active interface with an up link [ 270.378512][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 270.407431][T11846] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1897'. [ 270.578113][T11856] net_ratelimit: 62 callbacks suppressed [ 270.578135][T11856] netlink: NAT attribute has 5 unknown bytes [ 270.578159][T11856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.639253][T11848] dummy0 speed is unknown, defaulting to 1000 [ 270.678396][T11854] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (32769) ! [ 270.833210][T11866] bond8 (unregistering): Released all slaves [ 271.195383][T11886] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 271.345745][T11890] netlink: Unknown conntrack attr (type=252, max=9) [ 271.540988][T11892] __nla_validate_parse: 1 callbacks suppressed [ 271.541011][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1912'. [ 271.622016][T11896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1915'. [ 271.898184][T11910] FAULT_INJECTION: forcing a failure. [ 271.898184][T11910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 271.898215][T11910] CPU: 1 UID: 0 PID: 11910 Comm: syz.2.1918 Not tainted syzkaller #0 PREEMPT(full) [ 271.898236][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.898247][T11910] Call Trace: [ 271.898254][T11910] [ 271.898262][T11910] dump_stack_lvl+0xe8/0x150 [ 271.898299][T11910] should_fail_ex+0x410/0x560 [ 271.898325][T11910] prepare_alloc_pages+0x223/0x600 [ 271.898354][T11910] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 271.898380][T11910] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 271.898412][T11910] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 271.898437][T11910] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 271.898463][T11910] ? __pfx_policy_nodemask+0x10/0x10 [ 271.898491][T11910] __alloc_pages_noprof+0x10/0x100 [ 271.898513][T11910] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 271.898542][T11910] ? alloc_pages_noprof+0x140/0x2b0 [ 271.898569][T11910] __kasan_populate_vmalloc+0xb7/0x1c0 [ 271.898594][T11910] alloc_vmap_area+0xd1a/0x1420 [ 271.898635][T11910] ? __pfx_alloc_vmap_area+0x10/0x10 [ 271.898659][T11910] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 271.898681][T11910] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 271.898699][T11910] ? __get_vm_area_node+0x155/0x2f0 [ 271.898730][T11910] __get_vm_area_node+0x200/0x2f0 [ 271.898762][T11910] __vmalloc_node_range_noprof+0x343/0x1540 [ 271.898790][T11910] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 271.898812][T11910] ? __lock_acquire+0x747/0x2de0 [ 271.898855][T11910] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 271.898892][T11910] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 271.898913][T11910] __vmalloc_noprof+0xd2/0x120 [ 271.898937][T11910] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 271.898962][T11910] bpf_prog_alloc_no_stats+0x47/0x560 [ 271.898983][T11910] ? bpf_prog_alloc+0x2a/0x1a0 [ 271.899009][T11910] bpf_prog_alloc+0x3c/0x1a0 [ 271.899053][T11910] bpf_prog_load+0x7f8/0x1c20 [ 271.899087][T11910] ? __pfx_bpf_prog_load+0x10/0x10 [ 271.899129][T11910] __sys_bpf+0xd0d/0xd90 [ 271.899157][T11910] ? __pfx___sys_bpf+0x10/0x10 [ 271.899188][T11910] ? __fget_files+0x2a/0x420 [ 271.899228][T11910] ? ksys_write+0x242/0x270 [ 271.899257][T11910] ? __pfx_ksys_write+0x10/0x10 [ 271.899289][T11910] __x64_sys_bpf+0xba/0xd0 [ 271.899309][T11910] do_syscall_64+0x166/0x520 [ 271.899334][T11910] ? trace_irq_disable+0x3b/0x140 [ 271.899351][T11910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.899370][T11910] ? clear_bhb_loop+0x70/0xc0 [ 271.899403][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.899423][T11910] RIP: 0033:0x7ff6eeb9e199 [ 271.899440][T11910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.899455][T11910] RSP: 002b:00007ff6ef9f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.899475][T11910] RAX: ffffffffffffffda RBX: 00007ff6eee25fa0 RCX: 00007ff6eeb9e199 [ 271.899489][T11910] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 271.899501][T11910] RBP: 00007ff6ef9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 271.899514][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.899526][T11910] R13: 00007ff6eee26038 R14: 00007ff6eee25fa0 R15: 00007ffd7146a928 [ 271.899556][T11910] [ 271.905398][T11910] syz.2.1918: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 271.905474][T11910] CPU: 1 UID: 0 PID: 11910 Comm: syz.2.1918 Not tainted syzkaller #0 PREEMPT(full) [ 271.905496][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.905510][T11910] Call Trace: [ 271.905526][T11910] [ 271.905534][T11910] dump_stack_lvl+0xe8/0x150 [ 271.905565][T11910] warn_alloc+0x24d/0x270 [ 271.905586][T11910] ? lockdep_hardirqs_on+0x7b/0x110 [ 271.905616][T11910] ? __pfx_warn_alloc+0x10/0x10 [ 271.905634][T11910] ? kfree+0x1c5/0x650 [ 271.905667][T11910] ? __get_vm_area_node+0x219/0x2f0 [ 271.905701][T11910] __vmalloc_node_range_noprof+0x36b/0x1540 [ 271.905730][T11910] ? __lock_acquire+0x747/0x2de0 [ 271.905774][T11910] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 271.905810][T11910] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 271.905832][T11910] __vmalloc_noprof+0xd2/0x120 [ 271.905859][T11910] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 271.905883][T11910] bpf_prog_alloc_no_stats+0x47/0x560 [ 271.905903][T11910] ? bpf_prog_alloc+0x2a/0x1a0 [ 271.905926][T11910] bpf_prog_alloc+0x3c/0x1a0 [ 271.905951][T11910] bpf_prog_load+0x7f8/0x1c20 [ 271.905984][T11910] ? __pfx_bpf_prog_load+0x10/0x10 [ 271.906030][T11910] __sys_bpf+0xd0d/0xd90 [ 271.906059][T11910] ? __pfx___sys_bpf+0x10/0x10 [ 271.906089][T11910] ? __fget_files+0x2a/0x420 [ 271.906131][T11910] ? ksys_write+0x242/0x270 [ 271.906161][T11910] ? __pfx_ksys_write+0x10/0x10 [ 271.906194][T11910] __x64_sys_bpf+0xba/0xd0 [ 271.906216][T11910] do_syscall_64+0x166/0x520 [ 271.906242][T11910] ? trace_irq_disable+0x3b/0x140 [ 271.906261][T11910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.906280][T11910] ? clear_bhb_loop+0x70/0xc0 [ 271.906303][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.906322][T11910] RIP: 0033:0x7ff6eeb9e199 [ 271.906340][T11910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.906356][T11910] RSP: 002b:00007ff6ef9f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.906375][T11910] RAX: ffffffffffffffda RBX: 00007ff6eee25fa0 RCX: 00007ff6eeb9e199 [ 271.906395][T11910] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 271.906408][T11910] RBP: 00007ff6ef9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 271.906420][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.906431][T11910] R13: 00007ff6eee26038 R14: 00007ff6eee25fa0 R15: 00007ffd7146a928 [ 271.906461][T11910] [ 271.906480][T11910] Mem-Info: [ 271.906490][T11910] active_anon:5624 inactive_anon:0 isolated_anon:0 [ 271.906490][T11910] active_file:2 inactive_file:43984 isolated_file:0 [ 271.906490][T11910] unevictable:25 dirty:208 writeback:0 [ 271.906490][T11910] slab_reclaimable:10992 slab_unreclaimable:100651 [ 271.906490][T11910] mapped:30086 shmem:670 pagetables:1196 [ 271.906490][T11910] sec_pagetables:0 bounce:0 [ 271.906490][T11910] kernel_misc_reclaimable:0 [ 271.906490][T11910] free:1314341 free_pcp:16342 free_cma:0 [ 271.906540][T11910] Node 0 active_anon:22496kB inactive_anon:0kB active_file:8kB inactive_file:175728kB unevictable:100kB isolated(anon):0kB isolated(file):0kB mapped:120344kB dirty:832kB writeback:0kB shmem:2680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13144kB pagetables:4640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 271.906594][T11910] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 271.906645][T11910] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.906701][T11910] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 271.906733][T11910] Node 0 DMA32 free:1300952kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22496kB inactive_anon:0kB active_file:8kB inactive_file:175728kB unevictable:100kB writepending:832kB zspages:0kB present:3129332kB managed:2547096kB mlocked:100kB bounce:0kB free_pcp:65368kB local_pcp:24916kB free_cma:0kB [ 271.906792][T11910] lowmem_reserve[]: 0 0 0 0 0 [ 271.906822][T11910] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.906875][T11910] lowmem_reserve[]: 0 0 0 0 0 [ 271.910669][T11910] Node 1 Normal free:3941052kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.910728][T11910] lowmem_reserve[]: 0 0 0 0 0 [ 271.910761][T11910] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 271.910870][T11910] Node 0 DMA32: 478*4kB (UME) 453*8kB (UME) 246*16kB (UME) 606*32kB (UE) 278*64kB (UE) 61*128kB (UME) 73*256kB (UME) 46*512kB (UME) 32*1024kB (UME) 6*2048kB (UME) 283*4096kB (UM) = 1300928kB [ 271.911017][T11910] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 271.911110][T11910] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 5*16kB (UM) 2*32kB (UM) 6*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3941052kB [ 271.911262][T11910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.911278][T11910] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.911293][T11910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.911309][T11910] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.911324][T11910] 44652 total pagecache pages [ 271.911332][T11910] 0 pages in swap cache [ 271.911338][T11910] Free swap = 124996kB [ 271.911345][T11910] Total swap = 124996kB [ 271.911352][T11910] 2097051 pages RAM [ 271.911358][T11910] 0 pages HighMem/MovableOnly [ 271.911365][T11910] 428661 pages reserved [ 271.911372][T11910] 0 pages cma reserved [ 272.129520][T11909] dummy0 speed is unknown, defaulting to 1000 [ 272.182431][T11915] netlink: NAT attribute has 5 unknown bytes [ 272.182468][T11915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.232559][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1924'. [ 272.245033][T11912] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 272.337742][T11922] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1926'. [ 272.459628][T11923] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11 [ 272.550501][T11926] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1928'. [ 272.737957][T11926] netlink: 'syz.0.1928': attribute type 3 has an invalid length. [ 272.737980][T11926] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1928'. [ 272.772584][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1927'. [ 273.187930][T11939] pimreg: entered allmulticast mode [ 273.193704][T11939] pimreg: left allmulticast mode [ 273.296986][T11946] xt_CONNSECMARK: invalid mode: 254 [ 273.642149][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1939'. [ 273.748554][T11961] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 273.795898][T11966] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1942'. [ 274.765150][T11990] dummy0 speed is unknown, defaulting to 1000 [ 274.802654][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 274.804133][T11996] netlink: NAT attribute has 5 unknown bytes [ 274.804166][T11996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.426240][T12016] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 275.510878][T12013] only policy match revision 0 supported [ 275.510892][T12013] unable to load match [ 275.535496][T12021] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 276.017976][T12037] ip_tables: iptables: counters copy to user failed while replacing table [ 276.118623][T12042] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 276.478366][T12052] FAULT_INJECTION: forcing a failure. [ 276.478366][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 276.478400][T12052] CPU: 0 UID: 0 PID: 12052 Comm: syz.2.1967 Not tainted syzkaller #0 PREEMPT(full) [ 276.478422][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.478434][T12052] Call Trace: [ 276.478442][T12052] [ 276.478450][T12052] dump_stack_lvl+0xe8/0x150 [ 276.478491][T12052] should_fail_ex+0x410/0x560 [ 276.478520][T12052] should_failslab+0xa8/0x100 [ 276.478545][T12052] ? fib6_add_1+0x9fe/0x13e0 [ 276.478590][T12052] kmem_cache_alloc_noprof+0xa1/0x600 [ 276.478617][T12052] ? fib6_add_1+0x996/0x13e0 [ 276.478636][T12052] ? kmem_cache_alloc_noprof+0x156/0x600 [ 276.478663][T12052] ? fib6_add_1+0x9fe/0x13e0 [ 276.478693][T12052] fib6_add_1+0x9fe/0x13e0 [ 276.478732][T12052] fib6_add+0x211/0x1a20 [ 276.478774][T12052] ? __pfx_fib6_add+0x10/0x10 [ 276.478799][T12052] ? consume_skb+0x89/0xb0 [ 276.478825][T12052] ? ip6_ins_rt+0xc0/0x140 [ 276.478849][T12052] ip6_ins_rt+0xd6/0x140 [ 276.478870][T12052] ? __pfx_ip6_ins_rt+0x10/0x10 [ 276.478898][T12052] ? nlmsg_notify+0xe3/0x1a0 [ 276.478916][T12052] ? nlmsg_notify+0x142/0x1a0 [ 276.478939][T12052] __ipv6_ifa_notify+0x4e8/0xc60 [ 276.478964][T12052] ? atomic_notifier_call_chain+0x16e/0x180 [ 276.479003][T12052] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 276.479027][T12052] ? fib6_flush_trees+0x147/0x1a0 [ 276.479055][T12052] ? __pfx_fib6_flush_trees+0x10/0x10 [ 276.479081][T12052] ? add_addr+0xdb/0x2d0 [ 276.479110][T12052] ? __local_bh_enable_ip+0xd6/0x140 [ 276.479141][T12052] add_addr+0x1b8/0x2d0 [ 276.479174][T12052] addrconf_notify+0xb1e/0x1050 [ 276.479207][T12052] notifier_call_chain+0x1a5/0x3d0 [ 276.479245][T12052] netif_state_change+0x27d/0x3a0 [ 276.479268][T12052] ? __pfx___dev_change_flags+0x10/0x10 [ 276.479296][T12052] ? __pfx_netif_state_change+0x10/0x10 [ 276.479326][T12052] ? netif_change_flags+0xde/0x1b0 [ 276.479357][T12052] do_setlink+0x3d64/0x47a0 [ 276.479383][T12052] ? unwind_get_return_address+0x4d/0x90 [ 276.479422][T12052] ? __pfx_do_setlink+0x10/0x10 [ 276.479449][T12052] ? __lock_acquire+0x747/0x2de0 [ 276.479490][T12052] ? kasan_save_track+0x4f/0x80 [ 276.479510][T12052] ? kasan_save_track+0x3e/0x80 [ 276.479530][T12052] ? __kasan_kmalloc+0x93/0xb0 [ 276.479550][T12052] ? __kmalloc_cache_noprof+0x321/0x600 [ 276.479581][T12052] ? __mutex_trylock_common+0x15f/0x270 [ 276.479610][T12052] ? __pfx___mutex_trylock_common+0x10/0x10 [ 276.479640][T12052] ? rcu_is_watching+0x16/0xb0 [ 276.479664][T12052] ? trace_contention_end+0x3d/0x140 [ 276.479687][T12052] ? __mutex_lock+0x30b/0x1550 [ 276.479724][T12052] ? rtnl_newlink+0xc1d/0x1c30 [ 276.479748][T12052] ? __pfx___mutex_lock+0x10/0x10 [ 276.479784][T12052] ? ns_capable+0x89/0xe0 [ 276.479809][T12052] ? rtnl_nets_add+0x16c/0x300 [ 276.479834][T12052] ? refcount_inc+0x46/0x70 [ 276.479857][T12052] rtnl_newlink+0x147c/0x1c30 [ 276.479895][T12052] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.479918][T12052] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 276.479937][T12052] ? netlink_deliver_tap+0x19c/0x1b0 [ 276.479955][T12052] ? netlink_unicast+0x781/0x940 [ 276.479981][T12052] ? netlink_sendmsg+0x813/0xb40 [ 276.480000][T12052] ? sock_sendmsg_nosec+0x14e/0x190 [ 276.480018][T12052] ? ____sys_sendmsg+0x54e/0x850 [ 276.480042][T12052] ? ___sys_sendmsg+0x2a5/0x360 [ 276.480067][T12052] ? __x64_sys_sendmsg+0x1b1/0x290 [ 276.480092][T12052] ? do_syscall_64+0x166/0x520 [ 276.480118][T12052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.480173][T12052] ? kasan_quarantine_put+0xbb/0x1f0 [ 276.480194][T12052] ? lockdep_hardirqs_on+0x7b/0x110 [ 276.480227][T12052] ? nlmon_xmit+0xb0/0x100 [ 276.480247][T12052] ? kmem_cache_free+0x182/0x650 [ 276.480277][T12052] ? __lock_acquire+0x747/0x2de0 [ 276.480304][T12052] ? __dev_queue_xmit+0x29b/0x3920 [ 276.480336][T12052] ? __local_bh_enable_ip+0xd6/0x140 [ 276.480361][T12052] ? lockdep_hardirqs_on+0x7b/0x110 [ 276.480397][T12052] ? lock_acquire+0x115/0x350 [ 276.480416][T12052] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.480454][T12052] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.480486][T12052] rtnetlink_rcv_msg+0x802/0xc00 [ 276.480514][T12052] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 276.480538][T12052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.480571][T12052] ? __copy_skb_header+0xa3/0x4a0 [ 276.480608][T12052] netlink_rcv_skb+0x226/0x4a0 [ 276.480628][T12052] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.480655][T12052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.480687][T12052] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.480706][T12052] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.480732][T12052] netlink_unicast+0x7bd/0x940 [ 276.480771][T12052] netlink_sendmsg+0x813/0xb40 [ 276.480801][T12052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.480829][T12052] ? apparmor_socket_sendmsg+0x98/0x360 [ 276.480854][T12052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.480873][T12052] sock_sendmsg_nosec+0x14e/0x190 [ 276.480897][T12052] ____sys_sendmsg+0x54e/0x850 [ 276.480929][T12052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.480965][T12052] ? import_iovec+0x73/0xa0 [ 276.480992][T12052] ___sys_sendmsg+0x2a5/0x360 [ 276.481018][T12052] ? __lock_acquire+0x747/0x2de0 [ 276.481041][T12052] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.481102][T12052] ? __fget_files+0x2a/0x420 [ 276.481126][T12052] ? __fget_files+0x3a2/0x420 [ 276.481162][T12052] __x64_sys_sendmsg+0x1b1/0x290 [ 276.481192][T12052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.481235][T12052] do_syscall_64+0x166/0x520 [ 276.481263][T12052] ? trace_irq_disable+0x3b/0x140 [ 276.481283][T12052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.481303][T12052] ? clear_bhb_loop+0x70/0xc0 [ 276.481327][T12052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.481348][T12052] RIP: 0033:0x7ff6eeb9e199 [ 276.481367][T12052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.481384][T12052] RSP: 002b:00007ff6ef9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.481405][T12052] RAX: ffffffffffffffda RBX: 00007ff6eee25fa0 RCX: 00007ff6eeb9e199 [ 276.481417][T12052] RDX: 0000000004004090 RSI: 0000200000000280 RDI: 0000000000000003 [ 276.481429][T12052] RBP: 00007ff6ef9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 276.481440][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.481451][T12052] R13: 00007ff6eee26038 R14: 00007ff6eee25fa0 R15: 00007ffd7146a928 [ 276.481487][T12052] [ 277.146813][T12060] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.146995][T12060] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.147238][T12060] bridge_slave_0: entered allmulticast mode [ 277.174177][T12060] bridge_slave_0: entered promiscuous mode [ 277.174864][T12060] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.174978][T12060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.324548][T12061] __nla_validate_parse: 1 callbacks suppressed [ 277.324571][T12061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 277.516296][T12083] FAULT_INJECTION: forcing a failure. [ 277.516296][T12083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.516329][T12083] CPU: 0 UID: 0 PID: 12083 Comm: syz.2.1973 Not tainted syzkaller #0 PREEMPT(full) [ 277.516352][T12083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.516363][T12083] Call Trace: [ 277.516371][T12083] [ 277.516379][T12083] dump_stack_lvl+0xe8/0x150 [ 277.516410][T12083] should_fail_ex+0x410/0x560 [ 277.516438][T12083] _copy_from_iter+0x1d3/0x1660 [ 277.516462][T12083] ? __alloc_skb+0x27a/0x7a0 [ 277.516487][T12083] ? __alloc_skb+0x27a/0x7a0 [ 277.516512][T12083] ? __alloc_skb+0x27a/0x7a0 [ 277.516535][T12083] ? __pfx__copy_from_iter+0x10/0x10 [ 277.516556][T12083] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 277.516586][T12083] ? __alloc_skb+0x27a/0x7a0 [ 277.516606][T12083] ? __alloc_skb+0x27a/0x7a0 [ 277.516632][T12083] ? netlink_sendmsg+0x650/0xb40 [ 277.516652][T12083] ? skb_put+0x112/0x210 [ 277.516678][T12083] netlink_sendmsg+0x6c0/0xb40 [ 277.516708][T12083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.516735][T12083] ? apparmor_socket_sendmsg+0x98/0x360 [ 277.516760][T12083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.516779][T12083] sock_sendmsg_nosec+0x14e/0x190 [ 277.516802][T12083] ____sys_sendmsg+0x54e/0x850 [ 277.516835][T12083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.516877][T12083] ? import_iovec+0x73/0xa0 [ 277.516903][T12083] ___sys_sendmsg+0x2a5/0x360 [ 277.516925][T12083] ? __lock_acquire+0x747/0x2de0 [ 277.516948][T12083] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.517006][T12083] ? __fget_files+0x2a/0x420 [ 277.517033][T12083] ? __fget_files+0x3a2/0x420 [ 277.517070][T12083] __x64_sys_sendmsg+0x1b1/0x290 [ 277.517100][T12083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.517163][T12083] do_syscall_64+0x166/0x520 [ 277.517191][T12083] ? trace_irq_disable+0x3b/0x140 [ 277.517211][T12083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.517231][T12083] ? clear_bhb_loop+0x70/0xc0 [ 277.517267][T12083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.517287][T12083] RIP: 0033:0x7ff6eeb9e199 [ 277.517305][T12083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.517323][T12083] RSP: 002b:00007ff6ef9b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.517345][T12083] RAX: ffffffffffffffda RBX: 00007ff6eee26180 RCX: 00007ff6eeb9e199 [ 277.517360][T12083] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 277.517373][T12083] RBP: 00007ff6ef9b2090 R08: 0000000000000000 R09: 0000000000000000 [ 277.517385][T12083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.517398][T12083] R13: 00007ff6eee26218 R14: 00007ff6eee26180 R15: 00007ffd7146a928 [ 277.517430][T12083] [ 277.855779][T12085] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1974'. [ 277.855818][T12085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1974'. [ 278.036174][T12092] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 278.508503][T12087] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1975'. [ 278.534630][T12113] FAULT_INJECTION: forcing a failure. [ 278.534630][T12113] name failslab, interval 1, probability 0, space 0, times 0 [ 278.534660][T12113] CPU: 1 UID: 0 PID: 12113 Comm: syz.0.1981 Not tainted syzkaller #0 PREEMPT(full) [ 278.534682][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.534693][T12113] Call Trace: [ 278.534699][T12113] [ 278.534706][T12113] dump_stack_lvl+0xe8/0x150 [ 278.534735][T12113] should_fail_ex+0x410/0x560 [ 278.534762][T12113] should_failslab+0xa8/0x100 [ 278.534785][T12113] ? skb_clone+0x212/0x3a0 [ 278.534813][T12113] kmem_cache_alloc_noprof+0xa1/0x600 [ 278.534850][T12113] ? skb_clone+0x212/0x3a0 [ 278.534885][T12113] skb_clone+0x212/0x3a0 [ 278.534916][T12113] __netlink_deliver_tap+0x355/0x6e0 [ 278.534949][T12113] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.534971][T12113] netlink_deliver_tap+0x19c/0x1b0 [ 278.534993][T12113] netlink_sendskb+0x68/0x140 [ 278.535025][T12113] netlink_rcv_skb+0x2a4/0x4a0 [ 278.535047][T12113] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 278.535072][T12113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.535110][T12113] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.535129][T12113] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.535152][T12113] xfrm_netlink_rcv+0x79/0x90 [ 278.535175][T12113] netlink_unicast+0x7bd/0x940 [ 278.535214][T12113] netlink_sendmsg+0x813/0xb40 [ 278.535244][T12113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.535281][T12113] ? apparmor_socket_sendmsg+0x98/0x360 [ 278.535307][T12113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.535325][T12113] sock_sendmsg_nosec+0x14e/0x190 [ 278.535349][T12113] ____sys_sendmsg+0x54e/0x850 [ 278.535382][T12113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.535418][T12113] ? import_iovec+0x73/0xa0 [ 278.535447][T12113] ___sys_sendmsg+0x2a5/0x360 [ 278.535473][T12113] ? __lock_acquire+0x747/0x2de0 [ 278.535498][T12113] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.535561][T12113] ? __fget_files+0x2a/0x420 [ 278.535587][T12113] ? __fget_files+0x3a2/0x420 [ 278.535625][T12113] __x64_sys_sendmsg+0x1b1/0x290 [ 278.535655][T12113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.535704][T12113] do_syscall_64+0x166/0x520 [ 278.535732][T12113] ? trace_irq_disable+0x3b/0x140 [ 278.535752][T12113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.535771][T12113] ? clear_bhb_loop+0x70/0xc0 [ 278.535795][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.535814][T12113] RIP: 0033:0x7fdcc6b9e199 [ 278.535832][T12113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.535849][T12113] RSP: 002b:00007fdcc7a0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.535869][T12113] RAX: ffffffffffffffda RBX: 00007fdcc6e25fa0 RCX: 00007fdcc6b9e199 [ 278.535883][T12113] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 278.535896][T12113] RBP: 00007fdcc7a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 278.535908][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.535920][T12113] R13: 00007fdcc6e26038 R14: 00007fdcc6e25fa0 R15: 00007ffc76f694f8 [ 278.535952][T12113] [ 279.112030][T12128] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1987'. [ 279.147269][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1988'. [ 279.248683][T12133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1987'. [ 279.302363][T12144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.673745][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1997'. [ 279.734916][T12160] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 279.735681][T12162] Cannot find map_set index 2 as target [ 279.804302][T12167] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 279.825502][T12164] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.834214][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'. [ 279.834238][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 279.858613][T12167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.907546][T12164] bond5 (unregistering): Released all slaves [ 279.947449][T12170] netlink: 'syz.2.1998': attribute type 2 has an invalid length. [ 280.008397][T12167] bond6: (slave veth11): Enslaving as an active interface with a down link [ 280.008704][T12169] dummy0: left promiscuous mode [ 280.026020][T12169] bond6: (slave dummy0): making interface the new active one [ 280.032246][T12169] dummy0: entered promiscuous mode [ 280.038040][T12169] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 280.056140][T12167] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 280.091640][T12170] : entered promiscuous mode [ 280.106170][T12167] bond6: (slave dummy0): Releasing active interface [ 280.194863][T12180] xt_time: unknown flags 0x4 [ 280.870714][T12213] dummy0 speed is unknown, defaulting to 1000 [ 280.891955][T12216] netlink: NAT attribute has 5 unknown bytes [ 280.891994][T12216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.120656][T12228] FAULT_INJECTION: forcing a failure. [ 281.120656][T12228] name failslab, interval 1, probability 0, space 0, times 0 [ 281.120688][T12228] CPU: 1 UID: 0 PID: 12228 Comm: syz.3.2018 Not tainted syzkaller #0 PREEMPT(full) [ 281.120710][T12228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.120721][T12228] Call Trace: [ 281.120729][T12228] [ 281.120737][T12228] dump_stack_lvl+0xe8/0x150 [ 281.120770][T12228] should_fail_ex+0x410/0x560 [ 281.120798][T12228] should_failslab+0xa8/0x100 [ 281.120822][T12228] __kvmalloc_node_noprof+0x176/0x820 [ 281.120846][T12228] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 281.120869][T12228] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 281.120900][T12228] bpf_compute_subprog_arg_access+0x509/0x14d0 [ 281.120924][T12228] ? bpf_tracing_func_proto+0x72/0x180 [ 281.120975][T12228] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 281.121005][T12228] ? __kvmalloc_node_noprof+0x345/0x820 [ 281.121026][T12228] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 281.121046][T12228] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 281.121076][T12228] bpf_compute_live_registers+0x8d3/0x1ff0 [ 281.121116][T12228] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 281.121150][T12228] bpf_check+0x2746/0x2ef0 [ 281.121189][T12228] ? __pfx_bpf_check+0x10/0x10 [ 281.121212][T12228] ? bpf_obj_name_cpy+0x194/0x1e0 [ 281.121241][T12228] bpf_prog_load+0x14d6/0x1c20 [ 281.121271][T12228] ? __pfx_bpf_prog_load+0x10/0x10 [ 281.121312][T12228] __sys_bpf+0xd0d/0xd90 [ 281.121339][T12228] ? __pfx___sys_bpf+0x10/0x10 [ 281.121370][T12228] ? __fget_files+0x2a/0x420 [ 281.121410][T12228] ? ksys_write+0x242/0x270 [ 281.121441][T12228] ? __pfx_ksys_write+0x10/0x10 [ 281.121472][T12228] __x64_sys_bpf+0xba/0xd0 [ 281.121492][T12228] do_syscall_64+0x166/0x520 [ 281.121519][T12228] ? trace_irq_disable+0x3b/0x140 [ 281.121538][T12228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.121564][T12228] ? clear_bhb_loop+0x70/0xc0 [ 281.121587][T12228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.121606][T12228] RIP: 0033:0x7f3863f9e199 [ 281.121624][T12228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.121639][T12228] RSP: 002b:00007f3864ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.121658][T12228] RAX: ffffffffffffffda RBX: 00007f3864225fa0 RCX: 00007f3863f9e199 [ 281.121672][T12228] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 281.121683][T12228] RBP: 00007f3864ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.121695][T12228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.121705][T12228] R13: 00007f3864226038 R14: 00007f3864225fa0 R15: 00007ffc5758cf08 [ 281.121732][T12228] [ 281.499558][T12236] ipvlan2: entered promiscuous mode [ 281.512019][T12236] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 281.512047][T12236] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 281.513044][T12236] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 281.595821][T12243] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 281.602852][ T12] macvlan0: left promiscuous mode [ 282.109485][T12266] netlink: NAT attribute has 5 unknown bytes [ 282.109518][T12266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.147543][T12262] dummy0 speed is unknown, defaulting to 1000 [ 282.810149][T12280] __nla_validate_parse: 8 callbacks suppressed [ 282.810169][T12280] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2034'. [ 283.512825][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 283.512851][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2038'. [ 284.491144][T12346] netlink: zone id is out of range [ 284.491162][T12346] netlink: zone id is out of range [ 284.491173][T12346] netlink: zone id is out of range [ 284.491182][T12346] netlink: zone id is out of range [ 284.491193][T12346] netlink: zone id is out of range [ 284.491208][T12346] netlink: zone id is out of range [ 284.491221][T12346] netlink: zone id is out of range [ 285.257101][T12360] FAULT_INJECTION: forcing a failure. [ 285.257101][T12360] name failslab, interval 1, probability 0, space 0, times 0 [ 285.257136][T12360] CPU: 1 UID: 0 PID: 12360 Comm: syz.4.2055 Not tainted syzkaller #0 PREEMPT(full) [ 285.257159][T12360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.257169][T12360] Call Trace: [ 285.257177][T12360] [ 285.257185][T12360] dump_stack_lvl+0xe8/0x150 [ 285.257217][T12360] should_fail_ex+0x410/0x560 [ 285.257246][T12360] should_failslab+0xa8/0x100 [ 285.257272][T12360] __kmalloc_cache_noprof+0xa3/0x600 [ 285.257294][T12360] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 285.257316][T12360] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 285.257345][T12360] bpf_prog_alloc_no_stats+0xd8/0x560 [ 285.257367][T12360] ? bpf_prog_alloc+0x2a/0x1a0 [ 285.257388][T12360] bpf_prog_alloc+0x3c/0x1a0 [ 285.257412][T12360] bpf_prog_load+0x7f8/0x1c20 [ 285.257442][T12360] ? __pfx_bpf_prog_load+0x10/0x10 [ 285.257484][T12360] __sys_bpf+0xd0d/0xd90 [ 285.257513][T12360] ? __pfx___sys_bpf+0x10/0x10 [ 285.257546][T12360] ? __fget_files+0x2a/0x420 [ 285.257599][T12360] ? ksys_write+0x242/0x270 [ 285.257630][T12360] ? __pfx_ksys_write+0x10/0x10 [ 285.257664][T12360] __x64_sys_bpf+0xba/0xd0 [ 285.257707][T12360] do_syscall_64+0x166/0x520 [ 285.257735][T12360] ? trace_irq_disable+0x3b/0x140 [ 285.257754][T12360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.257775][T12360] ? clear_bhb_loop+0x70/0xc0 [ 285.257799][T12360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.257819][T12360] RIP: 0033:0x7efe2099e199 [ 285.257836][T12360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.257853][T12360] RSP: 002b:00007efe217f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.257873][T12360] RAX: ffffffffffffffda RBX: 00007efe20c25fa0 RCX: 00007efe2099e199 [ 285.257888][T12360] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 285.257901][T12360] RBP: 00007efe217f5090 R08: 0000000000000000 R09: 0000000000000000 [ 285.257914][T12360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.257926][T12360] R13: 00007efe20c26038 R14: 00007efe20c25fa0 R15: 00007fff6ea0dcb8 [ 285.257958][T12360] [ 285.665199][T12372] netlink: 'syz.1.2057': attribute type 3 has an invalid length. [ 285.721199][T12375] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2061'. [ 285.735283][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 286.258871][T12394] dummy0 speed is unknown, defaulting to 1000 [ 286.654278][T12405] syzkaller1: entered promiscuous mode [ 286.654302][T12405] syzkaller1: entered allmulticast mode [ 287.501422][T12411] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 287.501449][T12411] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 287.805616][T12424] syzkaller1: entered promiscuous mode [ 287.805642][T12424] syzkaller1: entered allmulticast mode [ 287.984415][T12435] net_ratelimit: 13 callbacks suppressed [ 287.984438][T12435] ip_tables: iptables: counters copy to user failed while replacing table [ 288.445465][T12445] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2081'. [ 288.445492][T12445] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2081'. [ 289.184721][T12460] tipc: Started in network mode [ 289.184746][T12460] tipc: Node identity ffff1083, cluster identity 4711 [ 289.184760][T12460] tipc: Node number set to 4294905987 [ 289.185220][T12460] tipc: Cannot configure node identity twice [ 289.705298][T12339] Set syz0 is full, maxelem 65536 reached [ 289.710584][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 289.867137][T12471] v: renamed from veth0_vlan [ 290.059362][ T995] bond7: (slave macvlan0): link status definitely down, disabling slave [ 290.087700][ T995] bond7: now running without any active interface! [ 290.185599][T12502] openvswitch: netlink: Key type 7430 is out of range max 32 [ 291.720273][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 312.169916][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.299640][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 400.314195][ C1] rcu: 0-...!: (1 GPs behind) idle=ed2c/1/0x4000000000000000 softirq=50358/50362 fqs=1 [ 400.323921][ C1] rcu: (detected by 1, t=10503 jiffies, g=49765, q=822 ncpus=2) [ 400.331649][ C1] Sending NMI from CPU 1 to CPUs 0: [ 400.336870][ C0] NMI backtrace for cpu 0 [ 400.336892][ C0] CPU: 0 UID: 0 PID: 12508 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 400.336914][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.336927][ C0] RIP: 0010:__hrtimer_run_queues+0x4d3/0xa10 [ 400.337026][ C0] Code: 9e 13 00 49 bd 00 00 00 00 00 fc ff df eb 16 e8 c3 9e 13 00 48 89 ef 48 8b 74 24 38 31 d2 31 c9 e8 a2 35 00 00 43 0f b6 04 2f <84> c0 48 8b 14 24 0f 85 62 01 00 00 ff 02 43 0f b6 04 2f 84 c0 0f [ 400.337045][ C0] RSP: 0018:ffffc90000007dc0 EFLAGS: 00000046 [ 400.337062][ C0] RAX: 0000000000000000 RBX: ffff888077ee6338 RCX: ffff888031983e80 [ 400.337075][ C0] RDX: 0000000001000001 RSI: 0000000001000001 RDI: ffff888077ee6300 [ 400.337104][ C0] RBP: ffff888077ee6300 R08: ffff888077ee6317 R09: 0000000000000000 [ 400.337118][ C0] R10: ffff888077ee6308 R11: ffffed100efdcc63 R12: ffff8880b8628280 [ 400.337143][ C0] R13: dffffc0000000000 R14: ffff8880b86283a0 R15: 1ffff110170c506a [ 400.337157][ C0] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 400.337172][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.337185][ C0] CR2: 000055f9dcfd0078 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 400.337202][ C0] Call Trace: [ 400.337211][ C0] [ 400.337229][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 400.337269][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 400.337292][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 400.337359][ C0] [ 400.337365][ C0] [ 400.337372][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.337392][ C0] RIP: 0010:lock_release+0x2e1/0x3c0 [ 400.337412][ C0] Code: 2a f1 11 00 00 00 00 eb b5 e8 1b 6b 42 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b3 e5 f0 11 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 90 6f 45 0a cc 48 8d 3d 68 63 d9 [ 400.337428][ C0] RSP: 0018:ffffc900035b7520 EFLAGS: 00000282 [ 400.337444][ C0] RAX: b2ac8488d9a0a300 RBX: 0000000000000202 RCX: 8000000000000002 [ 400.337457][ C0] RDX: 0000000000000000 RSI: ffffffff8e688ec6 RDI: ffffffff8c6dad80 [ 400.337470][ C0] RBP: ffff888031984aa8 R08: ffffffff8243eb4a R09: 0000000000000000 [ 400.337482][ C0] R10: dffffc0000000000 R11: fffff9400032ea01 R12: 0000000000000003 [ 400.337495][ C0] R13: 0000000000000003 R14: ffffffff8ed5c960 R15: ffff888031983e80 [ 400.337511][ C0] ? pfn_valid+0xba/0x490 [ 400.337536][ C0] ? pfn_valid+0xba/0x490 [ 400.337555][ C0] pfn_valid+0x3bb/0x490 [ 400.337576][ C0] page_table_check_clear+0x21/0x500 [ 400.337596][ C0] ? vm_normal_page+0x13c/0x2b0 [ 400.337616][ C0] __zap_vma_range+0x3a34/0x4f80 [ 400.337636][ C0] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 400.337681][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 400.337706][ C0] ? mas_find+0x6d6/0xcb0 [ 400.337783][ C0] unmap_vmas+0x390/0x550 [ 400.337806][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 400.337822][ C0] ? mas_next_slot+0xc91/0xd70 [ 400.337859][ C0] exit_mmap+0x293/0x9f0 [ 400.337886][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 400.337922][ C0] ? __pfx_exit_aio+0x10/0x10 [ 400.337954][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 400.337981][ C0] __mmput+0x118/0x420 [ 400.338008][ C0] exit_mm+0x18e/0x240 [ 400.338025][ C0] do_exit+0x6cd/0x2360 [ 400.338046][ C0] ? __pfx_do_exit+0x10/0x10 [ 400.338061][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 400.338090][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.338164][ C0] do_group_exit+0x22d/0x2f0 [ 400.338184][ C0] __x64_sys_exit_group+0x3f/0x40 [ 400.338201][ C0] x64_sys_call+0x18c6/0x18d0 [ 400.338227][ C0] do_syscall_64+0x166/0x520 [ 400.338280][ C0] ? trace_irq_disable+0x3b/0x140 [ 400.338299][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.338317][ C0] ? clear_bhb_loop+0x70/0xc0 [ 400.338337][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.338355][ C0] RIP: 0033:0x7f7745dac6c5 [ 400.338371][ C0] Code: Unable to access opcode bytes at 0x7f7745dac69b. [ 400.338381][ C0] RSP: 002b:00007ffe2fb7dad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 400.338399][ C0] RAX: ffffffffffffffda RBX: 000055f9dcfbb910 RCX: 00007f7745dac6c5 [ 400.338412][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 400.338424][ C0] RBP: 00007ffe2fb7de08 R08: 0000000000000000 R09: 0000000000000000 [ 400.338436][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2fb7de00 [ 400.338448][ C0] R13: 00007ffe2fb7de10 R14: 00007f7745fbc000 R15: 000055f9dbb91d98 [ 400.338470][ C0] [ 400.772855][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10497 jiffies! g49765 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 400.784830][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=21091 [ 400.792744][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g49765 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 [ 400.803861][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 400.813843][ C1] rcu: RCU grace-period kthread stack dump: [ 400.819728][ C1] task:rcu_preempt state:I stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 400.831842][ C1] Call Trace: [ 400.835135][ C1] [ 400.838088][ C1] __schedule+0x17db/0x58f0 [ 400.842625][ C1] ? __lock_acquire+0x747/0x2de0 [ 400.847580][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 400.852710][ C1] ? __pfx___schedule+0x10/0x10 [ 400.857562][ C1] ? lock_acquire+0x115/0x350 [ 400.862282][ C1] ? schedule+0x90/0x2b0 [ 400.866558][ C1] schedule+0x164/0x2b0 [ 400.870755][ C1] schedule_timeout+0x152/0x2c0 [ 400.875701][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 400.881108][ C1] ? __pfx_process_timeout+0x10/0x10 [ 400.886409][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 400.892237][ C1] ? prepare_to_swait_event+0x322/0x350 [ 400.897898][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 400.902850][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 400.908747][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 400.914029][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 400.919236][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 400.925049][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 400.929644][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 400.934841][ C1] ? __kthread_parkme+0x71/0x1f0 [ 400.939788][ C1] ? __kthread_parkme+0x199/0x1f0 [ 400.944824][ C1] kthread+0x38b/0x480 [ 400.948893][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 400.954091][ C1] ? __pfx_kthread+0x10/0x10 [ 400.958685][ C1] ret_from_fork+0x514/0xb70 [ 400.963305][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 400.968431][ C1] ? __switch_to+0xc89/0x1420 [ 400.973117][ C1] ? __pfx_kthread+0x10/0x10 [ 400.977707][ C1] ret_from_fork_asm+0x1a/0x30 [ 400.982498][ C1]