last executing test programs: 35.46731093s ago: executing program 0 (id=1290): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/70, 0x46}], 0x1, 0x0, 0x0, 0x8dff}, 0x23) 34.546386288s ago: executing program 0 (id=1305): socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x560b, 0x0, 0x0, 0x0, 0x2}, 0x48) 34.465030443s ago: executing program 3 (id=1306): syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e220005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac141440000000000000000000000000000000033c8000"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x4e23, 0x0, 0x8, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0xfffffffe, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, @in6=@local, @in=@local, 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x2000000, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, &(0x7f0000000180)=0x7fffffffffffffff, r5, 0x0, 0x4, 0xa) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022dbd7000fddbdf7b63014e16628c2bd163c4eacf7ee22502000000140006007663616e3000000000deffffffffffff0400010014000200fe800000000000b0000000df4666"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008000) sendmsg$NFC_CMD_GET_TARGET(r1, 0x0, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x800, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x58}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) unshare(0x6e070380) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="060000001000"}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x6}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206010100000000000000000400ffff1400078008001240000000f70fd8ad00040000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) 34.39233087s ago: executing program 0 (id=1308): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0x90}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x404c011}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) writev(r1, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000440)="fabd96cf8c540274d40ad0bbcf85fabfcccb9714c27711e9f409f51d9e17c618a8c23f556e4e648515a003bb3b8af2156f7dd205331625fede5e5adbd3246d384819e53973def84fd4f1c69582859f8d036351703beec4faedbd3622d59eb921aaac0f1387b89829860c3dbb49d20d52385434705c14200f112126c0b1dff3ec3a67ae8001e76f982bda3e98f48aeb4585f83bef08abf41d0a940a1f341da574c6c18405dae5c9f89e3a805d4838e4cb8518b5", 0xb3}, {&(0x7f0000000680)="ccc8df09334563a438d72736682c1866444a73fcb6a4a38a0d2a713242bb19af9ab5ee9cac4815e2eb02793e09643096fe8655dcf0ea2283970b4cc1434ac6dd6da73a81e8ba06668c70701de4ed59665cef84d1b7a2c31d0f168db6a121daba54690d9e503051615e639fde6b114d17e52179de1903e15b3eaf0726c441df1da37ad9e8a09149c6bfb4c2c9222475801addfef1ff9b9de0b69a95140e86e64e165419b1b14e4a03", 0xa8}, {&(0x7f0000000840)="8ccf968b66fe3eb59ecabbc75d2efc3ba61f4f4b796e5ba12fb48772e4a170a854ea5a7566ac90d30633cb113cbf325ab617ccfe743cb29d6fdd5a2a8956d30fd61f36ab", 0x44}], 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$inet(r7, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000f3"], 0x10}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20142}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r9, 0x25, 0x0, @void}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) 34.326442785s ago: executing program 1 (id=1309): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 34.304149803s ago: executing program 3 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf2504000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x4890) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x2, 0xa, 0x1000, 0xff, 0x4}, {0x5, 0x1, 0x2, 0x1, 0x101}, 0xffff, 0x3, 0x11fb}}, @TCA_TBF_BURST={0x8, 0x6, 0xfffffffc}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 34.239887628s ago: executing program 2 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0xfff0) 34.190560585s ago: executing program 2 (id=1312): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)="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", 0x132}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 34.173273483s ago: executing program 0 (id=1313): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r3}, 0x94) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ec0)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x319}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x9359844d3db6cf77}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x1, 0x3, 0x6, 0xca13d4dfccc9515, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000600)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000e40)=""/4096, 0x40f00, 0x39, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e40)={0x2, 0xf, 0x8, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e80)=[0x1, r2, r2, r2, r2, r2, r2, r2, r2], 0x0, 0x10, 0xe74}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) 34.055632778s ago: executing program 2 (id=1314): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1d, 0x2, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x6}, 0x0, 0x0) bind$can_j1939(r0, 0xfffffffffffffffc, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4051}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20008000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) close(r5) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000001c0)) 33.953013909s ago: executing program 0 (id=1315): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000b00)="130000000102039839", 0x9}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/37}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000a40)=@l2, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/76, 0x4c}, {&(0x7f0000000bc0)=""/108, 0x6c}], 0x2, &(0x7f0000000c80)=""/123, 0x7b}, 0x4}, {{&(0x7f0000000d00)=@isdn, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/251, 0xfb}], 0x1, &(0x7f0000000ec0)=""/108, 0x6c}, 0x2}], 0x2, 0x2000, &(0x7f0000000fc0)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4048800) select(0x40, &(0x7f0000000180)={0x5, 0x100000000, 0x4, 0x80000000, 0xffff, 0xfffffffffffff001, 0x7502, 0x7}, &(0x7f00000001c0)={0x8, 0x3, 0x1, 0x6, 0xffffffffffffffff, 0x80, 0x6, 0x32f7729d}, &(0x7f0000000200)={0x7, 0x9e, 0x100000000, 0xb7, 0x9, 0x8, 0x0, 0x8}, &(0x7f00000006c0)={0x77359400}) close(r2) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000500)={@local, @dev={0xac, 0x14, 0x14, 0x2b}, r5}, 0xc) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r8, r7, 0x4, r7}, 0x6) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000007c0)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000a00)=@int=0x9, 0x4) setsockopt$inet_int(r6, 0x0, 0x2, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)='\'@\\\x00', 0x64202, &(0x7f0000000040)={@align=0x4, {0xb, 0x9, 0x6, 0xe}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x5e0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x9, 0xf, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x80, 0x4, 0x4}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000600)={r0, &(0x7f00000009c0)=',-}\\)*@$\xff(#[\x00', 0x670000, &(0x7f0000000540)={@align=0xfffffffffffffffe, {0x8001, 0x3, 0x80, 0x5b6c}}, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x25, &(0x7f0000000280)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20f}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x1f, &(0x7f0000000400)=""/31, 0x0, 0x12, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x3, 0xfffffff7, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x6}, 0x94) 33.747617487s ago: executing program 1 (id=1316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0xfd, 0xeffffff4, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffffd}, 0x94) 33.679640253s ago: executing program 1 (id=1317): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @empty, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 33.610443704s ago: executing program 4 (id=1318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x1000000, 0x801}, 0x4000000) 33.586227174s ago: executing program 1 (id=1319): syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500082c01fe8000000000000000000000000000bbfeda"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e1d, @broadcast}, 0x10) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x4000200a}) 33.479682297s ago: executing program 4 (id=1320): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="e55ee38a98ad59756a38996e1cc86b5b84be312c394d4d0e993cc622ba3b29bdd14c8c20ba04d9d47deda240b31e6fae0268ee8da008e87477c4726b5f9960cbe9b0403cd8091e70791b5fca9c70d73815c9f6fec3e941169225163f52fc0231f56880a1", @ANYRESDEC=r0, @ANYBLOB="1c6a1624c55079937dc46fa96b560d261dc5e27d9926d22da7a24f978dc39dee5aea75cc04f86ad372974e19d1b51140f6058e36748a796e84f7e4fa6dccbac510dd9b82022a10ccb5d7b6e47b14fd0475536dd7b73e38b3d2997fe1d264b753287a8ee6cc120af558412dc1beefcd76ecbdb418b27b4502c47f8336e70380b41581cb53018d2ca6f27fdee4b2ffcdee522219dba557aa1887b8ac2ebdfdaf93", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000009002f647198d7d51e3c0f606e3aac58000000000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) 33.47938141s ago: executing program 1 (id=1321): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 33.447848117s ago: executing program 3 (id=1322): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbc75aff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="f68ded77286c53e27a617e528624", 0x0, 0x1008, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 33.436842951s ago: executing program 4 (id=1323): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/82, 0x52}, {&(0x7f0000000780)=""/51, 0x33}], 0x2}, 0x3}], 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, 0x0, &(0x7f0000000540)) (async) recvmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x10002, 0x0) 33.422428574s ago: executing program 1 (id=1324): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)="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", 0x132}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 33.304149013s ago: executing program 3 (id=1325): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="25790952e1d7e0a587", 0x9}], 0x1}, 0x4004) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x54, 0x0, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/40, 0x28}], 0x1) 33.302874174s ago: executing program 4 (id=1326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6bd4d288a80000000000"}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], &(0x7f0000000000)=""/2, 0x45, 0x2, 0x1, 0x5}, 0x28) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071101f0000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x66}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 33.175577121s ago: executing program 4 (id=1327): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x2, 0xc9, 0x4, 0x6, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0x5, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 33.115994614s ago: executing program 3 (id=1328): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32=0x0, @ANYBLOB="08000f"], 0x44}}, 0x0) r1 = accept4(r0, &(0x7f0000000080)=@isdn, &(0x7f0000000280)=0x80, 0x800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000240)=0x6, 0x4) sendmmsg$inet6(r3, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="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", 0xfd}, {&(0x7f0000000c80)="3361849159277db3032c8dd904f0f380b72688ccbdfb1e0000573294ddbe0f71df093d0014d9d141e871ef6625c69bfaa35438eac1d96a0d75658c7e95e2e49c9e6f45c6c75cdaa64cc449e5d1a723fcc707045540809f243c4d43b86058f2f0e4796990fd966b172bd2d6a3fe7a72991eeed95c99e1f6b2a21fb98a1f7afafc95137f99d235d4b11cc34c05333749137b1f5a29c2078370a4c62d73d05ae60ee1f47d73986192ae47a0afcf295a0c686d74222cf17985a645d1cd0837ad44154520bc28323593dd11c053688fc2c9b1ea7e0c27271870be9f22093c4f9d33a65e7ed28ae41f11678524552aa2ed718627512b419c852d9955c3457eb0e723440c0085", 0x103}, {&(0x7f0000000280)="258631a5a41a47da539cf907f57998636fb435af75589f57d89c952a2f12a6d8aabd270c54c7d6d4dfa6c2ef6ab028767e2e4f62048f3c0ef0584681b2e0fe1bd05c667208756f3de0c00995454c5c9048b1ba9a99d4e0de89ee5446a13dddf231cedd92498b2a", 0x67}, {&(0x7f0000000300)="8804b21c97dae23cf34f5543b4f4d2179fe43dd45c60a048e8", 0x19}], 0x4}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="fecb85a434a5502ead508c3a855d1247e06105fb8ac57edf9094aa0c15b09901f48fc9d276a1d209a61c09afb44feeb3f355ce378f3ee105203dcbf4d127b2fb13c10a7fd6abc98f7b2aa6b8947381d03364ae1a9c018d8ee870ceb8d77d24", 0x5f}, {&(0x7f0000000540)="31bb06bf473c3225069cb1e2564b9f60e4dd6c7e83669e4d181ad0baec4766e6236ad935a964298bdf1ae404d3b47c1bd4f470b8cab903c6b8172a21f3d648b597ca7a0f9da9b2186d8a41b1a99386cce267fa859302cddc6341184e0ea82616dc624ba66e514b39f44e8a4e7d1261226a3764d97d71b00ff9b29d2891eeb478ad769f201b2263879397a67788c1c1bdda51cf0d4092c222b0f8d92094412177ceb0f1b383adc82548962d1eee65eebf065b5b2d1deba96e80c8dc8fa6259e7077db93037ef46a66ecf587a0ff27ba2bc476cbd9bdca7f8716251adb", 0xdc}, {&(0x7f0000000640)="84a7cc7c177140967197ccbae50747ddaf1fcffbca6218fb980701d808c86276552a87f06548503becd860d2fd38d113df5cdc666238ad755c9f7d58f328bab24b24465509fd", 0x46}], 0x3}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001e00)="d775d06f8cffc054", 0x8}], 0x1}}], 0x3, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6d9311000000f8dbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x168, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x6d, 0x45, "67f02396f24de160e2faf306d668cbdba0df9ed76f6d1b2a10273f14fa0808e85f14098a9f44d79706dfdbf4009dff50dce53df90a1108379182658743dc31e95b70e73800773eeaeb28457c093a75a461c4788fbf219cc32308b0e8646f2e5e435ae6206611527db4"}, @NL80211_ATTR_TESTDATA={0x75, 0x45, "f379a9d54ed74feaf1ba5ad887c6ebb10e9edb741126ce6c7314d17aab881719d265d8db8764a8087dca08c1574da7af7fc63872a9d810d96c2ada749e1910b646d0dcdcc02f9af4c245b7a8eb2a20d6ccfb1df905157aba2bf9809fff43674584335759c346daaed16aa8a378d5d3175d"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "1c38e6ae14089db080ba50daf418fb6157eedd0a9d79c069e0484ba4aeb1892033390b77b87c1d68eeff40ad6a7ddf711530dbadc7d8dfe1540bd84bed30579379d325842448f4340211a8a3e313edb5a28a170c68c37daaeb1de6ffe7"}]}, 0x168}, 0x1, 0x0, 0x0, 0x40019}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x0, 0x7, {{0xc, 0x4, 0x1, 0x9, 0x30, 0x64, 0x0, 0xa0, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x1c, 0x94, 0x0, 0xf, [0x5, 0xd, 0x23, 0x0, 0x4, 0x101]}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 33.108387532s ago: executing program 2 (id=1329): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="184100008b000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100000000808700000000000000181a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000180000000080000000000000cb0a0000bf91000000000000b7020000030000008500000084000000b70000000005000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 32.94772853s ago: executing program 2 (id=1330): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0, 0xfe80}, {&(0x7f0000000bc0)="ab29d9282634", 0x6}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 32.884345425s ago: executing program 0 (id=1331): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20006490"], 0xa3) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012000800183a00000000000001000000000000000000010000000000000000000000000000000183009078000936c0fe800000000000000000000000006dbb"], 0x0) (async) unshare(0x4000000) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 32.800419115s ago: executing program 3 (id=1332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) close(0x3) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x1, @empty, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x70, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r4, 0x7}, 0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r4, 0x2}, &(0x7f00000000c0)=0x8) sendto$inet6(r3, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000180)=0x40002, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000208000b400000000070000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000003800018008000100636d70002c00028018000380090001009c979b32261fbabdae20b34f870e0000080001400000000208000240000000000900010073797a30"], 0x10c}}, 0x0) (fail_nth: 9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 32.715659984s ago: executing program 2 (id=1333): socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x2, 0xa, 0x73) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x2, {0x1, 0x1, 0x3}, 0x1}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000300)={0x87, 0x1c, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @generic={0x8, 0xb4, "e7fd9d59ce4041ad0eebe9822927e6fc0cbcde6dcd080e0aa18ae5d5dfb2455122cc0b87ef0bfa4f86731c25083cb4a0434363df904386c70fba5deb6181489ab26712909141990737624164dd7e6b1810551aaa5f7cc2c0caaf553dd6f5e744f4a9e38c6276d70efa2a94f293f32a7b76b84aadfe9d9e30236fcf2d8a7d50ae7ba4e016c43e8ccc9318730e8398f47248a8b0e85cda9746e3c220f506547a7537ed696fe1ed9df9e67a404ef1556affd3896d26"}, @hao={0xc9, 0x10, @loopback}, @pad1]}, 0xf0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000800)={0x62c, 0x13, 0x20, 0x70bd26, 0x25dfdbfe, {0x10, 0xa3, 0xbe, 0xff, {0x4e23, 0x4e24, [0x7, 0x5, 0xd2, 0x6], [0x5, 0x9, 0x39, 0x1], r7, [0x5, 0x2]}, 0x0, 0x8001}, [@INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "1a051b590bfb3133c0727dacd841836c1bf84fc6405418f13a1c078922b1e481977033cce220153d11c1f5a29274993c721b46fc0f53b234d802084e7f8f9607c932d3ab7c40db249cfaff246f2a554aff1b9da9d09ecb3b446b060889372264d4b5fa77824cbe35cef8b3bbeb810c831946f49d1e5e3ff1aa5bc9d753d3e6da990f014483fafd2609bab189a71f968a4c4c4f3f50bb16feb3c70d90240abd08b3726cc84dfa2695a93d9a24a54cc15e5d9b249ffaad20f3c2b12804fd6293f1765748f70bb76405d656bfe86c37304f9eb4efcff520ed9508a50a8328c8b24bec1ef3"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xb3, 0x1, "c379faa9d8034bcad63a919cfe42bbe38d02f4d856719ce8db3bf681e57f8495d506326cf996463f1ed3e53204c34ecc28d10a6be5c013bd5eaa8f8ff20cf76ef51ea72fffda26f1efb3693f29e5b11738d88457152763395002218a3d87686c3bc7b4cd2653c1226ba00f1b7be186b57cb551698be09df749d463248777cc903215310a1867bc7c6e0a6daf77a0f309ce537fb11c29875485fba5dae98e6be45096b07b1147039f02a8eb7ba90d6d"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "26e4e0bd8b205d6287b7d30bc3cfd7ca85cea85eb96849c11d9f80a824251b2624c4852a67e536bb58ffebbab5558f914aaa30a6106fc40e5b9db229b7cb6a6e178618cebdcc1407dbe8129b01481e2a7d776df5e5d00a08beb028cf17758a5b8ab08644fcbb1464ea9272ed414118d1585fcec78ab0f9a0654667f460592a483eade8fe3eeddfa21eb4dc132ef1bc5a3a02411e271266151656f88a0e963d15e2d6f0e13abb98bd1c91b57e3deb2dac7e4d243c457bba3689164b8740e2"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "dd1dbcf3bc65f3d1750418aadff88f3266dcec46385b4d27a349feec397cf98e2f001042ec392f7bea9a7cc170dcbb2d8803f45a782472ae83695bf75223273bfca710ead462b8ddddfbf6e35df21f25289229e79aaa1ca8c0bd465a17440477566d2334432a239aef18c23a8564b52f8630bc8a8e3fda84cab799138c47d03961c2f86c2df127ff76060bba2a2d84cc96ca5c381299f0c50e6d106c25a40c17327ff4af547f0f856b3b158409aba349f625c012c67e83e84589392389bc64a41d4a9865d8959606a950281f692c42f1a44971086bd1ffc831219cbaf107e6355f1d27"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "b76f4060acad2b73d6bada78001eb87316419e4966295f32c6613abb1feb52b9addca41f61a3c7c910228041898dc4dbe0ead8be9d573ac1f5cef93da7516ccfd248d8132a6cadf86f2af5f4037108ff41afa425a92dbe4e13407cc3e56039625190aeb8758ec74b1823f27189de6d2f4786d781553bf3884c19a0b32bdd32d9cad5ad16"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "c3284cf8761aa135ecc1daeab0d4601a4af6738f713445c8e0162b497825dd6b05da0cb3854c89c5319e0beb10ecf32de4f0e5a4b494e538963ace02c67f7c41114fd52833ab87623a488ed50a2e2de01811b238393dd51b83cdba637413e258f3038abf4dd113be40a581fa00bdb8504cf07d6c00114f4b1a325efdcb056925e5d4ab9631e70f13f9f0e7f1a9e6883aa56cebed5ff98be799fd172db4102c67c68022144babe4f61a520860e2b5a9b340341d9cbbb6973a24db00bc7f4c280be44f36315f030ce82aaf040ca668902c4686aa82aef32dee2df249e6723a0849ca920f6c"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "ac586ce5070ce057655a547148f266d01088a2cf759352fb0152807bd7b70f2a1022e210f549d0fd58c8e3119662a5c87d0773"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "2113db8f3d1b033e66462036c73f6792e99080436d2323bd3014a215dac78f0c8d6571db3f50db3e455933a3b1843c726f184c6ec1e89ffebd5b3bebb86f58ec3603f0d6e8a7cb9df4c4360b4e86e52a893554dccee96e2a4e90cb1af062e5e1437a6d22bb70be3e"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "65e331016dfd941da49430e7cea69a0123f0d433e933ae715662bc4bfea8923f5b1728be9bd4035f4695f9042b26b11e1134e6cddd53522c2bc2351c9c744d8eab69a7b617724d48d75c2f7f7c236aa547a562f6c534cb38941ba919389b4205ea7e61264ef9154a14d674217c08874d69e52935345b21b00427"}]}, 0x62c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 31.778108247s ago: executing program 4 (id=1334): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 0s ago: executing program 32 (id=1324): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)="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", 0x132}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 0x760 [ 177.850068][ T8460] ? __asan_memset+0x22/0x50 [ 177.850093][ T8460] af_alg_get_rsgl+0x4b6/0x8e0 [ 177.850129][ T8460] skcipher_recvmsg+0x392/0x1140 [ 177.850168][ T8460] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 177.850188][ T8460] ? __lock_acquire+0x6b5/0x2cf0 [ 177.850205][ T8460] ? aa_sock_msg_perm+0xf1/0x1b0 [ 177.850232][ T8460] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 177.850255][ T8460] ? security_socket_recvmsg+0x7e/0x2c0 [ 177.850276][ T8460] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 177.850297][ T8460] sock_recvmsg+0x172/0x1b0 [ 177.850325][ T8460] ____sys_recvmsg+0x1e6/0x4a0 [ 177.850365][ T8460] ? __pfx_____sys_recvmsg+0x10/0x10 [ 177.850401][ T8460] ? import_iovec+0x73/0xa0 [ 177.850426][ T8460] ___sys_recvmsg+0x215/0x590 [ 177.850444][ T8460] ? get_pid_task+0x20/0x1f0 [ 177.850470][ T8460] ? __pfx____sys_recvmsg+0x10/0x10 [ 177.850493][ T8460] ? __fget_files+0x2a/0x420 [ 177.850531][ T8460] ? __fget_files+0x3a0/0x420 [ 177.850562][ T8460] __x64_sys_recvmsg+0x1ba/0x2a0 [ 177.850584][ T8460] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 177.850614][ T8460] ? __pfx_ksys_write+0x10/0x10 [ 177.850647][ T8460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.850667][ T8460] do_syscall_64+0x174/0x580 [ 177.850685][ T8460] ? trace_irq_disable+0x3b/0x140 [ 177.850709][ T8460] ? clear_bhb_loop+0x40/0x90 [ 177.850730][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.850745][ T8460] RIP: 0033:0x7fd75379ce59 [ 177.850764][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.850779][ T8460] RSP: 002b:00007fd7519f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 177.850798][ T8460] RAX: ffffffffffffffda RBX: 00007fd753a16090 RCX: 00007fd75379ce59 [ 177.850810][ T8460] RDX: 000000000000f0ff RSI: 00002000000005c0 RDI: 0000000000000004 [ 177.850820][ T8460] RBP: 00007fd7519f6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.850830][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.850840][ T8460] R13: 00007fd753a16128 R14: 00007fd753a16090 R15: 00007ffd360f4e68 [ 177.850867][ T8460] [ 177.882723][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.208889][ T8478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.803'. [ 178.267753][ T8459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.293774][ T8478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.803'. [ 178.312526][ T8459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.314447][ T8478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.803'. [ 178.325610][ T8459] veth1_vlan: left promiscuous mode [ 178.350681][ T8478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.803'. [ 178.350848][ T8478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.803'. [ 178.351008][ T8478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.803'. [ 178.351235][ T8478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.803'. [ 178.351411][ T8478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.803'. [ 178.351631][ T8478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.803'. [ 178.523254][ T8459] veth0_vlan: left promiscuous mode [ 178.529565][ T8459] veth0_vlan: entered promiscuous mode [ 178.539179][ T8459] veth1_vlan: entered promiscuous mode [ 178.550184][ T8459] veth1_macvtap: left promiscuous mode [ 178.556884][ T8459] veth0_macvtap: left promiscuous mode [ 178.564219][ T8459] veth0_macvtap: entered promiscuous mode [ 178.572582][ T8459] veth1_macvtap: entered promiscuous mode [ 178.666196][ T8459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.675066][ T8459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.684114][ T8459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.734357][ T8459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.775579][ T8459] batman_adv: batadv0: Interface activated: gretap1 [ 178.783767][ T8459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.794357][ T8459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.847465][ T5757] lo speed is unknown, defaulting to 1000 [ 178.854203][ T5757] syz2: Port: 1 Link ACTIVE [ 178.990305][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.998635][ T228] bridge0: port 1(bridge_slave_0) entered listening state [ 179.020865][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.028090][ T228] bridge0: port 2(bridge_slave_1) entered listening state [ 179.208747][ T3284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.219043][ T3284] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 179.238940][ T3284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.247914][ T3284] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 179.266767][ T3284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.276625][ T3284] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 179.285468][ T3284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.296019][ T3284] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 179.723617][ T8514] xt_CONNSECMARK: invalid mode: 254 [ 179.845661][ T8516] dummy0: entered promiscuous mode [ 179.852946][ T8515] dummy0: left promiscuous mode [ 180.036721][ T8518] lo speed is unknown, defaulting to 1000 [ 180.119571][ T8524] lo speed is unknown, defaulting to 1000 [ 182.195422][ T8566] FAULT_INJECTION: forcing a failure. [ 182.195422][ T8566] name failslab, interval 1, probability 0, space 0, times 0 [ 182.225101][ T8566] CPU: 1 UID: 0 PID: 8566 Comm: syz.4.831 Not tainted syzkaller #0 PREEMPT(full) [ 182.225126][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.225137][ T8566] Call Trace: [ 182.225144][ T8566] [ 182.225152][ T8566] dump_stack_lvl+0xe8/0x150 [ 182.225178][ T8566] should_fail_ex+0x412/0x560 [ 182.225202][ T8566] should_failslab+0xa8/0x100 [ 182.225220][ T8566] ? alloc_empty_file+0x5b/0x1d0 [ 182.225241][ T8566] kmem_cache_alloc_noprof+0x87/0x650 [ 182.225271][ T8566] alloc_empty_file+0x5b/0x1d0 [ 182.225292][ T8566] alloc_file_pseudo+0x155/0x240 [ 182.225311][ T8566] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 182.225335][ T8566] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 182.225354][ T8566] ? evm_inode_alloc_security+0x40/0xb0 [ 182.225376][ T8566] ? security_inode_alloc+0xd5/0x310 [ 182.225412][ T8566] sock_alloc_file+0xb8/0x2e0 [ 182.225439][ T8566] do_accept+0x3a0/0x760 [ 182.225462][ T8566] ? __pfx_do_accept+0x10/0x10 [ 182.225497][ T8566] __sys_accept4+0x139/0x230 [ 182.225517][ T8566] ? __pfx___sys_accept4+0x10/0x10 [ 182.225535][ T8566] ? __pfx_ksys_write+0x10/0x10 [ 182.225574][ T8566] __x64_sys_accept4+0x9a/0xb0 [ 182.225592][ T8566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.225610][ T8566] do_syscall_64+0x174/0x580 [ 182.225628][ T8566] ? trace_irq_disable+0x3b/0x140 [ 182.225654][ T8566] ? clear_bhb_loop+0x40/0x90 [ 182.225674][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.225692][ T8566] RIP: 0033:0x7fbb2c39ce59 [ 182.225709][ T8566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.225724][ T8566] RSP: 002b:00007fbb2a5cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 182.225743][ T8566] RAX: ffffffffffffffda RBX: 00007fbb2c616090 RCX: 00007fbb2c39ce59 [ 182.225755][ T8566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 182.225766][ T8566] RBP: 00007fbb2a5cd090 R08: 0000000000000000 R09: 0000000000000000 [ 182.225777][ T8566] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 182.225788][ T8566] R13: 00007fbb2c616128 R14: 00007fbb2c616090 R15: 00007fff5d5cf828 [ 182.225815][ T8566] [ 182.952078][ T8587] __nla_validate_parse: 58 callbacks suppressed [ 182.952096][ T8587] netlink: 32 bytes leftover after parsing attributes in process `syz.4.838'. [ 183.014686][ T8591] FAULT_INJECTION: forcing a failure. [ 183.014686][ T8591] name failslab, interval 1, probability 0, space 0, times 0 [ 183.043151][ T8591] CPU: 1 UID: 0 PID: 8591 Comm: syz.1.839 Not tainted syzkaller #0 PREEMPT(full) [ 183.043177][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.043187][ T8591] Call Trace: [ 183.043194][ T8591] [ 183.043202][ T8591] dump_stack_lvl+0xe8/0x150 [ 183.043226][ T8591] should_fail_ex+0x412/0x560 [ 183.043249][ T8591] should_failslab+0xa8/0x100 [ 183.043270][ T8591] __kmalloc_noprof+0xe8/0x760 [ 183.043295][ T8591] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 183.043328][ T8591] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 183.043358][ T8591] genl_family_rcv_msg_doit+0xd9/0x330 [ 183.043390][ T8591] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.043423][ T8591] ? apparmor_capable+0x126/0x170 [ 183.043445][ T8591] ? bpf_lsm_capable+0x9/0x20 [ 183.043462][ T8591] ? security_capable+0x7e/0x2c0 [ 183.043491][ T8591] genl_rcv_msg+0x61c/0x7a0 [ 183.043522][ T8591] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.043544][ T8591] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 183.043570][ T8591] ? __pfx_ref_tracker_free+0x10/0x10 [ 183.043600][ T8591] netlink_rcv_skb+0x232/0x4b0 [ 183.043622][ T8591] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.043647][ T8591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.043683][ T8591] ? down_read+0x270/0x2e0 [ 183.043702][ T8591] ? genl_rcv+0xd/0x40 [ 183.043727][ T8591] genl_rcv+0x28/0x40 [ 183.043749][ T8591] netlink_unicast+0x75c/0x8e0 [ 183.043778][ T8591] netlink_sendmsg+0x813/0xb40 [ 183.043808][ T8591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.043833][ T8591] ? aa_sock_msg_perm+0xf1/0x1b0 [ 183.043859][ T8591] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.043886][ T8591] ____sys_sendmsg+0x972/0x9f0 [ 183.043906][ T8591] ? __might_fault+0xaf/0x130 [ 183.043934][ T8591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.043962][ T8591] ? import_iovec+0x73/0xa0 [ 183.043987][ T8591] ___sys_sendmsg+0x2a5/0x360 [ 183.044005][ T8591] ? __lock_acquire+0x6b5/0x2cf0 [ 183.044027][ T8591] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.044089][ T8591] ? __fget_files+0x2a/0x420 [ 183.044110][ T8591] ? __fget_files+0x3a0/0x420 [ 183.044140][ T8591] __x64_sys_sendmsg+0x1bd/0x2a0 [ 183.044163][ T8591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.044194][ T8591] ? __pfx_ksys_write+0x10/0x10 [ 183.044231][ T8591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.044251][ T8591] do_syscall_64+0x174/0x580 [ 183.044269][ T8591] ? trace_irq_disable+0x3b/0x140 [ 183.044294][ T8591] ? clear_bhb_loop+0x40/0x90 [ 183.044316][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.044333][ T8591] RIP: 0033:0x7f4e4939ce59 [ 183.044350][ T8591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.044366][ T8591] RSP: 002b:00007f4e4a1da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.044385][ T8591] RAX: ffffffffffffffda RBX: 00007f4e49615fa0 RCX: 00007f4e4939ce59 [ 183.044398][ T8591] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 183.044409][ T8591] RBP: 00007f4e4a1da090 R08: 0000000000000000 R09: 0000000000000000 [ 183.044421][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.044432][ T8591] R13: 00007f4e49616038 R14: 00007f4e49615fa0 R15: 00007fff9efab068 [ 183.044460][ T8591] [ 183.053790][ T8587] xfrm0: entered allmulticast mode [ 183.840778][ T8601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.845'. [ 183.875964][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 183.886559][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 183.984406][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 184.140740][ T8614] netlink: 104 bytes leftover after parsing attributes in process `syz.4.847'. [ 184.232566][ T8618] FAULT_INJECTION: forcing a failure. [ 184.232566][ T8618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.253137][ T8618] CPU: 1 UID: 0 PID: 8618 Comm: syz.0.848 Not tainted syzkaller #0 PREEMPT(full) [ 184.253165][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.253176][ T8618] Call Trace: [ 184.253183][ T8618] [ 184.253190][ T8618] dump_stack_lvl+0xe8/0x150 [ 184.253214][ T8618] should_fail_ex+0x412/0x560 [ 184.253238][ T8618] _copy_to_user+0x31/0xb0 [ 184.253267][ T8618] simple_read_from_buffer+0xe1/0x170 [ 184.253294][ T8618] proc_fail_nth_read+0x1bb/0x230 [ 184.253317][ T8618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.253343][ T8618] ? rw_verify_area+0x2a6/0x4d0 [ 184.253366][ T8618] ? tun_chr_write_iter+0x18a/0x200 [ 184.253380][ T8618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.253403][ T8618] vfs_read+0x20c/0xa70 [ 184.253431][ T8618] ? __pfx___mutex_lock+0x10/0x10 [ 184.253453][ T8618] ? __pfx_vfs_read+0x10/0x10 [ 184.253479][ T8618] ? __fget_files+0x2a/0x420 [ 184.253505][ T8618] ? __fget_files+0x3a0/0x420 [ 184.253525][ T8618] ? __fget_files+0x2a/0x420 [ 184.253553][ T8618] ksys_read+0x150/0x270 [ 184.253579][ T8618] ? __pfx_ksys_read+0x10/0x10 [ 184.253612][ T8618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.253631][ T8618] do_syscall_64+0x174/0x580 [ 184.253650][ T8618] ? trace_irq_disable+0x3b/0x140 [ 184.253675][ T8618] ? clear_bhb_loop+0x40/0x90 [ 184.253697][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.253715][ T8618] RIP: 0033:0x7fc0a915d68e [ 184.253732][ T8618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.253752][ T8618] RSP: 002b:00007fc0a9ff7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.253770][ T8618] RAX: ffffffffffffffda RBX: 00007fc0a9ff86c0 RCX: 00007fc0a915d68e [ 184.253783][ T8618] RDX: 000000000000000f RSI: 00007fc0a9ff80a0 RDI: 000000000000000a [ 184.253794][ T8618] RBP: 00007fc0a9ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 184.253805][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.253815][ T8618] R13: 00007fc0a9416128 R14: 00007fc0a9416090 R15: 00007fff8c7bae88 [ 184.253846][ T8618] [ 184.739073][ T8627] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 184.825650][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.832955][ T8635] bridge0: port 2(bridge_slave_1) entered listening state [ 184.840447][ T8635] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.847662][ T8635] bridge0: port 1(bridge_slave_0) entered listening state [ 184.972576][ T8640] FAULT_INJECTION: forcing a failure. [ 184.972576][ T8640] name failslab, interval 1, probability 0, space 0, times 0 [ 184.997814][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.3.855 Not tainted syzkaller #0 PREEMPT(full) [ 184.997840][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.997851][ T8640] Call Trace: [ 184.997858][ T8640] [ 184.997866][ T8640] dump_stack_lvl+0xe8/0x150 [ 184.997892][ T8640] should_fail_ex+0x412/0x560 [ 184.997917][ T8640] should_failslab+0xa8/0x100 [ 184.997935][ T8640] __kvmalloc_node_noprof+0x178/0x8a0 [ 184.997961][ T8640] ? page_pool_create_percpu+0x304/0xc80 [ 184.997986][ T8640] ? page_pool_create_percpu+0xaf/0xc80 [ 184.998014][ T8640] page_pool_create_percpu+0x304/0xc80 [ 184.998044][ T8640] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 184.998072][ T8640] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 184.998113][ T8640] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 184.998152][ T8640] ? 0xffffffffa0201a5c [ 184.998200][ T8640] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 184.998231][ T8640] ? _copy_from_user+0x94/0xb0 [ 184.998252][ T8640] ? bpf_test_init+0x113/0x150 [ 184.998270][ T8640] ? xdp_convert_md_to_buff+0x5b/0x330 [ 184.998293][ T8640] bpf_prog_test_run_xdp+0x81c/0x1160 [ 184.998330][ T8640] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 184.998355][ T8640] ? __fget_files+0x2a/0x420 [ 184.998382][ T8640] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 184.998404][ T8640] bpf_prog_test_run+0x2c7/0x340 [ 184.998426][ T8640] __sys_bpf+0x643/0x950 [ 184.998453][ T8640] ? __pfx___sys_bpf+0x10/0x10 [ 184.998493][ T8640] ? ksys_write+0x242/0x270 [ 184.998519][ T8640] ? __pfx_ksys_write+0x10/0x10 [ 184.998547][ T8640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.998567][ T8640] __x64_sys_bpf+0x7c/0x90 [ 184.998591][ T8640] do_syscall_64+0x174/0x580 [ 184.998609][ T8640] ? trace_irq_disable+0x3b/0x140 [ 184.998631][ T8640] ? clear_bhb_loop+0x40/0x90 [ 184.998651][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.998667][ T8640] RIP: 0033:0x7f2478d9ce59 [ 184.998684][ T8640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.998698][ T8640] RSP: 002b:00007f2479d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.998713][ T8640] RAX: ffffffffffffffda RBX: 00007f2479015fa0 RCX: 00007f2478d9ce59 [ 184.998724][ T8640] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 184.998735][ T8640] RBP: 00007f2479d26090 R08: 0000000000000000 R09: 0000000000000000 [ 184.998746][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.998757][ T8640] R13: 00007f2479016038 R14: 00007f2479015fa0 R15: 00007ffee1087a08 [ 184.998785][ T8640] [ 184.998792][ T8640] page_pool_create_percpu() gave up with errno -12 [ 185.342184][ T8652] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 185.442083][ T8656] netlink: 'syz.4.861': attribute type 21 has an invalid length. [ 185.482152][ T8656] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.492214][ T8656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.499756][ T8656] IPv6: NLM_F_CREATE should be set when creating new route [ 185.507256][ T8656] IPv6: NLM_F_CREATE should be set when creating new route [ 185.514498][ T8656] IPv6: NLM_F_CREATE should be set when creating new route [ 185.639445][ T8661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.864'. [ 185.717559][ T8665] netlink: 'syz.2.862': attribute type 2 has an invalid length. [ 185.748317][ T8669] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 185.776363][ T8669] batman_adv: batadv0: Interface deactivated: dummy0 [ 185.822309][ T8669] batman_adv: batadv0: Removing interface: dummy0 [ 185.845728][ T8669] dummy0: entered promiscuous mode [ 185.863036][ T8669] team0: Port device dummy0 added [ 185.871477][ T8676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.867'. [ 185.887847][ T8678] FAULT_INJECTION: forcing a failure. [ 185.887847][ T8678] name failslab, interval 1, probability 0, space 0, times 0 [ 185.902524][ T8678] CPU: 1 UID: 0 PID: 8678 Comm: syz.2.868 Not tainted syzkaller #0 PREEMPT(full) [ 185.902548][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.902559][ T8678] Call Trace: [ 185.902566][ T8678] [ 185.902572][ T8678] dump_stack_lvl+0xe8/0x150 [ 185.902599][ T8678] should_fail_ex+0x412/0x560 [ 185.902621][ T8678] should_failslab+0xa8/0x100 [ 185.902639][ T8678] __kmalloc_noprof+0xe8/0x760 [ 185.902662][ T8678] ? get_callchain_buffers+0xeb/0x350 [ 185.902688][ T8678] get_callchain_buffers+0xeb/0x350 [ 185.902712][ T8678] stack_map_alloc+0x310/0x4c0 [ 185.902736][ T8678] map_create+0xafd/0x16a0 [ 185.902764][ T8678] ? security_bpf+0x7e/0x2d0 [ 185.902788][ T8678] __sys_bpf+0x6e1/0x950 [ 185.902814][ T8678] ? __pfx___sys_bpf+0x10/0x10 [ 185.902849][ T8678] ? ksys_write+0x242/0x270 [ 185.902874][ T8678] ? __pfx_ksys_write+0x10/0x10 [ 185.902901][ T8678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.902920][ T8678] __x64_sys_bpf+0x7c/0x90 [ 185.902942][ T8678] do_syscall_64+0x174/0x580 [ 185.902962][ T8678] ? clear_bhb_loop+0x40/0x90 [ 185.902984][ T8678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.903000][ T8678] RIP: 0033:0x7fd75379ce59 [ 185.903016][ T8678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.903030][ T8678] RSP: 002b:00007fd754581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.903049][ T8678] RAX: ffffffffffffffda RBX: 00007fd753a15fa0 RCX: 00007fd75379ce59 [ 185.903062][ T8678] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 185.903073][ T8678] RBP: 00007fd754581090 R08: 0000000000000000 R09: 0000000000000000 [ 185.903084][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.903095][ T8678] R13: 00007fd753a16038 R14: 00007fd753a15fa0 R15: 00007ffd360f4e68 [ 185.903122][ T8678] [ 185.962956][ T8646] syz.0.858 (8646) used greatest stack depth: 17944 bytes left [ 186.187711][ T6600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.208297][ T6600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.231267][ T8682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.252163][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 186.259809][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.277799][ T29] audit: type=1804 audit(1780719519.233:5): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.871" name="/newroot/193/cgroup.controllers" dev="tmpfs" ino=1000 res=1 errno=0 [ 186.331538][ T29] audit: type=1800 audit(1780719519.233:6): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 186.353106][ T29] audit: type=1804 audit(1780719519.283:7): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.871" name="/newroot/193/cgroup.controllers" dev="tmpfs" ino=1000 res=1 errno=0 [ 186.375763][ T8689] netlink: 80 bytes leftover after parsing attributes in process `syz.3.873'. [ 186.384869][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 186.397387][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.873'. [ 186.476121][ T8691] bond0: entered promiscuous mode [ 186.481307][ T8691] bond_slave_0: entered promiscuous mode [ 186.489415][ T8691] bond_slave_1: entered promiscuous mode [ 186.497436][ T8691] batadv0: entered promiscuous mode [ 186.621572][ T8699] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 186.783763][ T8709] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 186.888986][ T8709] bond3: entered promiscuous mode [ 186.894568][ T8709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.936294][ T8721] FAULT_INJECTION: forcing a failure. [ 186.936294][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 186.971402][ T8721] CPU: 0 UID: 0 PID: 8721 Comm: syz.1.879 Not tainted syzkaller #0 PREEMPT(full) [ 186.971427][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.971438][ T8721] Call Trace: [ 186.971445][ T8721] [ 186.971453][ T8721] dump_stack_lvl+0xe8/0x150 [ 186.971479][ T8721] should_fail_ex+0x412/0x560 [ 186.971502][ T8721] should_failslab+0xa8/0x100 [ 186.971521][ T8721] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 186.971546][ T8721] ? __alloc_skb+0x186/0x7d0 [ 186.971563][ T8721] ? __alloc_skb+0x1d0/0x7d0 [ 186.971578][ T8721] ? __local_bh_enable_ip+0xd0/0x130 [ 186.971601][ T8721] __alloc_skb+0x1d0/0x7d0 [ 186.971617][ T8721] ? ima_match_policy+0x112/0x21e0 [ 186.971640][ T8721] alloc_skb_with_frags+0xc8/0x760 [ 186.971659][ T8721] ? __lock_acquire+0x6b5/0x2cf0 [ 186.971685][ T8721] sock_alloc_send_pskb+0x878/0x990 [ 186.971712][ T8721] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.971738][ T8721] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 186.971763][ T8721] ? dev_get_by_index+0x22/0x2e0 [ 186.971785][ T8721] ? dev_get_by_index+0x22/0x2e0 [ 186.971813][ T8721] packet_sendmsg+0x315a/0x4fb0 [ 186.971846][ T8721] ? tomoyo_check_open_permission+0x38e/0x470 [ 186.971875][ T8721] ? __bpf_trace_lock_acquire+0xc0/0x390 [ 186.971917][ T8721] ? __pfx_packet_sendmsg+0x10/0x10 [ 186.971934][ T8721] ? aa_sk_perm+0x6d5/0x900 [ 186.971960][ T8721] ? __pfx_aa_sk_perm+0x10/0x10 [ 186.971981][ T8721] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 186.972009][ T8721] ? aa_sock_msg_perm+0xf1/0x1b0 [ 186.972032][ T8721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.972060][ T8721] ____sys_sendmsg+0x972/0x9f0 [ 186.972088][ T8721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.972113][ T8721] ? import_iovec+0x73/0xa0 [ 186.972138][ T8721] ___sys_sendmsg+0x2a5/0x360 [ 186.972156][ T8721] ? __lock_acquire+0x6b5/0x2cf0 [ 186.972177][ T8721] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.972201][ T8721] ? kstrtouint+0x6e/0xe0 [ 186.972251][ T8721] ? __fget_files+0x2a/0x420 [ 186.972278][ T8721] ? __fget_files+0x3a0/0x420 [ 186.972314][ T8721] __sys_sendmmsg+0x27c/0x4e0 [ 186.972337][ T8721] ? __pfx___sys_sendmmsg+0x10/0x10 [ 186.972356][ T8721] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 186.972398][ T8721] ? ksys_write+0x242/0x270 [ 186.972424][ T8721] ? __pfx_ksys_write+0x10/0x10 [ 186.972452][ T8721] __x64_sys_sendmmsg+0xa0/0xc0 [ 186.972472][ T8721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.972491][ T8721] do_syscall_64+0x174/0x580 [ 186.972509][ T8721] ? trace_irq_disable+0x3b/0x140 [ 186.972533][ T8721] ? clear_bhb_loop+0x40/0x90 [ 186.972554][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.972572][ T8721] RIP: 0033:0x7f4e4939ce59 [ 186.972590][ T8721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.972604][ T8721] RSP: 002b:00007f4e4a1da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 186.972623][ T8721] RAX: ffffffffffffffda RBX: 00007f4e49615fa0 RCX: 00007f4e4939ce59 [ 186.972635][ T8721] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000006 [ 186.972647][ T8721] RBP: 00007f4e4a1da090 R08: 0000000000000000 R09: 0000000000000000 [ 186.972658][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.972668][ T8721] R13: 00007f4e49616038 R14: 00007f4e49615fa0 R15: 00007fff9efab068 [ 186.972696][ T8721] [ 187.528054][ T8739] bond3: option resend_igmp: invalid value (2878) [ 187.534725][ T8739] bond3: option resend_igmp: allowed values 0 - 255 [ 187.553153][ T8739] bond3 (unregistering): Released all slaves [ 187.693557][ T8756] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 187.708278][ T8756] sctp: [Deprecated]: syz.2.885 (pid 8756) Use of int in maxseg socket option. [ 187.708278][ T8756] Use struct sctp_assoc_value instead [ 188.067364][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.092530][ T8752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.102660][ T8752] xfrm0: left allmulticast mode [ 188.230607][ T8752] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 188.238629][ T8752] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 188.266872][ T8772] syzkaller0: entered promiscuous mode [ 188.272456][ T8772] syzkaller0: entered allmulticast mode [ 188.282883][ T3349] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.297677][ T3349] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.310808][ T3349] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.321132][ T3349] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.608196][ T8790] netlink: 'syz.0.891': attribute type 13 has an invalid length. [ 188.631366][ T8790] netlink: 'syz.0.891': attribute type 17 has an invalid length. [ 188.679354][ T8792] __nla_validate_parse: 3 callbacks suppressed [ 188.679376][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.891'. [ 188.737372][ T8798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.895'. [ 188.885379][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.892792][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.622957][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.667928][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.413467][ T8836] netlink: 44 bytes leftover after parsing attributes in process `syz.1.900'. [ 190.415668][ T8790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.431520][ T8790] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.443813][ T8790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.466921][ T8790] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.474120][ T8790] bridge0: port 1(bridge_slave_0) entered listening state [ 190.484714][ T8790] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.491842][ T8790] bridge0: port 2(bridge_slave_1) entered listening state [ 190.512759][ T8790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.522842][ T8790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.547763][ T8790] veth1_vlan: left promiscuous mode [ 190.554106][ T8790] veth0_vlan: left promiscuous mode [ 190.560932][ T8790] veth0_vlan: entered promiscuous mode [ 190.570484][ T8790] veth1_vlan: entered promiscuous mode [ 190.581245][ T8790] veth1_macvtap: left promiscuous mode [ 190.588916][ T8790] veth0_macvtap: left promiscuous mode [ 190.595855][ T8790] veth0_macvtap: entered promiscuous mode [ 190.612468][ T8790] veth1_macvtap: entered promiscuous mode [ 190.624091][ T8790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.637242][ T8790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.650224][ T8790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.662874][ T8790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.675498][ T8790] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 190.682515][ T8790] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 190.693814][ T8790] vlan2: left promiscuous mode [ 190.698932][ T8790] team0: left promiscuous mode [ 190.703728][ T8790] team_slave_0: left promiscuous mode [ 190.709400][ T8790] team_slave_1: left promiscuous mode [ 190.717122][ T8790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.730850][ T8790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.741143][ T8790] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 190.801373][ T8801] bond1: (slave bond0): speed changed to 0 on port 1 [ 190.809523][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.818766][ T8801] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.829841][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.859806][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.869243][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.882144][ T8801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.892924][ T8801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.906644][ T8801] veth1_vlan: left promiscuous mode [ 190.912700][ T8801] veth0_vlan: left promiscuous mode [ 190.921531][ T8801] veth0_vlan: entered promiscuous mode [ 190.929311][ T8801] veth1_vlan: entered promiscuous mode [ 190.937900][ T8801] veth1_macvtap: left promiscuous mode [ 190.944126][ T8801] veth0_macvtap: left promiscuous mode [ 190.951971][ T8801] veth0_macvtap: entered promiscuous mode [ 190.958577][ T8801] veth1_macvtap: entered promiscuous mode [ 190.967994][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.975833][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.984099][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.992943][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.001559][ T8801] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 191.024438][ T8821] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 191.031982][ T8821] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 191.078730][ T5651] Bluetooth: hci3: command 0x0406 tx timeout [ 191.085757][ T5649] Bluetooth: hci2: command 0x0406 tx timeout [ 191.085780][ T5653] Bluetooth: hci1: command 0x0406 tx timeout [ 191.092799][ T5651] Bluetooth: hci4: command 0x0406 tx timeout [ 191.092868][ T5651] Bluetooth: hci0: command 0x0406 tx timeout [ 191.229683][ T228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.258588][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.265842][ T138] bridge0: port 1(bridge_slave_0) entered listening state [ 191.277127][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.284344][ T138] bridge0: port 2(bridge_slave_1) entered listening state [ 191.350060][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.903'. [ 191.379836][ T228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.462223][ T228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.480806][ T228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.955505][ T8876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'. [ 192.093277][ T8881] sctp: [Deprecated]: syz.0.915 (pid 8881) Use of int in maxseg socket option. [ 192.093277][ T8881] Use struct sctp_assoc_value instead [ 192.153421][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.917'. [ 192.555026][ T8910] netlink: 'syz.0.925': attribute type 2 has an invalid length. [ 192.618119][ T8910] netlink: 'syz.0.925': attribute type 2 has an invalid length. [ 192.741586][ T8916] macsec1: entered promiscuous mode [ 192.764967][ T8916] dummy0: entered promiscuous mode [ 192.951483][ T24] dummy0: left promiscuous mode [ 193.189808][ T8930] netlink: 'syz.1.932': attribute type 1 has an invalid length. [ 193.542390][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.550122][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.973865][ T8966] FAULT_INJECTION: forcing a failure. [ 193.973865][ T8966] name failslab, interval 1, probability 0, space 0, times 0 [ 193.987809][ T8966] CPU: 0 UID: 0 PID: 8966 Comm: syz.0.938 Not tainted syzkaller #0 PREEMPT(full) [ 193.987834][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.987845][ T8966] Call Trace: [ 193.987853][ T8966] [ 193.987861][ T8966] dump_stack_lvl+0xe8/0x150 [ 193.987887][ T8966] should_fail_ex+0x412/0x560 [ 193.987912][ T8966] should_failslab+0xa8/0x100 [ 193.987930][ T8966] ? __inet_hash_connect+0xe97/0x25c0 [ 193.987953][ T8966] kmem_cache_alloc_noprof+0x87/0x650 [ 193.987986][ T8966] __inet_hash_connect+0xe97/0x25c0 [ 193.988011][ T8966] ? __pfx___inet6_check_established+0x10/0x10 [ 193.988041][ T8966] ? __inet_hash_connect+0x5cf/0x25c0 [ 193.988078][ T8966] ? __pfx___inet_hash_connect+0x10/0x10 [ 193.988100][ T8966] ? inet6_ehashfn+0x2f/0x3b0 [ 193.988121][ T8966] ? inet6_hash_connect+0xeb/0x170 [ 193.988143][ T8966] tcp_v6_connect+0x106a/0x1b10 [ 193.988161][ T8966] ? __kmalloc_cache_noprof+0x31c/0x660 [ 193.988183][ T8966] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 193.988201][ T8966] ? tcp_sendmsg_locked+0x4a88/0x5360 [ 193.988233][ T8966] ? __pfx_tcp_v6_connect+0x10/0x10 [ 193.988268][ T8966] __inet_stream_connect+0x25a/0xdd0 [ 193.988306][ T8966] ? __pfx___inet_stream_connect+0x10/0x10 [ 193.988333][ T8966] ? __kasan_kmalloc+0x93/0xb0 [ 193.988358][ T8966] ? __kmalloc_cache_noprof+0x31c/0x660 [ 193.988381][ T8966] ? __lock_acquire+0x6b5/0x2cf0 [ 193.988399][ T8966] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 193.988416][ T8966] ? __kmalloc_cache_noprof+0x15b/0x660 [ 193.988444][ T8966] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 193.988471][ T8966] tcp_sendmsg_locked+0x4a88/0x5360 [ 193.988495][ T8966] ? tcp_sendmsg_locked+0x351/0x5360 [ 193.988513][ T8966] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 193.988548][ T8966] ? __lock_acquire+0x6b5/0x2cf0 [ 193.988594][ T8966] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 193.988620][ T8966] ? tcp_sendmsg+0x21/0x50 [ 193.988641][ T8966] ? __local_bh_enable_ip+0xd0/0x130 [ 193.988661][ T8966] ? __pfx_inet6_sendmsg+0x10/0x10 [ 193.988681][ T8966] tcp_sendmsg+0x2f/0x50 [ 193.988701][ T8966] __sys_sendto+0x4a3/0x710 [ 193.988723][ T8966] ? __pfx___sys_sendto+0x10/0x10 [ 193.988739][ T8966] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 193.988773][ T8966] ? __fget_files+0x3a0/0x420 [ 193.988804][ T8966] ? ksys_write+0x242/0x270 [ 193.988831][ T8966] ? __pfx_ksys_write+0x10/0x10 [ 193.988860][ T8966] __x64_sys_sendto+0xde/0x100 [ 193.988879][ T8966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.988899][ T8966] do_syscall_64+0x174/0x580 [ 193.988917][ T8966] ? trace_irq_disable+0x3b/0x140 [ 193.988941][ T8966] ? clear_bhb_loop+0x40/0x90 [ 193.988963][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.988981][ T8966] RIP: 0033:0x7fc0a919ce59 [ 193.988998][ T8966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.989013][ T8966] RSP: 002b:00007fc0aa019028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 193.989032][ T8966] RAX: ffffffffffffffda RBX: 00007fc0a9415fa0 RCX: 00007fc0a919ce59 [ 193.989045][ T8966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 193.989054][ T8966] RBP: 00007fc0aa019090 R08: 0000200000000100 R09: 000000000000001c [ 193.989071][ T8966] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 193.989081][ T8966] R13: 00007fc0a9416038 R14: 00007fc0a9415fa0 R15: 00007fff8c7bae88 [ 193.989110][ T8966] [ 194.349449][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.394354][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.693479][ T8937] tipc: Resetting bearer [ 194.833267][ T8937] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 194.840978][ T8937] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 194.898176][ T8937] vlan2: left promiscuous mode [ 194.903011][ T8937] team0: left promiscuous mode [ 194.907976][ T8937] team_slave_0: left promiscuous mode [ 194.919552][ T8937] team_slave_1: left promiscuous mode [ 194.931048][ T8937] dummy0: left promiscuous mode [ 194.943381][ T8940] batman_adv: batadv0: Adding interface: dummy0 [ 194.950005][ T8940] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.975842][ T8940] batman_adv: batadv0: Interface activated: dummy0 [ 194.989926][ T8936] batadv0: mtu less than device minimum [ 194.996441][ T8936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.007569][ T8936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.018809][ T8936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.029913][ T8936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.041147][ T8936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.052232][ T8936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.063610][ T8936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.074725][ T8936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.094530][ T8944] tipc: Started in network mode [ 195.106349][ T8944] tipc: Node identity 7f000001, cluster identity 4711 [ 195.114278][ T8944] tipc: Enabled bearer , priority 10 [ 195.121785][ T8930] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 195.129164][ T228] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.197271][ T228] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.240285][ T228] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.267359][ T228] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.594443][ T9002] FAULT_INJECTION: forcing a failure. [ 195.594443][ T9002] name failslab, interval 1, probability 0, space 0, times 0 [ 195.609094][ T9002] CPU: 1 UID: 0 PID: 9002 Comm: syz.0.949 Not tainted syzkaller #0 PREEMPT(full) [ 195.609119][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.609130][ T9002] Call Trace: [ 195.609138][ T9002] [ 195.609146][ T9002] dump_stack_lvl+0xe8/0x150 [ 195.609172][ T9002] should_fail_ex+0x412/0x560 [ 195.609196][ T9002] should_failslab+0xa8/0x100 [ 195.609217][ T9002] __kvmalloc_node_noprof+0x178/0x8a0 [ 195.609241][ T9002] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 195.609272][ T9002] __nf_hook_entries_try_shrink+0x328/0x700 [ 195.609306][ T9002] __nf_unregister_net_hook+0x4cc/0x6f0 [ 195.609333][ T9002] nf_unregister_net_hooks+0xcb/0x140 [ 195.609359][ T9002] ip_vs_unregister_hooks+0xbc/0x120 [ 195.609381][ T9002] ip_vs_unlink_service+0x980/0x1300 [ 195.609404][ T9002] ? ip_vs_unlink_service+0x198/0x1300 [ 195.609436][ T9002] ip_vs_flush+0x1d5/0x420 [ 195.609464][ T9002] do_ip_vs_set_ctl+0x4fb/0xb00 [ 195.609494][ T9002] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 195.609534][ T9002] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 195.609553][ T9002] ? nf_setsockopt+0x3a/0x290 [ 195.609579][ T9002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.609601][ T9002] ? __pfx_aa_sk_perm+0x10/0x10 [ 195.609626][ T9002] nf_setsockopt+0x26f/0x290 [ 195.609648][ T9002] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 195.609672][ T9002] do_sock_setsockopt+0x17c/0x1b0 [ 195.609692][ T9002] __x64_sys_setsockopt+0x13d/0x1b0 [ 195.609710][ T9002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.609729][ T9002] do_syscall_64+0x174/0x580 [ 195.609747][ T9002] ? trace_irq_disable+0x3b/0x140 [ 195.609771][ T9002] ? clear_bhb_loop+0x40/0x90 [ 195.609792][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.609805][ T9002] RIP: 0033:0x7fc0a919ce59 [ 195.609820][ T9002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.609831][ T9002] RSP: 002b:00007fc0aa019028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.609846][ T9002] RAX: ffffffffffffffda RBX: 00007fc0a9415fa0 RCX: 00007fc0a919ce59 [ 195.609855][ T9002] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000005 [ 195.609863][ T9002] RBP: 00007fc0aa019090 R08: 0000000000000000 R09: 0000000000000000 [ 195.609871][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.609878][ T9002] R13: 00007fc0a9416038 R14: 00007fc0a9415fa0 R15: 00007fff8c7bae88 [ 195.609901][ T9002] [ 195.923604][ T9004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.950'. [ 195.950356][ T9006] tipc: Enabled bearer , priority 10 [ 195.959933][ T9006] tipc: Bearer : already 2 bearers with priority 10 [ 195.970311][ T9006] tipc: Bearer : trying with adjusted priority [ 195.978768][ T9006] tipc: Enabling of bearer rejected, failed to enable media [ 196.116208][ T8813] tipc: Node number set to 2130706433 [ 196.208703][ T9017] netlink: 'syz.4.954': attribute type 4 has an invalid length. [ 196.234297][ T9017] netlink: 'syz.4.954': attribute type 4 has an invalid length. [ 196.257422][ T9017] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.954'. [ 196.479180][ T9025] bond3: option packets_per_slave: invalid value (1048582) [ 196.486924][ T9025] bond3: option packets_per_slave: allowed values 0 - 65535 [ 196.530796][ T9025] bond3 (unregistering): Released all slaves [ 196.559013][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.958'. [ 196.616125][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.958'. [ 196.688819][ T9030] syzkaller1: entered promiscuous mode [ 196.706281][ T9030] syzkaller1: entered allmulticast mode [ 196.837346][ T9034] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.960'. [ 196.858060][ T9034] net_ratelimit: 11 callbacks suppressed [ 196.858080][ T9034] netlink: Unknown conntrack attr (0) [ 196.922573][ T9042] tipc: Started in network mode [ 196.933651][ T9042] tipc: Node identity 7f000001, cluster identity 4711 [ 196.958754][ T9042] tipc: Enabled bearer , priority 10 [ 197.004966][ T9042] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 197.028212][ T9042] tipc: Enabled bearer , priority 10 [ 197.079576][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 197.152671][ T9052] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 197.279041][ T9052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.323477][ T9057] bond3: (slave geneve2): making interface the new active one [ 197.334422][ T9057] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 197.504503][ T9071] FAULT_INJECTION: forcing a failure. [ 197.504503][ T9071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.539930][ T9071] CPU: 1 UID: 0 PID: 9071 Comm: syz.4.971 Not tainted syzkaller #0 PREEMPT(full) [ 197.539956][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.539967][ T9071] Call Trace: [ 197.539974][ T9071] [ 197.539982][ T9071] dump_stack_lvl+0xe8/0x150 [ 197.540005][ T9071] should_fail_ex+0x412/0x560 [ 197.540028][ T9071] _copy_from_iter+0x1d3/0x1670 [ 197.540049][ T9071] ? rcu_is_watching+0x15/0xb0 [ 197.540074][ T9071] ? __pfx__copy_from_iter+0x10/0x10 [ 197.540099][ T9071] ? netlink_sendmsg+0x650/0xb40 [ 197.540118][ T9071] ? skb_put+0x11b/0x210 [ 197.540139][ T9071] netlink_sendmsg+0x6c0/0xb40 [ 197.540165][ T9071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.540187][ T9071] ? aa_sock_msg_perm+0xf1/0x1b0 [ 197.540214][ T9071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.540241][ T9071] ____sys_sendmsg+0x972/0x9f0 [ 197.540261][ T9071] ? __might_fault+0xaf/0x130 [ 197.540289][ T9071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.540326][ T9071] ? import_iovec+0x73/0xa0 [ 197.540350][ T9071] ___sys_sendmsg+0x2a5/0x360 [ 197.540369][ T9071] ? __lock_acquire+0x6b5/0x2cf0 [ 197.540400][ T9071] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.540451][ T9071] ? __fget_files+0x2a/0x420 [ 197.540472][ T9071] ? __fget_files+0x3a0/0x420 [ 197.540501][ T9071] __x64_sys_sendmsg+0x1bd/0x2a0 [ 197.540525][ T9071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.540553][ T9071] ? __pfx_ksys_write+0x10/0x10 [ 197.540583][ T9071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.540601][ T9071] do_syscall_64+0x174/0x580 [ 197.540619][ T9071] ? trace_irq_disable+0x3b/0x140 [ 197.540644][ T9071] ? clear_bhb_loop+0x40/0x90 [ 197.540664][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.540681][ T9071] RIP: 0033:0x7fbb2c39ce59 [ 197.540698][ T9071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.540712][ T9071] RSP: 002b:00007fbb2a5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.540730][ T9071] RAX: ffffffffffffffda RBX: 00007fbb2c615fa0 RCX: 00007fbb2c39ce59 [ 197.540742][ T9071] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 197.540754][ T9071] RBP: 00007fbb2a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 197.540764][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.540775][ T9071] R13: 00007fbb2c616038 R14: 00007fbb2c615fa0 R15: 00007fff5d5cf828 [ 197.540803][ T9071] [ 198.046209][ T10] tipc: Node number set to 2130706433 [ 198.262911][ T9085] syzkaller0: entered promiscuous mode [ 198.274373][ T9085] syzkaller0: entered allmulticast mode [ 198.283859][ T9092] tipc: Enabled bearer , priority 10 [ 198.297911][ T9092] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 198.306864][ T9092] tipc: Enabled bearer , priority 10 [ 198.372478][ T9094] netlink: 156 bytes leftover after parsing attributes in process `syz.2.977'. [ 198.392721][ T9094] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 198.495083][ T9099] FAULT_INJECTION: forcing a failure. [ 198.495083][ T9099] name failslab, interval 1, probability 0, space 0, times 0 [ 198.511251][ T9099] CPU: 0 UID: 0 PID: 9099 Comm: syz.4.979 Not tainted syzkaller #0 PREEMPT(full) [ 198.511276][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.511287][ T9099] Call Trace: [ 198.511295][ T9099] [ 198.511302][ T9099] dump_stack_lvl+0xe8/0x150 [ 198.511329][ T9099] should_fail_ex+0x412/0x560 [ 198.511361][ T9099] should_failslab+0xa8/0x100 [ 198.511381][ T9099] __kmalloc_noprof+0xe8/0x760 [ 198.511406][ T9099] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 198.511438][ T9099] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 198.511471][ T9099] genl_family_rcv_msg_doit+0xd9/0x330 [ 198.511497][ T9099] ? __asan_memcpy+0x40/0x70 [ 198.511522][ T9099] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.511554][ T9099] ? apparmor_capable+0x126/0x170 [ 198.511577][ T9099] ? bpf_lsm_capable+0x9/0x20 [ 198.511594][ T9099] ? security_capable+0x7e/0x2c0 [ 198.511624][ T9099] genl_rcv_msg+0x61c/0x7a0 [ 198.511655][ T9099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.511678][ T9099] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 198.511703][ T9099] ? __pfx_ref_tracker_free+0x10/0x10 [ 198.511733][ T9099] netlink_rcv_skb+0x232/0x4b0 [ 198.511755][ T9099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.511780][ T9099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.511816][ T9099] ? down_read+0x270/0x2e0 [ 198.511836][ T9099] ? genl_rcv+0xd/0x40 [ 198.511859][ T9099] genl_rcv+0x28/0x40 [ 198.511881][ T9099] netlink_unicast+0x75c/0x8e0 [ 198.511911][ T9099] netlink_sendmsg+0x813/0xb40 [ 198.511941][ T9099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.511965][ T9099] ? aa_sock_msg_perm+0xf1/0x1b0 [ 198.511992][ T9099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.512018][ T9099] ____sys_sendmsg+0x972/0x9f0 [ 198.512038][ T9099] ? __might_fault+0xaf/0x130 [ 198.512067][ T9099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.512097][ T9099] ? import_iovec+0x73/0xa0 [ 198.512122][ T9099] ___sys_sendmsg+0x2a5/0x360 [ 198.512141][ T9099] ? __lock_acquire+0x6b5/0x2cf0 [ 198.512164][ T9099] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.512220][ T9099] ? __fget_files+0x2a/0x420 [ 198.512240][ T9099] ? __fget_files+0x3a0/0x420 [ 198.512270][ T9099] __x64_sys_sendmsg+0x1bd/0x2a0 [ 198.512290][ T9099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.512320][ T9099] ? __pfx_ksys_write+0x10/0x10 [ 198.512359][ T9099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.512380][ T9099] do_syscall_64+0x174/0x580 [ 198.512399][ T9099] ? trace_irq_disable+0x3b/0x140 [ 198.512424][ T9099] ? clear_bhb_loop+0x40/0x90 [ 198.512446][ T9099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.512465][ T9099] RIP: 0033:0x7fbb2c39ce59 [ 198.512482][ T9099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.512497][ T9099] RSP: 002b:00007fbb2a5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.512519][ T9099] RAX: ffffffffffffffda RBX: 00007fbb2c615fa0 RCX: 00007fbb2c39ce59 [ 198.512530][ T9099] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 198.512541][ T9099] RBP: 00007fbb2a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 198.512550][ T9099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.512560][ T9099] R13: 00007fbb2c616038 R14: 00007fbb2c615fa0 R15: 00007fff5d5cf828 [ 198.512586][ T9099] [ 200.704556][ T5821] tipc: Node number set to 21922205 [ 200.913678][ T9139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.988'. [ 201.060051][ T9139] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.319862][ T9159] gre0: entered promiscuous mode [ 201.330463][ T9159] gre0: entered allmulticast mode [ 201.383932][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.993'. [ 201.532272][ T9164] syzkaller0: entered promiscuous mode [ 201.538838][ T9164] syzkaller0: entered allmulticast mode [ 201.662904][ T9177] FAULT_INJECTION: forcing a failure. [ 201.662904][ T9177] name failslab, interval 1, probability 0, space 0, times 0 [ 201.682374][ T9177] CPU: 1 UID: 0 PID: 9177 Comm: syz.4.999 Not tainted syzkaller #0 PREEMPT(full) [ 201.682400][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.682410][ T9177] Call Trace: [ 201.682416][ T9177] [ 201.682425][ T9177] dump_stack_lvl+0xe8/0x150 [ 201.682450][ T9177] should_fail_ex+0x412/0x560 [ 201.682472][ T9177] should_failslab+0xa8/0x100 [ 201.682490][ T9177] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 201.682515][ T9177] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 201.682550][ T9177] ? scm_fp_dup+0x5e/0x3a0 [ 201.682571][ T9177] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 201.682596][ T9177] kmemdup_noprof+0x2b/0x70 [ 201.682617][ T9177] scm_fp_dup+0x5e/0x3a0 [ 201.682639][ T9177] ? pid_vnr+0xfd/0x1e0 [ 201.682664][ T9177] __unix_dgram_recvmsg+0x8ef/0xd60 [ 201.682700][ T9177] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 201.682736][ T9177] ? __lock_acquire+0x6b5/0x2cf0 [ 201.682760][ T9177] ? unix_dgram_recvmsg+0xae/0xd0 [ 201.682779][ T9177] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 201.682802][ T9177] sock_recvmsg_nosec+0x10c/0x140 [ 201.682828][ T9177] ____sys_recvmsg+0x3e3/0x4a0 [ 201.682858][ T9177] ? __pfx_____sys_recvmsg+0x10/0x10 [ 201.682895][ T9177] ? import_iovec+0x73/0xa0 [ 201.682918][ T9177] ___sys_recvmsg+0x215/0x590 [ 201.682943][ T9177] ? __pfx____sys_recvmsg+0x10/0x10 [ 201.682998][ T9177] do_recvmmsg+0x334/0x800 [ 201.683027][ T9177] ? __pfx_do_recvmmsg+0x10/0x10 [ 201.683059][ T9177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.683096][ T9177] __x64_sys_recvmmsg+0x198/0x250 [ 201.683120][ T9177] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 201.683149][ T9177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.683166][ T9177] do_syscall_64+0x174/0x580 [ 201.683184][ T9177] ? trace_irq_disable+0x3b/0x140 [ 201.683207][ T9177] ? clear_bhb_loop+0x40/0x90 [ 201.683229][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.683246][ T9177] RIP: 0033:0x7fbb2c39ce59 [ 201.683262][ T9177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.683276][ T9177] RSP: 002b:00007fbb2a5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 201.683295][ T9177] RAX: ffffffffffffffda RBX: 00007fbb2c615fa0 RCX: 00007fbb2c39ce59 [ 201.683308][ T9177] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 201.683317][ T9177] RBP: 00007fbb2a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 201.683331][ T9177] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 201.683340][ T9177] R13: 00007fbb2c616038 R14: 00007fbb2c615fa0 R15: 00007fff5d5cf828 [ 201.683369][ T9177] [ 202.099634][ T9190] rdma_rxe: rxe_newlink: failed to add bond0 [ 202.134158][ T9190] netlink: 'syz.4.1001': attribute type 13 has an invalid length. [ 202.441771][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 203.848716][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 204.020755][ T9209] xt_l2tp: invalid flags combination: 8 [ 204.080131][ T9217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1010'. [ 204.131485][ T9217] sock: sock_timestamping_bind_phc: sock not bind to device [ 204.215618][ T9223] lo speed is unknown, defaulting to 1000 [ 204.732987][ T9238] : option downdelay: invalid value (18446744073709547007) [ 204.762873][ T9241] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1017'. [ 204.785959][ T9238] : option downdelay: allowed values 0 - 2147483647 [ 204.812454][ T9238]  (unregistering): Released all slaves [ 205.608186][ T9272] syzkaller0: entered promiscuous mode [ 205.613866][ T9272] syzkaller0: entered allmulticast mode [ 205.818425][ T9275] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 205.903645][ T9277] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1029'. [ 206.115181][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'. [ 206.647128][ T9308] team_slave_1: Caught tx_queue_len zero misconfig [ 206.728979][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 206.985539][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 209.466997][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 209.474340][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 209.845431][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 209.933192][ T29] audit: type=1804 audit(1780719542.903:8): pid=9352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1043" name="/newroot/216/cgroup.controllers" dev="tmpfs" ino=1107 res=1 errno=0 [ 210.021736][ T29] audit: type=1800 audit(1780719542.903:9): pid=9352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1043" name="cgroup.controllers" dev="tmpfs" ino=1107 res=0 errno=0 [ 210.089776][ T29] audit: type=1804 audit(1780719542.983:10): pid=9352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1043" name="/newroot/216/cgroup.controllers" dev="tmpfs" ino=1107 res=1 errno=0 [ 210.170846][ T9361] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 210.444294][ T9383] tipc: Enabled bearer , priority 0 [ 210.463108][ T9383] syzkaller0: entered promiscuous mode [ 210.476692][ T9383] syzkaller0: entered allmulticast mode [ 210.752253][ T9399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1055'. [ 211.163918][ T9410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1057'. [ 213.234571][ T9425] FAULT_INJECTION: forcing a failure. [ 213.234571][ T9425] name failslab, interval 1, probability 0, space 0, times 0 [ 213.247261][ T9425] CPU: 0 UID: 0 PID: 9425 Comm: syz.3.1062 Not tainted syzkaller #0 PREEMPT(full) [ 213.247284][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.247295][ T9425] Call Trace: [ 213.247303][ T9425] [ 213.247312][ T9425] dump_stack_lvl+0xe8/0x150 [ 213.247337][ T9425] should_fail_ex+0x412/0x560 [ 213.247361][ T9425] should_failslab+0xa8/0x100 [ 213.247378][ T9425] ? skb_clone+0x212/0x3a0 [ 213.247392][ T9425] kmem_cache_alloc_noprof+0x87/0x650 [ 213.247407][ T9425] ? __bpf_redirect+0xcb4/0x12a0 [ 213.247424][ T9425] skb_clone+0x212/0x3a0 [ 213.247439][ T9425] bpf_clone_redirect+0x16a/0x4b0 [ 213.247458][ T9425] ? bpf_test_run+0x1d1/0x830 [ 213.247469][ T9425] bpf_prog_dc61604c65e91d25+0x5f/0x68 [ 213.247482][ T9425] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 213.247498][ T9425] ? arch_stack_walk+0xfb/0x150 [ 213.247514][ T9425] ? ktime_get+0x45/0x220 [ 213.247532][ T9425] ? ktime_get+0x45/0x220 [ 213.247547][ T9425] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 213.247562][ T9425] ? lockdep_hardirqs_on+0x7a/0x110 [ 213.247573][ T9425] ? ktime_get+0x45/0x220 [ 213.247586][ T9425] ? seqcount_lockdep_reader_access+0xea/0x100 [ 213.247600][ T9425] ? bpf_test_run+0x1d1/0x830 [ 213.247613][ T9425] ? bpf_test_timer_continue+0x10c/0x320 [ 213.247627][ T9425] bpf_test_run+0x354/0x830 [ 213.247652][ T9425] ? __pfx_bpf_test_run+0x10/0x10 [ 213.247674][ T9425] ? eth_type_trans+0x348/0x7e0 [ 213.247689][ T9425] ? skb_dst_set+0x72/0x140 [ 213.247702][ T9425] bpf_prog_test_run_skb+0xe2c/0x2260 [ 213.247737][ T9425] ? __fget_files+0x3a0/0x420 [ 213.247758][ T9425] ? __fget_files+0x2a/0x420 [ 213.247776][ T9425] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 213.247788][ T9425] bpf_prog_test_run+0x2c7/0x340 [ 213.247800][ T9425] __sys_bpf+0x643/0x950 [ 213.247817][ T9425] ? __pfx___sys_bpf+0x10/0x10 [ 213.247839][ T9425] ? ksys_write+0x242/0x270 [ 213.247854][ T9425] ? __pfx_ksys_write+0x10/0x10 [ 213.247870][ T9425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.247881][ T9425] __x64_sys_bpf+0x7c/0x90 [ 213.247895][ T9425] do_syscall_64+0x174/0x580 [ 213.247906][ T9425] ? trace_irq_disable+0x3b/0x140 [ 213.247921][ T9425] ? clear_bhb_loop+0x40/0x90 [ 213.247933][ T9425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.247943][ T9425] RIP: 0033:0x7f2478d9ce59 [ 213.247954][ T9425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.247963][ T9425] RSP: 002b:00007f2479d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.247975][ T9425] RAX: ffffffffffffffda RBX: 00007f2479015fa0 RCX: 00007f2478d9ce59 [ 213.247982][ T9425] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 213.247988][ T9425] RBP: 00007f2479d26090 R08: 0000000000000000 R09: 0000000000000000 [ 213.247994][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.248000][ T9425] R13: 00007f2479016038 R14: 00007f2479015fa0 R15: 00007ffee1087a08 [ 213.248015][ T9425] [ 213.558164][ T9383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.654954][ T9429] FAULT_INJECTION: forcing a failure. [ 213.654954][ T9429] name failslab, interval 1, probability 0, space 0, times 0 [ 213.673409][ T9429] CPU: 0 UID: 0 PID: 9429 Comm: syz.4.1064 Not tainted syzkaller #0 PREEMPT(full) [ 213.673435][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.673446][ T9429] Call Trace: [ 213.673453][ T9429] [ 213.673460][ T9429] dump_stack_lvl+0xe8/0x150 [ 213.673485][ T9429] should_fail_ex+0x412/0x560 [ 213.673514][ T9429] should_failslab+0xa8/0x100 [ 213.673534][ T9429] __kmalloc_noprof+0xe8/0x760 [ 213.673559][ T9429] ? kobject_get_path+0xc5/0x2f0 [ 213.673578][ T9429] ? __kasan_kmalloc+0x93/0xb0 [ 213.673605][ T9429] kobject_get_path+0xc5/0x2f0 [ 213.673624][ T9429] ? kobject_uevent_env+0x28c/0x9e0 [ 213.673659][ T9429] kobject_uevent_env+0x2a1/0x9e0 [ 213.673689][ T9429] device_add+0x557/0xbb0 [ 213.673717][ T9429] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 213.673739][ T9429] wakeup_source_register+0x18a/0x380 [ 213.673767][ T9429] ep_insert+0xf34/0x1a40 [ 213.673803][ T9429] ? __pfx_ep_insert+0x10/0x10 [ 213.673836][ T9429] ? ep_loop_check+0x50/0x1b0 [ 213.673863][ T9429] do_epoll_ctl+0x7f4/0xe80 [ 213.673894][ T9429] __x64_sys_epoll_ctl+0x165/0x1b0 [ 213.673928][ T9429] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 213.673959][ T9429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.673979][ T9429] do_syscall_64+0x174/0x580 [ 213.673996][ T9429] ? trace_irq_disable+0x3b/0x140 [ 213.674020][ T9429] ? clear_bhb_loop+0x40/0x90 [ 213.674041][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.674058][ T9429] RIP: 0033:0x7fbb2c39ce59 [ 213.674075][ T9429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.674090][ T9429] RSP: 002b:00007fbb2a5ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 213.674110][ T9429] RAX: ffffffffffffffda RBX: 00007fbb2c615fa0 RCX: 00007fbb2c39ce59 [ 213.674123][ T9429] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 213.674133][ T9429] RBP: 00007fbb2a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 213.674143][ T9429] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000002 [ 213.674154][ T9429] R13: 00007fbb2c616038 R14: 00007fbb2c615fa0 R15: 00007fff5d5cf828 [ 213.674184][ T9429] [ 214.086273][ T9382] tipc: Resetting bearer [ 214.159688][ T9382] tipc: Disabling bearer [ 214.206597][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'. [ 214.221574][ T9443] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 214.379235][ T9443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.521709][ T9462] tipc: Enabling of bearer rejected, already enabled [ 214.539402][ T9462] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 214.546356][ T9467] FAULT_INJECTION: forcing a failure. [ 214.546356][ T9467] name failslab, interval 1, probability 0, space 0, times 0 [ 214.548734][ T9462] tipc: Enabled bearer , priority 10 [ 214.562739][ T9467] CPU: 0 UID: 0 PID: 9467 Comm: syz.4.1077 Not tainted syzkaller #0 PREEMPT(full) [ 214.562766][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.562777][ T9467] Call Trace: [ 214.562785][ T9467] [ 214.562792][ T9467] dump_stack_lvl+0xe8/0x150 [ 214.562818][ T9467] should_fail_ex+0x412/0x560 [ 214.562842][ T9467] should_failslab+0xa8/0x100 [ 214.562862][ T9467] __kvmalloc_node_noprof+0x178/0x8a0 [ 214.562889][ T9467] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 214.562921][ T9467] __nf_hook_entries_try_shrink+0x328/0x700 [ 214.562954][ T9467] __nf_unregister_net_hook+0x4cc/0x6f0 [ 214.562986][ T9467] nf_unregister_net_hooks+0xcb/0x140 [ 214.563012][ T9467] ip_vs_unregister_hooks+0xbc/0x120 [ 214.563037][ T9467] ip_vs_unlink_service+0x980/0x1300 [ 214.563072][ T9467] ? ip_vs_unlink_service+0x198/0x1300 [ 214.563106][ T9467] ip_vs_flush+0x1d5/0x420 [ 214.563134][ T9467] do_ip_vs_set_ctl+0x4fb/0xb00 [ 214.563164][ T9467] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 214.563204][ T9467] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 214.563223][ T9467] ? nf_setsockopt+0x3a/0x290 [ 214.563252][ T9467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.563279][ T9467] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.563309][ T9467] nf_setsockopt+0x26f/0x290 [ 214.563335][ T9467] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 214.563362][ T9467] do_sock_setsockopt+0x17c/0x1b0 [ 214.563386][ T9467] __x64_sys_setsockopt+0x13d/0x1b0 [ 214.563408][ T9467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.563427][ T9467] do_syscall_64+0x174/0x580 [ 214.563445][ T9467] ? trace_irq_disable+0x3b/0x140 [ 214.563470][ T9467] ? clear_bhb_loop+0x40/0x90 [ 214.563491][ T9467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.563508][ T9467] RIP: 0033:0x7fbb2c39ce59 [ 214.563525][ T9467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.563540][ T9467] RSP: 002b:00007fbb2a5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.563558][ T9467] RAX: ffffffffffffffda RBX: 00007fbb2c615fa0 RCX: 00007fbb2c39ce59 [ 214.563571][ T9467] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000005 [ 214.563581][ T9467] RBP: 00007fbb2a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 214.563592][ T9467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.563602][ T9467] R13: 00007fbb2c616038 R14: 00007fbb2c615fa0 R15: 00007fff5d5cf828 [ 214.563631][ T9467] [ 214.635227][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 214.747428][ T9475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1078'. [ 214.836392][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1079'. [ 214.850046][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 215.070075][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 215.232733][ T9493] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 215.282530][ T9493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.304540][ T9498] bond1: (slave bond0): Removing an active aggregator [ 215.332860][ T9498] bond1: (slave bond0): Releasing backup interface [ 215.350381][ T9498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.383870][ T9498] bond3: (slave bond0): Enslaving as a backup interface with an up link [ 215.527756][ T9510] netlink: 'syz.4.1093': attribute type 1 has an invalid length. [ 215.546964][ T9510] netlink: 'syz.4.1093': attribute type 2 has an invalid length. [ 215.562149][ T9510] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1093'. [ 215.616249][ T9512] bond3: option packets_per_slave: invalid value (1048582) [ 215.623763][ T9512] bond3: option packets_per_slave: allowed values 0 - 65535 [ 215.639281][ T9512] bond3 (unregistering): Released all slaves [ 216.178582][ T9544] bond4: option tlb_dynamic_lb: invalid value (115) [ 216.195714][ T9544] bond4 (unregistering): Released all slaves [ 216.371553][ T9545] lo speed is unknown, defaulting to 1000 [ 216.514133][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 216.758567][ T9568] netlink: 'syz.2.1111': attribute type 2 has an invalid length. [ 216.890996][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'. [ 216.949148][ T9577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1113'. [ 217.611573][ T9607] batman_adv: batadv0: Interface deactivated: dummy0 [ 217.673777][ T9607] batman_adv: batadv0: Removing interface: dummy0 [ 217.983468][ T9625] veth0_macvtap: Caught tx_queue_len zero misconfig [ 218.241797][ T9635] netlink: 'syz.3.1138': attribute type 24 has an invalid length. [ 218.319166][ T9639] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 218.328087][ T9639] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 218.362697][ T9642] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 218.368654][ T9642] pim6reg0: persist disabled [ 218.407496][ T9641] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 218.430030][ T9644] tipc: Bearer : already 2 bearers with priority 10 [ 218.437526][ T9644] tipc: Bearer : trying with adjusted priority [ 218.444609][ T9644] tipc: Enabling of bearer rejected, failed to enable media [ 218.668526][ T9658] FAULT_INJECTION: forcing a failure. [ 218.668526][ T9658] name failslab, interval 1, probability 0, space 0, times 0 [ 218.689498][ T9658] CPU: 1 UID: 0 PID: 9658 Comm: syz.3.1147 Not tainted syzkaller #0 PREEMPT(full) [ 218.689524][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.689535][ T9658] Call Trace: [ 218.689542][ T9658] [ 218.689550][ T9658] dump_stack_lvl+0xe8/0x150 [ 218.689579][ T9658] should_fail_ex+0x412/0x560 [ 218.689604][ T9658] should_failslab+0xa8/0x100 [ 218.689624][ T9658] __kmalloc_node_noprof+0xf0/0x7c0 [ 218.689650][ T9658] ? alloc_slab_obj_exts+0xbf/0x250 [ 218.689678][ T9658] alloc_slab_obj_exts+0xbf/0x250 [ 218.689703][ T9658] __memcg_slab_post_alloc_hook+0x5c4/0xe80 [ 218.689744][ T9658] ? ep_insert+0x283/0x1a40 [ 218.689768][ T9658] kmem_cache_alloc_noprof+0x347/0x650 [ 218.689790][ T9658] ? ep_insert+0x283/0x1a40 [ 218.689811][ T9658] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 218.689836][ T9658] ep_insert+0x283/0x1a40 [ 218.689865][ T9658] ? __fget_files+0x2a/0x420 [ 218.689889][ T9658] ? __pfx_ep_insert+0x10/0x10 [ 218.689910][ T9658] ? __pfx___mutex_lock+0x10/0x10 [ 218.689935][ T9658] ? apparmor_capable+0x126/0x170 [ 218.689956][ T9658] ? bpf_lsm_capable+0x9/0x20 [ 218.689980][ T9658] do_epoll_ctl+0x7f4/0xe80 [ 218.690008][ T9658] __x64_sys_epoll_ctl+0x165/0x1b0 [ 218.690035][ T9658] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 218.690065][ T9658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.690085][ T9658] do_syscall_64+0x174/0x580 [ 218.690102][ T9658] ? trace_irq_disable+0x3b/0x140 [ 218.690128][ T9658] ? clear_bhb_loop+0x40/0x90 [ 218.690150][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.690167][ T9658] RIP: 0033:0x7f2478d9ce59 [ 218.690185][ T9658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.690200][ T9658] RSP: 002b:00007f2479d26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 218.690220][ T9658] RAX: ffffffffffffffda RBX: 00007f2479015fa0 RCX: 00007f2478d9ce59 [ 218.690233][ T9658] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 218.690243][ T9658] RBP: 00007f2479d26090 R08: 0000000000000000 R09: 0000000000000000 [ 218.690254][ T9658] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 218.690265][ T9658] R13: 00007f2479016038 R14: 00007f2479015fa0 R15: 00007ffee1087a08 [ 218.690295][ T9658] [ 218.992128][ T9665] vlan2: entered promiscuous mode [ 219.000092][ T9665] team0: entered promiscuous mode [ 219.005233][ T9665] team_slave_0: entered promiscuous mode [ 219.011350][ T9665] team_slave_1: entered promiscuous mode [ 219.054485][ T9668] netlink: 'syz.3.1152': attribute type 4 has an invalid length. [ 219.132212][ T9675] FAULT_INJECTION: forcing a failure. [ 219.132212][ T9675] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.165523][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.1.1151 Not tainted syzkaller #0 PREEMPT(full) [ 219.165551][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.165562][ T9675] Call Trace: [ 219.165570][ T9675] [ 219.165578][ T9675] dump_stack_lvl+0xe8/0x150 [ 219.165605][ T9675] should_fail_ex+0x412/0x560 [ 219.165632][ T9675] prepare_alloc_pages+0x22a/0x650 [ 219.165668][ T9675] __alloc_frozen_pages_noprof+0x12f/0x380 [ 219.165690][ T9675] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.165720][ T9675] ? __pfx_policy_nodemask+0x10/0x10 [ 219.165738][ T9675] ? __folio_batch_add_and_move+0x11a/0xc50 [ 219.165762][ T9675] ? lock_acquire+0x106/0x350 [ 219.165797][ T9675] alloc_pages_mpol+0x235/0x490 [ 219.165821][ T9675] folio_alloc_mpol_noprof+0x39/0x160 [ 219.165842][ T9675] vma_alloc_folio_noprof+0xe1/0x1e0 [ 219.165864][ T9675] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 219.165894][ T9675] do_wp_page+0x118a/0x4cc0 [ 219.165923][ T9675] ? __pte_offset_map+0x29/0x240 [ 219.165955][ T9675] ? __pfx_do_wp_page+0x10/0x10 [ 219.165977][ T9675] ? do_raw_spin_lock+0x12b/0x2f0 [ 219.166000][ T9675] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.166031][ T9675] handle_mm_fault+0x1698/0x3170 [ 219.166063][ T9675] ? handle_mm_fault+0xf1/0x3170 [ 219.166090][ T9675] ? __pfx_handle_mm_fault+0x10/0x10 [ 219.166112][ T9675] ? follow_page_pte+0xbd1/0xe60 [ 219.166141][ T9675] ? __pfx_follow_page_pte+0x10/0x10 [ 219.166174][ T9675] __get_user_pages+0x167f/0x2730 [ 219.166226][ T9675] __gup_longterm_locked+0xdcf/0x1630 [ 219.166258][ T9675] ? sanity_check_pinned_pages+0x7af/0x870 [ 219.166286][ T9675] gup_fast_fallback+0x1d84/0x20d0 [ 219.166338][ T9675] ? __pfx_gup_fast_fallback+0x10/0x10 [ 219.166358][ T9675] ? ____sys_recvmsg+0x1e6/0x4a0 [ 219.166404][ T9675] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 219.166423][ T9675] ? do_syscall_64+0x174/0x580 [ 219.166441][ T9675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.166465][ T9675] ? pin_user_pages_fast+0x4d/0xb0 [ 219.166488][ T9675] iov_iter_extract_pages+0x37b/0x5f0 [ 219.166519][ T9675] extract_iter_to_sg+0xefb/0x25d0 [ 219.166554][ T9675] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 219.166572][ T9675] ? rcu_is_watching+0x15/0xb0 [ 219.166594][ T9675] ? trace_kmalloc+0x2a/0xf0 [ 219.166624][ T9675] ? __kmalloc_noprof+0x1b8/0x760 [ 219.166652][ T9675] ? __asan_memset+0x22/0x50 [ 219.166677][ T9675] af_alg_get_rsgl+0x4b6/0x8e0 [ 219.166714][ T9675] skcipher_recvmsg+0x392/0x1140 [ 219.166755][ T9675] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 219.166775][ T9675] ? __lock_acquire+0x6b5/0x2cf0 [ 219.166799][ T9675] ? aa_sock_msg_perm+0xf1/0x1b0 [ 219.166827][ T9675] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 219.166850][ T9675] ? security_socket_recvmsg+0x7e/0x2c0 [ 219.166870][ T9675] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 219.166891][ T9675] sock_recvmsg+0x172/0x1b0 [ 219.166919][ T9675] ____sys_recvmsg+0x1e6/0x4a0 [ 219.166949][ T9675] ? __pfx_____sys_recvmsg+0x10/0x10 [ 219.166987][ T9675] ? import_iovec+0x73/0xa0 [ 219.167012][ T9675] ___sys_recvmsg+0x215/0x590 [ 219.167031][ T9675] ? get_pid_task+0x20/0x1f0 [ 219.167059][ T9675] ? __pfx____sys_recvmsg+0x10/0x10 [ 219.167085][ T9675] ? __fget_files+0x2a/0x420 [ 219.167124][ T9675] ? __fget_files+0x3a0/0x420 [ 219.167156][ T9675] __x64_sys_recvmsg+0x1ba/0x2a0 [ 219.167181][ T9675] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 219.167212][ T9675] ? __pfx_ksys_write+0x10/0x10 [ 219.167246][ T9675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.167265][ T9675] do_syscall_64+0x174/0x580 [ 219.167283][ T9675] ? trace_irq_disable+0x3b/0x140 [ 219.167308][ T9675] ? clear_bhb_loop+0x40/0x90 [ 219.167329][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.167347][ T9675] RIP: 0033:0x7f4e4939ce59 [ 219.167365][ T9675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.167380][ T9675] RSP: 002b:00007f4e4a1b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 219.167399][ T9675] RAX: ffffffffffffffda RBX: 00007f4e49616090 RCX: 00007f4e4939ce59 [ 219.167412][ T9675] RDX: 000000000000f0ff RSI: 00002000000005c0 RDI: 0000000000000004 [ 219.167424][ T9675] RBP: 00007f4e4a1b9090 R08: 0000000000000000 R09: 0000000000000000 [ 219.167435][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.167445][ T9675] R13: 00007f4e49616128 R14: 00007f4e49616090 R15: 00007fff9efab068 [ 219.167476][ T9675] [ 219.652446][ T9682] __nla_validate_parse: 6 callbacks suppressed [ 219.652465][ T9682] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1157'. [ 219.917227][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 220.079135][ T9700] openvswitch: netlink: IP tunnel dst address not specified [ 220.086989][ T9700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.433456][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1173'. [ 220.502456][ T9723] netlink: 'syz.1.1173': attribute type 29 has an invalid length. [ 220.511522][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 220.643668][ T9737] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1178'. [ 220.987945][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 220.995199][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 221.025929][ T9759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1184'. [ 221.170352][ T9770] FAULT_INJECTION: forcing a failure. [ 221.170352][ T9770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.186294][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.4.1185 Not tainted syzkaller #0 PREEMPT(full) [ 221.186319][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.186330][ T9770] Call Trace: [ 221.186338][ T9770] [ 221.186345][ T9770] dump_stack_lvl+0xe8/0x150 [ 221.186371][ T9770] should_fail_ex+0x412/0x560 [ 221.186396][ T9770] _copy_from_user+0x2d/0xb0 [ 221.186418][ T9770] ___sys_recvmsg+0x175/0x590 [ 221.186445][ T9770] ? __pfx____sys_recvmsg+0x10/0x10 [ 221.186471][ T9770] ? __fget_files+0x2a/0x420 [ 221.186520][ T9770] do_recvmmsg+0x334/0x800 [ 221.186547][ T9770] ? __pfx_do_recvmmsg+0x10/0x10 [ 221.186578][ T9770] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.186613][ T9770] __x64_sys_recvmmsg+0x198/0x250 [ 221.186637][ T9770] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 221.186667][ T9770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.186690][ T9770] do_syscall_64+0x174/0x580 [ 221.186708][ T9770] ? trace_irq_disable+0x3b/0x140 [ 221.186733][ T9770] ? clear_bhb_loop+0x40/0x90 [ 221.186756][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.186773][ T9770] RIP: 0033:0x7fbb2c39ce59 [ 221.186790][ T9770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.186804][ T9770] RSP: 002b:00007fbb2a5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 221.186824][ T9770] RAX: ffffffffffffffda RBX: 00007fbb2c615fa0 RCX: 00007fbb2c39ce59 [ 221.186837][ T9770] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 221.186857][ T9770] RBP: 00007fbb2a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 221.186868][ T9770] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 221.186879][ T9770] R13: 00007fbb2c616038 R14: 00007fbb2c615fa0 R15: 00007fff5d5cf828 [ 221.186906][ T9770] [ 221.467851][ T9762] lo speed is unknown, defaulting to 1000 [ 221.503761][ T9772] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 221.523835][ T9772] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 221.627982][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 221.635254][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 221.848909][ T9786] xfrm0: entered allmulticast mode [ 222.074018][ T9793] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1195'. [ 222.104627][ T9793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1195'. [ 222.116610][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 222.304832][ T9797] lo speed is unknown, defaulting to 1000 [ 222.344859][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1198'. [ 222.928076][ T9804] netlink: 'syz.0.1197': attribute type 4 has an invalid length. [ 222.940373][ T9820] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.123831][ T9826] xt_l2tp: invalid flags combination: 8 [ 224.083250][ T9846] FAULT_INJECTION: forcing a failure. [ 224.083250][ T9846] name failslab, interval 1, probability 0, space 0, times 0 [ 224.118290][ T9846] CPU: 0 UID: 0 PID: 9846 Comm: syz.3.1209 Not tainted syzkaller #0 PREEMPT(full) [ 224.118316][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.118327][ T9846] Call Trace: [ 224.118335][ T9846] [ 224.118342][ T9846] dump_stack_lvl+0xe8/0x150 [ 224.118368][ T9846] should_fail_ex+0x412/0x560 [ 224.118393][ T9846] should_failslab+0xa8/0x100 [ 224.118413][ T9846] __kmalloc_cache_noprof+0x88/0x660 [ 224.118437][ T9846] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 224.118456][ T9846] ? sctp_add_bind_addr+0x8c/0x370 [ 224.118486][ T9846] sctp_add_bind_addr+0x8c/0x370 [ 224.118516][ T9846] sctp_copy_local_addr_list+0x314/0x4f0 [ 224.118546][ T9846] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 224.118572][ T9846] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 224.118600][ T9846] ? sctp_v6_is_any+0x64/0x80 [ 224.118618][ T9846] ? sctp_copy_one_addr+0x93/0x360 [ 224.118646][ T9846] sctp_bind_addr_copy+0xb3/0x3c0 [ 224.118673][ T9846] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 224.118700][ T9846] sctp_connect_new_asoc+0x2ff/0x6b0 [ 224.118724][ T9846] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 224.118752][ T9846] ? __local_bh_enable_ip+0xd0/0x130 [ 224.118770][ T9846] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 224.118794][ T9846] ? security_sctp_bind_connect+0x7e/0x2c0 [ 224.118816][ T9846] sctp_sendmsg+0x1576/0x2c50 [ 224.118832][ T9846] ? unwind_next_frame+0xa6/0x2550 [ 224.118873][ T9846] ? __pfx_sctp_sendmsg+0x10/0x10 [ 224.118895][ T9846] ? aa_sk_perm+0x6d5/0x900 [ 224.118927][ T9846] ? __pfx_aa_sk_perm+0x10/0x10 [ 224.118952][ T9846] ? sock_rps_record_flow+0x19/0x350 [ 224.118979][ T9846] ? inet_sendmsg+0x2f4/0x370 [ 224.119006][ T9846] ____sys_sendmsg+0x80a/0x9f0 [ 224.119035][ T9846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.119066][ T9846] ? import_iovec+0x73/0xa0 [ 224.119091][ T9846] ___sys_sendmsg+0x2a5/0x360 [ 224.119110][ T9846] ? __lock_acquire+0x6b5/0x2cf0 [ 224.119133][ T9846] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.119190][ T9846] ? __fget_files+0x2a/0x420 [ 224.119210][ T9846] ? __fget_files+0x3a0/0x420 [ 224.119240][ T9846] __x64_sys_sendmsg+0x1bd/0x2a0 [ 224.119262][ T9846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.119291][ T9846] ? __pfx_ksys_write+0x10/0x10 [ 224.119321][ T9846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.119340][ T9846] do_syscall_64+0x174/0x580 [ 224.119357][ T9846] ? trace_irq_disable+0x3b/0x140 [ 224.119380][ T9846] ? clear_bhb_loop+0x40/0x90 [ 224.119400][ T9846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.119416][ T9846] RIP: 0033:0x7f2478d9ce59 [ 224.119432][ T9846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.119446][ T9846] RSP: 002b:00007f2479d26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.119464][ T9846] RAX: ffffffffffffffda RBX: 00007f2479015fa0 RCX: 00007f2478d9ce59 [ 224.119475][ T9846] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000004 [ 224.119486][ T9846] RBP: 00007f2479d26090 R08: 0000000000000000 R09: 0000000000000000 [ 224.119496][ T9846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.119506][ T9846] R13: 00007f2479016038 R14: 00007f2479015fa0 R15: 00007ffee1087a08 [ 224.119533][ T9846] [ 224.644343][ T9851] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 225.043934][ T9866] Bluetooth: MGMT ver 1.23 [ 225.108165][ T9868] FAULT_INJECTION: forcing a failure. [ 225.108165][ T9868] name failslab, interval 1, probability 0, space 0, times 0 [ 225.123075][ T9868] CPU: 1 UID: 0 PID: 9868 Comm: syz.2.1216 Not tainted syzkaller #0 PREEMPT(full) [ 225.123102][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.123113][ T9868] Call Trace: [ 225.123120][ T9868] [ 225.123128][ T9868] dump_stack_lvl+0xe8/0x150 [ 225.123154][ T9868] should_fail_ex+0x412/0x560 [ 225.123179][ T9868] should_failslab+0xa8/0x100 [ 225.123199][ T9868] __kvmalloc_node_noprof+0x178/0x8a0 [ 225.123226][ T9868] ? page_pool_create_percpu+0x304/0xc80 [ 225.123251][ T9868] ? page_pool_create_percpu+0xaf/0xc80 [ 225.123278][ T9868] page_pool_create_percpu+0x304/0xc80 [ 225.123309][ T9868] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 225.123329][ T9868] ? arch_stack_walk+0xfb/0x150 [ 225.123367][ T9868] ? __pfx_stack_trace_save+0x10/0x10 [ 225.123394][ T9868] ? stack_depot_save_flags+0x33/0x810 [ 225.123420][ T9868] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 225.123440][ T9868] ? bpf_test_init+0x9f/0x150 [ 225.123456][ T9868] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 225.123475][ T9868] ? bpf_prog_test_run+0x2c7/0x340 [ 225.123492][ T9868] ? __sys_bpf+0x643/0x950 [ 225.123514][ T9868] ? __x64_sys_bpf+0x7c/0x90 [ 225.123567][ T9868] ? __might_fault+0xaf/0x130 [ 225.123591][ T9868] ? __might_fault+0xaf/0x130 [ 225.123618][ T9868] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 225.123649][ T9868] ? _copy_from_user+0x94/0xb0 [ 225.123670][ T9868] ? bpf_test_init+0x113/0x150 [ 225.123688][ T9868] ? xdp_convert_md_to_buff+0x5b/0x330 [ 225.123711][ T9868] bpf_prog_test_run_xdp+0x81c/0x1160 [ 225.123746][ T9868] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 225.123770][ T9868] ? __fget_files+0x2a/0x420 [ 225.123803][ T9868] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 225.123825][ T9868] bpf_prog_test_run+0x2c7/0x340 [ 225.123846][ T9868] __sys_bpf+0x643/0x950 [ 225.123877][ T9868] ? __pfx___sys_bpf+0x10/0x10 [ 225.123915][ T9868] ? ksys_write+0x242/0x270 [ 225.123945][ T9868] ? __pfx_ksys_write+0x10/0x10 [ 225.123973][ T9868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.123993][ T9868] __x64_sys_bpf+0x7c/0x90 [ 225.124016][ T9868] do_syscall_64+0x174/0x580 [ 225.124035][ T9868] ? trace_irq_disable+0x3b/0x140 [ 225.124059][ T9868] ? clear_bhb_loop+0x40/0x90 [ 225.124080][ T9868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.124098][ T9868] RIP: 0033:0x7fd75379ce59 [ 225.124119][ T9868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.124134][ T9868] RSP: 002b:00007fd754581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.124157][ T9868] RAX: ffffffffffffffda RBX: 00007fd753a15fa0 RCX: 00007fd75379ce59 [ 225.124170][ T9868] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 225.124182][ T9868] RBP: 00007fd754581090 R08: 0000000000000000 R09: 0000000000000000 [ 225.124193][ T9868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.124203][ T9868] R13: 00007fd753a16038 R14: 00007fd753a15fa0 R15: 00007ffd360f4e68 [ 225.124229][ T9868] [ 225.125604][ T9868] page_pool_create_percpu() gave up with errno -12 [ 225.185905][ T9870] FAULT_INJECTION: forcing a failure. [ 225.185905][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 225.454448][ T9870] CPU: 1 UID: 0 PID: 9870 Comm: syz.1.1217 Not tainted syzkaller #0 PREEMPT(full) [ 225.454473][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.454483][ T9870] Call Trace: [ 225.454493][ T9870] [ 225.454501][ T9870] dump_stack_lvl+0xe8/0x150 [ 225.454526][ T9870] should_fail_ex+0x412/0x560 [ 225.454549][ T9870] should_failslab+0xa8/0x100 [ 225.454568][ T9870] __kmalloc_node_noprof+0xf0/0x7c0 [ 225.454591][ T9870] ? get_callchain_buffers+0x198/0x350 [ 225.454609][ T9870] ? __kmalloc_node_noprof+0x34f/0x7c0 [ 225.454634][ T9870] get_callchain_buffers+0x198/0x350 [ 225.454656][ T9870] stack_map_alloc+0x310/0x4c0 [ 225.454678][ T9870] map_create+0xafd/0x16a0 [ 225.454704][ T9870] ? security_bpf+0x7e/0x2d0 [ 225.454727][ T9870] __sys_bpf+0x6e1/0x950 [ 225.454751][ T9870] ? __pfx___sys_bpf+0x10/0x10 [ 225.454789][ T9870] ? ksys_write+0x242/0x270 [ 225.454813][ T9870] ? __pfx_ksys_write+0x10/0x10 [ 225.454839][ T9870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.454856][ T9870] __x64_sys_bpf+0x7c/0x90 [ 225.454937][ T9870] do_syscall_64+0x174/0x580 [ 225.454955][ T9870] ? trace_irq_disable+0x3b/0x140 [ 225.454978][ T9870] ? clear_bhb_loop+0x40/0x90 [ 225.454997][ T9870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.455013][ T9870] RIP: 0033:0x7f4e4939ce59 [ 225.455029][ T9870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.455042][ T9870] RSP: 002b:00007f4e4a1da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.455059][ T9870] RAX: ffffffffffffffda RBX: 00007f4e49615fa0 RCX: 00007f4e4939ce59 [ 225.455071][ T9870] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 225.455080][ T9870] RBP: 00007f4e4a1da090 R08: 0000000000000000 R09: 0000000000000000 [ 225.455090][ T9870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.455098][ T9870] R13: 00007f4e49616038 R14: 00007f4e49615fa0 R15: 00007fff9efab068 [ 225.455126][ T9870] [ 225.821414][ T9884] netlink: 'syz.4.1220': attribute type 3 has an invalid length. [ 226.088476][ T9892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.121740][ T9892] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.164028][ T9892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.284173][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.296444][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.310648][ T9892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.322889][ T9892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.346405][ T9892] veth1_vlan: left promiscuous mode [ 226.357839][ T9892] veth0_vlan: left promiscuous mode [ 226.364550][ T9892] veth0_vlan: entered promiscuous mode [ 226.374943][ T9892] veth1_vlan: entered promiscuous mode [ 226.384978][ T9892] tipc: Resetting bearer [ 226.391148][ T9892] tipc: Resetting bearer [ 226.400409][ T9892] veth1_macvtap: left promiscuous mode [ 226.409613][ T9892] veth0_macvtap: left promiscuous mode [ 226.416936][ T9892] veth0_macvtap: entered promiscuous mode [ 226.424249][ T9892] veth1_macvtap: entered promiscuous mode [ 226.438650][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.448287][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.457339][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.469360][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.479700][ T9892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.493267][ T9892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.499476][ T9911] __nla_validate_parse: 4 callbacks suppressed [ 226.499496][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 226.524023][ T9903] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 226.531769][ T29] audit: type=1804 audit(1780719559.493:11): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1227" name="/newroot/242/cgroup.controllers" dev="tmpfs" ino=1249 res=1 errno=0 [ 226.563821][ T9903] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 226.588846][ T29] audit: type=1800 audit(1780719559.493:12): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1227" name="cgroup.controllers" dev="tmpfs" ino=1249 res=0 errno=0 [ 226.613293][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.620534][ T6600] bridge0: port 1(bridge_slave_0) entered listening state [ 226.634317][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.641575][ T6600] bridge0: port 2(bridge_slave_1) entered listening state [ 226.689163][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 226.704761][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 226.721249][ T3284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.747157][ T3284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.782008][ T3284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.825413][ T3284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.853053][ T9915] FAULT_INJECTION: forcing a failure. [ 226.853053][ T9915] name failslab, interval 1, probability 0, space 0, times 0 [ 226.889402][ T9915] CPU: 0 UID: 0 PID: 9915 Comm: syz.1.1229 Not tainted syzkaller #0 PREEMPT(full) [ 226.889428][ T9915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.889439][ T9915] Call Trace: [ 226.889446][ T9915] [ 226.889454][ T9915] dump_stack_lvl+0xe8/0x150 [ 226.889480][ T9915] should_fail_ex+0x412/0x560 [ 226.889509][ T9915] should_failslab+0xa8/0x100 [ 226.889530][ T9915] __kmalloc_noprof+0xe8/0x760 [ 226.889554][ T9915] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 226.889586][ T9915] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 226.889617][ T9915] genl_family_rcv_msg_doit+0xd9/0x330 [ 226.889645][ T9915] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.889676][ T9915] ? apparmor_capable+0x126/0x170 [ 226.889697][ T9915] ? bpf_lsm_capable+0x9/0x20 [ 226.889713][ T9915] ? security_capable+0x7e/0x2c0 [ 226.889744][ T9915] genl_rcv_msg+0x61c/0x7a0 [ 226.889774][ T9915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.889798][ T9915] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 226.889844][ T9915] netlink_rcv_skb+0x232/0x4b0 [ 226.889866][ T9915] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.889892][ T9915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.889929][ T9915] ? down_read+0x270/0x2e0 [ 226.889948][ T9915] ? genl_rcv+0xd/0x40 [ 226.889973][ T9915] genl_rcv+0x28/0x40 [ 226.889995][ T9915] netlink_unicast+0x75c/0x8e0 [ 226.890020][ T9915] netlink_sendmsg+0x813/0xb40 [ 226.890049][ T9915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.890073][ T9915] ? aa_sock_msg_perm+0xf1/0x1b0 [ 226.890098][ T9915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.890124][ T9915] ____sys_sendmsg+0x972/0x9f0 [ 226.890142][ T9915] ? __might_fault+0xaf/0x130 [ 226.890170][ T9915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.890199][ T9915] ? import_iovec+0x73/0xa0 [ 226.890224][ T9915] ___sys_sendmsg+0x2a5/0x360 [ 226.890243][ T9915] ? __lock_acquire+0x6b5/0x2cf0 [ 226.890265][ T9915] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.890321][ T9915] ? __fget_files+0x2a/0x420 [ 226.890341][ T9915] ? __fget_files+0x3a0/0x420 [ 226.890372][ T9915] __x64_sys_sendmsg+0x1bd/0x2a0 [ 226.890396][ T9915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.890426][ T9915] ? __pfx_ksys_write+0x10/0x10 [ 226.890460][ T9915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.890478][ T9915] do_syscall_64+0x174/0x580 [ 226.890493][ T9915] ? trace_irq_disable+0x3b/0x140 [ 226.890517][ T9915] ? clear_bhb_loop+0x40/0x90 [ 226.890540][ T9915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.890557][ T9915] RIP: 0033:0x7f4e4939ce59 [ 226.890575][ T9915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.890590][ T9915] RSP: 002b:00007f4e4a1da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.890607][ T9915] RAX: ffffffffffffffda RBX: 00007f4e49615fa0 RCX: 00007f4e4939ce59 [ 226.890620][ T9915] RDX: 0000000024000000 RSI: 0000200000000d40 RDI: 0000000000000008 [ 226.890631][ T9915] RBP: 00007f4e4a1da090 R08: 0000000000000000 R09: 0000000000000000 [ 226.890642][ T9915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.890653][ T9915] R13: 00007f4e49616038 R14: 00007f4e49615fa0 R15: 00007fff9efab068 [ 226.890683][ T9915] [ 226.953478][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 227.520907][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1239'. [ 227.582977][ T9950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1241'. [ 227.691811][ T9955] FAULT_INJECTION: forcing a failure. [ 227.691811][ T9955] name failslab, interval 1, probability 0, space 0, times 0 [ 227.704580][ T9956] FAULT_INJECTION: forcing a failure. [ 227.704580][ T9956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.705293][ T9955] CPU: 1 UID: 0 PID: 9955 Comm: syz.1.1244 Not tainted syzkaller #0 PREEMPT(full) [ 227.705315][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.705326][ T9955] Call Trace: [ 227.705333][ T9955] [ 227.705340][ T9955] dump_stack_lvl+0xe8/0x150 [ 227.705366][ T9955] should_fail_ex+0x412/0x560 [ 227.705391][ T9955] should_failslab+0xa8/0x100 [ 227.705410][ T9955] __kmalloc_noprof+0xe8/0x760 [ 227.705433][ T9955] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 227.705458][ T9955] ? sock_kmalloc+0xd6/0x160 [ 227.705484][ T9955] sock_kmalloc+0xd6/0x160 [ 227.705507][ T9955] af_alg_alloc_areq+0x99/0x200 [ 227.705527][ T9955] skcipher_recvmsg+0x321/0x1140 [ 227.705564][ T9955] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 227.705583][ T9955] ? __lock_acquire+0x6b5/0x2cf0 [ 227.705601][ T9955] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.705627][ T9955] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 227.705648][ T9955] ? security_socket_recvmsg+0x7e/0x2c0 [ 227.705668][ T9955] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 227.705688][ T9955] sock_recvmsg+0x172/0x1b0 [ 227.705715][ T9955] ____sys_recvmsg+0x1e6/0x4a0 [ 227.705743][ T9955] ? __pfx_____sys_recvmsg+0x10/0x10 [ 227.705778][ T9955] ? import_iovec+0x73/0xa0 [ 227.705802][ T9955] ___sys_recvmsg+0x215/0x590 [ 227.705821][ T9955] ? get_pid_task+0x20/0x1f0 [ 227.705846][ T9955] ? __pfx____sys_recvmsg+0x10/0x10 [ 227.705871][ T9955] ? __fget_files+0x2a/0x420 [ 227.705908][ T9955] ? __fget_files+0x3a0/0x420 [ 227.705938][ T9955] __x64_sys_recvmsg+0x1ba/0x2a0 [ 227.705962][ T9955] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 227.705994][ T9955] ? __pfx_ksys_write+0x10/0x10 [ 227.706026][ T9955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.706045][ T9955] do_syscall_64+0x174/0x580 [ 227.706064][ T9955] ? trace_irq_disable+0x3b/0x140 [ 227.706088][ T9955] ? clear_bhb_loop+0x40/0x90 [ 227.706109][ T9955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.706126][ T9955] RIP: 0033:0x7f4e4939ce59 [ 227.706149][ T9955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.706164][ T9955] RSP: 002b:00007f4e4a1da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 227.706183][ T9955] RAX: ffffffffffffffda RBX: 00007f4e49615fa0 RCX: 00007f4e4939ce59 [ 227.706196][ T9955] RDX: 0000000040010123 RSI: 0000200000000cc0 RDI: 0000000000000004 [ 227.706208][ T9955] RBP: 00007f4e4a1da090 R08: 0000000000000000 R09: 0000000000000000 [ 227.706218][ T9955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.706228][ T9955] R13: 00007f4e49616038 R14: 00007f4e49615fa0 R15: 00007fff9efab068 [ 227.706257][ T9955] [ 227.989913][ T9956] CPU: 0 UID: 0 PID: 9956 Comm: syz.2.1243 Not tainted syzkaller #0 PREEMPT(full) [ 227.989940][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.989950][ T9956] Call Trace: [ 227.989958][ T9956] [ 227.989965][ T9956] dump_stack_lvl+0xe8/0x150 [ 227.989991][ T9956] should_fail_ex+0x412/0x560 [ 227.990016][ T9956] _copy_from_iter+0x1d3/0x1670 [ 227.990037][ T9956] ? sock_alloc_send_pskb+0x896/0x990 [ 227.990063][ T9956] ? __pfx__copy_from_iter+0x10/0x10 [ 227.990090][ T9956] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 227.990112][ T9956] skb_copy_datagram_from_iter+0xf5/0x710 [ 227.990133][ T9956] ? dev_get_by_index+0x22/0x2e0 [ 227.990166][ T9956] ? skb_put+0x11b/0x210 [ 227.990186][ T9956] packet_sendmsg+0x35b1/0x4fb0 [ 227.990215][ T9956] ? tomoyo_check_open_permission+0x38e/0x470 [ 227.990240][ T9956] ? __bpf_trace_lock_acquire+0xc0/0x390 [ 227.990275][ T9956] ? __pfx_packet_sendmsg+0x10/0x10 [ 227.990291][ T9956] ? aa_sk_perm+0x6d5/0x900 [ 227.990319][ T9956] ? __pfx_aa_sk_perm+0x10/0x10 [ 227.990340][ T9956] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 227.990368][ T9956] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.990394][ T9956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.990420][ T9956] ____sys_sendmsg+0x972/0x9f0 [ 227.990450][ T9956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.990476][ T9956] ? import_iovec+0x73/0xa0 [ 227.990499][ T9956] ___sys_sendmsg+0x2a5/0x360 [ 227.990517][ T9956] ? __lock_acquire+0x6b5/0x2cf0 [ 227.990537][ T9956] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.990562][ T9956] ? kstrtouint+0x6e/0xe0 [ 227.990605][ T9956] ? __fget_files+0x2a/0x420 [ 227.990625][ T9956] ? __fget_files+0x3a0/0x420 [ 227.990655][ T9956] __sys_sendmmsg+0x27c/0x4e0 [ 227.990679][ T9956] ? __pfx___sys_sendmmsg+0x10/0x10 [ 227.990698][ T9956] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 227.990737][ T9956] ? ksys_write+0x242/0x270 [ 227.990762][ T9956] ? __pfx_ksys_write+0x10/0x10 [ 227.990789][ T9956] __x64_sys_sendmmsg+0xa0/0xc0 [ 227.990807][ T9956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.990824][ T9956] do_syscall_64+0x174/0x580 [ 227.990842][ T9956] ? trace_irq_disable+0x3b/0x140 [ 227.990865][ T9956] ? clear_bhb_loop+0x40/0x90 [ 227.990886][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.990904][ T9956] RIP: 0033:0x7fd75379ce59 [ 227.990919][ T9956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.990934][ T9956] RSP: 002b:00007fd754581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 227.990953][ T9956] RAX: ffffffffffffffda RBX: 00007fd753a15fa0 RCX: 00007fd75379ce59 [ 227.990965][ T9956] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000006 [ 227.990976][ T9956] RBP: 00007fd754581090 R08: 0000000000000000 R09: 0000000000000000 [ 227.990987][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.990997][ T9956] R13: 00007fd753a16038 R14: 00007fd753a15fa0 R15: 00007ffd360f4e68 [ 227.991021][ T9956] [ 228.389466][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 228.529315][ T9972] xt_l2tp: invalid flags combination: 8 [ 228.566648][ T9983] syzkaller0: entered promiscuous mode [ 228.575648][ T9983] syzkaller0: entered allmulticast mode [ 228.624260][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1254'. [ 228.661250][ T9988] FAULT_INJECTION: forcing a failure. [ 228.661250][ T9988] name failslab, interval 1, probability 0, space 0, times 0 [ 228.684230][ T9988] CPU: 0 UID: 0 PID: 9988 Comm: syz.2.1256 Not tainted syzkaller #0 PREEMPT(full) [ 228.684258][ T9988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.684269][ T9988] Call Trace: [ 228.684277][ T9988] [ 228.684285][ T9988] dump_stack_lvl+0xe8/0x150 [ 228.684311][ T9988] should_fail_ex+0x412/0x560 [ 228.684337][ T9988] should_failslab+0xa8/0x100 [ 228.684356][ T9988] ? ep_ptable_queue_proc+0x5c/0x200 [ 228.684383][ T9988] kmem_cache_alloc_noprof+0x87/0x650 [ 228.684416][ T9988] ep_ptable_queue_proc+0x5c/0x200 [ 228.684441][ T9988] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 228.684467][ T9988] unix_dgram_poll+0x80/0x680 [ 228.684494][ T9988] sock_poll+0x321/0x3e0 [ 228.684522][ T9988] ? __pfx_sock_poll+0x10/0x10 [ 228.684544][ T9988] ep_insert+0x11a9/0x1a40 [ 228.684582][ T9988] ? __pfx_ep_insert+0x10/0x10 [ 228.684613][ T9988] ? __pfx___mutex_lock+0x10/0x10 [ 228.684635][ T9988] ? __fget_files+0x2a/0x420 [ 228.684659][ T9988] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 228.684684][ T9988] ? __fget_files+0x3a0/0x420 [ 228.684705][ T9988] ? __fget_files+0x2a/0x420 [ 228.684735][ T9988] do_epoll_ctl+0x7f4/0xe80 [ 228.684767][ T9988] __x64_sys_epoll_ctl+0x165/0x1b0 [ 228.684795][ T9988] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 228.684827][ T9988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.684847][ T9988] do_syscall_64+0x174/0x580 [ 228.684864][ T9988] ? trace_irq_disable+0x3b/0x140 [ 228.684888][ T9988] ? clear_bhb_loop+0x40/0x90 [ 228.684912][ T9988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.684929][ T9988] RIP: 0033:0x7fd75379ce59 [ 228.684946][ T9988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.684961][ T9988] RSP: 002b:00007fd754581028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 228.684981][ T9988] RAX: ffffffffffffffda RBX: 00007fd753a15fa0 RCX: 00007fd75379ce59 [ 228.684995][ T9988] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000004 [ 228.685007][ T9988] RBP: 00007fd754581090 R08: 0000000000000000 R09: 0000000000000000 [ 228.685020][ T9988] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 228.685032][ T9988] R13: 00007fd753a16038 R14: 00007fd753a15fa0 R15: 00007ffd360f4e68 [ 228.685063][ T9988] [ 228.968200][ T9991] netlink: 'syz.1.1257': attribute type 22 has an invalid length. [ 229.209147][T10012] syz1: rxe_newlink: already configured on bond0 [ 229.258160][T10012] netlink: 'syz.1.1264': attribute type 13 has an invalid length. [ 229.567050][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1268'. [ 229.665942][T10032] syzkaller0: entered promiscuous mode [ 229.679263][T10032] syzkaller0: entered allmulticast mode [ 229.959580][T10046] netlink: 'syz.0.1276': attribute type 49 has an invalid length. [ 229.990324][T10046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.998884][T10046] IPv6: NLM_F_CREATE should be set when creating new route [ 230.006207][T10046] IPv6: NLM_F_CREATE should be set when creating new route [ 230.035228][T10050] FAULT_INJECTION: forcing a failure. [ 230.035228][T10050] name failslab, interval 1, probability 0, space 0, times 0 [ 230.065042][T10050] CPU: 0 UID: 0 PID: 10050 Comm: syz.4.1278 Not tainted syzkaller #0 PREEMPT(full) [ 230.065066][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.065077][T10050] Call Trace: [ 230.065085][T10050] [ 230.065093][T10050] dump_stack_lvl+0xe8/0x150 [ 230.065118][T10050] should_fail_ex+0x412/0x560 [ 230.065143][T10050] should_failslab+0xa8/0x100 [ 230.065162][T10050] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 230.065188][T10050] ? __alloc_skb+0x1d0/0x7d0 [ 230.065203][T10050] ? __local_bh_enable_ip+0xd0/0x130 [ 230.065226][T10050] __alloc_skb+0x1d0/0x7d0 [ 230.065249][T10050] _sctp_make_chunk+0x59/0x290 [ 230.065271][T10050] sctp_make_datafrag_empty+0x12a/0x240 [ 230.065300][T10050] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 230.065329][T10050] ? sctp_user_addto_chunk+0xa8/0x240 [ 230.065351][T10050] sctp_datamsg_from_user+0x729/0xef0 [ 230.065394][T10050] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 230.065413][T10050] ? __asan_memcpy+0x40/0x70 [ 230.065442][T10050] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 230.065476][T10050] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 230.065495][T10050] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 230.065517][T10050] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 230.065534][T10050] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 230.065552][T10050] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 230.065573][T10050] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 230.065596][T10050] ? security_sctp_bind_connect+0x7e/0x2c0 [ 230.065622][T10050] sctp_sendmsg+0x1b85/0x2c50 [ 230.065657][T10050] ? __pfx_sctp_sendmsg+0x10/0x10 [ 230.065680][T10050] ? aa_sk_perm+0x6d5/0x900 [ 230.065702][T10050] ? __might_fault+0xaf/0x130 [ 230.065731][T10050] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.065758][T10050] ? sock_rps_record_flow+0x19/0x350 [ 230.065783][T10050] ? __pfx_inet_sendmsg+0x10/0x10 [ 230.065808][T10050] ? inet_sendmsg+0x2f4/0x370 [ 230.065831][T10050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.065852][T10050] ? __pfx_inet_sendmsg+0x10/0x10 [ 230.065880][T10050] __sys_sendto+0x5de/0x710 [ 230.065901][T10050] ? __pfx___sys_sendto+0x10/0x10 [ 230.065917][T10050] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 230.065949][T10050] ? __fget_files+0x3a0/0x420 [ 230.065980][T10050] ? ksys_write+0x242/0x270 [ 230.066003][T10050] ? __pfx_ksys_write+0x10/0x10 [ 230.066038][T10050] __x64_sys_sendto+0xde/0x100 [ 230.066056][T10050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.066074][T10050] do_syscall_64+0x174/0x580 [ 230.066090][T10050] ? trace_irq_disable+0x3b/0x140 [ 230.066114][T10050] ? clear_bhb_loop+0x40/0x90 [ 230.066135][T10050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.066152][T10050] RIP: 0033:0x7fbb2c39ce59 [ 230.066170][T10050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.066185][T10050] RSP: 002b:00007fbb2a5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 230.066205][T10050] RAX: ffffffffffffffda RBX: 00007fbb2c615fa0 RCX: 00007fbb2c39ce59 [ 230.066218][T10050] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 230.066230][T10050] RBP: 00007fbb2a5ee090 R08: 000020000005ffe4 R09: 000000000000001c [ 230.066242][T10050] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 230.066253][T10050] R13: 00007fbb2c616038 R14: 00007fbb2c615fa0 R15: 00007fff5d5cf828 [ 230.066284][T10050] [ 230.164093][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'. [ 230.580075][T10073] FAULT_INJECTION: forcing a failure. [ 230.580075][T10073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.603990][T10073] CPU: 0 UID: 0 PID: 10073 Comm: syz.2.1285 Not tainted syzkaller #0 PREEMPT(full) [ 230.604016][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.604036][T10073] Call Trace: [ 230.604043][T10073] [ 230.604050][T10073] dump_stack_lvl+0xe8/0x150 [ 230.604074][T10073] should_fail_ex+0x412/0x560 [ 230.604097][T10073] _copy_to_user+0x31/0xb0 [ 230.604117][T10073] bpf_test_finish+0x53c/0x6b0 [ 230.604142][T10073] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 230.604163][T10073] ? __pfx_bpf_test_finish+0x10/0x10 [ 230.604187][T10073] ? _copy_from_user+0x94/0xb0 [ 230.604211][T10073] ? bpf_test_init+0x113/0x150 [ 230.604231][T10073] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 230.604264][T10073] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 230.604289][T10073] ? __fget_files+0x2a/0x420 [ 230.604314][T10073] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 230.604335][T10073] bpf_prog_test_run+0x2c7/0x340 [ 230.604356][T10073] __sys_bpf+0x643/0x950 [ 230.604381][T10073] ? __pfx___sys_bpf+0x10/0x10 [ 230.604419][T10073] ? ksys_write+0x242/0x270 [ 230.604446][T10073] ? __pfx_ksys_write+0x10/0x10 [ 230.604475][T10073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.604495][T10073] __x64_sys_bpf+0x7c/0x90 [ 230.604520][T10073] do_syscall_64+0x174/0x580 [ 230.604540][T10073] ? clear_bhb_loop+0x40/0x90 [ 230.604562][T10073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.604580][T10073] RIP: 0033:0x7fd75379ce59 [ 230.604597][T10073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.604612][T10073] RSP: 002b:00007fd754581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.604632][T10073] RAX: ffffffffffffffda RBX: 00007fd753a15fa0 RCX: 00007fd75379ce59 [ 230.604645][T10073] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 230.604656][T10073] RBP: 00007fd754581090 R08: 0000000000000000 R09: 0000000000000000 [ 230.604667][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.604678][T10073] R13: 00007fd753a16038 R14: 00007fd753a15fa0 R15: 00007ffd360f4e68 [ 230.604708][T10073] [ 231.137646][T10098] syz_tun: left allmulticast mode [ 231.172937][ T8973] IPVS: starting estimator thread 0... [ 231.277510][T10101] IPVS: using max 33 ests per chain, 79200 per kthread [ 231.331804][T10106] FAULT_INJECTION: forcing a failure. [ 231.331804][T10106] name failslab, interval 1, probability 0, space 0, times 0 [ 231.349889][T10106] CPU: 0 UID: 0 PID: 10106 Comm: syz.1.1299 Not tainted syzkaller #0 PREEMPT(full) [ 231.349914][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.349925][T10106] Call Trace: [ 231.349933][T10106] [ 231.349940][T10106] dump_stack_lvl+0xe8/0x150 [ 231.349966][T10106] should_fail_ex+0x412/0x560 [ 231.349990][T10106] should_failslab+0xa8/0x100 [ 231.350010][T10106] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 231.350035][T10106] ? trace_kmalloc+0x2a/0xf0 [ 231.350055][T10106] ? page_pool_create_percpu+0x76/0xc80 [ 231.350083][T10106] page_pool_create_percpu+0x76/0xc80 [ 231.350107][T10106] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 231.350138][T10106] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 231.350158][T10106] ? arch_stack_walk+0xfb/0x150 [ 231.350194][T10106] ? __pfx_stack_trace_save+0x10/0x10 [ 231.350221][T10106] ? stack_depot_save_flags+0x33/0x810 [ 231.350247][T10106] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 231.350266][T10106] ? bpf_test_init+0x9f/0x150 [ 231.350283][T10106] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 231.350302][T10106] ? bpf_prog_test_run+0x2c7/0x340 [ 231.350319][T10106] ? __sys_bpf+0x643/0x950 [ 231.350342][T10106] ? __x64_sys_bpf+0x7c/0x90 [ 231.350388][T10106] ? __might_fault+0xaf/0x130 [ 231.350410][T10106] ? __might_fault+0xaf/0x130 [ 231.350436][T10106] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 231.350467][T10106] ? _copy_from_user+0x94/0xb0 [ 231.350488][T10106] ? bpf_test_init+0x113/0x150 [ 231.350505][T10106] ? xdp_convert_md_to_buff+0x5b/0x330 [ 231.350529][T10106] bpf_prog_test_run_xdp+0x81c/0x1160 [ 231.350564][T10106] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 231.350590][T10106] ? __fget_files+0x2a/0x420 [ 231.350615][T10106] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 231.350637][T10106] bpf_prog_test_run+0x2c7/0x340 [ 231.350659][T10106] __sys_bpf+0x643/0x950 [ 231.350686][T10106] ? __pfx___sys_bpf+0x10/0x10 [ 231.350726][T10106] ? ksys_write+0x242/0x270 [ 231.350752][T10106] ? __pfx_ksys_write+0x10/0x10 [ 231.350779][T10106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.350798][T10106] __x64_sys_bpf+0x7c/0x90 [ 231.350821][T10106] do_syscall_64+0x174/0x580 [ 231.350840][T10106] ? trace_irq_disable+0x3b/0x140 [ 231.350863][T10106] ? clear_bhb_loop+0x40/0x90 [ 231.350892][T10106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.350909][T10106] RIP: 0033:0x7f4e4939ce59 [ 231.350926][T10106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.350940][T10106] RSP: 002b:00007f4e4a1da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.350960][T10106] RAX: ffffffffffffffda RBX: 00007f4e49615fa0 RCX: 00007f4e4939ce59 [ 231.350973][T10106] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 231.350984][T10106] RBP: 00007f4e4a1da090 R08: 0000000000000000 R09: 0000000000000000 [ 231.350995][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.351005][T10106] R13: 00007f4e49616038 R14: 00007f4e49615fa0 R15: 00007fff9efab068 [ 231.351034][T10106] [ 231.781584][T10110] __nla_validate_parse: 2 callbacks suppressed [ 231.781604][T10110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1297'. [ 232.031707][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 232.189285][T10141] netlink: 'syz.1.1309': attribute type 1 has an invalid length. [ 232.232252][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.242984][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.251887][T10132] netlink: 'syz.4.1303': attribute type 16 has an invalid length. [ 232.267210][T10132] netlink: 'syz.4.1303': attribute type 17 has an invalid length. [ 232.370401][T10141] bond3: entered promiscuous mode [ 232.389467][T10141] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.404389][T10146] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.417894][T10146] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 232.440528][T10146] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 232.455149][T10161] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 232.488566][T10132] gre0: left promiscuous mode [ 232.493432][T10132] gre0: left allmulticast mode [ 232.508028][T10132] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.515265][T10132] bridge0: port 1(bridge_slave_0) entered listening state [ 232.524378][T10132] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.531589][T10132] bridge0: port 2(bridge_slave_1) entered listening state [ 232.562369][T10132] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 232.570830][T10132] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 232.585599][T10132] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 232.604725][T10143] tipc: Enabled bearer , priority 0 [ 232.612315][T10150] syzkaller0: entered promiscuous mode [ 232.618079][T10150] syzkaller0: entered allmulticast mode [ 232.675568][T10148] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 232.759967][T10143] tipc: Resetting bearer [ 232.798317][T10140] tipc: Resetting bearer [ 232.850395][T10140] tipc: Disabling bearer [ 233.019589][T10186] trusted_key: syz.4.1323 sent an empty control message without MSG_MORE. [ 233.385897][T10202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1328'. [ 233.735375][T10212] FAULT_INJECTION: forcing a failure. [ 233.735375][T10212] name failslab, interval 1, probability 0, space 0, times 0 [ 233.783137][T10212] CPU: 1 UID: 0 PID: 10212 Comm: syz.3.1332 Not tainted syzkaller #0 PREEMPT(full) [ 233.783163][T10212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.783174][T10212] Call Trace: [ 233.783182][T10212] [ 233.783190][T10212] dump_stack_lvl+0xe8/0x150 [ 233.783216][T10212] should_fail_ex+0x412/0x560 [ 233.783244][T10212] should_failslab+0xa8/0x100 [ 233.783264][T10212] __kmalloc_cache_noprof+0x88/0x660 [ 233.783290][T10212] ? nf_tables_newchain+0x1df0/0x2890 [ 233.783322][T10212] nf_tables_newchain+0x1df0/0x2890 [ 233.783346][T10212] ? __lock_acquire+0x6b5/0x2cf0 [ 233.783378][T10212] ? __pfx_nf_tables_newchain+0x10/0x10 [ 233.783432][T10212] ? nfnl_pernet+0x23/0x240 [ 233.783450][T10212] ? nfnl_pernet+0x23/0x240 [ 233.783478][T10212] ? __nla_parse+0x40/0x60 [ 233.783503][T10212] nfnetlink_rcv+0x123e/0x27b0 [ 233.783555][T10212] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 233.783590][T10212] ? ref_tracker_free+0x693/0x840 [ 233.783637][T10212] ? __netlink_deliver_tap+0x807/0x850 [ 233.783667][T10212] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.783687][T10212] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.783711][T10212] netlink_unicast+0x75c/0x8e0 [ 233.783740][T10212] netlink_sendmsg+0x813/0xb40 [ 233.783770][T10212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.783794][T10212] ? aa_sock_msg_perm+0xf1/0x1b0 [ 233.783821][T10212] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.783848][T10212] ____sys_sendmsg+0x972/0x9f0 [ 233.783868][T10212] ? __might_fault+0xaf/0x130 [ 233.783904][T10212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.783933][T10212] ? import_iovec+0x73/0xa0 [ 233.783958][T10212] ___sys_sendmsg+0x2a5/0x360 [ 233.783977][T10212] ? __lock_acquire+0x6b5/0x2cf0 [ 233.784000][T10212] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.784054][T10212] ? __fget_files+0x2a/0x420 [ 233.784074][T10212] ? __fget_files+0x3a0/0x420 [ 233.784105][T10212] __x64_sys_sendmsg+0x1bd/0x2a0 [ 233.784129][T10212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.784158][T10212] ? __pfx_ksys_write+0x10/0x10 [ 233.784191][T10212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.784215][T10212] do_syscall_64+0x174/0x580 [ 233.784233][T10212] ? trace_irq_disable+0x3b/0x140 [ 233.784259][T10212] ? clear_bhb_loop+0x40/0x90 [ 233.784280][T10212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.784298][T10212] RIP: 0033:0x7f2478d9ce59 [ 233.784315][T10212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.784330][T10212] RSP: 002b:00007f2479d26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.784349][T10212] RAX: ffffffffffffffda RBX: 00007f2479015fa0 RCX: 00007f2478d9ce59 [ 233.784362][T10212] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 233.784373][T10212] RBP: 00007f2479d26090 R08: 0000000000000000 R09: 0000000000000000 [ 233.784382][T10212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.784390][T10212] R13: 00007f2479016038 R14: 00007f2479015fa0 R15: 00007ffee1087a08 [ 233.784415][T10212] [ 237.496030][ C1] sched: DL replenish lagged too much [ 239.557081][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.564327][ C0] bridge0: topology change detected, propagating [ 239.571049][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.578293][ C0] bridge0: topology change detected, propagating [ 251.071155][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.079341][ C1] bridge0: topology change detected, propagating [ 251.085951][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.093198][ C1] bridge0: topology change detected, propagating [ 256.826158][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 256.833557][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 262.591755][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 262.599049][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 276.037990][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 286.919367][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.926670][ C1] bridge0: topology change detected, propagating [ 286.933263][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.941031][ C1] bridge0: topology change detected, propagating [ 292.669866][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.677172][ C0] bridge0: topology change detected, propagating [ 292.683769][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.691021][ C0] bridge0: topology change detected, propagating [ 302.047889][T10214] tipc: Enabling of bearer rejected, already enabled [ 389.272380][ T30] INFO: task kworker/0:1:10 blocked for more than 143 seconds.