last executing test programs: 12.049003591s ago: executing program 4 (id=822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x2b, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback={0x6000000}}, 0x1c) 10.962965259s ago: executing program 4 (id=836): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0xffff0000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400a0}, 0x20048840) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f00000010c0), &(0x7f0000000140)=@tcp, 0x1}, 0x20) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000010401030000000000000000070000010500010102000000eb0393ab981459369440192ae00d0661e722031add9d019aeaaea28a3a119fd37ab6fed1b9ab8f3ee30735944254c29339c5e0f8e380a1453ab24ff52b8d0b5bab"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close(0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[], 0x30}}, 0x800) recvmmsg(r6, 0x0, 0x0, 0x40, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x23, 0x4, 0x8006, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x8000) sendmmsg$sock(r3, &(0x7f0000002280), 0x0, 0x80) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) 9.215303881s ago: executing program 4 (id=855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @local, 0x8, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='l', 0x1}], 0x1}}], 0x1, 0x40000050) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130c020000000000fbf1ab6a122b6c2d3a0000000eccfb62ca764bc30000000000000000000000000000000100000004000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x24000080}, 0x240400c4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x800) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x258, r6, 0x800, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbb}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb614}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24a}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r4, 0x25, 0x0, @void}, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@call={0x85, 0x0, 0x0, 0x6b}, @printk={@lld}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 8.892600526s ago: executing program 4 (id=859): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0xe00, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r1, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) 4.91916165s ago: executing program 4 (id=899): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) 4.626137642s ago: executing program 4 (id=903): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0xffffe000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400a0}, 0x20048840) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f00000010c0), &(0x7f0000000140)=@tcp, 0x1}, 0x20) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000010401030000000000000000070000010500010102000000eb0393ab981459369440192ae00d0661e722031add9d019aeaaea28a3a119fd37ab6fed1b9ab8f3ee30735944254c29339c5e0f8e380a1453ab24ff52b8d0b5bab"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close(0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[], 0x30}}, 0x800) recvmmsg(r6, 0x0, 0x0, 0x40, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x23, 0x4, 0x8006, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x8000) sendmmsg$sock(r3, &(0x7f0000002280), 0x0, 0x80) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) 4.145863608s ago: executing program 3 (id=907): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xffe1, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 2.316846323s ago: executing program 3 (id=914): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="bfa45fa4201ac2bf05ccbca005c6f70bf387df753b92315472319c20a2071aec0f3f5474c3497a496e9ad732a05000cbaaf02096cf5d598131d831eb96347c5b99e9e11c188dc0913c5eb6371e0b3a0e71b82e1f7e4c96fdf68a1739658976", 0x5f, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c000280080001", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000800) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="e002000040000100fcff0700fedbdf250100000004004780c0020180bc02108008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x400c051}, 0x4004024) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003803000010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32], 0xb4}}, 0x0) 2.114206217s ago: executing program 3 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @local, 0x8, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='l', 0x1}], 0x1}}], 0x1, 0x40000050) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130c020000000000fbf1ab6a122b6c2d3a0000000eccfb62ca764bc30000000000000000000000000000000100000004000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x24000080}, 0x240400c4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008004}, 0x800) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x258, r6, 0x800, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbb}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb614}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24a}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r4, 0x25, 0x0, @void}, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@call={0x85, 0x0, 0x0, 0x6b}, @printk={@lld}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 1.66063327s ago: executing program 3 (id=920): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040), 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r1, 0x3) sendmsg$inet6(r0, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x7, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x85) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600030300590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.443872361s ago: executing program 1 (id=922): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffff15008000b40000000300000000000000", @ANYRES64=r1, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r1, @ANYBLOB='\x00'/26], 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x5, 0x0, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x40, 0x20, 0x6, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x0, 0x7fffffff, 0x10, @private1, @loopback, 0x40, 0x7800, 0xfffffc00}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x8, 0x7f, {{0x1d, 0x4, 0x0, 0x1c, 0x74, 0x66, 0x0, 0x0, 0x4, 0x0, @loopback, @empty, {[@ssrr={0x89, 0x1f, 0xb0, [@rand_addr=0x64010102, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @broadcast, @loopback]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0x7, "d57b7500b4"}, {0x5, 0xc, "ee28156fc423cff44015"}, {0x7, 0xc, "0c607c72af99359df417"}, {0x6, 0xf, "81c26afd8d7d6013c70ea43036"}]}, @rr={0x7, 0xb, 0xdd, [@local, @rand_addr=0x64010101]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x7}]}, {0x0, [0x5f, 0x8b74ab1388647ba0]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {0x3, 0x1}, {0x4, 0xffff}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @TCA_INGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000050) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)={0x1d4, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffe21, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x406}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000a80)={0x300, 0xc, 0x5, 0x201, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x4}, [@generic="234cb0eb4690ede0043757df600ae653e7f561e611c129710c58653d05853011415b4981d8a2e9464bdaf6ae37ffedd32903b6d7a8345a7b0fe79efb", @nested={0x20, 0x13c, 0x0, 0x1, [@nested={0x4, 0xfa}, @typed={0x8, 0xb6, 0x0, 0x0, @u32=0x300}, @typed={0xc, 0x125, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xa5}]}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="04bc7f6dfca60ebaf5f06e2e8b6eff9766f48e9d9d127f73448ec4effce8b6feea8e6a40ddac620b5545786d82144945fcdd5b237cb2f7f9717a835511e4f5753aba7965ec728aa7f5ec869f82b77b78fc8fdd5d4a9664416d0fa7707629b3bb9b23bd3d703948ab4ada29baeaac9383e0de669bb11b012796faa38d3b2045f9098322cc5278ce2855c36d2d87a63baac56eec3f4c80a12717254dcbea01818ceb6959468e8eceb206ef601deb8df231989630968d074c7eebcdccaa", @typed={0x8, 0x80, 0x0, 0x0, @uid=r10}, @nested={0xd0, 0x7, 0x0, 0x1, [@nested={0x4, 0x14b}, @typed={0x13, 0x3e, 0x0, 0x0, @binary="998d15296f98e548debb99e7288c7f"}, @typed={0x8, 0xa0, 0x0, 0x0, @pid=r11}, @generic="91f2413cd10e6c06dd7471fe54f0390f8464865dece2a05fd087d404b4ac89e1c29c6e5225f26f055cfd95fd2ce46a944f277989039f134d8323", @generic="df7352ccec5f88a923ab232bc36dcd498c9bf9234bbe4c7d776f3d3dba3d7d64974c8178823602852c8319cedcd8db2271f79f448faaea6318a73d5886c547a9d71c17e3fcc9f699e5fadaa458676ebbe3e181d397395ef005238a081636acb958c9f51d705611fc8a88dea6f6980c94367b"]}, @nested={0xe7, 0x157, 0x0, 0x1, [@nested={0x4, 0x57}, @nested={0x4, 0x14}, @generic="9269ad107ed3803eaca284e32fbc6d8a5a2720d67412a1a6cff38b92430b29eca245d4664c662a87ad5c8327fcd14f88900b8cf99d6638db2a587fc7ab736a7261b781d33db469b2eba0d8a5f9f6cb0c9916ca1f91c48c8b918421a830f07d925fc1547edd05f363898cca817d13c26b074df39bfb03820d9f96b2bc1fb4d841a50017a5c06c71bf4a296d094df01dbd39d0d3895432b3f4f8f6c984bf0c2078238925af3b9447d968b980bb8d0486fdb992d38ed0f01321e805e74756608e47a31f53cfa76d283845d45794fd82fb2e34027e", @generic, @nested={0x4, 0xab}, @nested={0x4, 0x120}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x4001000}, 0x48045) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 1.347798094s ago: executing program 1 (id=923): r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0xfe800000) 1.252253289s ago: executing program 1 (id=924): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x50}], {0x95, 0x0, 0x0, 0x600}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.084871838s ago: executing program 1 (id=927): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 27) 1.044220628s ago: executing program 2 (id=928): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="bfa45fa4201ac2bf05ccbca005c6f70bf387df753b92315472319c20a2071aec0f3f5474c3497a496e9ad732a05000cbaaf02096cf5d598131d831eb96347c5b99e9e11c188dc0913c5eb6371e0b3a0e71b82e1f7e4c96fdf68a1739658976", 0x5f, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c000280080001", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000800) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="e002000040000100fcff0700fedbdf250100000004004780c0020180bc02108008000100", @ANYRES32=0x0, @ANYBLOB="0700b06879b64d9cf4eb13bc66cea69e9e9ce5eb23bb8d974e1c58d2caf401b48004001c000c0013800800b5006401010008004e000600000074127df30fc021465ede2cc16f38d31ba24b3d4f5b1ce37ea20ab92f245359d6ef3791afe81d9c18e29b1a3d5df438f390f5294841962fe69c6df13e1d0fb125f2ff970348a60666debecfdbc7384db8e0bb1fe0eeff3e9431bbd7fe8f9701b695247c25f2c7493eb31b6e7d329e8d83829e4d6aff36bc63c7cc6acbc9fcb45ee4f68799b24c646694e7cd76b94444e2ebb5f2bb9927900dabda2563dc38b9389d4f98f0c480ea4ac08a17be18ba6e3c5b69ea0bf8460a4f998b8bcc37554ff63076313efd05ab974bd69525fc0006800800c200", @ANYRES32, @ANYBLOB="cb05b87cb147ef695b027f4050ab297634163ab261562453c886f996394f16c85062507bd56e282d78f01ab6d760eb792136783f9df390261f604537564b3e16f29e0e731cc1a3b35a6a672828ec89185286bbdca4942e863c0df5384c4f462df9a9ab82cc3e442fa053fe26aa17a7a887056e191b2aff83caa93fa46692abc01fdb742b5ad0a0dd770f1893ab1508581cb098b05d6e7d2df205a12306e9608b155f6d7d5d74af32b65e6f3079d0f496d39409d134b7d46941e8cdb6f909068934fd288f910c886b0675d7398271b1d739ac18c5080001006c000f001400620020010000000000000000000000000002100069800c00ec000c001400000000009e1ed1ae2d8ca5f9e3ffa45ed915e38a0cf036121dbbfa4724815fd7b1a527c50e1b889f2bfa51718e111e66f84a32a6313f0fa104f56ea658d9dc746cb3dab58e6ab7e5c79939cfb35450cc9aec21f9bb871a499bf4e9d2375a27ad425eb855cf6a017f763dffc904479b9cad445ae1c487e4b4afd09e739c66d0c3147d09d1c824b97d0fb02fb3a6148393d1c470ffcd22ad43f61a8c5e4b74edc7e71946080002"], 0x2e0}, 0x1, 0x0, 0x0, 0x400c051}, 0x4004024) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003803000010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32], 0xb4}}, 0x0) 936.928192ms ago: executing program 1 (id=930): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1, 0x0, 0x30}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000004180)='\x00', 0x1}], 0x1}}], 0x3, 0x0) 883.455332ms ago: executing program 2 (id=931): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xfb, 0x2}]}) write(r1, &(0x7f0000000280)="1a7f", 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000080)=""/120, 0x1135000, 0x400, 0x985, 0x2}, 0x20) setsockopt$ax25_int(r2, 0x101, 0xb, &(0x7f0000002200)=0x3, 0x4) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @remote, [@hopopts={0x16}], "fadb17c1b0cd000000000000f48ce6b9"}}}}}}}, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r3, r4, 0x0, 0xffffffff000) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_key={0x2, 0x9, 0x18, 0x0, "01d787"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x10) 665.579849ms ago: executing program 0 (id=932): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x6, 0x0, &(0x7f0000000140)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000440)=0x4, 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r3, 0x325, 0x2, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x208, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x137b40, @mcast1, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8e52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @private1}}}}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7e6bd8fa4e6ce86786ca225d2c5d0712411ad7e697efe44c7fa45162"}}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x22d4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x42}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) 600.916418ms ago: executing program 3 (id=933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x1000002, 0xfffffffe, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) (async) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x40045) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000060000000000000000000000850000002e000000850000002300000095", @ANYRES16=r4], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e72119", 0x9d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}, 0x0) recvmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/192, 0xc0}], 0x1}, 0x2103) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r12, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r13}, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)={@map=r10, r11, 0x5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000300), &(0x7f0000000700)=r9}, 0x20) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000000000005000300000000000500030001000000050007003bb946c40800020002"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 558.702719ms ago: executing program 3 (id=934): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000300)="a2a2079ae5bceefc85d68e08bc8061c3494a9439ffaff47a792fc302277d0a2513775bc142208590e73c1f7a191e6d27e3437b558f7f8ed84a66452cc7bb492cc96cd536d9dcbbb40d7e5cdc44895b1e8693af4377081570f2609f246164a0b3bc92013aa5e9ac5a80c6e0ecc499ecd4488a436a73ce868de07b42c6394a02e48c93496d5bc4", 0x86) tee(r1, r2, 0x1, 0x10000000000000d) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000540), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r1, &(0x7f0000000000)='$%[{6\\]\x00', 0x200a01, &(0x7f0000000040)={@_ha_fsid={[0xff, 0x400]}, {0x5, 0x3, 0x4, 0x3}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4346}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={r6, @in6={{0xa, 0x4e23, 0xdcf5, @empty, 0x9}}, 0x3, 0x6}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x1, 0x8006, 0x10001, 0xe4, r6}, 0x10) 448.29982ms ago: executing program 0 (id=935): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00'], 0x30}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x26, 0x2, 0x4, &(0x7f0000000340)={0xffffffffffffffff}) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip_vti0\x00', r4, 0x8000, 0x7, 0x8001, 0x400, {{0x9, 0x4, 0x2, 0x14, 0x24, 0x68, 0x0, 0x80, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x6, [{@broadcast, 0x5}]}, @end]}}}}}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x40}}, 0x0) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @mcast2, 0x3}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x200}, 0x14}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x516f0d0d3eb68eb5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x44801) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000a40)=""/4054, 0xfd6}, {&(0x7f0000002f00)=""/4131, 0x1023}, {&(0x7f0000000940)=""/230, 0xe6}, {&(0x7f0000000500)=""/113, 0x71}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000001c0)=""/179, 0xb3}], 0x6}, 0x100) 348.882328ms ago: executing program 0 (id=936): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x2000018c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf000}, 0x1e) 348.127283ms ago: executing program 0 (id=937): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x99}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) close(0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff06000000000000009500000000f5ff00"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 334.042032ms ago: executing program 2 (id=938): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001140)) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r5}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000000c0)={0x7, 'erspan0\x00', {0x8}, 0x5}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100001e5600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 310.78138ms ago: executing program 0 (id=939): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005c80)={{0x14, 0x10, 0x1, 0x1000000}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x80) 216.810176ms ago: executing program 0 (id=940): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x1e2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f9b7b5acfe1e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="53031c13c7e5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 157.534503ms ago: executing program 2 (id=941): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x24, 0x38, 0x825, 0x70bd25, 0x25dfdbf9, {0xf}, [@nested={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x2e00000000000000, 0x0, 0x4050}, 0x804c050) 79.570274ms ago: executing program 2 (id=942): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000000000001affffed18000180140002"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x8000, 0x0, 0x0) 598.585µs ago: executing program 1 (id=943): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cf0000000001000000080000001400018006000100020000000800050003000000f8bc0ed16673c884e9f049dc72e8f6478ae592b3339115558c9586303700243479e6acb3de82347fb6a05e02e57dd82e727b632f09a7ed22aa560c7bda6b08ff05004e2a6db432c8f78de61992b4edb81ef94e79ed0169906dcc1f9e151000321f5502efd6f402a39e29"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="400100001000130400000000fbdbdf25fe800000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3], 0x140}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000080) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYBLOB="3e2c87cee09564e118903ef9c7069cf7cd20c6c7bf99fcb9aa7a78fceb8a1811ab1caa8a7cdb7aec1f050e6c06ad8c5221428aef26f619cd8ddf883cdc4f3cfc7a3cecb3262d0c2bdfd6de74260039c1fb55de111b4bba18ab3257d04200bdd4e54c481b73851248ce2f38c20b6d2b101c0a565bc8d80c0054122a0812fee3b535da31646304ab0a7a231a42bb14c983c16fa7e42d3cdd90d1cf174776fea38a413051ec60d8c19c1f63df60b136891926355e3cd1a5a565f940e1da9f162805", @ANYRES32=0x0, @ANYRES8=r7], 0xfc}, 0x1, 0x0, 0x0, 0x8001}, 0x220418c0) (async) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) r8 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x6a, 0x2, 0x0, &(0x7f0000000300)) bind$802154_raw(r8, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0x200}}}, 0x14) close(r8) (async) r9 = socket(0x2d, 0x2, 0x0) (async) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats}) (async) connect$qrtr(r9, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) (async) connect$qrtr(r9, &(0x7f0000000840)={0x2d, 0x0, 0x3fff}, 0xc) (async) syz_init_net_socket$x25(0x9, 0x2, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 2 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @local, 0x8, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='l', 0x1}], 0x1}}], 0x1, 0x40000050) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130c020000000000fbf1ab6a122b6c2d3a0000000eccfb62ca764bc30000000000000000000000000000000100000004000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x24000080}, 0x240400c4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x80) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINK={0x8, 0x5, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008004}, 0x800) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x258, r6, 0x800, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbb}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb614}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24a}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r4, 0x25, 0x0, @void}, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@call={0x85, 0x0, 0x0, 0x6b}, @printk={@lld}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) kernel console output (not intermixed with test programs): 6][ T6327] RIP: 0033:0x7fa69559c629 [ 85.130881][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.130894][ T6327] RSP: 002b:00007fa6963c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.130913][ T6327] RAX: ffffffffffffffda RBX: 00007fa695815fa0 RCX: 00007fa69559c629 [ 85.130925][ T6327] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 85.130935][ T6327] RBP: 00007fa6963c6090 R08: 0000000000000000 R09: 0000000000000000 [ 85.130945][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.130954][ T6327] R13: 00007fa695816038 R14: 00007fa695815fa0 R15: 00007ffeffcfeaf8 [ 85.130982][ T6327] [ 85.386836][ T6331] netlink: 'syz.3.121': attribute type 3 has an invalid length. [ 85.556791][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 85.645453][ T6345] netlink: 'syz.0.127': attribute type 4 has an invalid length. [ 85.663618][ T6343] netlink: 'syz.2.126': attribute type 72 has an invalid length. [ 85.824703][ T6354] FAULT_INJECTION: forcing a failure. [ 85.824703][ T6354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.847802][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.0.130 Not tainted syzkaller #0 PREEMPT(full) [ 85.847827][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.847837][ T6354] Call Trace: [ 85.847844][ T6354] [ 85.847852][ T6354] dump_stack_lvl+0xe8/0x150 [ 85.847879][ T6354] should_fail_ex+0x412/0x560 [ 85.847907][ T6354] _copy_from_iter+0x1d3/0x1670 [ 85.847936][ T6354] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 85.847961][ T6354] ? __pfx__copy_from_iter+0x10/0x10 [ 85.847987][ T6354] ? __pfx_process_measurement+0x10/0x10 [ 85.848009][ T6354] ? skb_put+0x11b/0x210 [ 85.848031][ T6354] l2cap_skbuff_fromiovec+0x9f/0x520 [ 85.848055][ T6354] ? skb_put+0x11b/0x210 [ 85.848077][ T6354] l2cap_chan_send+0x17a6/0x25a0 [ 85.848101][ T6354] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 85.848121][ T6354] ? lockdep_hardirqs_on+0x7a/0x110 [ 85.848142][ T6354] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 85.848162][ T6354] ? l2cap_sock_sendmsg+0x327/0x4e0 [ 85.848185][ T6354] ? __pfx_l2cap_chan_send+0x10/0x10 [ 85.848217][ T6354] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 85.848235][ T6354] ? __local_bh_enable_ip+0xd0/0x130 [ 85.848265][ T6354] l2cap_sock_sendmsg+0x33d/0x4e0 [ 85.848287][ T6354] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 85.848308][ T6354] ? aa_file_perm+0x12d/0x1630 [ 85.848330][ T6354] ? aa_sock_msg_perm+0xf1/0x1b0 [ 85.848356][ T6354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 85.848381][ T6354] sock_write_iter+0x503/0x550 [ 85.848406][ T6354] ? __pfx_sock_write_iter+0x10/0x10 [ 85.848449][ T6354] do_iter_readv_writev+0x619/0x8c0 [ 85.848474][ T6354] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 85.848499][ T6354] ? bpf_lsm_file_permission+0x9/0x20 [ 85.848520][ T6354] ? security_file_permission+0x75/0x260 [ 85.848540][ T6354] ? rw_verify_area+0x255/0x4d0 [ 85.848563][ T6354] vfs_writev+0x33c/0x990 [ 85.848593][ T6354] ? __pfx_vfs_writev+0x10/0x10 [ 85.848629][ T6354] ? __fget_files+0x2a/0x420 [ 85.848654][ T6354] ? __fget_files+0x3a0/0x420 [ 85.848669][ T6354] ? __fget_files+0x2a/0x420 [ 85.848694][ T6354] do_writev+0x154/0x2e0 [ 85.848719][ T6354] ? __pfx_do_writev+0x10/0x10 [ 85.848752][ T6354] do_syscall_64+0x14d/0xf80 [ 85.848771][ T6354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.848787][ T6354] ? trace_irq_disable+0x37/0x100 [ 85.848805][ T6354] ? clear_bhb_loop+0x40/0x90 [ 85.848825][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.848841][ T6354] RIP: 0033:0x7fe4bc59c629 [ 85.848856][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.848869][ T6354] RSP: 002b:00007fe4bd43e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 85.848887][ T6354] RAX: ffffffffffffffda RBX: 00007fe4bc815fa0 RCX: 00007fe4bc59c629 [ 85.848900][ T6354] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 85.848910][ T6354] RBP: 00007fe4bd43e090 R08: 0000000000000000 R09: 0000000000000000 [ 85.848920][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.848930][ T6354] R13: 00007fe4bc816038 R14: 00007fe4bc815fa0 R15: 00007ffc1799bca8 [ 85.848959][ T6354] [ 86.725112][ T794] cfg80211: failed to load regulatory.db [ 86.859914][ T6374] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.139'. [ 87.031306][ T6383] netlink: 'syz.1.141': attribute type 3 has an invalid length. [ 87.301042][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 87.415932][ T6396] netlink: 3 bytes leftover after parsing attributes in process `syz.3.146'. [ 87.637775][ T6396] 0X: renamed from caif0 [ 87.856882][ T6396] 0X: entered allmulticast mode [ 87.862126][ T6396] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 87.948514][ T6411] macsec1: entered promiscuous mode [ 87.953774][ T6411] macsec1: entered allmulticast mode [ 88.085770][ T6416] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.152'. [ 88.101100][ T6420] nftables ruleset with unbound set [ 88.436912][ T6435] FAULT_INJECTION: forcing a failure. [ 88.436912][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 88.459961][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT(full) [ 88.459984][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.459995][ T6435] Call Trace: [ 88.460002][ T6435] [ 88.460009][ T6435] dump_stack_lvl+0xe8/0x150 [ 88.460045][ T6435] should_fail_ex+0x412/0x560 [ 88.460072][ T6435] should_failslab+0xa8/0x100 [ 88.460093][ T6435] ? skb_clone+0x212/0x3a0 [ 88.460113][ T6435] kmem_cache_alloc_noprof+0x87/0x650 [ 88.460141][ T6435] skb_clone+0x212/0x3a0 [ 88.460164][ T6435] pfkey_sendmsg+0x4a3/0x1120 [ 88.460195][ T6435] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 88.460234][ T6435] ? aa_sock_msg_perm+0xf1/0x1b0 [ 88.460261][ T6435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 88.460285][ T6435] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 88.460299][ T6435] ____sys_sendmsg+0xa68/0xad0 [ 88.460319][ T6435] ? __might_fault+0xaf/0x130 [ 88.460343][ T6435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.460371][ T6435] ? import_iovec+0x73/0xa0 [ 88.460392][ T6435] ___sys_sendmsg+0x2a5/0x360 [ 88.460411][ T6435] ? __lock_acquire+0x6b5/0x2cf0 [ 88.460432][ T6435] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.460449][ T6435] ? __lock_acquire+0x6b5/0x2cf0 [ 88.460470][ T6435] ? kstrtouint+0x6e/0xe0 [ 88.460545][ T6435] __sys_sendmmsg+0x27c/0x4e0 [ 88.460570][ T6435] ? __pfx___sys_sendmmsg+0x10/0x10 [ 88.460588][ T6435] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 88.460633][ T6435] ? ksys_write+0x242/0x270 [ 88.460655][ T6435] ? __pfx_ksys_write+0x10/0x10 [ 88.460680][ T6435] __x64_sys_sendmmsg+0xa0/0xc0 [ 88.460702][ T6435] do_syscall_64+0x14d/0xf80 [ 88.460721][ T6435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.460737][ T6435] ? trace_irq_disable+0x37/0x100 [ 88.460754][ T6435] ? clear_bhb_loop+0x40/0x90 [ 88.460774][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.460789][ T6435] RIP: 0033:0x7fa69559c629 [ 88.460804][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.460817][ T6435] RSP: 002b:00007fa6963c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 88.460834][ T6435] RAX: ffffffffffffffda RBX: 00007fa695815fa0 RCX: 00007fa69559c629 [ 88.460846][ T6435] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 88.460856][ T6435] RBP: 00007fa6963c6090 R08: 0000000000000000 R09: 0000000000000000 [ 88.460864][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.460872][ T6435] R13: 00007fa695816038 R14: 00007fa695815fa0 R15: 00007ffeffcfeaf8 [ 88.460897][ T6435] [ 89.183883][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 89.217602][ T6457] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.166'. [ 89.930227][ T6489] netlink: 96 bytes leftover after parsing attributes in process `syz.0.177'. [ 90.161385][ T6494] syzkaller1: entered promiscuous mode [ 90.173129][ T6494] syzkaller1: entered allmulticast mode [ 90.180911][ T6494] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 90.295168][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 90.481178][ T6509] netlink: 'syz.1.184': attribute type 6 has an invalid length. [ 90.673149][ T6526] FAULT_INJECTION: forcing a failure. [ 90.673149][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 90.693454][ T6515] netlink: 'syz.3.186': attribute type 29 has an invalid length. [ 90.706237][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.1.188 Not tainted syzkaller #0 PREEMPT(full) [ 90.706260][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.706270][ T6526] Call Trace: [ 90.706276][ T6526] [ 90.706283][ T6526] dump_stack_lvl+0xe8/0x150 [ 90.706313][ T6526] should_fail_ex+0x412/0x560 [ 90.706338][ T6526] should_failslab+0xa8/0x100 [ 90.706362][ T6526] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 90.706383][ T6526] ? __alloc_skb+0x186/0x7d0 [ 90.706399][ T6526] ? __alloc_skb+0x1d0/0x7d0 [ 90.706414][ T6526] ? __local_bh_enable_ip+0xd0/0x130 [ 90.706438][ T6526] __alloc_skb+0x1d0/0x7d0 [ 90.706460][ T6526] netlink_sendmsg+0x5d4/0xb40 [ 90.706487][ T6526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.706530][ T6526] ? aa_sock_msg_perm+0xf1/0x1b0 [ 90.706553][ T6526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 90.706583][ T6526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.706599][ T6526] ____sys_sendmsg+0xa68/0xad0 [ 90.706620][ T6526] ? __might_fault+0xaf/0x130 [ 90.706644][ T6526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.706673][ T6526] ? import_iovec+0x73/0xa0 [ 90.706693][ T6526] ___sys_sendmsg+0x2a5/0x360 [ 90.706712][ T6526] ? __lock_acquire+0x6b5/0x2cf0 [ 90.706734][ T6526] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.706785][ T6526] ? __fget_files+0x2a/0x420 [ 90.706800][ T6526] ? __fget_files+0x3a0/0x420 [ 90.706824][ T6526] __x64_sys_sendmsg+0x1bd/0x2a0 [ 90.706847][ T6526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.706875][ T6526] ? __pfx_ksys_write+0x10/0x10 [ 90.706906][ T6526] do_syscall_64+0x14d/0xf80 [ 90.706926][ T6526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.706941][ T6526] ? trace_irq_disable+0x37/0x100 [ 90.706956][ T6526] ? clear_bhb_loop+0x40/0x90 [ 90.706973][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.706987][ T6526] RIP: 0033:0x7fa69559c629 [ 90.707002][ T6526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.707015][ T6526] RSP: 002b:00007fa6963c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.707033][ T6526] RAX: ffffffffffffffda RBX: 00007fa695815fa0 RCX: 00007fa69559c629 [ 90.707046][ T6526] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 90.707056][ T6526] RBP: 00007fa6963c6090 R08: 0000000000000000 R09: 0000000000000000 [ 90.707066][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.707076][ T6526] R13: 00007fa695816038 R14: 00007fa695815fa0 R15: 00007ffeffcfeaf8 [ 90.707104][ T6526] [ 90.854028][ T6530] netlink: 'syz.3.190': attribute type 1 has an invalid length. [ 90.985959][ T6535] netlink: 52 bytes leftover after parsing attributes in process `syz.1.192'. [ 91.000484][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.005751][ T6530] netlink: 96 bytes leftover after parsing attributes in process `syz.3.190'. [ 91.008507][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.019538][ T6530] netlink: 1 bytes leftover after parsing attributes in process `syz.3.190'. [ 91.033039][ T6530] netlink: 658 bytes leftover after parsing attributes in process `syz.3.190'. [ 91.067093][ T6537] netlink: 76 bytes leftover after parsing attributes in process `syz.1.192'. [ 91.121468][ T6541] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 91.141621][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.149027][ T6537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.156637][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.162444][ T6543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 91.163768][ T6537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.172845][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 91.230697][ T6538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 91.255617][ T6537] netlink: 52 bytes leftover after parsing attributes in process `syz.1.192'. [ 91.286947][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.294777][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.549614][ T6553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.657721][ T6553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.850782][ T6553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.941715][ T6553] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.149607][ T6591] netlink: 'syz.2.210': attribute type 2 has an invalid length. [ 92.161122][ T6591] tipc: Started in network mode [ 92.167038][ T6591] tipc: Node identity 1340008, cluster identity 4711 [ 92.173818][ T6591] tipc: Node number set to 20185096 [ 92.243557][ T1164] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.289450][ T6594] netlink: 'syz.0.211': attribute type 11 has an invalid length. [ 92.333780][ T6516] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.492085][ T1164] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.514009][ T1164] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.815933][ T6615] syzkaller0: entered promiscuous mode [ 92.832450][ T6615] syzkaller0: entered allmulticast mode [ 92.991038][ T6617] xt_CT: No such helper "snmp_trap" [ 93.560285][ T6638] FAULT_INJECTION: forcing a failure. [ 93.560285][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 93.582800][ T6640] openvswitch: netlink: Flow actions attr not present in new flow. [ 93.606543][ T6638] CPU: 1 UID: 0 PID: 6638 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT(full) [ 93.606570][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.606580][ T6638] Call Trace: [ 93.606587][ T6638] [ 93.606593][ T6638] dump_stack_lvl+0xe8/0x150 [ 93.606619][ T6638] should_fail_ex+0x412/0x560 [ 93.606647][ T6638] should_failslab+0xa8/0x100 [ 93.606670][ T6638] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 93.606691][ T6638] ? __alloc_skb+0x186/0x7d0 [ 93.606709][ T6638] ? __alloc_skb+0x1d0/0x7d0 [ 93.606724][ T6638] ? __local_bh_enable_ip+0xd0/0x130 [ 93.606747][ T6638] __alloc_skb+0x1d0/0x7d0 [ 93.606768][ T6638] pfkey_sendmsg+0x212/0x1120 [ 93.606784][ T6638] ? unwind_next_frame+0xa5/0x23c0 [ 93.606818][ T6638] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 93.606833][ T6638] ? aa_sk_perm+0x15a/0x960 [ 93.606855][ T6638] ? aa_sk_perm+0x82d/0x960 [ 93.606882][ T6638] ? __pfx_aa_sk_perm+0x10/0x10 [ 93.606900][ T6638] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 93.606928][ T6638] ? aa_sock_msg_perm+0xf1/0x1b0 [ 93.606950][ T6638] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 93.606973][ T6638] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 93.606988][ T6638] ____sys_sendmsg+0xa68/0xad0 [ 93.607007][ T6638] ? __might_fault+0xaf/0x130 [ 93.607029][ T6638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.607056][ T6638] ? import_iovec+0x73/0xa0 [ 93.607076][ T6638] ___sys_sendmsg+0x2a5/0x360 [ 93.607099][ T6638] ? __lock_acquire+0x6b5/0x2cf0 [ 93.607121][ T6638] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.607172][ T6638] ? __fget_files+0x2a/0x420 [ 93.607187][ T6638] ? __fget_files+0x3a0/0x420 [ 93.607213][ T6638] __x64_sys_sendmsg+0x1bd/0x2a0 [ 93.607234][ T6638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.607261][ T6638] ? __pfx_ksys_write+0x10/0x10 [ 93.607291][ T6638] do_syscall_64+0x14d/0xf80 [ 93.607309][ T6638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.607322][ T6638] ? trace_irq_disable+0x37/0x100 [ 93.607340][ T6638] ? clear_bhb_loop+0x40/0x90 [ 93.607359][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.607373][ T6638] RIP: 0033:0x7f7d0a59c629 [ 93.607388][ T6638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.607401][ T6638] RSP: 002b:00007f7d0b417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.607417][ T6638] RAX: ffffffffffffffda RBX: 00007f7d0a815fa0 RCX: 00007f7d0a59c629 [ 93.607426][ T6638] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 93.607434][ T6638] RBP: 00007f7d0b417090 R08: 0000000000000000 R09: 0000000000000000 [ 93.607441][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.607449][ T6638] R13: 00007f7d0a816038 R14: 00007f7d0a815fa0 R15: 00007ffcda9e3ee8 [ 93.607469][ T6638] [ 94.325094][ T6653] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 94.368298][ T6653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.399402][ T6653] bond1: (slave gretap2): making interface the new active one [ 94.433317][ T6653] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 94.509458][ T6658] macsec1: entered promiscuous mode [ 94.514704][ T6658] macsec1: entered allmulticast mode [ 94.703544][ T6664] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 95.712649][ T6692] __nla_validate_parse: 8 callbacks suppressed [ 95.712666][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 96.371067][ T5876] hid-generic 0005:0006:5508.0003: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 96.550256][ T6709] fido_id[6709]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 96.604961][ T6713] syz_tun: entered allmulticast mode [ 96.637901][ T6712] syz_tun: left allmulticast mode [ 96.976983][ T6725] netlink: 'syz.4.252': attribute type 7 has an invalid length. [ 97.050979][ T6725] netlink: 148 bytes leftover after parsing attributes in process `syz.4.252'. [ 97.117985][ T6728] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 97.167241][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 97.226489][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.254'. [ 98.819888][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 98.899120][ T6763] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.262'. [ 98.944183][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 98.987554][ T6767] netlink: 348 bytes leftover after parsing attributes in process `syz.4.264'. [ 99.077636][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 99.113294][ T6769] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.164893][ T6767] netlink: 348 bytes leftover after parsing attributes in process `syz.4.264'. [ 99.212605][ T6771] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 99.230707][ T6771] syzkaller1: linktype set to 768 [ 99.448989][ T6769] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.723451][ T6787] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 99.789844][ T6769] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.158977][ T6769] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.591499][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.621744][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.766132][ T6805] __nla_validate_parse: 6 callbacks suppressed [ 100.766150][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 100.889000][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.896390][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.943215][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.950424][ T6802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.958119][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.965258][ T6802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.007736][ T6802] netlink: 52 bytes leftover after parsing attributes in process `syz.4.272'. [ 101.011501][ T6516] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.028631][ T6805] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 101.042694][ T29] audit: type=1800 audit(1771356685.280:2): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.273" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 101.051866][ T6805] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 101.086944][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.094238][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.096125][ T6805] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 101.143748][ T6516] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.152747][ T6516] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.195188][ T6516] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.253322][ T6516] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.286746][ T6516] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.307728][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 101.316593][ T6516] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.316647][ T6516] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.570496][ T6823] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 101.586192][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 101.615470][ T6823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.280'. [ 101.652325][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 101.918873][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 101.938865][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 102.021542][ T6843] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 102.050602][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 102.136473][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.288'. [ 102.148771][ T6848] dvmrp0: entered allmulticast mode [ 102.434466][ T6857] geneve2: entered promiscuous mode [ 102.476298][ T6520] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.507386][ T6520] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.515626][ T6520] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.578994][ T6516] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.724974][ T6868] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 103.165592][ T6882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.173064][ T6882] IPv6: NLM_F_CREATE should be set when creating new route [ 103.239405][ T6889] openvswitch: netlink: Flow actions attr not present in new flow. [ 103.414225][ T6898] syz_tun: entered allmulticast mode [ 103.424320][ T6895] syz_tun: left allmulticast mode [ 103.723770][ T6910] macsec1: entered promiscuous mode [ 103.745179][ T6910] macsec1: entered allmulticast mode [ 103.912817][ T6924] FAULT_INJECTION: forcing a failure. [ 103.912817][ T6924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.927776][ T6924] CPU: 1 UID: 0 PID: 6924 Comm: syz.0.312 Not tainted syzkaller #0 PREEMPT(full) [ 103.927797][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.927807][ T6924] Call Trace: [ 103.927814][ T6924] [ 103.927821][ T6924] dump_stack_lvl+0xe8/0x150 [ 103.927849][ T6924] should_fail_ex+0x412/0x560 [ 103.927876][ T6924] _copy_to_user+0x31/0xb0 [ 103.927897][ T6924] simple_read_from_buffer+0xe1/0x170 [ 103.927925][ T6924] proc_fail_nth_read+0x1bb/0x230 [ 103.927950][ T6924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.927974][ T6924] ? rw_verify_area+0x2a6/0x4d0 [ 103.927992][ T6924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.928013][ T6924] vfs_read+0x20c/0xa70 [ 103.928029][ T6924] ? fdget_pos+0x246/0x320 [ 103.928049][ T6924] ? __pfx___mutex_lock+0x10/0x10 [ 103.928071][ T6924] ? __pfx_vfs_read+0x10/0x10 [ 103.928091][ T6924] ? __fget_files+0x2a/0x420 [ 103.928109][ T6924] ? __fget_files+0x3a0/0x420 [ 103.928123][ T6924] ? __fget_files+0x2a/0x420 [ 103.928145][ T6924] ksys_read+0x150/0x270 [ 103.928166][ T6924] ? __pfx_ksys_read+0x10/0x10 [ 103.928195][ T6924] do_syscall_64+0x14d/0xf80 [ 103.928213][ T6924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.928229][ T6924] ? trace_irq_disable+0x37/0x100 [ 103.928247][ T6924] ? clear_bhb_loop+0x40/0x90 [ 103.928266][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.928281][ T6924] RIP: 0033:0x7fe4bc55cece [ 103.928297][ T6924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.928309][ T6924] RSP: 002b:00007fe4bd43dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.928328][ T6924] RAX: ffffffffffffffda RBX: 00007fe4bd43e6c0 RCX: 00007fe4bc55cece [ 103.928349][ T6924] RDX: 000000000000000f RSI: 00007fe4bd43e0a0 RDI: 0000000000000003 [ 103.928359][ T6924] RBP: 00007fe4bd43e090 R08: 0000000000000000 R09: 0000000000000000 [ 103.928369][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.928379][ T6924] R13: 00007fe4bc816038 R14: 00007fe4bc815fa0 R15: 00007ffc1799bca8 [ 103.928408][ T6924] [ 104.681234][ T6952] bond1: Removing last arp target with arp_interval on [ 104.770633][ T6959] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 104.779672][ T6957] gretap0: entered promiscuous mode [ 104.796759][ T6957] gretap0: left promiscuous mode [ 104.810413][ T6957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.830180][ T6959] netlink: 'syz.4.322': attribute type 31 has an invalid length. [ 105.725377][ T6994] FAULT_INJECTION: forcing a failure. [ 105.725377][ T6994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.770412][ T6994] CPU: 0 UID: 0 PID: 6994 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT(full) [ 105.770441][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.770451][ T6994] Call Trace: [ 105.770458][ T6994] [ 105.770465][ T6994] dump_stack_lvl+0xe8/0x150 [ 105.770491][ T6994] should_fail_ex+0x412/0x560 [ 105.770518][ T6994] _copy_from_iter+0x1d3/0x1670 [ 105.770548][ T6994] ? rcu_is_watching+0x15/0xb0 [ 105.770568][ T6994] ? __pfx__copy_from_iter+0x10/0x10 [ 105.770597][ T6994] ? netlink_sendmsg+0x650/0xb40 [ 105.770612][ T6994] ? skb_put+0x11b/0x210 [ 105.770633][ T6994] netlink_sendmsg+0x6c0/0xb40 [ 105.770658][ T6994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.770678][ T6994] ? aa_sock_msg_perm+0xf1/0x1b0 [ 105.770700][ T6994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.770723][ T6994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.770739][ T6994] ____sys_sendmsg+0xa68/0xad0 [ 105.770757][ T6994] ? __might_fault+0xaf/0x130 [ 105.770782][ T6994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.770810][ T6994] ? import_iovec+0x73/0xa0 [ 105.770829][ T6994] ___sys_sendmsg+0x2a5/0x360 [ 105.770848][ T6994] ? __lock_acquire+0x6b5/0x2cf0 [ 105.770869][ T6994] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.770919][ T6994] ? __fget_files+0x2a/0x420 [ 105.770935][ T6994] ? __fget_files+0x3a0/0x420 [ 105.770960][ T6994] __x64_sys_sendmsg+0x1bd/0x2a0 [ 105.770982][ T6994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.771011][ T6994] ? __pfx_ksys_write+0x10/0x10 [ 105.771041][ T6994] do_syscall_64+0x14d/0xf80 [ 105.771061][ T6994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.771076][ T6994] ? trace_irq_disable+0x37/0x100 [ 105.771094][ T6994] ? clear_bhb_loop+0x40/0x90 [ 105.771121][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.771136][ T6994] RIP: 0033:0x7f7d0a59c629 [ 105.771151][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.771163][ T6994] RSP: 002b:00007f7d0b417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.771180][ T6994] RAX: ffffffffffffffda RBX: 00007f7d0a815fa0 RCX: 00007f7d0a59c629 [ 105.771192][ T6994] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 105.771202][ T6994] RBP: 00007f7d0b417090 R08: 0000000000000000 R09: 0000000000000000 [ 105.771212][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.771220][ T6994] R13: 00007f7d0a816038 R14: 00007f7d0a815fa0 R15: 00007ffcda9e3ee8 [ 105.771246][ T6994] [ 105.799050][ T6998] IPv6: sit1: Disabled Multicast RS [ 106.328624][ T7008] __nla_validate_parse: 10 callbacks suppressed [ 106.328642][ T7008] netlink: 108 bytes leftover after parsing attributes in process `syz.3.338'. [ 106.361332][ T7015] ipvlan2: entered promiscuous mode [ 106.603065][ T7020] syzkaller1: entered promiscuous mode [ 106.612338][ T7020] syzkaller1: entered allmulticast mode [ 107.072359][ T7051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.350'. [ 107.093455][ T7054] FAULT_INJECTION: forcing a failure. [ 107.093455][ T7054] name failslab, interval 1, probability 0, space 0, times 0 [ 107.131448][ T7054] CPU: 0 UID: 0 PID: 7054 Comm: syz.3.349 Not tainted syzkaller #0 PREEMPT(full) [ 107.131473][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.131484][ T7054] Call Trace: [ 107.131491][ T7054] [ 107.131498][ T7054] dump_stack_lvl+0xe8/0x150 [ 107.131525][ T7054] should_fail_ex+0x412/0x560 [ 107.131553][ T7054] should_failslab+0xa8/0x100 [ 107.131578][ T7054] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 107.131600][ T7054] ? __alloc_skb+0x1d0/0x7d0 [ 107.131617][ T7054] ? __local_bh_enable_ip+0xd0/0x130 [ 107.131640][ T7054] __alloc_skb+0x1d0/0x7d0 [ 107.131663][ T7054] netlink_dump+0x1ef/0xe80 [ 107.131692][ T7054] ? __pfx_netlink_dump+0x10/0x10 [ 107.131725][ T7054] ? genl_start+0x499/0x6c0 [ 107.131752][ T7054] __netlink_dump_start+0x5cb/0x7e0 [ 107.131777][ T7054] genl_family_rcv_msg_dumpit+0x213/0x310 [ 107.131801][ T7054] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 107.131829][ T7054] ? __pfx_genl_start+0x10/0x10 [ 107.131846][ T7054] ? __pfx_genl_dumpit+0x10/0x10 [ 107.131863][ T7054] ? __pfx_genl_done+0x10/0x10 [ 107.131886][ T7054] ? bpf_lsm_capable+0x9/0x20 [ 107.131903][ T7054] ? security_capable+0x7e/0x2c0 [ 107.131930][ T7054] genl_rcv_msg+0x5e8/0x7a0 [ 107.131956][ T7054] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.131975][ T7054] ? __pfx_batadv_tt_global_dump+0x10/0x10 [ 107.132004][ T7054] ? __pfx_ref_tracker_free+0x10/0x10 [ 107.132024][ T7054] ? __skb_clone+0x63/0x7a0 [ 107.132050][ T7054] netlink_rcv_skb+0x232/0x4b0 [ 107.132071][ T7054] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.132093][ T7054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.132107][ T7054] ? genl_rcv+0x19/0x40 [ 107.132142][ T7054] ? down_read+0x272/0x2e0 [ 107.132162][ T7054] ? genl_rcv+0xd/0x40 [ 107.132182][ T7054] genl_rcv+0x28/0x40 [ 107.132200][ T7054] netlink_unicast+0x80f/0x9b0 [ 107.132231][ T7054] ? __pfx_netlink_unicast+0x10/0x10 [ 107.132255][ T7054] ? netlink_sendmsg+0x650/0xb40 [ 107.132270][ T7054] ? skb_put+0x11b/0x210 [ 107.132292][ T7054] netlink_sendmsg+0x813/0xb40 [ 107.132319][ T7054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.132340][ T7054] ? aa_sock_msg_perm+0xf1/0x1b0 [ 107.132363][ T7054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.132386][ T7054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.132401][ T7054] ____sys_sendmsg+0xa68/0xad0 [ 107.132421][ T7054] ? __might_fault+0xaf/0x130 [ 107.132447][ T7054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.132475][ T7054] ? import_iovec+0x73/0xa0 [ 107.132497][ T7054] ___sys_sendmsg+0x2a5/0x360 [ 107.132515][ T7054] ? __lock_acquire+0x6b5/0x2cf0 [ 107.132537][ T7054] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.132592][ T7054] ? __fget_files+0x2a/0x420 [ 107.132608][ T7054] ? __fget_files+0x3a0/0x420 [ 107.132634][ T7054] __x64_sys_sendmsg+0x1bd/0x2a0 [ 107.132657][ T7054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.132685][ T7054] ? __pfx_ksys_write+0x10/0x10 [ 107.132716][ T7054] do_syscall_64+0x14d/0xf80 [ 107.132736][ T7054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.132752][ T7054] ? trace_irq_disable+0x37/0x100 [ 107.132769][ T7054] ? clear_bhb_loop+0x40/0x90 [ 107.132789][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.132805][ T7054] RIP: 0033:0x7f7d0a59c629 [ 107.132820][ T7054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.132833][ T7054] RSP: 002b:00007f7d0b417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.132851][ T7054] RAX: ffffffffffffffda RBX: 00007f7d0a815fa0 RCX: 00007f7d0a59c629 [ 107.132863][ T7054] RDX: 0000000024044080 RSI: 0000200000000240 RDI: 0000000000000003 [ 107.132873][ T7054] RBP: 00007f7d0b417090 R08: 0000000000000000 R09: 0000000000000000 [ 107.132884][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.132893][ T7054] R13: 00007f7d0a816038 R14: 00007f7d0a815fa0 R15: 00007ffcda9e3ee8 [ 107.132923][ T7054] [ 107.708899][ T7062] netlink: 52 bytes leftover after parsing attributes in process `syz.4.352'. [ 107.770441][ T7066] netlink: 76 bytes leftover after parsing attributes in process `syz.4.352'. [ 107.794694][ T7066] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.801952][ T7066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.809510][ T7066] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.816704][ T7066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.893787][ T7071] netlink: 'syz.3.354': attribute type 21 has an invalid length. [ 107.903598][ T7066] netlink: 52 bytes leftover after parsing attributes in process `syz.4.352'. [ 107.914393][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.921676][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.959550][ T7071] netlink: 156 bytes leftover after parsing attributes in process `syz.3.354'. [ 108.673230][ T7094] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 108.702927][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 108.716650][ T7094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.359'. [ 108.913121][ T7104] syzkaller0: entered promiscuous mode [ 108.928129][ T7104] syzkaller0: entered allmulticast mode [ 109.074103][ T7110] netlink: 'syz.3.367': attribute type 13 has an invalid length. [ 109.180212][ T7120] netlink: 'syz.2.371': attribute type 10 has an invalid length. [ 109.399199][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.407508][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.504448][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 109.534600][ T7140] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.577236][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.592921][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.723686][ T7120] team0: Port device netdevsim0 added [ 109.804662][ T49] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.836583][ T49] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.845002][ T49] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.876039][ T49] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.923073][ T7147] netlink: 'syz.3.376': attribute type 29 has an invalid length. [ 110.126236][ T7161] syz_tun: entered allmulticast mode [ 110.136056][ T7160] syz_tun: left allmulticast mode [ 110.434279][ T7173] xt_CT: No such helper "snmp_trap" [ 110.527081][ T7187] FAULT_INJECTION: forcing a failure. [ 110.527081][ T7187] name failslab, interval 1, probability 0, space 0, times 0 [ 110.541804][ T7187] CPU: 1 UID: 0 PID: 7187 Comm: syz.1.387 Not tainted syzkaller #0 PREEMPT(full) [ 110.541829][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.541839][ T7187] Call Trace: [ 110.541847][ T7187] [ 110.541854][ T7187] dump_stack_lvl+0xe8/0x150 [ 110.541883][ T7187] should_fail_ex+0x412/0x560 [ 110.541911][ T7187] should_failslab+0xa8/0x100 [ 110.541945][ T7187] __kmalloc_cache_noprof+0x88/0x660 [ 110.541965][ T7187] ? sctp_v6_cmp_addr+0x15/0xd0 [ 110.541983][ T7187] ? sctp_add_bind_addr+0x8c/0x370 [ 110.542005][ T7187] sctp_add_bind_addr+0x8c/0x370 [ 110.542027][ T7187] sctp_copy_local_addr_list+0x314/0x4f0 [ 110.542048][ T7187] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 110.542066][ T7187] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 110.542085][ T7187] ? sctp_v6_is_any+0x64/0x80 [ 110.542103][ T7187] ? sctp_copy_one_addr+0x93/0x360 [ 110.542123][ T7187] sctp_bind_addr_copy+0xb3/0x3c0 [ 110.542142][ T7187] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 110.542167][ T7187] sctp_connect_new_asoc+0x2ff/0x6b0 [ 110.542190][ T7187] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 110.542214][ T7187] ? sctp_get_af_specific+0x29/0x80 [ 110.542230][ T7187] ? sctp_inet6_send_verify+0x80/0x300 [ 110.542246][ T7187] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 110.542269][ T7187] __sctp_connect+0x5cb/0xdc0 [ 110.542298][ T7187] ? __pfx___sctp_connect+0x10/0x10 [ 110.542316][ T7187] ? security_sctp_bind_connect+0x7e/0x2c0 [ 110.542334][ T7187] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 110.542351][ T7187] sctp_setsockopt+0x708/0x12c0 [ 110.542368][ T7187] ? sock_common_setsockopt+0x36/0xc0 [ 110.542384][ T7187] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 110.542399][ T7187] do_sock_setsockopt+0x17c/0x1b0 [ 110.542421][ T7187] __x64_sys_setsockopt+0x13d/0x1b0 [ 110.542442][ T7187] do_syscall_64+0x14d/0xf80 [ 110.542459][ T7187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.542472][ T7187] ? trace_irq_disable+0x37/0x100 [ 110.542489][ T7187] ? clear_bhb_loop+0x40/0x90 [ 110.542508][ T7187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.542522][ T7187] RIP: 0033:0x7fa69559c629 [ 110.542536][ T7187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.542548][ T7187] RSP: 002b:00007fa6963c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.542567][ T7187] RAX: ffffffffffffffda RBX: 00007fa695815fa0 RCX: 00007fa69559c629 [ 110.542578][ T7187] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 110.542586][ T7187] RBP: 00007fa6963c6090 R08: 000000000000002c R09: 0000000000000000 [ 110.542595][ T7187] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002 [ 110.542605][ T7187] R13: 00007fa695816038 R14: 00007fa695815fa0 R15: 00007ffeffcfeaf8 [ 110.542628][ T7187] [ 111.083396][ T7194] netlink: 'syz.1.389': attribute type 21 has an invalid length. [ 111.124223][ T7194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.389'. [ 111.162005][ T7194] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 111.179289][ T7192] bridge0: port 3(batadv1) entered blocking state [ 111.192302][ T7192] bridge0: port 3(batadv1) entered disabled state [ 111.212782][ T7192] batadv1: entered allmulticast mode [ 111.231547][ T7192] batadv1: entered promiscuous mode [ 111.397994][ T7204] syzkaller0: entered promiscuous mode [ 111.419893][ T7204] syzkaller0: entered allmulticast mode [ 111.494794][ T7217] __nla_validate_parse: 1 callbacks suppressed [ 111.494813][ T7217] netlink: 96 bytes leftover after parsing attributes in process `syz.4.395'. [ 111.563310][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.396'. [ 111.679541][ T1164] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 111.691433][ T1164] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 112.401109][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.397'. [ 112.620238][ T7234] FAULT_INJECTION: forcing a failure. [ 112.620238][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 112.676460][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.4.399 Not tainted syzkaller #0 PREEMPT(full) [ 112.676484][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.676494][ T7234] Call Trace: [ 112.676501][ T7234] [ 112.676509][ T7234] dump_stack_lvl+0xe8/0x150 [ 112.676533][ T7234] should_fail_ex+0x412/0x560 [ 112.676559][ T7234] should_failslab+0xa8/0x100 [ 112.676581][ T7234] __kmalloc_noprof+0xe8/0x760 [ 112.676600][ T7234] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 112.676625][ T7234] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 112.676648][ T7234] genl_family_rcv_msg_doit+0xd9/0x330 [ 112.676672][ T7234] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 112.676696][ T7234] ? apparmor_capable+0x137/0x1a0 [ 112.676713][ T7234] ? bpf_lsm_capable+0x9/0x20 [ 112.676727][ T7234] ? security_capable+0x7e/0x2c0 [ 112.676750][ T7234] genl_rcv_msg+0x61c/0x7a0 [ 112.676781][ T7234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.676799][ T7234] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 112.676819][ T7234] ? __pfx_nl80211_cancel_remain_on_channel+0x10/0x10 [ 112.676836][ T7234] ? __pfx_nl80211_post_doit+0x10/0x10 [ 112.676860][ T7234] ? __pfx_ref_tracker_free+0x10/0x10 [ 112.676879][ T7234] ? __skb_clone+0x63/0x7a0 [ 112.676903][ T7234] netlink_rcv_skb+0x232/0x4b0 [ 112.676921][ T7234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.676940][ T7234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.676953][ T7234] ? genl_rcv+0x19/0x40 [ 112.676982][ T7234] ? down_read+0x272/0x2e0 [ 112.677000][ T7234] ? genl_rcv+0xd/0x40 [ 112.677021][ T7234] genl_rcv+0x28/0x40 [ 112.677038][ T7234] netlink_unicast+0x80f/0x9b0 [ 112.677066][ T7234] ? __pfx_netlink_unicast+0x10/0x10 [ 112.677088][ T7234] ? netlink_sendmsg+0x650/0xb40 [ 112.677104][ T7234] ? skb_put+0x11b/0x210 [ 112.677125][ T7234] netlink_sendmsg+0x813/0xb40 [ 112.677152][ T7234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.677173][ T7234] ? aa_sock_msg_perm+0xf1/0x1b0 [ 112.677195][ T7234] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.677218][ T7234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.677234][ T7234] ____sys_sendmsg+0xa68/0xad0 [ 112.677254][ T7234] ? __might_fault+0xaf/0x130 [ 112.677279][ T7234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.677306][ T7234] ? import_iovec+0x73/0xa0 [ 112.677325][ T7234] ___sys_sendmsg+0x2a5/0x360 [ 112.677342][ T7234] ? __lock_acquire+0x6b5/0x2cf0 [ 112.677362][ T7234] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.677409][ T7234] ? __fget_files+0x2a/0x420 [ 112.677423][ T7234] ? __fget_files+0x3a0/0x420 [ 112.677445][ T7234] __x64_sys_sendmsg+0x1bd/0x2a0 [ 112.677465][ T7234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.677490][ T7234] ? __pfx_ksys_write+0x10/0x10 [ 112.677518][ T7234] do_syscall_64+0x14d/0xf80 [ 112.677536][ T7234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.677549][ T7234] ? trace_irq_disable+0x37/0x100 [ 112.677566][ T7234] ? clear_bhb_loop+0x40/0x90 [ 112.677585][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.677600][ T7234] RIP: 0033:0x7f3397f9c629 [ 112.677615][ T7234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.677634][ T7234] RSP: 002b:00007f3398e3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.677651][ T7234] RAX: ffffffffffffffda RBX: 00007f3398215fa0 RCX: 00007f3397f9c629 [ 112.677663][ T7234] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 112.677672][ T7234] RBP: 00007f3398e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 112.677681][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.677695][ T7234] R13: 00007f3398216038 R14: 00007f3398215fa0 R15: 00007fff6fdaf188 [ 112.677727][ T7234] [ 113.337715][ T7258] FAULT_INJECTION: forcing a failure. [ 113.337715][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 113.385163][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.1.406 Not tainted syzkaller #0 PREEMPT(full) [ 113.385185][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.385194][ T7258] Call Trace: [ 113.385201][ T7258] [ 113.385208][ T7258] dump_stack_lvl+0xe8/0x150 [ 113.385233][ T7258] should_fail_ex+0x412/0x560 [ 113.385259][ T7258] should_failslab+0xa8/0x100 [ 113.385281][ T7258] __kmalloc_cache_noprof+0x88/0x660 [ 113.385300][ T7258] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 113.385318][ T7258] ? sctp_transport_new+0x7e/0x620 [ 113.385338][ T7258] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 113.385357][ T7258] sctp_transport_new+0x7e/0x620 [ 113.385381][ T7258] sctp_assoc_add_peer+0x259/0x13b0 [ 113.385403][ T7258] ? sctp_bind_addr_copy+0x380/0x3c0 [ 113.385426][ T7258] sctp_connect_new_asoc+0x329/0x6b0 [ 113.385448][ T7258] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 113.385474][ T7258] ? __local_bh_enable_ip+0xd0/0x130 [ 113.385491][ T7258] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 113.385514][ T7258] ? security_sctp_bind_connect+0x7e/0x2c0 [ 113.385536][ T7258] sctp_sendmsg+0x1528/0x2c10 [ 113.385569][ T7258] ? __pfx_sctp_sendmsg+0x10/0x10 [ 113.385588][ T7258] ? aa_sk_perm+0x15a/0x960 [ 113.385610][ T7258] ? aa_sk_perm+0x82d/0x960 [ 113.385637][ T7258] ? __pfx_aa_sk_perm+0x10/0x10 [ 113.385657][ T7258] ? sock_rps_record_flow+0x19/0x400 [ 113.385681][ T7258] ? inet_sendmsg+0x2f4/0x370 [ 113.385712][ T7258] ____sys_sendmsg+0x894/0xad0 [ 113.385741][ T7258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.385769][ T7258] ? import_iovec+0x73/0xa0 [ 113.385790][ T7258] ___sys_sendmsg+0x2a5/0x360 [ 113.385814][ T7258] ? __lock_acquire+0x6b5/0x2cf0 [ 113.385836][ T7258] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.385860][ T7258] ? kstrtouint+0x6e/0xe0 [ 113.385906][ T7258] ? __fget_files+0x2a/0x420 [ 113.385922][ T7258] ? __fget_files+0x3a0/0x420 [ 113.385948][ T7258] __sys_sendmmsg+0x27c/0x4e0 [ 113.385972][ T7258] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.385990][ T7258] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 113.386036][ T7258] ? ksys_write+0x242/0x270 [ 113.386058][ T7258] ? __pfx_ksys_write+0x10/0x10 [ 113.386081][ T7258] __x64_sys_sendmmsg+0xa0/0xc0 [ 113.386102][ T7258] do_syscall_64+0x14d/0xf80 [ 113.386121][ T7258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.386136][ T7258] ? trace_irq_disable+0x37/0x100 [ 113.386153][ T7258] ? clear_bhb_loop+0x40/0x90 [ 113.386176][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.386192][ T7258] RIP: 0033:0x7fa69559c629 [ 113.386208][ T7258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.386221][ T7258] RSP: 002b:00007fa6963c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.386239][ T7258] RAX: ffffffffffffffda RBX: 00007fa695815fa0 RCX: 00007fa69559c629 [ 113.386250][ T7258] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 113.386261][ T7258] RBP: 00007fa6963c6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.386271][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.386281][ T7258] R13: 00007fa695816038 R14: 00007fa695815fa0 R15: 00007ffeffcfeaf8 [ 113.386309][ T7258] [ 113.716576][ T7262] netlink: 88 bytes leftover after parsing attributes in process `syz.2.407'. [ 113.814262][ T7264] FAULT_INJECTION: forcing a failure. [ 113.814262][ T7264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.862732][ T7264] CPU: 1 UID: 0 PID: 7264 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT(full) [ 113.862758][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.862768][ T7264] Call Trace: [ 113.862775][ T7264] [ 113.862782][ T7264] dump_stack_lvl+0xe8/0x150 [ 113.862812][ T7264] should_fail_ex+0x412/0x560 [ 113.862839][ T7264] _copy_from_user+0x2d/0xb0 [ 113.862858][ T7264] ___sys_sendmsg+0x1c6/0x360 [ 113.862878][ T7264] ? __lock_acquire+0x6b5/0x2cf0 [ 113.862900][ T7264] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.862917][ T7264] ? __lock_acquire+0x6b5/0x2cf0 [ 113.862938][ T7264] ? kstrtouint+0x6e/0xe0 [ 113.862995][ T7264] __sys_sendmmsg+0x27c/0x4e0 [ 113.863021][ T7264] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.863038][ T7264] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 113.863083][ T7264] ? ksys_write+0x242/0x270 [ 113.863104][ T7264] ? __pfx_ksys_write+0x10/0x10 [ 113.863129][ T7264] __x64_sys_sendmmsg+0xa0/0xc0 [ 113.863151][ T7264] do_syscall_64+0x14d/0xf80 [ 113.863171][ T7264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.863187][ T7264] ? trace_irq_disable+0x37/0x100 [ 113.863204][ T7264] ? clear_bhb_loop+0x40/0x90 [ 113.863224][ T7264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.863240][ T7264] RIP: 0033:0x7f7a6a19c629 [ 113.863255][ T7264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.863268][ T7264] RSP: 002b:00007f7a6afa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.863287][ T7264] RAX: ffffffffffffffda RBX: 00007f7a6a415fa0 RCX: 00007f7a6a19c629 [ 113.863299][ T7264] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 113.863309][ T7264] RBP: 00007f7a6afa7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.863319][ T7264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.863329][ T7264] R13: 00007f7a6a416038 R14: 00007f7a6a415fa0 R15: 00007ffe3b16b5e8 [ 113.863355][ T7264] [ 114.397216][ T7288] team0: Port device syz_tun added [ 114.413307][ T794] hid-generic 0005:0006:5508.0004: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 114.572882][ T7296] fido_id[7296]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 114.635269][ T7307] netlink: 'syz.3.417': attribute type 4 has an invalid length. [ 117.316533][ T7283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.328909][ T7311] netlink: 'syz.0.418': attribute type 23 has an invalid length. [ 117.353903][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 117.547202][ T7320] netlink: 'syz.3.420': attribute type 4 has an invalid length. [ 117.555518][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 117.565726][ T7322] netlink: 348 bytes leftover after parsing attributes in process `syz.0.422'. [ 117.573108][ T7320] netlink: 'syz.3.420': attribute type 4 has an invalid length. [ 117.589500][ T7329] netlink: 96 bytes leftover after parsing attributes in process `syz.1.423'. [ 117.591956][ T7320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.600432][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 117.646388][ T7322] netlink: 348 bytes leftover after parsing attributes in process `syz.0.422'. [ 117.657983][ T7320] netlink: 165 bytes leftover after parsing attributes in process `syz.3.420'. [ 117.665677][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'. [ 117.702567][ T7335] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 117.752247][ T7340] FAULT_INJECTION: forcing a failure. [ 117.752247][ T7340] name failslab, interval 1, probability 0, space 0, times 0 [ 117.781314][ T7340] CPU: 0 UID: 0 PID: 7340 Comm: syz.4.426 Not tainted syzkaller #0 PREEMPT(full) [ 117.781339][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.781349][ T7340] Call Trace: [ 117.781356][ T7340] [ 117.781363][ T7340] dump_stack_lvl+0xe8/0x150 [ 117.781391][ T7340] should_fail_ex+0x412/0x560 [ 117.781418][ T7340] should_failslab+0xa8/0x100 [ 117.781442][ T7340] __kmalloc_cache_noprof+0x88/0x660 [ 117.781462][ T7340] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 117.781480][ T7340] ? sctp_add_bind_addr+0x8c/0x370 [ 117.781501][ T7340] sctp_add_bind_addr+0x8c/0x370 [ 117.781522][ T7340] sctp_copy_local_addr_list+0x314/0x4f0 [ 117.781542][ T7340] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 117.781559][ T7340] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 117.781579][ T7340] ? sctp_v4_is_any+0x35/0x60 [ 117.781593][ T7340] ? sctp_copy_one_addr+0x93/0x360 [ 117.781612][ T7340] sctp_bind_addr_copy+0xb3/0x3c0 [ 117.781631][ T7340] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 117.781658][ T7340] sctp_connect_new_asoc+0x2ff/0x6b0 [ 117.781682][ T7340] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 117.781709][ T7340] ? __local_bh_enable_ip+0xd0/0x130 [ 117.781726][ T7340] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 117.781748][ T7340] ? security_sctp_bind_connect+0x7e/0x2c0 [ 117.781772][ T7340] sctp_sendmsg+0x1528/0x2c10 [ 117.781807][ T7340] ? __pfx_sctp_sendmsg+0x10/0x10 [ 117.781825][ T7340] ? aa_sk_perm+0x15a/0x960 [ 117.781848][ T7340] ? aa_sk_perm+0x82d/0x960 [ 117.781866][ T7340] ? __might_fault+0xaf/0x130 [ 117.781892][ T7340] ? __pfx_aa_sk_perm+0x10/0x10 [ 117.781915][ T7340] ? sock_rps_record_flow+0x19/0x400 [ 117.781940][ T7340] ? inet_sendmsg+0x2f4/0x370 [ 117.781965][ T7340] __sys_sendto+0x627/0x7a0 [ 117.781987][ T7340] ? __pfx___sys_sendto+0x10/0x10 [ 117.782002][ T7340] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 117.782036][ T7340] ? __fget_files+0x3a0/0x420 [ 117.782069][ T7340] ? rcu_is_watching+0x15/0xb0 [ 117.782094][ T7340] __x64_sys_sendto+0xde/0x100 [ 117.782117][ T7340] do_syscall_64+0x14d/0xf80 [ 117.782137][ T7340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.782153][ T7340] ? trace_irq_disable+0x37/0x100 [ 117.782177][ T7340] ? clear_bhb_loop+0x40/0x90 [ 117.782197][ T7340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.782214][ T7340] RIP: 0033:0x7f3397f9c629 [ 117.782230][ T7340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.782249][ T7340] RSP: 002b:00007f3398e3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 117.782268][ T7340] RAX: ffffffffffffffda RBX: 00007f3398215fa0 RCX: 00007f3397f9c629 [ 117.782281][ T7340] RDX: 000000000000fffd RSI: 00002000000000c0 RDI: 0000000000000005 [ 117.782291][ T7340] RBP: 00007f3398e3b090 R08: 0000200000000280 R09: 0000000000000010 [ 117.782303][ T7340] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000002 [ 117.782313][ T7340] R13: 00007f3398216038 R14: 00007f3398215fa0 R15: 00007fff6fdaf188 [ 117.782343][ T7340] [ 118.093656][ T7335] bond2: entered promiscuous mode [ 118.096433][ T7341] netlink: 108 bytes leftover after parsing attributes in process `syz.1.425'. [ 118.099092][ T7335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.234502][ T7335] bond2: (slave bridge1): making interface the new active one [ 118.242784][ T7335] bridge1: entered promiscuous mode [ 118.249258][ T7335] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 118.267800][ T51] Bluetooth: hci3: link tx timeout [ 118.273217][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.471053][ T7367] netlink: 96 bytes leftover after parsing attributes in process `syz.1.435'. [ 118.607107][ T7346] syz.0.428 (7346) used greatest stack depth: 17592 bytes left [ 118.785375][ T5822] Bluetooth: hci3: link tx timeout [ 118.790857][ T5822] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.814019][ T7379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.962187][ T7379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.983004][ T7392] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 119.068832][ T7379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.084705][ T794] hid-generic 0005:0006:5508.0005: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 119.160343][ T7401] fido_id[7401]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 119.185700][ T7392] bond3: (slave bridge2): making interface the new active one [ 119.205804][ T7392] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 119.255168][ T7379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.419252][ T1164] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.488689][ T1164] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.530558][ T1164] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.556075][ T1164] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.703805][ T5822] Bluetooth: hci3: link tx timeout [ 119.710081][ T5822] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.810528][ T7430] netlink: 'syz.1.456': attribute type 9 has an invalid length. [ 119.811099][ T7431] netlink: 'syz.1.456': attribute type 9 has an invalid length. [ 120.155061][ T7446] FAULT_INJECTION: forcing a failure. [ 120.155061][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 120.183802][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.1.460 Not tainted syzkaller #0 PREEMPT(full) [ 120.183826][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.183836][ T7446] Call Trace: [ 120.183844][ T7446] [ 120.183851][ T7446] dump_stack_lvl+0xe8/0x150 [ 120.183888][ T7446] should_fail_ex+0x412/0x560 [ 120.183916][ T7446] should_failslab+0xa8/0x100 [ 120.183941][ T7446] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 120.183964][ T7446] ? __alloc_skb+0x1d0/0x7d0 [ 120.183981][ T7446] ? __local_bh_enable_ip+0xd0/0x130 [ 120.184004][ T7446] __alloc_skb+0x1d0/0x7d0 [ 120.184021][ T7446] ? netlink_ack_tlv_len+0x6c/0x210 [ 120.184040][ T7446] netlink_ack+0x146/0xa50 [ 120.184055][ T7446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.184078][ T7446] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 120.184101][ T7446] ? __pfx_nl80211_post_doit+0x10/0x10 [ 120.184134][ T7446] netlink_rcv_skb+0x2b6/0x4b0 [ 120.184150][ T7446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.184170][ T7446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.184183][ T7446] ? genl_rcv+0x19/0x40 [ 120.184215][ T7446] ? down_read+0x272/0x2e0 [ 120.184235][ T7446] ? genl_rcv+0xd/0x40 [ 120.184255][ T7446] genl_rcv+0x28/0x40 [ 120.184273][ T7446] netlink_unicast+0x80f/0x9b0 [ 120.184302][ T7446] ? __pfx_netlink_unicast+0x10/0x10 [ 120.184326][ T7446] ? netlink_sendmsg+0x650/0xb40 [ 120.184340][ T7446] ? skb_put+0x11b/0x210 [ 120.184359][ T7446] netlink_sendmsg+0x813/0xb40 [ 120.184384][ T7446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.184403][ T7446] ? aa_sock_msg_perm+0xf1/0x1b0 [ 120.184426][ T7446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.184448][ T7446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.184463][ T7446] ____sys_sendmsg+0xa68/0xad0 [ 120.184483][ T7446] ? __might_fault+0xaf/0x130 [ 120.184507][ T7446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.184536][ T7446] ? import_iovec+0x73/0xa0 [ 120.184556][ T7446] ___sys_sendmsg+0x2a5/0x360 [ 120.184574][ T7446] ? __lock_acquire+0x6b5/0x2cf0 [ 120.184594][ T7446] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.184648][ T7446] ? __fget_files+0x2a/0x420 [ 120.184664][ T7446] ? __fget_files+0x3a0/0x420 [ 120.184688][ T7446] __x64_sys_sendmsg+0x1bd/0x2a0 [ 120.184711][ T7446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.184739][ T7446] ? __pfx_ksys_write+0x10/0x10 [ 120.184771][ T7446] do_syscall_64+0x14d/0xf80 [ 120.184793][ T7446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.184813][ T7446] ? trace_irq_disable+0x37/0x100 [ 120.184830][ T7446] ? clear_bhb_loop+0x40/0x90 [ 120.184849][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.184865][ T7446] RIP: 0033:0x7fa69559c629 [ 120.184889][ T7446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.184902][ T7446] RSP: 002b:00007fa6963c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.184927][ T7446] RAX: ffffffffffffffda RBX: 00007fa695815fa0 RCX: 00007fa69559c629 [ 120.184939][ T7446] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 120.184950][ T7446] RBP: 00007fa6963c6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.184960][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.184970][ T7446] R13: 00007fa695816038 R14: 00007fa695815fa0 R15: 00007ffeffcfeaf8 [ 120.184999][ T7446] [ 120.532146][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 120.700207][ T7456] ip6tnl1: entered promiscuous mode [ 120.705467][ T7456] ip6tnl1: entered allmulticast mode [ 121.305483][ T7484] macsec1: entered promiscuous mode [ 121.312172][ T7484] macsec1: entered allmulticast mode [ 121.653160][ T7483] IPVS: length: 132 != 8 [ 122.287653][ T7535] tipc: Started in network mode [ 122.293561][ T7535] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 122.312082][ T7535] tipc: Enabled bearer , priority 28 [ 122.426648][ T7543] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 122.617582][ T7555] __nla_validate_parse: 15 callbacks suppressed [ 122.617601][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 122.662055][ T7557] FAULT_INJECTION: forcing a failure. [ 122.662055][ T7557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.679520][ T7555] openvswitch: netlink: Flow actions attr not present in new flow. [ 122.688507][ T7557] CPU: 1 UID: 0 PID: 7557 Comm: syz.1.498 Not tainted syzkaller #0 PREEMPT(full) [ 122.688529][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.688540][ T7557] Call Trace: [ 122.688547][ T7557] [ 122.688553][ T7557] dump_stack_lvl+0xe8/0x150 [ 122.688580][ T7557] should_fail_ex+0x412/0x560 [ 122.688607][ T7557] _copy_from_iter+0x1d3/0x1670 [ 122.688628][ T7557] ? __kmalloc_noprof+0x35c/0x760 [ 122.688646][ T7557] ? rds_message_alloc+0x47/0x1f0 [ 122.688661][ T7557] ? rds_sendmsg+0xb35/0x2170 [ 122.688677][ T7557] ? ____sys_sendmsg+0xa68/0xad0 [ 122.688696][ T7557] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 122.688715][ T7557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.688738][ T7557] ? __pfx__copy_from_iter+0x10/0x10 [ 122.688766][ T7557] ? set_page_refcounted+0xa0/0x1e0 [ 122.688790][ T7557] ? alloc_pages_noprof+0xbd/0x190 [ 122.688813][ T7557] ? rds_page_remainder_alloc+0xed6/0x1320 [ 122.688833][ T7557] ? page_copy_sane+0x4e/0x270 [ 122.688856][ T7557] copy_page_from_iter+0xdd/0x170 [ 122.688887][ T7557] rds_message_copy_from_user+0x4cf/0xad0 [ 122.688916][ T7557] ? __pfx_rds_message_copy_from_user+0x10/0x10 [ 122.688936][ T7557] ? __asan_memset+0x22/0x50 [ 122.688956][ T7557] ? rds_message_alloc_sgs+0xab/0x180 [ 122.688976][ T7557] rds_sendmsg+0xda6/0x2170 [ 122.689001][ T7557] ? aa_sk_perm+0x15a/0x960 [ 122.689026][ T7557] ? __pfx_rds_sendmsg+0x10/0x10 [ 122.689049][ T7557] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.689067][ T7557] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 122.689096][ T7557] ? aa_sock_msg_perm+0xf1/0x1b0 [ 122.689118][ T7557] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.689141][ T7557] ? __pfx_rds_sendmsg+0x10/0x10 [ 122.689157][ T7557] ____sys_sendmsg+0xa68/0xad0 [ 122.689177][ T7557] ? __might_fault+0xaf/0x130 [ 122.689201][ T7557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.689228][ T7557] ? import_iovec+0x73/0xa0 [ 122.689248][ T7557] ___sys_sendmsg+0x2a5/0x360 [ 122.689266][ T7557] ? __lock_acquire+0x6b5/0x2cf0 [ 122.689287][ T7557] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.689339][ T7557] ? __fget_files+0x2a/0x420 [ 122.689354][ T7557] ? __fget_files+0x3a0/0x420 [ 122.689379][ T7557] __x64_sys_sendmsg+0x1bd/0x2a0 [ 122.689401][ T7557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.689428][ T7557] ? __pfx_ksys_write+0x10/0x10 [ 122.689456][ T7557] do_syscall_64+0x14d/0xf80 [ 122.689474][ T7557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.689487][ T7557] ? trace_irq_disable+0x37/0x100 [ 122.689504][ T7557] ? clear_bhb_loop+0x40/0x90 [ 122.689525][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.689540][ T7557] RIP: 0033:0x7fa69559c629 [ 122.689555][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.689567][ T7557] RSP: 002b:00007fa6963c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.689583][ T7557] RAX: ffffffffffffffda RBX: 00007fa695815fa0 RCX: 00007fa69559c629 [ 122.689592][ T7557] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 122.689600][ T7557] RBP: 00007fa6963c6090 R08: 0000000000000000 R09: 0000000000000000 [ 122.689607][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.689614][ T7557] R13: 00007fa695816038 R14: 00007fa695815fa0 R15: 00007ffeffcfeaf8 [ 122.689635][ T7557] [ 123.425543][ T7564] netlink: 48 bytes leftover after parsing attributes in process `syz.4.500'. [ 123.436266][ T5876] tipc: Node number set to 8432298 [ 123.484353][ T7570] netlink: 'syz.1.501': attribute type 4 has an invalid length. [ 124.708346][ T7615] netlink: 'syz.2.517': attribute type 4 has an invalid length. [ 124.761659][ T7615] netlink: 'syz.2.517': attribute type 4 has an invalid length. [ 124.800836][ T7615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.832938][ T7615] netlink: 165 bytes leftover after parsing attributes in process `syz.2.517'. [ 124.930093][ T7627] lo speed is unknown, defaulting to 1000 [ 124.958340][ T7633] netlink: 68 bytes leftover after parsing attributes in process `syz.2.524'. [ 124.959934][ T7627] lo speed is unknown, defaulting to 1000 [ 124.988417][ T7627] lo speed is unknown, defaulting to 1000 [ 125.223393][ T7627] infiniband sqz0: set active [ 125.228689][ T7627] infiniband sqz0: added lo [ 125.229560][ T9] lo speed is unknown, defaulting to 1000 [ 125.267027][ T7627] RDS/IB: sqz0: added [ 125.271569][ T7627] smc: adding ib device sqz0 with port count 1 [ 125.278564][ T7627] smc: ib device sqz0 port 1 has no pnetid [ 125.286258][ T9] lo speed is unknown, defaulting to 1000 [ 125.307357][ T7627] lo speed is unknown, defaulting to 1000 [ 125.404364][ T7651] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 125.412900][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 125.425302][ T7651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.530'. [ 125.565025][ T7627] lo speed is unknown, defaulting to 1000 [ 125.709968][ T7660] netlink: 'syz.0.534': attribute type 4 has an invalid length. [ 125.734070][ T7660] netlink: 'syz.0.534': attribute type 4 has an invalid length. [ 125.771463][ T7660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.781900][ T7627] lo speed is unknown, defaulting to 1000 [ 125.782529][ T7660] netlink: 165 bytes leftover after parsing attributes in process `syz.0.534'. [ 126.155635][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 126.167537][ T7675] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 126.181107][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 126.200511][ T7675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.541'. [ 126.218128][ T7627] lo speed is unknown, defaulting to 1000 [ 126.388097][ T7680] team0: Port device syz_tun removed [ 126.432462][ T7682] bridge5: entered promiscuous mode [ 126.453042][ T7682] bridge5: entered allmulticast mode [ 126.533134][ T7684] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.551019][ T7671] lo speed is unknown, defaulting to 1000 [ 126.659636][ T7684] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.724951][ T7627] lo speed is unknown, defaulting to 1000 [ 126.756905][ T7684] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.806094][ T7688] netlink: 'syz.0.545': attribute type 4 has an invalid length. [ 126.834012][ T7684] team0: Port device netdevsim0 removed [ 126.841846][ T7684] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.871855][ T7689] netlink: 'syz.0.545': attribute type 4 has an invalid length. [ 126.908985][ T7688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.046283][ T6517] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.064451][ T6517] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.146197][ T6517] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.173493][ T7692] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 127.200431][ T6517] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.898861][ T7730] netlink: 'syz.1.557': attribute type 1 has an invalid length. [ 127.929071][ T7730] __nla_validate_parse: 2 callbacks suppressed [ 127.929088][ T7730] netlink: 224 bytes leftover after parsing attributes in process `syz.1.557'. [ 128.050811][ T7743] netlink: 52 bytes leftover after parsing attributes in process `syz.3.562'. [ 128.082099][ T7743] netlink: 76 bytes leftover after parsing attributes in process `syz.3.562'. [ 128.099887][ T7743] netlink: 52 bytes leftover after parsing attributes in process `syz.3.562'. [ 128.117567][ T6516] batman_adv: batadv1: IGMP Querier appeared [ 128.123643][ T6516] batman_adv: batadv1: MLD Querier appeared [ 128.336970][ T7762] netlink: 'syz.0.569': attribute type 5 has an invalid length. [ 128.356974][ T7762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.364411][ T7762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.376650][ T7762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.384062][ T7762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.411161][ T7762] tipc: Resetting bearer [ 128.438208][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'. [ 128.454654][ T7762] tipc: Disabling bearer [ 128.507835][ T7770] syzkaller0: entered promiscuous mode [ 128.513559][ T7770] syzkaller0: entered allmulticast mode [ 128.727988][ T7783] FAULT_INJECTION: forcing a failure. [ 128.727988][ T7783] name failslab, interval 1, probability 0, space 0, times 0 [ 128.742981][ T7783] CPU: 1 UID: 0 PID: 7783 Comm: syz.0.578 Not tainted syzkaller #0 PREEMPT(full) [ 128.743005][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.743015][ T7783] Call Trace: [ 128.743022][ T7783] [ 128.743029][ T7783] dump_stack_lvl+0xe8/0x150 [ 128.743056][ T7783] should_fail_ex+0x412/0x560 [ 128.743082][ T7783] should_failslab+0xa8/0x100 [ 128.743106][ T7783] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 128.743126][ T7783] ? __alloc_skb+0x186/0x7d0 [ 128.743143][ T7783] ? __alloc_skb+0x1d0/0x7d0 [ 128.743157][ T7783] ? __local_bh_enable_ip+0xd0/0x130 [ 128.743180][ T7783] __alloc_skb+0x1d0/0x7d0 [ 128.743201][ T7783] netlink_sendmsg+0x5d4/0xb40 [ 128.743234][ T7783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.743255][ T7783] ? aa_sock_msg_perm+0xf1/0x1b0 [ 128.743279][ T7783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.743301][ T7783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.743317][ T7783] ____sys_sendmsg+0xa68/0xad0 [ 128.743337][ T7783] ? __might_fault+0xaf/0x130 [ 128.743361][ T7783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.743388][ T7783] ? import_iovec+0x73/0xa0 [ 128.743409][ T7783] ___sys_sendmsg+0x2a5/0x360 [ 128.743427][ T7783] ? __lock_acquire+0x6b5/0x2cf0 [ 128.743449][ T7783] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.743502][ T7783] ? __fget_files+0x2a/0x420 [ 128.743518][ T7783] ? __fget_files+0x3a0/0x420 [ 128.743544][ T7783] __x64_sys_sendmsg+0x1bd/0x2a0 [ 128.743567][ T7783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.743596][ T7783] ? __pfx_ksys_write+0x10/0x10 [ 128.743625][ T7783] do_syscall_64+0x14d/0xf80 [ 128.743646][ T7783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.743661][ T7783] ? trace_irq_disable+0x37/0x100 [ 128.743678][ T7783] ? clear_bhb_loop+0x40/0x90 [ 128.743698][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.743714][ T7783] RIP: 0033:0x7fe4bc59c629 [ 128.743729][ T7783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.743743][ T7783] RSP: 002b:00007fe4bd43e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.743762][ T7783] RAX: ffffffffffffffda RBX: 00007fe4bc815fa0 RCX: 00007fe4bc59c629 [ 128.743774][ T7783] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 128.743785][ T7783] RBP: 00007fe4bd43e090 R08: 0000000000000000 R09: 0000000000000000 [ 128.743795][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.743804][ T7783] R13: 00007fe4bc816038 R14: 00007fe4bc815fa0 R15: 00007ffc1799bca8 [ 128.743832][ T7783] [ 129.104500][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.764530][ T7816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.590'. [ 129.781244][ T7816] ip6gre1: entered promiscuous mode [ 129.786601][ T7816] ip6gre1: entered allmulticast mode [ 129.807526][ T7817] netlink: 'syz.3.590': attribute type 6 has an invalid length. [ 129.833549][ T7817] netlink: 72 bytes leftover after parsing attributes in process `syz.3.590'. [ 129.857295][ T7817] netlink: 'syz.3.590': attribute type 6 has an invalid length. [ 129.880248][ T7817] netlink: 72 bytes leftover after parsing attributes in process `syz.3.590'. [ 129.897011][ T7817] netlink: 'syz.3.590': attribute type 6 has an invalid length. [ 129.920358][ T7817] netlink: 72 bytes leftover after parsing attributes in process `syz.3.590'. [ 129.931189][ T7817] netlink: 72 bytes leftover after parsing attributes in process `syz.3.590'. [ 130.003978][ T7826] syzkaller1: entered promiscuous mode [ 130.017088][ T7826] syzkaller1: entered allmulticast mode [ 130.570085][ T7854] bridge0: port 4(batadv2) entered blocking state [ 130.593934][ T7854] bridge0: port 4(batadv2) entered disabled state [ 130.601383][ T7854] batadv2: entered allmulticast mode [ 130.609295][ T7854] batadv2: entered promiscuous mode [ 130.819017][ T7863] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 131.009358][ T7871] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 131.066484][ T6520] batman_adv: batadv2: IGMP Querier appeared [ 131.072568][ T6520] batman_adv: batadv2: MLD Querier appeared [ 131.373413][ T7882] xt_connbytes: Forcing CT accounting to be enabled [ 131.437014][ T7884] lo speed is unknown, defaulting to 1000 [ 131.557818][ T7892] IPVS: length: 132 != 8 [ 131.568179][ T7889] FAULT_INJECTION: forcing a failure. [ 131.568179][ T7889] name failslab, interval 1, probability 0, space 0, times 0 [ 131.583349][ T7889] CPU: 0 UID: 0 PID: 7889 Comm: syz.0.619 Not tainted syzkaller #0 PREEMPT(full) [ 131.583373][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.583383][ T7889] Call Trace: [ 131.583390][ T7889] [ 131.583398][ T7889] dump_stack_lvl+0xe8/0x150 [ 131.583424][ T7889] should_fail_ex+0x412/0x560 [ 131.583452][ T7889] should_failslab+0xa8/0x100 [ 131.583476][ T7889] __kmalloc_cache_noprof+0x88/0x660 [ 131.583496][ T7889] ? __asan_memset+0x22/0x50 [ 131.583512][ T7889] ? alloc_netdev_mqs+0xb97/0x11b0 [ 131.583535][ T7889] ? __xdp_rxq_info_reg+0x171/0x280 [ 131.583558][ T7889] alloc_netdev_mqs+0xb97/0x11b0 [ 131.583586][ T7889] tun_set_iff+0x532/0xf00 [ 131.583617][ T7889] __tun_chr_ioctl+0x7bb/0x1e10 [ 131.583645][ T7889] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 131.583671][ T7889] ? __fget_files+0x2a/0x420 [ 131.583686][ T7889] ? __fget_files+0x3a0/0x420 [ 131.583701][ T7889] ? __fget_files+0x2a/0x420 [ 131.583719][ T7889] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.583735][ T7889] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 131.583756][ T7889] __se_sys_ioctl+0xfc/0x170 [ 131.583779][ T7889] do_syscall_64+0x14d/0xf80 [ 131.583800][ T7889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.583816][ T7889] ? trace_irq_disable+0x37/0x100 [ 131.583834][ T7889] ? clear_bhb_loop+0x40/0x90 [ 131.583854][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.583870][ T7889] RIP: 0033:0x7fe4bc59c629 [ 131.583886][ T7889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.583899][ T7889] RSP: 002b:00007fe4bd43e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.583917][ T7889] RAX: ffffffffffffffda RBX: 00007fe4bc815fa0 RCX: 00007fe4bc59c629 [ 131.583936][ T7889] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000004 [ 131.583947][ T7889] RBP: 00007fe4bd43e090 R08: 0000000000000000 R09: 0000000000000000 [ 131.583957][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.583967][ T7889] R13: 00007fe4bc816038 R14: 00007fe4bc815fa0 R15: 00007ffc1799bca8 [ 131.583996][ T7889] [ 132.208319][ T7906] xt_hashlimit: size too large, truncated to 1048576 [ 132.790451][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.799576][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.836953][ T7922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.894877][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.935482][ T7926] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 133.033823][ T7916] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 133.110415][ T7916] bond1 (unregistering): Released all slaves [ 133.279423][ T7927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.322100][ T7927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.418950][ T7922] tipc: Enabled bearer , priority 0 [ 133.441679][ T7935] syzkaller0: entered promiscuous mode [ 133.453910][ T7935] syzkaller0: entered allmulticast mode [ 133.532279][ T7944] tipc: Resetting bearer [ 133.760614][ T7944] tipc: Resetting bearer [ 133.864477][ T7944] tipc: Disabling bearer [ 134.032812][ T7957] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.094760][ T7964] __nla_validate_parse: 36 callbacks suppressed [ 134.094777][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 134.180450][ T7957] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.301081][ T7957] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.381909][ T7973] validate_nla: 21 callbacks suppressed [ 134.381927][ T7973] netlink: 'syz.0.639': attribute type 4 has an invalid length. [ 134.437767][ T7980] netlink: 'syz.0.639': attribute type 4 has an invalid length. [ 134.479768][ T7977] netlink: 196 bytes leftover after parsing attributes in process `syz.3.640'. [ 134.493215][ T7957] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.527334][ T7969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.564637][ T7969] netlink: 165 bytes leftover after parsing attributes in process `syz.0.639'. [ 134.578708][ T7978] syzkaller0: entered promiscuous mode [ 134.586952][ T7978] syzkaller0: entered allmulticast mode [ 134.709634][ T7990] netlink: 'syz.4.644': attribute type 18 has an invalid length. [ 134.755838][ T6517] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.764513][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 134.786210][ T6517] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.832420][ T6517] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.884814][ T6517] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.903362][ T6517] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.934826][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 134.955282][ T6517] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.966064][ T6517] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.979473][ T6517] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.027950][ T8000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.085604][ T8000] macvlan2: entered promiscuous mode [ 135.097439][ T8000] bond_slave_0: entered promiscuous mode [ 135.103355][ T8000] bond_slave_1: entered promiscuous mode [ 135.109297][ T8000] bond0: entered promiscuous mode [ 135.116703][ T8000] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.130841][ T8000] bond2: (slave macvlan2): making interface the new active one [ 135.140679][ T8000] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 135.153707][ T8007] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:2c42:1eff:fe8b:7565 error=-28 [ 135.465890][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 135.580588][ T8026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.657'. [ 135.600838][ T8026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.657'. [ 135.611784][ T8026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.641228][ T8007] infiniband syz0: set active [ 135.676601][ T8007] infiniband syz0: added bond0 [ 135.738996][ T8031] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 135.776264][ T8007] RDS/IB: syz0: added [ 135.803164][ T8007] smc: adding ib device syz0 with port count 1 [ 135.810505][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 135.825619][ T8007] smc: ib device syz0 port 1 has no pnetid [ 135.848600][ T8031] netlink: 36 bytes leftover after parsing attributes in process `syz.3.659'. [ 135.966697][ T8045] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 136.332302][ T8063] syzkaller1: entered promiscuous mode [ 136.338099][ T8063] syzkaller1: entered allmulticast mode [ 136.438175][ T8067] bridge0: entered promiscuous mode [ 136.459350][ T8067] bridge0: port 3(macvtap1) entered blocking state [ 136.476031][ T8067] bridge0: port 3(macvtap1) entered disabled state [ 136.495051][ T8067] macvtap1: entered allmulticast mode [ 136.508129][ T8067] bridge0: entered allmulticast mode [ 136.524552][ T8067] macvtap1: left allmulticast mode [ 136.539788][ T8067] bridge0: left allmulticast mode [ 136.559506][ T8067] bridge0: left promiscuous mode [ 136.716547][ T8083] block nbd0: not configured, cannot reconfigure [ 136.833504][ T8083] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 136.863391][ T8086] lo speed is unknown, defaulting to 1000 [ 136.978870][ T8095] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 137.164229][ T6520] nci: nci_rx_work: unknown MT 0x1 [ 137.337367][ T8111] ipvlan2: entered promiscuous mode [ 137.351655][ T8111] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 137.362746][ T8111] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 137.447076][ T8120] FAULT_INJECTION: forcing a failure. [ 137.447076][ T8120] name failslab, interval 1, probability 0, space 0, times 0 [ 137.468822][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.3.683 Not tainted syzkaller #0 PREEMPT(full) [ 137.468847][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.468857][ T8120] Call Trace: [ 137.468864][ T8120] [ 137.468872][ T8120] dump_stack_lvl+0xe8/0x150 [ 137.468899][ T8120] should_fail_ex+0x412/0x560 [ 137.468927][ T8120] should_failslab+0xa8/0x100 [ 137.468952][ T8120] __kmalloc_cache_noprof+0x88/0x660 [ 137.468972][ T8120] ? sctp_v6_cmp_addr+0x15/0xd0 [ 137.468990][ T8120] ? sctp_add_bind_addr+0x8c/0x370 [ 137.469013][ T8120] sctp_add_bind_addr+0x8c/0x370 [ 137.469035][ T8120] sctp_copy_local_addr_list+0x314/0x4f0 [ 137.469058][ T8120] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 137.469076][ T8120] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 137.469096][ T8120] ? sctp_v6_is_any+0x64/0x80 [ 137.469115][ T8120] ? sctp_copy_one_addr+0x93/0x360 [ 137.469136][ T8120] sctp_bind_addr_copy+0xb3/0x3c0 [ 137.469154][ T8120] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 137.469181][ T8120] sctp_connect_new_asoc+0x2ff/0x6b0 [ 137.469205][ T8120] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 137.469231][ T8120] ? sctp_get_af_specific+0x29/0x80 [ 137.469247][ T8120] ? sctp_inet6_send_verify+0x80/0x300 [ 137.469264][ T8120] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 137.469287][ T8120] __sctp_connect+0x5cb/0xdc0 [ 137.469320][ T8120] ? __pfx___sctp_connect+0x10/0x10 [ 137.469339][ T8120] ? security_sctp_bind_connect+0x7e/0x2c0 [ 137.469362][ T8120] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 137.469382][ T8120] sctp_setsockopt+0x708/0x12c0 [ 137.469410][ T8120] ? sock_common_setsockopt+0x36/0xc0 [ 137.469428][ T8120] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 137.469446][ T8120] do_sock_setsockopt+0x17c/0x1b0 [ 137.469471][ T8120] __x64_sys_setsockopt+0x13d/0x1b0 [ 137.469496][ T8120] do_syscall_64+0x14d/0xf80 [ 137.469517][ T8120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.469532][ T8120] ? trace_irq_disable+0x37/0x100 [ 137.469550][ T8120] ? clear_bhb_loop+0x40/0x90 [ 137.469570][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.469586][ T8120] RIP: 0033:0x7f7d0a59c629 [ 137.469601][ T8120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.469614][ T8120] RSP: 002b:00007f7d0b417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.469633][ T8120] RAX: ffffffffffffffda RBX: 00007f7d0a815fa0 RCX: 00007f7d0a59c629 [ 137.469645][ T8120] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 137.469655][ T8120] RBP: 00007f7d0b417090 R08: 000000000000002c R09: 0000000000000000 [ 137.469665][ T8120] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002 [ 137.469676][ T8120] R13: 00007f7d0a816038 R14: 00007f7d0a815fa0 R15: 00007ffcda9e3ee8 [ 137.469706][ T8120] [ 139.547786][ T8151] __nla_validate_parse: 8 callbacks suppressed [ 139.547798][ T8151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'. [ 140.042696][ T8099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.235579][ T8165] syzkaller0: entered promiscuous mode [ 140.257624][ T8165] syzkaller0: entered allmulticast mode [ 140.287270][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.700'. [ 140.309664][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.700'. [ 140.344201][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'. [ 140.379576][ T8173] lo speed is unknown, defaulting to 1000 [ 140.413611][ T6520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.426388][ T6520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.436922][ T8178] geneve3: entered promiscuous mode [ 140.442161][ T8178] geneve3: entered allmulticast mode [ 140.622830][ T8183] netlink: 48 bytes leftover after parsing attributes in process `syz.2.707'. [ 140.653211][ T8185] ipvlan0: entered allmulticast mode [ 140.660986][ T8185] veth0_vlan: entered allmulticast mode [ 140.706776][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 140.750954][ T8187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.709'. [ 140.770114][ T8187] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 140.784599][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 140.802175][ T8187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.709'. [ 141.195805][ T8203] bridge2: entered promiscuous mode [ 141.228091][ T8203] bridge2: entered allmulticast mode [ 141.259608][ T8203] team0: Port device bridge2 added [ 141.293299][ T8207] bridge0: port 3(team0) entered blocking state [ 141.307628][ T8213] netlink: 'syz.0.718': attribute type 23 has an invalid length. [ 141.315647][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 141.327461][ T8207] bridge0: port 3(team0) entered disabled state [ 141.333919][ T8207] team0: entered allmulticast mode [ 141.339437][ T8207] team_slave_0: entered allmulticast mode [ 141.345244][ T8207] team_slave_1: entered allmulticast mode [ 141.353284][ T8207] team0: entered promiscuous mode [ 141.358529][ T8207] team_slave_0: entered promiscuous mode [ 141.364513][ T8207] team_slave_1: entered promiscuous mode [ 141.462120][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 141.478894][ T8218] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 141.604908][ T8218] bond4: Removing last ns target with arp_interval on [ 141.793998][ T8233] netlink: 'syz.0.724': attribute type 4 has an invalid length. [ 141.844633][ T8230] netlink: 'syz.0.724': attribute type 4 has an invalid length. [ 141.902506][ T8235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.997094][ T8237] syzkaller0: entered promiscuous mode [ 142.002742][ T8237] syzkaller0: entered allmulticast mode [ 143.506617][ T8216] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 143.509651][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.539276][ T8265] : renamed from hsr0 (while UP) [ 143.697911][ T8282] netlink: 'syz.4.738': attribute type 4 has an invalid length. [ 143.716192][ T5903] lo speed is unknown, defaulting to 1000 [ 143.732657][ T8282] netlink: 'syz.4.738': attribute type 4 has an invalid length. [ 143.747109][ T5903] sqz0: Port: 1 Link DOWN [ 143.759004][ T5903] lo speed is unknown, defaulting to 1000 [ 143.770392][ T8282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.781226][ T5903] lo speed is unknown, defaulting to 1000 [ 143.787641][ T5903] sqz0: Port: 1 Link ACTIVE [ 143.902912][ T8294] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.133996][ T6516] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:2c42:1eff:fe8b:7565 error=-28 [ 144.285947][ T8309] syzkaller0: entered promiscuous mode [ 144.292881][ T8309] syzkaller0: entered allmulticast mode [ 144.320490][ T8318] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 144.595500][ T8333] netlink: 'syz.4.754': attribute type 4 has an invalid length. [ 144.668629][ T8337] netlink: 'syz.4.754': attribute type 4 has an invalid length. [ 144.712394][ T8339] __nla_validate_parse: 10 callbacks suppressed [ 144.712413][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 144.734745][ T8341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.764670][ T8341] netlink: 165 bytes leftover after parsing attributes in process `syz.4.754'. [ 145.640023][ T8328] vlan2: entered promiscuous mode [ 145.686093][ T794] lo speed is unknown, defaulting to 1000 [ 145.698855][ T794] lo speed is unknown, defaulting to 1000 [ 145.726431][ T945] lo speed is unknown, defaulting to 1000 [ 145.837287][ T8348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.761'. [ 146.124926][ T8368] syzkaller0: entered promiscuous mode [ 146.135923][ T8368] syzkaller0: entered allmulticast mode [ 146.151974][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.768'. [ 146.171451][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.768'. [ 146.432432][ T8375] syzkaller0: entered promiscuous mode [ 146.443941][ T8375] syzkaller0: entered allmulticast mode [ 146.564600][ T8383] netlink: 'syz.4.772': attribute type 4 has an invalid length. [ 146.617143][ T8385] netlink: 'syz.4.772': attribute type 4 has an invalid length. [ 146.673911][ T8389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.867697][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 146.940091][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 147.124776][ T8409] netlink: 872 bytes leftover after parsing attributes in process `syz.2.778'. [ 147.136430][ T8409] netlink: 872 bytes leftover after parsing attributes in process `syz.2.778'. [ 147.287657][ T8413] netlink: 'syz.2.780': attribute type 13 has an invalid length. [ 148.067129][ T5930] lo speed is unknown, defaulting to 1000 [ 148.073989][ T5930] lo speed is unknown, defaulting to 1000 [ 148.105952][ T794] lo speed is unknown, defaulting to 1000 [ 148.209117][ T8420] netlink: 'syz.4.782': attribute type 2 has an invalid length. [ 148.253151][ T8420] !9: entered promiscuous mode [ 148.271518][ T8430] FAULT_INJECTION: forcing a failure. [ 148.271518][ T8430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.289897][ T8430] CPU: 1 UID: 0 PID: 8430 Comm: syz.2.781 Not tainted syzkaller #0 PREEMPT(full) [ 148.289922][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.289932][ T8430] Call Trace: [ 148.289939][ T8430] [ 148.289945][ T8430] dump_stack_lvl+0xe8/0x150 [ 148.289972][ T8430] should_fail_ex+0x412/0x560 [ 148.289999][ T8430] _copy_from_user+0x2d/0xb0 [ 148.290019][ T8430] generic_map_update_batch+0x648/0x990 [ 148.290051][ T8430] ? __pfx_generic_map_update_batch+0x10/0x10 [ 148.290076][ T8430] ? __fget_files+0x2a/0x420 [ 148.290100][ T8430] ? __pfx_generic_map_update_batch+0x10/0x10 [ 148.290124][ T8430] bpf_map_do_batch+0x39b/0x630 [ 148.290149][ T8430] __sys_bpf+0x7c1/0x950 [ 148.290170][ T8430] ? __pfx___sys_bpf+0x10/0x10 [ 148.290203][ T8430] ? ksys_write+0x242/0x270 [ 148.290224][ T8430] ? __pfx_ksys_write+0x10/0x10 [ 148.290249][ T8430] __x64_sys_bpf+0x7c/0x90 [ 148.290267][ T8430] do_syscall_64+0x14d/0xf80 [ 148.290289][ T8430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.290305][ T8430] ? trace_irq_disable+0x37/0x100 [ 148.290320][ T8430] ? clear_bhb_loop+0x40/0x90 [ 148.290338][ T8430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.290354][ T8430] RIP: 0033:0x7f7a6a19c629 [ 148.290369][ T8430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.290383][ T8430] RSP: 002b:00007f7a6afa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.290408][ T8430] RAX: ffffffffffffffda RBX: 00007f7a6a415fa0 RCX: 00007f7a6a19c629 [ 148.290420][ T8430] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 148.290431][ T8430] RBP: 00007f7a6afa7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.290442][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.290453][ T8430] R13: 00007f7a6a416038 R14: 00007f7a6a415fa0 R15: 00007ffe3b16b5e8 [ 148.290482][ T8430] [ 148.300175][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 148.509284][ T8435] bridge0: entered promiscuous mode [ 148.516657][ T8435] bridge0: port 3(macvtap1) entered blocking state [ 148.523401][ T8435] bridge0: port 3(macvtap1) entered disabled state [ 148.530288][ T8435] macvtap1: entered allmulticast mode [ 148.535674][ T8435] bridge0: entered allmulticast mode [ 148.588117][ T8435] macvtap1: left allmulticast mode [ 148.593289][ T8435] bridge0: left allmulticast mode [ 148.606468][ T8435] bridge0: left promiscuous mode [ 148.704674][ T8443] bond2: (slave veth3): Enslaving as an active interface with a down link [ 148.714563][ T1164] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:2c42:1eff:fe8b:7565 error=-28 [ 148.751142][ T8448] netlink: 'syz.2.792': attribute type 4 has an invalid length. [ 148.774657][ T8448] netlink: 'syz.2.792': attribute type 4 has an invalid length. [ 148.790654][ T8448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.800663][ T8450] Cannot find del_set index 1 as target [ 148.865133][ T8456] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 148.905793][ T8456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.959395][ T8460] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 148.975774][ T8460] FAULT_INJECTION: forcing a failure. [ 148.975774][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 148.990059][ T8460] CPU: 1 UID: 0 PID: 8460 Comm: syz.2.798 Not tainted syzkaller #0 PREEMPT(full) [ 148.990082][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.990093][ T8460] Call Trace: [ 148.990101][ T8460] [ 148.990109][ T8460] dump_stack_lvl+0xe8/0x150 [ 148.990135][ T8460] should_fail_ex+0x412/0x560 [ 148.990163][ T8460] should_failslab+0xa8/0x100 [ 148.990187][ T8460] __kmalloc_cache_noprof+0x88/0x660 [ 148.990209][ T8460] ? tcf_block_get_ext+0x68c/0x17d0 [ 148.990232][ T8460] tcf_block_get_ext+0x68c/0x17d0 [ 148.990248][ T8460] ? ____sys_sendmsg+0xa68/0xad0 [ 148.990268][ T8460] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 148.990286][ T8460] ? do_syscall_64+0x14d/0xf80 [ 148.990305][ T8460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.990332][ T8460] ? is_dynamic_key+0xd6/0x1c0 [ 148.990353][ T8460] tcf_block_get+0x67/0xa0 [ 148.990369][ T8460] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 148.990390][ T8460] multiq_init+0x6d/0x2c0 [ 148.990415][ T8460] ? __pfx_multiq_init+0x10/0x10 [ 148.990437][ T8460] qdisc_create+0x7c4/0xf20 [ 148.990461][ T8460] ? lockdep_rtnl_is_held+0x26/0x40 [ 148.990487][ T8460] tc_modify_qdisc+0x16f0/0x2290 [ 148.990512][ T8460] ? trace_contention_end+0x39/0x100 [ 148.990540][ T8460] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 148.990562][ T8460] ? __dev_queue_xmit+0x274/0x3850 [ 148.990609][ T8460] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 148.990629][ T8460] rtnetlink_rcv_msg+0x77e/0xbe0 [ 148.990650][ T8460] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 148.990667][ T8460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.990684][ T8460] ? ref_tracker_free+0x693/0x840 [ 148.990704][ T8460] ? __copy_skb_header+0xa3/0x4a0 [ 148.990726][ T8460] ? __pfx_ref_tracker_free+0x10/0x10 [ 148.990745][ T8460] ? __skb_clone+0x63/0x7a0 [ 148.990774][ T8460] netlink_rcv_skb+0x232/0x4b0 [ 148.990793][ T8460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.990813][ T8460] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.990841][ T8460] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.990867][ T8460] netlink_unicast+0x80f/0x9b0 [ 148.990898][ T8460] ? __pfx_netlink_unicast+0x10/0x10 [ 148.990922][ T8460] ? netlink_sendmsg+0x650/0xb40 [ 148.990938][ T8460] ? skb_put+0x11b/0x210 [ 148.990960][ T8460] netlink_sendmsg+0x813/0xb40 [ 148.990987][ T8460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.991008][ T8460] ? aa_sock_msg_perm+0xf1/0x1b0 [ 148.991030][ T8460] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.991053][ T8460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.991069][ T8460] ____sys_sendmsg+0xa68/0xad0 [ 148.991089][ T8460] ? __might_fault+0xaf/0x130 [ 148.991115][ T8460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.991144][ T8460] ? import_iovec+0x73/0xa0 [ 148.991165][ T8460] ___sys_sendmsg+0x2a5/0x360 [ 148.991184][ T8460] ? __lock_acquire+0x6b5/0x2cf0 [ 148.991206][ T8460] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.991261][ T8460] ? __fget_files+0x2a/0x420 [ 148.991277][ T8460] ? __fget_files+0x3a0/0x420 [ 148.991304][ T8460] __x64_sys_sendmsg+0x1bd/0x2a0 [ 148.991333][ T8460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.991362][ T8460] ? __pfx_ksys_write+0x10/0x10 [ 148.991394][ T8460] do_syscall_64+0x14d/0xf80 [ 148.991413][ T8460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.991429][ T8460] ? trace_irq_disable+0x37/0x100 [ 148.991447][ T8460] ? clear_bhb_loop+0x40/0x90 [ 148.991468][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.991484][ T8460] RIP: 0033:0x7f7a6a19c629 [ 148.991501][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.991516][ T8460] RSP: 002b:00007f7a6afa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.991536][ T8460] RAX: ffffffffffffffda RBX: 00007f7a6a415fa0 RCX: 00007f7a6a19c629 [ 148.991548][ T8460] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 148.991560][ T8460] RBP: 00007f7a6afa7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.991570][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.991581][ T8460] R13: 00007f7a6a416038 R14: 00007f7a6a415fa0 R15: 00007ffe3b16b5e8 [ 148.991610][ T8460] [ 149.474497][ T8470] syzkaller1: entered promiscuous mode [ 149.480102][ T8470] syzkaller1: entered allmulticast mode [ 149.681068][ T8480] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 149.783805][ T8488] __nla_validate_parse: 5 callbacks suppressed [ 149.783817][ T8488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.805'. [ 149.821795][ T8490] xt_TPROXY: Can be used only with -p tcp or -p udp [ 150.081048][ T8509] lo speed is unknown, defaulting to 1000 [ 150.182026][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.334788][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.820'. [ 150.345766][ T8522] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 150.354220][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 150.363068][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.820'. [ 150.574417][ T8529] syzkaller0: entered promiscuous mode [ 150.580001][ T8529] syzkaller0: entered allmulticast mode [ 150.945325][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.952592][ T8541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.198264][ T8552] FAULT_INJECTION: forcing a failure. [ 151.198264][ T8552] name failslab, interval 1, probability 0, space 0, times 0 [ 151.210971][ T8552] CPU: 0 UID: 0 PID: 8552 Comm: syz.3.833 Not tainted syzkaller #0 PREEMPT(full) [ 151.210996][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.211006][ T8552] Call Trace: [ 151.211013][ T8552] [ 151.211020][ T8552] dump_stack_lvl+0xe8/0x150 [ 151.211047][ T8552] should_fail_ex+0x412/0x560 [ 151.211080][ T8552] should_failslab+0xa8/0x100 [ 151.211104][ T8552] kmem_cache_alloc_bulk_noprof+0x8d/0x7e0 [ 151.211126][ T8552] ? pfn_valid+0x125/0x4c0 [ 151.211154][ T8552] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 151.211191][ T8552] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 151.211218][ T8552] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 151.211257][ T8552] ? 0xffffffffa02061dc [ 151.211298][ T8552] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 151.211326][ T8552] ? _copy_from_user+0x94/0xb0 [ 151.211344][ T8552] ? bpf_test_init+0x113/0x150 [ 151.211359][ T8552] ? xdp_convert_md_to_buff+0x5b/0x330 [ 151.211379][ T8552] bpf_prog_test_run_xdp+0x81c/0x1160 [ 151.211412][ T8552] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 151.211435][ T8552] ? __fget_files+0x2a/0x420 [ 151.211457][ T8552] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 151.211475][ T8552] bpf_prog_test_run+0x2c7/0x340 [ 151.211500][ T8552] __sys_bpf+0x643/0x950 [ 151.211522][ T8552] ? __pfx___sys_bpf+0x10/0x10 [ 151.211557][ T8552] ? ksys_write+0x242/0x270 [ 151.211579][ T8552] ? __pfx_ksys_write+0x10/0x10 [ 151.211604][ T8552] __x64_sys_bpf+0x7c/0x90 [ 151.211622][ T8552] do_syscall_64+0x14d/0xf80 [ 151.211642][ T8552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.211658][ T8552] ? trace_irq_disable+0x37/0x100 [ 151.211676][ T8552] ? clear_bhb_loop+0x40/0x90 [ 151.211696][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.211712][ T8552] RIP: 0033:0x7f7d0a59c629 [ 151.211728][ T8552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.211743][ T8552] RSP: 002b:00007f7d0b417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.211762][ T8552] RAX: ffffffffffffffda RBX: 00007f7d0a815fa0 RCX: 00007f7d0a59c629 [ 151.211774][ T8552] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 151.211785][ T8552] RBP: 00007f7d0b417090 R08: 0000000000000000 R09: 0000000000000000 [ 151.211796][ T8552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.211807][ T8552] R13: 00007f7d0a816038 R14: 00007f7d0a815fa0 R15: 00007ffcda9e3ee8 [ 151.211835][ T8552] [ 151.763806][ T8574] netlink: 36 bytes leftover after parsing attributes in process `syz.3.841'. [ 151.773002][ T8574] FAULT_INJECTION: forcing a failure. [ 151.773002][ T8574] name failslab, interval 1, probability 0, space 0, times 0 [ 151.806433][ T8574] CPU: 0 UID: 0 PID: 8574 Comm: syz.3.841 Not tainted syzkaller #0 PREEMPT(full) [ 151.806457][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.806467][ T8574] Call Trace: [ 151.806474][ T8574] [ 151.806482][ T8574] dump_stack_lvl+0xe8/0x150 [ 151.806508][ T8574] should_fail_ex+0x412/0x560 [ 151.806535][ T8574] should_failslab+0xa8/0x100 [ 151.806559][ T8574] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 151.806583][ T8574] ? __alloc_skb+0x1d0/0x7d0 [ 151.806599][ T8574] ? __local_bh_enable_ip+0xd0/0x130 [ 151.806623][ T8574] __alloc_skb+0x1d0/0x7d0 [ 151.806640][ T8574] ? netlink_ack_tlv_len+0x6c/0x210 [ 151.806660][ T8574] netlink_ack+0x146/0xa50 [ 151.806675][ T8574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.806693][ T8574] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 151.806711][ T8574] ? __pfx_nl802154_post_doit+0x10/0x10 [ 151.806738][ T8574] netlink_rcv_skb+0x2b6/0x4b0 [ 151.806755][ T8574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.806773][ T8574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.806785][ T8574] ? genl_rcv+0x19/0x40 [ 151.806826][ T8574] ? down_read+0x272/0x2e0 [ 151.806844][ T8574] ? genl_rcv+0xd/0x40 [ 151.806864][ T8574] genl_rcv+0x28/0x40 [ 151.806882][ T8574] netlink_unicast+0x80f/0x9b0 [ 151.806913][ T8574] ? __pfx_netlink_unicast+0x10/0x10 [ 151.806936][ T8574] ? netlink_sendmsg+0x650/0xb40 [ 151.806951][ T8574] ? skb_put+0x11b/0x210 [ 151.806973][ T8574] netlink_sendmsg+0x813/0xb40 [ 151.807000][ T8574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.807020][ T8574] ? aa_sock_msg_perm+0xf1/0x1b0 [ 151.807043][ T8574] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.807066][ T8574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.807082][ T8574] ____sys_sendmsg+0xa68/0xad0 [ 151.807102][ T8574] ? __might_fault+0xaf/0x130 [ 151.807128][ T8574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.807156][ T8574] ? import_iovec+0x73/0xa0 [ 151.807178][ T8574] ___sys_sendmsg+0x2a5/0x360 [ 151.807196][ T8574] ? __lock_acquire+0x6b5/0x2cf0 [ 151.807218][ T8574] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.807271][ T8574] ? __fget_files+0x2a/0x420 [ 151.807287][ T8574] ? __fget_files+0x3a0/0x420 [ 151.807312][ T8574] __x64_sys_sendmsg+0x1bd/0x2a0 [ 151.807335][ T8574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.807364][ T8574] ? __pfx_ksys_write+0x10/0x10 [ 151.807395][ T8574] do_syscall_64+0x14d/0xf80 [ 151.807415][ T8574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.807431][ T8574] ? trace_irq_disable+0x37/0x100 [ 151.807449][ T8574] ? clear_bhb_loop+0x40/0x90 [ 151.807469][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.807486][ T8574] RIP: 0033:0x7f7d0a59c629 [ 151.807502][ T8574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.807516][ T8574] RSP: 002b:00007f7d0b417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.807535][ T8574] RAX: ffffffffffffffda RBX: 00007f7d0a815fa0 RCX: 00007f7d0a59c629 [ 151.807547][ T8574] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 151.807558][ T8574] RBP: 00007f7d0b417090 R08: 0000000000000000 R09: 0000000000000000 [ 151.807568][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.807578][ T8574] R13: 00007f7d0a816038 R14: 00007f7d0a815fa0 R15: 00007ffcda9e3ee8 [ 151.807607][ T8574] [ 151.823288][ T8570] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.176554][ T8570] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.255403][ T8590] tipc: MTU too low for tipc bearer [ 152.281973][ T8570] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.301532][ T8570] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.385367][ T8570] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.396868][ T8570] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.452174][ T8570] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.464704][ T8570] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.549821][ T8609] FAULT_INJECTION: forcing a failure. [ 152.549821][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 152.570134][ T8609] CPU: 0 UID: 0 PID: 8609 Comm: syz.0.848 Not tainted syzkaller #0 PREEMPT(full) [ 152.570158][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.570168][ T8609] Call Trace: [ 152.570175][ T8609] [ 152.570182][ T8609] dump_stack_lvl+0xe8/0x150 [ 152.570207][ T8609] should_fail_ex+0x412/0x560 [ 152.570232][ T8609] should_failslab+0xa8/0x100 [ 152.570254][ T8609] __kmalloc_noprof+0xe8/0x760 [ 152.570275][ T8609] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 152.570302][ T8609] tomoyo_realpath_from_path+0xe3/0x5d0 [ 152.570324][ T8609] ? tomoyo_domain+0xd7/0x130 [ 152.570343][ T8609] ? tomoyo_path_number_perm+0x219/0x630 [ 152.570360][ T8609] tomoyo_path_number_perm+0x246/0x630 [ 152.570383][ T8609] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.570400][ T8609] ? __lock_acquire+0x6b5/0x2cf0 [ 152.570431][ T8609] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 152.570466][ T8609] ? __fget_files+0x2a/0x420 [ 152.570485][ T8609] ? __fget_files+0x2a/0x420 [ 152.570500][ T8609] ? __fget_files+0x3a0/0x420 [ 152.570513][ T8609] ? __fget_files+0x2a/0x420 [ 152.570533][ T8609] security_file_ioctl+0xc3/0x2a0 [ 152.570554][ T8609] __se_sys_ioctl+0x47/0x170 [ 152.570576][ T8609] do_syscall_64+0x14d/0xf80 [ 152.570595][ T8609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.570611][ T8609] ? trace_irq_disable+0x37/0x100 [ 152.570628][ T8609] ? clear_bhb_loop+0x40/0x90 [ 152.570647][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.570664][ T8609] RIP: 0033:0x7fe4bc59c629 [ 152.570679][ T8609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.570692][ T8609] RSP: 002b:00007fe4bd3fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.570709][ T8609] RAX: ffffffffffffffda RBX: 00007fe4bc816180 RCX: 00007fe4bc59c629 [ 152.570720][ T8609] RDX: 00002000000001c0 RSI: 0000000000005452 RDI: 0000000000000004 [ 152.570729][ T8609] RBP: 00007fe4bd3fc090 R08: 0000000000000000 R09: 0000000000000000 [ 152.570738][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.570755][ T8609] R13: 00007fe4bc816218 R14: 00007fe4bc816180 R15: 00007ffc1799bca8 [ 152.570781][ T8609] [ 152.570788][ T8609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.739038][ T3543] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.916094][ T3543] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.995297][ T3543] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.007017][ T3543] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.038325][ T6520] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.048651][ T6520] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.178384][ T6516] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.206584][ T6516] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.511311][ T8641] Cannot find del_set index 0 as target [ 153.723016][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 153.756234][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 153.781452][ T8649] xt_CT: No such helper "snmp_trap" [ 153.873408][ T8649] lo speed is unknown, defaulting to 1000 [ 154.074590][ T8670] netlink: 'syz.0.864': attribute type 10 has an invalid length. [ 154.182763][ T8672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.865'. [ 154.194165][ T8672] netlink: 64 bytes leftover after parsing attributes in process `syz.1.865'. [ 154.926852][ T8698] lo speed is unknown, defaulting to 1000 [ 155.078070][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 155.227813][ T8725] Bluetooth: MGMT ver 1.23 [ 155.274988][ T8727] delete_channel: no stack [ 155.471864][ T8737] FAULT_INJECTION: forcing a failure. [ 155.471864][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 155.500725][ T8737] CPU: 1 UID: 0 PID: 8737 Comm: syz.2.881 Not tainted syzkaller #0 PREEMPT(full) [ 155.500751][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.500762][ T8737] Call Trace: [ 155.500769][ T8737] [ 155.500777][ T8737] dump_stack_lvl+0xe8/0x150 [ 155.500803][ T8737] should_fail_ex+0x412/0x560 [ 155.500831][ T8737] should_failslab+0xa8/0x100 [ 155.500856][ T8737] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 155.500877][ T8737] ? __alloc_skb+0x186/0x7d0 [ 155.500894][ T8737] ? __alloc_skb+0x1d0/0x7d0 [ 155.500909][ T8737] ? __local_bh_enable_ip+0xd0/0x130 [ 155.500933][ T8737] __alloc_skb+0x1d0/0x7d0 [ 155.500956][ T8737] pfkey_sendmsg+0xd42/0x1120 [ 155.500987][ T8737] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 155.501027][ T8737] ? aa_sock_msg_perm+0xf1/0x1b0 [ 155.501051][ T8737] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.501074][ T8737] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 155.501089][ T8737] ____sys_sendmsg+0xa68/0xad0 [ 155.501109][ T8737] ? __might_fault+0xaf/0x130 [ 155.501135][ T8737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.501163][ T8737] ? import_iovec+0x73/0xa0 [ 155.501184][ T8737] ___sys_sendmsg+0x2a5/0x360 [ 155.501202][ T8737] ? __lock_acquire+0x6b5/0x2cf0 [ 155.501225][ T8737] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.501242][ T8737] ? __lock_acquire+0x6b5/0x2cf0 [ 155.501264][ T8737] ? kstrtouint+0x6e/0xe0 [ 155.501323][ T8737] __sys_sendmmsg+0x27c/0x4e0 [ 155.501347][ T8737] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.501366][ T8737] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 155.501409][ T8737] ? ksys_write+0x242/0x270 [ 155.501431][ T8737] ? __pfx_ksys_write+0x10/0x10 [ 155.501457][ T8737] __x64_sys_sendmmsg+0xa0/0xc0 [ 155.501479][ T8737] do_syscall_64+0x14d/0xf80 [ 155.501499][ T8737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.501515][ T8737] ? trace_irq_disable+0x37/0x100 [ 155.501532][ T8737] ? clear_bhb_loop+0x40/0x90 [ 155.501553][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.501569][ T8737] RIP: 0033:0x7f7a6a19c629 [ 155.501585][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.501600][ T8737] RSP: 002b:00007f7a6afa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.501619][ T8737] RAX: ffffffffffffffda RBX: 00007f7a6a415fa0 RCX: 00007f7a6a19c629 [ 155.501632][ T8737] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 155.501643][ T8737] RBP: 00007f7a6afa7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.501660][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.501670][ T8737] R13: 00007f7a6a416038 R14: 00007f7a6a415fa0 R15: 00007ffe3b16b5e8 [ 155.501698][ T8737] [ 155.986193][ T8751] netlink: 48 bytes leftover after parsing attributes in process `syz.2.883'. [ 156.422090][ T8763] FAULT_INJECTION: forcing a failure. [ 156.422090][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 156.434796][ T8763] CPU: 1 UID: 0 PID: 8763 Comm: syz.3.890 Not tainted syzkaller #0 PREEMPT(full) [ 156.434829][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.434839][ T8763] Call Trace: [ 156.434846][ T8763] [ 156.434853][ T8763] dump_stack_lvl+0xe8/0x150 [ 156.434881][ T8763] should_fail_ex+0x412/0x560 [ 156.434908][ T8763] should_failslab+0xa8/0x100 [ 156.434930][ T8763] ? skb_clone+0x212/0x3a0 [ 156.434951][ T8763] kmem_cache_alloc_noprof+0x87/0x650 [ 156.434974][ T8763] ? skb_pull_rcsum+0x234/0x3f0 [ 156.434996][ T8763] skb_clone+0x212/0x3a0 [ 156.435014][ T8763] ? packet_rcv_spkt+0x117/0x5c0 [ 156.435037][ T8763] packet_rcv_spkt+0x139/0x5c0 [ 156.435060][ T8763] __netif_receive_skb_core+0xb86/0x3150 [ 156.435081][ T8763] ? is_bpf_text_address+0x26/0x2b0 [ 156.435107][ T8763] ? is_bpf_text_address+0x292/0x2b0 [ 156.435132][ T8763] ? kernel_text_address+0xa5/0xe0 [ 156.435157][ T8763] ? unwind_get_return_address+0x4d/0x90 [ 156.435177][ T8763] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 156.435204][ T8763] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 156.435229][ T8763] ? stack_trace_save+0xa9/0x100 [ 156.435253][ T8763] ? __lock_acquire+0x6b5/0x2cf0 [ 156.435280][ T8763] ? kasan_save_track+0x4f/0x80 [ 156.435298][ T8763] ? kasan_save_track+0x3e/0x80 [ 156.435315][ T8763] ? __kasan_slab_alloc+0x6c/0x80 [ 156.435333][ T8763] ? kmem_cache_alloc_bulk_noprof+0x570/0x7e0 [ 156.435364][ T8763] __netif_receive_skb_list_core+0x24d/0x810 [ 156.435395][ T8763] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 156.435424][ T8763] netif_receive_skb_list_internal+0x995/0xcf0 [ 156.435453][ T8763] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 156.435478][ T8763] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 156.435512][ T8763] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 156.435540][ T8763] netif_receive_skb_list+0x54/0x410 [ 156.435566][ T8763] bpf_test_run_xdp_live+0x1946/0x1cf0 [ 156.435601][ T8763] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 156.435629][ T8763] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 156.435669][ T8763] ? 0xffffffffa0205110 [ 156.435711][ T8763] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 156.435740][ T8763] ? _copy_from_user+0x94/0xb0 [ 156.435759][ T8763] ? bpf_test_init+0x113/0x150 [ 156.435773][ T8763] ? xdp_convert_md_to_buff+0x5b/0x330 [ 156.435793][ T8763] bpf_prog_test_run_xdp+0x81c/0x1160 [ 156.435827][ T8763] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 156.435850][ T8763] ? __fget_files+0x2a/0x420 [ 156.435872][ T8763] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 156.435891][ T8763] bpf_prog_test_run+0x2c7/0x340 [ 156.435916][ T8763] __sys_bpf+0x643/0x950 [ 156.435938][ T8763] ? __pfx___sys_bpf+0x10/0x10 [ 156.435974][ T8763] ? ksys_write+0x242/0x270 [ 156.435996][ T8763] ? __pfx_ksys_write+0x10/0x10 [ 156.436024][ T8763] __x64_sys_bpf+0x7c/0x90 [ 156.436042][ T8763] do_syscall_64+0x14d/0xf80 [ 156.436063][ T8763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.436079][ T8763] ? trace_irq_disable+0x37/0x100 [ 156.436096][ T8763] ? clear_bhb_loop+0x40/0x90 [ 156.436116][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.436133][ T8763] RIP: 0033:0x7f7d0a59c629 [ 156.436149][ T8763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.436164][ T8763] RSP: 002b:00007f7d0b417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.436183][ T8763] RAX: ffffffffffffffda RBX: 00007f7d0a815fa0 RCX: 00007f7d0a59c629 [ 156.436196][ T8763] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 156.436207][ T8763] RBP: 00007f7d0b417090 R08: 0000000000000000 R09: 0000000000000000 [ 156.436218][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.436228][ T8763] R13: 00007f7d0a816038 R14: 00007f7d0a815fa0 R15: 00007ffcda9e3ee8 [ 156.436259][ T8763] [ 156.908650][ T8773] netlink: 88 bytes leftover after parsing attributes in process `syz.0.892'. [ 157.465322][ T8797] trusted_key: syz.2.896 sent an empty control message without MSG_MORE. [ 157.602526][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 157.771583][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.898'. [ 158.021262][ T8829] Cannot find del_set index 1 as target [ 158.110496][ T8833] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.136596][ T8833] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.250284][ T8833] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.294312][ T8833] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.444199][ T8833] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.472591][ T8833] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.539863][ T8833] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.560614][ T8833] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.749693][ T8853] syzkaller0: entered promiscuous mode [ 158.769604][ T8853] syzkaller0: entered allmulticast mode [ 158.895457][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 158.909818][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 160.087859][ T8879] macvtap0: entered promiscuous mode [ 160.159677][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.181983][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.248768][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.269092][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.281711][ T8892] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 160.291545][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 160.321442][ T8892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.914'. [ 160.422849][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 160.443957][ T8833] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.479703][ T8833] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.741275][ T8833] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.776420][ T8833] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.124690][ T8935] netlink: 'syz.1.922': attribute type 13 has an invalid length. [ 161.147105][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 161.559477][ T8957] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 161.581229][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 161.607963][ T8957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.928'. [ 162.342545][ T9006] netlink: 'syz.2.938': attribute type 4 has an invalid length. [ 162.422163][ T9011] netlink: 'syz.2.941': attribute type 2 has an invalid length. [ 162.499536][ T9014] netlink: 96 bytes leftover after parsing attributes in process `syz.2.942'. [ 162.577110][ T9016] netlink: 80 bytes leftover after parsing attributes in process `syz.1.943'. [ 162.616578][ T9017] netlink: 68 bytes leftover after parsing attributes in process `syz.1.943'. [ 162.626717][ T6518] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI [ 162.638632][ T6518] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 162.647057][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 162.656606][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.666666][ T6518] Workqueue: krds_cp_wq#2/0 rds_connect_worker [ 162.672842][ T6518] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 162.679724][ T6518] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 162.699341][ T6518] RSP: 0018:ffffc9001a417320 EFLAGS: 00010202 [ 162.705425][ T6518] RAX: 0000000000000007 RBX: 0000000000000039 RCX: ffff88801ff71e40 [ 162.713435][ T6518] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 162.721415][ T6518] RBP: 0000000080000000 R08: ffff88801ff71e40 R09: 0000000000000003 [ 162.729398][ T6518] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000 [ 162.737380][ T6518] R13: 0000000000000000 R14: ffff888057901c58 R15: ffffffffffffffff [ 162.745369][ T6518] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 162.754314][ T6518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.760912][ T6518] CR2: 0000200000a5c000 CR3: 0000000078cd8000 CR4: 00000000003526f0 [ 162.768902][ T6518] Call Trace: [ 162.772190][ T6518] [ 162.775133][ T6518] ? ip_route_output_key_hash+0xd8/0x2a0 [ 162.780784][ T6518] ip_route_output_key_hash+0x18d/0x2a0 [ 162.786347][ T6518] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 162.792424][ T6518] ip_route_output_flow+0x2a/0x150 [ 162.797524][ T6518] ? security_sk_classify_flow+0x6d/0x150 [ 162.803232][ T6518] tcp_v4_connect+0x81e/0x1a90 [ 162.808029][ T6518] ? lock_acquire+0x106/0x330 [ 162.812698][ T6518] ? __pfx_tcp_v4_connect+0x10/0x10 [ 162.817894][ T6518] ? __local_bh_enable_ip+0xd0/0x130 [ 162.823177][ T6518] __inet_stream_connect+0x25a/0xdd0 [ 162.828479][ T6518] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.833509][ T6518] ? lock_sock_nested+0x6a/0x100 [ 162.838435][ T6518] ? __pfx___inet_stream_connect+0x10/0x10 [ 162.844237][ T6518] ? __local_bh_enable_ip+0xd0/0x130 [ 162.849514][ T6518] inet_stream_connect+0x66/0xa0 [ 162.854442][ T6518] kernel_connect+0x141/0x1c0 [ 162.859112][ T6518] ? __pfx_kernel_connect+0x10/0x10 [ 162.864309][ T6518] ? __local_bh_enable_ip+0xd0/0x130 [ 162.869581][ T6518] rds_tcp_conn_path_connect+0x6f6/0x930 [ 162.875211][ T6518] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 162.881354][ T6518] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 162.886723][ T6518] ? process_scheduled_works+0xa0f/0x17a0 [ 162.892443][ T6518] ? process_scheduled_works+0xa0f/0x17a0 [ 162.898173][ T6518] rds_connect_worker+0x1d8/0x290 [ 162.903194][ T6518] ? process_scheduled_works+0xa0f/0x17a0 [ 162.908906][ T6518] process_scheduled_works+0xaec/0x17a0 [ 162.914493][ T6518] ? __pfx_process_scheduled_works+0x10/0x10 [ 162.920464][ T6518] ? assign_work+0x3d5/0x5e0 [ 162.925043][ T6518] worker_thread+0xa50/0xfc0 [ 162.929629][ T6518] kthread+0x388/0x470 [ 162.933690][ T6518] ? __pfx_worker_thread+0x10/0x10 [ 162.938791][ T6518] ? __pfx_kthread+0x10/0x10 [ 162.943372][ T6518] ret_from_fork+0x51e/0xb90 [ 162.947949][ T6518] ? __pfx_ret_from_fork+0x10/0x10 [ 162.953048][ T6518] ? __switch_to+0xc7d/0x1400 [ 162.957723][ T6518] ? __pfx_kthread+0x10/0x10 [ 162.962303][ T6518] ret_from_fork_asm+0x1a/0x30 [ 162.967063][ T6518] [ 162.970070][ T6518] Modules linked in: [ 162.974710][ T6518] ---[ end trace 0000000000000000 ]--- [ 162.995866][ T6518] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 163.002809][ T6518] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 163.022450][ T6518] RSP: 0018:ffffc9001a417320 EFLAGS: 00010202 [ 163.028613][ T6518] RAX: 0000000000000007 RBX: 0000000000000039 RCX: ffff88801ff71e40 [ 163.036625][ T6518] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 163.044596][ T6518] RBP: 0000000080000000 R08: ffff88801ff71e40 R09: 0000000000000003 [ 163.052595][ T6518] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000 [ 163.060600][ T6518] R13: 0000000000000000 R14: ffff888057901c58 R15: ffffffffffffffff [ 163.068591][ T6518] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 163.077550][ T6518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.084157][ T6518] CR2: 00007fa6957ea4b8 CR3: 0000000066e8c000 CR4: 00000000003526f0 [ 163.092257][ T6518] Kernel panic - not syncing: Fatal exception [ 163.098683][ T6518] Kernel Offset: disabled [ 163.103001][ T6518] Rebooting in 86400 seconds..