last executing test programs: 4.27194299s ago: executing program 3 (id=35004): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0xffffffffffffdd86}, 0x0) 4.091590679s ago: executing program 3 (id=35007): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="14e9ec2e057e637c000000000300000095"], &(0x7f0000000080)='GPL\x00', 0x9}, 0x94) socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x290, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0x1fe0000ff], 'bridge0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x89, 0x3, 0x0, 0x12}, 0x0, 0x228, 0x290, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0xeb98, 0x101, 0x7a, 0xfffd, 0x4, 0x9, 0x0, 0x7f, 0x8, 0x78}, {0xaa}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x7, 0x2, 0x563, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xf0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x11, 0x2, 0x3, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r2, 0x5452, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, 0x0, 0xc100) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="0100800014000300020000000000f3ffffff0000000000001400010004"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 3.731331699s ago: executing program 3 (id=35018): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x8025, 0x4) r1 = socket(0x28, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001a00)="5ba0", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x4040891) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x3) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2013) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x9, 0xffe0}, {0x0, 0xffff}, {0xffe0}}}, 0x24}}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x2000400, 0x1, 0xfffffffffffffff5, 0x4, 0x401, 0x5, 0xf3d8, 0x2800000000000000, 0x8, 0x12d, 0x9, 0x1, 0x5, 0x100, 0x5]}, &(0x7f0000000240)=0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000ec0100000800000002"], 0x50) sendto$rxrpc(r1, &(0x7f0000000200)="98ed701ba543e92eb362c795caa8ca64f730d43a0bfc148951122dbe46b1ac05f9a1149a4e597564740924baacf9f62abf1dbb269b50045c81835880c4691fe7", 0x40, 0x880, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x343b02, 0x0) 3.417161523s ago: executing program 3 (id=35025): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/197, 0xc5}, {&(0x7f0000002980)=""/117, 0x75}, {&(0x7f0000002a00)=""/203, 0xcb}, {&(0x7f0000002b00)=""/183, 0xb7}], 0x5}, 0x8}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000002dc0)=""/190, 0xbe}, {&(0x7f0000002e80)=""/135, 0x87}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/33, 0x21}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/247, 0xf7}], 0x6}, 0x8}], 0x2, 0x2000, 0x0) 3.247037958s ago: executing program 2 (id=35028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="14e9ec2e057e637c000000000300000095"], &(0x7f0000000080)='GPL\x00', 0x9}, 0x94) socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x290, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0x1fe0000ff], 'bridge0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x89, 0x3, 0x0, 0x12}, 0x0, 0x228, 0x290, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0xeb98, 0x101, 0x7a, 0xfffd, 0x4, 0x9, 0x0, 0x7f, 0x8, 0x78}, {0xaa}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x7, 0x2, 0x563, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xf0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x11, 0x2, 0x3, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r2, 0x5452, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, 0x0, 0xc100) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="0100800014000300020000000000f3ffffff0000000000001400010004"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 3.075063727s ago: executing program 2 (id=35030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000020000000ee15660000"], 0x34}}, 0x44800) 3.040439045s ago: executing program 3 (id=35031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, '\x00', "4705a7b6113b967d7314f7201eb2babf", '\"\x00', "ffffffffffffffff"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x200080}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) close(r0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000030000001e1afdc86d38af5ae1f8bfa8", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085001200fcffffff18400000f9ffffff000000000000000085100000fdffffff8510"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg2\x00'}) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000200000000020900010073797a31000000002c000000030a010100000000000000000a0000030900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x17e8}}, 0x40) 2.974613982s ago: executing program 2 (id=35033): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x14b6c1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r1 = socket(0x10, 0x807, 0x3) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xc26d, 0x3, 0x9, 0xfffffffc, 0x4, {0x5, 0x2, 0xff69, 0x1, 0x7, 0xffffffff}, {0x1, 0x1, 0xb5, 0x81, 0x9, 0x1}, 0x3, 0x80, 0x6f5}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="1400128009000100766574680000000004000280"], 0x3c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="4900000014008180000000000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb09c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRES64=r9, @ANYRES16=r11, @ANYRES64=r2], 0x14}}, 0x5) unshare(0x2c060000) close(0x4) syz_open_procfs$namespace(0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x12800, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r12, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x45) socket$nl_generic(0x10, 0x3, 0x10) 2.798192325s ago: executing program 2 (id=35035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000088c4df4d62659f2d00"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e9ffffff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0", 0x13}, {&(0x7f0000000100)="05", 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.652383494s ago: executing program 2 (id=35037): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, @void, @value=0x2000000}, 0x50) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540), 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x5, 0x40, 0x7fff, {0x77359400}, {}, {0x0, 0x1}, 0x1, @can={{0x4, 0x1}, 0x2, 0x2, 0x0, 0x0, "b9b86a5b3700"}}, 0x48}, 0x1, 0x0, 0x0, 0x40885}, 0x20000800) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 1.931675506s ago: executing program 1 (id=35041): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x5e, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.856467135s ago: executing program 1 (id=35044): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = socket$pptp(0x18, 0x1, 0x2) sendfile(r1, r0, 0x0, 0xffffffff004) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x9}, 0x10}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x2100000000000000) 1.366967545s ago: executing program 1 (id=35049): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x1001d6f, 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000100)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0xfff3, 0xb}, {0xd, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x850) r1 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) ppoll(&(0x7f0000001000)=[{r3, 0x5181}], 0x1, &(0x7f0000001180), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="889fba2b90396bf2de738c6bd59df7613e24cfc7f2c324e144eca432ceda81ef866de97770886a94fd388030539bb210bbce53461c801d8178a301e217862366315577c26004ac249390", @ANYRESDEC=r2], 0x18, 0x68000000}, 0x8844) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000304020000000200000000000400", @ANYRES32=0x0, @ANYBLOB="00430000000000012400128069f9010062726964676500000000000000"], 0x44}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044) 1.186413126s ago: executing program 2 (id=35053): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x4010, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000c5b83ee6000000000000000000000000000000000000a7bf4aeb030efe55104fc5c985f6ceed85a40ea8"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) r6 = socket(0x28, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x40001) recvfrom(r5, &(0x7f00000004c0)=""/233, 0xe9, 0x40002000, &(0x7f00000005c0)=@hci={0x1f, 0x0, 0x2}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(r5, 0x800448fa, &(0x7f0000000000)="3a4da9bc2810fb3b8123087bd1c3a90a3c53dd5d8262b8fbc4e55edeea5caf5d74a0d20e6813107c11092c4b9f671a7ba95781b3195e68c443385889a3d2bc991fb68e38f08253b6ed4f11b0e49133ebdacf8a85c09050517b3c7e66f10170dbd8badd42b4b3005240027f4bce0a2048fc07ea82a742ad9bd500bca6da9b748f8113989be6bbf7e0e9abc6a990de52d52a811f5514410888e323ee958c208681ac37f674047bb944a662d24dc406468685d51106f1580dc888ad68dfc97b7f8ff77e870dac99cbd5fd32ef009ae550d158ee2df231b53d8b624a6fb17e847568a3ddf8c54759e8bdb5") ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x5411) 860.981049ms ago: executing program 3 (id=35056): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0400001800dd8d0000000000000000020000000000000600000000060015000100000008041680040401"], 0x42c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000b04fcff", 0x58}], 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, &(0x7f0000000180), r4, 0x0, 0x2000000000004, 0xa) sendto$inet(r4, &(0x7f0000000200)="34347394a7bf967f70ecc52ce644bf02020483e16e66362d96d23ec7d1562dadf6274b8000d6bc2ee551828a65d922c43b9a28278ccf78bea0bc8cff6bd14e27f26f21e633f2f296927fcf32808f1fdca180f377d7ddf0c8c181664e85c1dd7fd9469f8ede92974a29c96e70d87374d14f1581095e5ba66b5d52a6a9ede6fbf01aa1e66cb3d9e98bb2bc738c9cea8f56681354c830a1967e724760f774a367355c9e2cfed265c0c70775e50dd6e2ecee5c95ced3355a09d44250fe189b5d8630d002808e32792a68064aa34bf21fe6d9ae24c42d7ddf6c5a5b896a3f4341d7e123b6a20a", 0xe4, 0x2000c000, &(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10) 841.181335ms ago: executing program 4 (id=35057): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x4058000) 727.66319ms ago: executing program 4 (id=35058): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001900000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) listen(r1, 0xba7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)={0x24c, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TESTDATA={0x102, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x81, 0x45, "8b87a7daed23600d4ac61a67e07b47194288a4d0c30285784fd28d77398e30bb103eb0183800dbc021246eeed56c83bd6edccf10f51686a616e3380550a29f2b8ea428bbbbb7a87507c5f8813ef80100d1d3df0fb2036e6129d1b63800e5981326d66c52a4d67dd1390394e7bcda07c3770efb275ebfe9cd384c46b3c6"}, @NL80211_ATTR_TESTDATA={0xa8, 0x45, "041385c9bf8a6ac22d94427e606fb3dd409ab78878b9bbde466ff71ca4cbced4b41cae1e02ccab68d157cdc595b37cc4226f45d3923144e59df46ace55a6061f2c5f8a83b31ee4f09a37fdbdf037c1e5d6447f73e960f4962b54ea005fa3c112469d96cf9dfa34db8773cc8821c48f5a876e759bfd0d065e3b653accf91765040c4ad485d1fa6ca0665f6860025ce5b7cd0d16914fc8f147498ebcb102df79b370bb3ab9"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x240400c4}, 0x801) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000340)=@in6={0xa, 0xfffe, 0x5, @loopback, 0xfffffffc}, 0x80, 0x0}, 0xe07e872420dfaf4b) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xc7, &(0x7f0000000240)=""/199}, 0x94) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x3, 0x20}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e23, 0x8, @local, 0xf}}, 0x1, 0x0, 0x6, 0x3, 0xb, 0x9, 0xff}, &(0x7f00000002c0)=0x9c) r7 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_netfilter(r1, &(0x7f0000000b00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="500200000808010828bd7000ffdbdf2502000007e3ecd791d5733d8b09b515e8d333d74bf739e0d3766137e63a65b61afa1263d35f744f47afca93dda5979e5041d50352fdff6b65e5fa5266bce53c04003a00120059006d656d6f72792e6576656e747300000008001a000a010101b5000c00ca490c902ce2663bd5486df2679f46e7b49824b06df29c18780f6b293f7cae220ca86ebc9a19ae782da1987aa2b8aff98a7ce1a1adfc4ce199f3d84586deaa6ad4b9c838babe8b86d2df209c73e5018d9dff03b781d7519081e3970bcc3b95dd22ee7fe58bc9ced1d251cd0fa6573c51bafceb85070dfa5e2feaa360026baafa2fe6487c62861dee7359f3295e235080c66b65df3e0f4fa01df8442e0b0160186d03311dc0eb0df6ac7ef54df5865620b800000022009e800800bd00ac14141f3cfb8d664a38bbed66163b7df2ba04005f80040019800000b695e7294a85c3b146701175bed1fb6246b02fac7a3a8c1b7172be62ee1259bf590e671da0e113378b54719b5387dda89537503fa2f496d324c4b5299bf344117998825880df85ac72f3a4cae83636b28d13e5853b7fe164ddb4e09b0169c680f60b67ba33d246552aaaa20e6fd017576538821b31a93f617c6dfed08b8aadb5dcdef5c5ded44e10bc81e7d93e642d169c93e730587b36911077f2fa6c87ff44db9da5774d30a5bb4a4b8c79fe4559a421ac394667e4f739c36b96152affc391dd126f0ffabf5229c3289f950613a5f162374c1710218d41f50b0b9c6e4d44f8acc18e3673d94a939f116ecbf153edd0d63a4a12c8e9f3ab8778423f2108001a80040011001c30871979b2bdc65507fedb4355411edccccdf9665fb8f9ecab9083553eab8b00ed53b5c8fc6a41b6ff3eb90fbc04725d3c3cb15b14199ced635b5378a31e274c924d044c6f5c62996e1bd2e4724ef578365210cb0aeac6d093da1b95d462ef5a07e9e0723987fa9676d2ce0a65b2f97b903baf11f922b89d6e7307cdcb61371ead76f6b2ed5e50d55d813d821a6b3a986c390b5e8a0e116899c3dfd5903f406f45dec2bc772876f4fe06560d3c338b7e68829a310dbdef0cfd136ffc2bfd"], 0x250}, 0x1, 0x0, 0x0, 0x1}, 0x40000) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000a2700001002cbd7000fedbdf2407000000ab", @ANYRES32=r8, @ANYBLOB="0c000180060002000a0000000c0001800500060034000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010402400000ffdbdf24fffbffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000002400128009000100766c616ef3ffffff14000280100004800c000100030000003d00000014000300766c616effa1d663fa2f68300000000000000000000000f35ab0d9918481b4318ab49491b0774e1e2eda020bd991b592ed9db28a74bd68920e7de77528a1f573e873a9370a863388904a7888208dd4cba7da1cb37f1ccd048e7453e1ee102199c29fc7acfdd01e7340dc2ebee035e258e1c4abc176aa8f1d3fe44e850534e76b4d9f8475cdea7e458ff38396bfcc24626e1d8df53dfda5f31c455a643cb471aabaad23e36bc845ca8c8ca635dca42abba9a5"], 0x58}}, 0x10) 669.255914ms ago: executing program 0 (id=35059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xb}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 538.282743ms ago: executing program 0 (id=35060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x2, 0x2, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 473.915547ms ago: executing program 0 (id=35061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6d8, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3}, 0x20) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="000425bd7000fbdbdf25150000000700140029287d0008000100", @ANYRES32=0x0, @ANYBLOB="0a0014007265646972000000060014005b7d0000"], 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x40048c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}}, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5040000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d300000080e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 432.255225ms ago: executing program 4 (id=35062): r0 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001002000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x1002, &(0x7f0000002500)=""/4098, 0x41100, 0x24}, 0x94) 394.995415ms ago: executing program 4 (id=35063): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x40000, &(0x7f00000038c0)=[{&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000000980)=""/147, 0x93}], 0x7}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x2030, 0x0) 380.908479ms ago: executing program 0 (id=35064): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x2c020400) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056000000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r4, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f87efe478a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xa4}, 0x1, 0x0, 0x0, 0x480d4}, 0x40) 272.596388ms ago: executing program 0 (id=35065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000008000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fc000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 228.139166ms ago: executing program 4 (id=35066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x4) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, '\x00', "4705a7b6113b967d7314f7201eb2babf", '\"\x00', "ffffffffffffffff"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x200080}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) close(r0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000030000001e1afdc86d38af5ae1f8bfa8", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085001200fcffffff18400000f9ffffff000000000000000085100000fdffffff8510"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg2\x00'}) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000200000000020900010073797a31000000002c000000030a010100000000000000000a0000030900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x17e8}}, 0x40) 227.702509ms ago: executing program 1 (id=35067): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0204000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 190.709321ms ago: executing program 0 (id=35068): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000042000000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988200000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 142.861195ms ago: executing program 1 (id=35069): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400ee7a}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400ee7a}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) (async) 104.212816ms ago: executing program 4 (id=35070): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x3) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xfffc, 0x0, @empty}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}}, 0x0, {[0x95d, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0x3}, 0x0, {[0x80000001, 0x0, 0x0, 0xffffffff, 0x8a, 0x0, 0x2, 0xffffffff]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@private0, 0x0, 0x1, 0x4e21, 0xfffe, 0xa, 0x20}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x6}, 0x7ff, 0x0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0xff}, 0x2, @in6=@loopback, 0x0, 0x1, 0x3, 0x0, 0x2}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$kcm(0x2, 0x2, 0x106) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) accept4(r4, &(0x7f0000000380)=@nl, &(0x7f0000000140)=0x80, 0x80800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 0s ago: executing program 1 (id=35071): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x3, 0xc}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) kernel console output (not intermixed with test programs): 02868][T32730] Call Trace: [ 1723.102875][T32730] [ 1723.102882][T32730] dump_stack_lvl+0xe8/0x150 [ 1723.102905][T32730] should_fail_ex+0x40c/0x560 [ 1723.102925][T32730] should_failslab+0xa8/0x100 [ 1723.102948][T32730] __kmalloc_noprof+0xe8/0x750 [ 1723.102969][T32730] ? bpf_test_init+0x9f/0x150 [ 1723.102989][T32730] ? kstrtouint+0x6e/0xe0 [ 1723.103007][T32730] bpf_test_init+0x9f/0x150 [ 1723.103028][T32730] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1723.103050][T32730] ? lock_release+0x4b/0x3c0 [ 1723.103073][T32730] ? rcu_is_watching+0x15/0xb0 [ 1723.103090][T32730] ? rcu_is_watching+0x15/0xb0 [ 1723.103106][T32730] ? lock_release+0x4b/0x3c0 [ 1723.103126][T32730] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1723.103150][T32730] ? __fget_files+0x2a/0x420 [ 1723.103170][T32730] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1723.103192][T32730] bpf_prog_test_run+0x2c5/0x340 [ 1723.103215][T32730] __sys_bpf+0x643/0x950 [ 1723.103236][T32730] ? __pfx___sys_bpf+0x10/0x10 [ 1723.103261][T32730] ? ksys_write+0x242/0x270 [ 1723.103282][T32730] ? __pfx_ksys_write+0x10/0x10 [ 1723.103303][T32730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.103319][T32730] __x64_sys_bpf+0x7c/0x90 [ 1723.103337][T32730] do_syscall_64+0x174/0x580 [ 1723.103357][T32730] ? trace_irq_disable+0x3b/0x140 [ 1723.103377][T32730] ? clear_bhb_loop+0x40/0x90 [ 1723.103395][T32730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.103412][T32730] RIP: 0033:0x7fe30eb9ce59 [ 1723.103427][T32730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.103440][T32730] RSP: 002b:00007fe30fa2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1723.103458][T32730] RAX: ffffffffffffffda RBX: 00007fe30ee15fa0 RCX: 00007fe30eb9ce59 [ 1723.103470][T32730] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 1723.103481][T32730] RBP: 00007fe30fa2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.103491][T32730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.103500][T32730] R13: 00007fe30ee16038 R14: 00007fe30ee15fa0 R15: 00007ffe46565d78 [ 1723.103519][T32730] [ 1723.581017][T32758] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1723.721747][ T301] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1723.830476][ T300] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1724.107937][ T313] tipc: Enabling of bearer rejected, failed to enable media [ 1724.206233][ T321] 8021q: adding VLAN 0 to HW filter on device bond107 [ 1724.222618][ T321] macvlan1: entered promiscuous mode [ 1724.237217][ T321] macvlan1: entered allmulticast mode [ 1724.244934][ T321] bond107: entered promiscuous mode [ 1724.252220][ T321] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1724.264207][ T321] bond107: left promiscuous mode [ 1724.619925][ T328] ±ÿ speed is unknown, defaulting to 1000 [ 1724.627369][ T328] xfrm0 speed is unknown, defaulting to 1000 [ 1724.635024][ T328] ±ÿ speed is unknown, defaulting to 1000 [ 1726.125135][ T375] syzkaller1: entered promiscuous mode [ 1726.135787][ T375] syzkaller1: entered allmulticast mode [ 1726.425051][ T382] ±ÿ speed is unknown, defaulting to 1000 [ 1726.432519][ T382] xfrm0 speed is unknown, defaulting to 1000 [ 1726.443366][ T382] ±ÿ speed is unknown, defaulting to 1000 [ 1727.193516][ T393] __nla_validate_parse: 10 callbacks suppressed [ 1727.193537][ T393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.33690'. [ 1727.272498][ T398] ±ÿ speed is unknown, defaulting to 1000 [ 1727.281043][ T400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33693'. [ 1727.293044][ T398] xfrm0 speed is unknown, defaulting to 1000 [ 1727.309144][ T398] ±ÿ speed is unknown, defaulting to 1000 [ 1727.316621][ T402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33690'. [ 1727.612698][ T414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33696'. [ 1727.662431][ T414] 8021q: adding VLAN 0 to HW filter on device bond104 [ 1727.686073][ T414] bond104: entered promiscuous mode [ 1727.691467][ T414] bond104: entered allmulticast mode [ 1727.699191][ T414] 8021q: adding VLAN 0 to HW filter on device bond104 [ 1727.708947][ T414] team0: Port device bond104 added [ 1727.726728][ T414] team0: Port device bond104 removed [ 1727.733362][ T414] bond104 (unregistering): Released all slaves [ 1727.957831][ T416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33692'. [ 1728.302656][ T431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33700'. [ 1728.980114][ T445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33705'. [ 1729.087160][ T451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33705'. [ 1729.099669][ T450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33707'. [ 1729.122574][ T448] 8021q: adding VLAN 0 to HW filter on device bond108 [ 1729.140144][ T450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.33707'. [ 1729.225455][ T448] macvlan1: entered promiscuous mode [ 1729.234569][ T448] macvlan1: entered allmulticast mode [ 1729.242017][ T448] bond108: entered promiscuous mode [ 1729.249035][ T448] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1729.253494][ T460] xt_policy: neither incoming nor outgoing policy selected [ 1729.266315][ T448] bond108: left promiscuous mode [ 1729.424978][ T472] netlink: 'syz.0.33712': attribute type 2 has an invalid length. [ 1729.443027][ T472] bond0: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1729.499955][ T477] bond119: option lp_interval: invalid value (0) [ 1729.508122][ T477] bond119: option lp_interval: allowed values 1 - 2147483647 [ 1729.518280][ T477] bond119 (unregistering): Released all slaves [ 1729.670575][ T486] net_ratelimit: 59 callbacks suppressed [ 1729.670588][ T486] openvswitch: netlink: Multiple metadata blocks provided [ 1729.820330][ T501] netlink: 'syz.1.33724': attribute type 1 has an invalid length. [ 1729.842853][ T504] bond0: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1729.886298][ T30] audit: type=1804 audit(1782251880.388:36): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.33723" name="/newroot/6896/cgroup.controllers" dev="tmpfs" ino=35012 res=1 errno=0 [ 1729.913182][ T30] audit: type=1800 audit(1782251880.418:37): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.33723" name="cgroup.controllers" dev="tmpfs" ino=35012 res=0 errno=0 [ 1729.953345][ T510] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1730.134797][ T518] tipc: Enabled bearer , priority 0 [ 1730.162623][ T518] syzkaller0: entered promiscuous mode [ 1730.180005][ T518] syzkaller0: entered allmulticast mode [ 1730.193584][ T521] netlink: 'syz.2.33731': attribute type 1 has an invalid length. [ 1730.393599][ T517] tipc: Resetting bearer [ 1730.409209][ T517] tipc: Disabling bearer [ 1730.498043][ T550] FAULT_INJECTION: forcing a failure. [ 1730.498043][ T550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.512582][ T550] CPU: 1 UID: 0 PID: 550 Comm: syz.0.33737 Not tainted syzkaller #0 PREEMPT(full) [ 1730.512607][ T550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1730.512617][ T550] Call Trace: [ 1730.512624][ T550] [ 1730.512631][ T550] dump_stack_lvl+0xe8/0x150 [ 1730.512666][ T550] should_fail_ex+0x40c/0x560 [ 1730.512687][ T550] _copy_from_user+0x2d/0xb0 [ 1730.512709][ T550] ___sys_sendmsg+0x1c6/0x360 [ 1730.512732][ T550] ? rcu_is_watching+0x15/0xb0 [ 1730.512748][ T550] ? get_pid_task+0x20/0x1f0 [ 1730.512765][ T550] ? __pfx____sys_sendmsg+0x10/0x10 [ 1730.512790][ T550] ? rcu_is_watching+0x15/0xb0 [ 1730.512819][ T550] ? __fget_files+0x2a/0x420 [ 1730.512837][ T550] ? __fget_files+0x3a2/0x420 [ 1730.512858][ T550] __x64_sys_sendmsg+0x1b1/0x290 [ 1730.512881][ T550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1730.512909][ T550] ? rcu_is_watching+0x15/0xb0 [ 1730.512925][ T550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.512942][ T550] do_syscall_64+0x174/0x580 [ 1730.512963][ T550] ? trace_irq_disable+0x3b/0x140 [ 1730.512984][ T550] ? clear_bhb_loop+0x40/0x90 [ 1730.513002][ T550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.513019][ T550] RIP: 0033:0x7eff9d99ce59 [ 1730.513035][ T550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.513049][ T550] RSP: 002b:00007eff9e8d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1730.513067][ T550] RAX: ffffffffffffffda RBX: 00007eff9dc15fa0 RCX: 00007eff9d99ce59 [ 1730.513080][ T550] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1730.513091][ T550] RBP: 00007eff9e8d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.513101][ T550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1730.513111][ T550] R13: 00007eff9dc16038 R14: 00007eff9dc15fa0 R15: 00007ffd85a0b4e8 [ 1730.513132][ T550] [ 1730.742309][ T553] tipc: Resetting bearer [ 1730.840076][ T555] FAULT_INJECTION: forcing a failure. [ 1730.840076][ T555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.851082][ T560] 8021q: adding VLAN 0 to HW filter on device bond104 [ 1730.853697][ T555] CPU: 0 UID: 0 PID: 555 Comm: syz.0.33739 Not tainted syzkaller #0 PREEMPT(full) [ 1730.853718][ T555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1730.853729][ T555] Call Trace: [ 1730.853735][ T555] [ 1730.853744][ T555] dump_stack_lvl+0xe8/0x150 [ 1730.853767][ T555] should_fail_ex+0x40c/0x560 [ 1730.853788][ T555] _copy_to_user+0x31/0xb0 [ 1730.853809][ T555] simple_read_from_buffer+0xe1/0x170 [ 1730.853829][ T555] proc_fail_nth_read+0x1bb/0x230 [ 1730.853851][ T555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1730.853872][ T555] ? rw_verify_area+0x24a/0x4c0 [ 1730.853892][ T555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1730.853909][ T555] vfs_read+0x213/0xa80 [ 1730.853930][ T555] ? __pfx___mutex_lock+0x10/0x10 [ 1730.853950][ T555] ? __pfx_vfs_read+0x10/0x10 [ 1730.853972][ T555] ? __fget_files+0x3a2/0x420 [ 1730.853988][ T555] ? __fget_files+0x2a/0x420 [ 1730.854008][ T555] ksys_read+0x150/0x270 [ 1730.854027][ T555] ? __pfx_ksys_read+0x10/0x10 [ 1730.854047][ T555] ? rcu_is_watching+0x15/0xb0 [ 1730.854065][ T555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.854081][ T555] do_syscall_64+0x174/0x580 [ 1730.854100][ T555] ? trace_irq_disable+0x3b/0x140 [ 1730.854120][ T555] ? clear_bhb_loop+0x40/0x90 [ 1730.854137][ T555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.854152][ T555] RIP: 0033:0x7eff9d95d68e [ 1730.854167][ T555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1730.854181][ T555] RSP: 002b:00007eff9e8d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1730.854199][ T555] RAX: ffffffffffffffda RBX: 00007eff9e8d96c0 RCX: 00007eff9d95d68e [ 1730.854211][ T555] RDX: 000000000000000f RSI: 00007eff9e8d90a0 RDI: 0000000000000004 [ 1730.854220][ T555] RBP: 00007eff9e8d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.854231][ T555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1730.854240][ T555] R13: 00007eff9dc16038 R14: 00007eff9dc15fa0 R15: 00007ffd85a0b4e8 [ 1730.854261][ T555] [ 1731.108832][ T565] bond104: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1731.123266][ T567] macvlan5: entered promiscuous mode [ 1731.129422][ T567] macvlan5: entered allmulticast mode [ 1731.138607][ T567] bond104: entered promiscuous mode [ 1731.169093][ T567] veth0_to_bond: entered promiscuous mode [ 1731.184247][ T570] netlink: 'syz.3.33743': attribute type 1 has an invalid length. [ 1731.190009][ T567] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1731.203784][ T567] bond104: left promiscuous mode [ 1731.210408][ T567] veth0_to_bond: left promiscuous mode [ 1731.277867][ T576] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1731.359224][ T580] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1731.737551][ T597] 8021q: adding VLAN 0 to HW filter on device bond119 [ 1731.761273][ T597] bond119: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1731.780698][ T597] macvlan3: entered promiscuous mode [ 1731.786697][ T597] macvlan3: entered allmulticast mode [ 1731.792805][ T597] bond119: entered promiscuous mode [ 1731.799320][ T597] veth0_to_bond: entered promiscuous mode [ 1731.806788][ T597] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1731.814405][ T597] bond119: left promiscuous mode [ 1731.819859][ T597] veth0_to_bond: left promiscuous mode [ 1732.116791][ T615] netlink: 'syz.0.33758': attribute type 1 has an invalid length. [ 1732.160516][ T617] 8021q: adding VLAN 0 to HW filter on device bond109 [ 1732.177131][ T617] bond109: entered promiscuous mode [ 1732.182364][ T617] bond109: entered allmulticast mode [ 1732.189315][ T617] 8021q: adding VLAN 0 to HW filter on device bond109 [ 1732.197800][ T617] team0: Port device bond109 added [ 1732.211081][ T617] team0: Port device bond109 removed [ 1732.217900][ T617] bond109 (unregistering): Released all slaves [ 1734.381678][ T582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1734.535127][ T641] openvswitch: netlink: IP tunnel dst address not specified [ 1734.629924][ T646] __nla_validate_parse: 20 callbacks suppressed [ 1734.629941][ T646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33770'. [ 1734.755144][ T649] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR [ 1734.843462][ T675] x_tables: duplicate underflow at hook 2 [ 1734.913253][ T676] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1735.541008][ T682] netlink: 'syz.2.33776': attribute type 1 has an invalid length. [ 1735.560521][ T680] ±ÿ speed is unknown, defaulting to 1000 [ 1735.568150][ T680] xfrm0 speed is unknown, defaulting to 1000 [ 1735.599774][ T682] 8021q: adding VLAN 0 to HW filter on device bond102 [ 1735.607484][ T680] ±ÿ speed is unknown, defaulting to 1000 [ 1735.618069][ T687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33779'. [ 1735.628148][ T691] bond98: (slave veth0_to_bond): Releasing backup interface [ 1735.651968][ T691] bond102: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1735.713131][ T697] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1735.727852][ T682] macvlan0: entered promiscuous mode [ 1735.736632][ T682] macvlan0: entered allmulticast mode [ 1735.744504][ T682] bond102: entered promiscuous mode [ 1735.750947][ T682] veth0_to_bond: entered promiscuous mode [ 1735.758195][ T682] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1735.767724][ T682] bond102: left promiscuous mode [ 1735.772789][ T682] veth0_to_bond: left promiscuous mode [ 1735.793508][ T702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33783'. [ 1735.929381][ T697] syzkaller0: entered promiscuous mode [ 1735.942609][ T697] syzkaller0: entered allmulticast mode [ 1735.956824][ T710] tipc: Enabling of bearer rejected, already enabled [ 1735.976764][ T710] mac80211_hwsim hwsim140 syzkaller0: entered promiscuous mode [ 1735.993888][ T710] mac80211_hwsim hwsim140 syzkaller0: entered allmulticast mode [ 1736.203144][ T728] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.33786'. [ 1736.226333][ T728] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.33786'. [ 1737.141009][ T747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33792'. [ 1737.158770][ T747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33792'. [ 1737.232480][ T749] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1737.532898][ T757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33795'. [ 1737.678817][ T768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33798'. [ 1737.871137][ T789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33805'. [ 1738.823423][ T816] TC_ACT_REPEAT abuse ? [ 1738.832217][ T815] TC_ACT_REPEAT abuse ? [ 1738.874412][ T813] tipc: Resetting bearer [ 1738.887642][ T819] ±ÿ speed is unknown, defaulting to 1000 [ 1738.894570][ T819] xfrm0 speed is unknown, defaulting to 1000 [ 1738.904320][ T819] ±ÿ speed is unknown, defaulting to 1000 [ 1739.374701][ T837] xt_hashlimit: max too large, truncated to 1048576 [ 1739.759015][ T854] syzkaller1: entered promiscuous mode [ 1739.765152][ T854] syzkaller1: entered allmulticast mode [ 1739.799508][ T854] syzkaller1: left promiscuous mode [ 1739.804859][ T854] syzkaller1: left allmulticast mode [ 1739.833092][ T859] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1739.841859][ T859] tipc: Resetting bearer [ 1739.848974][ T14] tipc: Resetting bearer [ 1739.885381][ T862] __nla_validate_parse: 1 callbacks suppressed [ 1739.885399][ T862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33831'. [ 1740.116306][ T863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.33831'. [ 1740.132414][ T877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33837'. [ 1740.444950][ T894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33843'. [ 1741.094703][ T908] ±ÿ speed is unknown, defaulting to 1000 [ 1741.101726][ T908] xfrm0 speed is unknown, defaulting to 1000 [ 1741.113585][ T908] ±ÿ speed is unknown, defaulting to 1000 [ 1741.144030][ T913] xt_hashlimit: max too large, truncated to 1048576 [ 1741.233296][ T915] netlink: 'syz.2.33850': attribute type 1 has an invalid length. [ 1741.300527][ T915] 8021q: adding VLAN 0 to HW filter on device bond103 [ 1741.394103][ T920] netlink: 'syz.2.33850': attribute type 10 has an invalid length. [ 1741.411766][ T918] bond103: (slave veth76): Enslaving as an active interface with a down link [ 1741.420739][ T920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.33850'. [ 1741.471584][ T922] netlink: 92 bytes leftover after parsing attributes in process `syz.4.33851'. [ 1741.540370][ T929] netlink: 'syz.4.33854': attribute type 1 has an invalid length. [ 1741.545052][ T926] ±ÿ speed is unknown, defaulting to 1000 [ 1741.555015][ T926] xfrm0 speed is unknown, defaulting to 1000 [ 1741.560289][ T929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33854'. [ 1741.562987][ T926] ±ÿ speed is unknown, defaulting to 1000 [ 1741.673971][ T924] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1741.684989][ T924] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.699227][ T924] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1741.750519][ T938] FAULT_INJECTION: forcing a failure. [ 1741.750519][ T938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.788110][ T938] CPU: 1 UID: 0 PID: 938 Comm: syz.4.33856 Not tainted syzkaller #0 PREEMPT(full) [ 1741.788136][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1741.788146][ T938] Call Trace: [ 1741.788152][ T938] [ 1741.788160][ T938] dump_stack_lvl+0xe8/0x150 [ 1741.788184][ T938] should_fail_ex+0x40c/0x560 [ 1741.788204][ T938] _copy_from_user+0x2d/0xb0 [ 1741.788225][ T938] __sys_sendto+0x28d/0x6c0 [ 1741.788248][ T938] ? __pfx___sys_sendto+0x10/0x10 [ 1741.788267][ T938] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 1741.788301][ T938] ? __pfx_ksys_write+0x10/0x10 [ 1741.788325][ T938] __x64_sys_sendto+0xde/0x100 [ 1741.788345][ T938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.788361][ T938] do_syscall_64+0x174/0x580 [ 1741.788381][ T938] ? clear_bhb_loop+0x40/0x90 [ 1741.788398][ T938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.788414][ T938] RIP: 0033:0x7fe30eb5d68e [ 1741.788430][ T938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1741.788453][ T938] RSP: 002b:00007fe30fa29e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1741.788472][ T938] RAX: ffffffffffffffda RBX: 00007fe30fa2b6c0 RCX: 00007fe30eb5d68e [ 1741.788484][ T938] RDX: 000000000000001c RSI: 00007fe30fa2a000 RDI: 0000000000000003 [ 1741.788495][ T938] RBP: 0000000000000000 R08: 00007fe30fa29f04 R09: 000000000000000c [ 1741.788505][ T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1741.788515][ T938] R13: 00007fe30fa29f58 R14: 00007fe30fa2a000 R15: 0000000000000000 [ 1741.788535][ T938] [ 1742.221113][ T972] ipvlan0: Caught tx_queue_len zero misconfig [ 1742.977154][ T990] netlink: 'syz.4.33865': attribute type 1 has an invalid length. [ 1743.012526][ T990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33865'. [ 1743.158656][ T1001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33869'. [ 1743.213013][ T924] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1743.224022][ T924] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.236220][ T924] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1743.317905][ T1012] netlink: 'syz.4.33871': attribute type 9 has an invalid length. [ 1743.331015][ T1012] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.33871'. [ 1743.397967][ T998] sch_tbf: burst 88 is lower than device veth79 mtu (1514) ! [ 1743.403528][ T1018] netlink: 'syz.2.33872': attribute type 2 has an invalid length. [ 1743.557417][ T1024] PKCS7: Unknown OID: [4] (bad) [ 1743.562769][ T1024] PKCS7: Only support pkcs7_signedData type [ 1744.236595][ T924] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1744.247016][ T924] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.258825][ T924] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1744.280964][ T1035] tipc: Resetting bearer [ 1744.305223][ T1038] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1744.402478][ T1052] netlink: 'syz.4.33880': attribute type 1 has an invalid length. [ 1744.583780][ T1068] IPVS: Unknown mcast interface: vcan0 [ 1744.649671][ T1073] bond102: (slave veth0_to_bond): Releasing backup interface [ 1745.283525][ T1090] __nla_validate_parse: 7 callbacks suppressed [ 1745.283561][ T1090] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.33892'. [ 1745.487107][ T924] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1745.497393][ T924] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.523223][ T924] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1745.586649][ T1092] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.33892'. [ 1745.599638][ T1100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.33894'. [ 1745.611161][ T1100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33894'. [ 1745.642461][ T1102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33895'. [ 1745.706139][ T1104] netlink: 'syz.0.33898': attribute type 1 has an invalid length. [ 1745.712760][ T1107] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.33897'. [ 1745.719396][ T1108] netlink: 'syz.2.33896': attribute type 1 has an invalid length. [ 1745.731941][ T1104] netlink: 224 bytes leftover after parsing attributes in process `syz.0.33898'. [ 1745.751907][ T1107] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.33897'. [ 1745.757994][ T1108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33896'. [ 1745.842805][ T1113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33899'. [ 1745.863489][ T370] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1745.871895][ T370] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.880715][ T370] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1745.922287][ T14] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1745.931411][ T14] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.954118][ T14] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1745.984880][ T9511] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1745.997260][ T9511] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.007726][ T9511] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1746.044324][ T9511] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1746.053081][ T9511] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.062273][ T9511] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1746.206236][ T1133] netlink: 'syz.1.33910': attribute type 1 has an invalid length. [ 1746.240044][ T1135] vxcan0: entered allmulticast mode [ 1746.387609][ T1148] 8021q: VLANs not supported on ip_vti0 [ 1746.500613][ T1160] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1746.649909][ T1165] netlink: 'syz.4.33921': attribute type 1 has an invalid length. [ 1746.788314][ T1172] openvswitch: netlink: IP tunnel dst address not specified [ 1746.841323][ T1172] netlink: 'syz.4.33926': attribute type 8 has an invalid length. [ 1746.911862][ T1178] netlink: 'syz.3.33923': attribute type 1 has an invalid length. [ 1746.951413][ T1180] pim6reg1: entered promiscuous mode [ 1746.965360][ T1180] pim6reg1: entered allmulticast mode [ 1746.997514][ T1188] xt_hashlimit: max too large, truncated to 1048576 [ 1747.154090][ T1192] netlink: 'syz.3.33923': attribute type 1 has an invalid length. [ 1747.173692][ T1192] netlink: 'syz.3.33923': attribute type 1 has an invalid length. [ 1747.183049][ T1192] netlink: 'syz.3.33923': attribute type 2 has an invalid length. [ 1747.480589][ T1216] netlink: 'syz.0.33941': attribute type 1 has an invalid length. [ 1747.520143][ T1218] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1747.556547][ T1219] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1747.573557][ T1223] PKCS7: Unknown OID: [4] (bad) [ 1747.578998][ T1223] PKCS7: Only support pkcs7_signedData type [ 1747.741362][ T1231] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1748.352700][ T1246] bond104: (slave veth0_to_bond): Releasing backup interface [ 1748.495259][ T1258] tipc: Resetting bearer [ 1748.620096][ T1258] tipc: Resetting bearer [ 1748.775807][ T1285] sch_tbf: burst 0 is lower than device tunl0 mtu (5376) ! [ 1749.130452][ T1309] PKCS7: Unknown OID: [4] (bad) [ 1749.149463][ T1309] PKCS7: Only support pkcs7_signedData type [ 1749.438707][ T1334] netlink: 'syz.2.33975': attribute type 2 has an invalid length. [ 1750.713392][ T1329] __nla_validate_parse: 9 callbacks suppressed [ 1750.713453][ T1329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.33973'. [ 1750.803499][ T1344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33976'. [ 1751.248024][ T1373] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1751.332035][ T1373] syzkaller0: entered promiscuous mode [ 1751.344149][ T1381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.33985'. [ 1751.358638][ T1381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.33985'. [ 1751.388401][ T1373] syzkaller0: entered allmulticast mode [ 1751.457666][ T1379] netlink: 'syz.4.33987': attribute type 1 has an invalid length. [ 1751.532929][ T1383] syzkaller1: entered promiscuous mode [ 1751.574498][ T1383] syzkaller1: entered allmulticast mode [ 1751.631376][ T1396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33991'. [ 1751.648515][ T1396] netlink: 112 bytes leftover after parsing attributes in process `syz.1.33991'. [ 1752.201289][ T1426] netlink: 56 bytes leftover after parsing attributes in process `syz.1.33996'. [ 1752.703154][ T1442] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.34001'. [ 1753.147094][ T4987] udevd[4987]: worker [26560] /devices/virtual/block/nbd0 is taking a long time [ 1753.450168][ T1458] bond0: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1754.099896][ T1459] tipc: Resetting bearer [ 1754.133197][ T1471] netlink: 52 bytes leftover after parsing attributes in process `syz.1.34008'. [ 1754.152984][ T1451] tipc: Resetting bearer [ 1754.312994][ T1482] netlink: 'syz.1.34012': attribute type 1 has an invalid length. [ 1754.336021][ T1482] netlink: 'syz.1.34012': attribute type 1 has an invalid length. [ 1754.719409][ T1508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34024'. [ 1754.769581][ T1508] 8021q: adding VLAN 0 to HW filter on device bond109 [ 1754.792146][ T1508] bond109: entered promiscuous mode [ 1754.798290][ T1508] bond109: entered allmulticast mode [ 1754.806529][ T1508] 8021q: adding VLAN 0 to HW filter on device bond109 [ 1754.815166][ T1508] team0: Port device bond109 added [ 1754.844995][ T1508] team0: Port device bond109 removed [ 1754.859375][ T1508] bond109 (unregistering): Released all slaves [ 1754.922634][ T1528] netlink: 'syz.3.34028': attribute type 1 has an invalid length. [ 1754.936090][ T1528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1754.984216][ T1539] FAULT_INJECTION: forcing a failure. [ 1754.984216][ T1539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.001608][ T1539] CPU: 1 UID: 0 PID: 1539 Comm: syz.0.34029 Not tainted syzkaller #0 PREEMPT(full) [ 1755.001632][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1755.001640][ T1539] Call Trace: [ 1755.001647][ T1539] [ 1755.001655][ T1539] dump_stack_lvl+0xe8/0x150 [ 1755.001678][ T1539] should_fail_ex+0x40c/0x560 [ 1755.001699][ T1539] _copy_from_user+0x2d/0xb0 [ 1755.001721][ T1539] sk_getsockopt+0x1d4/0x28b0 [ 1755.001747][ T1539] ? __pfx_sk_getsockopt+0x10/0x10 [ 1755.001769][ T1539] ? get_pid_task+0x20/0x1f0 [ 1755.001786][ T1539] ? rcu_is_watching+0x15/0xb0 [ 1755.001803][ T1539] ? get_pid_task+0x20/0x1f0 [ 1755.001820][ T1539] ? aa_sk_perm+0x6d5/0x900 [ 1755.001841][ T1539] ? __might_fault+0xaf/0x130 [ 1755.001860][ T1539] ? rcu_is_watching+0x15/0xb0 [ 1755.001875][ T1539] ? lock_acquire+0x5f/0x350 [ 1755.001898][ T1539] ? rcu_is_watching+0x15/0xb0 [ 1755.001912][ T1539] ? lock_release+0x4b/0x3c0 [ 1755.001934][ T1539] ? __might_fault+0xcb/0x130 [ 1755.001954][ T1539] do_sock_getsockopt+0x2bd/0x7e0 [ 1755.001979][ T1539] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1755.001998][ T1539] ? rcu_is_watching+0x15/0xb0 [ 1755.002016][ T1539] ? lock_release+0x4b/0x3c0 [ 1755.002039][ T1539] ? __fget_files+0x3a2/0x420 [ 1755.002056][ T1539] ? __fget_files+0x2a/0x420 [ 1755.002077][ T1539] __x64_sys_getsockopt+0x1a4/0x240 [ 1755.002101][ T1539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.002118][ T1539] do_syscall_64+0x174/0x580 [ 1755.002139][ T1539] ? trace_irq_disable+0x3b/0x140 [ 1755.002160][ T1539] ? clear_bhb_loop+0x40/0x90 [ 1755.002178][ T1539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.002194][ T1539] RIP: 0033:0x7eff9d99ce59 [ 1755.002210][ T1539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.002223][ T1539] RSP: 002b:00007eff9e8d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1755.002241][ T1539] RAX: ffffffffffffffda RBX: 00007eff9dc15fa0 RCX: 00007eff9d99ce59 [ 1755.002252][ T1539] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000003 [ 1755.002262][ T1539] RBP: 00007eff9e8d9090 R08: 00002000000002c0 R09: 0000000000000000 [ 1755.002273][ T1539] R10: 0000200000006080 R11: 0000000000000246 R12: 0000000000000001 [ 1755.002283][ T1539] R13: 00007eff9dc16038 R14: 00007eff9dc15fa0 R15: 00007ffd85a0b4e8 [ 1755.002305][ T1539] [ 1755.245047][ T14] tipc: Resetting bearer [ 1755.309656][ T1547] sch_tbf: burst 0 is lower than device tunl0 mtu (32769) ! [ 1755.490510][ T1559] netlink: 'syz.0.34037': attribute type 1 has an invalid length. [ 1755.534581][ T1561] netlink: 'syz.3.34038': attribute type 2 has an invalid length. [ 1755.547923][ T1561] veth0: entered promiscuous mode [ 1755.625082][ T1569] bond106: option fail_over_mac: invalid value (127) [ 1755.633595][ T1569] bond106 (unregistering): Released all slaves [ 1755.666384][ T1560] veth0: left promiscuous mode [ 1755.874616][ T1591] __nla_validate_parse: 38 callbacks suppressed [ 1755.874633][ T1591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34050'. [ 1755.894261][ T1591] netlink: 'syz.2.34050': attribute type 2 has an invalid length. [ 1755.918923][ T1591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34050'. [ 1756.152777][ T1612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34058'. [ 1756.354570][ T1625] bond0: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1756.564533][ T1633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34067'. [ 1756.586212][ T1633] netlink: 'syz.0.34067': attribute type 2 has an invalid length. [ 1756.605449][ T1633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34067'. [ 1756.657453][ T1633] bond0: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1756.671133][ T1643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34068'. [ 1756.672753][ T1641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34069'. [ 1756.849111][ T1647] mac80211_hwsim hwsim64 wlan0: entered promiscuous mode [ 1756.865953][ T1647] mac80211_hwsim hwsim64 wlan0: entered allmulticast mode [ 1756.938813][ T1653] xt_hashlimit: max too large, truncated to 1048576 [ 1757.239737][ T1666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.34079'. [ 1757.272718][ T1666] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1757.312765][ T1668] ±ÿ speed is unknown, defaulting to 1000 [ 1757.337878][ T1668] xfrm0 speed is unknown, defaulting to 1000 [ 1757.375434][ T1668] ±ÿ speed is unknown, defaulting to 1000 [ 1757.415320][ T1671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.34080'. [ 1757.482793][ T1673] vxcan6: entered allmulticast mode [ 1757.694667][ T1679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34082'. [ 1757.717787][ T1679] netlink: 'syz.2.34082': attribute type 2 has an invalid length. [ 1757.896288][ T1691] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1758.321880][ T1708] netlink: 'syz.1.34096': attribute type 1 has an invalid length. [ 1758.330842][ T1708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1758.345117][ T1708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1758.614808][ T1726] netlink: 'syz.2.34102': attribute type 1 has an invalid length. [ 1759.144034][ T1752] openvswitch: netlink: IP tunnel dst address not specified [ 1759.729219][ T1757] FAULT_INJECTION: forcing a failure. [ 1759.729219][ T1757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1759.745247][ T1757] CPU: 0 UID: 0 PID: 1757 Comm: syz.2.34112 Not tainted syzkaller #0 PREEMPT(full) [ 1759.745272][ T1757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1759.745281][ T1757] Call Trace: [ 1759.745288][ T1757] [ 1759.745295][ T1757] dump_stack_lvl+0xe8/0x150 [ 1759.745317][ T1757] should_fail_ex+0x40c/0x560 [ 1759.745336][ T1757] _copy_from_user+0x2d/0xb0 [ 1759.745356][ T1757] kstrtouint_from_user+0xd6/0x180 [ 1759.745372][ T1757] ? __might_fault+0xaf/0x130 [ 1759.745390][ T1757] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1759.745407][ T1757] ? __mutex_trylock_common+0x15f/0x270 [ 1759.745426][ T1757] ? vfs_write+0x22b/0xba0 [ 1759.745455][ T1757] ? rcu_is_watching+0x15/0xb0 [ 1759.745472][ T1757] proc_fail_nth_write+0x8e/0x210 [ 1759.745492][ T1757] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1759.745512][ T1757] ? preempt_count_add+0x91/0x190 [ 1759.745533][ T1757] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1759.745552][ T1757] vfs_write+0x296/0xba0 [ 1759.745575][ T1757] ? __pfx_vfs_write+0x10/0x10 [ 1759.745597][ T1757] ? __fget_files+0x3a2/0x420 [ 1759.745614][ T1757] ? __fget_files+0x2a/0x420 [ 1759.745634][ T1757] ksys_write+0x150/0x270 [ 1759.745654][ T1757] ? __pfx_ksys_write+0x10/0x10 [ 1759.745676][ T1757] ? rcu_is_watching+0x15/0xb0 [ 1759.745693][ T1757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.745710][ T1757] do_syscall_64+0x174/0x580 [ 1759.745731][ T1757] ? clear_bhb_loop+0x40/0x90 [ 1759.745749][ T1757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.745764][ T1757] RIP: 0033:0x7f759fd5d68e [ 1759.745780][ T1757] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1759.745794][ T1757] RSP: 002b:00007f75a0c92fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1759.745811][ T1757] RAX: ffffffffffffffda RBX: 00007f75a0c936c0 RCX: 00007f759fd5d68e [ 1759.745824][ T1757] RDX: 0000000000000001 RSI: 00007f75a0c930a0 RDI: 0000000000000005 [ 1759.745834][ T1757] RBP: 00007f75a0c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1759.745845][ T1757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.745855][ T1757] R13: 00007f75a0016038 R14: 00007f75a0015fa0 R15: 00007ffc84ba9f78 [ 1759.745874][ T1757] [ 1759.756806][ T1759] ip6gre6: entered promiscuous mode [ 1759.994020][ T1759] ip6gre6: entered allmulticast mode [ 1760.095148][ T1773] ±ÿ speed is unknown, defaulting to 1000 [ 1760.108186][ T1773] xfrm0 speed is unknown, defaulting to 1000 [ 1760.127681][ T1773] ±ÿ speed is unknown, defaulting to 1000 [ 1760.237065][ T1782] validate_nla: 2 callbacks suppressed [ 1760.237083][ T1782] netlink: 'syz.1.34121': attribute type 62 has an invalid length. [ 1760.709458][ T1808] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1760.892030][ T1806] ±ÿ speed is unknown, defaulting to 1000 [ 1760.918020][ T1806] xfrm0 speed is unknown, defaulting to 1000 [ 1760.941549][ T1806] ±ÿ speed is unknown, defaulting to 1000 [ 1761.381298][ T1825] FAULT_INJECTION: forcing a failure. [ 1761.381298][ T1825] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.400804][ T1825] CPU: 0 UID: 0 PID: 1825 Comm: syz.0.34132 Not tainted syzkaller #0 PREEMPT(full) [ 1761.400831][ T1825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1761.400841][ T1825] Call Trace: [ 1761.400848][ T1825] [ 1761.400856][ T1825] dump_stack_lvl+0xe8/0x150 [ 1761.400880][ T1825] should_fail_ex+0x40c/0x560 [ 1761.400900][ T1825] should_failslab+0xa8/0x100 [ 1761.400923][ T1825] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1761.400943][ T1825] ? rcu_is_watching+0x15/0xb0 [ 1761.400960][ T1825] ? __alloc_skb+0x1d7/0x7a0 [ 1761.400977][ T1825] ? trace_irq_enable+0x3b/0x140 [ 1761.400998][ T1825] __alloc_skb+0x1d7/0x7a0 [ 1761.401015][ T1825] netlink_sendmsg+0x5d4/0xb40 [ 1761.401041][ T1825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1761.401062][ T1825] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1761.401078][ T1825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1761.401096][ T1825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1761.401116][ T1825] ____sys_sendmsg+0x9b9/0xa20 [ 1761.401137][ T1825] ? irqentry_exit+0x218/0x8f0 [ 1761.401156][ T1825] ? trace_irq_disable+0x3b/0x140 [ 1761.401177][ T1825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1761.401201][ T1825] ? import_iovec+0x73/0xa0 [ 1761.401223][ T1825] ___sys_sendmsg+0x2a5/0x360 [ 1761.401243][ T1825] ? rcu_is_watching+0x15/0xb0 [ 1761.401257][ T1825] ? get_pid_task+0x20/0x1f0 [ 1761.401274][ T1825] ? __pfx____sys_sendmsg+0x10/0x10 [ 1761.401296][ T1825] ? rcu_is_watching+0x15/0xb0 [ 1761.401323][ T1825] ? __fget_files+0x2a/0x420 [ 1761.401340][ T1825] ? __fget_files+0x3a2/0x420 [ 1761.401361][ T1825] __x64_sys_sendmsg+0x1b1/0x290 [ 1761.401389][ T1825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1761.401413][ T1825] ? rcu_is_watching+0x15/0xb0 [ 1761.401429][ T1825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.401442][ T1825] do_syscall_64+0x174/0x580 [ 1761.401461][ T1825] ? clear_bhb_loop+0x40/0x90 [ 1761.401476][ T1825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.401491][ T1825] RIP: 0033:0x7eff9d99ce59 [ 1761.401506][ T1825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.401519][ T1825] RSP: 002b:00007eff9e8d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1761.401536][ T1825] RAX: ffffffffffffffda RBX: 00007eff9dc15fa0 RCX: 00007eff9d99ce59 [ 1761.401546][ T1825] RDX: 0000000024044848 RSI: 0000200000000540 RDI: 0000000000000003 [ 1761.401556][ T1825] RBP: 00007eff9e8d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.401565][ T1825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.401573][ T1825] R13: 00007eff9dc16038 R14: 00007eff9dc15fa0 R15: 00007ffd85a0b4e8 [ 1761.401591][ T1825] [ 1761.783145][ T1838] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1761.802045][ T1840] __nla_validate_parse: 10 callbacks suppressed [ 1761.802063][ T1840] netlink: 260 bytes leftover after parsing attributes in process `syz.3.34139'. [ 1761.851265][ T1834] bond119: (slave veth0_to_bond): Releasing backup interface [ 1761.991636][ T1854] netlink: 86 bytes leftover after parsing attributes in process `syz.2.34142'. [ 1762.006024][ T1834] bond50: (slave bond51): Releasing backup interface [ 1762.050136][ T1834] bond58: (slave gretap4): Releasing active interface [ 1762.078133][ T1834] bond102: (slave bridge22): Releasing backup interface [ 1762.085235][ T1834] bridge22: left promiscuous mode [ 1762.099480][ T1834] bond103: (slave bridge23): Releasing backup interface [ 1762.106762][ T1834] bond103: (slave bridge23): the permanent HWaddr of slave - d2:06:ff:33:13:4c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1762.135157][ T1834] bond103: (slave bridge24): Releasing backup interface [ 1762.165843][ T1834] team0: Port device bond107 removed [ 1762.179888][ T1834] team0: Port device bond108 removed [ 1762.188683][ T1834] bond109: (slave geneve0): Releasing active interface [ 1762.203332][ T1834] bond111: (slave bridge35): Releasing active interface [ 1762.220380][ T1834] team0: Port device bond112 removed [ 1762.228663][ T1834] bond113: (slave veth57): Releasing active interface [ 1762.246384][ T1834] bond114: (slave batadv0): Releasing active interface [ 1762.259517][ T1834] bond115: (slave veth63): Releasing active interface [ 1762.308071][ T1836] ±ÿ speed is unknown, defaulting to 1000 [ 1762.366917][T26252] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1762.409879][T26252] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1762.432228][T26252] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1762.472977][T26252] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1762.498276][ T1836] xfrm0 speed is unknown, defaulting to 1000 [ 1762.507883][ T1869] sch_tbf: burst 0 is lower than device tunl0 mtu (5376) ! [ 1762.515313][ T1872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34146'. [ 1762.559997][ T1836] ±ÿ speed is unknown, defaulting to 1000 [ 1762.644362][ T1881] xt_hashlimit: max too large, truncated to 1048576 [ 1762.729555][ T1886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34150'. [ 1762.771495][ T1890] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.34151'. [ 1762.785715][ T1886] netlink: 'syz.2.34150': attribute type 2 has an invalid length. [ 1762.804331][ T1890] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.34151'. [ 1762.814408][ T1886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34150'. [ 1762.825625][ T1890] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.34151'. [ 1762.838045][ T1890] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.34151'. [ 1762.849911][ T1890] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.34151'. [ 1763.008834][ T1896] netlink: 'syz.2.34153': attribute type 2 has an invalid length. [ 1763.145338][ T1901] vxcan0: entered allmulticast mode [ 1763.233515][ T1908] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1763.849109][ T1926] sch_tbf: burst 0 is lower than device tunl0 mtu (72) ! [ 1763.927420][ T1932] syzkaller0: entered promiscuous mode [ 1763.932942][ T1932] syzkaller0: entered allmulticast mode [ 1763.952373][ T1933] sit0: entered promiscuous mode [ 1763.958024][ T1933] sit0: entered allmulticast mode [ 1764.189331][ T1942] tun0: tun_chr_ioctl cmd 1074812118 [ 1764.212803][ T1942] tun0: tun_chr_ioctl cmd 1074033169 [ 1764.254645][ T1945] tipc: Resetting bearer [ 1764.262771][ T1945] team0: left promiscuous mode [ 1764.270138][ T1945] gtp0: left promiscuous mode [ 1764.276474][ T1945] –: left promiscuous mode [ 1764.282131][ T1945] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 1764.302229][ T1945] syzkaller1: left promiscuous mode [ 1764.327591][ T1945] syzkaller0: left promiscuous mode [ 1764.357441][ T1945] bond91: left promiscuous mode [ 1764.374576][ T1945] veth44: left promiscuous mode [ 1764.407454][ T1945] vlan0: left promiscuous mode [ 1764.412567][ T1945] bridge0: left promiscuous mode [ 1764.426907][ T1945] geneve0: left promiscuous mode [ 1764.517319][ T1945] tipc: Resetting bearer [ 1764.890224][ T2003] nbd: must specify at least one socket [ 1764.897900][ T2004] sch_tbf: burst 0 is lower than device tunl0 mtu (5376) ! [ 1765.184513][ T2020] bond4: entered allmulticast mode [ 1765.187704][ T2021] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1765.231456][ T2020] ±ÿ speed is unknown, defaulting to 1000 [ 1765.240043][ T2020] xfrm0 speed is unknown, defaulting to 1000 [ 1765.253274][ T2020] ±ÿ speed is unknown, defaulting to 1000 [ 1765.262918][ T2024] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1765.300614][ T2024] tipc: Resetting bearer [ 1765.326850][ T2024] syzkaller0: entered promiscuous mode [ 1765.839755][ T2019] bond4: left allmulticast mode [ 1766.064697][ T2045] PKCS7: Unknown OID: [4] (bad) [ 1766.077855][ T2045] PKCS7: Only support pkcs7_signedData type [ 1766.277265][ T2023] tipc: Resetting bearer [ 1766.500999][ T2065] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1766.547661][ T2070] netlink: 'syz.4.34206': attribute type 2 has an invalid length. [ 1766.570456][ T370] tipc: Resetting bearer [ 1766.712959][ T2076] team0: entered promiscuous mode [ 1766.730781][ T2076] gtp0: entered promiscuous mode [ 1766.819922][ T2080] tipc: Resetting bearer [ 1766.853583][ T2084] __nla_validate_parse: 69 callbacks suppressed [ 1766.853602][ T2084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34213'. [ 1766.878490][ T2080] syzkaller0: left promiscuous mode [ 1766.878864][ T2084] netlink: 'syz.4.34213': attribute type 2 has an invalid length. [ 1766.894414][ T2080] syzkaller0: left allmulticast mode [ 1766.896454][ T2084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.34213'. [ 1766.958621][ T2079] tipc: Resetting bearer [ 1766.976140][ T2089] xt_recent: Unsupported userspace flags (000000b1) [ 1767.102367][ T2097] netlink: 'syz.4.34219': attribute type 1 has an invalid length. [ 1767.127125][ T2097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34219'. [ 1767.167719][ T2105] netlink: 64 bytes leftover after parsing attributes in process `syz.0.34222'. [ 1767.214280][ T2108] sch_tbf: burst 0 is lower than device tunl0 mtu (72) ! [ 1767.367141][ T2123] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1767.380730][ T2124] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1767.739212][ T14] tipc: Resetting bearer [ 1767.828772][ T2131] PKCS7: Unknown OID: [4] (bad) [ 1767.839224][ T2131] PKCS7: Only support pkcs7_signedData type [ 1767.847263][ T2133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34232'. [ 1767.867604][ T2133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34232'. [ 1767.926508][ T2137] netlink: 56 bytes leftover after parsing attributes in process `syz.1.34234'. [ 1767.958653][ T2137] netlink: 'syz.1.34234': attribute type 1 has an invalid length. [ 1767.979928][ T2137] netlink: 224 bytes leftover after parsing attributes in process `syz.1.34234'. [ 1768.221009][ T2096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34204'. [ 1768.369741][ T2163] xt_hashlimit: max too large, truncated to 1048576 [ 1768.534717][ T2172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34249'. [ 1768.563534][ T2172] 8021q: adding VLAN 0 to HW filter on device bond109 [ 1768.587174][ T2172] bond109: entered promiscuous mode [ 1768.592879][ T2172] bond109: entered allmulticast mode [ 1768.604206][ T2172] 8021q: adding VLAN 0 to HW filter on device bond109 [ 1768.614270][ T2172] team0: Port device bond109 added [ 1768.634623][ T2172] team0: Port device bond109 removed [ 1768.642152][ T2172] bond109 (unregistering): Released all slaves [ 1768.880577][ T2193] ±ÿ speed is unknown, defaulting to 1000 [ 1768.889492][ T2193] xfrm0 speed is unknown, defaulting to 1000 [ 1768.897813][ T2193] ±ÿ speed is unknown, defaulting to 1000 [ 1769.077993][ T2209] PKCS7: Unknown OID: [4] (bad) [ 1769.082955][ T2209] PKCS7: Only support pkcs7_signedData type [ 1769.183432][ T2213] netlink: 'syz.2.34266': attribute type 2 has an invalid length. [ 1769.288426][ T2221] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1769.808399][ T2251] ±ÿ speed is unknown, defaulting to 1000 [ 1769.828044][ T2251] xfrm0 speed is unknown, defaulting to 1000 [ 1769.851271][ T2251] ±ÿ speed is unknown, defaulting to 1000 [ 1770.734461][ T2288] PKCS7: Unknown OID: [4] (bad) [ 1770.745437][ T2288] PKCS7: Only support pkcs7_signedData type [ 1771.011139][ T2299] bond0: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1771.066741][ T2301] netlink: 'syz.1.34294': attribute type 1 has an invalid length. [ 1771.088964][ T2301] 8021q: adding VLAN 0 to HW filter on device bond120 [ 1771.104542][ T2301] macvlan3: entered promiscuous mode [ 1771.109885][ T2301] macvlan3: entered allmulticast mode [ 1771.116499][ T2301] bond120: entered promiscuous mode [ 1771.122259][ T2301] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1771.130554][ T2301] bond120: left promiscuous mode [ 1771.893819][ T2344] __nla_validate_parse: 11 callbacks suppressed [ 1771.893837][ T2344] netlink: 56 bytes leftover after parsing attributes in process `syz.0.34308'. [ 1772.102198][ T2357] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.34314'. [ 1772.517753][ T2367] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.34314'. [ 1772.683685][ T2394] netlink: 56 bytes leftover after parsing attributes in process `syz.3.34323'. [ 1772.932589][ T2414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1773.048478][ T2425] netlink: 44 bytes leftover after parsing attributes in process `syz.1.34331'. [ 1773.137869][ T2425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34331'. [ 1773.247972][ T2421] netlink: 284 bytes leftover after parsing attributes in process `syz.0.34329'. [ 1773.294049][ T2440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34334'. [ 1773.508387][ T2453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34336'. [ 1773.527562][ T2457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34338'. [ 1774.314071][ T2470] netlink: 'syz.4.34342': attribute type 2 has an invalid length. [ 1774.638820][ T2501] xt_hashlimit: max too large, truncated to 1048576 [ 1774.955402][ T2535] netlink: 'syz.0.34363': attribute type 2 has an invalid length. [ 1775.002271][ T2540] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1775.239276][ T2564] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1775.469491][ T2578] netlink: 'syz.3.34376': attribute type 1 has an invalid length. [ 1775.515188][ T2578] mac80211_hwsim hwsim7 syzkaller1: left promiscuous mode [ 1775.527007][ T2578] mac80211_hwsim hwsim7 syzkaller1: left allmulticast mode [ 1775.762044][ T2601] PKCS7: Unknown OID: [4] (bad) [ 1775.770005][ T2601] PKCS7: Only support pkcs7_signedData type [ 1775.813416][ T2610] netlink: 'syz.0.34387': attribute type 1 has an invalid length. [ 1775.860084][ T2610] 8021q: adding VLAN 0 to HW filter on device bond109 [ 1775.877652][ T2610] macvlan3: entered promiscuous mode [ 1775.883324][ T2610] macvlan3: entered allmulticast mode [ 1775.891142][ T2610] bond109: entered promiscuous mode [ 1775.897960][ T2610] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1775.909113][ T2610] bond109: left promiscuous mode [ 1776.014238][ T2617] mac80211_hwsim hwsim140 syzkaller0: left promiscuous mode [ 1776.022291][ T2617] mac80211_hwsim hwsim140 syzkaller0: left allmulticast mode [ 1776.038276][ T2619] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1776.119238][ T2630] netlink: 'syz.2.34392': attribute type 2 has an invalid length. [ 1776.540639][ T2634] syzkaller1: left allmulticast mode [ 1776.678309][ T2654] bridge49: entered promiscuous mode [ 1776.698330][ T2654] bridge49: entered allmulticast mode [ 1776.734991][ T2677] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1776.877943][ T2690] FAULT_INJECTION: forcing a failure. [ 1776.877943][ T2690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1776.905217][ T2690] CPU: 0 UID: 0 PID: 2690 Comm: syz.1.34407 Not tainted syzkaller #0 PREEMPT(full) [ 1776.905243][ T2690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1776.905252][ T2690] Call Trace: [ 1776.905259][ T2690] [ 1776.905266][ T2690] dump_stack_lvl+0xe8/0x150 [ 1776.905293][ T2690] should_fail_ex+0x40c/0x560 [ 1776.905313][ T2690] _copy_from_user+0x2d/0xb0 [ 1776.905333][ T2690] ___sys_sendmsg+0x1c6/0x360 [ 1776.905355][ T2690] ? rcu_is_watching+0x15/0xb0 [ 1776.905377][ T2690] ? get_pid_task+0x20/0x1f0 [ 1776.905393][ T2690] ? __pfx____sys_sendmsg+0x10/0x10 [ 1776.905417][ T2690] ? rcu_is_watching+0x15/0xb0 [ 1776.905445][ T2690] ? __fget_files+0x2a/0x420 [ 1776.905467][ T2690] ? __fget_files+0x3a2/0x420 [ 1776.905486][ T2690] __x64_sys_sendmsg+0x1b1/0x290 [ 1776.905508][ T2690] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1776.905535][ T2690] ? rcu_is_watching+0x15/0xb0 [ 1776.905551][ T2690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.905568][ T2690] do_syscall_64+0x174/0x580 [ 1776.905588][ T2690] ? trace_irq_disable+0x3b/0x140 [ 1776.905608][ T2690] ? clear_bhb_loop+0x40/0x90 [ 1776.905625][ T2690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.905640][ T2690] RIP: 0033:0x7ffacc19ce59 [ 1776.905656][ T2690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.905671][ T2690] RSP: 002b:00007ffaccfef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1776.905689][ T2690] RAX: ffffffffffffffda RBX: 00007ffacc415fa0 RCX: 00007ffacc19ce59 [ 1776.905701][ T2690] RDX: 0000000004004010 RSI: 0000200000000140 RDI: 0000000000000003 [ 1776.905711][ T2690] RBP: 00007ffaccfef090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.905722][ T2690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.905732][ T2690] R13: 00007ffacc416038 R14: 00007ffacc415fa0 R15: 00007ffd7a2dd558 [ 1776.905751][ T2690] [ 1776.925688][ T2692] bond104: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1777.111321][ T2692] bond104 (unregistering): Released all slaves [ 1777.139206][ T2709] __nla_validate_parse: 22 callbacks suppressed [ 1777.139222][ T2709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34412'. [ 1777.251422][ T2714] sch_tbf: burst 0 is lower than device tunl0 mtu (5376) ! [ 1777.273963][ T2724] netlink: 244 bytes leftover after parsing attributes in process `syz.2.34415'. [ 1777.324985][ T2733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.34417'. [ 1777.334742][ T2731] xt_hashlimit: max too large, truncated to 1048576 [ 1777.357896][ T2733] ip6gre7: entered promiscuous mode [ 1777.369767][ T2733] ip6gre7: entered allmulticast mode [ 1777.408805][ T2724] tipc: Resetting bearer [ 1777.450422][ T2724] tipc: Resetting bearer [ 1777.500629][ T2746] netlink: 72 bytes leftover after parsing attributes in process `syz.0.34422'. [ 1777.510042][ T2748] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1777.510659][ T2748] tipc: Resetting bearer [ 1777.539005][ T2748] syzkaller0: entered promiscuous mode [ 1777.545287][ T2748] syzkaller0: entered allmulticast mode [ 1777.589930][ T2749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34420'. [ 1777.739521][ T2764] netlink: 44 bytes leftover after parsing attributes in process `syz.0.34426'. [ 1777.904389][ T2775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34428'. [ 1778.361774][ T2747] tipc: Resetting bearer [ 1778.478778][ T9517] tipc: Resetting bearer [ 1778.648651][ T2791] netlink: 'syz.2.34433': attribute type 1 has an invalid length. [ 1778.663067][ T2791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1778.900097][ T2806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34439'. [ 1779.000962][ T2809] netlink: 144 bytes leftover after parsing attributes in process `syz.2.34440'. [ 1779.121222][ T2806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34439'. [ 1779.340473][ T2825] syzkaller0: entered promiscuous mode [ 1779.348625][ T2825] syzkaller0: entered allmulticast mode [ 1780.362906][ T2909] sch_tbf: burst 0 is lower than device tunl0 mtu (5376) ! [ 1780.440543][ T2917] netlink: 'syz.2.34470': attribute type 4 has an invalid length. [ 1780.457620][ T2917] netlink: 'syz.2.34470': attribute type 4 has an invalid length. [ 1780.546240][ T2925] netlink: 'syz.1.34472': attribute type 1 has an invalid length. [ 1780.845730][ T2951] bond4: entered allmulticast mode [ 1780.873294][ T2951] ±ÿ speed is unknown, defaulting to 1000 [ 1780.897818][ T2951] xfrm0 speed is unknown, defaulting to 1000 [ 1780.911276][ T2951] ±ÿ speed is unknown, defaulting to 1000 [ 1781.198250][ T2983] PKCS7: Unknown OID: [4] (bad) [ 1781.203421][ T2983] PKCS7: Only support pkcs7_signedData type [ 1781.322077][ T2991] sch_tbf: burst 0 is lower than device tunl0 mtu (72) ! [ 1781.908011][ T3013] netlink: 'syz.2.34503': attribute type 89 has an invalid length. [ 1782.254589][ T3010] bond121: (slave bridge47): Enslaving as an active interface with an up link [ 1782.269292][ T3011] macvlan3: entered promiscuous mode [ 1782.274695][ T3011] macvlan3: entered allmulticast mode [ 1782.288609][ T3011] bond121: (slave macvlan3): Error -98 calling set_mac_address [ 1782.345196][ T2949] bond4: left allmulticast mode [ 1782.602794][ T3037] netlink: 'syz.0.34512': attribute type 1 has an invalid length. [ 1782.623474][ T3039] PKCS7: Unknown OID: [4] (bad) [ 1782.656383][ T3039] PKCS7: Only support pkcs7_signedData type [ 1782.663468][ T3037] 8021q: adding VLAN 0 to HW filter on device bond110 [ 1782.731772][ T3037] macvlan3: entered promiscuous mode [ 1782.745765][ T3037] macvlan3: entered allmulticast mode [ 1782.763403][ T3037] bond110: entered promiscuous mode [ 1782.779606][ T3037] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1782.793178][ T3052] __nla_validate_parse: 11 callbacks suppressed [ 1782.793197][ T3052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.34516'. [ 1782.951106][ T3061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34520'. [ 1782.960473][ T3061] netlink: 'syz.3.34520': attribute type 2 has an invalid length. [ 1782.968299][ T3061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34520'. [ 1783.529819][ T3037] bond110: left promiscuous mode [ 1783.586233][ T3064] veth0: entered promiscuous mode [ 1783.672079][ T3072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.34523'. [ 1783.686389][ T3060] veth0: left promiscuous mode [ 1783.694159][ T3072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.34523'. [ 1783.798970][ T3083] netlink: 52 bytes leftover after parsing attributes in process `syz.1.34528'. [ 1783.799822][ T3084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34529'. [ 1783.820259][ T3085] netlink: 'syz.1.34528': attribute type 61 has an invalid length. [ 1783.830482][ T3085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34528'. [ 1783.842466][ T3090] sch_tbf: burst 0 is lower than device tunl0 mtu (5376) ! [ 1783.846833][ T3084] netlink: 'syz.0.34529': attribute type 1 has an invalid length. [ 1783.906013][ T3084] bond111: entered promiscuous mode [ 1783.912216][ T3084] 8021q: adding VLAN 0 to HW filter on device bond111 [ 1783.939533][ T3098] vlan4: entered allmulticast mode [ 1783.961990][ T3098] bond111: entered allmulticast mode [ 1784.012736][ T3105] netlink: 'syz.1.34533': attribute type 1 has an invalid length. [ 1784.043158][ T3084] bond111: (slave bridge50): making interface the new active one [ 1784.084090][ T3084] bridge50: entered promiscuous mode [ 1784.101948][ T3084] bridge50: entered allmulticast mode [ 1784.113358][ T3084] bond111: (slave bridge50): Enslaving as an active interface with an up link [ 1784.160293][ T3105] 8021q: adding VLAN 0 to HW filter on device bond122 [ 1784.192898][ T3111] macvlan3: entered promiscuous mode [ 1784.206137][ T3111] macvlan3: entered allmulticast mode [ 1784.218574][ T3111] bond122: entered promiscuous mode [ 1784.234464][ T3111] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1784.261970][ T3111] bond122: left promiscuous mode [ 1784.994797][ T3148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34546'. [ 1785.381669][ T3168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34555'. [ 1785.420601][ T3168] smc: adding net device vlan1 with user defined pnetid SYZ2 [ 1785.990132][ T3168] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1786.030478][ T3182] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1786.091340][ T3189] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1786.129869][ T3189] syzkaller0: entered promiscuous mode [ 1786.136153][ T3189] syzkaller0: entered allmulticast mode [ 1786.174791][ T3199] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1788.134239][ T3243] __nla_validate_parse: 1 callbacks suppressed [ 1788.134268][ T3243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34575'. [ 1788.228454][ T3243] 8021q: adding VLAN 0 to HW filter on device bond106 [ 1788.428304][ T3270] netlink: 'syz.1.34585': attribute type 1 has an invalid length. [ 1788.481093][ T3282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34585'. [ 1788.498994][ T3270] 8021q: adding VLAN 0 to HW filter on device bond123 [ 1788.529416][ T3270] macvlan3: entered promiscuous mode [ 1788.543032][ T3270] macvlan3: entered allmulticast mode [ 1788.554943][ T3270] bond123: entered promiscuous mode [ 1788.564031][ T3270] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1788.573971][ T3270] bond123: left promiscuous mode [ 1788.619651][ T3276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34587'. [ 1789.406325][ T3316] tipc: Resetting bearer [ 1789.783779][ T3339] netlink: 'syz.2.34602': attribute type 1 has an invalid length. [ 1789.835425][ T3340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34602'. [ 1789.857696][ T3341] xt_recent: Unsupported userspace flags (000000b1) [ 1790.229638][ T3338] A link change request failed with some changes committed already. Interface 26±ÿ†ˆ¬hËdtÍ may have been left with an inconsistent configuration, please check. [ 1790.276704][ T3339] 8021q: adding VLAN 0 to HW filter on device bond104 [ 1790.309965][ T3344] macvlan0: entered promiscuous mode [ 1790.315294][ T3344] macvlan0: entered allmulticast mode [ 1790.321828][ T3344] bond104: entered promiscuous mode [ 1790.327463][ T3344] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1790.335196][ T3344] bond104: left promiscuous mode [ 1790.551124][ T3361] netlink: 'syz.1.34611': attribute type 1 has an invalid length. [ 1790.614457][ T3369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34611'. [ 1790.652826][ T3361] 8021q: adding VLAN 0 to HW filter on device bond124 [ 1790.683925][ T3376] macvlan3: entered promiscuous mode [ 1790.699906][ T3376] macvlan3: entered allmulticast mode [ 1790.717027][ T3376] bond124: entered promiscuous mode [ 1790.728932][ T3376] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1790.741554][ T3376] bond124: left promiscuous mode [ 1790.747997][ T3385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34618'. [ 1790.771042][ T3381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34619'. [ 1790.805041][ T3385] 8021q: adding VLAN 0 to HW filter on device bond107 [ 1790.864930][ T3379] bond107: entered promiscuous mode [ 1790.871398][ T3379] bond107: entered allmulticast mode [ 1790.880955][ T3379] 8021q: adding VLAN 0 to HW filter on device bond107 [ 1790.890641][ T3379] team0: Port device bond107 added [ 1790.921389][ T3385] team0: Port device bond107 removed [ 1790.929400][ T3385] bond107 (unregistering): Released all slaves [ 1790.963013][ T3399] netlink: 'syz.2.34622': attribute type 1 has an invalid length. [ 1790.985979][ T3399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34622'. [ 1791.075906][ T3410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.34626'. [ 1791.220287][ T3427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.34632'. [ 1791.264721][ T3433] netlink: 'syz.4.34635': attribute type 1 has an invalid length. [ 1791.273546][ T3433] netlink: 'syz.4.34635': attribute type 1 has an invalid length. [ 1791.299843][ T3434] PKCS7: Unknown OID: [4] (bad) [ 1791.305098][ T3434] PKCS7: Only support pkcs7_signedData type [ 1791.339640][ T3438] vxcan0: entered allmulticast mode [ 1791.444425][ T3448] netlink: 'syz.1.34639': attribute type 1 has an invalid length. [ 1791.562246][ T3443] ±ÿ†ˆ¬hËdtÍ: Caught tx_queue_len zero misconfig [ 1791.592050][ T3452] bond107: entered promiscuous mode [ 1791.606984][ T3458] tipc: Resetting bearer [ 1791.623960][ T3457] tipc: Resetting bearer [ 1791.682230][ T3372] tipc: Resetting bearer [ 1791.761649][ T3465] netlink: 'syz.4.34643': attribute type 2 has an invalid length. [ 1791.946640][ T3479] smc: adding net device vlan1 with user defined pnetid SYZ2 [ 1791.961204][ T3479] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1792.114345][ T3483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1792.204157][ T3494] netlink: 'syz.4.34652': attribute type 1 has an invalid length. [ 1792.328357][ T3502] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1792.473890][ T3508] 8021q: adding VLAN 0 to HW filter on device bond108 [ 1792.529739][ T3508] bond108: entered promiscuous mode [ 1792.535312][ T3508] bond108: entered allmulticast mode [ 1792.544211][ T3508] 8021q: adding VLAN 0 to HW filter on device bond108 [ 1792.556306][ T3508] team0: Port device bond108 added [ 1792.585266][ T3508] team0: Port device bond108 removed [ 1792.603075][ T3508] bond108 (unregistering): Released all slaves [ 1792.609277][ T3521] netlink: 'syz.1.34664': attribute type 1 has an invalid length. [ 1792.932611][ T3545] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 1793.064889][ T3553] mac80211_hwsim hwsim140 syzkaller0: entered promiscuous mode [ 1793.073307][ T3553] mac80211_hwsim hwsim140 syzkaller0: entered allmulticast mode [ 1793.195994][ T3562] ±ÿ speed is unknown, defaulting to 1000 [ 1793.203156][ T3565] tipc: Enabling of bearer rejected, already enabled [ 1793.219781][ T3562] xfrm0 speed is unknown, defaulting to 1000 [ 1793.227624][ T3562] ±ÿ speed is unknown, defaulting to 1000 [ 1793.365003][ T3578] __nla_validate_parse: 117 callbacks suppressed [ 1793.365020][ T3578] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.34684'. [ 1793.388724][ T3578] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.34684'. [ 1794.140555][ T3613] ±ÿ speed is unknown, defaulting to 1000 [ 1794.148201][ T3613] xfrm0 speed is unknown, defaulting to 1000 [ 1794.155085][ T3613] ±ÿ speed is unknown, defaulting to 1000 [ 1795.743885][ T3655] FAULT_INJECTION: forcing a failure. [ 1795.743885][ T3655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.777931][ T3655] CPU: 0 UID: 0 PID: 3655 Comm: syz.2.34710 Not tainted syzkaller #0 PREEMPT(full) [ 1795.777957][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1795.777967][ T3655] Call Trace: [ 1795.777974][ T3655] [ 1795.777982][ T3655] dump_stack_lvl+0xe8/0x150 [ 1795.778007][ T3655] should_fail_ex+0x40c/0x560 [ 1795.778029][ T3655] _copy_from_user+0x2d/0xb0 [ 1795.778050][ T3655] copy_from_sockptr_offset+0x66/0xa0 [ 1795.778162][ T3655] do_ip6t_set_ctl+0x99a/0xe30 [ 1795.778182][ T3655] ? rcu_is_watching+0x15/0xb0 [ 1795.778201][ T3655] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1795.778217][ T3655] ? rcu_is_watching+0x15/0xb0 [ 1795.778239][ T3655] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 1795.778264][ T3655] ? aa_sk_perm+0x6d5/0x900 [ 1795.778288][ T3655] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1795.778311][ T3655] ? __pfx_aa_sk_perm+0x10/0x10 [ 1795.778331][ T3655] ? lock_release+0x4b/0x3c0 [ 1795.778355][ T3655] nf_setsockopt+0x26f/0x290 [ 1795.778377][ T3655] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1795.778397][ T3655] do_sock_setsockopt+0x17c/0x1b0 [ 1795.778427][ T3655] __x64_sys_setsockopt+0x13d/0x1b0 [ 1795.778449][ T3655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.778467][ T3655] do_syscall_64+0x174/0x580 [ 1795.778488][ T3655] ? clear_bhb_loop+0x40/0x90 [ 1795.778506][ T3655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.778522][ T3655] RIP: 0033:0x7f759fd9ce59 [ 1795.778537][ T3655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.778551][ T3655] RSP: 002b:00007f75a0c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1795.778570][ T3655] RAX: ffffffffffffffda RBX: 00007f75a0015fa0 RCX: 00007f759fd9ce59 [ 1795.778582][ T3655] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1795.778593][ T3655] RBP: 00007f75a0c93090 R08: 00000000000004e8 R09: 0000000000000000 [ 1795.778604][ T3655] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1795.778615][ T3655] R13: 00007f75a0016038 R14: 00007f75a0015fa0 R15: 00007ffc84ba9f78 [ 1795.778635][ T3655] [ 1796.015077][ T3664] sch_tbf: burst 0 is lower than device tunl0 mtu (5376) ! [ 1796.402835][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34722'. [ 1796.627140][ T3700] FAULT_INJECTION: forcing a failure. [ 1796.627140][ T3700] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.657466][ T3700] CPU: 1 UID: 0 PID: 3700 Comm: syz.0.34726 Not tainted syzkaller #0 PREEMPT(full) [ 1796.657490][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1796.657500][ T3700] Call Trace: [ 1796.657507][ T3700] [ 1796.657514][ T3700] dump_stack_lvl+0xe8/0x150 [ 1796.657537][ T3700] should_fail_ex+0x40c/0x560 [ 1796.657557][ T3700] should_failslab+0xa8/0x100 [ 1796.657582][ T3700] __kvmalloc_node_noprof+0x16e/0x890 [ 1796.657605][ T3700] ? xt_alloc_table_info+0x40/0xb0 [ 1796.657706][ T3700] ? do_ip6t_set_ctl+0x96b/0xe30 [ 1796.657721][ T3700] ? translate_table+0x197/0x2040 [ 1796.657739][ T3700] translate_table+0x197/0x2040 [ 1796.657763][ T3700] ? __pfx_translate_table+0x10/0x10 [ 1796.657778][ T3700] ? __might_fault+0xaf/0x130 [ 1796.657795][ T3700] ? rcu_is_watching+0x15/0xb0 [ 1796.657812][ T3700] ? lock_acquire+0x5f/0x350 [ 1796.657834][ T3700] ? rcu_is_watching+0x15/0xb0 [ 1796.657851][ T3700] ? rcu_is_watching+0x15/0xb0 [ 1796.657867][ T3700] ? lock_release+0x4b/0x3c0 [ 1796.657886][ T3700] ? __might_fault+0xaf/0x130 [ 1796.657904][ T3700] ? __might_fault+0xcb/0x130 [ 1796.657932][ T3700] ? _copy_from_user+0x94/0xb0 [ 1796.657954][ T3700] do_ip6t_set_ctl+0xa5c/0xe30 [ 1796.657974][ T3700] ? rcu_is_watching+0x15/0xb0 [ 1796.657990][ T3700] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1796.658007][ T3700] ? rcu_is_watching+0x15/0xb0 [ 1796.658028][ T3700] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 1796.658049][ T3700] ? aa_sk_perm+0x6d5/0x900 [ 1796.658072][ T3700] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1796.658094][ T3700] ? __pfx_aa_sk_perm+0x10/0x10 [ 1796.658115][ T3700] ? lock_release+0x4b/0x3c0 [ 1796.658137][ T3700] nf_setsockopt+0x26f/0x290 [ 1796.658157][ T3700] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1796.658178][ T3700] do_sock_setsockopt+0x17c/0x1b0 [ 1796.658202][ T3700] __x64_sys_setsockopt+0x13d/0x1b0 [ 1796.658222][ T3700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.658240][ T3700] do_syscall_64+0x174/0x580 [ 1796.658259][ T3700] ? trace_irq_disable+0x3b/0x140 [ 1796.658279][ T3700] ? clear_bhb_loop+0x40/0x90 [ 1796.658297][ T3700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.658316][ T3700] RIP: 0033:0x7eff9d99ce59 [ 1796.658332][ T3700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.658345][ T3700] RSP: 002b:00007eff9e8d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1796.658364][ T3700] RAX: ffffffffffffffda RBX: 00007eff9dc15fa0 RCX: 00007eff9d99ce59 [ 1796.658376][ T3700] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1796.658387][ T3700] RBP: 00007eff9e8d9090 R08: 00000000000004e8 R09: 0000000000000000 [ 1796.658397][ T3700] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1796.658408][ T3700] R13: 00007eff9dc16038 R14: 00007eff9dc15fa0 R15: 00007ffd85a0b4e8 [ 1796.658428][ T3700] [ 1796.780869][ T3701] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1796.988937][ T3704] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1797.011250][ T3704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1797.099726][ T3711] vxcan0: entered allmulticast mode [ 1797.231599][ T3716] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 1797.330538][ T3724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.34736'. [ 1797.356031][ T3727] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1797.439528][ T3729] ±ÿ speed is unknown, defaulting to 1000 [ 1797.446327][ T3720] ±ÿ speed is unknown, defaulting to 1000 [ 1797.452594][ T3729] xfrm0 speed is unknown, defaulting to 1000 [ 1797.461052][ T3729] ±ÿ speed is unknown, defaulting to 1000 [ 1797.467723][ T3720] xfrm0 speed is unknown, defaulting to 1000 [ 1797.590290][ T3736] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1797.767428][ T3720] ±ÿ speed is unknown, defaulting to 1000 [ 1797.999518][ T3745] bridge0: port 1(batadv2) entered blocking state [ 1798.011527][ T3745] bridge0: port 1(batadv2) entered disabled state [ 1798.019215][ T3745] batadv2: entered allmulticast mode [ 1798.026476][ T3745] batadv2: entered promiscuous mode [ 1798.189606][ T3745] IPVS: Scheduler module ip_vs_ not found [ 1798.360863][ T3754] validate_nla: 103 callbacks suppressed [ 1798.360882][ T3754] netlink: 'syz.3.34739': attribute type 1 has an invalid length. [ 1798.419971][ T3763] netlink: 'syz.1.34748': attribute type 4 has an invalid length. [ 1798.434129][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34748'. [ 1798.460978][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34739'. [ 1798.518051][ T9517] batman_adv: batadv2: IGMP Querier appeared [ 1798.524192][ T9517] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1798.532143][ T3774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1798.572233][ T3754] 8021q: adding VLAN 0 to HW filter on device bond85 [ 1798.589810][ T3772] macvlan2: entered promiscuous mode [ 1798.596651][ T3772] macvlan2: entered allmulticast mode [ 1798.606423][ T3778] netlink: 'syz.1.34753': attribute type 3 has an invalid length. [ 1798.609532][ T3772] bond85: entered promiscuous mode [ 1798.615008][ T3778] netlink: 244 bytes leftover after parsing attributes in process `syz.1.34753'. [ 1798.620471][ T3772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1798.638127][ T3772] bond85: left promiscuous mode [ 1798.762179][ T3782] FAULT_INJECTION: forcing a failure. [ 1798.762179][ T3782] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.777726][ T3782] CPU: 0 UID: 0 PID: 3782 Comm: syz.0.34754 Not tainted syzkaller #0 PREEMPT(full) [ 1798.777751][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1798.777761][ T3782] Call Trace: [ 1798.777768][ T3782] [ 1798.777775][ T3782] dump_stack_lvl+0xe8/0x150 [ 1798.777798][ T3782] should_fail_ex+0x40c/0x560 [ 1798.777818][ T3782] should_failslab+0xa8/0x100 [ 1798.777841][ T3782] __kmalloc_cache_noprof+0x88/0x660 [ 1798.777862][ T3782] ? nft_trans_table_add+0x56/0x430 [ 1798.777973][ T3782] nft_trans_table_add+0x56/0x430 [ 1798.777996][ T3782] nf_tables_newtable+0xd05/0x1950 [ 1798.778024][ T3782] nfnetlink_rcv+0x1288/0x28c0 [ 1798.778044][ T3782] ? is_bpf_text_address+0x292/0x2b0 [ 1798.778082][ T3782] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1798.778106][ T3782] ? netlink_sendmsg+0x5d4/0xb40 [ 1798.778129][ T3782] ? ____sys_sendmsg+0x9b9/0xa20 [ 1798.778149][ T3782] ? ___sys_sendmsg+0x2a5/0x360 [ 1798.778169][ T3782] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1798.778204][ T3782] ? netlink_deliver_tap+0x2e/0x1b0 [ 1798.778224][ T3782] ? rcu_is_watching+0x15/0xb0 [ 1798.778249][ T3782] ? rcu_is_watching+0x15/0xb0 [ 1798.778263][ T3782] ? netlink_deliver_tap+0x2e/0x1b0 [ 1798.778284][ T3782] ? lock_release+0x4b/0x3c0 [ 1798.778307][ T3782] ? netlink_deliver_tap+0x2e/0x1b0 [ 1798.778330][ T3782] netlink_unicast+0x7bb/0x940 [ 1798.778355][ T3782] netlink_sendmsg+0x813/0xb40 [ 1798.778380][ T3782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1798.778404][ T3782] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1798.778421][ T3782] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1798.778440][ T3782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1798.778463][ T3782] ____sys_sendmsg+0x9b9/0xa20 [ 1798.778487][ T3782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1798.778510][ T3782] ? lock_release+0x4b/0x3c0 [ 1798.778531][ T3782] ? import_iovec+0x73/0xa0 [ 1798.778552][ T3782] ___sys_sendmsg+0x2a5/0x360 [ 1798.778571][ T3782] ? rcu_is_watching+0x15/0xb0 [ 1798.778585][ T3782] ? get_pid_task+0x20/0x1f0 [ 1798.778602][ T3782] ? __pfx____sys_sendmsg+0x10/0x10 [ 1798.778625][ T3782] ? rcu_is_watching+0x15/0xb0 [ 1798.778653][ T3782] ? __fget_files+0x2a/0x420 [ 1798.778670][ T3782] ? __fget_files+0x3a2/0x420 [ 1798.778691][ T3782] __x64_sys_sendmsg+0x1b1/0x290 [ 1798.778714][ T3782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1798.778817][ T3782] ? rcu_is_watching+0x15/0xb0 [ 1798.778841][ T3782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.778858][ T3782] do_syscall_64+0x174/0x580 [ 1798.778880][ T3782] ? clear_bhb_loop+0x40/0x90 [ 1798.778898][ T3782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.778914][ T3782] RIP: 0033:0x7eff9d99ce59 [ 1798.778930][ T3782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.778944][ T3782] RSP: 002b:00007eff9e8d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.778961][ T3782] RAX: ffffffffffffffda RBX: 00007eff9dc15fa0 RCX: 00007eff9d99ce59 [ 1798.778973][ T3782] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1798.778983][ T3782] RBP: 00007eff9e8d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.778993][ T3782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.779003][ T3782] R13: 00007eff9dc16038 R14: 00007eff9dc15fa0 R15: 00007ffd85a0b4e8 [ 1798.779024][ T3782] [ 1799.365439][ T3797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34760'. [ 1799.374558][ T3797] netlink: 'syz.2.34760': attribute type 2 has an invalid length. [ 1799.382393][ T3797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34760'. [ 1799.405638][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34762'. [ 1799.448760][ T3800] 8021q: adding VLAN 0 to HW filter on device bond112 [ 1799.470846][ T3800] bond112: entered promiscuous mode [ 1799.483031][ T3800] bond112: entered allmulticast mode [ 1799.498070][ T3800] 8021q: adding VLAN 0 to HW filter on device bond112 [ 1799.509357][ T3800] team0: Port device bond112 added [ 1799.533263][ T3800] team0: Port device bond112 removed [ 1799.541648][ T3800] bond112 (unregistering): Released all slaves [ 1799.653502][ T3813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34766'. [ 1799.914543][ T3837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34777'. [ 1800.109995][ T3829] tipc: Resetting bearer [ 1800.124214][ T3851] netlink: 'syz.1.34779': attribute type 1 has an invalid length. [ 1800.184931][ T3854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34779'. [ 1800.232258][ T3851] 8021q: adding VLAN 0 to HW filter on device bond125 [ 1800.260740][ T3850] macvlan3: entered promiscuous mode [ 1800.266270][ T3850] macvlan3: entered allmulticast mode [ 1800.273307][ T3850] bond125: entered promiscuous mode [ 1800.279608][ T3850] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1800.301109][ T3850] bond125: left promiscuous mode [ 1800.368381][ T3864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34781'. [ 1800.435064][ T3864] 8021q: adding VLAN 0 to HW filter on device bond86 [ 1800.485173][ T3879] bond86 (unregistering): Released all slaves [ 1800.603724][ T3871] ±ÿ speed is unknown, defaulting to 1000 [ 1800.611459][ T3871] xfrm0 speed is unknown, defaulting to 1000 [ 1800.619291][ T3871] ±ÿ speed is unknown, defaulting to 1000 [ 1800.691215][ T3882] bond4: entered allmulticast mode [ 1800.721024][ T3885] ±ÿ speed is unknown, defaulting to 1000 [ 1800.732090][ T3885] xfrm0 speed is unknown, defaulting to 1000 [ 1800.801279][ T3885] ±ÿ speed is unknown, defaulting to 1000 [ 1801.191727][ T3907] FAULT_INJECTION: forcing a failure. [ 1801.191727][ T3907] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.218456][ T3907] CPU: 0 UID: 0 PID: 3907 Comm: syz.0.34796 Not tainted syzkaller #0 PREEMPT(full) [ 1801.218479][ T3907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1801.218489][ T3907] Call Trace: [ 1801.218504][ T3907] [ 1801.218511][ T3907] dump_stack_lvl+0xe8/0x150 [ 1801.218534][ T3907] should_fail_ex+0x40c/0x560 [ 1801.218553][ T3907] should_failslab+0xa8/0x100 [ 1801.218575][ T3907] __kmalloc_cache_noprof+0x88/0x660 [ 1801.218595][ T3907] ? nft_trans_table_add+0x56/0x430 [ 1801.218618][ T3907] nft_trans_table_add+0x56/0x430 [ 1801.218639][ T3907] nf_tables_newtable+0xd05/0x1950 [ 1801.218665][ T3907] nfnetlink_rcv+0x1288/0x28c0 [ 1801.218684][ T3907] ? is_bpf_text_address+0x292/0x2b0 [ 1801.218718][ T3907] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1801.218741][ T3907] ? netlink_sendmsg+0x5d4/0xb40 [ 1801.218760][ T3907] ? ____sys_sendmsg+0x9b9/0xa20 [ 1801.218781][ T3907] ? ___sys_sendmsg+0x2a5/0x360 [ 1801.218799][ T3907] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1801.218832][ T3907] ? net_generic+0x1e/0x240 [ 1801.218850][ T3907] ? rcu_is_watching+0x15/0xb0 [ 1801.218866][ T3907] ? netlink_deliver_tap+0x2e/0x1b0 [ 1801.218886][ T3907] ? rcu_is_watching+0x15/0xb0 [ 1801.218903][ T3907] ? rcu_is_watching+0x15/0xb0 [ 1801.218918][ T3907] ? netlink_deliver_tap+0x2e/0x1b0 [ 1801.218939][ T3907] ? lock_release+0x4b/0x3c0 [ 1801.218961][ T3907] ? netlink_deliver_tap+0x2e/0x1b0 [ 1801.218985][ T3907] netlink_unicast+0x7bb/0x940 [ 1801.219008][ T3907] netlink_sendmsg+0x813/0xb40 [ 1801.219033][ T3907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1801.219055][ T3907] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1801.219073][ T3907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1801.219090][ T3907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1801.219110][ T3907] ____sys_sendmsg+0x9b9/0xa20 [ 1801.219134][ T3907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1801.219156][ T3907] ? lock_release+0x4b/0x3c0 [ 1801.219177][ T3907] ? import_iovec+0x73/0xa0 [ 1801.219199][ T3907] ___sys_sendmsg+0x2a5/0x360 [ 1801.219219][ T3907] ? rcu_is_watching+0x15/0xb0 [ 1801.219233][ T3907] ? get_pid_task+0x20/0x1f0 [ 1801.219249][ T3907] ? __pfx____sys_sendmsg+0x10/0x10 [ 1801.219272][ T3907] ? rcu_is_watching+0x15/0xb0 [ 1801.219300][ T3907] ? __fget_files+0x2a/0x420 [ 1801.219316][ T3907] ? __fget_files+0x3a2/0x420 [ 1801.219335][ T3907] __x64_sys_sendmsg+0x1b1/0x290 [ 1801.219357][ T3907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1801.219384][ T3907] ? rcu_is_watching+0x15/0xb0 [ 1801.219399][ T3907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.219415][ T3907] do_syscall_64+0x174/0x580 [ 1801.219434][ T3907] ? trace_irq_disable+0x3b/0x140 [ 1801.219452][ T3907] ? clear_bhb_loop+0x40/0x90 [ 1801.219469][ T3907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.219484][ T3907] RIP: 0033:0x7eff9d99ce59 [ 1801.219515][ T3907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.219528][ T3907] RSP: 002b:00007eff9e8d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1801.219546][ T3907] RAX: ffffffffffffffda RBX: 00007eff9dc15fa0 RCX: 00007eff9d99ce59 [ 1801.219558][ T3907] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1801.219569][ T3907] RBP: 00007eff9e8d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.219579][ T3907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1801.219588][ T3907] R13: 00007eff9dc16038 R14: 00007eff9dc15fa0 R15: 00007ffd85a0b4e8 [ 1801.219606][ T3907] [ 1801.646136][ T3921] netlink: 'syz.3.34794': attribute type 11 has an invalid length. [ 1801.654633][ T3872] bond4: left allmulticast mode [ 1801.761337][ T30] audit: type=1800 audit(1782251952.258:38): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.34800" name="memory.events" dev="tmpfs" ino=36062 res=0 errno=0 [ 1802.257933][ T3955] netlink: 'syz.4.34811': attribute type 2 has an invalid length. [ 1802.419423][ T3968] netlink: 'syz.0.34815': attribute type 1 has an invalid length. [ 1802.443146][ T3968] netlink: 'syz.0.34815': attribute type 1 has an invalid length. [ 1802.516513][ T3966] 8021q: adding VLAN 0 to HW filter on device bond126 [ 1802.526507][ T3973] tipc: Enabling of bearer rejected, already enabled [ 1802.550729][ T3975] bond126: entered promiscuous mode [ 1802.556313][ T3975] bond126: entered allmulticast mode [ 1802.568326][ T3975] 8021q: adding VLAN 0 to HW filter on device bond126 [ 1802.583868][ T3975] team0: Port device bond126 added [ 1802.675364][ T3966] team0: Port device bond126 removed [ 1802.681884][ T3966] bond126 (unregistering): Released all slaves [ 1802.932374][ T4008] netlink: 'syz.0.34827': attribute type 2 has an invalid length. [ 1802.964054][ T4012] sch_tbf: burst 0 is lower than device tunl0 mtu (5376) ! [ 1803.155056][ T4030] FAULT_INJECTION: forcing a failure. [ 1803.155056][ T4030] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.170908][ T4030] CPU: 1 UID: 0 PID: 4030 Comm: syz.1.34835 Not tainted syzkaller #0 PREEMPT(full) [ 1803.170933][ T4030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1803.170943][ T4030] Call Trace: [ 1803.170950][ T4030] [ 1803.170958][ T4030] dump_stack_lvl+0xe8/0x150 [ 1803.170981][ T4030] should_fail_ex+0x40c/0x560 [ 1803.171002][ T4030] should_failslab+0xa8/0x100 [ 1803.171025][ T4030] __kvmalloc_node_noprof+0x16e/0x890 [ 1803.171048][ T4030] ? __rhashtable_init_noprof+0x545/0xaf0 [ 1803.171068][ T4030] ? __rhashtable_init_noprof+0x129/0xaf0 [ 1803.171087][ T4030] __rhashtable_init_noprof+0x545/0xaf0 [ 1803.171108][ T4030] nft_rhash_init+0x11f/0x3c0 [ 1803.171216][ T4030] ? rcu_is_watching+0x15/0xb0 [ 1803.171233][ T4030] ? __pfx_nft_rhash_init+0x10/0x10 [ 1803.171247][ T4030] ? trace_irq_enable+0x3b/0x140 [ 1803.171267][ T4030] ? __pfx_nft_rhash_key+0x10/0x10 [ 1803.171311][ T4030] ? __pfx_nft_rhash_obj+0x10/0x10 [ 1803.171325][ T4030] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 1803.171342][ T4030] ? kfree+0x1c5/0x640 [ 1803.171358][ T4030] ? nf_tables_newset+0x13b5/0x2570 [ 1803.171380][ T4030] nf_tables_newset+0x1c1f/0x2570 [ 1803.171405][ T4030] ? __pfx_nf_tables_newset+0x10/0x10 [ 1803.171428][ T4030] ? nfnl_pernet+0x23/0x240 [ 1803.171447][ T4030] ? rcu_is_watching+0x15/0xb0 [ 1803.171465][ T4030] ? lock_release+0x4b/0x3c0 [ 1803.171490][ T4030] ? __nla_parse+0x40/0x60 [ 1803.171511][ T4030] nfnetlink_rcv+0x1288/0x28c0 [ 1803.171546][ T4030] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1803.171573][ T4030] ? ref_tracker_free+0x689/0x830 [ 1803.171602][ T4030] ? skb_clone+0x246/0x3a0 [ 1803.171618][ T4030] ? __netlink_deliver_tap+0x811/0x860 [ 1803.171641][ T4030] ? rcu_is_watching+0x15/0xb0 [ 1803.171656][ T4030] ? netlink_deliver_tap+0x2e/0x1b0 [ 1803.171677][ T4030] ? lock_release+0x4b/0x3c0 [ 1803.171699][ T4030] ? netlink_deliver_tap+0x2e/0x1b0 [ 1803.171723][ T4030] netlink_unicast+0x7bb/0x940 [ 1803.171747][ T4030] netlink_sendmsg+0x813/0xb40 [ 1803.171771][ T4030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1803.171793][ T4030] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1803.171808][ T4030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1803.171835][ T4030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1803.171857][ T4030] ____sys_sendmsg+0x9b9/0xa20 [ 1803.171882][ T4030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1803.171904][ T4030] ? lock_release+0x4b/0x3c0 [ 1803.171925][ T4030] ? import_iovec+0x73/0xa0 [ 1803.171946][ T4030] ___sys_sendmsg+0x2a5/0x360 [ 1803.171965][ T4030] ? rcu_is_watching+0x15/0xb0 [ 1803.171980][ T4030] ? get_pid_task+0x20/0x1f0 [ 1803.171996][ T4030] ? __pfx____sys_sendmsg+0x10/0x10 [ 1803.172019][ T4030] ? rcu_is_watching+0x15/0xb0 [ 1803.172045][ T4030] ? __fget_files+0x2a/0x420 [ 1803.172063][ T4030] ? __fget_files+0x3a2/0x420 [ 1803.172084][ T4030] __x64_sys_sendmsg+0x1b1/0x290 [ 1803.172105][ T4030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1803.172132][ T4030] ? rcu_is_watching+0x15/0xb0 [ 1803.172149][ T4030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.172166][ T4030] do_syscall_64+0x174/0x580 [ 1803.172186][ T4030] ? trace_irq_disable+0x3b/0x140 [ 1803.172206][ T4030] ? clear_bhb_loop+0x40/0x90 [ 1803.172224][ T4030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.172239][ T4030] RIP: 0033:0x7ffacc19ce59 [ 1803.172255][ T4030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1803.172269][ T4030] RSP: 002b:00007ffaccfef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1803.172287][ T4030] RAX: ffffffffffffffda RBX: 00007ffacc415fa0 RCX: 00007ffacc19ce59 [ 1803.172298][ T4030] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1803.172309][ T4030] RBP: 00007ffaccfef090 R08: 0000000000000000 R09: 0000000000000000 [ 1803.172319][ T4030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1803.172328][ T4030] R13: 00007ffacc416038 R14: 00007ffacc415fa0 R15: 00007ffd7a2dd558 [ 1803.172349][ T4030] [ 1803.557858][ T4035] netlink: 'syz.0.34836': attribute type 1 has an invalid length. [ 1803.567060][ T4035] __nla_validate_parse: 12 callbacks suppressed [ 1803.567087][ T4035] netlink: 96 bytes leftover after parsing attributes in process `syz.0.34836'. [ 1803.661725][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34838'. [ 1803.840952][ T4054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34841'. [ 1803.850690][ T4054] netlink: 'syz.4.34841': attribute type 2 has an invalid length. [ 1803.860322][ T4054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.34841'. [ 1803.913621][ T4060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34845'. [ 1803.923631][ T4060] netlink: 'syz.1.34845': attribute type 2 has an invalid length. [ 1803.928966][ T4061] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.34846'. [ 1803.933342][ T4060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34845'. [ 1803.961216][ T4060] veth0: entered promiscuous mode [ 1803.999350][ T4061] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.34846'. [ 1804.000949][ T4063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34847'. [ 1804.018753][ T4063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.34847'. [ 1804.053110][ T4059] veth0: left promiscuous mode [ 1804.227188][ T4083] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1804.378726][ T4092] vxcan6: entered allmulticast mode [ 1804.668831][ T4113] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1805.071857][ T4137] 8021q: adding VLAN 0 to HW filter on device bond126 [ 1805.097246][ T4137] bond126: entered promiscuous mode [ 1805.102580][ T4137] bond126: entered allmulticast mode [ 1805.115241][ T4137] 8021q: adding VLAN 0 to HW filter on device bond126 [ 1805.128304][ T4137] team0: Port device bond126 added [ 1805.159766][ T4145] FAULT_INJECTION: forcing a failure. [ 1805.159766][ T4145] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.173236][ T4145] CPU: 1 UID: 0 PID: 4145 Comm: syz.4.34877 Not tainted syzkaller #0 PREEMPT(full) [ 1805.173260][ T4145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1805.173270][ T4145] Call Trace: [ 1805.173276][ T4145] [ 1805.173284][ T4145] dump_stack_lvl+0xe8/0x150 [ 1805.173307][ T4145] should_fail_ex+0x40c/0x560 [ 1805.173337][ T4145] should_failslab+0xa8/0x100 [ 1805.173361][ T4145] __kmalloc_cache_noprof+0x88/0x660 [ 1805.173382][ T4145] ? trace_irq_enable+0x3b/0x140 [ 1805.173403][ T4145] ? __nft_trans_set_add+0x5e/0x710 [ 1805.173424][ T4145] ? __pfx_nft_rhash_obj+0x10/0x10 [ 1805.173440][ T4145] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 1805.173457][ T4145] __nft_trans_set_add+0x5e/0x710 [ 1805.173475][ T4145] ? nf_tables_newset+0x13b5/0x2570 [ 1805.173496][ T4145] nf_tables_newset+0x1d87/0x2570 [ 1805.173521][ T4145] ? __pfx_nf_tables_newset+0x10/0x10 [ 1805.173542][ T4145] ? nfnl_pernet+0x23/0x240 [ 1805.173562][ T4145] ? rcu_is_watching+0x15/0xb0 [ 1805.173582][ T4145] ? lock_release+0x4b/0x3c0 [ 1805.173605][ T4145] ? __nla_parse+0x40/0x60 [ 1805.173626][ T4145] nfnetlink_rcv+0x1288/0x28c0 [ 1805.173661][ T4145] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1805.173689][ T4145] ? ref_tracker_free+0x689/0x830 [ 1805.173717][ T4145] ? skb_clone+0x246/0x3a0 [ 1805.173734][ T4145] ? __netlink_deliver_tap+0x811/0x860 [ 1805.173757][ T4145] ? rcu_is_watching+0x15/0xb0 [ 1805.173772][ T4145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1805.173793][ T4145] ? lock_release+0x4b/0x3c0 [ 1805.173815][ T4145] ? netlink_deliver_tap+0x2e/0x1b0 [ 1805.173837][ T4145] netlink_unicast+0x7bb/0x940 [ 1805.173862][ T4145] netlink_sendmsg+0x813/0xb40 [ 1805.173887][ T4145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1805.173910][ T4145] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1805.173927][ T4145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1805.173945][ T4145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1805.173968][ T4145] ____sys_sendmsg+0x9b9/0xa20 [ 1805.173993][ T4145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1805.174019][ T4145] ? lock_release+0x4b/0x3c0 [ 1805.174041][ T4145] ? import_iovec+0x73/0xa0 [ 1805.174062][ T4145] ___sys_sendmsg+0x2a5/0x360 [ 1805.174083][ T4145] ? rcu_is_watching+0x15/0xb0 [ 1805.174098][ T4145] ? get_pid_task+0x20/0x1f0 [ 1805.174114][ T4145] ? __pfx____sys_sendmsg+0x10/0x10 [ 1805.174137][ T4145] ? rcu_is_watching+0x15/0xb0 [ 1805.174166][ T4145] ? __fget_files+0x2a/0x420 [ 1805.174183][ T4145] ? __fget_files+0x3a2/0x420 [ 1805.174205][ T4145] __x64_sys_sendmsg+0x1b1/0x290 [ 1805.174227][ T4145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1805.174255][ T4145] ? rcu_is_watching+0x15/0xb0 [ 1805.174271][ T4145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.174288][ T4145] do_syscall_64+0x174/0x580 [ 1805.174309][ T4145] ? trace_irq_disable+0x3b/0x140 [ 1805.174337][ T4145] ? clear_bhb_loop+0x40/0x90 [ 1805.174355][ T4145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.174371][ T4145] RIP: 0033:0x7fe30eb9ce59 [ 1805.174387][ T4145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1805.174401][ T4145] RSP: 002b:00007fe30fa2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1805.174420][ T4145] RAX: ffffffffffffffda RBX: 00007fe30ee15fa0 RCX: 00007fe30eb9ce59 [ 1805.174432][ T4145] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1805.174443][ T4145] RBP: 00007fe30fa2b090 R08: 0000000000000000 R09: 0000000000000000 [ 1805.174453][ T4145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1805.174464][ T4145] R13: 00007fe30ee16038 R14: 00007fe30ee15fa0 R15: 00007ffe46565d78 [ 1805.174484][ T4145] [ 1805.543158][ T4137] team0: Port device bond126 removed [ 1805.550291][ T4137] bond126 (unregistering): Released all slaves [ 1805.590227][ T4148] 8021q: adding VLAN 0 to HW filter on device bond105 [ 1805.904936][ T4170] netlink: 'syz.0.34887': attribute type 1 has an invalid length. [ 1806.500934][ T4176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1806.516725][ T4176] openvswitch: netlink: IPv4 tun info is not correct [ 1806.567377][ T4170] 8021q: adding VLAN 0 to HW filter on device bond112 [ 1806.609369][ T4173] macvlan3: entered promiscuous mode [ 1806.615050][ T4173] macvlan3: entered allmulticast mode [ 1806.624597][ T4173] bond112: entered promiscuous mode [ 1806.630919][ T4173] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1806.641518][ T4173] bond112: left promiscuous mode [ 1806.749422][ T4189] netlink: 'syz.0.34893': attribute type 2 has an invalid length. [ 1806.819772][ T4197] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1806.983189][ T4209] netlink: 'syz.0.34899': attribute type 1 has an invalid length. [ 1807.013111][ T4209] 8021q: adding VLAN 0 to HW filter on device bond113 [ 1807.097202][ T4209] macvlan3: entered promiscuous mode [ 1807.115268][ T4209] macvlan3: entered allmulticast mode [ 1807.148815][ T4209] bond113: entered promiscuous mode [ 1807.165299][ T4209] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1807.200583][ T4209] bond113: left promiscuous mode [ 1807.296687][ T4230] netlink: 'syz.2.34906': attribute type 83 has an invalid length. [ 1807.392327][ T4242] macvtap0: entered promiscuous mode [ 1807.441516][ T4245] netlink: 'syz.2.34913': attribute type 2 has an invalid length. [ 1807.533688][ T4250] vxcan0: entered allmulticast mode [ 1807.644310][ T4254] PKCS7: Unknown OID: [4] (bad) [ 1807.651019][ T4256] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1807.654795][ T4254] PKCS7: Only support pkcs7_signedData type [ 1807.710428][ T4260] netlink: 'syz.2.34920': attribute type 1 has an invalid length. [ 1807.746120][ T4260] 8021q: adding VLAN 0 to HW filter on device bond106 [ 1807.807487][ T4260] macvlan0: entered promiscuous mode [ 1807.814999][ T4260] macvlan0: entered allmulticast mode [ 1807.823314][ T4260] bond106: entered promiscuous mode [ 1807.830564][ T4260] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1807.849247][ T4260] bond106: left promiscuous mode [ 1807.990898][ T4271] 8021q: adding VLAN 0 to HW filter on device bond126 [ 1808.035806][ T4275] bond126: entered promiscuous mode [ 1808.041567][ T4275] bond126: entered allmulticast mode [ 1808.058815][ T4282] FAULT_INJECTION: forcing a failure. [ 1808.058815][ T4282] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.060775][ T4275] 8021q: adding VLAN 0 to HW filter on device bond126 [ 1808.086325][ T4275] team0: Port device bond126 added [ 1808.094692][ T4282] CPU: 1 UID: 0 PID: 4282 Comm: syz.2.34922 Not tainted syzkaller #0 PREEMPT(full) [ 1808.094716][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1808.094726][ T4282] Call Trace: [ 1808.094733][ T4282] [ 1808.094741][ T4282] dump_stack_lvl+0xe8/0x150 [ 1808.094764][ T4282] should_fail_ex+0x40c/0x560 [ 1808.094784][ T4282] should_failslab+0xa8/0x100 [ 1808.094807][ T4282] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1808.094828][ T4282] ? rcu_is_watching+0x15/0xb0 [ 1808.094844][ T4282] ? __alloc_skb+0x1d7/0x7a0 [ 1808.094862][ T4282] ? trace_irq_enable+0x3b/0x140 [ 1808.094885][ T4282] __alloc_skb+0x1d7/0x7a0 [ 1808.094906][ T4282] netlink_sendmsg+0x5d4/0xb40 [ 1808.094933][ T4282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1808.094956][ T4282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1808.094974][ T4282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1808.094992][ T4282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1808.095014][ T4282] ____sys_sendmsg+0x9b9/0xa20 [ 1808.095040][ T4282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1808.095061][ T4282] ? lock_release+0x4b/0x3c0 [ 1808.095085][ T4282] ? import_iovec+0x73/0xa0 [ 1808.095107][ T4282] ___sys_sendmsg+0x2a5/0x360 [ 1808.095128][ T4282] ? rcu_is_watching+0x15/0xb0 [ 1808.095143][ T4282] ? get_pid_task+0x20/0x1f0 [ 1808.095158][ T4282] ? __pfx____sys_sendmsg+0x10/0x10 [ 1808.095182][ T4282] ? rcu_is_watching+0x15/0xb0 [ 1808.095210][ T4282] ? __fget_files+0x2a/0x420 [ 1808.095226][ T4282] ? __fget_files+0x3a2/0x420 [ 1808.095251][ T4282] __x64_sys_sendmsg+0x1b1/0x290 [ 1808.095273][ T4282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1808.095300][ T4282] ? rcu_is_watching+0x15/0xb0 [ 1808.095317][ T4282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.095334][ T4282] do_syscall_64+0x174/0x580 [ 1808.095354][ T4282] ? trace_irq_disable+0x3b/0x140 [ 1808.095373][ T4282] ? clear_bhb_loop+0x40/0x90 [ 1808.095391][ T4282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.095407][ T4282] RIP: 0033:0x7f759fd9ce59 [ 1808.095422][ T4282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.095445][ T4282] RSP: 002b:00007f75a0c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1808.095463][ T4282] RAX: ffffffffffffffda RBX: 00007f75a0015fa0 RCX: 00007f759fd9ce59 [ 1808.095473][ T4282] RDX: 00000000200408c0 RSI: 0000200000000480 RDI: 0000000000000004 [ 1808.095483][ T4282] RBP: 00007f75a0c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.095492][ T4282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1808.095502][ T4282] R13: 00007f75a0016038 R14: 00007f75a0015fa0 R15: 00007ffc84ba9f78 [ 1808.095521][ T4282] [ 1808.360414][ T4277] team0: Port device bond126 removed [ 1808.368298][ T4277] bond126 (unregistering): Released all slaves [ 1808.779833][ T4300] xt_recent: Unsupported userspace flags (000000b1) [ 1808.849651][ T4304] __nla_validate_parse: 13 callbacks suppressed [ 1808.849671][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34931'. [ 1808.917178][ T4311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34935'. [ 1809.039946][ T4325] netlink: 'syz.4.34941': attribute type 1 has an invalid length. [ 1809.071403][ T4325] 8021q: adding VLAN 0 to HW filter on device bond108 [ 1809.082598][ T4325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.34941'. [ 1809.101024][ T4325] macvlan5: entered promiscuous mode [ 1809.107410][ T4325] macvlan5: entered allmulticast mode [ 1809.114195][ T4325] bond108: entered promiscuous mode [ 1809.120789][ T4325] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1809.133342][ T4325] bond108: left promiscuous mode [ 1809.194202][ T4337] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1809.205255][ T4337] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1809.334483][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34950'. [ 1809.354848][ T4345] netlink: 'syz.1.34950': attribute type 2 has an invalid length. [ 1809.363766][ T4345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34950'. [ 1809.374117][ T4347] FAULT_INJECTION: forcing a failure. [ 1809.374117][ T4347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1809.375271][ T4345] veth0: entered promiscuous mode [ 1809.417419][ T4347] CPU: 0 UID: 0 PID: 4347 Comm: syz.2.34951 Not tainted syzkaller #0 PREEMPT(full) [ 1809.417445][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1809.417455][ T4347] Call Trace: [ 1809.417462][ T4347] [ 1809.417469][ T4347] dump_stack_lvl+0xe8/0x150 [ 1809.417493][ T4347] should_fail_ex+0x40c/0x560 [ 1809.417514][ T4347] _copy_from_iter+0x1d3/0x1660 [ 1809.417535][ T4347] ? rcu_is_watching+0x15/0xb0 [ 1809.417555][ T4347] ? __pfx__copy_from_iter+0x10/0x10 [ 1809.417572][ T4347] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1809.417596][ T4347] ? netlink_sendmsg+0x650/0xb40 [ 1809.417619][ T4347] ? skb_put+0x112/0x210 [ 1809.417641][ T4347] netlink_sendmsg+0x6c0/0xb40 [ 1809.417667][ T4347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1809.417689][ T4347] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1809.417706][ T4347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1809.417725][ T4347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1809.417746][ T4347] ____sys_sendmsg+0x9b9/0xa20 [ 1809.417773][ T4347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1809.417795][ T4347] ? lock_release+0x4b/0x3c0 [ 1809.417819][ T4347] ? import_iovec+0x73/0xa0 [ 1809.417839][ T4347] ___sys_sendmsg+0x2a5/0x360 [ 1809.417859][ T4347] ? rcu_is_watching+0x15/0xb0 [ 1809.417874][ T4347] ? get_pid_task+0x20/0x1f0 [ 1809.417891][ T4347] ? __pfx____sys_sendmsg+0x10/0x10 [ 1809.417919][ T4347] ? trace_irq_enable+0x3b/0x140 [ 1809.417952][ T4347] ? __fget_files+0x2a/0x420 [ 1809.417970][ T4347] ? __fget_files+0x3a2/0x420 [ 1809.417991][ T4347] __x64_sys_sendmsg+0x1b1/0x290 [ 1809.418014][ T4347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1809.418042][ T4347] ? rcu_is_watching+0x15/0xb0 [ 1809.418059][ T4347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.418075][ T4347] do_syscall_64+0x174/0x580 [ 1809.418096][ T4347] ? trace_irq_disable+0x3b/0x140 [ 1809.418115][ T4347] ? clear_bhb_loop+0x40/0x90 [ 1809.418133][ T4347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.418149][ T4347] RIP: 0033:0x7f759fd9ce59 [ 1809.418166][ T4347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1809.418180][ T4347] RSP: 002b:00007f75a0c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1809.418199][ T4347] RAX: ffffffffffffffda RBX: 00007f75a0015fa0 RCX: 00007f759fd9ce59 [ 1809.418211][ T4347] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 1809.418222][ T4347] RBP: 00007f75a0c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1809.418233][ T4347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1809.418244][ T4347] R13: 00007f75a0016038 R14: 00007f75a0015fa0 R15: 00007ffc84ba9f78 [ 1809.418264][ T4347] [ 1810.140230][ T4357] FAULT_INJECTION: forcing a failure. [ 1810.140230][ T4357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1810.142625][ T4344] veth0: left promiscuous mode [ 1810.167683][ T4357] CPU: 0 UID: 0 PID: 4357 Comm: syz.2.34954 Not tainted syzkaller #0 PREEMPT(full) [ 1810.167709][ T4357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1810.167719][ T4357] Call Trace: [ 1810.167725][ T4357] [ 1810.167732][ T4357] dump_stack_lvl+0xe8/0x150 [ 1810.167755][ T4357] should_fail_ex+0x40c/0x560 [ 1810.167775][ T4357] _copy_from_iter+0x1d3/0x1660 [ 1810.167794][ T4357] ? rcu_is_watching+0x15/0xb0 [ 1810.167813][ T4357] ? __pfx__copy_from_iter+0x10/0x10 [ 1810.167830][ T4357] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1810.167852][ T4357] ? netlink_sendmsg+0x650/0xb40 [ 1810.167872][ T4357] ? skb_put+0x112/0x210 [ 1810.167892][ T4357] netlink_sendmsg+0x6c0/0xb40 [ 1810.167914][ T4357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1810.167936][ T4357] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1810.167951][ T4357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1810.167969][ T4357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1810.167990][ T4357] ____sys_sendmsg+0x9b9/0xa20 [ 1810.168014][ T4357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1810.168034][ T4357] ? lock_release+0x4b/0x3c0 [ 1810.168057][ T4357] ? import_iovec+0x73/0xa0 [ 1810.168077][ T4357] ___sys_sendmsg+0x2a5/0x360 [ 1810.168096][ T4357] ? rcu_is_watching+0x15/0xb0 [ 1810.168109][ T4357] ? get_pid_task+0x20/0x1f0 [ 1810.168123][ T4357] ? __pfx____sys_sendmsg+0x10/0x10 [ 1810.168146][ T4357] ? rcu_is_watching+0x15/0xb0 [ 1810.168173][ T4357] ? __fget_files+0x2a/0x420 [ 1810.168190][ T4357] ? __fget_files+0x3a2/0x420 [ 1810.168210][ T4357] __x64_sys_sendmsg+0x1b1/0x290 [ 1810.168232][ T4357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1810.168259][ T4357] ? rcu_is_watching+0x15/0xb0 [ 1810.168274][ T4357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.168290][ T4357] do_syscall_64+0x174/0x580 [ 1810.168310][ T4357] ? clear_bhb_loop+0x40/0x90 [ 1810.168327][ T4357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.168343][ T4357] RIP: 0033:0x7f759fd9ce59 [ 1810.168359][ T4357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1810.168373][ T4357] RSP: 002b:00007f75a0c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1810.168391][ T4357] RAX: ffffffffffffffda RBX: 00007f75a0015fa0 RCX: 00007f759fd9ce59 [ 1810.168403][ T4357] RDX: 00000000200408c0 RSI: 0000200000000480 RDI: 0000000000000004 [ 1810.168414][ T4357] RBP: 00007f75a0c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1810.168425][ T4357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1810.168435][ T4357] R13: 00007f75a0016038 R14: 00007f75a0015fa0 R15: 00007ffc84ba9f78 [ 1810.168464][ T4357] [ 1810.461956][ T4361] netlink: 36 bytes leftover after parsing attributes in process `syz.1.34956'. [ 1810.479410][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34958'. [ 1810.488630][ T4363] netlink: 'syz.2.34958': attribute type 2 has an invalid length. [ 1810.501624][ T4363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34958'. [ 1810.513206][ T4365] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.34959'. [ 1810.537246][ T4365] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.34959'. [ 1810.645094][ T4379] xt_hashlimit: max too large, truncated to 1048576 [ 1810.859380][ T4401] vxcan0: entered allmulticast mode [ 1811.147990][ T4428] FAULT_INJECTION: forcing a failure. [ 1811.147990][ T4428] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.161331][ T4428] CPU: 1 UID: 0 PID: 4428 Comm: syz.2.34981 Not tainted syzkaller #0 PREEMPT(full) [ 1811.161354][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1811.161363][ T4428] Call Trace: [ 1811.161369][ T4428] [ 1811.161386][ T4428] dump_stack_lvl+0xe8/0x150 [ 1811.161408][ T4428] should_fail_ex+0x40c/0x560 [ 1811.161427][ T4428] should_failslab+0xa8/0x100 [ 1811.161449][ T4428] __kmalloc_noprof+0xe8/0x750 [ 1811.161467][ T4428] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1811.161484][ T4428] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1811.161505][ T4428] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1811.161526][ T4428] genl_family_rcv_msg_doit+0xda/0x340 [ 1811.161544][ T4428] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1811.161564][ T4428] ? apparmor_capable+0x126/0x170 [ 1811.161582][ T4428] ? bpf_lsm_capable+0x9/0x20 [ 1811.161596][ T4428] ? security_capable+0x7e/0x2c0 [ 1811.161623][ T4428] genl_rcv_msg+0x614/0x7a0 [ 1811.161643][ T4428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1811.161659][ T4428] ? __pfx_smc_pnet_add+0x10/0x10 [ 1811.161760][ T4428] ? __netlink_lookup+0xc6/0x8b0 [ 1811.161773][ T4428] ? rcu_is_watching+0x15/0xb0 [ 1811.161792][ T4428] netlink_rcv_skb+0x226/0x4a0 [ 1811.161813][ T4428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1811.161831][ T4428] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1811.161858][ T4428] ? down_read+0x2be/0x330 [ 1811.161881][ T4428] genl_rcv+0x28/0x40 [ 1811.161897][ T4428] netlink_unicast+0x7bb/0x940 [ 1811.161922][ T4428] netlink_sendmsg+0x813/0xb40 [ 1811.161948][ T4428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1811.161971][ T4428] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1811.161987][ T4428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1811.162005][ T4428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1811.162028][ T4428] ____sys_sendmsg+0x9b9/0xa20 [ 1811.162054][ T4428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1811.162077][ T4428] ? lock_release+0x4b/0x3c0 [ 1811.162098][ T4428] ? import_iovec+0x73/0xa0 [ 1811.162120][ T4428] ___sys_sendmsg+0x2a5/0x360 [ 1811.162141][ T4428] ? rcu_is_watching+0x15/0xb0 [ 1811.162159][ T4428] ? get_pid_task+0x20/0x1f0 [ 1811.162175][ T4428] ? __pfx____sys_sendmsg+0x10/0x10 [ 1811.162199][ T4428] ? rcu_is_watching+0x15/0xb0 [ 1811.162227][ T4428] ? __fget_files+0x2a/0x420 [ 1811.162244][ T4428] ? __fget_files+0x3a2/0x420 [ 1811.162264][ T4428] __x64_sys_sendmsg+0x1b1/0x290 [ 1811.162287][ T4428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1811.162314][ T4428] ? rcu_is_watching+0x15/0xb0 [ 1811.162330][ T4428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.162347][ T4428] do_syscall_64+0x174/0x580 [ 1811.162365][ T4428] ? trace_irq_disable+0x3b/0x140 [ 1811.162392][ T4428] ? clear_bhb_loop+0x40/0x90 [ 1811.162410][ T4428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.162425][ T4428] RIP: 0033:0x7f759fd9ce59 [ 1811.162441][ T4428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.162455][ T4428] RSP: 002b:00007f75a0c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1811.162473][ T4428] RAX: ffffffffffffffda RBX: 00007f75a0015fa0 RCX: 00007f759fd9ce59 [ 1811.162485][ T4428] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 1811.162496][ T4428] RBP: 00007f75a0c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.162506][ T4428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.162515][ T4428] R13: 00007f75a0016038 R14: 00007f75a0015fa0 R15: 00007ffc84ba9f78 [ 1811.162534][ T4428] [ 1811.213275][ T4423] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1811.259386][ T4431] FAULT_INJECTION: forcing a failure. [ 1811.259386][ T4431] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.540602][ T4431] CPU: 1 UID: 0 PID: 4431 Comm: syz.2.34982 Not tainted syzkaller #0 PREEMPT(full) [ 1811.540626][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1811.540636][ T4431] Call Trace: [ 1811.540643][ T4431] [ 1811.540650][ T4431] dump_stack_lvl+0xe8/0x150 [ 1811.540674][ T4431] should_fail_ex+0x40c/0x560 [ 1811.540695][ T4431] should_failslab+0xa8/0x100 [ 1811.540719][ T4431] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1811.540740][ T4431] ? rcu_is_watching+0x15/0xb0 [ 1811.540757][ T4431] ? __alloc_skb+0x1d7/0x7a0 [ 1811.540776][ T4431] ? trace_irq_enable+0x3b/0x140 [ 1811.540798][ T4431] __alloc_skb+0x1d7/0x7a0 [ 1811.540818][ T4431] netlink_ack+0x136/0xb30 [ 1811.540839][ T4431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1811.540858][ T4431] ? __pfx___schedule+0x10/0x10 [ 1811.540902][ T4431] ? rcu_is_watching+0x15/0xb0 [ 1811.540923][ T4431] netlink_rcv_skb+0x2a4/0x4a0 [ 1811.540945][ T4431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1811.540963][ T4431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1811.540990][ T4431] ? down_read+0x2be/0x330 [ 1811.541014][ T4431] genl_rcv+0x28/0x40 [ 1811.541031][ T4431] netlink_unicast+0x7bb/0x940 [ 1811.541056][ T4431] netlink_sendmsg+0x813/0xb40 [ 1811.541082][ T4431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1811.541104][ T4431] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1811.541121][ T4431] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1811.541140][ T4431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1811.541162][ T4431] ____sys_sendmsg+0x9b9/0xa20 [ 1811.541188][ T4431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1811.541211][ T4431] ? lock_release+0x4b/0x3c0 [ 1811.541234][ T4431] ? import_iovec+0x73/0xa0 [ 1811.541256][ T4431] ___sys_sendmsg+0x2a5/0x360 [ 1811.541276][ T4431] ? rcu_is_watching+0x15/0xb0 [ 1811.541291][ T4431] ? get_pid_task+0x20/0x1f0 [ 1811.541307][ T4431] ? __pfx____sys_sendmsg+0x10/0x10 [ 1811.541331][ T4431] ? rcu_is_watching+0x15/0xb0 [ 1811.541366][ T4431] ? __fget_files+0x2a/0x420 [ 1811.541383][ T4431] ? __fget_files+0x3a2/0x420 [ 1811.541403][ T4431] __x64_sys_sendmsg+0x1b1/0x290 [ 1811.541425][ T4431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1811.541453][ T4431] ? rcu_is_watching+0x15/0xb0 [ 1811.541469][ T4431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.541486][ T4431] do_syscall_64+0x174/0x580 [ 1811.541505][ T4431] ? trace_irq_disable+0x3b/0x140 [ 1811.541525][ T4431] ? clear_bhb_loop+0x40/0x90 [ 1811.541541][ T4431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.541556][ T4431] RIP: 0033:0x7f759fd9ce59 [ 1811.541572][ T4431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.541585][ T4431] RSP: 002b:00007f75a0c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1811.541602][ T4431] RAX: ffffffffffffffda RBX: 00007f75a0015fa0 RCX: 00007f759fd9ce59 [ 1811.541615][ T4431] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1811.541624][ T4431] RBP: 00007f75a0c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.541633][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.541641][ T4431] R13: 00007f75a0016038 R14: 00007f75a0015fa0 R15: 00007ffc84ba9f78 [ 1811.541660][ T4431] [ 1812.347613][ T4462] ±ÿ speed is unknown, defaulting to 1000 [ 1812.354341][ T4462] xfrm0 speed is unknown, defaulting to 1000 [ 1812.362424][ T4462] ±ÿ speed is unknown, defaulting to 1000 [ 1813.231846][ T4496] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1813.814008][ T4504] tipc: Resetting bearer [ 1813.820661][ T4504] tipc: Resetting bearer [ 1813.828983][ T4504] tipc: Resetting bearer [ 1813.897087][ T5713] ±ÿ speed is unknown, defaulting to 1000 [ 1814.241620][ T4532] vxcan4: entered allmulticast mode [ 1814.488911][ T4552] __nla_validate_parse: 14 callbacks suppressed [ 1814.488940][ T4552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35018'. [ 1814.489715][ T4550] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1814.547791][ T4550] syzkaller0: entered promiscuous mode [ 1814.553752][ T4550] syzkaller0: entered allmulticast mode [ 1815.087197][ T4581] netlink: 32 bytes leftover after parsing attributes in process `syz.2.35030'. [ 1815.194093][ T4588] netlink: 'syz.1.35032': attribute type 1 has an invalid length. [ 1815.513266][ T4599] gretap4: entered allmulticast mode [ 1815.614502][ T4603] FAULT_INJECTION: forcing a failure. [ 1815.614502][ T4603] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.662460][ T4603] CPU: 1 UID: 0 PID: 4603 Comm: syz.1.35039 Not tainted syzkaller #0 PREEMPT(full) [ 1815.662486][ T4603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1815.662496][ T4603] Call Trace: [ 1815.662502][ T4603] [ 1815.662510][ T4603] dump_stack_lvl+0xe8/0x150 [ 1815.662533][ T4603] should_fail_ex+0x40c/0x560 [ 1815.662554][ T4603] should_failslab+0xa8/0x100 [ 1815.662576][ T4603] __kmalloc_cache_noprof+0x88/0x660 [ 1815.662596][ T4603] ? ip_set_pernet+0x23/0x240 [ 1815.662617][ T4603] ? ip_set_create+0x38f/0x1a40 [ 1815.662638][ T4603] ip_set_create+0x38f/0x1a40 [ 1815.662661][ T4603] ? rcu_is_watching+0x15/0xb0 [ 1815.662681][ T4603] ? __pfx_ip_set_create+0x10/0x10 [ 1815.662710][ T4603] ? rcu_is_watching+0x15/0xb0 [ 1815.662726][ T4603] ? lock_release+0x4b/0x3c0 [ 1815.662747][ T4603] ? __nla_parse+0x40/0x60 [ 1815.662767][ T4603] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 1815.662788][ T4603] ? unwind_get_return_address+0x4d/0x90 [ 1815.662808][ T4603] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1815.662836][ T4603] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1815.662877][ T4603] netlink_rcv_skb+0x226/0x4a0 [ 1815.662899][ T4603] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1815.662919][ T4603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1815.662944][ T4603] ? bpf_lsm_capable+0x9/0x20 [ 1815.662958][ T4603] ? security_capable+0x7e/0x2c0 [ 1815.662984][ T4603] nfnetlink_rcv+0x2b9/0x28c0 [ 1815.663004][ T4603] ? __dev_queue_xmit+0x29b/0x37f0 [ 1815.663021][ T4603] ? rcu_is_watching+0x15/0xb0 [ 1815.663037][ T4603] ? __dev_queue_xmit+0x29b/0x37f0 [ 1815.663051][ T4603] ? trace_irq_enable+0x3b/0x140 [ 1815.663070][ T4603] ? __dev_queue_xmit+0x29b/0x37f0 [ 1815.663083][ T4603] ? __dev_queue_xmit+0x29b/0x37f0 [ 1815.663097][ T4603] ? __local_bh_enable_ip+0xd0/0x130 [ 1815.663114][ T4603] ? __dev_queue_xmit+0x29b/0x37f0 [ 1815.663128][ T4603] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 1815.663142][ T4603] ? ____sys_sendmsg+0x9b9/0xa20 [ 1815.663162][ T4603] ? ___sys_sendmsg+0x2a5/0x360 [ 1815.663187][ T4603] ? __dev_queue_xmit+0x29b/0x37f0 [ 1815.663202][ T4603] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1815.663224][ T4603] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1815.663242][ T4603] ? ref_tracker_free+0x689/0x830 [ 1815.663262][ T4603] ? __pfx_ref_tracker_free+0x10/0x10 [ 1815.663282][ T4603] ? __skb_clone+0x449/0x6c0 [ 1815.663306][ T4603] ? skb_clone+0x246/0x3a0 [ 1815.663321][ T4603] ? __netlink_deliver_tap+0x811/0x860 [ 1815.663345][ T4603] ? netlink_deliver_tap+0x2e/0x1b0 [ 1815.663366][ T4603] ? rcu_is_watching+0x15/0xb0 [ 1815.663380][ T4603] ? netlink_deliver_tap+0x2e/0x1b0 [ 1815.663400][ T4603] ? lock_release+0x4b/0x3c0 [ 1815.663421][ T4603] ? netlink_deliver_tap+0x2e/0x1b0 [ 1815.663443][ T4603] netlink_unicast+0x7bb/0x940 [ 1815.663473][ T4603] netlink_sendmsg+0x813/0xb40 [ 1815.663498][ T4603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.663520][ T4603] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1815.663536][ T4603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1815.663555][ T4603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1815.663575][ T4603] ____sys_sendmsg+0x9b9/0xa20 [ 1815.663600][ T4603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1815.663620][ T4603] ? lock_release+0x4b/0x3c0 [ 1815.663640][ T4603] ? import_iovec+0x73/0xa0 [ 1815.663662][ T4603] ___sys_sendmsg+0x2a5/0x360 [ 1815.663682][ T4603] ? rcu_is_watching+0x15/0xb0 [ 1815.663696][ T4603] ? get_pid_task+0x20/0x1f0 [ 1815.663712][ T4603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1815.663735][ T4603] ? rcu_is_watching+0x15/0xb0 [ 1815.663763][ T4603] ? __fget_files+0x2a/0x420 [ 1815.663780][ T4603] ? __fget_files+0x3a2/0x420 [ 1815.663802][ T4603] __x64_sys_sendmsg+0x1b1/0x290 [ 1815.663824][ T4603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1815.663851][ T4603] ? rcu_is_watching+0x15/0xb0 [ 1815.663867][ T4603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.663884][ T4603] do_syscall_64+0x174/0x580 [ 1815.663906][ T4603] ? clear_bhb_loop+0x40/0x90 [ 1815.663924][ T4603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.663939][ T4603] RIP: 0033:0x7ffacc19ce59 [ 1815.663955][ T4603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.663969][ T4603] RSP: 002b:00007ffaccfef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1815.663987][ T4603] RAX: ffffffffffffffda RBX: 00007ffacc415fa0 RCX: 00007ffacc19ce59 [ 1815.664000][ T4603] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1815.664010][ T4603] RBP: 00007ffaccfef090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.664021][ T4603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.664030][ T4603] R13: 00007ffacc416038 R14: 00007ffacc415fa0 R15: 00007ffd7a2dd558 [ 1815.664050][ T4603] [ 1816.151588][ T4601] ±ÿ speed is unknown, defaulting to 1000 [ 1816.158975][ T4601] xfrm0 speed is unknown, defaulting to 1000 [ 1816.165849][ T4605] xt_hashlimit: max too large, truncated to 1048576 [ 1816.166549][ T4601] ±ÿ speed is unknown, defaulting to 1000 [ 1816.384915][ T4617] netlink: 'syz.1.35044': attribute type 1 has an invalid length. [ 1816.471672][ T4617] netlink: 224 bytes leftover after parsing attributes in process `syz.1.35044'. [ 1816.493184][ T4619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35045'. [ 1816.514320][ T4619] netlink: 'syz.4.35045': attribute type 2 has an invalid length. [ 1816.536049][ T4619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.35045'. [ 1817.000367][ T4640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35052'. [ 1817.338344][ T4637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.35049'. [ 1817.969829][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35068'. [ 1818.076521][ T31] INFO: task udevd:26560 blocked for more than 143 seconds. [ 1818.083948][ T31] Not tainted syzkaller #0 [ 1818.092814][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1818.137325][ T31] task:udevd state:D stack:23688 pid:26560 tgid:26560 ppid:4987 task_flags:0x400140 flags:0x00080000 [ 1818.159295][ T31] Call Trace: [ 1818.175973][ T31] [ 1818.178974][ T31] __schedule+0x17d9/0x56c0 [ 1818.183504][ T31] ? blk_mq_flush_plug_list+0x415/0x540 [ 1818.196396][ T31] ? rcu_is_watching+0x15/0xb0 [ 1818.206749][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1818.220379][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 1818.238459][ T31] ? __pfx___schedule+0x10/0x10 [ 1818.244531][ T31] ? rcu_is_watching+0x15/0xb0 [ 1818.256222][ T31] ? lock_release+0x4b/0x3c0 [ 1818.267025][ T31] schedule+0x164/0x360 [ 1818.270794][ T4688] tipc: Enabling of bearer rejected, already enabled [ 1818.275503][ T31] schedule_timeout+0x152/0x2c0 [ 1818.295989][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1818.301422][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1818.307321][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1818.313161][ T31] ? prepare_to_wait_event+0x436/0x480 [ 1818.319779][ T31] nbd_queue_rq+0x889/0x1150 [ 1818.324534][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1818.330161][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1818.336750][ T31] ? unwind_next_frame+0x1baf/0x2550 [ 1818.342057][ T31] ? deref_stack_reg+0x18e/0x220 [ 1818.347740][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1818.353343][ T31] ? sbitmap_get+0x229/0x390 [ 1818.358600][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1818.364609][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1818.371140][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1818.378082][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1818.384869][ T31] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 1818.391202][ T31] ? rcu_is_watching+0x15/0xb0 [ 1818.400275][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1818.406193][ T31] ? rcu_is_watching+0x15/0xb0 [ 1818.410994][ T31] ? lock_acquire+0x5f/0x350 [ 1818.416083][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1818.422086][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1818.428874][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 1818.434039][ T31] blk_mq_dispatch_list+0xd11/0xe10 [ 1818.439893][ T31] ? blk_mq_dispatch_list+0x230/0xe10 [ 1818.445308][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1818.451652][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 1818.457565][ T31] ? rcu_is_watching+0x15/0xb0 [ 1818.462369][ T31] blk_mq_flush_plug_list+0x45f/0x540 [ 1818.468376][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 1818.473613][ T31] ? blk_mq_submit_bio+0x1c62/0x2a80 [ 1818.482895][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1818.489419][ T31] ? blk_mq_submit_bio+0x2f8/0x2a80 [ 1818.494661][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 1818.500029][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 1818.505431][ T31] ? blkg_get+0x20/0x1d0 [ 1818.510463][ T31] ? rcu_is_watching+0x15/0xb0 [ 1818.515243][ T31] __submit_bio+0x465/0x560 [ 1818.520248][ T31] ? __pfx___submit_bio+0x10/0x10 [ 1818.525296][ T31] ? bio_associate_blkg+0x6d/0x230 [ 1818.531053][ T31] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1818.537980][ T31] ? bio_associate_blkg+0x6d/0x230 [ 1818.543135][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1818.550076][ T31] ? submit_bio_noacct+0xf7b/0x1b20 [ 1818.555317][ T31] ? blkcg_set_ioprio+0x16b/0x2a0 [ 1818.564357][ T31] block_read_full_folio+0x581/0x810 [ 1818.569942][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 1818.575521][ T31] filemap_read_folio+0x12c/0x3a0 [ 1818.580564][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1818.587219][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 1818.592804][ T31] ? filemap_add_folio+0x350/0x530 [ 1818.598431][ T31] do_read_cache_folio+0x354/0x590 [ 1818.603562][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1818.609638][ T31] read_part_sector+0xb6/0x2b0 [ 1818.614439][ T31] adfspart_check_ICS+0xb1/0x960 [ 1818.619888][ T31] ? seq_buf_printf+0x212/0x2d0 [ 1818.624765][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1818.630933][ T31] ? __kmalloc_cache_noprof+0x318/0x660 [ 1818.637367][ T31] bdev_disk_changed+0x851/0x17a0 [ 1818.642446][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1818.649557][ T31] blkdev_get_whole+0x372/0x510 [ 1818.654452][ T31] bdev_open+0x324/0xd70 [ 1818.659271][ T31] blkdev_open+0x461/0x600 [ 1818.663712][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1818.669468][ T31] do_dentry_open+0x816/0x1380 [ 1818.674276][ T31] vfs_open+0x3b/0x340 [ 1818.679076][ T31] ? path_openat+0x2e2d/0x3830 [ 1818.683880][ T31] path_openat+0x2e44/0x3830 [ 1818.689512][ T31] ? kasan_save_track+0x3e/0x80 [ 1818.694417][ T31] ? do_getname+0x2e/0x250 [ 1818.699972][ T31] ? do_sys_openat2+0xcc/0x200 [ 1818.704774][ T31] ? __x64_sys_openat+0x138/0x170 [ 1818.710429][ T31] do_file_open+0x23e/0x4a0 [ 1818.714985][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1818.721472][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1818.727117][ T31] ? alloc_fd+0x651/0x6c0 [ 1818.731490][ T31] do_sys_openat2+0x115/0x200 [ 1818.736864][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1818.742099][ T31] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1818.751660][ T31] __x64_sys_openat+0x138/0x170 [ 1818.758199][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.764400][ T31] do_syscall_64+0x174/0x580 [ 1818.769803][ T31] ? clear_bhb_loop+0x40/0x90 [ 1818.774515][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.781183][ T31] RIP: 0033:0x7f1b778a7407 [ 1818.786682][ T31] RSP: 002b:00007ffe22ecc840 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1818.795135][ T31] RAX: ffffffffffffffda RBX: 00007f1b7802b880 RCX: 00007f1b778a7407 [ 1818.807232][ T31] RDX: 00000000000a0800 RSI: 0000555f5531b920 RDI: ffffffffffffff9c [ 1818.815248][ T31] RBP: 0000555f552f3910 R08: 0000000000000000 R09: 0000000000000000 [ 1818.824435][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555f5531d360 [ 1818.833383][ T31] R13: 0000555f55301190 R14: 0000000000000000 R15: 0000555f5531d360 [ 1818.842066][ T31] [ 1818.845219][ T31] INFO: lockdep is turned off. [ 1818.850564][ T31] NMI backtrace for cpu 1 [ 1818.850579][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1818.850596][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1818.850606][ T31] Call Trace: [ 1818.850612][ T31] [ 1818.850618][ T31] dump_stack_lvl+0xe8/0x150 [ 1818.850640][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1818.850658][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1818.850708][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1818.850725][ T31] sys_info+0x135/0x170 [ 1818.850741][ T31] watchdog+0xfd7/0x1030 [ 1818.850763][ T31] ? watchdog+0x1c7/0x1030 [ 1818.850784][ T31] kthread+0x388/0x470 [ 1818.850799][ T31] ? __pfx_watchdog+0x10/0x10 [ 1818.850815][ T31] ? __pfx_kthread+0x10/0x10 [ 1818.850829][ T31] ret_from_fork+0x514/0xb70 [ 1818.850846][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1818.850860][ T31] ? __switch_to+0xc89/0x1420 [ 1818.850880][ T31] ? __pfx_kthread+0x10/0x10 [ 1818.850895][ T31] ret_from_fork_asm+0x1a/0x30 [ 1818.850919][ T31] [ 1818.850925][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1818.970818][ C0] NMI backtrace for cpu 0 [ 1818.970838][ C0] CPU: 0 UID: 0 PID: 9511 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 1818.970857][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1818.970868][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 1818.970901][ C0] RIP: 0010:clockevents_program_event+0x1b9/0x630 [ 1818.970922][ C0] Code: 3c 24 4c 89 fe e8 67 b5 fc ff 84 c0 0f 84 da 00 00 00 e8 aa ad 0f 00 48 8b 44 24 40 48 89 c2 48 c1 ea 20 b9 e0 06 00 00 0f 30 <4c> 8b 64 24 10 43 c6 44 2c 04 f8 31 c0 48 c7 44 24 20 0e 36 e0 45 [ 1818.970937][ C0] RSP: 0018:ffffc90000007ec0 EFLAGS: 00000003 [ 1818.970950][ C0] RAX: 000003a8e8c5c482 RBX: ffff8880b8623c80 RCX: 00000000000006e0 [ 1818.970965][ C0] RDX: 00000000000003a8 RSI: 0000000000000014 RDI: 0000000000000040 [ 1818.970975][ C0] RBP: ffffc90000007f80 R08: 0000000000000001 R09: 0000000000000000 [ 1818.970986][ C0] R10: 0000000000000003 R11: 0000000040000000 R12: ffff8880b8623cc8 [ 1818.970997][ C0] R13: dffffc0000000000 R14: 0000000000000004 R15: 000001a77cd2f308 [ 1818.971009][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 1818.971021][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1818.971032][ C0] CR2: 0000200000f9e030 CR3: 00000000a45e0000 CR4: 00000000003526f0 [ 1818.971047][ C0] Call Trace: [ 1818.971053][ C0] [ 1818.971063][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1818.971082][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1818.971107][ C0] ? tick_program_event+0x8f/0x120 [ 1818.971129][ C0] __hrtimer_rearm_deferred+0x26c/0x420 [ 1818.971151][ C0] __irq_exit_rcu+0x14e/0x220 [ 1818.971181][ C0] irq_exit_rcu+0x9/0x30 [ 1818.971199][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1818.971221][ C0] [ 1818.971226][ C0] [ 1818.971232][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1818.971249][ C0] RIP: 0010:finish_task_switch+0x417/0xbc0 [ 1818.971269][ C0] Code: 03 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 33 db 15 0a e8 ce 82 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1818.971282][ C0] RSP: 0018:ffffc9001b9adfe0 EFLAGS: 00000246 [ 1818.971295][ C0] RAX: 0000000000000001 RBX: ffff8880b863bda0 RCX: 0000000080000002 [ 1818.971306][ C0] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8194a022 [ 1818.971317][ C0] RBP: ffffc9001b9ae030 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 1818.971329][ C0] R10: dffffc0000000000 R11: fffffbfff20622df R12: ffff8880a2ccdd00 [ 1818.971341][ C0] R13: ffff8880b863bd68 R14: dffffc0000000000 R15: 1ffff110170c77b4 [ 1818.971358][ C0] ? finish_task_switch+0x412/0xbc0 [ 1818.971382][ C0] __schedule+0x17e1/0x56c0 [ 1818.971401][ C0] ? blk_mq_flush_plug_list+0x415/0x540 [ 1818.971425][ C0] ? trace_irq_enable+0x3b/0x140 [ 1818.971447][ C0] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1818.971472][ C0] ? __blk_flush_plug+0x416/0x4d0 [ 1818.971492][ C0] ? __pfx___schedule+0x10/0x10 [ 1818.971511][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.971528][ C0] ? schedule+0x90/0x360 [ 1818.971545][ C0] ? wq_worker_sleeping+0x66/0x250 [ 1818.971567][ C0] schedule+0x164/0x360 [ 1818.971586][ C0] io_schedule+0x7f/0xd0 [ 1818.971605][ C0] rq_qos_wait+0x266/0x360 [ 1818.971620][ C0] ? bvec_phys+0x4c8/0x560 [ 1818.971642][ C0] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 1818.971739][ C0] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 1818.971761][ C0] ? __pfx_rq_qos_wait+0x10/0x10 [ 1818.971775][ C0] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 1818.971791][ C0] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 1818.971810][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.971829][ C0] wbt_wait+0x326/0x550 [ 1818.971848][ C0] ? __pfx_wbt_wait+0x10/0x10 [ 1818.971865][ C0] ? __pfx_dd_bio_merge+0x10/0x10 [ 1818.971927][ C0] ? __pfx_wbt_wait+0x10/0x10 [ 1818.971944][ C0] __rq_qos_throttle+0x6b/0xb0 [ 1818.971968][ C0] blk_mq_submit_bio+0x156d/0x2a80 [ 1818.971990][ C0] ? blk_mq_submit_bio+0x2f8/0x2a80 [ 1818.972013][ C0] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 1818.972033][ C0] ? __css_rstat_updated+0x235/0x540 [ 1818.972058][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 1818.972084][ C0] __submit_bio+0x1c2/0x560 [ 1818.972106][ C0] ? __pfx___submit_bio+0x10/0x10 [ 1818.972130][ C0] ? mod_memcg_lruvec_state+0x23a/0x270 [ 1818.972149][ C0] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1818.972190][ C0] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1818.972212][ C0] ? submit_bio_noacct+0xf7b/0x1b20 [ 1818.972232][ C0] ? blkcg_set_ioprio+0x16b/0x2a0 [ 1818.972252][ C0] ext4_bio_write_folio+0x1052/0x1f90 [ 1818.972286][ C0] mpage_process_page_bufs+0x6b2/0x8c0 [ 1818.972310][ C0] mpage_prepare_extent_to_map+0xe0e/0x1690 [ 1818.972329][ C0] ? writeback_sb_inodes+0x9de/0x1b00 [ 1818.972346][ C0] ? __writeback_inodes_wb+0x114/0x240 [ 1818.972371][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 1818.972403][ C0] ? kmem_cache_alloc_noprof+0x303/0x650 [ 1818.972422][ C0] ? ext4_init_io_end+0x29/0x130 [ 1818.972441][ C0] ext4_do_writepages+0xc36/0x47a0 [ 1818.972462][ C0] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 1818.972490][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.972511][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.972526][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1818.972541][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 1818.972559][ C0] ? deref_stack_reg+0x18e/0x220 [ 1818.972578][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1818.972595][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 1818.972615][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1818.972632][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1818.972652][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.972668][ C0] ? ext4_writepages+0x205/0x3b0 [ 1818.972686][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.972702][ C0] ? lock_acquire+0x5f/0x350 [ 1818.972728][ C0] ? preempt_count_add+0x91/0x190 [ 1818.972752][ C0] ext4_writepages+0x241/0x3b0 [ 1818.972772][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 1818.972790][ C0] ? fib4_rule_action+0xd8/0x330 [ 1818.972852][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1818.972872][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 1818.972891][ C0] do_writepages+0x338/0x560 [ 1818.972908][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1818.972925][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.972942][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1818.972963][ C0] __writeback_single_inode+0x12e/0xf90 [ 1818.972984][ C0] writeback_sb_inodes+0x9de/0x1b00 [ 1818.973000][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.973019][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.973036][ C0] ? lock_release+0x4b/0x3c0 [ 1818.973061][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1818.973077][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 1818.973110][ C0] ? __pfx_down_read_trylock+0x10/0x10 [ 1818.973135][ C0] __writeback_inodes_wb+0x114/0x240 [ 1818.973156][ C0] wb_writeback+0x42f/0xad0 [ 1818.973180][ C0] ? queue_io+0x2d1/0x470 [ 1818.973199][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 1818.973213][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1818.973234][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1818.973254][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.973272][ C0] wb_workfn+0xc92/0x10f0 [ 1818.973302][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 1818.973324][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1818.973347][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1818.973367][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1818.973386][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1818.973404][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.973420][ C0] ? lock_acquire+0x5f/0x350 [ 1818.973444][ C0] ? rcu_is_watching+0x15/0xb0 [ 1818.973460][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1818.973479][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1818.973511][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1818.973529][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1818.973550][ C0] ? assign_work+0x3cf/0x5d0 [ 1818.973571][ C0] worker_thread+0xa47/0xfb0 [ 1818.973602][ C0] kthread+0x388/0x470 [ 1818.973617][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1818.973635][ C0] ? __pfx_kthread+0x10/0x10 [ 1818.973650][ C0] ret_from_fork+0x514/0xb70 [ 1818.973667][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1818.973682][ C0] ? __switch_to+0xc89/0x1420 [ 1818.973705][ C0] ? __pfx_kthread+0x10/0x10 [ 1818.973719][ C0] ret_from_fork_asm+0x1a/0x30 [ 1818.973744][ C0] [ 1819.818640][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1819.825519][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1819.834803][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1819.844839][ T31] Call Trace: [ 1819.848115][ T31] [ 1819.851030][ T31] vpanic+0x56c/0xa60 [ 1819.855000][ T31] ? __pfx___schedule+0x10/0x10 [ 1819.859830][ T31] ? __pfx_vpanic+0x10/0x10 [ 1819.864309][ T31] ? rcu_is_watching+0x15/0xb0 [ 1819.869053][ T31] ? trace_irq_enable+0x3b/0x140 [ 1819.873998][ T31] panic+0xc5/0xd0 [ 1819.877700][ T31] ? __pfx_panic+0x10/0x10 [ 1819.882116][ T31] watchdog+0x1030/0x1030 [ 1819.886467][ T31] ? watchdog+0x1c7/0x1030 [ 1819.890887][ T31] kthread+0x388/0x470 [ 1819.894942][ T31] ? __pfx_watchdog+0x10/0x10 [ 1819.899607][ T31] ? __pfx_kthread+0x10/0x10 [ 1819.904172][ T31] ret_from_fork+0x514/0xb70 [ 1819.908740][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1819.913854][ T31] ? __switch_to+0xc89/0x1420 [ 1819.918513][ T31] ? __pfx_kthread+0x10/0x10 [ 1819.923083][ T31] ret_from_fork_asm+0x1a/0x30 [ 1819.927829][ T31] [ 1819.931119][ T31] Kernel Offset: disabled [ 1819.935424][ T31] Rebooting in 86400 seconds..