last executing test programs: 6.894585567s ago: executing program 3 (id=2155): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000"], 0x18, 0x500}}], 0x2, 0x0) 6.690723819s ago: executing program 3 (id=2158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2", 0x88}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r4, &(0x7f0000001b80)=[{&(0x7f0000000300)=""/3, 0x5}, {&(0x7f0000001a00)=""/222, 0xde}], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800010900000000fcdbdf2502182000fe0800090000000008000100ac141400"], 0x2c}}, 0x8000000) write$6lowpan_control(r3, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r6, &(0x7f00000001c0)={0x27, r8, 0x0, 0x7, 0x6, 0x9, "ac729ead5e3654aaafea983045e47c1d0a42ab5fa7b540930f5ca75f73f3af9314a065a4616e280640e2b19d3cb32520c9f423a3588df78feac42f9489bb5e", 0x3d}, 0x60) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r9, 0x0, 0xf3a, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0x10001) write(r1, 0x0, 0x0) 5.431065989s ago: executing program 3 (id=2167): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x10, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_remove_cig={{0x2065, 0x1}, {0xd}}}, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x14, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) close(r3) 5.088095935s ago: executing program 1 (id=2171): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000a3920000730199000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5b2ab97a90b1b8ae1ca45decbc636db4b89d9c21024c", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) read$nci(r1, 0x0, 0xfff0) socket$unix(0x1, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000006000000000000000100008018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000001007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.060188865s ago: executing program 3 (id=2172): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x700, 0x98, 0xe2f, 0x7fffffff, {{0x22, 0x4, 0x1, 0x35, 0x88, 0x67, 0x0, 0xff, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, {[@rr={0x7, 0xf, 0x57, [@broadcast, @multicast1, @broadcast]}, @ssrr={0x89, 0x27, 0x50, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @multicast1, @loopback, @private=0x3, @empty, @loopback]}, @timestamp_addr={0x44, 0x3c, 0x30, 0x1, 0x5, [{@remote, 0x7}, {@multicast2}, {@rand_addr=0x64010100, 0x4}, {@empty, 0x7}, {@private=0xa010102, 0x6}, {@multicast2, 0x3}, {@local}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)=@getchain={0x34, 0x66, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xa, 0xffe0}, {0xfff3, 0x6}, {0xc, 0x1}}, [{0x8, 0xb, 0x24}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x21, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x1, 0xb, 0x3, 0x2, 0x1}, @generic={0x9, 0x7, 0x9, 0x1, 0x100}, @call={0x85, 0x0, 0x0, 0xb3}, @ldst={0x1, 0x2, 0x4, 0x8, 0x9, 0x80}, @exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf6f}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x2, 0x0, 0x8, 0x9, 0x20, 0x10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xb61, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x22, '\x00', r0, @fallback=0x2f, r1, 0x8, &(0x7f0000000140)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000180)=[r1, r1, r1, r1], 0x0, 0x10, 0x15}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r3, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x26, &(0x7f00000009c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x82, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) getsockopt$llc_int(r2, 0x10c, 0xf, &(0x7f0000000200), &(0x7f0000000480)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) unshare(0x20040600) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, &(0x7f0000003080)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$isdn(r6, &(0x7f0000000080)={0x22, 0xd2, 0xf, 0x2, 0x2}, 0x6) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a00)={@fallback, 0xffffffffffffffff, 0x6, 0x0, 0x4}, 0x20) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000500)={{0x2, 0x4e22, @empty}, {0x6}, 0x0, {0x2, 0x4e23, @broadcast}, 'syzkaller0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x34, &(0x7f00000000c0)=0x5093, 0x4) ioctl$FS_IOC_RESVSP(r8, 0x40305828, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 3.894782486s ago: executing program 3 (id=2176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x39, 0x0, &(0x7f0000000140)="259a53f271a76d2608fff74588a80a3888ca2f1514d3774754997c2667eb71d6c46856a0b5421bb0526f3a9f19b822578fb527dd0a29816966", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x80000, 0x756) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x636a, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) socket(0x0, 0x2, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0", 0x61}], 0x1}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080080}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r9, 0x25, 0x0, @void}, 0x10) 3.765066381s ago: executing program 1 (id=2177): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d00"}) 3.460470949s ago: executing program 4 (id=2179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r0, 0x1) 3.313077605s ago: executing program 1 (id=2180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r0, 0x1) 3.198257597s ago: executing program 4 (id=2181): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x31863}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000040)='bond0\x00', 0x101000, &(0x7f00000000c0)={@align=0x6, {0x1, 0x9, 0x9, 0x7}}, 0x10001, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xe}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x1404, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc015}, 0x40000) 3.132707737s ago: executing program 1 (id=2182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x900}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 2.669363115s ago: executing program 4 (id=2184): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x7fff, @loopback, 0x9}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000380)=ANY=[], 0x8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r2, 0x0, 0x0, 0x80080, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="b40800000000000073119f00000000008510000002000000b7000000000000009500c200000000009500001200000000c682dd66a834b42cb9e69a4f64a565c28885d67f887fbeea1228151d48059ad9a6eae0abbc9616d632c6b82557e9af84adffb887c5de57b2fbc3151145cc15b4605345242757d1ee3600040000966048be294d7333863a166e5dc041ac346e4bcd43473ee205c3561f55b4ede5d589a751f9aac9140191da719ab82f02c530e80d277b9f1661b3533464ee97d510d71f507f740c08e10552"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000003240)) r5 = socket(0x29, 0x3, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1b, 0x16, &(0x7f0000001540)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca", @ANYRESOCT=r5], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route_sched(r5, 0x0, 0x48800) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a011411158b0102000000000000000003000000080003400000100208000840000002800800154000000003"], 0x2c}, 0x1, 0x0, 0x0, 0xb48ed9b643a04ce2}, 0x20040000) 2.40410203s ago: executing program 4 (id=2186): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x700, 0x98, 0xe2f, 0x7fffffff, {{0x22, 0x4, 0x1, 0x35, 0x88, 0x67, 0x0, 0xff, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, {[@rr={0x7, 0xf, 0x57, [@broadcast, @multicast1, @broadcast]}, @ssrr={0x89, 0x27, 0x50, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @multicast1, @loopback, @private=0x3, @empty, @loopback]}, @timestamp_addr={0x44, 0x3c, 0x30, 0x1, 0x5, [{@remote, 0x7}, {@multicast2}, {@rand_addr=0x64010100, 0x4}, {@empty, 0x7}, {@private=0xa010102, 0x6}, {@multicast2, 0x3}, {@local}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)=@getchain={0x34, 0x66, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xa, 0xffe0}, {0xfff3, 0x6}, {0xc, 0x1}}, [{0x8, 0xb, 0x24}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x21, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x1, 0xb, 0x3, 0x2, 0x1}, @generic={0x9, 0x7, 0x9, 0x1, 0x100}, @call={0x85, 0x0, 0x0, 0xb3}, @ldst={0x1, 0x2, 0x4, 0x8, 0x9, 0x80}, @exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf6f}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x2, 0x0, 0x8, 0x9, 0x20, 0x10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xb61, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x22, '\x00', r0, @fallback=0x2f, r1, 0x8, &(0x7f0000000140)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000180)=[r1, r1, r1, r1], 0x0, 0x10, 0x15}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r3, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x26, &(0x7f00000009c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x82, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) getsockopt$llc_int(r2, 0x10c, 0xf, &(0x7f0000000200), &(0x7f0000000480)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) unshare(0x20040600) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, &(0x7f0000003080)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$isdn(r6, &(0x7f0000000080)={0x22, 0xd2, 0xf, 0x2, 0x2}, 0x6) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a00)={@fallback, 0xffffffffffffffff, 0x6, 0x0, 0x4}, 0x20) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000500)={{0x2, 0x4e22, @empty}, {0x6}, 0x0, {0x2, 0x4e23, @broadcast}, 'syzkaller0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x34, &(0x7f00000000c0)=0x5093, 0x4) ioctl$FS_IOC_RESVSP(r8, 0x40305828, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 1.946405769s ago: executing program 2 (id=2187): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x1, 'veth0_macvtap\x00', {}, 0xeb49}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000840000000000000000800f0007000000200000000000000084"], 0x38, 0x4008000}, 0x28008841) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000306010300000000000000000000000705000100070000000900020073797a3100000000699a7a86c4fbd59a5d25a3fc213ad156508184f7b6e1ea716848deab986468"], 0x28}}, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) connect$netlink(r6, &(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc) sendmsg$alg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bf602894ebb490df737305e0c194939d3dd20301b774bccd7d5eebc97b252eabdb056ea8f7a247c082cd9bd224a97bcd287c7a8639deaec1d0c9d814212ff89f427ef70f5e9092ba9af450", @ANYRES32, @ANYBLOB="0c0005006c010000000000000c0002"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0xb, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24004810) connect$can_bcm(r1, &(0x7f0000000440), 0x10) 1.896830351s ago: executing program 0 (id=2188): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 1.813581293s ago: executing program 0 (id=2189): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x44, r3, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="3e4de1e3c1b97962869084be2700083880ad298d36d134d1e467992e8b8ab60173ab99cc1c1304f4a1cfaf38e12d", 0x2e}, {&(0x7f0000000040)="c632362ab5a5e601b543871a7f6494bc84feeda28aab9aa301f19828c6000a6ce26a9164f697be91ff73e3e4ebef75ed8c00e0e1f3213d551c98973c2dfc", 0x3e}, {&(0x7f0000000400)="1183ff3b348c1f6dd652806515bc8b07f613c8c66231fb94bfff24fc49b7d3f40916f78e54780b333d9d007c4a6814d2ba38d7d96b4096af6a6cf5a98705e3e9464c8bf29619027caf919e65faf18d68ae529b8cffd02afdb4b9dec5772364efe7a531b6e06b7952b56ffdc33c879a78793f7c19cba15915419762a8a4f86757c0b91a09803bec3c6e042698265774ceeb75884ed899a88c6e6d76b2bce1c4ebe9bfb583f5d639543f6054aeabd92457b9cb594454c44b96a9746d69174828c0c46374cefc6d771090bd052fcd534e021872d18955ce4c1d", 0xd8}, {&(0x7f00000000c0)="ce1faff357cc9f06321ed3734fd692bbc05964563092f288b6405d5a6ee365a6fa5522baffc4a1b667d9c918af94cf201ebeef1b0e34fd549c08d10d71c97f", 0x3f}, {&(0x7f0000000340)="3c5d5151e233d4899fa5ac2cd145e01e106996abf750d99b2f6f448e6cf6ec37f6c3f52b947fda470a7f9febc2b4c6ee7e12aa40ada319dac33503cd504df54ecd09dde8a53b49c4e7381d2335471b7dfcb0ad05d8cf28f96dc1ef7bf15610616362d66a99ecee96b05627163f358f794fdb9c55868427c9a03bc7509d", 0x7d}], 0x5, &(0x7f0000000640)=[{0xf0, 0x88, 0x5, "7371244e84d27bb5087663dcafdc0968b6f10ee8fbb235d267a46c911e8a9e6adb2c2b057ace37c8bb0d009dee10c0b4e948e4f4384c94b99abe52a605816eef8a7c714c4efd5dfdd43b8d588095a464f70efd92c4f9da117fbdc8c3bc8824c4f49c6ff05dfcc9ce54cce1b4ba5b7a98c7e775fd13a2fdb54d455eb3f982098750f8e4ff677b39c15b3ef36dde6e2ca09644549746eb8af3d4270fede7982d2ee2277258e6612582c3d60c88a0189d27183727efb1fd6856242d3fe9d7a5fa310b564db663b1d9d4fff0b16c9d7ac07bf81c483290d251f0bac4fd6623"}, {0xb0, 0x0, 0x4, "7975361c0f4273582f2c5fc1930be9bc945d3821e9e1791b40cc1cea58ef025b0f1c1a5d0632a6926c85bf912d4feac5a7376b9cada719bc1a565b1d26efd224834dae4ca621865cc0e4b4ab728ed3aa73358f8874270a1d2afcfd23ed6e7d1a90c063a40f47a07e9e2afa5ef7f3230830c149e694f1114d56cef8a45863ac3e9d1e31ca4a170d1881d4ba6d6909d807a6248a92b741b0b127d38b2884eda4ca"}], 0x1a0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010800000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="004004006400000008001b00000000000c002b8008000100", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.734645876s ago: executing program 4 (id=2190): socket(0x22, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060300000000000000000000000000050005000a000000100003006269746d61703a706f72740011000300686173683a69702c3961726bf5960e566fa0b6f4ff000000000900020073797a300000000015000300686173683a69702c706f72742c6e657400000000f2bd50deb08a51b0eb59c05a"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000180009007ebd7000000000001c140000fe"], 0x30}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x800, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x4, 0xccce, {0x5, 0x4, 0x2, 0x1, 0xff, 0x67, 0x1, 0xe7, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x619}, 0x38) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="3f9d00018000000000000800000008000300", @ANYRES32=r9, @ANYBLOB="2000308014000400359f6ef711e7273d"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.636159017s ago: executing program 1 (id=2191): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x80000000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r0, 0x1) 1.459439701s ago: executing program 2 (id=2192): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2100000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002c0012800e0001006970366772657461700000204100028014000600fe8000000000000000000000000000380a000100aaaaaaaaaa160000"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.404348017s ago: executing program 1 (id=2193): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.328479203s ago: executing program 0 (id=2194): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1.328268226s ago: executing program 3 (id=2195): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) 1.248040723s ago: executing program 2 (id=2196): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x28, 0x805, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300001fffffff850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)={0x0, @aes256, 0x0, @desc4}) getsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001e40)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x4}, 0x0, 0x0, 0x7, 0x4, 0x3ff, 0x2, 0xc, 0x7}}], 0x58, 0x20008011}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x16c}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 1.153772269s ago: executing program 0 (id=2197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4c20, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x20000010304, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4ea0, @private=0xa010101}}) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x12, {0x2, 0x4e20, @rand_addr=0x64010101}}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x4, 0x10, {0x0, 0x0, 0x0, r6, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xb}]}, 0x34}}, 0x0) unshare(0x6a040000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 784.204039ms ago: executing program 2 (id=2198): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x1000000, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) 657.665252ms ago: executing program 4 (id=2199): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 579.330156ms ago: executing program 2 (id=2200): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d001100"}) 188.984201ms ago: executing program 0 (id=2201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000900", @ANYRES16=r1, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="a800028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000010038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080) 15.715974ms ago: executing program 0 (id=2202): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x181}, 0x14}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x40000002, 0x0, @mcast1, @private2, 0x40, 0x80, 0x4, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000030800000000000000000020850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x1c, 0x56, 0x1, 0x0, 0x0, {0x7}, [@typed={0x8, 0x10a, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000000), 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x181}, 0x14}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x40000002, 0x0, @mcast1, @private2, 0x40, 0x80, 0x4, 0x6}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000030800000000000000000020850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x1c, 0x56, 0x1, 0x0, 0x0, {0x7}, [@typed={0x8, 0x10a, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) 0s ago: executing program 2 (id=2203): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000001640)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum64={0x1, 0x0, 0x0, 0x13, 0x0, 0x9, [{0xa, 0x6, 0x2}]}, @func_proto={0x0, 0x20000198}]}}, &(0x7f0000000240)=""/8, 0x3e, 0x8, 0x1, 0x3}, 0x28) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x80000000) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0xff, @private0, @local, {[], @mld={0x678afc410bc9a8a0, 0x0, 0x0, 0x0, 0xe, @loopback}}}}}}, 0x0) shutdown(r2, 0x1) kernel console output (not intermixed with test programs): f_lsm_mmap_addr+0x9/0x50 [ 292.897100][T12444] ? security_mmap_addr+0x71/0x240 [ 292.897137][T12444] do_mmap+0xc39/0x10c0 [ 292.897182][T12444] ? __pfx_do_mmap+0x10/0x10 [ 292.897211][T12444] ? down_write_killable+0x180/0x240 [ 292.897245][T12444] ? __pfx_down_write_killable+0x10/0x10 [ 292.897274][T12444] ? apparmor_mmap_file+0x197/0x3e0 [ 292.897299][T12444] ? security_mmap_file+0x4df/0xa20 [ 292.897332][T12444] vm_mmap_pgoff+0x2c9/0x4f0 [ 292.897372][T12444] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 292.897400][T12444] ? ksys_write+0x242/0x270 [ 292.897424][T12444] ? __pfx_ksys_write+0x10/0x10 [ 292.897447][T12444] ? ksys_mmap_pgoff+0xf3/0x760 [ 292.897477][T12444] ? __x64_sys_mmap+0x7f/0x140 [ 292.897509][T12444] do_syscall_64+0x14d/0xf80 [ 292.897533][T12444] ? trace_irq_disable+0x3b/0x150 [ 292.897562][T12444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.897583][T12444] ? clear_bhb_loop+0x40/0x90 [ 292.897610][T12444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.897631][T12444] RIP: 0033:0x7f199519c799 [ 292.897651][T12444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.897669][T12444] RSP: 002b:00007f1996110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 292.897692][T12444] RAX: ffffffffffffffda RBX: 00007f1995416090 RCX: 00007f199519c799 [ 292.897707][T12444] RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 292.897721][T12444] RBP: 00007f1996110090 R08: ffffffffffffffff R09: 00000000215eb000 [ 292.897744][T12444] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 292.897757][T12444] R13: 00007f1995416128 R14: 00007f1995416090 R15: 00007ffd85c8b5d8 [ 292.897791][T12444] [ 293.434392][T12459] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 293.466752][T12459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1621'. [ 293.480559][T12459] FAULT_INJECTION: forcing a failure. [ 293.480559][T12459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.494461][T12441] lec:lec_atm_close: lec0: Shut down! [ 293.500821][T12459] CPU: 1 UID: 0 PID: 12459 Comm: syz.1.1621 Not tainted syzkaller #0 PREEMPT(full) [ 293.500850][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.500863][T12459] Call Trace: [ 293.500871][T12459] [ 293.500880][T12459] dump_stack_lvl+0xe8/0x150 [ 293.500919][T12459] should_fail_ex+0x412/0x560 [ 293.500959][T12459] _copy_to_user+0x31/0xb0 [ 293.501000][T12459] simple_read_from_buffer+0xe1/0x170 [ 293.501037][T12459] proc_fail_nth_read+0x1bb/0x230 [ 293.501072][T12459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.501107][T12459] ? rw_verify_area+0x2a6/0x4d0 [ 293.501130][T12459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.501164][T12459] vfs_read+0x20c/0xa70 [ 293.501190][T12459] ? fdget_pos+0x246/0x320 [ 293.501216][T12459] ? __pfx___mutex_lock+0x10/0x10 [ 293.501243][T12459] ? __pfx_vfs_read+0x10/0x10 [ 293.501269][T12459] ? __fget_files+0x2a/0x420 [ 293.501305][T12459] ? __fget_files+0x3a0/0x420 [ 293.501336][T12459] ? __fget_files+0x2a/0x420 [ 293.501377][T12459] ksys_read+0x150/0x270 [ 293.501404][T12459] ? __pfx_ksys_read+0x10/0x10 [ 293.501441][T12459] do_syscall_64+0x14d/0xf80 [ 293.501468][T12459] ? trace_irq_disable+0x3b/0x150 [ 293.501499][T12459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.501522][T12459] ? clear_bhb_loop+0x40/0x90 [ 293.501550][T12459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.501572][T12459] RIP: 0033:0x7f02e935cfce [ 293.501592][T12459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 293.501610][T12459] RSP: 002b:00007f02ea298fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.501633][T12459] RAX: ffffffffffffffda RBX: 00007f02ea2996c0 RCX: 00007f02e935cfce [ 293.501649][T12459] RDX: 000000000000000f RSI: 00007f02ea2990a0 RDI: 0000000000000003 [ 293.501663][T12459] RBP: 00007f02ea299090 R08: 0000000000000000 R09: 0000000000000000 [ 293.501676][T12459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.501688][T12459] R13: 00007f02e9616038 R14: 00007f02e9615fa0 R15: 00007ffd5b81a408 [ 293.501724][T12459] [ 293.738205][T12463] netlink: 'syz.4.1622': attribute type 4 has an invalid length. [ 293.872994][T12475] FAULT_INJECTION: forcing a failure. [ 293.872994][T12475] name failslab, interval 1, probability 0, space 0, times 0 [ 293.886256][T12475] CPU: 1 UID: 0 PID: 12475 Comm: syz.1.1625 Not tainted syzkaller #0 PREEMPT(full) [ 293.886286][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.886299][T12475] Call Trace: [ 293.886307][T12475] [ 293.886317][T12475] dump_stack_lvl+0xe8/0x150 [ 293.886352][T12475] should_fail_ex+0x412/0x560 [ 293.886393][T12475] should_failslab+0xa8/0x100 [ 293.886423][T12475] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 293.886447][T12475] ? __alloc_skb+0x186/0x7d0 [ 293.886470][T12475] ? __alloc_skb+0x1d0/0x7d0 [ 293.886491][T12475] ? __local_bh_enable_ip+0xd0/0x130 [ 293.886524][T12475] __alloc_skb+0x1d0/0x7d0 [ 293.886552][T12475] alloc_skb_with_frags+0xca/0x890 [ 293.886589][T12475] sock_alloc_send_pskb+0x878/0x990 [ 293.886630][T12475] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 293.886657][T12475] ? tomoyo_check_unix_address+0x167/0x7f0 [ 293.886690][T12475] ? tomoyo_check_unix_address+0x60f/0x7f0 [ 293.886721][T12475] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 293.886746][T12475] unix_dgram_sendmsg+0x460/0x18e0 [ 293.886778][T12475] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 293.886820][T12475] ? __lock_acquire+0x6b5/0x2cf0 [ 293.886852][T12475] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 293.886878][T12475] ? tomoyo_socket_sendmsg_permission+0x1d9/0x300 [ 293.886915][T12475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.886939][T12475] ____sys_sendmsg+0x972/0x9f0 [ 293.886979][T12475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.887014][T12475] ? import_iovec+0x73/0xa0 [ 293.887038][T12475] ___sys_sendmsg+0x2a5/0x360 [ 293.887066][T12475] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.887140][T12475] __sys_sendmmsg+0x27c/0x4e0 [ 293.887174][T12475] ? __pfx___sys_sendmmsg+0x10/0x10 [ 293.887199][T12475] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 293.887253][T12475] ? ksys_write+0x242/0x270 [ 293.887281][T12475] ? __pfx_ksys_write+0x10/0x10 [ 293.887312][T12475] __x64_sys_sendmmsg+0xa0/0xc0 [ 293.887343][T12475] do_syscall_64+0x14d/0xf80 [ 293.887369][T12475] ? trace_irq_disable+0x3b/0x150 [ 293.887399][T12475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.887421][T12475] ? clear_bhb_loop+0x40/0x90 [ 293.887448][T12475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.887471][T12475] RIP: 0033:0x7f02e939c799 [ 293.887497][T12475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.887516][T12475] RSP: 002b:00007f02ea299028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 293.887540][T12475] RAX: ffffffffffffffda RBX: 00007f02e9615fa0 RCX: 00007f02e939c799 [ 293.887564][T12475] RDX: 0000000000000002 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 293.887578][T12475] RBP: 00007f02ea299090 R08: 0000000000000000 R09: 0000000000000000 [ 293.887591][T12475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.887604][T12475] R13: 00007f02e9616038 R14: 00007f02e9615fa0 R15: 00007ffd5b81a408 [ 293.887637][T12475] [ 294.235345][T12474] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1626'. [ 294.273634][T12474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1626'. [ 294.480145][T12487] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1626'. [ 294.504624][T12485] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1632'. [ 294.529884][T12485] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1632'. [ 294.539453][T12485] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1632'. [ 294.752619][T12489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1630'. [ 294.822727][ T25] block nbd8: Possible stuck request ffff8880263b8000: control (read@0,1024B). Runtime 120 seconds [ 294.833890][ T25] block nbd8: Possible stuck request ffff8880263b8200: control (read@1024,1024B). Runtime 120 seconds [ 294.846897][ T25] block nbd8: Possible stuck request ffff8880263b8400: control (read@2048,1024B). Runtime 120 seconds [ 294.858502][ T25] block nbd8: Possible stuck request ffff8880263b8600: control (read@3072,1024B). Runtime 120 seconds [ 294.935661][T12498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.999309][T12503] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.227554][T12503] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.295123][T12517] netlink: 'syz.2.1640': attribute type 15 has an invalid length. [ 295.319008][T12503] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.403998][T12503] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.545204][T12523] bond4: (slave bond_slave_1): Device is not our slave [ 295.552554][T12523] bond4: option active_slave: invalid value (bond_slave_1) [ 295.564374][T12523] bond4 (unregistering): Released all slaves [ 295.664676][T12529] netlink: zone id is out of range [ 295.670122][ T58] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.678902][T12529] netlink: zone id is out of range [ 295.690656][T12529] netlink: zone id is out of range [ 295.704913][ T1138] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.716846][T12529] netlink: zone id is out of range [ 295.736537][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.737405][T12529] netlink: zone id is out of range [ 295.778573][T12529] netlink: zone id is out of range [ 295.783964][T12529] netlink: zone id is out of range [ 295.820289][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.106764][ T25] block nbd9: Possible stuck request ffff888026400000: control (read@0,1024B). Runtime 120 seconds [ 296.107577][ T1634] block nbd3: Possible stuck request ffff8880261d8000: control (read@0,1024B). Runtime 150 seconds [ 296.128849][ T11] block nbd0: Possible stuck request ffff8880260d1400: control (read@0,1024B). Runtime 180 seconds [ 296.133699][ T25] block nbd9: Possible stuck request ffff888026400200: control (read@1024,1024B). Runtime 120 seconds [ 296.150833][ T11] block nbd0: Possible stuck request ffff8880260d1600: control (read@1024,1024B). Runtime 180 seconds [ 296.152316][ T25] block nbd9: Possible stuck request ffff888026400400: control (read@2048,1024B). Runtime 120 seconds [ 296.163038][ T1634] block nbd3: Possible stuck request ffff8880261d8200: control (read@1024,1024B). Runtime 150 seconds [ 296.173814][ T25] block nbd9: Possible stuck request ffff888026400600: control (read@3072,1024B). Runtime 120 seconds [ 296.184159][ T11] block nbd0: Possible stuck request ffff8880260d1800: control (read@2048,1024B). Runtime 180 seconds [ 296.184194][ T11] block nbd0: Possible stuck request ffff8880260d1a00: control (read@3072,1024B). Runtime 180 seconds [ 296.196075][ T1634] block nbd3: Possible stuck request ffff8880261d8400: control (read@2048,1024B). Runtime 150 seconds [ 296.230442][ T1634] block nbd3: Possible stuck request ffff8880261d8600: control (read@3072,1024B). Runtime 150 seconds [ 296.473139][T12556] FAULT_INJECTION: forcing a failure. [ 296.473139][T12556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.507367][T12556] CPU: 0 UID: 0 PID: 12556 Comm: syz.2.1653 Not tainted syzkaller #0 PREEMPT(full) [ 296.507398][T12556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.507411][T12556] Call Trace: [ 296.507418][T12556] [ 296.507427][T12556] dump_stack_lvl+0xe8/0x150 [ 296.507463][T12556] should_fail_ex+0x412/0x560 [ 296.507501][T12556] _copy_to_user+0x31/0xb0 [ 296.507528][T12556] simple_read_from_buffer+0xe1/0x170 [ 296.507562][T12556] proc_fail_nth_read+0x1bb/0x230 [ 296.507597][T12556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.507631][T12556] ? rw_verify_area+0x2a6/0x4d0 [ 296.507652][T12556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.507685][T12556] vfs_read+0x20c/0xa70 [ 296.507707][T12556] ? fdget_pos+0x246/0x320 [ 296.507733][T12556] ? __pfx___mutex_lock+0x10/0x10 [ 296.507762][T12556] ? __pfx_vfs_read+0x10/0x10 [ 296.507788][T12556] ? __fget_files+0x2a/0x420 [ 296.507835][T12556] ? __fget_files+0x3a0/0x420 [ 296.507872][T12556] ? __fget_files+0x2a/0x420 [ 296.507913][T12556] ksys_read+0x150/0x270 [ 296.507940][T12556] ? __pfx_ksys_read+0x10/0x10 [ 296.507976][T12556] do_syscall_64+0x14d/0xf80 [ 296.508002][T12556] ? trace_irq_disable+0x3b/0x150 [ 296.508034][T12556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.508057][T12556] ? clear_bhb_loop+0x40/0x90 [ 296.508084][T12556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.508107][T12556] RIP: 0033:0x7f68d555cfce [ 296.508128][T12556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.508147][T12556] RSP: 002b:00007f68d63f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.508170][T12556] RAX: ffffffffffffffda RBX: 00007f68d63f96c0 RCX: 00007f68d555cfce [ 296.508185][T12556] RDX: 000000000000000f RSI: 00007f68d63f90a0 RDI: 0000000000000007 [ 296.508197][T12556] RBP: 00007f68d63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 296.508210][T12556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.508222][T12556] R13: 00007f68d5816038 R14: 00007f68d5815fa0 R15: 00007ffddb727438 [ 296.508257][T12556] [ 296.637474][T12558] gre0: entered promiscuous mode [ 296.794856][T12558] gre0: entered allmulticast mode [ 296.891154][T12558] __nla_validate_parse: 5 callbacks suppressed [ 296.891175][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 296.913158][T12545] lec:lec_atm_close: lec0: Shut down! [ 297.152461][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1659'. [ 297.163837][T12579] FAULT_INJECTION: forcing a failure. [ 297.163837][T12579] name failslab, interval 1, probability 0, space 0, times 0 [ 297.195900][T12579] CPU: 0 UID: 0 PID: 12579 Comm: syz.3.1661 Not tainted syzkaller #0 PREEMPT(full) [ 297.195929][T12579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.195954][T12579] Call Trace: [ 297.195963][T12579] [ 297.195971][T12579] dump_stack_lvl+0xe8/0x150 [ 297.196009][T12579] should_fail_ex+0x412/0x560 [ 297.196045][T12579] should_failslab+0xa8/0x100 [ 297.196074][T12579] ? security_inode_alloc+0x39/0x310 [ 297.196109][T12579] kmem_cache_alloc_noprof+0x87/0x650 [ 297.196142][T12579] security_inode_alloc+0x39/0x310 [ 297.196179][T12579] inode_init_always_gfp+0x9ed/0xdc0 [ 297.196219][T12579] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 297.196243][T12579] alloc_inode+0x82/0x1b0 [ 297.196274][T12579] new_inode+0x22/0x170 [ 297.196311][T12579] __debugfs_create_file+0xb8/0x400 [ 297.196339][T12579] debugfs_create_file_full+0x3f/0x60 [ 297.196368][T12579] ref_tracker_dir_debugfs+0x197/0x360 [ 297.196410][T12579] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 297.196470][T12579] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 297.196496][T12579] ? alloc_netdev_mqs+0xa6/0x11b0 [ 297.196539][T12579] ? __raw_spin_lock_init+0x45/0x100 [ 297.196566][T12579] alloc_netdev_mqs+0x272/0x11b0 [ 297.196595][T12579] ? __pfx_macvlan_setup+0x10/0x10 [ 297.196628][T12579] rtnl_create_link+0x31f/0xd70 [ 297.196666][T12579] rtnl_newlink_create+0x277/0xb70 [ 297.196693][T12579] ? __pfx___nla_validate_parse+0x10/0x10 [ 297.196728][T12579] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 297.196759][T12579] ? __pfx___mutex_lock+0x10/0x10 [ 297.196800][T12579] ? ns_capable+0x89/0xe0 [ 297.196834][T12579] rtnl_newlink+0x1666/0x1be0 [ 297.196879][T12579] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.196901][T12579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.196965][T12579] ? kasan_quarantine_put+0xbb/0x1f0 [ 297.196989][T12579] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.197020][T12579] ? kmem_cache_free+0x187/0x630 [ 297.197043][T12579] ? nlmon_xmit+0xb0/0x100 [ 297.197083][T12579] ? __lock_acquire+0x6b5/0x2cf0 [ 297.197118][T12579] ? __local_bh_enable_ip+0xd0/0x130 [ 297.197148][T12579] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.197173][T12579] ? __dev_queue_xmit+0x28b/0x3870 [ 297.197201][T12579] ? __local_bh_enable_ip+0xd0/0x130 [ 297.197227][T12579] ? __dev_queue_xmit+0x28b/0x3870 [ 297.197283][T12579] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.197307][T12579] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 297.197335][T12579] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 297.197358][T12579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.197380][T12579] ? ref_tracker_free+0x693/0x840 [ 297.197411][T12579] ? __copy_skb_header+0xa3/0x4a0 [ 297.197441][T12579] ? __pfx_ref_tracker_free+0x10/0x10 [ 297.197470][T12579] ? __skb_clone+0x63/0x7a0 [ 297.197516][T12579] netlink_rcv_skb+0x232/0x4b0 [ 297.197541][T12579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.197567][T12579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.197603][T12579] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.197635][T12579] netlink_unicast+0x80f/0x9b0 [ 297.197678][T12579] ? __pfx_netlink_unicast+0x10/0x10 [ 297.197713][T12579] ? netlink_sendmsg+0x650/0xb40 [ 297.197735][T12579] ? skb_put+0x11b/0x210 [ 297.197765][T12579] netlink_sendmsg+0x813/0xb40 [ 297.197799][T12579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.197828][T12579] ? aa_sock_msg_perm+0xf1/0x1b0 [ 297.197863][T12579] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.197893][T12579] ____sys_sendmsg+0x972/0x9f0 [ 297.197931][T12579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.197970][T12579] ? import_iovec+0x73/0xa0 [ 297.197999][T12579] ___sys_sendmsg+0x2a5/0x360 [ 297.198034][T12579] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.198102][T12579] ? __fget_files+0x2a/0x420 [ 297.198134][T12579] ? __fget_files+0x3a0/0x420 [ 297.198178][T12579] __x64_sys_sendmsg+0x1bd/0x2a0 [ 297.198210][T12579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.198249][T12579] ? __pfx_ksys_write+0x10/0x10 [ 297.198287][T12579] do_syscall_64+0x14d/0xf80 [ 297.198313][T12579] ? trace_irq_disable+0x3b/0x150 [ 297.198344][T12579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.198368][T12579] ? clear_bhb_loop+0x40/0x90 [ 297.198395][T12579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.198418][T12579] RIP: 0033:0x7fb59559c799 [ 297.198439][T12579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.198458][T12579] RSP: 002b:00007fb5964bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.198481][T12579] RAX: ffffffffffffffda RBX: 00007fb595815fa0 RCX: 00007fb59559c799 [ 297.198497][T12579] RDX: 0000000008000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 297.198517][T12579] RBP: 00007fb5964bb090 R08: 0000000000000000 R09: 0000000000000000 [ 297.198530][T12579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.198543][T12579] R13: 00007fb595816038 R14: 00007fb595815fa0 R15: 00007ffcedf75df8 [ 297.198579][T12579] [ 297.711286][T12579] debugfs: out of free dentries, can not create file 'netdev@ffff888051d86620' [ 297.805839][ T25] block nbd10: Possible stuck request ffff8880264c0000: control (read@0,1024B). Runtime 120 seconds [ 297.817166][ T25] block nbd10: Possible stuck request ffff8880264c0200: control (read@1024,1024B). Runtime 120 seconds [ 297.829194][ T25] block nbd10: Possible stuck request ffff8880264c0400: control (read@2048,1024B). Runtime 120 seconds [ 297.840614][ T25] block nbd10: Possible stuck request ffff8880264c0600: control (read@3072,1024B). Runtime 120 seconds [ 298.017998][ T25] block nbd4: Possible stuck request ffff888026240000: control (read@0,1024B). Runtime 150 seconds [ 298.029021][ T25] block nbd4: Possible stuck request ffff888026240200: control (read@1024,1024B). Runtime 150 seconds [ 298.040787][ T25] block nbd4: Possible stuck request ffff888026240400: control (read@2048,1024B). Runtime 150 seconds [ 298.052604][ T25] block nbd4: Possible stuck request ffff888026240600: control (read@3072,1024B). Runtime 150 seconds [ 298.303509][T12611] gre0: entered promiscuous mode [ 298.313738][T12611] gre0: entered allmulticast mode [ 298.344172][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 298.544297][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 298.657374][ T1634] block nbd1: Possible stuck request ffff888026130000: control (read@0,1024B). Runtime 180 seconds [ 298.668664][ T1634] block nbd1: Possible stuck request ffff888026130200: control (read@1024,1024B). Runtime 180 seconds [ 298.679977][ T1634] block nbd1: Possible stuck request ffff888026130400: control (read@2048,1024B). Runtime 180 seconds [ 298.691172][ T1634] block nbd1: Possible stuck request ffff888026130600: control (read@3072,1024B). Runtime 180 seconds [ 298.726317][T12634] FAULT_INJECTION: forcing a failure. [ 298.726317][T12634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.772040][T12636] netlink: 'syz.1.1682': attribute type 2 has an invalid length. [ 298.785972][T12634] CPU: 0 UID: 0 PID: 12634 Comm: syz.0.1681 Not tainted syzkaller #0 PREEMPT(full) [ 298.786001][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.786014][T12634] Call Trace: [ 298.786022][T12634] [ 298.786031][T12634] dump_stack_lvl+0xe8/0x150 [ 298.786067][T12634] should_fail_ex+0x412/0x560 [ 298.786105][T12634] _copy_to_user+0x31/0xb0 [ 298.786133][T12634] simple_read_from_buffer+0xe1/0x170 [ 298.786172][T12634] proc_fail_nth_read+0x1bb/0x230 [ 298.786209][T12634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.786245][T12634] ? rw_verify_area+0x2a6/0x4d0 [ 298.786269][T12634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.786301][T12634] vfs_read+0x20c/0xa70 [ 298.786323][T12634] ? fdget_pos+0x246/0x320 [ 298.786341][T12634] ? __pfx_aa_sk_perm+0x10/0x10 [ 298.786389][T12634] ? __pfx___mutex_lock+0x10/0x10 [ 298.786419][T12634] ? __pfx_vfs_read+0x10/0x10 [ 298.786443][T12634] ? __fget_files+0x2a/0x420 [ 298.786480][T12634] ? __fget_files+0x3a0/0x420 [ 298.786510][T12634] ? __fget_files+0x2a/0x420 [ 298.786551][T12634] ksys_read+0x150/0x270 [ 298.786579][T12634] ? __pfx_ksys_read+0x10/0x10 [ 298.786615][T12634] do_syscall_64+0x14d/0xf80 [ 298.786642][T12634] ? trace_irq_disable+0x3b/0x150 [ 298.786671][T12634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.786693][T12634] ? clear_bhb_loop+0x40/0x90 [ 298.786720][T12634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.786743][T12634] RIP: 0033:0x7f199515cfce [ 298.786764][T12634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.786783][T12634] RSP: 002b:00007f1996130fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.786805][T12634] RAX: ffffffffffffffda RBX: 00007f19961316c0 RCX: 00007f199515cfce [ 298.786821][T12634] RDX: 000000000000000f RSI: 00007f19961310a0 RDI: 0000000000000005 [ 298.786834][T12634] RBP: 00007f1996131090 R08: 0000000000000000 R09: 0000000000000000 [ 298.786847][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.786859][T12634] R13: 00007f1995416038 R14: 00007f1995415fa0 R15: 00007ffd85c8b5d8 [ 298.786894][T12634] [ 299.109116][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 299.167617][T12641] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1685'. [ 299.197407][T12641] FAULT_INJECTION: forcing a failure. [ 299.197407][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 299.230051][T12641] CPU: 1 UID: 0 PID: 12641 Comm: syz.2.1685 Not tainted syzkaller #0 PREEMPT(full) [ 299.230081][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.230095][T12641] Call Trace: [ 299.230104][T12641] [ 299.230113][T12641] dump_stack_lvl+0xe8/0x150 [ 299.230151][T12641] should_fail_ex+0x412/0x560 [ 299.230190][T12641] should_failslab+0xa8/0x100 [ 299.230222][T12641] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 299.230249][T12641] ? __alloc_skb+0x1d0/0x7d0 [ 299.230272][T12641] ? __local_bh_enable_ip+0xd0/0x130 [ 299.230308][T12641] __alloc_skb+0x1d0/0x7d0 [ 299.230337][T12641] team_nl_send_options_get+0x162/0x11b0 [ 299.230375][T12641] ? __pfx___nla_validate_parse+0x10/0x10 [ 299.230399][T12641] ? __pfx_team_nl_send_multicast+0x10/0x10 [ 299.230445][T12641] ? __pfx_team_nl_send_options_get+0x10/0x10 [ 299.230476][T12641] ? dev_get_by_index+0x22/0x2e0 [ 299.230518][T12641] ? dev_get_by_index+0x22/0x2e0 [ 299.230561][T12641] team_nl_options_set_doit+0xb68/0xe60 [ 299.230604][T12641] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 299.230660][T12641] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 299.230690][T12641] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 299.230729][T12641] genl_family_rcv_msg_doit+0x22a/0x330 [ 299.230765][T12641] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 299.230809][T12641] ? bpf_lsm_capable+0x9/0x20 [ 299.230838][T12641] ? security_capable+0x7e/0x2c0 [ 299.230880][T12641] genl_rcv_msg+0x61c/0x7a0 [ 299.230917][T12641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.230944][T12641] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 299.230969][T12641] ? __lock_acquire+0x6b5/0x2cf0 [ 299.231008][T12641] netlink_rcv_skb+0x232/0x4b0 [ 299.231032][T12641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.231063][T12641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.231104][T12641] ? down_read+0x272/0x2e0 [ 299.231131][T12641] ? genl_rcv+0xd/0x40 [ 299.231160][T12641] genl_rcv+0x28/0x40 [ 299.231186][T12641] netlink_unicast+0x80f/0x9b0 [ 299.231228][T12641] ? __pfx_netlink_unicast+0x10/0x10 [ 299.231263][T12641] ? netlink_sendmsg+0x650/0xb40 [ 299.231304][T12641] ? skb_put+0x11b/0x210 [ 299.231332][T12641] netlink_sendmsg+0x813/0xb40 [ 299.231368][T12641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.231396][T12641] ? aa_sock_msg_perm+0xf1/0x1b0 [ 299.231438][T12641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.231469][T12641] ____sys_sendmsg+0x972/0x9f0 [ 299.231507][T12641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.231547][T12641] ? import_iovec+0x73/0xa0 [ 299.231577][T12641] ___sys_sendmsg+0x2a5/0x360 [ 299.231612][T12641] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.231679][T12641] ? __fget_files+0x2a/0x420 [ 299.231712][T12641] ? __fget_files+0x3a0/0x420 [ 299.231756][T12641] __x64_sys_sendmsg+0x1bd/0x2a0 [ 299.231789][T12641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.231829][T12641] ? __pfx_ksys_write+0x10/0x10 [ 299.231867][T12641] do_syscall_64+0x14d/0xf80 [ 299.231893][T12641] ? trace_irq_disable+0x3b/0x150 [ 299.231926][T12641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.231949][T12641] ? clear_bhb_loop+0x40/0x90 [ 299.231977][T12641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.232000][T12641] RIP: 0033:0x7f68d559c799 [ 299.232021][T12641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.232040][T12641] RSP: 002b:00007f68d63f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.232063][T12641] RAX: ffffffffffffffda RBX: 00007f68d5815fa0 RCX: 00007f68d559c799 [ 299.232078][T12641] RDX: 000000002404c080 RSI: 0000200000004bc0 RDI: 0000000000000003 [ 299.232093][T12641] RBP: 00007f68d63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 299.232105][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.232118][T12641] R13: 00007f68d5816038 R14: 00007f68d5815fa0 R15: 00007ffddb727438 [ 299.232153][T12641] [ 299.941927][T12656] FAULT_INJECTION: forcing a failure. [ 299.941927][T12656] name failslab, interval 1, probability 0, space 0, times 0 [ 299.963149][T12656] CPU: 1 UID: 0 PID: 12656 Comm: syz.3.1689 Not tainted syzkaller #0 PREEMPT(full) [ 299.963180][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.963193][T12656] Call Trace: [ 299.963201][T12656] [ 299.963210][T12656] dump_stack_lvl+0xe8/0x150 [ 299.963245][T12656] should_fail_ex+0x412/0x560 [ 299.963281][T12656] should_failslab+0xa8/0x100 [ 299.963310][T12656] __kmalloc_cache_noprof+0x88/0x660 [ 299.963343][T12656] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 299.963367][T12656] ? nft_trans_table_add+0x56/0x430 [ 299.963402][T12656] nft_trans_table_add+0x56/0x430 [ 299.963438][T12656] nf_tables_newtable+0xce3/0x1910 [ 299.963485][T12656] nfnetlink_rcv+0x1240/0x27b0 [ 299.963552][T12656] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 299.963601][T12656] ? ref_tracker_free+0x693/0x840 [ 299.963661][T12656] ? __netlink_deliver_tap+0x807/0x850 [ 299.963682][T12656] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.963722][T12656] netlink_unicast+0x80f/0x9b0 [ 299.963762][T12656] ? __pfx_netlink_unicast+0x10/0x10 [ 299.963796][T12656] ? netlink_sendmsg+0x650/0xb40 [ 299.963815][T12656] ? skb_put+0x11b/0x210 [ 299.963843][T12656] netlink_sendmsg+0x813/0xb40 [ 299.963874][T12656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.963900][T12656] ? aa_sock_msg_perm+0xf1/0x1b0 [ 299.963931][T12656] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.963959][T12656] ____sys_sendmsg+0x972/0x9f0 [ 299.963993][T12656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.964028][T12656] ? import_iovec+0x73/0xa0 [ 299.964055][T12656] ___sys_sendmsg+0x2a5/0x360 [ 299.964087][T12656] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.964148][T12656] ? __fget_files+0x2a/0x420 [ 299.964179][T12656] ? __fget_files+0x3a0/0x420 [ 299.964220][T12656] __x64_sys_sendmsg+0x1bd/0x2a0 [ 299.964249][T12656] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.964285][T12656] ? __pfx_ksys_write+0x10/0x10 [ 299.964320][T12656] do_syscall_64+0x14d/0xf80 [ 299.964351][T12656] ? trace_irq_disable+0x3b/0x150 [ 299.964381][T12656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.964402][T12656] ? clear_bhb_loop+0x40/0x90 [ 299.964428][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.964449][T12656] RIP: 0033:0x7fb59559c799 [ 299.964469][T12656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.964487][T12656] RSP: 002b:00007fb5964bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.964509][T12656] RAX: ffffffffffffffda RBX: 00007fb595815fa0 RCX: 00007fb59559c799 [ 299.964524][T12656] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 299.964537][T12656] RBP: 00007fb5964bb090 R08: 0000000000000000 R09: 0000000000000000 [ 299.964549][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.964560][T12656] R13: 00007fb595816038 R14: 00007fb595815fa0 R15: 00007ffcedf75df8 [ 299.964593][T12656] [ 300.387755][T12645] lec:lec_atm_close: lec0: Shut down! [ 300.457568][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 300.578157][ T25] block nbd2: Possible stuck request ffff8880261a8000: control (read@0,1024B). Runtime 180 seconds [ 300.589356][ T25] block nbd2: Possible stuck request ffff8880261a8200: control (read@1024,1024B). Runtime 180 seconds [ 300.600532][ T25] block nbd2: Possible stuck request ffff8880261a8400: control (read@2048,1024B). Runtime 180 seconds [ 300.611599][ T25] block nbd2: Possible stuck request ffff8880261a8600: control (read@3072,1024B). Runtime 180 seconds [ 300.763317][T12685] sctp: [Deprecated]: syz.0.1698 (pid 12685) Use of int in max_burst socket option deprecated. [ 300.763317][T12685] Use struct sctp_assoc_value instead [ 300.780527][T12685] FAULT_INJECTION: forcing a failure. [ 300.780527][T12685] name failslab, interval 1, probability 0, space 0, times 0 [ 300.793744][T12685] CPU: 1 UID: 0 PID: 12685 Comm: syz.0.1698 Not tainted syzkaller #0 PREEMPT(full) [ 300.793773][T12685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.793787][T12685] Call Trace: [ 300.793795][T12685] [ 300.793804][T12685] dump_stack_lvl+0xe8/0x150 [ 300.793838][T12685] should_fail_ex+0x412/0x560 [ 300.793876][T12685] should_failslab+0xa8/0x100 [ 300.793908][T12685] __kmalloc_cache_noprof+0x88/0x660 [ 300.793932][T12685] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 300.793965][T12685] ? sctp_add_bind_addr+0x8c/0x370 [ 300.794001][T12685] sctp_add_bind_addr+0x8c/0x370 [ 300.794037][T12685] sctp_copy_local_addr_list+0x314/0x4f0 [ 300.794072][T12685] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 300.794105][T12685] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 300.794138][T12685] ? sctp_v6_is_any+0x64/0x80 [ 300.794172][T12685] ? sctp_copy_one_addr+0x93/0x360 [ 300.794206][T12685] sctp_bind_addr_copy+0xb3/0x3c0 [ 300.794237][T12685] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 300.794270][T12685] sctp_connect_new_asoc+0x2ff/0x6b0 [ 300.794298][T12685] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 300.794339][T12685] ? __local_bh_enable_ip+0xd0/0x130 [ 300.794366][T12685] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 300.794393][T12685] ? security_sctp_bind_connect+0x7e/0x2c0 [ 300.794424][T12685] sctp_sendmsg+0x1528/0x2c10 [ 300.794462][T12685] ? __pfx_sctp_sendmsg+0x10/0x10 [ 300.794487][T12685] ? aa_sk_perm+0x6d5/0x900 [ 300.794527][T12685] ? __pfx_aa_sk_perm+0x10/0x10 [ 300.794562][T12685] ? sock_rps_record_flow+0x19/0x350 [ 300.794587][T12685] ? __pfx_inet_sendmsg+0x10/0x10 [ 300.794615][T12685] ? inet_sendmsg+0x2f4/0x370 [ 300.794643][T12685] ? __pfx_inet_sendmsg+0x10/0x10 [ 300.794670][T12685] __sys_sendto+0x5de/0x710 [ 300.794701][T12685] ? __pfx___sys_sendto+0x10/0x10 [ 300.794724][T12685] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 300.794767][T12685] ? __fget_files+0x3a0/0x420 [ 300.794814][T12685] ? ksys_write+0x242/0x270 [ 300.794841][T12685] ? __pfx_ksys_write+0x10/0x10 [ 300.794872][T12685] __x64_sys_sendto+0xde/0x100 [ 300.794902][T12685] do_syscall_64+0x14d/0xf80 [ 300.794928][T12685] ? trace_irq_disable+0x3b/0x150 [ 300.794960][T12685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.794983][T12685] ? clear_bhb_loop+0x40/0x90 [ 300.795011][T12685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.795034][T12685] RIP: 0033:0x7f199519c799 [ 300.795067][T12685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.795086][T12685] RSP: 002b:00007f1996131028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 300.795109][T12685] RAX: ffffffffffffffda RBX: 00007f1995415fa0 RCX: 00007f199519c799 [ 300.795124][T12685] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 300.795137][T12685] RBP: 00007f1996131090 R08: 0000200000000100 R09: 000000000000001c [ 300.795150][T12685] R10: 0000000020008840 R11: 0000000000000246 R12: 0000000000000002 [ 300.795163][T12685] R13: 00007f1995416038 R14: 00007f1995415fa0 R15: 00007ffd85c8b5d8 [ 300.795197][T12685] [ 301.463598][T12697] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 301.549912][T12703] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1705'. [ 301.614717][T12703] FAULT_INJECTION: forcing a failure. [ 301.614717][T12703] name failslab, interval 1, probability 0, space 0, times 0 [ 301.640240][T12703] CPU: 1 UID: 0 PID: 12703 Comm: syz.0.1705 Not tainted syzkaller #0 PREEMPT(full) [ 301.640267][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.640278][T12703] Call Trace: [ 301.640294][T12703] [ 301.640304][T12703] dump_stack_lvl+0xe8/0x150 [ 301.640341][T12703] should_fail_ex+0x412/0x560 [ 301.640377][T12703] should_failslab+0xa8/0x100 [ 301.640402][T12703] ? skb_clone+0x212/0x3a0 [ 301.640430][T12703] kmem_cache_alloc_noprof+0x87/0x650 [ 301.640461][T12703] skb_clone+0x212/0x3a0 [ 301.640492][T12703] __netlink_deliver_tap+0x404/0x850 [ 301.640529][T12703] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.640554][T12703] netlink_deliver_tap+0x19c/0x1b0 [ 301.640579][T12703] netlink_broadcast_filtered+0xc12/0x1020 [ 301.640637][T12703] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 301.640681][T12703] team_nl_send_multicast+0xb6/0x100 [ 301.640715][T12703] team_nl_send_options_get+0x112a/0x11b0 [ 301.640753][T12703] ? __pfx_team_nl_send_multicast+0x10/0x10 [ 301.640784][T12703] ? __pfx_team_nl_send_options_get+0x10/0x10 [ 301.640813][T12703] ? dev_get_by_index+0x22/0x2e0 [ 301.640852][T12703] ? dev_get_by_index+0x22/0x2e0 [ 301.640889][T12703] team_nl_options_set_doit+0xb68/0xe60 [ 301.640924][T12703] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 301.640959][T12703] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 301.640985][T12703] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 301.641018][T12703] genl_family_rcv_msg_doit+0x22a/0x330 [ 301.641050][T12703] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 301.641086][T12703] ? bpf_lsm_capable+0x9/0x20 [ 301.641111][T12703] ? security_capable+0x7e/0x2c0 [ 301.641143][T12703] genl_rcv_msg+0x61c/0x7a0 [ 301.641174][T12703] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.641199][T12703] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 301.641223][T12703] ? __lock_acquire+0x6b5/0x2cf0 [ 301.641265][T12703] netlink_rcv_skb+0x232/0x4b0 [ 301.641285][T12703] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.641317][T12703] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.641353][T12703] ? down_read+0x272/0x2e0 [ 301.641376][T12703] ? genl_rcv+0xd/0x40 [ 301.641400][T12703] genl_rcv+0x28/0x40 [ 301.641425][T12703] netlink_unicast+0x80f/0x9b0 [ 301.641466][T12703] ? __pfx_netlink_unicast+0x10/0x10 [ 301.641501][T12703] ? netlink_sendmsg+0x650/0xb40 [ 301.641520][T12703] ? skb_put+0x11b/0x210 [ 301.641546][T12703] netlink_sendmsg+0x813/0xb40 [ 301.641574][T12703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.641597][T12703] ? aa_sock_msg_perm+0xf1/0x1b0 [ 301.641627][T12703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.641652][T12703] ____sys_sendmsg+0x972/0x9f0 [ 301.641684][T12703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.641717][T12703] ? import_iovec+0x73/0xa0 [ 301.641741][T12703] ___sys_sendmsg+0x2a5/0x360 [ 301.641770][T12703] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.641835][T12703] ? __fget_files+0x2a/0x420 [ 301.641865][T12703] ? __fget_files+0x3a0/0x420 [ 301.641907][T12703] __x64_sys_sendmsg+0x1bd/0x2a0 [ 301.641935][T12703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.641972][T12703] ? __pfx_ksys_write+0x10/0x10 [ 301.642006][T12703] do_syscall_64+0x14d/0xf80 [ 301.642028][T12703] ? trace_irq_disable+0x3b/0x150 [ 301.642057][T12703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.642079][T12703] ? clear_bhb_loop+0x40/0x90 [ 301.642107][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.642128][T12703] RIP: 0033:0x7f199519c799 [ 301.642149][T12703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.642167][T12703] RSP: 002b:00007f1996131028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.642188][T12703] RAX: ffffffffffffffda RBX: 00007f1995415fa0 RCX: 00007f199519c799 [ 301.642201][T12703] RDX: 000000002404c080 RSI: 0000200000004bc0 RDI: 0000000000000003 [ 301.642212][T12703] RBP: 00007f1996131090 R08: 0000000000000000 R09: 0000000000000000 [ 301.642223][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.642234][T12703] R13: 00007f1995416038 R14: 00007f1995415fa0 R15: 00007ffd85c8b5d8 [ 301.642264][T12703] [ 302.132236][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 302.585153][T12719] vlan3: entered allmulticast mode [ 302.593615][T12719] veth0_to_bond: entered allmulticast mode [ 303.255696][T12769] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 303.361194][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1725'. [ 303.637667][T12779] netlink: 'syz.4.1727': attribute type 1 has an invalid length. [ 304.085481][T12802] FAULT_INJECTION: forcing a failure. [ 304.085481][T12802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.115312][T12803] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1737'. [ 304.125766][T12802] CPU: 0 UID: 0 PID: 12802 Comm: syz.2.1736 Not tainted syzkaller #0 PREEMPT(full) [ 304.125797][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 304.125810][T12802] Call Trace: [ 304.125819][T12802] [ 304.125829][T12802] dump_stack_lvl+0xe8/0x150 [ 304.125876][T12802] should_fail_ex+0x412/0x560 [ 304.125914][T12802] _copy_from_user+0x2d/0xb0 [ 304.125940][T12802] ___sys_sendmsg+0x1c6/0x360 [ 304.125974][T12802] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.126039][T12802] ? __fget_files+0x2a/0x420 [ 304.126070][T12802] ? __fget_files+0x3a0/0x420 [ 304.126113][T12802] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.126144][T12802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.126182][T12802] ? __pfx_ksys_write+0x10/0x10 [ 304.126227][T12802] do_syscall_64+0x14d/0xf80 [ 304.126252][T12802] ? trace_irq_disable+0x3b/0x150 [ 304.126284][T12802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.126306][T12802] ? clear_bhb_loop+0x40/0x90 [ 304.126333][T12802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.126355][T12802] RIP: 0033:0x7f68d559c799 [ 304.126375][T12802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.126394][T12802] RSP: 002b:00007f68d63d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.126416][T12802] RAX: ffffffffffffffda RBX: 00007f68d5816090 RCX: 00007f68d559c799 [ 304.126433][T12802] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 304.126446][T12802] RBP: 00007f68d63d8090 R08: 0000000000000000 R09: 0000000000000000 [ 304.126459][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.126471][T12802] R13: 00007f68d5816128 R14: 00007f68d5816090 R15: 00007ffddb727438 [ 304.126506][T12802] [ 304.305842][T12803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1737'. [ 304.430957][ T25] block nbd11: Possible stuck request ffff888026520000: control (read@0,1024B). Runtime 120 seconds [ 304.442006][ T25] block nbd11: Possible stuck request ffff888026520200: control (read@1024,1024B). Runtime 120 seconds [ 304.458602][ T25] block nbd11: Possible stuck request ffff888026520400: control (read@2048,1024B). Runtime 120 seconds [ 304.470045][ T25] block nbd11: Possible stuck request ffff888026520600: control (read@3072,1024B). Runtime 120 seconds [ 304.514430][T12812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1739'. [ 304.539862][T12812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1739'. [ 304.555772][T12812] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1739'. [ 304.705443][T12818] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1742'. [ 305.529263][T12858] netlink: 'syz.0.1752': attribute type 21 has an invalid length. [ 305.573372][T12858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1752'. [ 305.693637][T12862] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1757'. [ 305.937049][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5550 ms [ 305.945124][ C1] lec:lec_tx_timeout: lec0 [ 305.954693][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 307.545948][T12944] netlink: 'syz.0.1783': attribute type 3 has an invalid length. [ 307.848264][T12954] __nla_validate_parse: 2 callbacks suppressed [ 307.848285][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'. [ 307.892615][T12951] x_tables: duplicate underflow at hook 1 [ 308.313720][T12963] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1790'. [ 308.726885][T12970] batman_adv: batadv0: Adding interface: wlan1 [ 308.736466][T12983] netlink: 'syz.4.1797': attribute type 3 has an invalid length. [ 308.742177][T12970] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.794167][T12970] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 308.920454][T12990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1799'. [ 309.231796][T13006] netlink: 'syz.2.1806': attribute type 1 has an invalid length. [ 309.260244][T13006] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.281815][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'. [ 309.291242][T13006] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 309.368933][T13006] bond4: entered allmulticast mode [ 309.397417][T13015] netlink: 'syz.0.1808': attribute type 3 has an invalid length. [ 309.399555][T13000] syzkaller1: entered promiscuous mode [ 309.414670][T13000] syzkaller1: entered allmulticast mode [ 309.484755][T13010] bond4: (slave ip6gretap0): Enslaving as an active interface with an up link [ 309.788913][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1812'. [ 309.802064][T13024] syzkaller0: entered promiscuous mode [ 309.807685][T13024] syzkaller0: entered allmulticast mode [ 310.183310][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'. [ 310.198741][T13055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1820'. [ 310.280694][T13055] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 310.449196][T13070] FAULT_INJECTION: forcing a failure. [ 310.449196][T13070] name failslab, interval 1, probability 0, space 0, times 0 [ 310.476030][T13070] CPU: 1 UID: 0 PID: 13070 Comm: syz.3.1824 Not tainted syzkaller #0 PREEMPT(full) [ 310.476060][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.476072][T13070] Call Trace: [ 310.476080][T13070] [ 310.476090][T13070] dump_stack_lvl+0xe8/0x150 [ 310.476127][T13070] should_fail_ex+0x412/0x560 [ 310.476165][T13070] should_failslab+0xa8/0x100 [ 310.476197][T13070] __kvmalloc_node_noprof+0x178/0x8a0 [ 310.476225][T13070] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 310.476258][T13070] ? __asan_memset+0x22/0x50 [ 310.476284][T13070] alloc_netdev_mqs+0x8a6/0x11b0 [ 310.476322][T13070] rtnl_create_link+0x31f/0xd70 [ 310.476361][T13070] rtnl_newlink_create+0x277/0xb70 [ 310.476393][T13070] ? __pfx___nla_validate_parse+0x10/0x10 [ 310.476427][T13070] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 310.476463][T13070] ? __pfx___mutex_lock+0x10/0x10 [ 310.476502][T13070] ? ns_capable+0x89/0xe0 [ 310.476534][T13070] rtnl_newlink+0x1666/0x1be0 [ 310.476574][T13070] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.476595][T13070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.476658][T13070] ? kasan_quarantine_put+0xbb/0x1f0 [ 310.476683][T13070] ? lockdep_hardirqs_on+0x7a/0x110 [ 310.476718][T13070] ? kmem_cache_free+0x187/0x630 [ 310.476743][T13070] ? nlmon_xmit+0xb0/0x100 [ 310.476784][T13070] ? __lock_acquire+0x6b5/0x2cf0 [ 310.476828][T13070] ? __local_bh_enable_ip+0xd0/0x130 [ 310.476857][T13070] ? lockdep_hardirqs_on+0x7a/0x110 [ 310.476882][T13070] ? __dev_queue_xmit+0x28b/0x3870 [ 310.476910][T13070] ? __local_bh_enable_ip+0xd0/0x130 [ 310.476936][T13070] ? __dev_queue_xmit+0x28b/0x3870 [ 310.476997][T13070] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.477019][T13070] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 310.477046][T13070] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 310.477068][T13070] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.477088][T13070] ? ref_tracker_free+0x693/0x840 [ 310.477119][T13070] ? __copy_skb_header+0xa3/0x4a0 [ 310.477150][T13070] ? __pfx_ref_tracker_free+0x10/0x10 [ 310.477181][T13070] ? __skb_clone+0x63/0x7a0 [ 310.477217][T13070] netlink_rcv_skb+0x232/0x4b0 [ 310.477242][T13070] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.477267][T13070] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.477302][T13070] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.477335][T13070] netlink_unicast+0x80f/0x9b0 [ 310.477379][T13070] ? __pfx_netlink_unicast+0x10/0x10 [ 310.477414][T13070] ? netlink_sendmsg+0x650/0xb40 [ 310.477437][T13070] ? skb_put+0x11b/0x210 [ 310.477477][T13070] netlink_sendmsg+0x813/0xb40 [ 310.477513][T13070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.477541][T13070] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.477576][T13070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.477605][T13070] ____sys_sendmsg+0x972/0x9f0 [ 310.477645][T13070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.477684][T13070] ? import_iovec+0x73/0xa0 [ 310.477713][T13070] ___sys_sendmsg+0x2a5/0x360 [ 310.477748][T13070] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.477825][T13070] ? __fget_files+0x2a/0x420 [ 310.477858][T13070] ? __fget_files+0x3a0/0x420 [ 310.477903][T13070] __x64_sys_sendmsg+0x1bd/0x2a0 [ 310.477935][T13070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.477975][T13070] ? __pfx_ksys_write+0x10/0x10 [ 310.478014][T13070] do_syscall_64+0x14d/0xf80 [ 310.478039][T13070] ? trace_irq_disable+0x3b/0x150 [ 310.478072][T13070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.478096][T13070] ? clear_bhb_loop+0x40/0x90 [ 310.478124][T13070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.478146][T13070] RIP: 0033:0x7fb59559c799 [ 310.478167][T13070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.478186][T13070] RSP: 002b:00007fb5964bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.478209][T13070] RAX: ffffffffffffffda RBX: 00007fb595815fa0 RCX: 00007fb59559c799 [ 310.478225][T13070] RDX: 0000000008000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 310.478238][T13070] RBP: 00007fb5964bb090 R08: 0000000000000000 R09: 0000000000000000 [ 310.478251][T13070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.478264][T13070] R13: 00007fb595816038 R14: 00007fb595815fa0 R15: 00007ffcedf75df8 [ 310.478299][T13070] [ 310.904004][T13072] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.967049][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 310.975122][ C1] lec:lec_tx_timeout: lec0 [ 310.980950][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 311.450664][T13098] netlink: 'syz.4.1836': attribute type 3 has an invalid length. [ 311.469701][ T25] block nbd12: Possible stuck request ffff888026588000: control (read@0,1024B). Runtime 120 seconds [ 311.480880][ T25] block nbd12: Possible stuck request ffff888026588200: control (read@1024,1024B). Runtime 120 seconds [ 311.492243][ T25] block nbd12: Possible stuck request ffff888026588400: control (read@2048,1024B). Runtime 120 seconds [ 311.503543][ T25] block nbd12: Possible stuck request ffff888026588600: control (read@3072,1024B). Runtime 120 seconds [ 311.538389][T13096] netlink: 'syz.1.1835': attribute type 29 has an invalid length. [ 311.654925][T13099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1835'. [ 311.685865][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 311.740746][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 311.829008][T13112] netlink: 'syz.2.1840': attribute type 13 has an invalid length. [ 312.050592][T13122] sctp: [Deprecated]: syz.1.1842 (pid 13122) Use of int in max_burst socket option deprecated. [ 312.050592][T13122] Use struct sctp_assoc_value instead [ 312.620700][T13149] netlink: 'syz.4.1853': attribute type 3 has an invalid length. [ 312.745000][T13151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.843258][T13151] bond6: entered promiscuous mode [ 312.857124][T13151] bond6: entered allmulticast mode [ 312.867620][T13163] openvswitch: netlink: IP tunnel dst address not specified [ 312.907400][T13151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.916846][T13151] team0: Port device bond6 added [ 313.102274][T13155] ip6gretap1: entered promiscuous mode [ 313.237825][T13155] ip6gretap1: entered allmulticast mode [ 313.292923][T13155] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 313.878181][T13199] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 313.897198][T13199] __nla_validate_parse: 4 callbacks suppressed [ 313.897221][T13199] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1862'. [ 313.958529][T13199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.031204][T13206] syz_tun: entered promiscuous mode [ 314.049502][T13206] team0: Port device syz_tun added [ 314.171109][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 314.228077][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1867'. [ 314.681133][T13243] FAULT_INJECTION: forcing a failure. [ 314.681133][T13243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.747407][T13243] CPU: 1 UID: 0 PID: 13243 Comm: syz.0.1875 Not tainted syzkaller #0 PREEMPT(full) [ 314.747437][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.747449][T13243] Call Trace: [ 314.747457][T13243] [ 314.747465][T13243] dump_stack_lvl+0xe8/0x150 [ 314.747500][T13243] should_fail_ex+0x412/0x560 [ 314.747536][T13243] _copy_from_user+0x2d/0xb0 [ 314.747561][T13243] copy_from_sockptr_offset+0x66/0xa0 [ 314.747598][T13243] do_ip6t_set_ctl+0x93d/0xe10 [ 314.747632][T13243] ? rcu_is_watching+0x15/0xb0 [ 314.747664][T13243] ? trace_contention_end+0x3d/0x150 [ 314.747696][T13243] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 314.747745][T13243] ? __pfx___mutex_lock+0x10/0x10 [ 314.747772][T13243] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.747816][T13243] ? __pfx_aa_sk_perm+0x10/0x10 [ 314.747853][T13243] nf_setsockopt+0x26f/0x290 [ 314.747884][T13243] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 314.747921][T13243] do_sock_setsockopt+0x17c/0x1b0 [ 314.747952][T13243] __x64_sys_setsockopt+0x13d/0x1b0 [ 314.747984][T13243] do_syscall_64+0x14d/0xf80 [ 314.748009][T13243] ? trace_irq_disable+0x3b/0x150 [ 314.748041][T13243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.748062][T13243] ? clear_bhb_loop+0x40/0x90 [ 314.748089][T13243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.748109][T13243] RIP: 0033:0x7f199519c799 [ 314.748128][T13243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.748147][T13243] RSP: 002b:00007f1996131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 314.748170][T13243] RAX: ffffffffffffffda RBX: 00007f1995415fa0 RCX: 00007f199519c799 [ 314.748186][T13243] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 314.748199][T13243] RBP: 00007f1996131090 R08: 0000000000000418 R09: 0000000000000000 [ 314.748212][T13243] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 314.748226][T13243] R13: 00007f1995416038 R14: 00007f1995415fa0 R15: 00007ffd85c8b5d8 [ 314.748259][T13243] [ 314.789522][T13246] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1876'. [ 315.357429][T13262] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 315.456751][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 315.489794][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1884'. [ 315.911918][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 315.921691][T13253] nbd: couldn't find a device at index 65546 [ 315.997059][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 316.005185][ C1] lec:lec_tx_timeout: lec0 [ 316.009899][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 316.063344][T13290] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1892'. [ 316.093089][T13252] lec:lec_atm_close: lec0: Shut down! [ 316.494585][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1897'. [ 316.528233][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'. [ 316.980267][T13316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.017166][T13316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.076262][T13316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.098230][T13316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.221996][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.553364][T13330] hsr_slave_0: left promiscuous mode [ 317.569723][T13330] hsr_slave_1: left promiscuous mode [ 317.708524][T13330] lo: Caught tx_queue_len zero misconfig [ 317.714253][T13330] netem: change failed [ 317.853729][T13343] netlink: 'syz.2.1908': attribute type 12 has an invalid length. [ 318.573377][T13352] bond4: Removing last ns target with arp_interval on [ 318.702789][T13354] syzkaller0: entered promiscuous mode [ 318.717125][T13354] syzkaller0: entered allmulticast mode [ 319.089353][T13377] __nla_validate_parse: 4 callbacks suppressed [ 319.089375][T13377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1919'. [ 319.200828][T13381] FAULT_INJECTION: forcing a failure. [ 319.200828][T13381] name failslab, interval 1, probability 0, space 0, times 0 [ 319.224036][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1921'. [ 319.233399][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1921'. [ 319.274354][T13381] CPU: 1 UID: 0 PID: 13381 Comm: syz.4.1922 Not tainted syzkaller #0 PREEMPT(full) [ 319.274386][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.274401][T13381] Call Trace: [ 319.274410][T13381] [ 319.274419][T13381] dump_stack_lvl+0xe8/0x150 [ 319.274455][T13381] should_fail_ex+0x412/0x560 [ 319.274494][T13381] should_failslab+0xa8/0x100 [ 319.274524][T13381] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 319.274549][T13381] ? __alloc_skb+0x186/0x7d0 [ 319.274573][T13381] ? __alloc_skb+0x1d0/0x7d0 [ 319.274594][T13381] ? __local_bh_enable_ip+0xd0/0x130 [ 319.274628][T13381] __alloc_skb+0x1d0/0x7d0 [ 319.274656][T13381] ? __pfx_fib6_rule_nlmsg_payload+0x10/0x10 [ 319.274688][T13381] notify_rule_change+0xb1/0x210 [ 319.274721][T13381] fib_newrule+0xe3b/0x1030 [ 319.274755][T13381] ? __pfx_fib_newrule+0x10/0x10 [ 319.274819][T13381] ? __pfx_fib_nl_newrule+0x10/0x10 [ 319.274845][T13381] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 319.274873][T13381] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 319.274896][T13381] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.274923][T13381] ? __lock_acquire+0x6b5/0x2cf0 [ 319.274963][T13381] netlink_rcv_skb+0x232/0x4b0 [ 319.274987][T13381] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.275011][T13381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.275047][T13381] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.275078][T13381] netlink_unicast+0x80f/0x9b0 [ 319.275120][T13381] ? __pfx_netlink_unicast+0x10/0x10 [ 319.275155][T13381] ? netlink_sendmsg+0x650/0xb40 [ 319.275176][T13381] ? skb_put+0x11b/0x210 [ 319.275205][T13381] netlink_sendmsg+0x813/0xb40 [ 319.275238][T13381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.275265][T13381] ? aa_sock_msg_perm+0xf1/0x1b0 [ 319.275308][T13381] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.275338][T13381] ____sys_sendmsg+0x972/0x9f0 [ 319.275375][T13381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.275411][T13381] ? import_iovec+0x73/0xa0 [ 319.275439][T13381] ___sys_sendmsg+0x2a5/0x360 [ 319.275473][T13381] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.275537][T13381] ? __fget_files+0x2a/0x420 [ 319.275569][T13381] ? __fget_files+0x3a0/0x420 [ 319.275610][T13381] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.275641][T13381] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.275684][T13381] ? __pfx_ksys_write+0x10/0x10 [ 319.275721][T13381] do_syscall_64+0x14d/0xf80 [ 319.275747][T13381] ? trace_irq_disable+0x3b/0x150 [ 319.275778][T13381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.275800][T13381] ? clear_bhb_loop+0x40/0x90 [ 319.275827][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.275849][T13381] RIP: 0033:0x7fb88879c799 [ 319.275869][T13381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.275890][T13381] RSP: 002b:00007fb8895b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.275914][T13381] RAX: ffffffffffffffda RBX: 00007fb888a15fa0 RCX: 00007fb88879c799 [ 319.275930][T13381] RDX: 0000000004008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 319.275944][T13381] RBP: 00007fb8895b0090 R08: 0000000000000000 R09: 0000000000000000 [ 319.275957][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.275969][T13381] R13: 00007fb888a16038 R14: 00007fb888a15fa0 R15: 00007ffc373f42e8 [ 319.276002][T13381] [ 319.860818][T13371] lec:lec_atm_close: lec0: Shut down! [ 320.158750][T13400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1925'. [ 320.450845][ T1634] block nbd6: Possible stuck request ffff8880262d0000: control (read@0,1024B). Runtime 150 seconds [ 320.462151][ T1634] block nbd6: Possible stuck request ffff8880262d0200: control (read@1024,1024B). Runtime 150 seconds [ 320.473350][ T1634] block nbd6: Possible stuck request ffff8880262d0400: control (read@2048,1024B). Runtime 150 seconds [ 320.485650][ T1634] block nbd6: Possible stuck request ffff8880262d0600: control (read@3072,1024B). Runtime 150 seconds [ 320.527321][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1929'. [ 321.131381][T13428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1934'. [ 321.689859][T13437] syzkaller1: entered promiscuous mode [ 321.702136][T13437] syzkaller1: entered allmulticast mode [ 322.005725][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 322.016754][T13443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1937'. [ 322.045701][T13443] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.053540][T13443] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.116519][T13445] FAULT_INJECTION: forcing a failure. [ 322.116519][T13445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.149939][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 322.156131][T13445] CPU: 1 UID: 0 PID: 13445 Comm: syz.3.1939 Not tainted syzkaller #0 PREEMPT(full) [ 322.156204][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.156238][T13445] Call Trace: [ 322.156267][T13445] [ 322.156291][T13445] dump_stack_lvl+0xe8/0x150 [ 322.156392][T13445] should_fail_ex+0x412/0x560 [ 322.156503][T13445] _copy_to_user+0x31/0xb0 [ 322.156577][T13445] simple_read_from_buffer+0xe1/0x170 [ 322.156681][T13445] proc_fail_nth_read+0x1bb/0x230 [ 322.156776][T13445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.156871][T13445] ? rw_verify_area+0x2a6/0x4d0 [ 322.156934][T13445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.157030][T13445] vfs_read+0x20c/0xa70 [ 322.157094][T13445] ? fdget_pos+0x246/0x320 [ 322.157176][T13445] ? __pfx___mutex_lock+0x10/0x10 [ 322.157252][T13445] ? __pfx_vfs_read+0x10/0x10 [ 322.157343][T13445] ? __fget_files+0x2a/0x420 [ 322.157455][T13445] ? __fget_files+0x3a0/0x420 [ 322.157538][T13445] ? __fget_files+0x2a/0x420 [ 322.157654][T13445] ksys_read+0x150/0x270 [ 322.157726][T13445] ? __pfx_ksys_read+0x10/0x10 [ 322.157811][T13445] do_syscall_64+0x14d/0xf80 [ 322.157867][T13445] ? trace_irq_disable+0x3b/0x150 [ 322.157948][T13445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.158008][T13445] ? clear_bhb_loop+0x40/0x90 [ 322.158112][T13445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.158157][T13445] RIP: 0033:0x7fb59555cfce [ 322.158210][T13445] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 322.158262][T13445] RSP: 002b:00007fb5964bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.158319][T13445] RAX: ffffffffffffffda RBX: 00007fb5964bb6c0 RCX: 00007fb59555cfce [ 322.158354][T13445] RDX: 000000000000000f RSI: 00007fb5964bb0a0 RDI: 0000000000000005 [ 322.158393][T13445] RBP: 00007fb5964bb090 R08: 0000000000000000 R09: 0000000000000000 [ 322.158424][T13445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.158457][T13445] R13: 00007fb595816038 R14: 00007fb595815fa0 R15: 00007ffcedf75df8 [ 322.158549][T13445] [ 322.406694][ T1634] block nbd7: Possible stuck request ffff888026338000: control (read@0,1024B). Runtime 150 seconds [ 322.418008][ T1634] block nbd7: Possible stuck request ffff888026338200: control (read@1024,1024B). Runtime 150 seconds [ 322.429225][ T1634] block nbd7: Possible stuck request ffff888026338400: control (read@2048,1024B). Runtime 150 seconds [ 322.440337][ T1634] block nbd7: Possible stuck request ffff888026338600: control (read@3072,1024B). Runtime 150 seconds [ 322.615933][T13453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1940'. [ 323.635312][T13492] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.722039][T13492] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.864656][T13492] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.891878][T13497] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 324.016399][T13492] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.422182][ T124] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.602845][ T124] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.691981][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.711348][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.808416][T13524] __nla_validate_parse: 4 callbacks suppressed [ 324.808449][T13524] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1958'. [ 324.897195][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 324.905314][ C1] lec:lec_tx_timeout: lec0 [ 324.911138][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.946168][ T25] block nbd8: Possible stuck request ffff8880263b8000: control (read@0,1024B). Runtime 150 seconds [ 324.957291][ T25] block nbd8: Possible stuck request ffff8880263b8200: control (read@1024,1024B). Runtime 150 seconds [ 324.968712][ T25] block nbd8: Possible stuck request ffff8880263b8400: control (read@2048,1024B). Runtime 150 seconds [ 324.982747][ T25] block nbd8: Possible stuck request ffff8880263b8600: control (read@3072,1024B). Runtime 150 seconds [ 325.119372][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1961'. [ 325.809962][T13550] IPVS: Scheduler module ip_vs_ not found [ 326.042106][T13556] tipc: Enabled bearer , priority 0 [ 326.181160][ T1634] block nbd0: Possible stuck request ffff8880260d1400: control (read@0,1024B). Runtime 210 seconds [ 326.185589][T13534] block nbd9: Possible stuck request ffff888026400000: control (read@0,1024B). Runtime 150 seconds [ 326.192222][ T1634] block nbd0: Possible stuck request ffff8880260d1600: control (read@1024,1024B). Runtime 210 seconds [ 326.208091][T13534] block nbd9: Possible stuck request ffff888026400200: control (read@1024,1024B). Runtime 150 seconds [ 326.214069][ T1634] block nbd0: Possible stuck request ffff8880260d1800: control (read@2048,1024B). Runtime 210 seconds [ 326.235761][T13534] block nbd9: Possible stuck request ffff888026400400: control (read@2048,1024B). Runtime 150 seconds [ 326.247065][ T1634] block nbd0: Possible stuck request ffff8880260d1a00: control (read@3072,1024B). Runtime 210 seconds [ 326.258526][T13556] syzkaller0: entered promiscuous mode [ 326.264045][T13556] syzkaller0: entered allmulticast mode [ 326.271236][ T11] block nbd3: Possible stuck request ffff8880261d8000: control (read@0,1024B). Runtime 180 seconds [ 326.282182][ T11] block nbd3: Possible stuck request ffff8880261d8200: control (read@1024,1024B). Runtime 180 seconds [ 326.293520][T13534] block nbd9: Possible stuck request ffff888026400600: control (read@3072,1024B). Runtime 150 seconds [ 326.316694][ T11] block nbd3: Possible stuck request ffff8880261d8400: control (read@2048,1024B). Runtime 180 seconds [ 326.328354][ T11] block nbd3: Possible stuck request ffff8880261d8600: control (read@3072,1024B). Runtime 180 seconds [ 326.365341][T13568] netlink: 'syz.4.1970': attribute type 9 has an invalid length. [ 326.482104][T13556] tipc: Resetting bearer [ 326.617384][T13577] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1971'. [ 326.821216][T13555] tipc: Resetting bearer [ 326.846164][T13555] tipc: Disabling bearer [ 326.947857][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 326.984785][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1974'. [ 327.502986][T13608] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 327.550499][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'. [ 327.570653][T13608] bond1 (unregistering): Released all slaves [ 327.631111][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 328.103249][T13534] block nbd10: Possible stuck request ffff8880264c0000: control (read@0,1024B). Runtime 150 seconds [ 328.114955][ T5159] block nbd4: Possible stuck request ffff888026240000: control (read@0,1024B). Runtime 180 seconds [ 328.126110][ T5159] block nbd4: Possible stuck request ffff888026240200: control (read@1024,1024B). Runtime 180 seconds [ 328.141220][T13534] block nbd10: Possible stuck request ffff8880264c0200: control (read@1024,1024B). Runtime 150 seconds [ 328.153013][ T5159] block nbd4: Possible stuck request ffff888026240400: control (read@2048,1024B). Runtime 180 seconds [ 328.164585][T13534] block nbd10: Possible stuck request ffff8880264c0400: control (read@2048,1024B). Runtime 150 seconds [ 328.176005][ T5159] block nbd4: Possible stuck request ffff888026240600: control (read@3072,1024B). Runtime 180 seconds [ 328.187671][T13534] block nbd10: Possible stuck request ffff8880264c0600: control (read@3072,1024B). Runtime 150 seconds [ 328.306520][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'. [ 328.331605][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1987'. [ 328.740660][ T11] block nbd1: Possible stuck request ffff888026130000: control (read@0,1024B). Runtime 210 seconds [ 328.752693][ T11] block nbd1: Possible stuck request ffff888026130200: control (read@1024,1024B). Runtime 210 seconds [ 328.763868][ T11] block nbd1: Possible stuck request ffff888026130400: control (read@2048,1024B). Runtime 210 seconds [ 328.775841][ T11] block nbd1: Possible stuck request ffff888026130600: control (read@3072,1024B). Runtime 210 seconds [ 329.937393][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 329.945508][ C1] lec:lec_tx_timeout: lec0 [ 329.950443][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 330.203336][T13595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.520723][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 330.646389][T13668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1994'. [ 330.655627][T13668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1994'. [ 330.687679][T13534] block nbd2: Possible stuck request ffff8880261a8000: control (read@0,1024B). Runtime 210 seconds [ 330.699539][T13534] block nbd2: Possible stuck request ffff8880261a8200: control (read@1024,1024B). Runtime 210 seconds [ 330.710636][T13534] block nbd2: Possible stuck request ffff8880261a8400: control (read@2048,1024B). Runtime 210 seconds [ 330.721725][T13534] block nbd2: Possible stuck request ffff8880261a8600: control (read@3072,1024B). Runtime 210 seconds [ 331.105659][T13687] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 331.121561][T13687] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2000'. [ 331.156192][T13678] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.181130][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 331.231070][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 331.325152][T13678] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.481905][T13678] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.623466][T13678] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.908180][T13716] sctp: [Deprecated]: syz.2.2007 (pid 13716) Use of int in max_burst socket option deprecated. [ 331.908180][T13716] Use struct sctp_assoc_value instead [ 331.981264][ T124] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.991212][T13717] FAULT_INJECTION: forcing a failure. [ 331.991212][T13717] name failslab, interval 1, probability 0, space 0, times 0 [ 332.007535][T13717] CPU: 1 UID: 0 PID: 13717 Comm: syz.2.2007 Not tainted syzkaller #0 PREEMPT(full) [ 332.007564][T13717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.007578][T13717] Call Trace: [ 332.007587][T13717] [ 332.007596][T13717] dump_stack_lvl+0xe8/0x150 [ 332.007632][T13717] should_fail_ex+0x412/0x560 [ 332.007672][T13717] should_failslab+0xa8/0x100 [ 332.007703][T13717] __kmalloc_cache_noprof+0x88/0x660 [ 332.007728][T13717] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 332.007761][T13717] ? sctp_add_bind_addr+0x8c/0x370 [ 332.007806][T13717] sctp_add_bind_addr+0x8c/0x370 [ 332.007842][T13717] sctp_copy_local_addr_list+0x314/0x4f0 [ 332.007879][T13717] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 332.007911][T13717] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 332.007945][T13717] ? sctp_v6_is_any+0x64/0x80 [ 332.007979][T13717] ? sctp_copy_one_addr+0x93/0x360 [ 332.008013][T13717] sctp_bind_addr_copy+0xb3/0x3c0 [ 332.008045][T13717] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 332.008078][T13717] sctp_connect_new_asoc+0x2ff/0x6b0 [ 332.008105][T13717] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 332.008137][T13717] ? __local_bh_enable_ip+0xd0/0x130 [ 332.008165][T13717] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 332.008192][T13717] ? security_sctp_bind_connect+0x7e/0x2c0 [ 332.008224][T13717] sctp_sendmsg+0x1528/0x2c10 [ 332.008264][T13717] ? __pfx_sctp_sendmsg+0x10/0x10 [ 332.008291][T13717] ? aa_sk_perm+0x6d5/0x900 [ 332.008331][T13717] ? __pfx_aa_sk_perm+0x10/0x10 [ 332.008365][T13717] ? sock_rps_record_flow+0x19/0x350 [ 332.008391][T13717] ? __pfx_inet_sendmsg+0x10/0x10 [ 332.008418][T13717] ? inet_sendmsg+0x2f4/0x370 [ 332.008452][T13717] ? __pfx_inet_sendmsg+0x10/0x10 [ 332.008479][T13717] __sys_sendto+0x5de/0x710 [ 332.008509][T13717] ? __pfx___sys_sendto+0x10/0x10 [ 332.008532][T13717] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 332.008574][T13717] ? __fget_files+0x3a0/0x420 [ 332.008619][T13717] ? ksys_write+0x242/0x270 [ 332.008655][T13717] ? __pfx_ksys_write+0x10/0x10 [ 332.008692][T13717] __x64_sys_sendto+0xde/0x100 [ 332.008721][T13717] do_syscall_64+0x14d/0xf80 [ 332.008748][T13717] ? trace_irq_disable+0x3b/0x150 [ 332.008786][T13717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.008809][T13717] ? clear_bhb_loop+0x40/0x90 [ 332.008837][T13717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.008859][T13717] RIP: 0033:0x7f68d559c799 [ 332.008880][T13717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.008899][T13717] RSP: 002b:00007f68d63d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 332.008922][T13717] RAX: ffffffffffffffda RBX: 00007f68d5816090 RCX: 00007f68d559c799 [ 332.008938][T13717] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 332.008951][T13717] RBP: 00007f68d63d8090 R08: 0000200000000100 R09: 000000000000001c [ 332.008965][T13717] R10: 0000000020008840 R11: 0000000000000246 R12: 0000000000000002 [ 332.008978][T13717] R13: 00007f68d5816128 R14: 00007f68d5816090 R15: 00007ffddb727438 [ 332.009014][T13717] [ 332.531446][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.540018][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.593263][ T58] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.911076][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2014'. [ 332.957375][T13733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2014'. [ 333.128677][T13741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2015'. [ 333.187708][T13744] Unsupported ieee802154 address type: 0 [ 333.316102][T13750] tipc: Enabling of bearer rejected, failed to enable media [ 333.342862][T13746] syzkaller0: entered promiscuous mode [ 333.359917][T13746] syzkaller0: entered allmulticast mode [ 333.640427][T13758] bond0: Caught tx_queue_len zero misconfig [ 333.699217][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 333.867254][T13734] lec:lec_atm_close: lec0: Shut down! [ 333.925996][T13773] FAULT_INJECTION: forcing a failure. [ 333.925996][T13773] name failslab, interval 1, probability 0, space 0, times 0 [ 333.967293][T13773] CPU: 1 UID: 0 PID: 13773 Comm: syz.4.2024 Not tainted syzkaller #0 PREEMPT(full) [ 333.967324][T13773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 333.967338][T13773] Call Trace: [ 333.967347][T13773] [ 333.967357][T13773] dump_stack_lvl+0xe8/0x150 [ 333.967394][T13773] should_fail_ex+0x412/0x560 [ 333.967488][T13773] should_failslab+0xa8/0x100 [ 333.967520][T13773] __kmalloc_noprof+0xe8/0x760 [ 333.967547][T13773] ? security_sk_alloc+0x52/0x360 [ 333.967584][T13773] security_sk_alloc+0x52/0x360 [ 333.967612][T13773] sk_prot_alloc+0x101/0x210 [ 333.967644][T13773] sk_alloc+0x3a/0x390 [ 333.967674][T13773] inet_create+0x7a0/0x1000 [ 333.967704][T13773] ? inet_create+0x9c/0x1000 [ 333.967736][T13773] __sock_create+0x4b2/0x9d0 [ 333.967770][T13773] udp_sock_create4+0xca/0x480 [ 333.967798][T13773] ? __pfx_udp_sock_create4+0x10/0x10 [ 333.967836][T13773] rxrpc_lookup_local+0xd1e/0x1500 [ 333.967870][T13773] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 333.967909][T13773] ? rxrpc_sendmsg+0x136/0x710 [ 333.967944][T13773] ? __local_bh_enable_ip+0xd0/0x130 [ 333.967978][T13773] rxrpc_sendmsg+0x399/0x710 [ 333.968018][T13773] ____sys_sendmsg+0x972/0x9f0 [ 333.968044][T13773] ? __lock_acquire+0x6b5/0x2cf0 [ 333.968080][T13773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.968123][T13773] ? import_iovec+0x73/0xa0 [ 333.968153][T13773] ___sys_sendmsg+0x2a5/0x360 [ 333.968188][T13773] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.968222][T13773] ? kstrtouint+0x6e/0xe0 [ 333.968281][T13773] ? __fget_files+0x2a/0x420 [ 333.968314][T13773] ? __fget_files+0x3a0/0x420 [ 333.968358][T13773] __sys_sendmmsg+0x27c/0x4e0 [ 333.968393][T13773] ? __pfx___sys_sendmmsg+0x10/0x10 [ 333.968428][T13773] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 333.968485][T13773] ? ksys_write+0x242/0x270 [ 333.968512][T13773] ? __pfx_ksys_write+0x10/0x10 [ 333.968544][T13773] __x64_sys_sendmmsg+0xa0/0xc0 [ 333.968575][T13773] do_syscall_64+0x14d/0xf80 [ 333.968601][T13773] ? trace_irq_disable+0x3b/0x150 [ 333.968633][T13773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.968655][T13773] ? clear_bhb_loop+0x40/0x90 [ 333.968682][T13773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.968703][T13773] RIP: 0033:0x7fb88879c799 [ 333.968723][T13773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.968740][T13773] RSP: 002b:00007fb8895b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 333.968763][T13773] RAX: ffffffffffffffda RBX: 00007fb888a15fa0 RCX: 00007fb88879c799 [ 333.968779][T13773] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 333.968791][T13773] RBP: 00007fb8895b0090 R08: 0000000000000000 R09: 0000000000000000 [ 333.968803][T13773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.968814][T13773] R13: 00007fb888a16038 R14: 00007fb888a15fa0 R15: 00007ffc373f42e8 [ 333.968848][T13773] [ 334.098250][T13775] netlink: 'syz.3.2025': attribute type 2 has an invalid length. [ 334.358761][T13779] sctp: [Deprecated]: syz.1.2026 (pid 13779) Use of int in max_burst socket option deprecated. [ 334.358761][T13779] Use struct sctp_assoc_value instead [ 334.432965][T13783] sctp: [Deprecated]: syz.4.2028 (pid 13783) Use of int in max_burst socket option deprecated. [ 334.432965][T13783] Use struct sctp_assoc_value instead [ 334.553398][T13534] block nbd11: Possible stuck request ffff888026520000: control (read@0,1024B). Runtime 150 seconds [ 334.564442][T13534] block nbd11: Possible stuck request ffff888026520200: control (read@1024,1024B). Runtime 150 seconds [ 334.575676][T13534] block nbd11: Possible stuck request ffff888026520400: control (read@2048,1024B). Runtime 150 seconds [ 334.590151][T13534] block nbd11: Possible stuck request ffff888026520600: control (read@3072,1024B). Runtime 150 seconds [ 335.222584][T13816] workqueue: name exceeds WQ_NAME_LEN. Truncating to: #πx)% ].>n6# [ 335.620148][T13828] __nla_validate_parse: 10 callbacks suppressed [ 335.620172][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 336.092425][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 336.338096][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 336.701133][T13869] FAULT_INJECTION: forcing a failure. [ 336.701133][T13869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.727304][T13869] CPU: 0 UID: 0 PID: 13869 Comm: syz.3.2060 Not tainted syzkaller #0 PREEMPT(full) [ 336.727334][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.727348][T13869] Call Trace: [ 336.727356][T13869] [ 336.727366][T13869] dump_stack_lvl+0xe8/0x150 [ 336.727403][T13869] should_fail_ex+0x412/0x560 [ 336.727439][T13869] _copy_from_user+0x2d/0xb0 [ 336.727465][T13869] sctp_setsockopt+0x1c4/0x12c0 [ 336.727487][T13869] ? sock_common_setsockopt+0x36/0xc0 [ 336.727521][T13869] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 336.727557][T13869] do_sock_setsockopt+0x17c/0x1b0 [ 336.727587][T13869] __x64_sys_setsockopt+0x13d/0x1b0 [ 336.727619][T13869] do_syscall_64+0x14d/0xf80 [ 336.727645][T13869] ? trace_irq_disable+0x3b/0x150 [ 336.727675][T13869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.727698][T13869] ? clear_bhb_loop+0x40/0x90 [ 336.727725][T13869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.727747][T13869] RIP: 0033:0x7fb59559c799 [ 336.727767][T13869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.727785][T13869] RSP: 002b:00007fb5964bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 336.727808][T13869] RAX: ffffffffffffffda RBX: 00007fb595815fa0 RCX: 00007fb59559c799 [ 336.727824][T13869] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 336.727836][T13869] RBP: 00007fb5964bb090 R08: 0000000000000008 R09: 0000000000000000 [ 336.727850][T13869] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 336.727863][T13869] R13: 00007fb595816038 R14: 00007fb595815fa0 R15: 00007ffcedf75df8 [ 336.727896][T13869] [ 336.780664][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 337.013209][T13872] syz_tun: Device is already in use. [ 337.163228][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2064'. [ 337.225978][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2065'. [ 337.290601][T13884] FAULT_INJECTION: forcing a failure. [ 337.290601][T13884] name failslab, interval 1, probability 0, space 0, times 0 [ 337.329849][T13884] CPU: 0 UID: 0 PID: 13884 Comm: syz.2.2066 Not tainted syzkaller #0 PREEMPT(full) [ 337.329881][T13884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.329894][T13884] Call Trace: [ 337.329902][T13884] [ 337.329911][T13884] dump_stack_lvl+0xe8/0x150 [ 337.329946][T13884] should_fail_ex+0x412/0x560 [ 337.330000][T13884] should_failslab+0xa8/0x100 [ 337.330031][T13884] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 337.330067][T13884] ? __alloc_skb+0x186/0x7d0 [ 337.330090][T13884] ? __alloc_skb+0x1d0/0x7d0 [ 337.330111][T13884] ? __local_bh_enable_ip+0xd0/0x130 [ 337.330145][T13884] __alloc_skb+0x1d0/0x7d0 [ 337.330174][T13884] netlink_sendmsg+0x5d4/0xb40 [ 337.330208][T13884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.330242][T13884] ? aa_sock_msg_perm+0xf1/0x1b0 [ 337.330275][T13884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.330303][T13884] ____sys_sendmsg+0x972/0x9f0 [ 337.330339][T13884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.330375][T13884] ? import_iovec+0x73/0xa0 [ 337.330419][T13884] ___sys_sendmsg+0x2a5/0x360 [ 337.330454][T13884] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.330519][T13884] ? __fget_files+0x2a/0x420 [ 337.330552][T13884] ? __fget_files+0x3a0/0x420 [ 337.330605][T13884] __x64_sys_sendmsg+0x1bd/0x2a0 [ 337.330636][T13884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.330672][T13884] ? __pfx_ksys_write+0x10/0x10 [ 337.330707][T13884] do_syscall_64+0x14d/0xf80 [ 337.330733][T13884] ? trace_irq_disable+0x3b/0x150 [ 337.330805][T13884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.330827][T13884] ? clear_bhb_loop+0x40/0x90 [ 337.330853][T13884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.330875][T13884] RIP: 0033:0x7f68d559c799 [ 337.330895][T13884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.330913][T13884] RSP: 002b:00007f68d63f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.330936][T13884] RAX: ffffffffffffffda RBX: 00007f68d5815fa0 RCX: 00007f68d559c799 [ 337.330951][T13884] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 337.330964][T13884] RBP: 00007f68d63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 337.330976][T13884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.330988][T13884] R13: 00007f68d5816038 R14: 00007f68d5815fa0 R15: 00007ffddb727438 [ 337.331021][T13884] [ 337.340496][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 337.588675][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2068'. [ 337.825687][T13898] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 337.889310][T13902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2073'. [ 337.942564][T13904] macsec0: entered promiscuous mode [ 337.971611][T13902] lo: Caught tx_queue_len zero misconfig [ 337.989807][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 338.064361][T13907] ipvlan2: entered promiscuous mode [ 338.072668][T13910] macsec0: left promiscuous mode [ 338.188273][T13920] FAULT_INJECTION: forcing a failure. [ 338.188273][T13920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.237116][T13920] CPU: 1 UID: 0 PID: 13920 Comm: syz.2.2078 Not tainted syzkaller #0 PREEMPT(full) [ 338.237144][T13920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.237156][T13920] Call Trace: [ 338.237175][T13920] [ 338.237184][T13920] dump_stack_lvl+0xe8/0x150 [ 338.237224][T13920] should_fail_ex+0x412/0x560 [ 338.237264][T13920] _copy_from_user+0x2d/0xb0 [ 338.237286][T13920] ___sys_sendmsg+0x1c6/0x360 [ 338.237322][T13920] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.237376][T13920] ? __fget_files+0x2a/0x420 [ 338.237403][T13920] ? __fget_files+0x3a0/0x420 [ 338.237440][T13920] __x64_sys_sendmsg+0x1bd/0x2a0 [ 338.237467][T13920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.237502][T13920] ? __pfx_ksys_write+0x10/0x10 [ 338.237541][T13920] do_syscall_64+0x14d/0xf80 [ 338.237568][T13920] ? trace_irq_disable+0x3b/0x150 [ 338.237600][T13920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.237623][T13920] ? clear_bhb_loop+0x40/0x90 [ 338.237650][T13920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.237672][T13920] RIP: 0033:0x7f68d559c799 [ 338.237693][T13920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.237712][T13920] RSP: 002b:00007f68d63f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.237736][T13920] RAX: ffffffffffffffda RBX: 00007f68d5815fa0 RCX: 00007f68d559c799 [ 338.237751][T13920] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 338.237765][T13920] RBP: 00007f68d63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 338.237777][T13920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.237789][T13920] R13: 00007f68d5816038 R14: 00007f68d5815fa0 R15: 00007ffddb727438 [ 338.237822][T13920] [ 338.629550][T13926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.639185][T13926] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.652826][T13926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.897034][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 338.905207][ C1] lec:lec_tx_timeout: lec0 [ 338.910627][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.488703][T13958] bond0: Caught tx_queue_len zero misconfig [ 340.859368][T14001] FAULT_INJECTION: forcing a failure. [ 340.859368][T14001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.898091][T14001] CPU: 1 UID: 0 PID: 14001 Comm: syz.2.2104 Not tainted syzkaller #0 PREEMPT(full) [ 340.898122][T14001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.898135][T14001] Call Trace: [ 340.898144][T14001] [ 340.898153][T14001] dump_stack_lvl+0xe8/0x150 [ 340.898190][T14001] should_fail_ex+0x412/0x560 [ 340.898228][T14001] _copy_from_user+0x2d/0xb0 [ 340.898254][T14001] inet_ioctl+0x2f8/0x560 [ 340.898284][T14001] ? __pfx_inet_ioctl+0x10/0x10 [ 340.898331][T14001] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 340.898363][T14001] sock_do_ioctl+0x101/0x320 [ 340.898398][T14001] ? __pfx_sock_do_ioctl+0x10/0x10 [ 340.898428][T14001] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 340.898473][T14001] sock_ioctl+0x5c6/0x7f0 [ 340.898506][T14001] ? __pfx_sock_ioctl+0x10/0x10 [ 340.898537][T14001] ? __fget_files+0x2a/0x420 [ 340.898568][T14001] ? __fget_files+0x3a0/0x420 [ 340.898599][T14001] ? __fget_files+0x2a/0x420 [ 340.898634][T14001] ? bpf_lsm_file_ioctl+0x9/0x20 [ 340.898662][T14001] ? __pfx_sock_ioctl+0x10/0x10 [ 340.898692][T14001] __se_sys_ioctl+0xfc/0x170 [ 340.898721][T14001] do_syscall_64+0x14d/0xf80 [ 340.898747][T14001] ? trace_irq_disable+0x3b/0x150 [ 340.898778][T14001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.898800][T14001] ? clear_bhb_loop+0x40/0x90 [ 340.898827][T14001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.898850][T14001] RIP: 0033:0x7f68d559c799 [ 340.898871][T14001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.898889][T14001] RSP: 002b:00007f68d63f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.898912][T14001] RAX: ffffffffffffffda RBX: 00007f68d5815fa0 RCX: 00007f68d559c799 [ 340.898928][T14001] RDX: 0000200000000180 RSI: 000000000000890b RDI: 0000000000000005 [ 340.898942][T14001] RBP: 00007f68d63f9090 R08: 0000000000000000 R09: 0000000000000000 [ 340.898955][T14001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.898968][T14001] R13: 00007f68d5816038 R14: 00007f68d5815fa0 R15: 00007ffddb727438 [ 340.899000][T14001] [ 341.582986][T14016] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 341.591090][T14016] __nla_validate_parse: 8 callbacks suppressed [ 341.591109][T14016] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2109'. [ 341.620517][T13534] block nbd12: Possible stuck request ffff888026588000: control (read@0,1024B). Runtime 150 seconds [ 341.632566][T13534] block nbd12: Possible stuck request ffff888026588200: control (read@1024,1024B). Runtime 150 seconds [ 341.643753][T13534] block nbd12: Possible stuck request ffff888026588400: control (read@2048,1024B). Runtime 150 seconds [ 341.654886][T13534] block nbd12: Possible stuck request ffff888026588600: control (read@3072,1024B). Runtime 150 seconds [ 341.722340][T14020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2108'. [ 341.960994][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2108'. [ 341.970195][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 342.040461][T13999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2103'. [ 342.284849][T14042] FAULT_INJECTION: forcing a failure. [ 342.284849][T14042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.370244][T14042] CPU: 1 UID: 0 PID: 14042 Comm: syz.4.2116 Not tainted syzkaller #0 PREEMPT(full) [ 342.370276][T14042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.370290][T14042] Call Trace: [ 342.370298][T14042] [ 342.370308][T14042] dump_stack_lvl+0xe8/0x150 [ 342.370343][T14042] should_fail_ex+0x412/0x560 [ 342.370380][T14042] _copy_from_iter+0x1d3/0x1670 [ 342.370419][T14042] ? rcu_is_watching+0x15/0xb0 [ 342.370456][T14042] ? __pfx__copy_from_iter+0x10/0x10 [ 342.370498][T14042] ? netlink_sendmsg+0x650/0xb40 [ 342.370521][T14042] ? skb_put+0x11b/0x210 [ 342.370551][T14042] netlink_sendmsg+0x6c0/0xb40 [ 342.370583][T14042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.370610][T14042] ? aa_sock_msg_perm+0xf1/0x1b0 [ 342.370644][T14042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.370671][T14042] ____sys_sendmsg+0x972/0x9f0 [ 342.370709][T14042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.370746][T14042] ? import_iovec+0x73/0xa0 [ 342.370775][T14042] ___sys_sendmsg+0x2a5/0x360 [ 342.370809][T14042] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.370872][T14042] ? __fget_files+0x2a/0x420 [ 342.370905][T14042] ? __fget_files+0x3a0/0x420 [ 342.370954][T14042] __x64_sys_sendmsg+0x1bd/0x2a0 [ 342.370986][T14042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.371023][T14042] ? __pfx_ksys_write+0x10/0x10 [ 342.371060][T14042] do_syscall_64+0x14d/0xf80 [ 342.371087][T14042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.371109][T14042] ? clear_bhb_loop+0x40/0x90 [ 342.371136][T14042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.371157][T14042] RIP: 0033:0x7fb88879c799 [ 342.371178][T14042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.371197][T14042] RSP: 002b:00007fb8895b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.371221][T14042] RAX: ffffffffffffffda RBX: 00007fb888a15fa0 RCX: 00007fb88879c799 [ 342.371236][T14042] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 342.371249][T14042] RBP: 00007fb8895b0090 R08: 0000000000000000 R09: 0000000000000000 [ 342.371262][T14042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.371274][T14042] R13: 00007fb888a16038 R14: 00007fb888a15fa0 R15: 00007ffc373f42e8 [ 342.371308][T14042] [ 342.679201][T14047] netlink: 'syz.2.2117': attribute type 21 has an invalid length. [ 342.697471][T14045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2115'. [ 342.803733][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 342.804750][T14047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2117'. [ 342.824825][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'. [ 343.466157][T14071] netlink: 1315 bytes leftover after parsing attributes in process `syz.2.2123'. [ 343.656893][T14082] sctp: [Deprecated]: syz.0.2128 (pid 14082) Use of int in max_burst socket option deprecated. [ 343.656893][T14082] Use struct sctp_assoc_value instead [ 343.761285][T14088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.897649][T14090] netlink: 'syz.4.2130': attribute type 3 has an invalid length. [ 343.937136][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 343.945263][ C1] lec:lec_tx_timeout: lec0 [ 343.950340][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 344.046027][T14090] block nbd4: NBD_DISCONNECT [ 344.055821][T14090] block nbd4: Send disconnect failed -32 [ 344.070137][T14090] block nbd4: shutting down sockets [ 344.131238][ C1] blk_print_req_error: 135 callbacks suppressed [ 344.131261][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.147153][ C1] buffer_io_error: 138 callbacks suppressed [ 344.147173][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 344.198422][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.208047][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 344.218631][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.228254][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 344.236103][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.245703][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 344.257906][ T5876] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.269920][ T5876] Buffer I/O error on dev nbd4, logical block 0, async page read [ 344.298995][ T5876] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.321549][ T5876] Buffer I/O error on dev nbd4, logical block 1, async page read [ 344.350495][ T5876] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.385654][ T5876] Buffer I/O error on dev nbd4, logical block 2, async page read [ 344.418124][ T5876] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.467088][ T5876] Buffer I/O error on dev nbd4, logical block 3, async page read [ 344.498364][ T5876] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.523615][ T5876] Buffer I/O error on dev nbd4, logical block 0, async page read [ 344.568203][T14108] syz_tun: Device is already in use. [ 344.573975][ T5876] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.607112][ T5876] Buffer I/O error on dev nbd4, logical block 1, async page read [ 344.645335][ T5876] ldm_validate_partition_table(): Disk read failed. [ 344.666550][ T5876] Dev nbd4: unable to read RDB block 0 [ 344.684642][ T5876] nbd4: unable to read partition table [ 344.719041][ T5876] ldm_validate_partition_table(): Disk read failed. [ 344.751467][ T5876] Dev nbd4: unable to read RDB block 0 [ 344.776919][ T5876] nbd4: unable to read partition table [ 344.944779][ T5876] block nbd13: Dead connection, failed to find a fallback [ 345.005321][ T5876] block nbd13: shutting down sockets [ 345.036703][ T5876] ldm_validate_partition_table(): Disk read failed. [ 345.066605][ T5876] Dev nbd13: unable to read RDB block 0 [ 345.088658][ T5876] nbd13: unable to read partition table [ 345.131078][ T5876] ldm_validate_partition_table(): Disk read failed. [ 345.159198][ T5876] Dev nbd13: unable to read RDB block 0 [ 345.183106][ T5876] nbd13: unable to read partition table [ 345.281793][T14097] lec:lec_atm_close: lec0: Shut down! [ 345.427965][T14132] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 345.436535][T14131] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 345.832105][T14146] ipvlan3: entered promiscuous mode [ 346.446574][T14159] ipvlan4: entered promiscuous mode [ 346.468392][ T5876] block nbd14: Dead connection, failed to find a fallback [ 346.475588][ T5876] block nbd14: shutting down sockets [ 346.487826][ T5876] ldm_validate_partition_table(): Disk read failed. [ 346.523430][T14138] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 346.537669][ T5876] Dev nbd14: unable to read RDB block 0 [ 346.543944][ T5876] nbd14: unable to read partition table [ 346.596245][ T5876] ldm_validate_partition_table(): Disk read failed. [ 346.618179][ T5876] Dev nbd14: unable to read RDB block 0 [ 346.637828][ T5876] nbd14: unable to read partition table [ 346.921131][ T5876] block nbd15: Dead connection, failed to find a fallback [ 346.957079][ T5876] block nbd15: shutting down sockets [ 346.963458][ T5876] ldm_validate_partition_table(): Disk read failed. [ 346.998264][ T5876] Dev nbd15: unable to read RDB block 0 [ 347.004753][ T5876] nbd15: unable to read partition table [ 347.036392][ T5876] ldm_validate_partition_table(): Disk read failed. [ 347.063818][ T5876] Dev nbd15: unable to read RDB block 0 [ 347.084185][ T5876] nbd15: unable to read partition table [ 347.130209][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 347.191920][T14192] FAULT_INJECTION: forcing a failure. [ 347.191920][T14192] name failslab, interval 1, probability 0, space 0, times 0 [ 347.257150][T14192] CPU: 0 UID: 0 PID: 14192 Comm: syz.2.2159 Not tainted syzkaller #0 PREEMPT(full) [ 347.257180][T14192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.257193][T14192] Call Trace: [ 347.257202][T14192] [ 347.257211][T14192] dump_stack_lvl+0xe8/0x150 [ 347.257248][T14192] should_fail_ex+0x412/0x560 [ 347.257286][T14192] should_failslab+0xa8/0x100 [ 347.257316][T14192] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 347.257341][T14192] ? __alloc_skb+0x186/0x7d0 [ 347.257364][T14192] ? __alloc_skb+0x1d0/0x7d0 [ 347.257384][T14192] ? __local_bh_enable_ip+0xd0/0x130 [ 347.257417][T14192] __alloc_skb+0x1d0/0x7d0 [ 347.257440][T14192] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 347.257470][T14192] netlink_sendmsg+0x5d4/0xb40 [ 347.257504][T14192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.257531][T14192] ? aa_sock_msg_perm+0xf1/0x1b0 [ 347.257564][T14192] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.257591][T14192] ____sys_sendmsg+0x972/0x9f0 [ 347.257627][T14192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.257669][T14192] ? import_iovec+0x73/0xa0 [ 347.257697][T14192] ___sys_sendmsg+0x2a5/0x360 [ 347.257729][T14192] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.257798][T14192] ? __fget_files+0x2a/0x420 [ 347.257830][T14192] ? __fget_files+0x3a0/0x420 [ 347.257873][T14192] __x64_sys_sendmsg+0x1bd/0x2a0 [ 347.257909][T14192] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.257948][T14192] ? __pfx_ksys_write+0x10/0x10 [ 347.257983][T14192] do_syscall_64+0x14d/0xf80 [ 347.258009][T14192] ? trace_irq_disable+0x3b/0x150 [ 347.258039][T14192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.258062][T14192] ? clear_bhb_loop+0x40/0x90 [ 347.258089][T14192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.258110][T14192] RIP: 0033:0x7f68d559c799 [ 347.258131][T14192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.258150][T14192] RSP: 002b:00007f68d63d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.258173][T14192] RAX: ffffffffffffffda RBX: 00007f68d5816090 RCX: 00007f68d559c799 [ 347.258190][T14192] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 347.258203][T14192] RBP: 00007f68d63d8090 R08: 0000000000000000 R09: 0000000000000000 [ 347.258216][T14192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.258228][T14192] R13: 00007f68d5816128 R14: 00007f68d5816090 R15: 00007ffddb727438 [ 347.258261][T14192] [ 348.178798][ T5876] block nbd16: Dead connection, failed to find a fallback [ 348.201546][ T5876] block nbd16: shutting down sockets [ 348.238080][ T5876] ldm_validate_partition_table(): Disk read failed. [ 348.276275][ T5876] Dev nbd16: unable to read RDB block 0 [ 348.306743][ T5876] nbd16: unable to read partition table [ 348.369883][ T5876] ldm_validate_partition_table(): Disk read failed. [ 348.399587][ T5876] Dev nbd16: unable to read RDB block 0 [ 348.419449][ T5876] nbd16: unable to read partition table [ 348.470029][ T5876] ldm_validate_partition_table(): Disk read failed. [ 348.470512][T14224] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 348.478879][ T5876] Dev nbd16: unable to read RDB block 0 [ 348.532251][ T5876] nbd16: unable to read partition table [ 348.596509][ T5876] ldm_validate_partition_table(): Disk read failed. [ 348.656379][ T5876] Dev nbd16: unable to read RDB block 0 [ 348.689925][ T5876] nbd16: unable to read partition table [ 348.732542][T14236] FAULT_INJECTION: forcing a failure. [ 348.732542][T14236] name failslab, interval 1, probability 0, space 0, times 0 [ 348.777219][T14236] CPU: 0 UID: 0 PID: 14236 Comm: syz.2.2173 Not tainted syzkaller #0 PREEMPT(full) [ 348.777250][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.777264][T14236] Call Trace: [ 348.777273][T14236] [ 348.777283][T14236] dump_stack_lvl+0xe8/0x150 [ 348.777320][T14236] should_fail_ex+0x412/0x560 [ 348.777359][T14236] should_failslab+0xa8/0x100 [ 348.777395][T14236] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 348.777424][T14236] ? __get_vm_area_node+0x13f/0x300 [ 348.777445][T14236] ? __lock_acquire+0x6b5/0x2cf0 [ 348.777478][T14236] __get_vm_area_node+0x13f/0x300 [ 348.777507][T14236] __vmalloc_node_range_noprof+0x372/0x1730 [ 348.777532][T14236] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 348.777560][T14236] ? __lock_acquire+0x6b5/0x2cf0 [ 348.777602][T14236] ? __lock_acquire+0x6b5/0x2cf0 [ 348.777661][T14236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 348.777699][T14236] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 348.777720][T14236] __vmalloc_noprof+0xd2/0x120 [ 348.777742][T14236] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 348.777767][T14236] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 348.777792][T14236] bpf_prog_alloc+0x3c/0x1a0 [ 348.777816][T14236] __get_filter+0xff/0x400 [ 348.777853][T14236] sk_reuseport_attach_filter+0x24/0x210 [ 348.777888][T14236] sk_setsockopt+0x1eca/0x2e80 [ 348.777913][T14236] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 348.777950][T14236] ? __pfx_sk_setsockopt+0x10/0x10 [ 348.777984][T14236] ? __lock_acquire+0x6b5/0x2cf0 [ 348.778029][T14236] ? aa_sk_perm+0x6d5/0x900 [ 348.778068][T14236] udp_lib_setsockopt+0xbc/0x6f0 [ 348.778123][T14236] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 348.778160][T14236] ? __fget_files+0x2a/0x420 [ 348.778191][T14236] ? aa_sock_opt_perm+0xff/0x1a0 [ 348.778225][T14236] udp_setsockopt+0x67/0xb0 [ 348.778256][T14236] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 348.778282][T14236] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 348.778319][T14236] do_sock_setsockopt+0x17c/0x1b0 [ 348.778352][T14236] __x64_sys_setsockopt+0x13d/0x1b0 [ 348.778386][T14236] do_syscall_64+0x14d/0xf80 [ 348.778412][T14236] ? trace_irq_disable+0x3b/0x150 [ 348.778443][T14236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.778465][T14236] ? clear_bhb_loop+0x40/0x90 [ 348.778493][T14236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.778515][T14236] RIP: 0033:0x7f68d559c799 [ 348.778536][T14236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.778555][T14236] RSP: 002b:00007f68d63f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 348.778587][T14236] RAX: ffffffffffffffda RBX: 00007f68d5815fa0 RCX: 00007f68d559c799 [ 348.778603][T14236] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 348.778615][T14236] RBP: 00007f68d63f9090 R08: 0000000000000010 R09: 0000000000000000 [ 348.778628][T14236] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 348.778642][T14236] R13: 00007f68d5816038 R14: 00007f68d5815fa0 R15: 00007ffddb727438 [ 348.778677][T14236] [ 348.783402][T14236] syz.2.2173: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 349.227235][T14236] CPU: 1 UID: 0 PID: 14236 Comm: syz.2.2173 Not tainted syzkaller #0 PREEMPT(full) [ 349.227265][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.227277][T14236] Call Trace: [ 349.227286][T14236] [ 349.227295][T14236] dump_stack_lvl+0xe8/0x150 [ 349.227330][T14236] warn_alloc+0x249/0x340 [ 349.227362][T14236] ? __pfx_warn_alloc+0x10/0x10 [ 349.227389][T14236] ? __get_vm_area_node+0x13f/0x300 [ 349.227408][T14236] ? __lock_acquire+0x6b5/0x2cf0 [ 349.227441][T14236] ? __get_vm_area_node+0x2b5/0x300 [ 349.227470][T14236] __vmalloc_node_range_noprof+0x397/0x1730 [ 349.227500][T14236] ? __lock_acquire+0x6b5/0x2cf0 [ 349.227532][T14236] ? __lock_acquire+0x6b5/0x2cf0 [ 349.227576][T14236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.227616][T14236] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 349.227648][T14236] __vmalloc_noprof+0xd2/0x120 [ 349.227672][T14236] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 349.227697][T14236] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 349.227726][T14236] bpf_prog_alloc+0x3c/0x1a0 [ 349.227751][T14236] __get_filter+0xff/0x400 [ 349.227789][T14236] sk_reuseport_attach_filter+0x24/0x210 [ 349.227825][T14236] sk_setsockopt+0x1eca/0x2e80 [ 349.227851][T14236] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 349.227890][T14236] ? __pfx_sk_setsockopt+0x10/0x10 [ 349.227926][T14236] ? __lock_acquire+0x6b5/0x2cf0 [ 349.227971][T14236] ? aa_sk_perm+0x6d5/0x900 [ 349.228004][T14236] udp_lib_setsockopt+0xbc/0x6f0 [ 349.228039][T14236] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 349.228075][T14236] ? __fget_files+0x2a/0x420 [ 349.228104][T14236] ? aa_sock_opt_perm+0xff/0x1a0 [ 349.228139][T14236] udp_setsockopt+0x67/0xb0 [ 349.228169][T14236] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 349.228195][T14236] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 349.228231][T14236] do_sock_setsockopt+0x17c/0x1b0 [ 349.228266][T14236] __x64_sys_setsockopt+0x13d/0x1b0 [ 349.228299][T14236] do_syscall_64+0x14d/0xf80 [ 349.228324][T14236] ? trace_irq_disable+0x3b/0x150 [ 349.228355][T14236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.228378][T14236] ? clear_bhb_loop+0x40/0x90 [ 349.228405][T14236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.228427][T14236] RIP: 0033:0x7f68d559c799 [ 349.228448][T14236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.228466][T14236] RSP: 002b:00007f68d63f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 349.228489][T14236] RAX: ffffffffffffffda RBX: 00007f68d5815fa0 RCX: 00007f68d559c799 [ 349.228505][T14236] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 349.228517][T14236] RBP: 00007f68d63f9090 R08: 0000000000000010 R09: 0000000000000000 [ 349.228530][T14236] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 349.228543][T14236] R13: 00007f68d5816038 R14: 00007f68d5815fa0 R15: 00007ffddb727438 [ 349.228577][T14236] [ 349.228670][T14236] Mem-Info: [ 349.527737][T14236] active_anon:9033 inactive_anon:0 isolated_anon:0 [ 349.527737][T14236] active_file:3667 inactive_file:40057 isolated_file:0 [ 349.527737][T14236] unevictable:768 dirty:458 writeback:0 [ 349.527737][T14236] slab_reclaimable:12041 slab_unreclaimable:123165 [ 349.527737][T14236] mapped:29868 shmem:1414 pagetables:1328 [ 349.527737][T14236] sec_pagetables:0 bounce:0 [ 349.527737][T14236] kernel_misc_reclaimable:0 [ 349.527737][T14236] free:1296201 free_pcp:10180 free_cma:0 [ 349.604316][ T5876] block nbd17: Dead connection, failed to find a fallback [ 349.611573][ T5876] block nbd17: shutting down sockets [ 349.616897][ T5876] blk_print_req_error: 878 callbacks suppressed [ 349.616915][ T5876] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.654926][T14236] Node 0 active_anon:35932kB inactive_anon:0kB active_file:14668kB inactive_file:160028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119372kB dirty:1828kB writeback:0kB shmem:4120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14112kB pagetables:5076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 349.729650][ T5876] buffer_io_error: 878 callbacks suppressed [ 349.729669][ T5876] Buffer I/O error on dev nbd17, logical block 0, async page read [ 349.777107][T14236] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 349.817100][ T5876] I/O error, dev nbd17, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.826738][ T5876] Buffer I/O error on dev nbd17, logical block 1, async page read [ 349.867902][ T5876] I/O error, dev nbd17, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.907121][T14236] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.927608][ T5876] Buffer I/O error on dev nbd17, logical block 2, async page read [ 349.976008][ T5876] I/O error, dev nbd17, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.994082][ T5876] Buffer I/O error on dev nbd17, logical block 3, async page read [ 350.030800][T14236] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 350.035500][ T5876] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 350.056200][T14236] Node 0 DMA32 free:1230712kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35920kB inactive_anon:0kB active_file:14668kB inactive_file:160032kB unevictable:1536kB writepending:1836kB zspages:0kB present:3129332kB managed:2552480kB mlocked:0kB bounce:0kB free_pcp:40772kB local_pcp:20172kB free_cma:0kB [ 350.078268][ T5876] Buffer I/O error on dev nbd17, logical block 0, async page read [ 350.144839][T14236] lowmem_reserve[]: 0 0 0 0 0 [ 350.177279][ T5876] I/O error, dev nbd17, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 350.186910][ T5876] Buffer I/O error on dev nbd17, logical block 1, async page read [ 350.193210][T14236] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 350.226364][ T5876] I/O error, dev nbd17, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 350.270447][ T5876] Buffer I/O error on dev nbd17, logical block 2, async page read [ 350.290881][T14236] lowmem_reserve[]: 0 0 0 0 0 [ 350.292625][ T5876] I/O error, dev nbd17, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 350.313868][T14236] Node 1 Normal free:3939528kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.326505][ T5876] Buffer I/O error on dev nbd17, logical block 3, async page read [ 350.407310][T14236] lowmem_reserve[]: 0 0 0 0 0 [ 350.426543][T14236] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.437487][ T5876] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 350.487457][ T5876] Buffer I/O error on dev nbd17, logical block 0, async page read [ 350.495780][ T5876] I/O error, dev nbd17, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 350.500455][T14236] Node 0 [ 350.515408][ T11] block nbd6: Possible stuck request ffff8880262d0000: control (read@0,1024B). Runtime 180 seconds [ 350.543064][ T11] block nbd6: Possible stuck request ffff8880262d0200: control (read@1024,1024B). Runtime 180 seconds [ 350.554237][ T11] block nbd6: Possible stuck request ffff8880262d0400: control (read@2048,1024B). Runtime 180 seconds [ 350.565521][ T11] block nbd6: Possible stuck request ffff8880262d0600: control (read@3072,1024B). Runtime 180 seconds [ 350.588413][ T5876] Buffer I/O error on dev nbd17, logical block 1, async page read [ 350.589760][T14236] DMA32: 3534*4kB (UME) 2745*8kB (UM) 1034*16kB (UM) 161*32kB (UME) 52*64kB (UME) 34*128kB (UME) 33*256kB (UM) 38*512kB (UM) 32*1024kB (UM) 21*2048kB (UME) 259*4096kB (UM) = 1230016kB [ 350.608817][ T5876] ldm_validate_partition_table(): Disk read failed. [ 350.654910][ T5876] Dev nbd17: unable to read RDB block 0 [ 350.698705][ T5876] nbd17: unable to read partition table [ 350.731056][ T5876] ldm_validate_partition_table(): Disk read failed. [ 350.737558][T14236] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.749605][T14236] Node 1 Normal: 0*4kB 5*8kB (UM) 4*16kB (UM) 5*32kB (UM) 7*64kB (UM) 2*128kB (UM) 5*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3939528kB [ 350.770176][ T5876] Dev nbd17: unable to read RDB block 0 [ 350.775864][T14236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.811668][ T5876] nbd17: unable to read partition table [ 350.817821][T14236] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.846110][T14236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.890768][T14236] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.906593][ T5876] ldm_validate_partition_table(): Disk read failed. [ 350.913307][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 350.913380][ C1] lec:lec_tx_timeout: lec0 [ 350.921710][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.930006][T14236] 45085 total pagecache pages [ 350.980332][T14236] 0 pages in swap cache [ 351.001251][ T5876] Dev nbd17: unable to read RDB block 0 [ 351.003202][T14236] Free swap = 124996kB [ 351.019981][ T5876] nbd17: unable to read partition table [ 351.036269][T14236] Total swap = 124996kB [ 351.061410][ T5876] ldm_validate_partition_table(): Disk read failed. [ 351.064824][T14236] 2097051 pages RAM [ 351.070726][ T5876] Dev nbd17: unable to read RDB block 0 [ 351.086912][T14236] 0 pages HighMem/MovableOnly [ 351.113391][ T5876] nbd17: unable to read partition table [ 351.132659][T14236] 427096 pages reserved [ 351.147134][T14236] 0 pages cma reserved [ 351.192863][T14282] FAULT_INJECTION: forcing a failure. [ 351.192863][T14282] name failslab, interval 1, probability 0, space 0, times 0 [ 351.220864][T14282] CPU: 1 UID: 0 PID: 14282 Comm: syz.0.2185 Not tainted syzkaller #0 PREEMPT(full) [ 351.220896][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.220908][T14282] Call Trace: [ 351.220918][T14282] [ 351.220927][T14282] dump_stack_lvl+0xe8/0x150 [ 351.220972][T14282] should_fail_ex+0x412/0x560 [ 351.221010][T14282] should_failslab+0xa8/0x100 [ 351.221045][T14282] ? dst_alloc+0x105/0x170 [ 351.221076][T14282] kmem_cache_alloc_noprof+0x87/0x650 [ 351.221108][T14282] ? __pfx_stack_trace_save+0x10/0x10 [ 351.221137][T14282] dst_alloc+0x105/0x170 [ 351.221172][T14282] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 351.221212][T14282] ? ip_route_output_key_hash+0xd8/0x2a0 [ 351.221240][T14282] ip_route_output_key_hash+0x18d/0x2a0 [ 351.221276][T14282] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 351.221306][T14282] ? make_kuid+0x1e9/0x680 [ 351.221346][T14282] ? __pfx_make_kuid+0x10/0x10 [ 351.221387][T14282] ip_route_output_flow+0x2a/0x150 [ 351.221418][T14282] rxrpc_assess_MTU_size+0x42a/0xc30 [ 351.221464][T14282] ? __pfx_rxrpc_assess_MTU_size+0x10/0x10 [ 351.221503][T14282] ? trace_rxrpc_peer+0x82/0x230 [ 351.221538][T14282] ? rxrpc_lookup_peer+0x416/0xa60 [ 351.221571][T14282] rxrpc_lookup_peer+0x570/0xa60 [ 351.221600][T14282] ? _raw_read_unlock+0x28/0x50 [ 351.221629][T14282] rxrpc_do_sendmsg+0xb2a/0x1270 [ 351.221675][T14282] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 351.221707][T14282] ? rxrpc_sendmsg+0x136/0x710 [ 351.221751][T14282] ? rxrpc_sendmsg+0x4cc/0x710 [ 351.221792][T14282] ____sys_sendmsg+0x972/0x9f0 [ 351.221819][T14282] ? __lock_acquire+0x6b5/0x2cf0 [ 351.221856][T14282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.221894][T14282] ? import_iovec+0x73/0xa0 [ 351.221922][T14282] ___sys_sendmsg+0x2a5/0x360 [ 351.221957][T14282] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.221991][T14282] ? kstrtouint+0x6e/0xe0 [ 351.222050][T14282] ? __fget_files+0x2a/0x420 [ 351.222080][T14282] ? __fget_files+0x3a0/0x420 [ 351.222123][T14282] __sys_sendmmsg+0x27c/0x4e0 [ 351.222157][T14282] ? __pfx___sys_sendmmsg+0x10/0x10 [ 351.222182][T14282] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 351.222238][T14282] ? ksys_write+0x242/0x270 [ 351.222265][T14282] ? __pfx_ksys_write+0x10/0x10 [ 351.222320][T14282] __x64_sys_sendmmsg+0xa0/0xc0 [ 351.222351][T14282] do_syscall_64+0x14d/0xf80 [ 351.222377][T14282] ? trace_irq_disable+0x3b/0x150 [ 351.222408][T14282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.222439][T14282] ? clear_bhb_loop+0x40/0x90 [ 351.222467][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.222490][T14282] RIP: 0033:0x7f199519c799 [ 351.222512][T14282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.222531][T14282] RSP: 002b:00007f1996131028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 351.222555][T14282] RAX: ffffffffffffffda RBX: 00007f1995415fa0 RCX: 00007f199519c799 [ 351.222571][T14282] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 351.222584][T14282] RBP: 00007f1996131090 R08: 0000000000000000 R09: 0000000000000000 [ 351.222597][T14282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.222609][T14282] R13: 00007f1995416038 R14: 00007f1995415fa0 R15: 00007ffd85c8b5d8 [ 351.222643][T14282] [ 351.745341][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'. [ 351.979378][T14298] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 351.986217][T14290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2187'. [ 352.057216][T14290] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 352.083955][T14306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2190'. [ 352.527762][T14323] netlink: 'syz.2.2196': attribute type 21 has an invalid length. [ 352.554981][T14323] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2196'. [ 352.612859][T14323] netlink: 'syz.2.2196': attribute type 4 has an invalid length. [ 352.641174][T14323] netlink: 'syz.2.2196': attribute type 5 has an invalid length. [ 352.674846][T14323] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2196'. [ 352.848111][T14327] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 353.064770][ T11] block nbd7: Possible stuck request ffff888026338000: control (read@0,1024B). Runtime 180 seconds [ 353.075738][ T11] block nbd7: Possible stuck request ffff888026338200: control (read@1024,1024B). Runtime 180 seconds [ 353.087290][ T11] block nbd7: Possible stuck request ffff888026338400: control (read@2048,1024B). Runtime 180 seconds [ 353.098728][ T11] block nbd7: Possible stuck request ffff888026338600: control (read@3072,1024B). Runtime 180 seconds [ 353.639691][T14318] ------------[ cut here ]------------ [ 353.645665][T14318] ODEBUG: init active (active state 0) object: ffff88806be0eef8 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 353.658909][T14318] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#0: syz.3.2195/14318 [ 353.670143][T14318] Modules linked in: [ 353.674465][T14318] CPU: 0 UID: 0 PID: 14318 Comm: syz.3.2195 Not tainted syzkaller #0 PREEMPT(full) [ 353.684509][T14318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.695630][T14318] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 353.702932][T14318] Code: 3c 38 00 74 08 4c 89 ef e8 ce fc 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 c9 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 3e 97 58 0b 83 fd 03 75 3f 4c 8b [ 353.723266][T14318] RSP: 0018:ffffc9000fab78f8 EFLAGS: 00010246 [ 353.730968][T14318] RAX: 1ffffffff179e7b8 RBX: ffff88806be0eef8 RCX: 0000000000000000 [ 353.739597][T14318] RDX: ffffffff8c27cd40 RSI: ffffffff8c27c940 RDI: ffffffff901c0e10 [ 353.748353][T14318] RBP: 0000000000000003 R08: ffff88806be0eef8 R09: ffffffff8bcf50e0 [ 353.756387][T14318] R10: dffffc0000000000 R11: ffffffff81b1e960 R12: ffffffff8c27cd40 [ 353.765100][T14318] R13: ffffffff8bcf3dc0 R14: ffffffff901c0e10 R15: dffffc0000000000 [ 353.773846][T14318] FS: 00007fb5964bb6c0(0000) GS:ffff88812545f000(0000) knlGS:0000000000000000 [ 353.783003][T14318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.789989][T14318] CR2: 00007f667d9fb3bc CR3: 00000000741d8000 CR4: 00000000003526f0 [ 353.798186][T14318] Call Trace: [ 353.801520][T14318] [ 353.804492][T14318] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 353.810351][T14318] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 353.816121][T14318] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 353.822078][T14318] timer_init_key+0x41/0x2f0 [ 353.826742][T14318] lane_ioctl+0x1579/0x2220 [ 353.831476][T14318] ? __pfx_clip_ioctl+0x10/0x10 [ 353.836382][T14318] ? br2684_ioctl+0x110/0x6b0 [ 353.841187][T14318] ? __pfx_lane_ioctl+0x10/0x10 [ 353.846113][T14318] ? atmtcp_ioctl+0x1ce/0xdf0 [ 353.850923][T14318] do_vcc_ioctl+0x36d/0x9d0 [ 353.855537][T14318] svc_ioctl+0x1f6/0x7d0 [ 353.859929][T14318] ? kasan_quarantine_put+0xbb/0x1f0 [ 353.865266][T14318] ? __pfx_svc_ioctl+0x10/0x10 [ 353.870166][T14318] ? tomoyo_path_number_perm+0x219/0x630 [ 353.875861][T14318] ? tomoyo_path_number_perm+0x219/0x630 [ 353.881608][T14318] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 353.886693][T14318] sock_do_ioctl+0x101/0x320 [ 353.891420][T14318] ? __pfx_sock_do_ioctl+0x10/0x10 [ 353.896579][T14318] ? do_futex+0x395/0x420 [ 353.901159][T14318] sock_ioctl+0x5c6/0x7f0 [ 353.905562][T14318] ? __pfx_sock_ioctl+0x10/0x10 [ 353.910531][T14318] ? __fget_files+0x2a/0x420 [ 353.915382][T14318] ? __fget_files+0x3a0/0x420 [ 353.920205][T14318] ? __fget_files+0x2a/0x420 [ 353.924876][T14318] ? bpf_lsm_file_ioctl+0x9/0x20 [ 353.929954][T14318] ? __pfx_sock_ioctl+0x10/0x10 [ 353.934864][T14318] __se_sys_ioctl+0xfc/0x170 [ 353.939712][T14318] do_syscall_64+0x14d/0xf80 [ 353.944372][T14318] ? trace_irq_disable+0x3b/0x150 [ 353.949514][T14318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.955636][T14318] ? clear_bhb_loop+0x40/0x90 [ 353.960437][T14318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.966372][T14318] RIP: 0033:0x7fb59559c799 [ 353.970899][T14318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.990697][T14318] RSP: 002b:00007fb5964bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.999252][T14318] RAX: ffffffffffffffda RBX: 00007fb595815fa0 RCX: 00007fb59559c799 [ 354.007352][T14318] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000006 [ 354.015629][T14318] RBP: 00007fb595632c99 R08: 0000000000000000 R09: 0000000000000000 [ 354.023737][T14318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.031860][T14318] R13: 00007fb595816038 R14: 00007fb595815fa0 R15: 00007ffcedf75df8 [ 354.039986][T14318] [ 354.043059][T14318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 354.050377][T14318] CPU: 0 UID: 0 PID: 14318 Comm: syz.3.2195 Not tainted syzkaller #0 PREEMPT(full) [ 354.059779][T14318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 354.069867][T14318] Call Trace: [ 354.073176][T14318] [ 354.076130][T14318] vpanic+0x56c/0xa60 [ 354.080148][T14318] ? __pfx__printk+0x10/0x10 [ 354.084764][T14318] ? __pfx_vpanic+0x10/0x10 [ 354.089298][T14318] ? is_bpf_text_address+0x292/0x2b0 [ 354.094613][T14318] ? is_bpf_text_address+0x26/0x2b0 [ 354.099841][T14318] panic+0xc5/0xd0 [ 354.103598][T14318] ? __pfx_panic+0x10/0x10 [ 354.108085][T14318] __warn+0x315/0x4f0 [ 354.112097][T14318] ? __debug_object_init+0x2b1/0x4e0 [ 354.117414][T14318] ? __debug_object_init+0x2b1/0x4e0 [ 354.122905][T14318] __report_bug+0x29a/0x540 [ 354.127437][T14318] ? __debug_object_init+0x2b1/0x4e0 [ 354.132749][T14318] ? __pfx___report_bug+0x10/0x10 [ 354.137820][T14318] ? __lock_acquire+0x6b5/0x2cf0 [ 354.142788][T14318] report_bug_entry+0x19a/0x290 [ 354.147662][T14318] ? __debug_object_init+0x30f/0x4e0 [ 354.152989][T14318] ? __debug_object_init+0x314/0x4e0 [ 354.158301][T14318] handle_bug+0xce/0x200 [ 354.162579][T14318] exc_invalid_op+0x1a/0x50 [ 354.167134][T14318] asm_exc_invalid_op+0x1a/0x20 [ 354.172014][T14318] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 354.177941][T14318] Code: 3c 38 00 74 08 4c 89 ef e8 ce fc 76 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 c9 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 3e 97 58 0b 83 fd 03 75 3f 4c 8b [ 354.197577][T14318] RSP: 0018:ffffc9000fab78f8 EFLAGS: 00010246 [ 354.203690][T14318] RAX: 1ffffffff179e7b8 RBX: ffff88806be0eef8 RCX: 0000000000000000 [ 354.211688][T14318] RDX: ffffffff8c27cd40 RSI: ffffffff8c27c940 RDI: ffffffff901c0e10 [ 354.219680][T14318] RBP: 0000000000000003 R08: ffff88806be0eef8 R09: ffffffff8bcf50e0 [ 354.227671][T14318] R10: dffffc0000000000 R11: ffffffff81b1e960 R12: ffffffff8c27cd40 [ 354.235839][T14318] R13: ffffffff8bcf3dc0 R14: ffffffff901c0e10 R15: dffffc0000000000 [ 354.243839][T14318] ? __pfx_timer_debug_hint+0x10/0x10 [ 354.249254][T14318] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 354.255004][T14318] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 354.260915][T14318] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 354.266751][T14318] timer_init_key+0x41/0x2f0 [ 354.271372][T14318] lane_ioctl+0x1579/0x2220 [ 354.275916][T14318] ? __pfx_clip_ioctl+0x10/0x10 [ 354.280793][T14318] ? br2684_ioctl+0x110/0x6b0 [ 354.285594][T14318] ? __pfx_lane_ioctl+0x10/0x10 [ 354.290480][T14318] ? atmtcp_ioctl+0x1ce/0xdf0 [ 354.295185][T14318] do_vcc_ioctl+0x36d/0x9d0 [ 354.299754][T14318] svc_ioctl+0x1f6/0x7d0 [ 354.304039][T14318] ? kasan_quarantine_put+0xbb/0x1f0 [ 354.309454][T14318] ? __pfx_svc_ioctl+0x10/0x10 [ 354.314282][T14318] ? tomoyo_path_number_perm+0x219/0x630 [ 354.319963][T14318] ? tomoyo_path_number_perm+0x219/0x630 [ 354.325659][T14318] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 354.330717][T14318] sock_do_ioctl+0x101/0x320 [ 354.335347][T14318] ? __pfx_sock_do_ioctl+0x10/0x10 [ 354.340495][T14318] ? do_futex+0x395/0x420 [ 354.344868][T14318] sock_ioctl+0x5c6/0x7f0 [ 354.349327][T14318] ? __pfx_sock_ioctl+0x10/0x10 [ 354.354213][T14318] ? __fget_files+0x2a/0x420 [ 354.358880][T14318] ? __fget_files+0x3a0/0x420 [ 354.363587][T14318] ? __fget_files+0x2a/0x420 [ 354.368218][T14318] ? bpf_lsm_file_ioctl+0x9/0x20 [ 354.373182][T14318] ? __pfx_sock_ioctl+0x10/0x10 [ 354.378068][T14318] __se_sys_ioctl+0xfc/0x170 [ 354.382688][T14318] do_syscall_64+0x14d/0xf80 [ 354.387320][T14318] ? trace_irq_disable+0x3b/0x150 [ 354.392374][T14318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.398531][T14318] ? clear_bhb_loop+0x40/0x90 [ 354.403261][T14318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.409281][T14318] RIP: 0033:0x7fb59559c799 [ 354.413735][T14318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.433383][T14318] RSP: 002b:00007fb5964bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.441838][T14318] RAX: ffffffffffffffda RBX: 00007fb595815fa0 RCX: 00007fb59559c799 [ 354.449837][T14318] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000006 [ 354.457854][T14318] RBP: 00007fb595632c99 R08: 0000000000000000 R09: 0000000000000000 [ 354.465855][T14318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.473875][T14318] R13: 00007fb595816038 R14: 00007fb595815fa0 R15: 00007ffcedf75df8 [ 354.482414][T14318] [ 354.486058][T14318] Kernel Offset: disabled [ 354.490417][T14318] Rebooting in 86400 seconds..