last executing test programs: 6.555628951s ago: executing program 3 (id=5747): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0x81, 0x40}, 0xffff, [0xffffffffffffffff, 0x8e9, 0x9, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7fffffffffffffff, 0x9, 0x5, 0x6, 0x8, 0x6, 0x4]}) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000c, 0x6031, 0xffffffffffffffff, 0x80000000) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="0089cc5393c1b3d21ed080558c3fbf792218983daa211044d6b78648dbaba0bc205556e4d1e26bf51e133c467eedc7c7341fb6061a7a6cf5c6f6e0985ae6c1b98fca0c1b892a6d3487ecf8a4be1e258baf", 0x1}], 0x1, 0x0, 0x0, 0x8800}], 0x49249249249267c, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r6, @ANYRESHEX=r9, @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) 5.443977546s ago: executing program 3 (id=5753): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.977974502s ago: executing program 3 (id=5754): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f00000002c0)=0x4b) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newchain={0x24, 0x1e, 0x601, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0x8, 0xe}, {0x10, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48884}, 0x4c084) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x6558, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x100, 0x470bd2c, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x4000081) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0xd, 0x1, [0xefffffff, 0x0, 0xd]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010004000000000000000100000008000100000000001400048005000300070000002bfc0300070000000800020001000000180008801400078008bb"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) 4.686219356s ago: executing program 3 (id=5756): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="302d9ffb56ea67b01ed00129e37a1c00000001018f020000000000000074"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000) sendmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800100000000000290000003700000046c4000000000000"], 0x18}}], 0x1, 0x24008000) 4.472009583s ago: executing program 3 (id=5761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x308, 0x98, 0x308, 0x138, 0x98, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'batadv_slave_0\x00', {0xff}, 'wlan1\x00', {}, 0x9, 0x16}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0xff000000, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x0, [0x0, 0x0, 0x0, 0x36]}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa00000000000061103800010000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004000600"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES64=0x0, @ANYRES32], 0x94}}, 0x4004800) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113520000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd2b, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) close(0xffffffffffffffff) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, 0x3, 0x2, 0x5, 0x0, 0xbc, 0xc20022, r6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x4010913, r7, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x10, r7, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 4.141482827s ago: executing program 3 (id=5764): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.037830344s ago: executing program 0 (id=5766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x58}}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x80000001}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000040)={0x20000014}) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair(0x25, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000009500000000000036a431f7528e66fe17c09084091c41f30a09a8ba68af21d99bb025f4977e06d9aad1350900f8296eb625e84ae5f7b71d9dbd642a74fb0b2e22975711e7cb11552b1e04b5dc662fffee0000000000000000", @ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a05003c0012800e00010069703665727370616e000000280002800600030030000000140007002001000000000000000000000000000206000e0003020000"], 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x9080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESOCT=r9], 0x0, 0x1, 0x0, 0x0, 0x100, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104fefffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4012000000000000140012800b0001006970766c616e000004000280080005", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000004c0)=0x179, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x80) 3.841799981s ago: executing program 0 (id=5769): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x94, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x4}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x88, r2, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x64}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b8ab984c18b8735f3ca5f8fef4238aa6f2b5d1754fbab15a"}, @NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$alg(r7, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r9, 0x58274084c3d7842f, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x44000) 2.578941409s ago: executing program 2 (id=5778): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4}, 0x94) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 58) 2.484955761s ago: executing program 4 (id=5779): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) close(0x3) 2.484650421s ago: executing program 2 (id=5780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x98}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 2.466563004s ago: executing program 4 (id=5781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3a000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.266974865s ago: executing program 0 (id=5783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x29, 0x1, 0xffff, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1108}, 0x1, 0x0, 0x0, 0x800}, 0x40800) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r4, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2120) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2.07221219s ago: executing program 1 (id=5784): close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000ec930006000000080003008e4147ede0394d13cccbf377d1ad9ad300"/48, @ANYRES32, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 2.049235441s ago: executing program 1 (id=5785): socket(0x200000000000011, 0x2, 0xd) socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty=0x1c}, {0x0, 0x0, 0x8}}}}}, 0x0) 1.546278772s ago: executing program 1 (id=5786): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x308, 0x98, 0x308, 0x138, 0x98, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'batadv_slave_0\x00', {0xff}, 'wlan1\x00', {}, 0x9, 0x16}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0xff000000, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x0, [0x0, 0x0, 0x0, 0x36]}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa00000000000061103800010000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004000600"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES64=0x0, @ANYRES32], 0x94}}, 0x4004800) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd2b, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) close(r3) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, 0x3, 0x2, 0x5, 0x0, 0xbc, 0xc20022, r6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x4010913, r7, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x10, r7, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 1.408752431s ago: executing program 4 (id=5787): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x1000000}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x20000044) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000001280)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014800d02b7030000000000008500000083000000bf090000000000005509010000000000950000000000000007090000080080ffbf91000000000000b7020000000000008500000085000000b70600000000000095"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x1}, 0x94) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x4ce37000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ddffffb702000008000000b70300000000001085000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd13}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc4844) r6 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r1, 0xa0775000) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4$alg(r6, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x6, 0xc, 0x8ad7}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@getqdisc={0x40, 0x26, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x8, 0xffe0}, {0xb, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4040090) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) 1.408348279s ago: executing program 2 (id=5788): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.259145288s ago: executing program 0 (id=5789): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000000000000006000000080003"], 0x20}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000006c0)={0x8, {{0x2, 0x4e26, @multicast2}}}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.24825049s ago: executing program 1 (id=5790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x70bd22, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x5, 0x0, 0xac}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) 1.136899974s ago: executing program 4 (id=5791): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc010) (fail_nth: 44) 1.021193807s ago: executing program 2 (id=5792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000040000000000000006000000180100002075002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000007000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 636.941615ms ago: executing program 2 (id=5793): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x230, 0xb0, 0x0, 0x148, 0xb0, 0x148, 0x198, 0x240, 0x240, 0x198, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x7, {0x7}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x2, 0x8], 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x17b, 0x0, &(0x7f0000000400)="59106dd32eac488436fa0b676197e541c169bf15021af8d3e785def7bf2e61525cf70cb55faebf00bb15df7ac3e9b5c264ffdca41e6dd0c7b0ef576e2086259d43b9da6d5658b8f0d93a44489a034781544fe64cda338969ccc8e4c91ad4fbbd10c6525cb49ed15fb93ab59b0fa059ecb080f738852d3918358171e2dcd333b5f0bca1870f2716ccf9ef1d6a6aca8169da5095cb4be40fc03d07b2c065e4422710b9e0a5d639a89498f7a1827e51012b8c7ad9ed8b600a370d2cd624c1a44fcb22ae1face88d5e524bccf32f3bdb81bc94d1fade59094d37713d91f549e029de5e88b5bbe16a17a396abdb1f27a56d4869d3a923d849b0085a6658f715fa785e67d39929a1c0b1a654d15bcee37a248c51b729ce120b608e7cf5e14ba4fcdd14e99cb2bf7181828e6990cc2950acb60006dd79f5098eeb9bc249e59aa39ab90fca136f7c66a11492c527cc9027392a56ab748d82ca6882662ed94173710d51edd21f73c7bd0706c9f099d69f26eb7be922854cde102771ec85b1bb", 0x7, 0x0, 0x7}, 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200"], 0xc8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000002c0), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', r4, 0x10, 0x7, 0xfd9, 0x3f, {{0xc, 0x4, 0x3, 0x3e, 0x30, 0x66, 0x0, 0x27, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@cipso={0x86, 0x1b, 0x2, [{0x2, 0x10, "72af7948ce1418465f8279e93b5a"}, {0x7, 0x5, '`02'}]}]}}}}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 628.588614ms ago: executing program 4 (id=5794): close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000ec930006000000080003008e4147ede0394d13cccbf377d1ad9ad300"/48, @ANYRES32, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 442.853041ms ago: executing program 1 (id=5795): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000d0ffffff000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 376.620255ms ago: executing program 4 (id=5796): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00.\x00\t\x00\'\tp\x00'], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xa, 0x148, 0x160, 0x60, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @rand_addr=0x64010106, 0xff, 0xffffffff, 'gretap0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0xf0, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x11, 0x0, 0x0, 0xfffffffd, 0x533, 0xffffffff, 0x7, 0x0, 0x8}}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x1000, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea68dba902bdc2ff8a930811d5ab686316d51d4773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e8) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000007000000df7f00006e450000410100", @ANYRES32, @ANYBLOB="0300000000000000000000003389b0fae0844800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x1, 0x65, 0xe, 0x4e, 0x24, 0xc, @private=0xa010100, @multicast2}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@broadcast, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 231.6109ms ago: executing program 1 (id=5797): r0 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x5, 0x18, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x11a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind(r0, &(0x7f00000000c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4060000000000007111b100000000008510000002000000850000000700000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) 194.424243ms ago: executing program 0 (id=5798): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB="7c010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000840ffff00000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000ff800000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000010000000000000000000000000000008000000080000000000000000000000000000000000000000000010000000000c4000500ac1414aa000000000000000000000000000000006c00000000000000fc0200000000000000000000000000003f00001141"], 0x17c}}, 0x0) 132.880519ms ago: executing program 2 (id=5799): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x308, 0x98, 0x308, 0x138, 0x98, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x3f00, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'gretap0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'batadv_slave_0\x00', {0xff}, 'wlan1\x00', {}, 0x9, 0x16}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0xff000000, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x0, [0x0, 0x0, 0x0, 0x36]}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa00000000000061103800010000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004000600"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES64=0x0, @ANYRES32], 0x94}}, 0x4004800) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd2b, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) close(r3) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, 0x3, 0x2, 0x5, 0x0, 0xbc, 0xc20022, r6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x4010913, r7, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x10, r7, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=5800): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x1000000}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x20000044) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000001280)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014800d02b7030000000000008500000083000000bf090000000000005509010000000000950000000000000007090000080080ffbf91000000000000b7020000000000008500000085000000b70600000000000095"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x1}, 0x94) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x4ce37000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ddffffb702000008000000b70300000000001085000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd13}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc4844) r6 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r1, 0xa0775000) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4$alg(r6, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x6, 0xc, 0x8ad7}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@getqdisc={0x40, 0x26, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x8, 0xffe0}, {0xb, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4040090) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) kernel console output (not intermixed with test programs): c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.907469][T22415] RSP: 002b:00007f1914bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.907485][T22415] RAX: ffffffffffffffda RBX: 00007f1916c15fa0 RCX: 00007f191699c799 [ 560.907497][T22415] RDX: 0000000000000815 RSI: 00002000000000c0 RDI: 0000000000000003 [ 560.907507][T22415] RBP: 00007f1914bee090 R08: 0000000000000000 R09: 0000000000000000 [ 560.907517][T22415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 560.907526][T22415] R13: 00007f1916c16038 R14: 00007f1916c15fa0 R15: 00007ffc7ce55268 [ 560.907550][T22415] [ 561.364421][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5112'. [ 561.391178][T22423] FAULT_INJECTION: forcing a failure. [ 561.391178][T22423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.430747][T22423] CPU: 1 UID: 0 PID: 22423 Comm: syz.0.5112 Not tainted syzkaller #0 PREEMPT(full) [ 561.430778][T22423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.430792][T22423] Call Trace: [ 561.430800][T22423] [ 561.430810][T22423] dump_stack_lvl+0xe8/0x150 [ 561.430845][T22423] should_fail_ex+0x412/0x560 [ 561.430877][T22423] _copy_from_user+0x2d/0xb0 [ 561.430913][T22423] sctp_setsockopt+0x1c4/0x12c0 [ 561.430940][T22423] ? sock_common_setsockopt+0x36/0xc0 [ 561.430973][T22423] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 561.430995][T22423] do_sock_setsockopt+0x17c/0x1b0 [ 561.431022][T22423] __x64_sys_setsockopt+0x13d/0x1b0 [ 561.431050][T22423] do_syscall_64+0x14d/0xf80 [ 561.431072][T22423] ? trace_irq_disable+0x3b/0x150 [ 561.431094][T22423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.431109][T22423] ? clear_bhb_loop+0x40/0x90 [ 561.431128][T22423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.431143][T22423] RIP: 0033:0x7f191699c799 [ 561.431160][T22423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.431174][T22423] RSP: 002b:00007f1914bcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 561.431190][T22423] RAX: ffffffffffffffda RBX: 00007f1916c16090 RCX: 00007f191699c799 [ 561.431201][T22423] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000007 [ 561.431210][T22423] RBP: 00007f1914bcd090 R08: 000000000001000f R09: 0000000000000000 [ 561.431220][T22423] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 561.431230][T22423] R13: 00007f1916c16128 R14: 00007f1916c16090 R15: 00007ffc7ce55268 [ 561.431255][T22423] [ 561.795643][T22432] FAULT_INJECTION: forcing a failure. [ 561.795643][T22432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.810109][T22432] CPU: 1 UID: 0 PID: 22432 Comm: syz.3.5117 Not tainted syzkaller #0 PREEMPT(full) [ 561.810138][T22432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.810152][T22432] Call Trace: [ 561.810161][T22432] [ 561.810171][T22432] dump_stack_lvl+0xe8/0x150 [ 561.810206][T22432] should_fail_ex+0x412/0x560 [ 561.810237][T22432] _copy_from_iter+0x1d3/0x1670 [ 561.810266][T22432] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 561.810298][T22432] ? __pfx_policy_nodemask+0x10/0x10 [ 561.810329][T22432] ? __pfx__copy_from_iter+0x10/0x10 [ 561.810365][T22432] ? set_page_refcounted+0xa0/0x1e0 [ 561.810393][T22432] ? page_copy_sane+0x4e/0x270 [ 561.810425][T22432] copy_page_from_iter+0xdd/0x170 [ 561.810460][T22432] tun_get_user+0x1d4b/0x3dd0 [ 561.810490][T22432] ? tun_get_user+0x6ff/0x3dd0 [ 561.810537][T22432] ? aa_file_perm+0x50e/0x15e0 [ 561.810567][T22432] ? __pfx_tun_get_user+0x10/0x10 [ 561.810595][T22432] ? aa_file_perm+0x192/0x15e0 [ 561.810663][T22432] ? ref_tracker_alloc+0x35c/0x4c0 [ 561.810695][T22432] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 561.810743][T22432] ? tun_get+0x1c/0x2f0 [ 561.810781][T22432] ? tun_get+0x1c/0x2f0 [ 561.810810][T22432] ? tun_get+0x1c/0x2f0 [ 561.810845][T22432] tun_chr_write_iter+0x113/0x200 [ 561.810880][T22432] vfs_write+0x61d/0xb90 [ 561.810913][T22432] ? __pfx_vfs_write+0x10/0x10 [ 561.810947][T22432] ? __fget_files+0x2a/0x420 [ 561.810989][T22432] ksys_write+0x150/0x270 [ 561.811016][T22432] ? __pfx_ksys_write+0x10/0x10 [ 561.811052][T22432] do_syscall_64+0x14d/0xf80 [ 561.811084][T22432] ? trace_irq_disable+0x3b/0x150 [ 561.811115][T22432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.811138][T22432] ? clear_bhb_loop+0x40/0x90 [ 561.811171][T22432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.811193][T22432] RIP: 0033:0x7f015815cfce [ 561.811214][T22432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.811234][T22432] RSP: 002b:00007f0159032fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 561.811259][T22432] RAX: ffffffffffffffda RBX: 00007f01590336c0 RCX: 00007f015815cfce [ 561.811276][T22432] RDX: 0000000000000074 RSI: 0000200000000000 RDI: 00000000000000c8 [ 561.811289][T22432] RBP: 00007f0159033090 R08: 0000000000000000 R09: 0000000000000000 [ 561.811304][T22432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.811317][T22432] R13: 00007f0158416038 R14: 00007f0158415fa0 R15: 00007ffcd8c58bc8 [ 561.811353][T22432] [ 562.088316][T22429] bond13: entered promiscuous mode [ 562.134093][T22429] bond0: Error: Cannot enslave bond to itself. [ 562.370057][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 562.382645][T22448] xt_TPROXY: Can be used only with -p tcp or -p udp [ 562.530030][T22457] FAULT_INJECTION: forcing a failure. [ 562.530030][T22457] name failslab, interval 1, probability 0, space 0, times 0 [ 562.593357][T22457] CPU: 1 UID: 0 PID: 22457 Comm: syz.1.5124 Not tainted syzkaller #0 PREEMPT(full) [ 562.593390][T22457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.593404][T22457] Call Trace: [ 562.593414][T22457] [ 562.593425][T22457] dump_stack_lvl+0xe8/0x150 [ 562.593462][T22457] should_fail_ex+0x412/0x560 [ 562.593498][T22457] should_failslab+0xa8/0x100 [ 562.593530][T22457] __kmalloc_cache_noprof+0x88/0x660 [ 562.593554][T22457] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 562.593578][T22457] ? sctp_v6_cmp_addr+0x15/0xd0 [ 562.593602][T22457] ? sctp_add_bind_addr+0x8c/0x370 [ 562.593639][T22457] sctp_add_bind_addr+0x8c/0x370 [ 562.593668][T22457] sctp_copy_local_addr_list+0x314/0x4f0 [ 562.593697][T22457] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 562.593722][T22457] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 562.593749][T22457] ? sctp_v6_is_any+0x64/0x80 [ 562.593775][T22457] ? sctp_copy_one_addr+0x93/0x360 [ 562.593802][T22457] sctp_bind_addr_copy+0xb3/0x3c0 [ 562.593826][T22457] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 562.593864][T22457] sctp_connect_new_asoc+0x2ff/0x6b0 [ 562.593898][T22457] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 562.593935][T22457] ? __local_bh_enable_ip+0xd0/0x130 [ 562.593962][T22457] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 562.593989][T22457] ? security_sctp_bind_connect+0x7e/0x2c0 [ 562.594018][T22457] sctp_sendmsg+0x1528/0x2c10 [ 562.594064][T22457] ? __pfx_sctp_sendmsg+0x10/0x10 [ 562.594096][T22457] ? aa_sk_perm+0x6d5/0x900 [ 562.594133][T22457] ? __pfx_aa_sk_perm+0x10/0x10 [ 562.594164][T22457] ? sock_rps_record_flow+0x19/0x350 [ 562.594197][T22457] ? __pfx_inet_sendmsg+0x10/0x10 [ 562.594231][T22457] ? inet_sendmsg+0x2f4/0x370 [ 562.594265][T22457] ? __pfx_inet_sendmsg+0x10/0x10 [ 562.594299][T22457] __sys_sendto+0x5de/0x710 [ 562.594336][T22457] ? __pfx___sys_sendto+0x10/0x10 [ 562.594365][T22457] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 562.594414][T22457] ? __fget_files+0x3a0/0x420 [ 562.594459][T22457] ? ksys_write+0x242/0x270 [ 562.594486][T22457] ? __pfx_ksys_write+0x10/0x10 [ 562.594517][T22457] __x64_sys_sendto+0xde/0x100 [ 562.594555][T22457] do_syscall_64+0x14d/0xf80 [ 562.594586][T22457] ? trace_irq_disable+0x3b/0x150 [ 562.594639][T22457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.594663][T22457] ? clear_bhb_loop+0x40/0x90 [ 562.594692][T22457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.594714][T22457] RIP: 0033:0x7f3fe8f9c799 [ 562.594735][T22457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.594755][T22457] RSP: 002b:00007f3fe9d87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 562.594779][T22457] RAX: ffffffffffffffda RBX: 00007f3fe9215fa0 RCX: 00007f3fe8f9c799 [ 562.594796][T22457] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 562.594811][T22457] RBP: 00007f3fe9d87090 R08: 000020000005ffe4 R09: 000000000000001c [ 562.594826][T22457] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 562.594839][T22457] R13: 00007f3fe9216038 R14: 00007f3fe9215fa0 R15: 00007ffd60faeaf8 [ 562.594876][T22457] [ 562.955066][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.045126][T22466] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 563.248712][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5133'. [ 563.637700][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5138'. [ 563.905275][T22520] tipc: Enabling of bearer rejected, already enabled [ 563.923503][T22520] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 564.048055][T22525] netlink: 'syz.2.5148': attribute type 2 has an invalid length. [ 564.080778][T22525] !: entered promiscuous mode [ 564.258984][T22542] netlink: 'syz.2.5151': attribute type 11 has an invalid length. [ 564.287564][T22542] netlink: 'syz.2.5151': attribute type 23 has an invalid length. [ 564.307512][T22542] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5151'. [ 564.560247][T22560] tipc: Enabled bearer , priority 0 [ 564.568491][T22560] syzkaller0: entered promiscuous mode [ 564.582022][T22560] syzkaller0: entered allmulticast mode [ 564.686136][T22565] tipc: Enabling of bearer rejected, already enabled [ 564.946661][T22574] block nbd14: server does not support multiple connections per device. [ 564.979844][T22574] block nbd14: shutting down sockets [ 564.984921][T22577] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5163'. [ 565.067512][T22582] bond13: entered promiscuous mode [ 565.086496][T22582] bond0: Error: Cannot enslave bond to itself. [ 565.158440][T22586] x_tables: duplicate underflow at hook 1 [ 565.241898][T22592] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5166'. [ 565.327219][T22560] tipc: Resetting bearer [ 565.436451][T22560] tipc: Disabling bearer [ 565.551090][T22607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5172'. [ 565.567343][T22607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5172'. [ 566.091335][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5178'. [ 566.137006][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5179'. [ 566.168625][T22634] FAULT_INJECTION: forcing a failure. [ 566.168625][T22634] name failslab, interval 1, probability 0, space 0, times 0 [ 566.193315][T22634] CPU: 1 UID: 0 PID: 22634 Comm: syz.2.5179 Not tainted syzkaller #0 PREEMPT(full) [ 566.193343][T22634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 566.193356][T22634] Call Trace: [ 566.193364][T22634] [ 566.193373][T22634] dump_stack_lvl+0xe8/0x150 [ 566.193405][T22634] should_fail_ex+0x412/0x560 [ 566.193436][T22634] should_failslab+0xa8/0x100 [ 566.193463][T22634] __kmalloc_cache_noprof+0x88/0x660 [ 566.193486][T22634] ? sctp_add_bind_addr+0x8c/0x370 [ 566.193513][T22634] sctp_add_bind_addr+0x8c/0x370 [ 566.193538][T22634] sctp_copy_local_addr_list+0x314/0x4f0 [ 566.193562][T22634] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 566.193584][T22634] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 566.193607][T22634] ? sctp_v6_is_any+0x64/0x80 [ 566.193631][T22634] ? sctp_copy_one_addr+0x93/0x360 [ 566.193654][T22634] sctp_bind_addr_copy+0xb3/0x3c0 [ 566.193675][T22634] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 566.193708][T22634] sctp_connect_new_asoc+0x2ff/0x6b0 [ 566.193736][T22634] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 566.193762][T22634] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 566.193788][T22634] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 566.193811][T22634] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 566.193837][T22634] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 566.193866][T22634] __sctp_connect+0x5cb/0xdc0 [ 566.193902][T22634] ? __pfx___sctp_connect+0x10/0x10 [ 566.193924][T22634] ? sctp_inet_connect+0xa0/0x210 [ 566.193948][T22634] ? __local_bh_enable_ip+0xd0/0x130 [ 566.193978][T22634] sctp_inet_connect+0x12e/0x210 [ 566.194004][T22634] __sys_connect+0x312/0x450 [ 566.194036][T22634] ? __pfx___sys_connect+0x10/0x10 [ 566.194076][T22634] ? __pfx_ksys_write+0x10/0x10 [ 566.194104][T22634] __x64_sys_connect+0x7a/0x90 [ 566.194133][T22634] do_syscall_64+0x14d/0xf80 [ 566.194160][T22634] ? trace_irq_disable+0x3b/0x150 [ 566.194186][T22634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.194206][T22634] ? clear_bhb_loop+0x40/0x90 [ 566.194230][T22634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.194249][T22634] RIP: 0033:0x7f81ee39c799 [ 566.194267][T22634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.194308][T22634] RSP: 002b:00007f81ef2d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 566.194350][T22634] RAX: ffffffffffffffda RBX: 00007f81ee615fa0 RCX: 00007f81ee39c799 [ 566.194365][T22634] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 566.194379][T22634] RBP: 00007f81ef2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 566.194392][T22634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.194405][T22634] R13: 00007f81ee616038 R14: 00007f81ee615fa0 R15: 00007fffe3410b48 [ 566.194440][T22634] [ 566.963568][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5187'. [ 567.283711][T22671] syzkaller1: entered promiscuous mode [ 567.289241][T22671] syzkaller1: entered allmulticast mode [ 567.377523][T22678] netlink: 'syz.4.5192': attribute type 1 has an invalid length. [ 567.388153][T22678] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5192'. [ 567.408938][T22678] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5192'. [ 567.419270][T22678] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5192'. [ 567.447029][T22676] bond13: entered promiscuous mode [ 567.464759][T22680] bond0: Error: Cannot enslave bond to itself. [ 567.585055][T22684] dummy0: entered promiscuous mode [ 567.590462][T22684] macsec1: entered allmulticast mode [ 567.600370][T22684] dummy0: entered allmulticast mode [ 567.636488][T22684] dummy0: left allmulticast mode [ 567.645006][T22684] dummy0: left promiscuous mode [ 567.679896][T22690] netlink: 'syz.3.5197': attribute type 1 has an invalid length. [ 567.758522][T22690] 8021q: adding VLAN 0 to HW filter on device bond14 [ 567.817223][T22694] bond14: (slave geneve2): making interface the new active one [ 567.840268][T22698] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5198'. [ 567.852015][T22694] bond14: (slave geneve2): Enslaving as an active interface with an up link [ 567.931745][T22700] tipc: Enabling of bearer rejected, already enabled [ 568.416276][T22723] FAULT_INJECTION: forcing a failure. [ 568.416276][T22723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.430297][T22723] CPU: 1 UID: 0 PID: 22723 Comm: syz.4.5211 Not tainted syzkaller #0 PREEMPT(full) [ 568.430343][T22723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.430357][T22723] Call Trace: [ 568.430366][T22723] [ 568.430376][T22723] dump_stack_lvl+0xe8/0x150 [ 568.430412][T22723] should_fail_ex+0x412/0x560 [ 568.430446][T22723] _copy_from_user+0x2d/0xb0 [ 568.430481][T22723] ___sys_recvmsg+0x175/0x590 [ 568.430502][T22723] ? __lock_acquire+0x6b5/0x2cf0 [ 568.430534][T22723] ? __pfx____sys_recvmsg+0x10/0x10 [ 568.430606][T22723] do_recvmmsg+0x334/0x800 [ 568.430638][T22723] ? __pfx_do_recvmmsg+0x10/0x10 [ 568.430675][T22723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 568.430726][T22723] __x64_sys_recvmmsg+0x198/0x250 [ 568.430753][T22723] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 568.430789][T22723] do_syscall_64+0x14d/0xf80 [ 568.430818][T22723] ? trace_irq_disable+0x3b/0x150 [ 568.430848][T22723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.430871][T22723] ? clear_bhb_loop+0x40/0x90 [ 568.430898][T22723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.430919][T22723] RIP: 0033:0x7f1adb59c799 [ 568.430940][T22723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.430958][T22723] RSP: 002b:00007f1adc4f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 568.430980][T22723] RAX: ffffffffffffffda RBX: 00007f1adb815fa0 RCX: 00007f1adb59c799 [ 568.430996][T22723] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 568.431010][T22723] RBP: 00007f1adc4f9090 R08: 0000000000000000 R09: 0000000000000000 [ 568.431023][T22723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.431036][T22723] R13: 00007f1adb816038 R14: 00007f1adb815fa0 R15: 00007fffad4dfdf8 [ 568.431070][T22723] [ 568.653293][T22727] syzkaller1: entered promiscuous mode [ 568.658816][T22727] syzkaller1: entered allmulticast mode [ 568.804783][T22729] tipc: Enabled bearer , priority 0 [ 568.842330][T22729] syzkaller0: entered promiscuous mode [ 568.883625][T22729] syzkaller0: entered allmulticast mode [ 568.971314][T22734] tipc: Resetting bearer [ 569.048005][T22734] tipc: Disabling bearer [ 569.316727][T22753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5221'. [ 569.437469][T22759] gretap0: entered promiscuous mode [ 569.469030][T22759] vlan2: entered promiscuous mode [ 569.751694][T22771] syzkaller0: entered promiscuous mode [ 569.757581][T22771] syzkaller0: entered allmulticast mode [ 570.181006][T22778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.209288][T22791] xt_TCPMSS: Only works on TCP SYN packets [ 570.238892][T22778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.455000][T22778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.473162][T22778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.602498][T22778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.673721][T22778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.715522][T22806] __nla_validate_parse: 1 callbacks suppressed [ 570.715543][T22806] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5236'. [ 570.765386][T22806] netlink: 'syz.2.5236': attribute type 2 has an invalid length. [ 570.905690][T22778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.958228][T22778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.067538][T22818] syzkaller0: entered promiscuous mode [ 571.101663][T22818] syzkaller0: entered allmulticast mode [ 571.132432][T22822] delete_channel: no stack [ 571.421886][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.468912][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.532526][ T1170] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.554460][ T1170] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.611510][ T1170] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.627340][ T1170] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.681012][ T35] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.693711][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.742729][T22848] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.750019][T22848] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.785271][T22848] bridge0: entered allmulticast mode [ 571.869107][T22848] bridge_slave_1: left allmulticast mode [ 571.878818][T22848] bridge_slave_1: left promiscuous mode [ 571.899684][T22848] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.911897][T22848] bridge_slave_0: left allmulticast mode [ 571.919163][T22848] bridge_slave_0: left promiscuous mode [ 571.925578][T22848] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.947428][T22848] bond0: (slave bridge0): Releasing backup interface [ 572.023769][T22854] bond14: entered promiscuous mode [ 572.029279][T22858] bond0: Error: Cannot enslave bond to itself. [ 572.272449][T22868] netlink: 'syz.3.5255': attribute type 21 has an invalid length. [ 572.281627][T22871] syzkaller0: entered promiscuous mode [ 572.288585][T22871] syzkaller0: entered allmulticast mode [ 572.320043][T22868] netlink: 'syz.3.5255': attribute type 6 has an invalid length. [ 572.353426][T22868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5255'. [ 572.667802][T22884] netlink: 'syz.3.5262': attribute type 5 has an invalid length. [ 573.053563][ T1971] block nbd7: Possible stuck request ffff888026d58000: control (read@0,1024B). Runtime 210 seconds [ 573.064639][ T1971] block nbd7: Possible stuck request ffff888026d58200: control (read@1024,1024B). Runtime 210 seconds [ 573.076571][ T1971] block nbd7: Possible stuck request ffff888026d58400: control (read@2048,1024B). Runtime 210 seconds [ 573.088285][ T1971] block nbd7: Possible stuck request ffff888026d58600: control (read@3072,1024B). Runtime 210 seconds [ 573.610783][T22897] team_slave_0: entered allmulticast mode [ 573.620461][T22896] team_slave_0: left allmulticast mode [ 573.712058][T22899] tipc: Enabled bearer , priority 14 [ 574.176917][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5273'. [ 574.309106][T22921] tipc: Enabling of bearer rejected, already enabled [ 574.528401][T22933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5277'. [ 574.587478][T22933] FAULT_INJECTION: forcing a failure. [ 574.587478][T22933] name failslab, interval 1, probability 0, space 0, times 0 [ 574.618978][T22933] CPU: 0 UID: 0 PID: 22933 Comm: syz.0.5277 Not tainted syzkaller #0 PREEMPT(full) [ 574.619004][T22933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.619016][T22933] Call Trace: [ 574.619024][T22933] [ 574.619033][T22933] dump_stack_lvl+0xe8/0x150 [ 574.619065][T22933] should_fail_ex+0x412/0x560 [ 574.619098][T22933] should_failslab+0xa8/0x100 [ 574.619126][T22933] __kmalloc_noprof+0xe8/0x760 [ 574.619149][T22933] ? sctp_send_reset_streams+0x370/0xd60 [ 574.619251][T22933] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.619276][T22933] sctp_send_reset_streams+0x370/0xd60 [ 574.619311][T22933] ? __local_bh_enable_ip+0xd0/0x130 [ 574.619342][T22933] sctp_setsockopt+0x9d4/0x12c0 [ 574.619366][T22933] ? sock_common_setsockopt+0x36/0xc0 [ 574.619392][T22933] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 574.619421][T22933] do_sock_setsockopt+0x17c/0x1b0 [ 574.619457][T22933] __x64_sys_setsockopt+0x13d/0x1b0 [ 574.619494][T22933] do_syscall_64+0x14d/0xf80 [ 574.619522][T22933] ? trace_irq_disable+0x3b/0x150 [ 574.619550][T22933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.619578][T22933] ? clear_bhb_loop+0x40/0x90 [ 574.619603][T22933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.619623][T22933] RIP: 0033:0x7f191699c799 [ 574.619646][T22933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.619664][T22933] RSP: 002b:00007f1914bcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 574.619685][T22933] RAX: ffffffffffffffda RBX: 00007f1916c16090 RCX: 00007f191699c799 [ 574.619700][T22933] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000007 [ 574.619712][T22933] RBP: 00007f1914bcd090 R08: 000000000001000f R09: 0000000000000000 [ 574.619725][T22933] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 574.619738][T22933] R13: 00007f1916c16128 R14: 00007f1916c16090 R15: 00007ffc7ce55268 [ 574.619772][T22933] [ 575.454731][T22948] FAULT_INJECTION: forcing a failure. [ 575.454731][T22948] name failslab, interval 1, probability 0, space 0, times 0 [ 575.483093][T22948] CPU: 0 UID: 0 PID: 22948 Comm: syz.0.5280 Not tainted syzkaller #0 PREEMPT(full) [ 575.483123][T22948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.483137][T22948] Call Trace: [ 575.483147][T22948] [ 575.483157][T22948] dump_stack_lvl+0xe8/0x150 [ 575.483192][T22948] should_fail_ex+0x412/0x560 [ 575.483227][T22948] should_failslab+0xa8/0x100 [ 575.483258][T22948] __kmalloc_cache_noprof+0x88/0x660 [ 575.483283][T22948] ? sctp_add_bind_addr+0x8c/0x370 [ 575.483313][T22948] sctp_add_bind_addr+0x8c/0x370 [ 575.483341][T22948] sctp_copy_local_addr_list+0x314/0x4f0 [ 575.483369][T22948] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 575.483393][T22948] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 575.483419][T22948] ? sctp_v6_is_any+0x64/0x80 [ 575.483444][T22948] ? sctp_copy_one_addr+0x93/0x360 [ 575.483471][T22948] sctp_bind_addr_copy+0xb3/0x3c0 [ 575.483502][T22948] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 575.483539][T22948] sctp_connect_new_asoc+0x2ff/0x6b0 [ 575.483570][T22948] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 575.483607][T22948] ? __local_bh_enable_ip+0xd0/0x130 [ 575.483634][T22948] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 575.483659][T22948] ? security_sctp_bind_connect+0x7e/0x2c0 [ 575.483686][T22948] sctp_sendmsg+0x1528/0x2c10 [ 575.483731][T22948] ? __pfx_sctp_sendmsg+0x10/0x10 [ 575.483762][T22948] ? aa_sk_perm+0x6d5/0x900 [ 575.483798][T22948] ? __pfx_aa_sk_perm+0x10/0x10 [ 575.483829][T22948] ? sock_rps_record_flow+0x19/0x350 [ 575.483860][T22948] ? __pfx_inet_sendmsg+0x10/0x10 [ 575.483893][T22948] ? inet_sendmsg+0x2f4/0x370 [ 575.483924][T22948] ? __pfx_inet_sendmsg+0x10/0x10 [ 575.483957][T22948] __sys_sendto+0x5de/0x710 [ 575.483994][T22948] ? __pfx___sys_sendto+0x10/0x10 [ 575.484023][T22948] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 575.484070][T22948] ? __fget_files+0x3a0/0x420 [ 575.484113][T22948] ? ksys_write+0x242/0x270 [ 575.484138][T22948] ? __pfx_ksys_write+0x10/0x10 [ 575.484168][T22948] __x64_sys_sendto+0xde/0x100 [ 575.484204][T22948] do_syscall_64+0x14d/0xf80 [ 575.484232][T22948] ? trace_irq_disable+0x3b/0x150 [ 575.484262][T22948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.484284][T22948] ? clear_bhb_loop+0x40/0x90 [ 575.484310][T22948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.484331][T22948] RIP: 0033:0x7f191699c799 [ 575.484351][T22948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.484370][T22948] RSP: 002b:00007f1914bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 575.484393][T22948] RAX: ffffffffffffffda RBX: 00007f1916c15fa0 RCX: 00007f191699c799 [ 575.484409][T22948] RDX: 000000000000ffe0 RSI: 0000200000847fff RDI: 0000000000000004 [ 575.484423][T22948] RBP: 00007f1914bee090 R08: 000020000005ffe4 R09: 000000000000001c [ 575.484437][T22948] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 575.484450][T22948] R13: 00007f1916c16038 R14: 00007f1916c15fa0 R15: 00007ffc7ce55268 [ 575.484492][T22948] [ 575.964289][ T9511] tipc: Node number set to 2802346340 [ 576.300530][T22961] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5284'. [ 576.416627][T22965] netlink: 364 bytes leftover after parsing attributes in process `syz.3.5285'. [ 576.418319][T22967] syzkaller0: entered promiscuous mode [ 576.442796][T22967] syzkaller0: entered allmulticast mode [ 576.483284][T22969] FAULT_INJECTION: forcing a failure. [ 576.483284][T22969] name failslab, interval 1, probability 0, space 0, times 0 [ 576.500679][T22969] CPU: 0 UID: 0 PID: 22969 Comm: syz.0.5287 Not tainted syzkaller #0 PREEMPT(full) [ 576.500706][T22969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 576.500719][T22969] Call Trace: [ 576.500728][T22969] [ 576.500736][T22969] dump_stack_lvl+0xe8/0x150 [ 576.500770][T22969] should_fail_ex+0x412/0x560 [ 576.500802][T22969] should_failslab+0xa8/0x100 [ 576.500830][T22969] __kmalloc_cache_noprof+0x88/0x660 [ 576.500852][T22969] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 576.500875][T22969] ? sctp_add_bind_addr+0x8c/0x370 [ 576.500908][T22969] sctp_add_bind_addr+0x8c/0x370 [ 576.500935][T22969] sctp_copy_local_addr_list+0x314/0x4f0 [ 576.500960][T22969] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 576.500983][T22969] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 576.501007][T22969] ? sctp_v6_is_any+0x64/0x80 [ 576.501031][T22969] ? sctp_copy_one_addr+0x93/0x360 [ 576.501056][T22969] sctp_bind_addr_copy+0xb3/0x3c0 [ 576.501078][T22969] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 576.501112][T22969] sctp_connect_new_asoc+0x2ff/0x6b0 [ 576.501142][T22969] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 576.501176][T22969] ? __local_bh_enable_ip+0xd0/0x130 [ 576.501200][T22969] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 576.501226][T22969] ? security_sctp_bind_connect+0x7e/0x2c0 [ 576.501251][T22969] sctp_sendmsg+0x1528/0x2c10 [ 576.501293][T22969] ? __pfx_sctp_sendmsg+0x10/0x10 [ 576.501323][T22969] ? aa_sk_perm+0x6d5/0x900 [ 576.501356][T22969] ? __pfx_aa_sk_perm+0x10/0x10 [ 576.501384][T22969] ? sock_rps_record_flow+0x19/0x350 [ 576.501413][T22969] ? __pfx_inet_sendmsg+0x10/0x10 [ 576.501444][T22969] ? inet_sendmsg+0x2f4/0x370 [ 576.501474][T22969] ? __pfx_inet_sendmsg+0x10/0x10 [ 576.501504][T22969] __sys_sendto+0x5de/0x710 [ 576.501538][T22969] ? __pfx___sys_sendto+0x10/0x10 [ 576.501565][T22969] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 576.501608][T22969] ? __fget_files+0x3a0/0x420 [ 576.501649][T22969] ? ksys_write+0x242/0x270 [ 576.501674][T22969] ? __pfx_ksys_write+0x10/0x10 [ 576.501702][T22969] __x64_sys_sendto+0xde/0x100 [ 576.501735][T22969] do_syscall_64+0x14d/0xf80 [ 576.501763][T22969] ? trace_irq_disable+0x3b/0x150 [ 576.501791][T22969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.501811][T22969] ? clear_bhb_loop+0x40/0x90 [ 576.501836][T22969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.501855][T22969] RIP: 0033:0x7f191699c799 [ 576.501875][T22969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.501893][T22969] RSP: 002b:00007f1914bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 576.501920][T22969] RAX: ffffffffffffffda RBX: 00007f1916c15fa0 RCX: 00007f191699c799 [ 576.501935][T22969] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 576.501949][T22969] RBP: 00007f1914bee090 R08: 000020000005ffe4 R09: 000000000000001c [ 576.501962][T22969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.501975][T22969] R13: 00007f1916c16038 R14: 00007f1916c15fa0 R15: 00007ffc7ce55268 [ 576.502009][T22969] [ 577.162527][T22983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5290'. [ 577.365037][T22994] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 577.408094][T22996] netlink: 'syz.0.5297': attribute type 4 has an invalid length. [ 577.509971][T23002] netlink: 'syz.1.5298': attribute type 39 has an invalid length. [ 577.532133][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5297'. [ 577.618024][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5299'. [ 577.721416][T23009] netlink: 'syz.2.5300': attribute type 10 has an invalid length. [ 577.997690][T23023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5305'. [ 578.332193][T23041] macvlan0: entered promiscuous mode [ 578.351415][T23041] netlink: 'syz.0.5313': attribute type 2 has an invalid length. [ 578.396931][T23043] syzkaller0: entered promiscuous mode [ 578.402543][T23043] syzkaller0: entered allmulticast mode [ 578.507978][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5315'. [ 578.560378][T23050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5316'. [ 578.601543][T23053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5317'. [ 579.147705][T23078] bond7: entered promiscuous mode [ 579.157343][T23078] bond0: Error: Cannot enslave bond to itself. [ 579.221846][T23084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5330'. [ 579.237950][T23084] xt_hashlimit: size too large, truncated to 1048576 [ 579.246553][T23084] xt_hashlimit: overflow, try lower: 0/0 [ 579.257585][T23084] syz_tun: entered allmulticast mode [ 579.327985][T23083] syz_tun: left allmulticast mode [ 579.400934][T23091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.617083][T23101] bond7: option lp_interval: invalid value (0) [ 579.629635][T23101] bond7: option lp_interval: allowed values 1 - 2147483647 [ 579.658211][T23101] bond7 (unregistering): Released all slaves [ 579.837055][T23116] netlink: 'syz.4.5338': attribute type 1 has an invalid length. [ 579.877349][T23116] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.904588][T23116] bond8: (slave geneve2): making interface the new active one [ 579.917414][T23116] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 580.026608][T23122] bond7: entered promiscuous mode [ 580.042775][T23127] bond0: Error: Cannot enslave bond to itself. [ 580.250852][T23136] FAULT_INJECTION: forcing a failure. [ 580.250852][T23136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.299126][T23136] CPU: 1 UID: 0 PID: 23136 Comm: syz.4.5343 Not tainted syzkaller #0 PREEMPT(full) [ 580.299158][T23136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.299173][T23136] Call Trace: [ 580.299183][T23136] [ 580.299193][T23136] dump_stack_lvl+0xe8/0x150 [ 580.299231][T23136] should_fail_ex+0x412/0x560 [ 580.299266][T23136] _copy_from_user+0x2d/0xb0 [ 580.299306][T23136] ___sys_sendmsg+0x1c6/0x360 [ 580.299337][T23136] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.299400][T23136] ? __fget_files+0x2a/0x420 [ 580.299432][T23136] ? __fget_files+0x3a0/0x420 [ 580.299475][T23136] __x64_sys_sendmsg+0x1bd/0x2a0 [ 580.299502][T23136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.299536][T23136] ? __pfx_ksys_write+0x10/0x10 [ 580.299581][T23136] do_syscall_64+0x14d/0xf80 [ 580.299612][T23136] ? trace_irq_disable+0x3b/0x150 [ 580.299643][T23136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.299666][T23136] ? clear_bhb_loop+0x40/0x90 [ 580.299693][T23136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.299715][T23136] RIP: 0033:0x7f1adb59c799 [ 580.299737][T23136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.299757][T23136] RSP: 002b:00007f1adc4d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.299781][T23136] RAX: ffffffffffffffda RBX: 00007f1adb816090 RCX: 00007f1adb59c799 [ 580.299798][T23136] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 580.299813][T23136] RBP: 00007f1adc4d8090 R08: 0000000000000000 R09: 0000000000000000 [ 580.299827][T23136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.299841][T23136] R13: 00007f1adb816128 R14: 00007f1adb816090 R15: 00007fffad4dfdf8 [ 580.299877][T23136] [ 580.576227][T23138] netlink: 'syz.2.5344': attribute type 5 has an invalid length. [ 580.697131][T23149] lo speed is unknown, defaulting to 1000 [ 580.747628][T23155] FAULT_INJECTION: forcing a failure. [ 580.747628][T23155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 580.765726][T23155] CPU: 1 UID: 0 PID: 23155 Comm: syz.3.5350 Not tainted syzkaller #0 PREEMPT(full) [ 580.765756][T23155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.765770][T23155] Call Trace: [ 580.765780][T23155] [ 580.765789][T23155] dump_stack_lvl+0xe8/0x150 [ 580.765826][T23155] should_fail_ex+0x412/0x560 [ 580.765861][T23155] prepare_alloc_pages+0x22a/0x650 [ 580.765898][T23155] __alloc_frozen_pages_noprof+0x12f/0x380 [ 580.765932][T23155] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 580.765965][T23155] ? __pfx_policy_nodemask+0x10/0x10 [ 580.765992][T23155] ? __lock_acquire+0x6b5/0x2cf0 [ 580.766029][T23155] alloc_pages_mpol+0x232/0x4a0 [ 580.766064][T23155] folio_alloc_mpol_noprof+0x39/0x70 [ 580.766095][T23155] shmem_alloc_and_add_folio+0x445/0xf80 [ 580.766125][T23155] ? filemap_get_entry+0xca/0x320 [ 580.766147][T23155] ? filemap_get_entry+0xca/0x320 [ 580.766172][T23155] ? filemap_get_entry+0x2ac/0x320 [ 580.766195][T23155] ? __pfx_filemap_get_entry+0x10/0x10 [ 580.766219][T23155] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 580.766247][T23155] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 580.766289][T23155] shmem_get_folio_gfp+0x5a9/0x1670 [ 580.766342][T23155] shmem_fault+0x179/0x390 [ 580.766375][T23155] __do_fault+0x138/0x390 [ 580.766403][T23155] do_pte_missing+0x5c4/0x3490 [ 580.766441][T23155] ? handle_mm_fault+0xee/0x3310 [ 580.766479][T23155] handle_mm_fault+0x1bec/0x3310 [ 580.766551][T23155] ? handle_mm_fault+0xee/0x3310 [ 580.766593][T23155] ? __pfx_handle_mm_fault+0x10/0x10 [ 580.766628][T23155] ? follow_page_pte+0x841/0x1450 [ 580.766670][T23155] ? __pfx_follow_page_pte+0x10/0x10 [ 580.766717][T23155] __get_user_pages+0x165b/0x29d0 [ 580.766786][T23155] __gup_longterm_locked+0x7ed/0x1630 [ 580.766845][T23155] gup_fast_fallback+0x1d82/0x22e0 [ 580.766912][T23155] ? __pfx_gup_fast_fallback+0x10/0x10 [ 580.766947][T23155] ? is_valid_gup_args+0x11f/0x200 [ 580.766980][T23155] ? pin_user_pages_fast+0x4d/0xb0 [ 580.767014][T23155] rds_cmsg_rdma_args+0x8f4/0x1240 [ 580.767075][T23155] ? trace_kmalloc+0x2a/0x110 [ 580.767101][T23155] rds_cmsg_send+0x33d/0x5c0 [ 580.767140][T23155] rds_sendmsg+0x12be/0x2150 [ 580.767179][T23155] ? __pfx_rds_sendmsg+0x10/0x10 [ 580.767211][T23155] ? __pfx_aa_sk_perm+0x10/0x10 [ 580.767236][T23155] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 580.767274][T23155] ? aa_sock_msg_perm+0xf1/0x1b0 [ 580.767304][T23155] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 580.767333][T23155] ____sys_sendmsg+0x972/0x9f0 [ 580.767367][T23155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.767399][T23155] ? import_iovec+0x73/0xa0 [ 580.767436][T23155] ___sys_sendmsg+0x2a5/0x360 [ 580.767463][T23155] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.767530][T23155] ? __fget_files+0x2a/0x420 [ 580.767562][T23155] ? __fget_files+0x3a0/0x420 [ 580.767605][T23155] __x64_sys_sendmsg+0x1bd/0x2a0 [ 580.767632][T23155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.767665][T23155] ? __pfx_ksys_write+0x10/0x10 [ 580.767711][T23155] do_syscall_64+0x14d/0xf80 [ 580.767758][T23155] ? trace_irq_disable+0x3b/0x150 [ 580.767788][T23155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.767810][T23155] ? clear_bhb_loop+0x40/0x90 [ 580.767837][T23155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.767858][T23155] RIP: 0033:0x7f015819c799 [ 580.767878][T23155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.767898][T23155] RSP: 002b:00007f0159033028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.767920][T23155] RAX: ffffffffffffffda RBX: 00007f0158415fa0 RCX: 00007f015819c799 [ 580.767936][T23155] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000005 [ 580.767950][T23155] RBP: 00007f0159033090 R08: 0000000000000000 R09: 0000000000000000 [ 580.767963][T23155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 580.767976][T23155] R13: 00007f0158416038 R14: 00007f0158415fa0 R15: 00007ffcd8c58bc8 [ 580.768012][T23155] [ 581.318548][T23155] lo speed is unknown, defaulting to 1000 [ 581.621687][T23172] FAULT_INJECTION: forcing a failure. [ 581.621687][T23172] name failslab, interval 1, probability 0, space 0, times 0 [ 581.634390][T23172] CPU: 1 UID: 0 PID: 23172 Comm: syz.3.5353 Not tainted syzkaller #0 PREEMPT(full) [ 581.634419][T23172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.634439][T23172] Call Trace: [ 581.634449][T23172] [ 581.634459][T23172] dump_stack_lvl+0xe8/0x150 [ 581.634497][T23172] should_fail_ex+0x412/0x560 [ 581.634533][T23172] should_failslab+0xa8/0x100 [ 581.634562][T23172] ? skb_clone+0x212/0x3a0 [ 581.634586][T23172] kmem_cache_alloc_noprof+0x87/0x650 [ 581.634611][T23172] ? __bpf_redirect+0x9b4/0x12a0 [ 581.634646][T23172] skb_clone+0x212/0x3a0 [ 581.634673][T23172] bpf_clone_redirect+0x16a/0x4b0 [ 581.634713][T23172] ? bpf_test_run+0x1d1/0x830 [ 581.634744][T23172] bpf_prog_cbaa716d5e7dde70+0x5f/0x68 [ 581.634769][T23172] ? __lock_acquire+0x6b5/0x2cf0 [ 581.634823][T23172] ? ktime_get+0x45/0x200 [ 581.634848][T23172] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 581.634870][T23172] ? lockdep_hardirqs_on+0x7a/0x110 [ 581.634901][T23172] ? ktime_get+0x45/0x200 [ 581.634920][T23172] ? seqcount_lockdep_reader_access+0xea/0x100 [ 581.634942][T23172] ? bpf_test_run+0x1d1/0x830 [ 581.634975][T23172] ? bpf_test_timer_continue+0x10c/0x320 [ 581.635011][T23172] bpf_test_run+0x354/0x830 [ 581.635065][T23172] ? __pfx_bpf_test_run+0x10/0x10 [ 581.635105][T23172] ? trace_kmem_cache_alloc+0x29/0xf0 [ 581.635126][T23172] ? slab_build_skb+0x52/0x410 [ 581.635159][T23172] ? __kasan_krealloc+0xeb/0x110 [ 581.635185][T23172] ? eth_type_trans+0x35e/0x6d0 [ 581.635213][T23172] ? bpf_prog_test_run_skb+0x889/0x1c90 [ 581.635242][T23172] ? convert___skb_to_skb+0x3d/0x5b0 [ 581.635275][T23172] bpf_prog_test_run_skb+0xd22/0x1c90 [ 581.635319][T23172] ? __fget_files+0x2a/0x420 [ 581.635351][T23172] ? __fget_files+0x3a0/0x420 [ 581.635381][T23172] ? __fget_files+0x2a/0x420 [ 581.635419][T23172] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 581.635459][T23172] bpf_prog_test_run+0x2c7/0x340 [ 581.635486][T23172] __sys_bpf+0x643/0x950 [ 581.635522][T23172] ? __pfx___sys_bpf+0x10/0x10 [ 581.635573][T23172] ? ksys_write+0x242/0x270 [ 581.635600][T23172] ? __pfx_ksys_write+0x10/0x10 [ 581.635633][T23172] __x64_sys_bpf+0x7c/0x90 [ 581.635664][T23172] do_syscall_64+0x14d/0xf80 [ 581.635695][T23172] ? trace_irq_disable+0x3b/0x150 [ 581.635726][T23172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.635749][T23172] ? clear_bhb_loop+0x40/0x90 [ 581.635777][T23172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.635799][T23172] RIP: 0033:0x7f015819c799 [ 581.635820][T23172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.635839][T23172] RSP: 002b:00007f0159033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 581.635862][T23172] RAX: ffffffffffffffda RBX: 00007f0158415fa0 RCX: 00007f015819c799 [ 581.635880][T23172] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 581.635895][T23172] RBP: 00007f0159033090 R08: 0000000000000000 R09: 0000000000000000 [ 581.635909][T23172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.635923][T23172] R13: 00007f0158416038 R14: 00007f0158415fa0 R15: 00007ffcd8c58bc8 [ 581.635960][T23172] [ 582.194970][T23183] netlink: 'syz.3.5356': attribute type 3 has an invalid length. [ 582.286608][T23183] __nla_validate_parse: 5 callbacks suppressed [ 582.286627][T23183] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5356'. [ 582.408907][T23180] bond14: entered promiscuous mode [ 582.429470][T23182] bond0: Error: Cannot enslave bond to itself. [ 582.450163][T23191] netlink: 1084 bytes leftover after parsing attributes in process `syz.4.5357'. [ 582.679213][T23203] FAULT_INJECTION: forcing a failure. [ 582.679213][T23203] name failslab, interval 1, probability 0, space 0, times 0 [ 582.701120][T23203] CPU: 1 UID: 0 PID: 23203 Comm: syz.0.5359 Not tainted syzkaller #0 PREEMPT(full) [ 582.701148][T23203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.701162][T23203] Call Trace: [ 582.701171][T23203] [ 582.701180][T23203] dump_stack_lvl+0xe8/0x150 [ 582.701214][T23203] should_fail_ex+0x412/0x560 [ 582.701246][T23203] should_failslab+0xa8/0x100 [ 582.701274][T23203] __kvmalloc_node_noprof+0x178/0x8a0 [ 582.701299][T23203] ? page_pool_create_percpu+0x2dd/0xb80 [ 582.701352][T23203] ? page_pool_create_percpu+0xaf/0xb80 [ 582.701379][T23203] page_pool_create_percpu+0x2dd/0xb80 [ 582.701402][T23203] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 582.701431][T23203] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 582.701459][T23203] ? arch_stack_walk+0xfb/0x150 [ 582.701504][T23203] ? __pfx_stack_trace_save+0x10/0x10 [ 582.701528][T23203] ? stack_depot_save_flags+0x33/0x810 [ 582.701562][T23203] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 582.701589][T23203] ? bpf_test_init+0x9f/0x150 [ 582.701612][T23203] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 582.701638][T23203] ? bpf_prog_test_run+0x2c7/0x340 [ 582.701656][T23203] ? __sys_bpf+0x643/0x950 [ 582.701684][T23203] ? __x64_sys_bpf+0x7c/0x90 [ 582.701756][T23203] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 582.701796][T23203] ? _copy_from_user+0x94/0xb0 [ 582.701826][T23203] ? bpf_test_init+0x113/0x150 [ 582.701856][T23203] ? xdp_convert_md_to_buff+0x5b/0x330 [ 582.701887][T23203] bpf_prog_test_run_xdp+0x81c/0x1160 [ 582.701930][T23203] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 582.701964][T23203] ? __fget_files+0x2a/0x420 [ 582.701998][T23203] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 582.702027][T23203] bpf_prog_test_run+0x2c7/0x340 [ 582.702051][T23203] __sys_bpf+0x643/0x950 [ 582.702082][T23203] ? __pfx___sys_bpf+0x10/0x10 [ 582.702132][T23203] ? ksys_write+0x242/0x270 [ 582.702156][T23203] ? __pfx_ksys_write+0x10/0x10 [ 582.702186][T23203] __x64_sys_bpf+0x7c/0x90 [ 582.702214][T23203] do_syscall_64+0x14d/0xf80 [ 582.702242][T23203] ? trace_irq_disable+0x3b/0x150 [ 582.702271][T23203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.702292][T23203] ? clear_bhb_loop+0x40/0x90 [ 582.702317][T23203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.702337][T23203] RIP: 0033:0x7f191699c799 [ 582.702356][T23203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.702374][T23203] RSP: 002b:00007f1914bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 582.702395][T23203] RAX: ffffffffffffffda RBX: 00007f1916c15fa0 RCX: 00007f191699c799 [ 582.702411][T23203] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 582.702424][T23203] RBP: 00007f1914bee090 R08: 0000000000000000 R09: 0000000000000000 [ 582.702437][T23203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.702449][T23203] R13: 00007f1916c16038 R14: 00007f1916c15fa0 R15: 00007ffc7ce55268 [ 582.702481][T23203] [ 582.755091][T23203] page_pool_create_percpu() gave up with errno -12 [ 583.205037][T23206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.746853][T23221] batman_adv: batadv0: Interface deactivated: macsec1 [ 583.856294][T23221] batman_adv: batadv0: Removing interface: macsec1 [ 584.157074][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5370'. [ 584.175577][T23233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5370'. [ 584.203575][T23218] lo speed is unknown, defaulting to 1000 [ 584.242023][T23235] bond15: entered promiscuous mode [ 584.247976][T23238] bond0: Error: Cannot enslave bond to itself. [ 584.516122][T23244] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5371'. [ 584.886465][T23254] sctp: [Deprecated]: syz.3.5373 (pid 23254) Use of int in max_burst socket option. [ 584.886465][T23254] Use struct sctp_assoc_value instead [ 585.436473][T23283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.638014][T23291] lo speed is unknown, defaulting to 1000 [ 585.840920][T23305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5390'. [ 586.122800][T23309] sctp: [Deprecated]: syz.2.5391 (pid 23309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 586.122800][T23309] Use struct sctp_sack_info instead [ 586.356169][T23314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5393'. [ 586.366581][T23314] xt_hashlimit: size too large, truncated to 1048576 [ 586.373518][T23314] xt_hashlimit: overflow, try lower: 0/0 [ 586.381645][T23314] syz_tun: entered allmulticast mode [ 586.402160][T23313] syz_tun: left allmulticast mode [ 586.489491][T23321] 8021q: VLANs not supported on ip6gre0 [ 586.534663][T23320] lo speed is unknown, defaulting to 1000 [ 586.657725][T23332] FAULT_INJECTION: forcing a failure. [ 586.657725][T23332] name failslab, interval 1, probability 0, space 0, times 0 [ 586.683564][T23332] CPU: 1 UID: 0 PID: 23332 Comm: syz.2.5400 Not tainted syzkaller #0 PREEMPT(full) [ 586.683594][T23332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.683607][T23332] Call Trace: [ 586.683614][T23332] [ 586.683623][T23332] dump_stack_lvl+0xe8/0x150 [ 586.683659][T23332] should_fail_ex+0x412/0x560 [ 586.683693][T23332] should_failslab+0xa8/0x100 [ 586.683723][T23332] __kmalloc_cache_noprof+0x88/0x660 [ 586.683747][T23332] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 586.683770][T23332] ? sctp_v6_cmp_addr+0x15/0xd0 [ 586.683793][T23332] ? sctp_add_bind_addr+0x8c/0x370 [ 586.683821][T23332] sctp_add_bind_addr+0x8c/0x370 [ 586.683851][T23332] sctp_copy_local_addr_list+0x314/0x4f0 [ 586.683879][T23332] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 586.683904][T23332] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 586.683931][T23332] ? sctp_v6_is_any+0x64/0x80 [ 586.683956][T23332] ? sctp_copy_one_addr+0x93/0x360 [ 586.683984][T23332] sctp_bind_addr_copy+0xb3/0x3c0 [ 586.684009][T23332] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 586.684047][T23332] sctp_connect_new_asoc+0x2ff/0x6b0 [ 586.684081][T23332] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 586.684117][T23332] ? __local_bh_enable_ip+0xd0/0x130 [ 586.684145][T23332] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 586.684172][T23332] ? security_sctp_bind_connect+0x7e/0x2c0 [ 586.684202][T23332] sctp_sendmsg+0x1528/0x2c10 [ 586.684248][T23332] ? __pfx_sctp_sendmsg+0x10/0x10 [ 586.684281][T23332] ? aa_sk_perm+0x6d5/0x900 [ 586.684318][T23332] ? __pfx_aa_sk_perm+0x10/0x10 [ 586.684349][T23332] ? sock_rps_record_flow+0x19/0x350 [ 586.684382][T23332] ? __pfx_inet_sendmsg+0x10/0x10 [ 586.684416][T23332] ? inet_sendmsg+0x2f4/0x370 [ 586.684449][T23332] ? __pfx_inet_sendmsg+0x10/0x10 [ 586.684483][T23332] __sys_sendto+0x5de/0x710 [ 586.684527][T23332] ? __pfx___sys_sendto+0x10/0x10 [ 586.684557][T23332] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 586.684606][T23332] ? __fget_files+0x3a0/0x420 [ 586.684651][T23332] ? ksys_write+0x242/0x270 [ 586.684678][T23332] ? __pfx_ksys_write+0x10/0x10 [ 586.684709][T23332] __x64_sys_sendto+0xde/0x100 [ 586.684746][T23332] do_syscall_64+0x14d/0xf80 [ 586.684777][T23332] ? trace_irq_disable+0x3b/0x150 [ 586.684809][T23332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.684832][T23332] ? clear_bhb_loop+0x40/0x90 [ 586.684860][T23332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.684882][T23332] RIP: 0033:0x7f81ee39c799 [ 586.684904][T23332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.684924][T23332] RSP: 002b:00007f81ef2d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 586.684948][T23332] RAX: ffffffffffffffda RBX: 00007f81ee615fa0 RCX: 00007f81ee39c799 [ 586.684965][T23332] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 586.684980][T23332] RBP: 00007f81ef2d1090 R08: 000020000005ffe4 R09: 000000000000001c [ 586.684995][T23332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 586.685009][T23332] R13: 00007f81ee616038 R14: 00007f81ee615fa0 R15: 00007fffe3410b48 [ 586.685047][T23332] [ 587.064325][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5401'. [ 587.080680][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5401'. [ 587.261976][T23346] xt_cgroup: invalid path, errno=-2 [ 587.508197][T23354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5406'. [ 587.510331][T23353] lo speed is unknown, defaulting to 1000 [ 587.536601][T23354] xt_hashlimit: size too large, truncated to 1048576 [ 587.556266][T23354] xt_hashlimit: overflow, try lower: 0/0 [ 587.596698][T23354] team_slave_0: entered allmulticast mode [ 587.656492][T23360] 8021q: VLANs not supported on ip6gre0 [ 587.700290][T23350] team_slave_0: left allmulticast mode [ 587.743960][T23366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.899519][T23373] FAULT_INJECTION: forcing a failure. [ 587.899519][T23373] name failslab, interval 1, probability 0, space 0, times 0 [ 587.964864][T23373] CPU: 0 UID: 0 PID: 23373 Comm: syz.2.5414 Not tainted syzkaller #0 PREEMPT(full) [ 587.964894][T23373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.964909][T23373] Call Trace: [ 587.964918][T23373] [ 587.964928][T23373] dump_stack_lvl+0xe8/0x150 [ 587.964965][T23373] should_fail_ex+0x412/0x560 [ 587.965001][T23373] should_failslab+0xa8/0x100 [ 587.965031][T23373] __kmalloc_cache_noprof+0x88/0x660 [ 587.965055][T23373] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 587.965078][T23373] ? sctp_v6_cmp_addr+0x15/0xd0 [ 587.965102][T23373] ? sctp_add_bind_addr+0x8c/0x370 [ 587.965131][T23373] sctp_add_bind_addr+0x8c/0x370 [ 587.965160][T23373] sctp_copy_local_addr_list+0x314/0x4f0 [ 587.965189][T23373] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 587.965213][T23373] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 587.965239][T23373] ? sctp_v6_is_any+0x64/0x80 [ 587.965265][T23373] ? sctp_copy_one_addr+0x93/0x360 [ 587.965292][T23373] sctp_bind_addr_copy+0xb3/0x3c0 [ 587.965317][T23373] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 587.965354][T23373] sctp_connect_new_asoc+0x2ff/0x6b0 [ 587.965398][T23373] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 587.965435][T23373] ? __local_bh_enable_ip+0xd0/0x130 [ 587.965462][T23373] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 587.965489][T23373] ? security_sctp_bind_connect+0x7e/0x2c0 [ 587.965518][T23373] sctp_sendmsg+0x1528/0x2c10 [ 587.965564][T23373] ? __pfx_sctp_sendmsg+0x10/0x10 [ 587.965596][T23373] ? aa_sk_perm+0x6d5/0x900 [ 587.965632][T23373] ? __pfx_aa_sk_perm+0x10/0x10 [ 587.965663][T23373] ? sock_rps_record_flow+0x19/0x350 [ 587.965696][T23373] ? __pfx_inet_sendmsg+0x10/0x10 [ 587.965730][T23373] ? inet_sendmsg+0x2f4/0x370 [ 587.965764][T23373] ? __pfx_inet_sendmsg+0x10/0x10 [ 587.965799][T23373] __sys_sendto+0x5de/0x710 [ 587.965836][T23373] ? __pfx___sys_sendto+0x10/0x10 [ 587.965866][T23373] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 587.965916][T23373] ? __fget_files+0x3a0/0x420 [ 587.965962][T23373] ? ksys_write+0x242/0x270 [ 587.966001][T23373] ? __pfx_ksys_write+0x10/0x10 [ 587.966043][T23373] __x64_sys_sendto+0xde/0x100 [ 587.966077][T23373] do_syscall_64+0x14d/0xf80 [ 587.966105][T23373] ? trace_irq_disable+0x3b/0x150 [ 587.966133][T23373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.966154][T23373] ? clear_bhb_loop+0x40/0x90 [ 587.966180][T23373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.966200][T23373] RIP: 0033:0x7f81ee39c799 [ 587.966219][T23373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.966238][T23373] RSP: 002b:00007f81ef2d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 587.966259][T23373] RAX: ffffffffffffffda RBX: 00007f81ee615fa0 RCX: 00007f81ee39c799 [ 587.966274][T23373] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 587.966288][T23373] RBP: 00007f81ef2d1090 R08: 0000200000000080 R09: 000000000000001c [ 587.966302][T23373] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 587.966314][T23373] R13: 00007f81ee616038 R14: 00007f81ee615fa0 R15: 00007fffe3410b48 [ 587.966348][T23373] [ 588.385712][T23383] syzkaller0: entered promiscuous mode [ 588.391236][T23383] syzkaller0: entered allmulticast mode [ 588.421530][T23385] FAULT_INJECTION: forcing a failure. [ 588.421530][T23385] name failslab, interval 1, probability 0, space 0, times 0 [ 588.463520][T23385] CPU: 1 UID: 0 PID: 23385 Comm: syz.2.5419 Not tainted syzkaller #0 PREEMPT(full) [ 588.463550][T23385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.463565][T23385] Call Trace: [ 588.463574][T23385] [ 588.463584][T23385] dump_stack_lvl+0xe8/0x150 [ 588.463620][T23385] should_fail_ex+0x412/0x560 [ 588.463655][T23385] should_failslab+0xa8/0x100 [ 588.463685][T23385] __kmalloc_cache_noprof+0x88/0x660 [ 588.463711][T23385] ? sctp_add_bind_addr+0x8c/0x370 [ 588.463742][T23385] sctp_add_bind_addr+0x8c/0x370 [ 588.463770][T23385] sctp_copy_local_addr_list+0x314/0x4f0 [ 588.463799][T23385] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 588.463823][T23385] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 588.463850][T23385] ? sctp_v6_is_any+0x64/0x80 [ 588.463876][T23385] ? sctp_copy_one_addr+0x93/0x360 [ 588.463903][T23385] sctp_bind_addr_copy+0xb3/0x3c0 [ 588.463928][T23385] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 588.463965][T23385] sctp_connect_new_asoc+0x2ff/0x6b0 [ 588.463997][T23385] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 588.464034][T23385] ? __local_bh_enable_ip+0xd0/0x130 [ 588.464061][T23385] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 588.464087][T23385] ? security_sctp_bind_connect+0x7e/0x2c0 [ 588.464114][T23385] sctp_sendmsg+0x1528/0x2c10 [ 588.464159][T23385] ? __pfx_sctp_sendmsg+0x10/0x10 [ 588.464204][T23385] ? aa_sk_perm+0x6d5/0x900 [ 588.464237][T23385] ? __pfx_aa_sk_perm+0x10/0x10 [ 588.464266][T23385] ? sock_rps_record_flow+0x19/0x350 [ 588.464300][T23385] ? inet_sendmsg+0x2f4/0x370 [ 588.464360][T23385] ____sys_sendmsg+0x80a/0x9f0 [ 588.464393][T23385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.464425][T23385] ? import_iovec+0x73/0xa0 [ 588.464463][T23385] ___sys_sendmsg+0x2a5/0x360 [ 588.464496][T23385] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.464524][T23385] ? kstrtouint+0x6e/0xe0 [ 588.464580][T23385] ? __fget_files+0x2a/0x420 [ 588.464611][T23385] ? __fget_files+0x3a0/0x420 [ 588.464653][T23385] __sys_sendmmsg+0x27c/0x4e0 [ 588.464682][T23385] ? __pfx___sys_sendmmsg+0x10/0x10 [ 588.464703][T23385] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 588.464765][T23385] ? ksys_write+0x242/0x270 [ 588.464791][T23385] ? __pfx_ksys_write+0x10/0x10 [ 588.464840][T23385] __x64_sys_sendmmsg+0xa0/0xc0 [ 588.464866][T23385] do_syscall_64+0x14d/0xf80 [ 588.464897][T23385] ? trace_irq_disable+0x3b/0x150 [ 588.464928][T23385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.464952][T23385] ? clear_bhb_loop+0x40/0x90 [ 588.464980][T23385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.465002][T23385] RIP: 0033:0x7f81ee39c799 [ 588.465024][T23385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.465044][T23385] RSP: 002b:00007f81ef2d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 588.465068][T23385] RAX: ffffffffffffffda RBX: 00007f81ee615fa0 RCX: 00007f81ee39c799 [ 588.465084][T23385] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000003 [ 588.465099][T23385] RBP: 00007f81ef2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 588.465113][T23385] R10: 000000000000c010 R11: 0000000000000246 R12: 0000000000000002 [ 588.465127][T23385] R13: 00007f81ee616038 R14: 00007f81ee615fa0 R15: 00007fffe3410b48 [ 588.465164][T23385] [ 589.084324][T23392] 8021q: VLANs not supported on ip6gre0 [ 589.099473][T23395] tipc: Enabled bearer , priority 0 [ 589.216717][T23395] syzkaller0: entered promiscuous mode [ 589.222241][T23395] syzkaller0: entered allmulticast mode [ 589.272425][T23397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5424'. [ 589.294184][T23397] xt_hashlimit: size too large, truncated to 1048576 [ 589.300908][T23397] xt_hashlimit: overflow, try lower: 0/0 [ 589.311039][T23401] tipc: Resetting bearer [ 589.326124][T23405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.333462][T23405] IPv6: NLM_F_CREATE should be set when creating new route [ 589.340726][T23405] IPv6: NLM_F_CREATE should be set when creating new route [ 589.390349][T23401] tipc: Disabling bearer [ 589.404330][T23407] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 589.440660][T23397] team_slave_0: entered allmulticast mode [ 589.497329][T23396] team_slave_0: left allmulticast mode [ 589.646050][T23419] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5431'. [ 589.895136][T23431] 8021q: VLANs not supported on ip6gre0 [ 589.935434][T23429] lo speed is unknown, defaulting to 1000 [ 590.111011][T23443] xt_bpf: check failed: parse error [ 590.126012][T23443] siw: device registration error -23 [ 590.257646][T23451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5443'. [ 590.267867][T23451] xt_hashlimit: size too large, truncated to 1048576 [ 590.275282][T23451] xt_hashlimit: overflow, try lower: 0/0 [ 590.310551][T23451] syz_tun: entered allmulticast mode [ 590.330102][T23452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5441'. [ 590.358301][T23446] syz_tun: left allmulticast mode [ 590.490408][T23467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5447'. [ 590.507495][T23452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5441'. [ 590.800602][T23474] 8021q: VLANs not supported on ip6gre0 [ 590.948645][T23484] FAULT_INJECTION: forcing a failure. [ 590.948645][T23484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.991398][T23484] CPU: 0 UID: 0 PID: 23484 Comm: syz.0.5452 Not tainted syzkaller #0 PREEMPT(full) [ 590.991437][T23484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 590.991450][T23484] Call Trace: [ 590.991462][T23484] [ 590.991473][T23484] dump_stack_lvl+0xe8/0x150 [ 590.991509][T23484] should_fail_ex+0x412/0x560 [ 590.991544][T23484] _copy_from_user+0x2d/0xb0 [ 590.991578][T23484] ___sys_recvmsg+0x175/0x590 [ 590.991602][T23484] ? __lock_acquire+0x6b5/0x2cf0 [ 590.991636][T23484] ? __pfx____sys_recvmsg+0x10/0x10 [ 590.991698][T23484] do_recvmmsg+0x334/0x800 [ 590.991730][T23484] ? __pfx_do_recvmmsg+0x10/0x10 [ 590.991766][T23484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 590.991817][T23484] __x64_sys_recvmmsg+0x198/0x250 [ 590.991843][T23484] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 590.991878][T23484] do_syscall_64+0x14d/0xf80 [ 590.991908][T23484] ? trace_irq_disable+0x3b/0x150 [ 590.991938][T23484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.991960][T23484] ? clear_bhb_loop+0x40/0x90 [ 590.991988][T23484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.992009][T23484] RIP: 0033:0x7f191699c799 [ 590.992030][T23484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.992049][T23484] RSP: 002b:00007f1914bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 590.992072][T23484] RAX: ffffffffffffffda RBX: 00007f1916c15fa0 RCX: 00007f191699c799 [ 590.992108][T23484] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 590.992123][T23484] RBP: 00007f1914bee090 R08: 0000000000000000 R09: 0000000000000000 [ 590.992137][T23484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 590.992151][T23484] R13: 00007f1916c16038 R14: 00007f1916c15fa0 R15: 00007ffc7ce55268 [ 590.992204][T23484] [ 591.406685][T23497] netlink: 'syz.4.5456': attribute type 1 has an invalid length. [ 591.467405][T23497] bond9: entered promiscuous mode [ 591.476503][T23497] 8021q: adding VLAN 0 to HW filter on device bond9 [ 591.484542][T23498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5457'. [ 591.499192][T23498] xt_hashlimit: size too large, truncated to 1048576 [ 591.508017][T23498] xt_hashlimit: overflow, try lower: 0/0 [ 591.536857][T23497] 8021q: adding VLAN 0 to HW filter on device bond9 [ 591.545025][T23497] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 591.556943][T23497] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 591.564895][T23506] IPv6: Can't replace route, no match found [ 591.579085][T23497] bond9: (slave wireguard0): making interface the new active one [ 591.588871][T23497] wireguard0: entered promiscuous mode [ 591.597958][T23497] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 591.614656][T23498] team_slave_0: entered allmulticast mode [ 591.624069][T23506] IPv6: Can't replace route, no match found [ 591.668407][T23506] bond9: (slave wireguard1): The slave device specified does not support setting the MAC address [ 591.696271][T23511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5461'. [ 591.712161][T23506] bond9: (slave wireguard1): Enslaving as a backup interface with an up link [ 591.738512][T23496] team_slave_0: left allmulticast mode [ 591.859241][T23518] 8021q: VLANs not supported on ip6gre0 [ 591.895246][T23520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5464'. [ 592.136515][T23535] netlink: 'syz.2.5467': attribute type 3 has an invalid length. [ 592.401270][T23555] netlink: 'syz.1.5474': attribute type 1 has an invalid length. [ 592.420798][T23556] xt_hashlimit: size too large, truncated to 1048576 [ 592.453246][T23555] 8021q: adding VLAN 0 to HW filter on device bond16 [ 592.473059][T23556] xt_hashlimit: overflow, try lower: 0/0 [ 592.477289][T23511] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 592.503932][T23511] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 592.554551][T23555] bond16: (slave veth9): Enslaving as an active interface with a down link [ 592.572978][T23556] syz_tun: entered allmulticast mode [ 592.623660][T23558] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 592.654205][T23558] bond16: (slave batadv1): making interface the new active one [ 592.666778][T23558] batadv1: entered promiscuous mode [ 592.674355][T23558] bond16: (slave batadv1): Enslaving as an active interface with an up link [ 592.698756][T23554] syz_tun: left allmulticast mode [ 592.880942][T23566] 8021q: VLANs not supported on ip6tnl0 [ 592.935055][T23568] syzkaller0: refused to change device tx_queue_len [ 592.952510][T23568] netlink: 'syz.3.5478': attribute type 1 has an invalid length. [ 593.009370][T23571] __nla_validate_parse: 4 callbacks suppressed [ 593.009391][T23571] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5479'. [ 593.029608][T23568] 8021q: adding VLAN 0 to HW filter on device bond15 [ 593.054117][T23574] bond15: (slave geneve3): making interface the new active one [ 593.075139][T23574] bond15: (slave geneve3): Enslaving as an active interface with an up link [ 593.089993][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 593.112115][T23573] nbd: socks must be embedded in a SOCK_ITEM attr [ 593.115688][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 593.191130][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 593.200686][T23575] lo speed is unknown, defaulting to 1000 [ 593.208785][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 593.271047][T23578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5481'. [ 593.477755][T23584] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5482'. [ 593.631703][T23591] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5485'. [ 593.689796][T23594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5486'. [ 593.700658][T23594] xt_hashlimit: size too large, truncated to 1048576 [ 593.711294][T23594] xt_hashlimit: overflow, try lower: 0/0 [ 593.718795][T23594] syz_tun: entered allmulticast mode [ 593.730140][T23593] syz_tun: left allmulticast mode [ 593.931900][T23604] 8021q: VLANs not supported on ip6tnl0 [ 594.088445][T23615] netlink: 'syz.4.5491': attribute type 3 has an invalid length. [ 594.101447][T23615] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5491'. [ 594.359022][T23625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5496'. [ 594.397005][T23620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5494'. [ 594.429774][T23631] IPVS: set_ctl: invalid protocol: 1816 16.0.0.0:0 [ 594.441712][T23628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5497'. [ 594.452204][T23628] xt_hashlimit: size too large, truncated to 1048576 [ 594.459539][T23628] xt_hashlimit: overflow, try lower: 0/0 [ 594.468628][T23628] syz_tun: entered allmulticast mode [ 594.501053][T23626] syz_tun: left allmulticast mode [ 594.946297][T23640] lo speed is unknown, defaulting to 1000 [ 595.441981][T23673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5511'. [ 595.577303][T23673] xt_hashlimit: size too large, truncated to 1048576 [ 595.606824][T23673] xt_hashlimit: overflow, try lower: 0/0 [ 595.627535][T23673] syz_tun: entered allmulticast mode [ 595.665113][T23683] lo speed is unknown, defaulting to 1000 [ 595.694480][T23678] netlink: 'syz.2.5513': attribute type 1 has an invalid length. [ 595.702299][T23678] netlink: 'syz.2.5513': attribute type 1 has an invalid length. [ 595.712785][T23678] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 595.727404][T23672] syz_tun: left allmulticast mode [ 595.890208][T23692] netlink: 'syz.3.5516': attribute type 3 has an invalid length. [ 596.017264][T23694] lo speed is unknown, defaulting to 1000 [ 596.344868][T23699] syzkaller1: entered promiscuous mode [ 596.350949][T23699] syzkaller1: entered allmulticast mode [ 596.519762][T23710] delete_channel: no stack [ 596.899922][T23727] xt_hashlimit: size too large, truncated to 1048576 [ 596.907799][T23727] xt_hashlimit: overflow, try lower: 0/0 [ 596.920367][T23727] syz_tun: entered allmulticast mode [ 596.932635][T23725] syz_tun: left allmulticast mode [ 597.050678][T23734] xt_l2tp: wrong L2TP version: 0 [ 597.357010][T23747] netlink: 'syz.1.5534': attribute type 13 has an invalid length. [ 597.389751][T23749] netlink: 'syz.3.5533': attribute type 1 has an invalid length. [ 597.742100][T23749] bond16: entered promiscuous mode [ 597.775418][T23749] 8021q: adding VLAN 0 to HW filter on device bond16 [ 597.826449][T23776] xt_hashlimit: size too large, truncated to 1048576 [ 597.839956][T23776] xt_hashlimit: overflow, try lower: 0/0 [ 597.877174][T23757] bond16: (slave bridge0): making interface the new active one [ 597.890828][T23757] bridge0: entered promiscuous mode [ 597.899048][T23757] bond16: (slave bridge0): Enslaving as an active interface with an up link [ 597.936323][T23776] syz_tun: entered allmulticast mode [ 597.981489][T23769] syz_tun: left allmulticast mode [ 598.175252][T23794] bond8: entered promiscuous mode [ 598.188203][T23794] bond0: Error: Cannot enslave bond to itself. [ 598.207072][T23797] __nla_validate_parse: 12 callbacks suppressed [ 598.207092][T23797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5544'. [ 598.897424][T23814] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5551'. [ 599.097554][T23820] netlink: 'syz.2.5553': attribute type 39 has an invalid length. [ 599.183567][T23823] FAULT_INJECTION: forcing a failure. [ 599.183567][T23823] name failslab, interval 1, probability 0, space 0, times 0 [ 599.202939][T23823] CPU: 0 UID: 0 PID: 23823 Comm: syz.3.5555 Not tainted syzkaller #0 PREEMPT(full) [ 599.202972][T23823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 599.202987][T23823] Call Trace: [ 599.202996][T23823] [ 599.203007][T23823] dump_stack_lvl+0xe8/0x150 [ 599.203043][T23823] should_fail_ex+0x412/0x560 [ 599.203079][T23823] should_failslab+0xa8/0x100 [ 599.203110][T23823] __kvmalloc_node_noprof+0x178/0x8a0 [ 599.203137][T23823] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 599.203171][T23823] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 599.203203][T23823] bpf_test_run_xdp_live+0x223/0x1cf0 [ 599.203232][T23823] ? arch_stack_walk+0xfb/0x150 [ 599.203280][T23823] ? __pfx_stack_trace_save+0x10/0x10 [ 599.203305][T23823] ? stack_depot_save_flags+0x33/0x810 [ 599.203343][T23823] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 599.203375][T23823] ? bpf_test_init+0x9f/0x150 [ 599.203400][T23823] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 599.203429][T23823] ? bpf_prog_test_run+0x2c7/0x340 [ 599.203449][T23823] ? __sys_bpf+0x643/0x950 [ 599.203479][T23823] ? __x64_sys_bpf+0x7c/0x90 [ 599.203559][T23823] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 599.203604][T23823] ? _copy_from_user+0x94/0xb0 [ 599.203638][T23823] ? bpf_test_init+0x113/0x150 [ 599.203665][T23823] ? xdp_convert_md_to_buff+0x5b/0x330 [ 599.203699][T23823] bpf_prog_test_run_xdp+0x81c/0x1160 [ 599.203747][T23823] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 599.203783][T23823] ? __fget_files+0x2a/0x420 [ 599.203821][T23823] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 599.203854][T23823] bpf_prog_test_run+0x2c7/0x340 [ 599.203887][T23823] __sys_bpf+0x643/0x950 [ 599.203923][T23823] ? __pfx___sys_bpf+0x10/0x10 [ 599.203974][T23823] ? ksys_write+0x242/0x270 [ 599.204000][T23823] ? __pfx_ksys_write+0x10/0x10 [ 599.204033][T23823] __x64_sys_bpf+0x7c/0x90 [ 599.204064][T23823] do_syscall_64+0x14d/0xf80 [ 599.204095][T23823] ? trace_irq_disable+0x3b/0x150 [ 599.204127][T23823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.204150][T23823] ? clear_bhb_loop+0x40/0x90 [ 599.204178][T23823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.204199][T23823] RIP: 0033:0x7f015819c799 [ 599.204220][T23823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.204239][T23823] RSP: 002b:00007f0159033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 599.204261][T23823] RAX: ffffffffffffffda RBX: 00007f0158415fa0 RCX: 00007f015819c799 [ 599.204277][T23823] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 599.204291][T23823] RBP: 00007f0159033090 R08: 0000000000000000 R09: 0000000000000000 [ 599.204305][T23823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.204319][T23823] R13: 00007f0158416038 R14: 00007f0158415fa0 R15: 00007ffcd8c58bc8 [ 599.204353][T23823] [ 599.660795][T23833] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 599.677251][T23841] ip6gretap0: entered promiscuous mode [ 599.986467][T23858] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5562'. [ 600.139873][T23865] delete_channel: no stack [ 600.527294][T23869] lo speed is unknown, defaulting to 1000 [ 600.545726][T23874] FAULT_INJECTION: forcing a failure. [ 600.545726][T23874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.572813][T23874] CPU: 0 UID: 0 PID: 23874 Comm: syz.2.5568 Not tainted syzkaller #0 PREEMPT(full) [ 600.572841][T23874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.572855][T23874] Call Trace: [ 600.572864][T23874] [ 600.572873][T23874] dump_stack_lvl+0xe8/0x150 [ 600.572906][T23874] should_fail_ex+0x412/0x560 [ 600.572939][T23874] _copy_from_user+0x2d/0xb0 [ 600.572971][T23874] kstrtouint_from_user+0xd6/0x180 [ 600.573000][T23874] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 600.573044][T23874] proc_fail_nth_write+0x8e/0x210 [ 600.573074][T23874] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 600.573108][T23874] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 600.573142][T23874] vfs_write+0x29a/0xb90 [ 600.573173][T23874] ? __pfx_vfs_write+0x10/0x10 [ 600.573196][T23874] ? __fget_files+0x2a/0x420 [ 600.573229][T23874] ? __fget_files+0x3a0/0x420 [ 600.573258][T23874] ? __fget_files+0x2a/0x420 [ 600.573295][T23874] ksys_write+0x150/0x270 [ 600.573320][T23874] ? __pfx_ksys_write+0x10/0x10 [ 600.573354][T23874] do_syscall_64+0x14d/0xf80 [ 600.573384][T23874] ? trace_irq_disable+0x3b/0x150 [ 600.573412][T23874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.573434][T23874] ? clear_bhb_loop+0x40/0x90 [ 600.573459][T23874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.573488][T23874] RIP: 0033:0x7f81ee35cfce [ 600.573508][T23874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 600.573526][T23874] RSP: 002b:00007f81ef2affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 600.573548][T23874] RAX: ffffffffffffffda RBX: 00007f81ef2b06c0 RCX: 00007f81ee35cfce [ 600.573563][T23874] RDX: 0000000000000001 RSI: 00007f81ef2b00a0 RDI: 0000000000000007 [ 600.573576][T23874] RBP: 00007f81ef2b0090 R08: 0000000000000000 R09: 0000000000000000 [ 600.573588][T23874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.573600][T23874] R13: 00007f81ee616128 R14: 00007f81ee616090 R15: 00007fffe3410b48 [ 600.573651][T23874] [ 600.950228][T23878] x_tables: duplicate underflow at hook 1 [ 601.094538][T23888] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5571'. [ 601.328745][T23903] FAULT_INJECTION: forcing a failure. [ 601.328745][T23903] name failslab, interval 1, probability 0, space 0, times 0 [ 601.341521][T23903] CPU: 1 UID: 0 PID: 23903 Comm: syz.1.5577 Not tainted syzkaller #0 PREEMPT(full) [ 601.341551][T23903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.341565][T23903] Call Trace: [ 601.341575][T23903] [ 601.341584][T23903] dump_stack_lvl+0xe8/0x150 [ 601.341619][T23903] should_fail_ex+0x412/0x560 [ 601.341652][T23903] should_failslab+0xa8/0x100 [ 601.341678][T23903] ? skb_clone+0x212/0x3a0 [ 601.341700][T23903] kmem_cache_alloc_noprof+0x87/0x650 [ 601.341722][T23903] ? lock_acquire+0xf0/0x2e0 [ 601.341756][T23903] skb_clone+0x212/0x3a0 [ 601.341777][T23903] ? dev_queue_xmit_nit+0x268/0xad0 [ 601.341813][T23903] dev_queue_xmit_nit+0x29a/0xad0 [ 601.341845][T23903] ? dev_queue_xmit_nit+0x2d/0xad0 [ 601.341889][T23903] dev_hard_start_xmit+0x1cf/0x870 [ 601.341938][T23903] __dev_queue_xmit+0x17a7/0x38d0 [ 601.341961][T23903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.341989][T23903] ? __dev_queue_xmit+0x28d/0x38d0 [ 601.342030][T23903] ? __pfx___dev_queue_xmit+0x10/0x10 [ 601.342063][T23903] ? __copy_skb_header+0xa3/0x4a0 [ 601.342084][T23903] ? __asan_memcpy+0x40/0x70 [ 601.342123][T23903] ? skb_clone+0x246/0x3a0 [ 601.342149][T23903] __netlink_deliver_tap+0x5ad/0x850 [ 601.342194][T23903] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.342225][T23903] netlink_deliver_tap+0x19c/0x1b0 [ 601.342256][T23903] netlink_unicast+0x7e3/0x9b0 [ 601.342293][T23903] ? __pfx_netlink_unicast+0x10/0x10 [ 601.342323][T23903] ? netlink_sendmsg+0x650/0xb40 [ 601.342351][T23903] ? skb_put+0x11b/0x210 [ 601.342387][T23903] netlink_sendmsg+0x813/0xb40 [ 601.342430][T23903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.342465][T23903] ? aa_sock_msg_perm+0xf1/0x1b0 [ 601.342494][T23903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.342522][T23903] ____sys_sendmsg+0x972/0x9f0 [ 601.342554][T23903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.342586][T23903] ? import_iovec+0x73/0xa0 [ 601.342624][T23903] ___sys_sendmsg+0x2a5/0x360 [ 601.342656][T23903] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.342716][T23903] ? __fget_files+0x2a/0x420 [ 601.342745][T23903] ? __fget_files+0x3a0/0x420 [ 601.342787][T23903] __x64_sys_sendmsg+0x1bd/0x2a0 [ 601.342812][T23903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.342845][T23903] ? __pfx_ksys_write+0x10/0x10 [ 601.342881][T23903] do_syscall_64+0x14d/0xf80 [ 601.342917][T23903] ? trace_irq_disable+0x3b/0x150 [ 601.342948][T23903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.342970][T23903] ? clear_bhb_loop+0x40/0x90 [ 601.342997][T23903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.343019][T23903] RIP: 0033:0x7f3fe8f9c799 [ 601.343039][T23903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.343058][T23903] RSP: 002b:00007f3fe9d87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.343080][T23903] RAX: ffffffffffffffda RBX: 00007f3fe9215fa0 RCX: 00007f3fe8f9c799 [ 601.343096][T23903] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 601.343109][T23903] RBP: 00007f3fe9d87090 R08: 0000000000000000 R09: 0000000000000000 [ 601.343122][T23903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.343134][T23903] R13: 00007f3fe9216038 R14: 00007f3fe9215fa0 R15: 00007ffd60faeaf8 [ 601.343169][T23903] [ 601.748593][T23908] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.772491][T23905] sctp: [Deprecated]: syz.3.5576 (pid 23905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.772491][T23905] Use struct sctp_sack_info instead [ 601.803843][T23905] sctp: [Deprecated]: syz.3.5576 (pid 23905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.803843][T23905] Use struct sctp_sack_info instead [ 601.825143][T23908] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.886529][T23908] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.951785][T23908] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.090943][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.129889][ T83] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.186977][ T83] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.243771][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.280152][T23931] netlink: 'syz.3.5586': attribute type 1 has an invalid length. [ 602.384982][T23931] 8021q: adding VLAN 0 to HW filter on device bond17 [ 602.466827][T23938] syzkaller0: entered promiscuous mode [ 602.473324][T23938] syzkaller0: entered allmulticast mode [ 602.507636][T23942] netlink: 'syz.1.5589': attribute type 21 has an invalid length. [ 602.540748][T23938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5588'. [ 602.576448][ T29] audit: type=1804 audit(1773467171.897:13): pid=23943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5590" name="/newroot/459/cgroup.controllers" dev="tmpfs" ino=2346 res=1 errno=0 [ 602.604679][T23942] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5589'. [ 602.615066][T23947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5589'. [ 602.640474][ T29] audit: type=1800 audit(1773467171.897:14): pid=23943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5590" name="cgroup.controllers" dev="tmpfs" ino=2346 res=0 errno=0 [ 602.675244][T23942] netlink: 'syz.1.5589': attribute type 5 has an invalid length. [ 602.693852][T23942] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5589'. [ 602.710631][T23951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5592'. [ 602.759657][T23942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5589'. [ 602.791930][T23951] FAULT_INJECTION: forcing a failure. [ 602.791930][T23951] name failslab, interval 1, probability 0, space 0, times 0 [ 602.811095][T23951] CPU: 1 UID: 0 PID: 23951 Comm: syz.3.5592 Not tainted syzkaller #0 PREEMPT(full) [ 602.811125][T23951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.811140][T23951] Call Trace: [ 602.811149][T23951] [ 602.811159][T23951] dump_stack_lvl+0xe8/0x150 [ 602.811194][T23951] should_fail_ex+0x412/0x560 [ 602.811230][T23951] should_failslab+0xa8/0x100 [ 602.811260][T23951] __kmalloc_cache_noprof+0x88/0x660 [ 602.811286][T23951] ? sctp_add_bind_addr+0x8c/0x370 [ 602.811319][T23951] sctp_add_bind_addr+0x8c/0x370 [ 602.811347][T23951] sctp_copy_local_addr_list+0x314/0x4f0 [ 602.811377][T23951] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 602.811401][T23951] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 602.811429][T23951] ? sctp_v6_is_any+0x64/0x80 [ 602.811455][T23951] ? sctp_copy_one_addr+0x93/0x360 [ 602.811485][T23951] sctp_bind_addr_copy+0xb3/0x3c0 [ 602.811509][T23951] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 602.811554][T23951] sctp_connect_new_asoc+0x2ff/0x6b0 [ 602.811587][T23951] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 602.811617][T23951] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 602.811645][T23951] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 602.811673][T23951] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 602.811702][T23951] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 602.811733][T23951] __sctp_connect+0x5cb/0xdc0 [ 602.811772][T23951] ? __pfx___sctp_connect+0x10/0x10 [ 602.811798][T23951] ? sctp_inet_connect+0xa0/0x210 [ 602.811824][T23951] ? __local_bh_enable_ip+0xd0/0x130 [ 602.811858][T23951] sctp_inet_connect+0x12e/0x210 [ 602.811888][T23951] __sys_connect+0x312/0x450 [ 602.811923][T23951] ? __pfx___sys_connect+0x10/0x10 [ 602.811968][T23951] ? __pfx_ksys_write+0x10/0x10 [ 602.812001][T23951] __x64_sys_connect+0x7a/0x90 [ 602.812033][T23951] do_syscall_64+0x14d/0xf80 [ 602.812065][T23951] ? trace_irq_disable+0x3b/0x150 [ 602.812096][T23951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.812119][T23951] ? clear_bhb_loop+0x40/0x90 [ 602.812146][T23951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.812168][T23951] RIP: 0033:0x7f015819c799 [ 602.812189][T23951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.812209][T23951] RSP: 002b:00007f0159033028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 602.812232][T23951] RAX: ffffffffffffffda RBX: 00007f0158415fa0 RCX: 00007f015819c799 [ 602.812248][T23951] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 602.812262][T23951] RBP: 00007f0159033090 R08: 0000000000000000 R09: 0000000000000000 [ 602.812277][T23951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 602.812290][T23951] R13: 00007f0158416038 R14: 00007f0158415fa0 R15: 00007ffcd8c58bc8 [ 602.812327][T23951] [ 603.202151][ T1971] block nbd7: Possible stuck request ffff888026d58000: control (read@0,1024B). Runtime 240 seconds [ 603.213731][ T1971] block nbd7: Possible stuck request ffff888026d58200: control (read@1024,1024B). Runtime 240 seconds [ 603.226937][ T1971] block nbd7: Possible stuck request ffff888026d58400: control (read@2048,1024B). Runtime 240 seconds [ 603.242063][ T1971] block nbd7: Possible stuck request ffff888026d58600: control (read@3072,1024B). Runtime 240 seconds [ 603.524377][T23974] bridge0: entered allmulticast mode [ 603.737994][T23992] bond16: (slave bridge0): Releasing backup interface [ 603.757903][T23992] bridge0 (unregistering): left promiscuous mode [ 604.186163][T24004] lo speed is unknown, defaulting to 1000 [ 604.483666][ T9724] batadv1: left promiscuous mode [ 605.895185][T24011] xt_hashlimit: size too large, truncated to 1048576 [ 605.964374][T24014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5612'. [ 606.367761][T24026] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5616'. [ 606.474824][T24032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5616'. [ 606.502277][T24033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5619'. [ 606.518096][T24030] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 606.536259][T24033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5619'. [ 606.563140][T24032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5616'. [ 606.676237][T24038] lo speed is unknown, defaulting to 1000 [ 606.741053][T24043] lo speed is unknown, defaulting to 1000 [ 606.879100][T24055] netlink: 'syz.2.5622': attribute type 2 has an invalid length. [ 606.887051][T24055] netlink: 'syz.2.5622': attribute type 1 has an invalid length. [ 606.894904][T24055] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5622'. [ 606.932435][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5624'. [ 606.983870][T24056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5624'. [ 607.011889][T24055] netlink: 'syz.2.5622': attribute type 2 has an invalid length. [ 607.043258][T24055] netlink: 'syz.2.5622': attribute type 2 has an invalid length. [ 608.420090][T24086] lo speed is unknown, defaulting to 1000 [ 608.458192][T24091] vlan0: entered promiscuous mode [ 609.009838][T24114] FAULT_INJECTION: forcing a failure. [ 609.009838][T24114] name failslab, interval 1, probability 0, space 0, times 0 [ 609.058769][T24114] CPU: 0 UID: 0 PID: 24114 Comm: syz.2.5643 Not tainted syzkaller #0 PREEMPT(full) [ 609.058798][T24114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.058811][T24114] Call Trace: [ 609.058819][T24114] [ 609.058846][T24114] dump_stack_lvl+0xe8/0x150 [ 609.058882][T24114] should_fail_ex+0x412/0x560 [ 609.058917][T24114] should_failslab+0xa8/0x100 [ 609.058947][T24114] __kmalloc_cache_noprof+0x88/0x660 [ 609.058973][T24114] ? sctp_add_bind_addr+0x8c/0x370 [ 609.059003][T24114] sctp_add_bind_addr+0x8c/0x370 [ 609.059032][T24114] sctp_copy_local_addr_list+0x314/0x4f0 [ 609.059060][T24114] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 609.059084][T24114] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 609.059113][T24114] ? sctp_v4_is_any+0x35/0x60 [ 609.059137][T24114] ? sctp_copy_one_addr+0x93/0x360 [ 609.059164][T24114] sctp_bind_addr_copy+0xb3/0x3c0 [ 609.059188][T24114] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 609.059225][T24114] sctp_connect_new_asoc+0x2ff/0x6b0 [ 609.059265][T24114] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 609.059294][T24114] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 609.059322][T24114] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 609.059348][T24114] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 609.059378][T24114] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 609.059404][T24114] ? security_sctp_bind_connect+0x7e/0x2c0 [ 609.059428][T24114] sctp_sendmsg+0x1528/0x2c10 [ 609.059470][T24114] ? __pfx_sctp_sendmsg+0x10/0x10 [ 609.059502][T24114] ? aa_sk_perm+0x6d5/0x900 [ 609.059537][T24114] ? __pfx_aa_sk_perm+0x10/0x10 [ 609.059567][T24114] ? sock_rps_record_flow+0x19/0x350 [ 609.059604][T24114] ? inet_sendmsg+0x2f4/0x370 [ 609.059634][T24114] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 609.059662][T24114] ____sys_sendmsg+0x80a/0x9f0 [ 609.059695][T24114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.059728][T24114] ? import_iovec+0x73/0xa0 [ 609.059765][T24114] ___sys_sendmsg+0x2a5/0x360 [ 609.059793][T24114] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.059855][T24114] ? __fget_files+0x2a/0x420 [ 609.059886][T24114] ? __fget_files+0x3a0/0x420 [ 609.059939][T24114] __x64_sys_sendmsg+0x1bd/0x2a0 [ 609.059962][T24114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 609.059992][T24114] ? __pfx_ksys_write+0x10/0x10 [ 609.060026][T24114] do_syscall_64+0x14d/0xf80 [ 609.060054][T24114] ? trace_irq_disable+0x3b/0x150 [ 609.060081][T24114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.060102][T24114] ? clear_bhb_loop+0x40/0x90 [ 609.060126][T24114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.060147][T24114] RIP: 0033:0x7f81ee39c799 [ 609.060167][T24114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.060184][T24114] RSP: 002b:00007f81ef2d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.060206][T24114] RAX: ffffffffffffffda RBX: 00007f81ee615fa0 RCX: 00007f81ee39c799 [ 609.060222][T24114] RDX: 0000000000000815 RSI: 00002000000000c0 RDI: 0000000000000003 [ 609.060243][T24114] RBP: 00007f81ef2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 609.060255][T24114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 609.060268][T24114] R13: 00007f81ee616038 R14: 00007f81ee615fa0 R15: 00007fffe3410b48 [ 609.060301][T24114] [ 609.317408][T24121] FAULT_INJECTION: forcing a failure. [ 609.317408][T24121] name failslab, interval 1, probability 0, space 0, times 0 [ 609.449577][T24121] CPU: 0 UID: 0 PID: 24121 Comm: syz.3.5646 Not tainted syzkaller #0 PREEMPT(full) [ 609.449608][T24121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.449622][T24121] Call Trace: [ 609.449632][T24121] [ 609.449641][T24121] dump_stack_lvl+0xe8/0x150 [ 609.449677][T24121] should_fail_ex+0x412/0x560 [ 609.449713][T24121] should_failslab+0xa8/0x100 [ 609.449743][T24121] __kmalloc_cache_noprof+0x88/0x660 [ 609.449766][T24121] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 609.449792][T24121] ? sctp_add_bind_addr+0x8c/0x370 [ 609.449821][T24121] sctp_add_bind_addr+0x8c/0x370 [ 609.449849][T24121] sctp_copy_local_addr_list+0x314/0x4f0 [ 609.449877][T24121] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 609.449901][T24121] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 609.449927][T24121] ? sctp_v6_is_any+0x64/0x80 [ 609.449952][T24121] ? sctp_copy_one_addr+0x93/0x360 [ 609.449979][T24121] sctp_bind_addr_copy+0xb3/0x3c0 [ 609.450003][T24121] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 609.450039][T24121] sctp_connect_new_asoc+0x2ff/0x6b0 [ 609.450071][T24121] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 609.450107][T24121] ? __local_bh_enable_ip+0xd0/0x130 [ 609.450133][T24121] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 609.450160][T24121] ? security_sctp_bind_connect+0x7e/0x2c0 [ 609.450187][T24121] sctp_sendmsg+0x1528/0x2c10 [ 609.450242][T24121] ? __pfx_sctp_sendmsg+0x10/0x10 [ 609.450274][T24121] ? aa_sk_perm+0x6d5/0x900 [ 609.450310][T24121] ? __pfx_aa_sk_perm+0x10/0x10 [ 609.450340][T24121] ? sock_rps_record_flow+0x19/0x350 [ 609.450372][T24121] ? __pfx_inet_sendmsg+0x10/0x10 [ 609.450405][T24121] ? inet_sendmsg+0x2f4/0x370 [ 609.450437][T24121] ? __pfx_inet_sendmsg+0x10/0x10 [ 609.450487][T24121] __sys_sendto+0x5de/0x710 [ 609.450542][T24121] ? __pfx___sys_sendto+0x10/0x10 [ 609.450573][T24121] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 609.450643][T24121] ? rcu_is_watching+0x15/0xb0 [ 609.450681][T24121] __x64_sys_sendto+0xde/0x100 [ 609.450719][T24121] do_syscall_64+0x14d/0xf80 [ 609.450750][T24121] ? trace_irq_disable+0x3b/0x150 [ 609.450782][T24121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.450806][T24121] ? clear_bhb_loop+0x40/0x90 [ 609.450834][T24121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.450856][T24121] RIP: 0033:0x7f015819c799 [ 609.450878][T24121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.450898][T24121] RSP: 002b:00007f0159033028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 609.450922][T24121] RAX: ffffffffffffffda RBX: 00007f0158415fa0 RCX: 00007f015819c799 [ 609.450938][T24121] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 609.450954][T24121] RBP: 00007f0159033090 R08: 000020000005ffe4 R09: 000000000000001c [ 609.450969][T24121] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 609.450983][T24121] R13: 00007f0158416038 R14: 00007f0158415fa0 R15: 00007ffcd8c58bc8 [ 609.451020][T24121] [ 609.938949][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5649'. [ 610.076963][T24144] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 610.165821][T24146] lo speed is unknown, defaulting to 1000 [ 610.778367][T24171] team0 (unregistering): Port device team_slave_0 removed [ 610.881324][T24171] team0 (unregistering): Port device team_slave_1 removed [ 611.103475][T24187] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 611.158056][T24190] syz_tun: entered promiscuous mode [ 611.173250][T24190] vlan0: entered promiscuous mode [ 611.327642][T24204] bond10: entered promiscuous mode [ 611.343637][T24204] bond0: Error: Cannot enslave bond to itself. [ 611.378148][T24207] __nla_validate_parse: 3 callbacks suppressed [ 611.378167][T24207] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5668'. [ 611.523096][T24199] block nbd0: server does not support multiple connections per device. [ 611.534787][T24199] block nbd0: shutting down sockets [ 611.546621][T24211] bond11: entered promiscuous mode [ 611.560731][T24211] bond0: Error: Cannot enslave bond to itself. [ 611.830622][T24227] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 612.047396][T24235] bond12: entered promiscuous mode [ 612.056515][T24235] bond0: Error: Cannot enslave bond to itself. [ 612.122192][T24242] netlink: 'syz.0.5684': attribute type 2 has an invalid length. [ 612.154179][T24245] FAULT_INJECTION: forcing a failure. [ 612.154179][T24245] name failslab, interval 1, probability 0, space 0, times 0 [ 612.167858][T24245] CPU: 1 UID: 0 PID: 24245 Comm: syz.4.5685 Not tainted syzkaller #0 PREEMPT(full) [ 612.167884][T24245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.167897][T24245] Call Trace: [ 612.167905][T24245] [ 612.167913][T24245] dump_stack_lvl+0xe8/0x150 [ 612.167946][T24245] should_fail_ex+0x412/0x560 [ 612.167978][T24245] should_failslab+0xa8/0x100 [ 612.168007][T24245] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 612.168031][T24245] ? __alloc_skb+0x1d0/0x7d0 [ 612.168058][T24245] ? __local_bh_enable_ip+0xd0/0x130 [ 612.168088][T24245] __alloc_skb+0x1d0/0x7d0 [ 612.168121][T24245] sock_wmalloc+0xb2/0x130 [ 612.168144][T24245] pppoe_sendmsg+0x2b4/0x7c0 [ 612.168252][T24245] ? __pfx_aa_sk_perm+0x10/0x10 [ 612.168279][T24245] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 612.168305][T24245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 612.168332][T24245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 612.168359][T24245] ____sys_sendmsg+0x972/0x9f0 [ 612.168377][T24245] ? __lock_acquire+0x6b5/0x2cf0 [ 612.168411][T24245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.168441][T24245] ? import_iovec+0x73/0xa0 [ 612.168476][T24245] ___sys_sendmsg+0x2a5/0x360 [ 612.168502][T24245] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.168529][T24245] ? kstrtouint+0x6e/0xe0 [ 612.168581][T24245] ? __fget_files+0x2a/0x420 [ 612.168609][T24245] ? __fget_files+0x3a0/0x420 [ 612.168649][T24245] __sys_sendmmsg+0x27c/0x4e0 [ 612.168676][T24245] ? __pfx___sys_sendmmsg+0x10/0x10 [ 612.168694][T24245] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 612.168752][T24245] ? ksys_write+0x242/0x270 [ 612.168776][T24245] ? __pfx_ksys_write+0x10/0x10 [ 612.168812][T24245] __x64_sys_sendmmsg+0xa0/0xc0 [ 612.168835][T24245] do_syscall_64+0x14d/0xf80 [ 612.168863][T24245] ? trace_irq_disable+0x3b/0x150 [ 612.168890][T24245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.168911][T24245] ? clear_bhb_loop+0x40/0x90 [ 612.168936][T24245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.168957][T24245] RIP: 0033:0x7f1adb59c799 [ 612.168977][T24245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.168994][T24245] RSP: 002b:00007f1adc4f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 612.169016][T24245] RAX: ffffffffffffffda RBX: 00007f1adb815fa0 RCX: 00007f1adb59c799 [ 612.169030][T24245] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 612.169044][T24245] RBP: 00007f1adc4f9090 R08: 0000000000000000 R09: 0000000000000000 [ 612.169057][T24245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.169069][T24245] R13: 00007f1adb816038 R14: 00007f1adb815fa0 R15: 00007fffad4dfdf8 [ 612.169102][T24245] [ 612.760579][T24256] lo speed is unknown, defaulting to 1000 [ 613.200624][T24280] syzkaller0: entered promiscuous mode [ 613.206552][T24280] syzkaller0: entered allmulticast mode [ 613.251041][T24280] tipc: Enabled bearer , priority 0 [ 613.265808][T24278] tipc: Resetting bearer [ 613.324329][T24278] tipc: Disabling bearer [ 613.603925][T24292] FAULT_INJECTION: forcing a failure. [ 613.603925][T24292] name failslab, interval 1, probability 0, space 0, times 0 [ 613.617706][T24292] CPU: 1 UID: 0 PID: 24292 Comm: syz.1.5698 Not tainted syzkaller #0 PREEMPT(full) [ 613.617733][T24292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 613.617746][T24292] Call Trace: [ 613.617755][T24292] [ 613.617764][T24292] dump_stack_lvl+0xe8/0x150 [ 613.617798][T24292] should_fail_ex+0x412/0x560 [ 613.617831][T24292] should_failslab+0xa8/0x100 [ 613.617860][T24292] __kmalloc_cache_noprof+0x88/0x660 [ 613.617883][T24292] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 613.617907][T24292] ? sctp_add_bind_addr+0x8c/0x370 [ 613.617933][T24292] sctp_add_bind_addr+0x8c/0x370 [ 613.617959][T24292] sctp_copy_local_addr_list+0x314/0x4f0 [ 613.617985][T24292] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 613.618008][T24292] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 613.618033][T24292] ? sctp_v6_is_any+0x64/0x80 [ 613.618057][T24292] ? sctp_copy_one_addr+0x93/0x360 [ 613.618082][T24292] sctp_bind_addr_copy+0xb3/0x3c0 [ 613.618105][T24292] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 613.618138][T24292] sctp_connect_new_asoc+0x2ff/0x6b0 [ 613.618169][T24292] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 613.618203][T24292] ? __local_bh_enable_ip+0xd0/0x130 [ 613.618227][T24292] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 613.618251][T24292] ? security_sctp_bind_connect+0x7e/0x2c0 [ 613.618277][T24292] sctp_sendmsg+0x1528/0x2c10 [ 613.618318][T24292] ? __pfx_sctp_sendmsg+0x10/0x10 [ 613.618348][T24292] ? aa_sk_perm+0x6d5/0x900 [ 613.618382][T24292] ? __pfx_aa_sk_perm+0x10/0x10 [ 613.618410][T24292] ? sock_rps_record_flow+0x19/0x350 [ 613.618440][T24292] ? __pfx_inet_sendmsg+0x10/0x10 [ 613.618470][T24292] ? inet_sendmsg+0x2f4/0x370 [ 613.618500][T24292] ? __pfx_inet_sendmsg+0x10/0x10 [ 613.618531][T24292] __sys_sendto+0x5de/0x710 [ 613.618563][T24292] ? __pfx___sys_sendto+0x10/0x10 [ 613.618589][T24292] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 613.618642][T24292] ? __fget_files+0x3a0/0x420 [ 613.618682][T24292] ? ksys_write+0x242/0x270 [ 613.618708][T24292] ? __pfx_ksys_write+0x10/0x10 [ 613.618735][T24292] __x64_sys_sendto+0xde/0x100 [ 613.618768][T24292] do_syscall_64+0x14d/0xf80 [ 613.618795][T24292] ? trace_irq_disable+0x3b/0x150 [ 613.618823][T24292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.618843][T24292] ? clear_bhb_loop+0x40/0x90 [ 613.618867][T24292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.618887][T24292] RIP: 0033:0x7f3fe8f9c799 [ 613.618906][T24292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.618923][T24292] RSP: 002b:00007f3fe9d87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 613.618945][T24292] RAX: ffffffffffffffda RBX: 00007f3fe9215fa0 RCX: 00007f3fe8f9c799 [ 613.618960][T24292] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 613.618973][T24292] RBP: 00007f3fe9d87090 R08: 000020000005ffe4 R09: 000000000000001c [ 613.618987][T24292] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 613.618999][T24292] R13: 00007f3fe9216038 R14: 00007f3fe9215fa0 R15: 00007ffd60faeaf8 [ 613.619033][T24292] [ 614.511677][T24332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5705'. [ 614.689070][T24318] syzkaller1: entered promiscuous mode [ 614.712317][T24318] syzkaller1: entered allmulticast mode [ 614.808208][T24346] sch_fq: defrate 4294967293 ignored. [ 615.208076][T24364] 8021q: VLANs not supported on ip6gre0 [ 615.406815][T24375] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5720'. [ 615.430699][ T9722] tipc: Resetting bearer [ 615.456969][T24377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5721'. [ 615.604092][T24383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5724'. [ 615.836992][T24394] 8021q: VLANs not supported on ip6gre0 [ 615.911321][T24399] FAULT_INJECTION: forcing a failure. [ 615.911321][T24399] name failslab, interval 1, probability 0, space 0, times 0 [ 615.924077][T24399] CPU: 0 UID: 0 PID: 24399 Comm: syz.4.5729 Not tainted syzkaller #0 PREEMPT(full) [ 615.924106][T24399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.924121][T24399] Call Trace: [ 615.924131][T24399] [ 615.924141][T24399] dump_stack_lvl+0xe8/0x150 [ 615.924178][T24399] should_fail_ex+0x412/0x560 [ 615.924213][T24399] should_failslab+0xa8/0x100 [ 615.924241][T24399] ? skb_clone+0x212/0x3a0 [ 615.924264][T24399] kmem_cache_alloc_noprof+0x87/0x650 [ 615.924289][T24399] ? __bpf_redirect+0xcec/0x12a0 [ 615.924322][T24399] skb_clone+0x212/0x3a0 [ 615.924347][T24399] bpf_clone_redirect+0x16a/0x4b0 [ 615.924374][T24399] ? bpf_test_run+0x1d1/0x830 [ 615.924409][T24399] ? bpf_test_run+0x1d1/0x830 [ 615.924437][T24399] bpf_prog_c23103f528d5a825+0x22/0x2a [ 615.924467][T24399] bpf_test_run+0x354/0x830 [ 615.924519][T24399] ? __pfx_bpf_test_run+0x10/0x10 [ 615.924559][T24399] ? trace_kmem_cache_alloc+0x29/0xf0 [ 615.924580][T24399] ? slab_build_skb+0x52/0x410 [ 615.924612][T24399] ? __kasan_krealloc+0xeb/0x110 [ 615.924638][T24399] ? eth_type_trans+0x35e/0x6d0 [ 615.924666][T24399] ? convert___skb_to_skb+0x3d/0x5b0 [ 615.924698][T24399] bpf_prog_test_run_skb+0xd22/0x1c90 [ 615.924738][T24399] ? __fget_files+0x2a/0x420 [ 615.924774][T24399] ? __fget_files+0x3a0/0x420 [ 615.924804][T24399] ? __fget_files+0x2a/0x420 [ 615.924840][T24399] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 615.924872][T24399] bpf_prog_test_run+0x2c7/0x340 [ 615.924899][T24399] __sys_bpf+0x643/0x950 [ 615.924935][T24399] ? __pfx___sys_bpf+0x10/0x10 [ 615.924984][T24399] ? ksys_write+0x242/0x270 [ 615.925010][T24399] ? __pfx_ksys_write+0x10/0x10 [ 615.925040][T24399] __x64_sys_bpf+0x7c/0x90 [ 615.925072][T24399] do_syscall_64+0x14d/0xf80 [ 615.925104][T24399] ? trace_irq_disable+0x3b/0x150 [ 615.925135][T24399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.925158][T24399] ? clear_bhb_loop+0x40/0x90 [ 615.925186][T24399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.925209][T24399] RIP: 0033:0x7f1adb59c799 [ 615.925229][T24399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.925248][T24399] RSP: 002b:00007f1adc4f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.925271][T24399] RAX: ffffffffffffffda RBX: 00007f1adb815fa0 RCX: 00007f1adb59c799 [ 615.925287][T24399] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 615.925302][T24399] RBP: 00007f1adc4f9090 R08: 0000000000000000 R09: 0000000000000000 [ 615.925316][T24399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.925330][T24399] R13: 00007f1adb816038 R14: 00007f1adb815fa0 R15: 00007fffad4dfdf8 [ 615.925366][T24399] [ 616.682204][T24423] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5734'. [ 616.749217][T24421] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.889485][T24424] team0: left promiscuous mode [ 616.895699][T24424] team_slave_0: left promiscuous mode [ 616.901364][T24424] team_slave_1: left promiscuous mode [ 616.943550][T24430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5739'. [ 616.953126][T24424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.091069][T24438] 8021q: VLANs not supported on ip6tnl0 [ 617.218843][T15510] udevd[15510]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 617.667228][T24457] FAULT_INJECTION: forcing a failure. [ 617.667228][T24457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 617.735760][T24454] tipc: Resetting bearer [ 617.749363][T24457] CPU: 1 UID: 0 PID: 24457 Comm: syz.0.5746 Not tainted syzkaller #0 PREEMPT(full) [ 617.749392][T24457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.749407][T24457] Call Trace: [ 617.749416][T24457] [ 617.749425][T24457] dump_stack_lvl+0xe8/0x150 [ 617.749463][T24457] should_fail_ex+0x412/0x560 [ 617.749497][T24457] prepare_alloc_pages+0x22a/0x650 [ 617.749533][T24457] __alloc_frozen_pages_noprof+0x12f/0x380 [ 617.749565][T24457] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 617.749597][T24457] ? __pfx_policy_nodemask+0x10/0x10 [ 617.749622][T24457] ? __lock_acquire+0x6b5/0x2cf0 [ 617.749656][T24457] alloc_pages_mpol+0x232/0x4a0 [ 617.749689][T24457] folio_alloc_mpol_noprof+0x39/0x70 [ 617.749753][T24457] shmem_alloc_and_add_folio+0x445/0xf80 [ 617.749803][T24457] ? filemap_get_entry+0xca/0x320 [ 617.749824][T24457] ? filemap_get_entry+0xca/0x320 [ 617.749849][T24457] ? filemap_get_entry+0x2ac/0x320 [ 617.749872][T24457] ? __pfx_filemap_get_entry+0x10/0x10 [ 617.749896][T24457] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 617.749924][T24457] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 617.749967][T24457] shmem_get_folio_gfp+0x5a9/0x1670 [ 617.750023][T24457] shmem_fault+0x179/0x390 [ 617.750056][T24457] __do_fault+0x138/0x390 [ 617.750085][T24457] do_pte_missing+0x5c4/0x3490 [ 617.750124][T24457] ? handle_mm_fault+0xee/0x3310 [ 617.750162][T24457] handle_mm_fault+0x1bec/0x3310 [ 617.750212][T24457] ? handle_mm_fault+0xee/0x3310 [ 617.750255][T24457] ? __pfx_handle_mm_fault+0x10/0x10 [ 617.750289][T24457] ? follow_page_pte+0x841/0x1450 [ 617.750334][T24457] ? __pfx_follow_page_pte+0x10/0x10 [ 617.750381][T24457] __get_user_pages+0x165b/0x29d0 [ 617.750449][T24457] __gup_longterm_locked+0x7ed/0x1630 [ 617.750511][T24457] gup_fast_fallback+0x1d82/0x22e0 [ 617.750578][T24457] ? __pfx_gup_fast_fallback+0x10/0x10 [ 617.750613][T24457] ? is_valid_gup_args+0x11f/0x200 [ 617.750648][T24457] ? pin_user_pages_fast+0x4d/0xb0 [ 617.750683][T24457] rds_cmsg_rdma_args+0x8f4/0x1240 [ 617.750753][T24457] ? trace_kmalloc+0x2a/0x110 [ 617.750781][T24457] rds_cmsg_send+0x33d/0x5c0 [ 617.750821][T24457] rds_sendmsg+0x12be/0x2150 [ 617.750861][T24457] ? __pfx_rds_sendmsg+0x10/0x10 [ 617.750894][T24457] ? __pfx_aa_sk_perm+0x10/0x10 [ 617.750920][T24457] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 617.750959][T24457] ? aa_sock_msg_perm+0xf1/0x1b0 [ 617.751000][T24457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 617.751027][T24457] ____sys_sendmsg+0x972/0x9f0 [ 617.751058][T24457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 617.751090][T24457] ? import_iovec+0x73/0xa0 [ 617.751126][T24457] ___sys_sendmsg+0x2a5/0x360 [ 617.751154][T24457] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.751213][T24457] ? __fget_files+0x2a/0x420 [ 617.751245][T24457] ? __fget_files+0x3a0/0x420 [ 617.751285][T24457] __x64_sys_sendmsg+0x1bd/0x2a0 [ 617.751311][T24457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 617.751342][T24457] ? __pfx_ksys_write+0x10/0x10 [ 617.751377][T24457] do_syscall_64+0x14d/0xf80 [ 617.751408][T24457] ? trace_irq_disable+0x3b/0x150 [ 617.751438][T24457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.751461][T24457] ? clear_bhb_loop+0x40/0x90 [ 617.751488][T24457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.751511][T24457] RIP: 0033:0x7f191699c799 [ 617.751532][T24457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.751551][T24457] RSP: 002b:00007f1914bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.751575][T24457] RAX: ffffffffffffffda RBX: 00007f1916c15fa0 RCX: 00007f191699c799 [ 617.751591][T24457] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000005 [ 617.751605][T24457] RBP: 00007f1914bee090 R08: 0000000000000000 R09: 0000000000000000 [ 617.751619][T24457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 617.751632][T24457] R13: 00007f1916c16038 R14: 00007f1916c15fa0 R15: 00007ffc7ce55268 [ 617.751666][T24457] [ 618.162113][T24454] tipc: Resetting bearer [ 618.343215][T24470] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5748'. [ 618.396207][T24457] lo speed is unknown, defaulting to 1000 [ 618.820743][T24488] FAULT_INJECTION: forcing a failure. [ 618.820743][T24488] name failslab, interval 1, probability 0, space 0, times 0 [ 618.849990][T24488] CPU: 0 UID: 0 PID: 24488 Comm: syz.1.5751 Not tainted syzkaller #0 PREEMPT(full) [ 618.850020][T24488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.850034][T24488] Call Trace: [ 618.850043][T24488] [ 618.850054][T24488] dump_stack_lvl+0xe8/0x150 [ 618.850091][T24488] should_fail_ex+0x412/0x560 [ 618.850126][T24488] should_failslab+0xa8/0x100 [ 618.850156][T24488] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 618.850181][T24488] ? __alloc_skb+0x1d0/0x7d0 [ 618.850210][T24488] ? __local_bh_enable_ip+0xd0/0x130 [ 618.850245][T24488] __alloc_skb+0x1d0/0x7d0 [ 618.850291][T24488] __pfkey_xfrm_state2msg+0x491/0x3d30 [ 618.850337][T24488] ? net_generic+0x1e/0x240 [ 618.850376][T24488] pfkey_send_notify+0x1b0/0xdf0 [ 618.850408][T24488] ? km_state_notify+0x25/0x1f0 [ 618.850508][T24488] ? __pfx_pfkey_send_notify+0x10/0x10 [ 618.850542][T24488] km_state_notify+0x110/0x1f0 [ 618.850568][T24488] pfkey_add+0x2008/0x2df0 [ 618.850601][T24488] ? kasan_quarantine_put+0x6c/0x1f0 [ 618.850634][T24488] ? __pfx_pfkey_add+0x10/0x10 [ 618.850653][T24488] ? pfkey_broadcast+0x3c2/0x3e0 [ 618.850701][T24488] pfkey_sendmsg+0xc56/0x1120 [ 618.850741][T24488] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 618.850792][T24488] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.850823][T24488] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.850853][T24488] ____sys_sendmsg+0x972/0x9f0 [ 618.850887][T24488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.850921][T24488] ? import_iovec+0x73/0xa0 [ 618.850959][T24488] ___sys_sendmsg+0x2a5/0x360 [ 618.850988][T24488] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.851050][T24488] ? __fget_files+0x2a/0x420 [ 618.851083][T24488] ? __fget_files+0x3a0/0x420 [ 618.851124][T24488] __x64_sys_sendmsg+0x1bd/0x2a0 [ 618.851150][T24488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.851184][T24488] ? __pfx_ksys_write+0x10/0x10 [ 618.851220][T24488] do_syscall_64+0x14d/0xf80 [ 618.851251][T24488] ? trace_irq_disable+0x3b/0x150 [ 618.851287][T24488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.851309][T24488] ? clear_bhb_loop+0x40/0x90 [ 618.851336][T24488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.851358][T24488] RIP: 0033:0x7f3fe8f9c799 [ 618.851379][T24488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.851398][T24488] RSP: 002b:00007f3fe9d87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.851422][T24488] RAX: ffffffffffffffda RBX: 00007f3fe9215fa0 RCX: 00007f3fe8f9c799 [ 618.851438][T24488] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 618.851453][T24488] RBP: 00007f3fe9d87090 R08: 0000000000000000 R09: 0000000000000000 [ 618.851467][T24488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 618.851480][T24488] R13: 00007f3fe9216038 R14: 00007f3fe9215fa0 R15: 00007ffd60faeaf8 [ 618.851516][T24488] [ 619.173291][T24490] 8021q: VLANs not supported on ip6tnl0 [ 619.185411][T24488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5751'. [ 619.332164][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5754'. [ 619.348586][T24496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5754'. [ 619.520422][T24499] netlink: 'syz.2.5755': attribute type 11 has an invalid length. [ 619.581898][T24504] netlink: 'syz.3.5756': attribute type 2 has an invalid length. [ 619.623262][T24504] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5756'. [ 619.815841][T24519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5760'. [ 619.825092][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5760'. [ 619.842814][T24519] netlink: 'syz.1.5760': attribute type 14 has an invalid length. [ 619.861182][T24519] netlink: 'syz.1.5760': attribute type 13 has an invalid length. [ 619.936561][T24520] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5761'. [ 620.162150][T24535] 8021q: VLANs not supported on ip6tnl0 [ 620.492012][T20616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 620.506791][T20616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 620.518937][T20616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 620.527857][T20616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 620.534286][T24543] xt_TPROXY: Can be used only with -p tcp or -p udp [ 620.542050][T20616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 620.659606][T24545] lo speed is unknown, defaulting to 1000 [ 620.822271][T24544] lo speed is unknown, defaulting to 1000 [ 620.822460][T24555] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 621.362897][T24568] syzkaller1: entered promiscuous mode [ 621.369643][T24568] syzkaller1: entered allmulticast mode [ 621.460462][T10935] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.478373][T10935] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.489356][T10935] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.581400][T10935] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.594196][T10935] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.608766][T10935] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 621.663924][T24545] chnl_net:caif_netlink_parms(): no params data found [ 622.546352][T10935] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.557233][T10935] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.567553][T10935] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 622.635929][T20616] Bluetooth: hci1: command tx timeout [ 622.835002][T10935] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.848880][T10935] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.859006][T10935] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.049357][T24545] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.057897][T24545] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.066467][T24545] bridge_slave_0: entered allmulticast mode [ 623.075128][T24545] bridge_slave_0: entered promiscuous mode [ 623.088035][T24545] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.097047][T24545] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.113693][T24545] bridge_slave_1: entered allmulticast mode [ 623.121700][T24545] bridge_slave_1: entered promiscuous mode [ 623.166073][T24626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5790'. [ 623.184349][T24628] FAULT_INJECTION: forcing a failure. [ 623.184349][T24628] name failslab, interval 1, probability 0, space 0, times 0 [ 623.218364][T24628] CPU: 0 UID: 0 PID: 24628 Comm: syz.4.5791 Not tainted syzkaller #0 PREEMPT(full) [ 623.218402][T24628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.218415][T24628] Call Trace: [ 623.218423][T24628] [ 623.218431][T24628] dump_stack_lvl+0xe8/0x150 [ 623.218466][T24628] should_fail_ex+0x412/0x560 [ 623.218498][T24628] should_failslab+0xa8/0x100 [ 623.218524][T24628] __kmalloc_cache_noprof+0x88/0x660 [ 623.218544][T24628] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 623.218566][T24628] ? sctp_add_bind_addr+0x8c/0x370 [ 623.218591][T24628] sctp_add_bind_addr+0x8c/0x370 [ 623.218614][T24628] sctp_copy_local_addr_list+0x314/0x4f0 [ 623.218638][T24628] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 623.218658][T24628] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 623.218681][T24628] ? sctp_v6_is_any+0x64/0x80 [ 623.218702][T24628] ? sctp_copy_one_addr+0x93/0x360 [ 623.218726][T24628] sctp_bind_addr_copy+0xb3/0x3c0 [ 623.218747][T24628] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 623.218783][T24628] sctp_connect_new_asoc+0x2ff/0x6b0 [ 623.218813][T24628] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 623.218849][T24628] ? __local_bh_enable_ip+0xd0/0x130 [ 623.218874][T24628] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 623.218901][T24628] ? security_sctp_bind_connect+0x7e/0x2c0 [ 623.218928][T24628] sctp_sendmsg+0x1528/0x2c10 [ 623.218965][T24628] ? __pfx_sctp_sendmsg+0x10/0x10 [ 623.218990][T24628] ? aa_sk_perm+0x6d5/0x900 [ 623.219020][T24628] ? __pfx_aa_sk_perm+0x10/0x10 [ 623.219045][T24628] ? sock_rps_record_flow+0x19/0x350 [ 623.219077][T24628] ? inet_sendmsg+0x2f4/0x370 [ 623.219108][T24628] ____sys_sendmsg+0x80a/0x9f0 [ 623.219135][T24628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.219162][T24628] ? import_iovec+0x73/0xa0 [ 623.219194][T24628] ___sys_sendmsg+0x2a5/0x360 [ 623.219217][T24628] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.219240][T24628] ? kstrtouint+0x6e/0xe0 [ 623.219288][T24628] ? __fget_files+0x2a/0x420 [ 623.219314][T24628] ? __fget_files+0x3a0/0x420 [ 623.219351][T24628] __sys_sendmmsg+0x27c/0x4e0 [ 623.219375][T24628] ? __pfx___sys_sendmmsg+0x10/0x10 [ 623.219400][T24628] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 623.219465][T24628] ? ksys_write+0x242/0x270 [ 623.219487][T24628] ? __pfx_ksys_write+0x10/0x10 [ 623.219511][T24628] __x64_sys_sendmmsg+0xa0/0xc0 [ 623.219531][T24628] do_syscall_64+0x14d/0xf80 [ 623.219556][T24628] ? trace_irq_disable+0x3b/0x150 [ 623.219583][T24628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.219601][T24628] ? clear_bhb_loop+0x40/0x90 [ 623.219622][T24628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.219640][T24628] RIP: 0033:0x7f1adb59c799 [ 623.219659][T24628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.219675][T24628] RSP: 002b:00007f1adc4f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 623.219694][T24628] RAX: ffffffffffffffda RBX: 00007f1adb815fa0 RCX: 00007f1adb59c799 [ 623.219707][T24628] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000003 [ 623.219719][T24628] RBP: 00007f1adc4f9090 R08: 0000000000000000 R09: 0000000000000000 [ 623.219730][T24628] R10: 000000000000c010 R11: 0000000000000246 R12: 0000000000000002 [ 623.219742][T24628] R13: 00007f1adb816038 R14: 00007f1adb815fa0 R15: 00007fffad4dfdf8 [ 623.219790][T24628] [ 623.271536][T24622] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5789'. [ 623.690989][T24623] block nbd0: server does not support multiple connections per device. [ 623.736300][T24623] block nbd0: shutting down sockets [ 623.749117][T24545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.791719][T24545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.955788][T24545] team0: Port device team_slave_0 added [ 623.965914][T24643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5796'. [ 623.990994][T24545] team0: Port device team_slave_1 added [ 623.997741][T24643] xt_hashlimit: size too large, truncated to 1048576 [ 624.043374][T24643] xt_hashlimit: overflow, try lower: 0/0 [ 624.052673][T24646] openvswitch: netlink: Key 24 has unexpected len 1 expected 4 [ 624.239414][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.249282][ C0] ------------[ cut here ]------------ [ 624.255330][ C0] ODEBUG: free active (active state 0) object: ffff888057a04490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 624.268399][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: modprobe/24655 [ 624.279064][ C0] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 624.283428][ C0] CPU: 0 UID: 0 PID: 24655 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 624.292697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.302824][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 624.309215][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 624.328935][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 624.335083][ C0] RAX: ffffffff8a964e00 RBX: ffffffff9a4c9888 RCX: 0000000000000000 [ 624.343133][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bea60 [ 624.351150][ C0] RBP: ffffffff8bcf3ce0 R08: ffff888057a04490 R09: ffffffff8bcf5000 [ 624.359329][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888057a04600 [ 624.367375][ C0] R13: ffffffff901bea60 R14: ffff888057a04000 R15: ffff888057a04490 [ 624.375429][ C0] FS: 0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 624.384436][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.391064][ C0] CR2: 00007f960f585000 CR3: 0000000046bdc000 CR4: 00000000003526f0 [ 624.399130][ C0] Call Trace: [ 624.402462][ C0] [ 624.405378][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 624.411074][ C0] kfree+0x13a/0x630 [ 624.415050][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 624.420220][ C0] rose_timer_expiry+0x4cb/0x600 [ 624.425264][ C0] call_timer_fn+0x192/0x640 [ 624.429909][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 624.435468][ C0] ? call_timer_fn+0xd4/0x640 [ 624.440202][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 624.445407][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.450725][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 624.456285][ C0] __run_timer_base+0x652/0x8b0 [ 624.461235][ C0] ? ktime_get+0x45/0x200 [ 624.465675][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 624.471104][ C0] ? sched_clock_cpu+0x74/0x440 [ 624.476035][ C0] run_timer_softirq+0xb7/0x170 [ 624.480938][ C0] handle_softirqs+0x22a/0x870 [ 624.485784][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 624.490607][ C0] __irq_exit_rcu+0x5f/0x150 [ 624.495284][ C0] irq_exit_rcu+0x9/0x30 [ 624.499571][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 624.505291][ C0] [ 624.508257][ C0] [ 624.511213][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 624.517303][ C0] RIP: 0010:unwind_next_frame+0x199/0x23c0 [ 624.523189][ C0] Code: 04 28 84 c0 0f 85 45 1b 00 00 4c 89 6c 24 48 4c 89 64 24 20 4c 89 7c 24 50 48 89 5c 24 18 0f b6 1b 48 8b 44 24 30 80 3c 28 00 <4c> 8b 7c 24 10 74 08 4c 89 ff e8 88 59 b9 00 4d 8b 27 48 83 f3 01 [ 624.542862][ C0] RSP: 0018:ffffc900044f6f78 EFLAGS: 00000246 [ 624.548968][ C0] RAX: 1ffff9200089ee12 RBX: 0000000000000000 RCX: 0000000080000001 [ 624.557010][ C0] RDX: 000000004cfe2b93 RSI: ffffffff8c27b4e0 RDI: ffffffff8c27b4a0 [ 624.565058][ C0] RBP: dffffc0000000000 R08: ffffffff81767de5 R09: ffffffff8e75e420 [ 624.573112][ C0] R10: ffffc900044f7098 R11: ffffffff81b0bfa0 R12: 1ffff9200089ee09 [ 624.581207][ C0] R13: ffffc900044f7098 R14: ffffc900044f7048 R15: ffffffff81767de5 [ 624.589266][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 624.594475][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 624.600764][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 624.605984][ C0] ? unwind_next_frame+0xd4/0x23c0 [ 624.611166][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 624.616358][ C0] ? __mmap_complete+0x7b/0x5e0 [ 624.621261][ C0] ? __mmap_complete+0x7b/0x5e0 [ 624.626190][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 624.632387][ C0] arch_stack_walk+0x11b/0x150 [ 624.637260][ C0] ? __mmap_complete+0x7b/0x5e0 [ 624.642181][ C0] stack_trace_save+0xa9/0x100 [ 624.647034][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 624.652465][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 624.657314][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 624.662935][ C0] ? kmem_cache_free+0x15b/0x630 [ 624.667913][ C0] ? vms_complete_munmap_vmas+0x929/0xc60 [ 624.673710][ C0] ? __mmap_complete+0x7b/0x5e0 [ 624.678622][ C0] ? mmap_region+0x15a2/0x2240 [ 624.683457][ C0] ? do_mmap+0xc39/0x10c0 [ 624.687826][ C0] ? vm_mmap_pgoff+0x2c9/0x4f0 [ 624.692681][ C0] ? do_syscall_64+0x14d/0xf80 [ 624.697493][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.703640][ C0] kasan_save_stack+0x3e/0x60 [ 624.708365][ C0] ? kasan_save_stack+0x3e/0x60 [ 624.713301][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 624.718720][ C0] ? kmem_cache_free+0x426/0x630 [ 624.723778][ C0] ? vms_complete_munmap_vmas+0x929/0xc60 [ 624.729544][ C0] ? __mmap_complete+0x7b/0x5e0 [ 624.734546][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 624.739798][ C0] kmem_cache_free+0x426/0x630 [ 624.744639][ C0] ? vms_complete_munmap_vmas+0x929/0xc60 [ 624.750422][ C0] vms_complete_munmap_vmas+0x929/0xc60 [ 624.756095][ C0] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 624.762259][ C0] __mmap_complete+0x7b/0x5e0 [ 624.767022][ C0] mmap_region+0x15a2/0x2240 [ 624.771667][ C0] ? __pfx_mmap_region+0x10/0x10 [ 624.776697][ C0] ? __mutex_trylock_common+0x158/0x260 [ 624.782291][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 624.788383][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 624.793309][ C0] ? security_mmap_addr+0x71/0x240 [ 624.798477][ C0] ? shmem_mapping+0xd/0x50 [ 624.803060][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 624.808577][ C0] do_mmap+0xc39/0x10c0 [ 624.812828][ C0] ? __pfx_do_mmap+0x10/0x10 [ 624.817461][ C0] ? down_write_killable+0x180/0x240 [ 624.822850][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 624.828540][ C0] ? apparmor_mmap_file+0x2da/0x3e0 [ 624.833832][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 624.838490][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 624.843688][ C0] ? __fget_files+0x2a/0x420 [ 624.848335][ C0] ? __fget_files+0x3a0/0x420 [ 624.853157][ C0] ? __fget_files+0x2a/0x420 [ 624.857813][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 624.862666][ C0] do_syscall_64+0x14d/0xf80 [ 624.867303][ C0] ? trace_irq_disable+0x3b/0x150 [ 624.872471][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.878618][ C0] ? clear_bhb_loop+0x40/0x90 [ 624.883383][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.889324][ C0] RIP: 0033:0x7f960f8ae242 [ 624.893814][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 624.913589][ C0] RSP: 002b:00007fff2d4a0c78 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 624.922058][ C0] RAX: ffffffffffffffda RBX: 00007f960f57d000 RCX: 00007f960f8ae242 [ 624.930110][ C0] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 00007f960f57d000 [ 624.938153][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000002000 [ 624.946233][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff2d4a0cc8 [ 624.954273][ C0] R13: 00007f960f5850c0 R14: 00007fff2d4a10b0 R15: 00000fffe5a94192 [ 624.962300][ C0] [ 624.965400][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 624.972768][ C0] CPU: 0 UID: 0 PID: 24655 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 624.982000][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.992105][ C0] Call Trace: [ 624.995405][ C0] [ 624.998267][ C0] vpanic+0x56c/0xa60 [ 625.002318][ C0] ? __pfx__printk+0x10/0x10 [ 625.006921][ C0] ? __pfx_vpanic+0x10/0x10 [ 625.011443][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 625.016789][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 625.022005][ C0] panic+0xc5/0xd0 [ 625.025751][ C0] ? __pfx_panic+0x10/0x10 [ 625.030224][ C0] __warn+0x315/0x4f0 [ 625.034244][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 625.039998][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 625.045745][ C0] __report_bug+0x29a/0x540 [ 625.050455][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 625.056288][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 625.062020][ C0] ? __pfx___report_bug+0x10/0x10 [ 625.067071][ C0] ? run_timer_softirq+0xb7/0x170 [ 625.072158][ C0] ? handle_softirqs+0x22a/0x870 [ 625.077312][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 625.082098][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 625.087925][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 625.094088][ C0] ? unwind_next_frame+0x199/0x23c0 [ 625.099310][ C0] ? arch_stack_walk+0x11b/0x150 [ 625.104277][ C0] ? stack_trace_save+0xa9/0x100 [ 625.109234][ C0] report_bug_entry+0x19a/0x290 [ 625.114108][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 625.119851][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 625.125583][ C0] handle_bug+0xce/0x200 [ 625.129846][ C0] exc_invalid_op+0x1a/0x50 [ 625.134364][ C0] asm_exc_invalid_op+0x1a/0x20 [ 625.139230][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 625.145589][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 625.165211][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 625.171295][ C0] RAX: ffffffff8a964e00 RBX: ffffffff9a4c9888 RCX: 0000000000000000 [ 625.179293][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bea60 [ 625.187283][ C0] RBP: ffffffff8bcf3ce0 R08: ffff888057a04490 R09: ffffffff8bcf5000 [ 625.195272][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888057a04600 [ 625.203266][ C0] R13: ffffffff901bea60 R14: ffff888057a04000 R15: ffff888057a04490 [ 625.211269][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 625.216650][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 625.222300][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 625.227958][ C0] kfree+0x13a/0x630 [ 625.231883][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 625.237026][ C0] rose_timer_expiry+0x4cb/0x600 [ 625.241992][ C0] call_timer_fn+0x192/0x640 [ 625.246597][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 625.252077][ C0] ? call_timer_fn+0xd4/0x640 [ 625.256788][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 625.261940][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.267184][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 625.272668][ C0] __run_timer_base+0x652/0x8b0 [ 625.277543][ C0] ? ktime_get+0x45/0x200 [ 625.281888][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 625.287282][ C0] ? sched_clock_cpu+0x74/0x440 [ 625.292211][ C0] run_timer_softirq+0xb7/0x170 [ 625.297081][ C0] handle_softirqs+0x22a/0x870 [ 625.301878][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 625.306663][ C0] __irq_exit_rcu+0x5f/0x150 [ 625.311271][ C0] irq_exit_rcu+0x9/0x30 [ 625.315547][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 625.321204][ C0] [ 625.324153][ C0] [ 625.327087][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 625.333081][ C0] RIP: 0010:unwind_next_frame+0x199/0x23c0 [ 625.338914][ C0] Code: 04 28 84 c0 0f 85 45 1b 00 00 4c 89 6c 24 48 4c 89 64 24 20 4c 89 7c 24 50 48 89 5c 24 18 0f b6 1b 48 8b 44 24 30 80 3c 28 00 <4c> 8b 7c 24 10 74 08 4c 89 ff e8 88 59 b9 00 4d 8b 27 48 83 f3 01 [ 625.358533][ C0] RSP: 0018:ffffc900044f6f78 EFLAGS: 00000246 [ 625.364618][ C0] RAX: 1ffff9200089ee12 RBX: 0000000000000000 RCX: 0000000080000001 [ 625.372601][ C0] RDX: 000000004cfe2b93 RSI: ffffffff8c27b4e0 RDI: ffffffff8c27b4a0 [ 625.380579][ C0] RBP: dffffc0000000000 R08: ffffffff81767de5 R09: ffffffff8e75e420 [ 625.388572][ C0] R10: ffffc900044f7098 R11: ffffffff81b0bfa0 R12: 1ffff9200089ee09 [ 625.396557][ C0] R13: ffffc900044f7098 R14: ffffc900044f7048 R15: ffffffff81767de5 [ 625.404587][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 625.409758][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 625.415930][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 625.421083][ C0] ? unwind_next_frame+0xd4/0x23c0 [ 625.426220][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 625.431369][ C0] ? __mmap_complete+0x7b/0x5e0 [ 625.436236][ C0] ? __mmap_complete+0x7b/0x5e0 [ 625.441142][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 625.447304][ C0] arch_stack_walk+0x11b/0x150 [ 625.452178][ C0] ? __mmap_complete+0x7b/0x5e0 [ 625.457051][ C0] stack_trace_save+0xa9/0x100 [ 625.461834][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 625.467215][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 625.471992][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 625.477553][ C0] ? kmem_cache_free+0x15b/0x630 [ 625.482511][ C0] ? vms_complete_munmap_vmas+0x929/0xc60 [ 625.488247][ C0] ? __mmap_complete+0x7b/0x5e0 [ 625.493142][ C0] ? mmap_region+0x15a2/0x2240 [ 625.497921][ C0] ? do_mmap+0xc39/0x10c0 [ 625.502260][ C0] ? vm_mmap_pgoff+0x2c9/0x4f0 [ 625.507038][ C0] ? do_syscall_64+0x14d/0xf80 [ 625.511812][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.517889][ C0] kasan_save_stack+0x3e/0x60 [ 625.522573][ C0] ? kasan_save_stack+0x3e/0x60 [ 625.527445][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 625.532828][ C0] ? kmem_cache_free+0x426/0x630 [ 625.537778][ C0] ? vms_complete_munmap_vmas+0x929/0xc60 [ 625.543532][ C0] ? __mmap_complete+0x7b/0x5e0 [ 625.548432][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 625.553648][ C0] kmem_cache_free+0x426/0x630 [ 625.558433][ C0] ? vms_complete_munmap_vmas+0x929/0xc60 [ 625.564182][ C0] vms_complete_munmap_vmas+0x929/0xc60 [ 625.569762][ C0] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 625.575877][ C0] __mmap_complete+0x7b/0x5e0 [ 625.580606][ C0] mmap_region+0x15a2/0x2240 [ 625.585248][ C0] ? __pfx_mmap_region+0x10/0x10 [ 625.590228][ C0] ? __mutex_trylock_common+0x158/0x260 [ 625.595812][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 625.601817][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 625.606693][ C0] ? security_mmap_addr+0x71/0x240 [ 625.611824][ C0] ? shmem_mapping+0xd/0x50 [ 625.616349][ C0] ? memfd_check_seals_mmap+0xc5/0x200 [ 625.621827][ C0] do_mmap+0xc39/0x10c0 [ 625.626020][ C0] ? __pfx_do_mmap+0x10/0x10 [ 625.630658][ C0] ? down_write_killable+0x180/0x240 [ 625.635966][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 625.641621][ C0] ? apparmor_mmap_file+0x2da/0x3e0 [ 625.646846][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 625.651467][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 625.656634][ C0] ? __fget_files+0x2a/0x420 [ 625.661251][ C0] ? __fget_files+0x3a0/0x420 [ 625.665953][ C0] ? __fget_files+0x2a/0x420 [ 625.670579][ C0] ksys_mmap_pgoff+0x51e/0x760 [ 625.675375][ C0] do_syscall_64+0x14d/0xf80 [ 625.679994][ C0] ? trace_irq_disable+0x3b/0x150 [ 625.685132][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.691216][ C0] ? clear_bhb_loop+0x40/0x90 [ 625.695911][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.701819][ C0] RIP: 0033:0x7f960f8ae242 [ 625.706255][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 625.725878][ C0] RSP: 002b:00007fff2d4a0c78 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 625.734317][ C0] RAX: ffffffffffffffda RBX: 00007f960f57d000 RCX: 00007f960f8ae242 [ 625.742301][ C0] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 00007f960f57d000 [ 625.750296][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000002000 [ 625.758369][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff2d4a0cc8 [ 625.766364][ C0] R13: 00007f960f5850c0 R14: 00007fff2d4a10b0 R15: 00000fffe5a94192 [ 625.774364][ C0] [ 625.777996][ C0] Kernel Offset: disabled [ 625.782349][ C0] Rebooting in 86400 seconds..