last executing test programs: 2.115986991s ago: executing program 2 (id=5456): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x0, 0x2, 0x6}, {0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x41}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000007530794f000000003a0e21c4d0e42661f0b3cf5f2779aa", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="02000000020000000500"/28], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00'}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)}, 0x10) 1.934946052s ago: executing program 2 (id=5461): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x2b, 0x0, 0xa}, 0x28) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x2, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0xc, 0xb, &(0x7f00000001c0)=""/11, 0x41000, 0x5, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0xc4d, 0x2}, 0x10, 0xffffffffffffffff, r0, 0x7, 0x0, &(0x7f0000000380)=[{0x2, 0x1, 0x0, 0x1}, {0x0, 0x5, 0x4, 0x2}, {0x2, 0x2, 0xe, 0x9}, {0x2, 0x4, 0x8, 0x7}, {0x2, 0x4, 0x9, 0xb}, {0x3, 0x2, 0x2}, {0x3, 0x2, 0xe, 0xc}], 0x10, 0x4022b5d9}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4) splice(r4, 0x0, r1, 0x0, 0x1100000000f332, 0x0) 1.401737245s ago: executing program 4 (id=5472): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000081c0)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0x4}, {0x2, 0xffff}, {0xfff3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) 1.203361568s ago: executing program 4 (id=5480): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000440)=0xfffffffe, 0x4) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)=0xffffffff) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x4b8}, 0x1c) 1.124292973s ago: executing program 3 (id=5483): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x80ff, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 1.055207048s ago: executing program 2 (id=5485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0x7, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket(0x8, 0x3, 0x0) write(r3, &(0x7f0000000000), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0002f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1.05505454s ago: executing program 3 (id=5486): syz_init_net_socket$ax25(0x3, 0x5, 0xca) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000400300000000fe8000000000000000000000000000aa87"], 0x0) 955.383377ms ago: executing program 3 (id=5488): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x7e8, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x4}, {0x7d0, 0x1, [@m_ipt={0x7cc, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x7a1, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 886.963837ms ago: executing program 1 (id=5490): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x7661, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x80}}, 0x14) 846.332648ms ago: executing program 3 (id=5491): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="186000ad6b000001000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x10, 0x7}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @generic={0xf, 0x6, "ed7841", 0x319, 0x2b, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, {[@srh={0x84, 0x2, 0x4, 0x1, 0x9, 0x50, 0xfff7, [@loopback]}, @routing={0x89, 0x10, 0x1, 0x0, 0x0, [@loopback, @loopback, @remote, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private2, @mcast2]}, @srh={0x2b, 0x2, 0x4, 0x1, 0xfa, 0x40, 0x9, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x88, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x38, {0x1, 0xc, 0xf, 0x9, [0xf, 0x7, 0x1758, 0x5, 0x3, 0x5]}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x5, 0x5, [0x8, 0x8000000000000001, 0xffffffffffffd627, 0x0, 0x4, 0xffffffffffffffff]}}, @ra={0x5, 0x2, 0xe}]}, @fragment={0x8, 0x0, 0x8, 0x0, 0x0, 0x18, 0x68}, @dstopts={0x62, 0x4, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x8, [0x3b8f0028, 0x2]}}]}, @routing={0x88, 0x6, 0x2, 0xfe, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @mcast2]}, @hopopts={0x0, 0x1e, '\x00', [@ra={0x5, 0x2, 0xd421}, @generic={0x2, 0x8d, "7635bfaa9a936a355040a4220f59ab944ce24f46ea2d0a7d52082b03174c99ee5bb8fc54d76d2ec40e4be17cb97e3c0e77c4cc6d74de1bf0fd280a1de439483c35352cdc9024288a7af1ad11eca0b983a2859659607afe9e243a63b3eac2abbd267298e056a0683153c78058a8ec3c2dc5e53daafa7ad0f0bda3096e7d6b7be7482a44f540a22cc8e1bb08178d"}, @pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0xc5, [0xf0b5, 0x10, 0xfff, 0x7d]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x46e2, [0x9, 0x100000000, 0x10]}}, @padn={0x1, 0x1, [0x0]}, @jumbo]}], "b4bf90eca29ca029006c77d393e94d4460b6f249f1e4b305e3469349cbcc06c30671132933fcc71e52885bf55ee846515dac64d447640fc628d6f94a10003c0084f2107d8d6773ea516568a7981e48abea2b38409a23a86aac3be52459c852b8e60b779a59c8ab7a3d"}}}}}}, 0x353) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@enum={0x0, 0x200001c4}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @func_proto]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50}, 0x20) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="fbffffff", 0x4) socket$vsock_stream(0x28, 0x1, 0x0) 516.394316ms ago: executing program 1 (id=5493): r0 = socket(0x848000000015, 0x805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0xfc5f) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @private1, 0x2}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5eef34c446ebd54b7821611a6b280664a7fabf2ebb128426da6f71d1e748eb2ac734", @ANYRES16=r3, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000014000500fe80000000000000000000000000000014000600ff010000000000000000000000000001"], 0x114}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) (async) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) (async) setsockopt$inet6_tcp_int(r8, 0x11a, 0x4, &(0x7f0000000000), 0x4) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44c98b370fcd7ebf15aa0000", @ANYRES16, @ANYRES8=r7], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0xf4, 0x0, 0xfffffffe}, 0x10) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r10 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x89e1, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003"], 0x18}}, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000100)={0x7fffffff, {0x18, 0x962, 0x2, 0x8, 0x7c}}) (async) socket$inet6(0xa, 0x2, 0x3a) 515.194012ms ago: executing program 0 (id=5494): connect$qrtr(0xffffffffffffffff, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000040)=0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f0000000440)=""/91, 0x5b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4072, 0xfe8}], 0x2}, 0x8}], 0x3, 0x2, 0x0) 457.882151ms ago: executing program 1 (id=5495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'vxcan1\x00', @multicast}) 456.956201ms ago: executing program 2 (id=5496): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0xfc, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc8, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0xac, 0x1, [@m_ctinfo={0xa8, 0x1b, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2}, 0xc) 456.315357ms ago: executing program 0 (id=5497): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x44, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 399.360107ms ago: executing program 3 (id=5498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94c5, 0x5c81}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x405}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}}, 0x48010) 375.321096ms ago: executing program 0 (id=5499): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x18, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 361.848127ms ago: executing program 4 (id=5500): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x3a) 317.073904ms ago: executing program 0 (id=5501): socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x7e8, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x4}, {0x7d0, 0x1, [@m_ipt={0x7cc, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x7a1, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 316.781349ms ago: executing program 2 (id=5502): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@dev, @empty}, &(0x7f0000000100)=0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x4, 0x7f, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x3, 0x1, 0x2, 0x7}, {0x4, 0x4, 0x4, 0x7}], 0x10, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r2, 0x25, 0x12, @void}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettaction={0xe0, 0x32, 0xc13, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x42e}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x104, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffd07, 0x3, 0x258}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4278}}]}]}, 0xe0}}, 0x0) sendto$packet(r0, &(0x7f0000000040)='\x00', 0x1, 0x4000004, 0x0, 0x0) 267.226926ms ago: executing program 1 (id=5503): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000500240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) 266.99311ms ago: executing program 4 (id=5504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3fab00000000000000002e00"], 0x50}}, 0x80) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r0) 206.773276ms ago: executing program 2 (id=5505): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) write(r0, &(0x7f0000000940)="c18008e6923d8dd3b44a477be484fd8885f47a6b434f4360b8f8438c5b5b0a278ea9352e080938a012b845ceac26380596b97c9383f241b6a88b652dbcd4e109d23a20801d82ff999d86f6aef067ad6912f40400594c5dd7cd1ceb2a2c71ef516ea9296304e6dc14b269275eb44053204fcf", 0x72) getpeername(r0, 0x0, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x4, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x408c4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2e, &(0x7f00000008c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100470008004510001c000000000002907800000000e000000111009078000000013958b2d3bd1fd6404aef203492ffdbb4452811934b6320bb1bd288410de63de8a80d33b0eb3c8f3b2920b4f23d56ebcdeb"], 0x0) syz_emit_ethernet(0x526, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4f0, 0x3a, 0x0, @remote, @mcast2, {[@fragment={0x5e, 0x0, 0x4, 0x0, 0x0, 0x5, 0x65}, @srh={0xc, 0x0, 0x4, 0x0, 0x4, 0x8a21247eaea9afb6, 0x7}, @dstopts={0x2f, 0x21, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x0, 0x28, "09b26252d47a9b195017480c919a37bffb8737341fff2e1000ada50b9773cf43424a2bfff9cde2e3"}, @pad1, @generic={0x19, 0xd2, "4ec7bf4ce35ecf26f689e68558439aa1981a3a6f86bcb43058b51f563edca0b78d78d627b02371e02ef5ad45eac1a20e6d0f63d88d356546d28d784d2450a345f66ffda5772dcd2fea55bf09d37c59b8163851b02276b870d25502731c156876285738e498045e1085041cd2c4d103dd1b1071384e00b9e1e99c3a2406f3d6b691bd0955535b59e3c8e08361dd63eb7215e161de4df8f323a4b4af5db1fae5f5e65a6610e89fbd2e55f531297a963486fec49aa3b15254b8dbe2a94a5735d5f305a2f5be06071e02eeda589ce5bdc6863075"}, @pad1]}, @srh={0x3c, 0x8, 0x4, 0x4, 0x8, 0x50, 0x3, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x89, 0x2, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}, @pad1, @jumbo={0xc2, 0x4, 0x7}]}, @routing={0x6, 0x2, 0x1, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x20}]}, @dstopts={0x67, 0x31, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x6, 0x6, [0xb, 0x6, 0x1]}}, @generic={0xd, 0x51, "3c1e968f5c1942d75011b47d64efd7f5bced71a0a45d8687a5e2451643306b11ad79c7936b9c16107a2f6f86580b196593c9cd1c6ce0de7004e31c9a602e0580f3e062b21b70a892a7d5666c27c8bede6d"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x1, 0x0, [0x101, 0x5, 0x100000000]}}, @generic={0x8, 0xac, "f47ef18f6c0fe3f4018180989c59548c85103e16e7804d41cc2961a06aacf7dee02d40ea86459ae002f7e53a4d02dc319a27b73f650e94b50c862fbec2623cbd1fa8118f36acb610850fa67b9d164c36d72e7d0a0f61336154560d367e6212faeca4cdae1be20ff1466293d39666aa197fed91fac9ff6a8df5b8e83757c9a1625e5e22b9daf28b9e21336118a5a07a1e19168d5ba2675edfb666c9134646b2cef970cdfd579f3e07fe440420"}, @calipso={0x7, 0x40, {0x0, 0xe, 0x1, 0x96c8, [0x6, 0x4, 0xcf8, 0xfffffffffffff8fd, 0xd, 0x81, 0x6]}}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x9}]}, @hopopts={0x6c, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x38, {0x2, 0xc, 0x1, 0x3ff, [0x400, 0x1, 0xec, 0xe, 0xffffffffffffffff, 0x2]}}, @ra={0x5, 0x2, 0xe44}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x38, {0xbb4eee604d6e8067, 0xc, 0xfb, 0x2b3, [0x5, 0xd5b6, 0x10001, 0xf, 0xaee, 0x7]}}, @enc_lim={0x4, 0x1, 0x5}, @jumbo]}, @srh={0x6, 0x4, 0x4, 0x2, 0x0, 0x18, 0x7fff, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @hopopts={0x89, 0x15, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x7f, [0x5, 0x6, 0x0, 0x5, 0x7]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0x6da, [0x7fffffffffffffff, 0x0, 0x7, 0x80, 0xfffffffffffffff7, 0xd366]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @enc_lim, @jumbo={0xc2, 0x4, 0x200}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2b}}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) 206.489554ms ago: executing program 3 (id=5506): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000040)=0xfffffffb, 0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) sendmsg$inet(r4, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c030000", @ANYRES32=0x0, @ANYBLOB="a0050000000000000000000012000000000000008400000006"], 0x98}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000008c0)=r7, 0x4) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 203.167405ms ago: executing program 0 (id=5507): connect$qrtr(0xffffffffffffffff, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000040)=0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f0000000440)=""/91, 0x5b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4072, 0xfe8}], 0x2}, 0x8}], 0x3, 0x2, 0x0) 153.149379ms ago: executing program 1 (id=5508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x0, 0xfffffffe, {0x27}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (fail_nth: 2) 150.811449ms ago: executing program 0 (id=5509): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000010000104000000000000002000000000", @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) 41.073745ms ago: executing program 4 (id=5510): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x44, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 40.919622ms ago: executing program 1 (id=5511): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (fail_nth: 8) 0s ago: executing program 4 (id=5512): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x18, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 263.377471][T17853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.377489][T17853] ? __pfx__printk+0x10/0x10 [ 263.377509][T17853] ? skb_network_protocol+0x508/0x760 [ 263.377531][T17853] should_fail_ex+0x414/0x560 [ 263.377563][T17853] should_failslab+0xa8/0x100 [ 263.377586][T17853] kmem_cache_alloc_noprof+0x73/0x3c0 [ 263.377607][T17853] ? skb_clone+0x212/0x3a0 [ 263.377622][T17853] ? kernel_text_address+0xa5/0xe0 [ 263.377645][T17853] skb_clone+0x212/0x3a0 [ 263.377661][T17853] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 263.377678][T17853] dev_queue_xmit_nit+0x416/0xcc0 [ 263.377696][T17853] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 263.377715][T17853] dev_hard_start_xmit+0x1be/0x830 [ 263.377741][T17853] __dev_queue_xmit+0x1b8d/0x3b50 [ 263.377759][T17853] ? do_syscall_64+0xfa/0x3b0 [ 263.377780][T17853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.377801][T17853] ? __dev_queue_xmit+0x27b/0x3b50 [ 263.377825][T17853] ? __pfx___dev_queue_xmit+0x10/0x10 [ 263.377850][T17853] ? rcu_is_watching+0x15/0xb0 [ 263.377874][T17853] ? pskb_expand_head+0xb00/0x1150 [ 263.377894][T17853] ? __bpf_redirect+0x961/0xe40 [ 263.377918][T17853] __bpf_tx_skb+0x18e/0x260 [ 263.377937][T17853] bpf_clone_redirect+0x272/0x3d0 [ 263.377961][T17853] ? bpf_test_run+0x197/0x7b0 [ 263.377984][T17853] bpf_prog_e97454e6a39c6b06+0x62/0x6b [ 263.378001][T17853] ? ktime_get+0x3e/0x1f0 [ 263.378018][T17853] ? rcu_is_watching+0x15/0xb0 [ 263.378034][T17853] ? ktime_get+0x3e/0x1f0 [ 263.378051][T17853] ? rcu_is_watching+0x15/0xb0 [ 263.378067][T17853] ? ktime_get+0x3e/0x1f0 [ 263.378086][T17853] ? rcu_is_watching+0x15/0xb0 [ 263.378101][T17853] ? ktime_get+0x3e/0x1f0 [ 263.378118][T17853] ? ktime_get+0x3e/0x1f0 [ 263.378133][T17853] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 263.378156][T17853] ? __local_bh_disable_ip+0xf1/0x190 [ 263.378171][T17853] ? __pfx___cant_migrate+0x10/0x10 [ 263.378186][T17853] ? __local_bh_enable_ip+0x12d/0x1c0 [ 263.378201][T17853] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 263.378219][T17853] ? bpf_test_timer_continue+0x136/0x350 [ 263.378242][T17853] bpf_test_run+0x318/0x7b0 [ 263.378274][T17853] ? __pfx_bpf_test_run+0x10/0x10 [ 263.378303][T17853] ? slab_build_skb+0x273/0x3e0 [ 263.378327][T17853] ? convert___skb_to_skb+0x3d/0x590 [ 263.378348][T17853] bpf_prog_test_run_skb+0xb30/0x1560 [ 263.378378][T17853] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 263.378399][T17853] bpf_prog_test_run+0x2c7/0x340 [ 263.378423][T17853] __sys_bpf+0x581/0x870 [ 263.378442][T17853] ? __pfx___sys_bpf+0x10/0x10 [ 263.378467][T17853] ? ksys_write+0x22a/0x250 [ 263.378489][T17853] ? __pfx_ksys_write+0x10/0x10 [ 263.378508][T17853] ? rcu_is_watching+0x15/0xb0 [ 263.378528][T17853] __x64_sys_bpf+0x7c/0x90 [ 263.378555][T17853] do_syscall_64+0xfa/0x3b0 [ 263.378578][T17853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.378595][T17853] ? clear_bhb_loop+0x60/0xb0 [ 263.378613][T17853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.378629][T17853] RIP: 0033:0x7fbb3178ebe9 [ 263.378644][T17853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.378659][T17853] RSP: 002b:00007fbb325e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.378677][T17853] RAX: ffffffffffffffda RBX: 00007fbb319b5fa0 RCX: 00007fbb3178ebe9 [ 263.378690][T17853] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 263.378702][T17853] RBP: 00007fbb325e2090 R08: 0000000000000000 R09: 0000000000000000 [ 263.378714][T17853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.378725][T17853] R13: 00007fbb319b6038 R14: 00007fbb319b5fa0 R15: 00007ffee5b01a38 [ 263.378747][T17853] [ 263.876071][T17861] netlink: 'syz.2.4629': attribute type 3 has an invalid length. [ 264.053508][T17882] netlink: 'syz.2.4637': attribute type 1 has an invalid length. [ 264.064487][T17881] __nla_validate_parse: 10 callbacks suppressed [ 264.064507][T17881] netlink: 656 bytes leftover after parsing attributes in process `syz.4.4639'. [ 264.080380][T17881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4639'. [ 264.131685][T17884] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4640'. [ 264.140817][T17884] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4640'. [ 264.154139][T17884] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 264.160809][T17887] FAULT_INJECTION: forcing a failure. [ 264.160809][T17887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.198648][T17887] CPU: 0 UID: 0 PID: 17887 Comm: syz.0.4642 Not tainted syzkaller #0 PREEMPT(full) [ 264.198674][T17887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.198685][T17887] Call Trace: [ 264.198692][T17887] [ 264.198700][T17887] dump_stack_lvl+0x189/0x250 [ 264.198725][T17887] ? __pfx____ratelimit+0x10/0x10 [ 264.198749][T17887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.198769][T17887] ? __pfx__printk+0x10/0x10 [ 264.198791][T17887] ? __might_fault+0xb0/0x130 [ 264.198822][T17887] ? rcu_is_watching+0x15/0xb0 [ 264.198841][T17887] should_fail_ex+0x414/0x560 [ 264.198865][T17887] _copy_from_iter+0x1db/0x16f0 [ 264.198884][T17887] ? rcu_is_watching+0x15/0xb0 [ 264.198902][T17887] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 264.198925][T17887] ? __pfx__copy_from_iter+0x10/0x10 [ 264.198943][T17887] ? __build_skb_around+0x257/0x3e0 [ 264.198970][T17887] ? netlink_sendmsg+0x642/0xb30 [ 264.198993][T17887] ? skb_put+0x11b/0x210 [ 264.199010][T17887] netlink_sendmsg+0x6b2/0xb30 [ 264.199038][T17887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.199064][T17887] ? aa_sock_msg_perm+0xf1/0x1d0 [ 264.199081][T17887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.199100][T17887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.199125][T17887] __sock_sendmsg+0x21c/0x270 [ 264.199149][T17887] ____sys_sendmsg+0x505/0x830 [ 264.199168][T17887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.199191][T17887] ? import_iovec+0x74/0xa0 [ 264.199212][T17887] ___sys_sendmsg+0x21f/0x2a0 [ 264.199231][T17887] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.199265][T17887] ? __fget_files+0x2a/0x420 [ 264.199290][T17887] ? __fget_files+0x3a0/0x420 [ 264.199318][T17887] __x64_sys_sendmsg+0x19b/0x260 [ 264.199338][T17887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.199361][T17887] ? __pfx_ksys_write+0x10/0x10 [ 264.199382][T17887] ? rcu_is_watching+0x15/0xb0 [ 264.199402][T17887] ? rcu_is_watching+0x15/0xb0 [ 264.199428][T17887] do_syscall_64+0xfa/0x3b0 [ 264.199452][T17887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.199470][T17887] ? clear_bhb_loop+0x60/0xb0 [ 264.199489][T17887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.199508][T17887] RIP: 0033:0x7f1379f8ebe9 [ 264.199524][T17887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.199540][T17887] RSP: 002b:00007f137ae20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.199560][T17887] RAX: ffffffffffffffda RBX: 00007f137a1b5fa0 RCX: 00007f1379f8ebe9 [ 264.199574][T17887] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 264.199586][T17887] RBP: 00007f137ae20090 R08: 0000000000000000 R09: 0000000000000000 [ 264.199598][T17887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.199609][T17887] R13: 00007f137a1b6038 R14: 00007f137a1b5fa0 R15: 00007fff49189148 [ 264.199630][T17887] [ 264.825710][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4657'. [ 264.868332][T17925] netlink: 'syz.3.4658': attribute type 11 has an invalid length. [ 264.877204][T17925] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4658'. [ 264.921979][T17927] FAULT_INJECTION: forcing a failure. [ 264.921979][T17927] name failslab, interval 1, probability 0, space 0, times 0 [ 264.962289][T17927] CPU: 0 UID: 0 PID: 17927 Comm: syz.3.4660 Not tainted syzkaller #0 PREEMPT(full) [ 264.962317][T17927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.962328][T17927] Call Trace: [ 264.962335][T17927] [ 264.962343][T17927] dump_stack_lvl+0x189/0x250 [ 264.962368][T17927] ? __pfx____ratelimit+0x10/0x10 [ 264.962389][T17927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.962407][T17927] ? __pfx__printk+0x10/0x10 [ 264.962432][T17927] ? fs_reclaim_acquire+0x7d/0x100 [ 264.962455][T17927] ? rcu_is_watching+0x15/0xb0 [ 264.962472][T17927] ? __pfx___might_resched+0x10/0x10 [ 264.962487][T17927] ? lock_acquire+0x5f/0x360 [ 264.962510][T17927] should_fail_ex+0x414/0x560 [ 264.962533][T17927] should_failslab+0xa8/0x100 [ 264.962555][T17927] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 264.962578][T17927] ? __alloc_skb+0x112/0x2d0 [ 264.962603][T17927] __alloc_skb+0x112/0x2d0 [ 264.962627][T17927] netlink_sendmsg+0x5c6/0xb30 [ 264.962653][T17927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.962677][T17927] ? aa_sock_msg_perm+0xf1/0x1d0 [ 264.962693][T17927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.962711][T17927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.962734][T17927] __sock_sendmsg+0x21c/0x270 [ 264.962756][T17927] ____sys_sendmsg+0x505/0x830 [ 264.962776][T17927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.962797][T17927] ? import_iovec+0x74/0xa0 [ 264.962817][T17927] ___sys_sendmsg+0x21f/0x2a0 [ 264.962835][T17927] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.962866][T17927] ? __fget_files+0x2a/0x420 [ 264.962889][T17927] ? __fget_files+0x3a0/0x420 [ 264.962916][T17927] __x64_sys_sendmsg+0x19b/0x260 [ 264.962935][T17927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.962957][T17927] ? __pfx_ksys_write+0x10/0x10 [ 264.962977][T17927] ? rcu_is_watching+0x15/0xb0 [ 264.962996][T17927] ? rcu_is_watching+0x15/0xb0 [ 264.963014][T17927] do_syscall_64+0xfa/0x3b0 [ 264.963050][T17927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.963067][T17927] ? clear_bhb_loop+0x60/0xb0 [ 264.963085][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.963102][T17927] RIP: 0033:0x7fbb3178ebe9 [ 264.963119][T17927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.963144][T17927] RSP: 002b:00007fbb325e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.963164][T17927] RAX: ffffffffffffffda RBX: 00007fbb319b5fa0 RCX: 00007fbb3178ebe9 [ 264.963178][T17927] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 264.963191][T17927] RBP: 00007fbb325e2090 R08: 0000000000000000 R09: 0000000000000000 [ 264.963202][T17927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.963214][T17927] R13: 00007fbb319b6038 R14: 00007fbb319b5fa0 R15: 00007ffee5b01a38 [ 264.963234][T17927] [ 265.316444][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4662'. [ 265.408680][T17949] bond6: entered allmulticast mode [ 265.414196][T17949] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.422134][T17949] bridge0: port 6(bond6) entered blocking state [ 265.428613][T17949] bridge0: port 6(bond6) entered disabled state [ 265.435626][T17940] nbd34: detected capacity change from 0 to 127 [ 265.436724][T17949] bond6: entered promiscuous mode [ 265.448076][T17949] bridge0: port 6(bond6) entered blocking state [ 265.454402][T17949] bridge0: port 6(bond6) entered forwarding state [ 265.472523][T17954] blk-mq: reduced tag depth (128 -> 64) [ 265.510832][ T36] bridge0: port 6(bond6) entered disabled state [ 265.531490][T17957] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.534309][T17959] FAULT_INJECTION: forcing a failure. [ 265.534309][T17959] name failslab, interval 1, probability 0, space 0, times 0 [ 265.555631][T17959] CPU: 1 UID: 0 PID: 17959 Comm: syz.2.4671 Not tainted syzkaller #0 PREEMPT(full) [ 265.555657][T17959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.555668][T17959] Call Trace: [ 265.555675][T17959] [ 265.555683][T17959] dump_stack_lvl+0x189/0x250 [ 265.555708][T17959] ? __pfx____ratelimit+0x10/0x10 [ 265.555731][T17959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.555751][T17959] ? __pfx__printk+0x10/0x10 [ 265.555772][T17959] ? nfnetlink_rcv+0x26a/0x2520 [ 265.555794][T17959] ? ____sys_sendmsg+0x505/0x830 [ 265.555811][T17959] ? __x64_sys_sendmsg+0x19b/0x260 [ 265.555828][T17959] ? do_syscall_64+0xfa/0x3b0 [ 265.555850][T17959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.555872][T17959] should_fail_ex+0x414/0x560 [ 265.555896][T17959] should_failslab+0xa8/0x100 [ 265.555921][T17959] kmem_cache_alloc_noprof+0x73/0x3c0 [ 265.555943][T17959] ? skb_clone+0x212/0x3a0 [ 265.555963][T17959] skb_clone+0x212/0x3a0 [ 265.555983][T17959] __netlink_deliver_tap+0x404/0x850 [ 265.556012][T17959] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.556036][T17959] netlink_deliver_tap+0x19c/0x1b0 [ 265.556059][T17959] netlink_sendskb+0x68/0x140 [ 265.556082][T17959] netlink_unicast+0x397/0x9e0 [ 265.556120][T17959] ? __asan_memcpy+0x40/0x70 [ 265.556143][T17959] ? __pfx_netlink_unicast+0x10/0x10 [ 265.556169][T17959] netlink_rcv_skb+0x28c/0x470 [ 265.556192][T17959] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 265.556214][T17959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.556243][T17959] ? bpf_lsm_capable+0x9/0x20 [ 265.556266][T17959] ? security_capable+0x7e/0x2e0 [ 265.556292][T17959] nfnetlink_rcv+0x26a/0x2520 [ 265.556315][T17959] ? __dev_queue_xmit+0x1d79/0x3b50 [ 265.556339][T17959] ? __dev_queue_xmit+0x27b/0x3b50 [ 265.556363][T17959] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 265.556383][T17959] ? __pfx___dev_queue_xmit+0x10/0x10 [ 265.556409][T17959] ? ref_tracker_free+0x63a/0x7d0 [ 265.556431][T17959] ? __asan_memcpy+0x40/0x70 [ 265.556449][T17959] ? __pfx_ref_tracker_free+0x10/0x10 [ 265.556480][T17959] ? skb_clone+0x246/0x3a0 [ 265.556499][T17959] ? __netlink_deliver_tap+0x807/0x850 [ 265.556523][T17959] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.556546][T17959] ? rcu_is_watching+0x15/0xb0 [ 265.556563][T17959] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.556587][T17959] ? lock_release+0x4b/0x3e0 [ 265.556618][T17959] netlink_unicast+0x82c/0x9e0 [ 265.556643][T17959] ? __pfx_netlink_unicast+0x10/0x10 [ 265.556666][T17959] ? netlink_sendmsg+0x642/0xb30 [ 265.556688][T17959] ? skb_put+0x11b/0x210 [ 265.556706][T17959] netlink_sendmsg+0x805/0xb30 [ 265.556733][T17959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.556759][T17959] ? aa_sock_msg_perm+0xf1/0x1d0 [ 265.556783][T17959] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.556802][T17959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.556826][T17959] __sock_sendmsg+0x21c/0x270 [ 265.556849][T17959] ____sys_sendmsg+0x505/0x830 [ 265.556869][T17959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.556892][T17959] ? import_iovec+0x74/0xa0 [ 265.556912][T17959] ___sys_sendmsg+0x21f/0x2a0 [ 265.556931][T17959] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.556964][T17959] ? __fget_files+0x2a/0x420 [ 265.556988][T17959] ? __fget_files+0x3a0/0x420 [ 265.557016][T17959] __x64_sys_sendmsg+0x19b/0x260 [ 265.557035][T17959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.557058][T17959] ? __pfx_ksys_write+0x10/0x10 [ 265.557079][T17959] ? rcu_is_watching+0x15/0xb0 [ 265.557139][T17959] ? rcu_is_watching+0x15/0xb0 [ 265.557157][T17959] do_syscall_64+0xfa/0x3b0 [ 265.557181][T17959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.557199][T17959] ? clear_bhb_loop+0x60/0xb0 [ 265.557219][T17959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.557237][T17959] RIP: 0033:0x7fc65538ebe9 [ 265.557252][T17959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.557269][T17959] RSP: 002b:00007fc656185038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.557289][T17959] RAX: ffffffffffffffda RBX: 00007fc6555b5fa0 RCX: 00007fc65538ebe9 [ 265.557303][T17959] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 265.557315][T17959] RBP: 00007fc656185090 R08: 0000000000000000 R09: 0000000000000000 [ 265.557326][T17959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.557338][T17959] R13: 00007fc6555b6038 R14: 00007fc6555b5fa0 R15: 00007ffdf36c9488 [ 265.557358][T17959] [ 265.563008][ T51] block nbd34: Receive control failed (result -32) [ 265.769241][T17967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4675'. [ 266.045630][T17954] nbd35: detected capacity change from 0 to 127 [ 266.070484][ T5867] block nbd35: Receive control failed (result -32) [ 266.080803][T17977] bond7 (unregistering): Released all slaves [ 266.196045][T17993] bond4: entered allmulticast mode [ 266.212056][T17993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.212301][T17998] sctp: [Deprecated]: syz.4.4687 (pid 17998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.212301][T17998] Use struct sctp_sack_info instead [ 266.236186][T17993] bridge0: port 5(bond4) entered blocking state [ 266.242574][T17993] bridge0: port 5(bond4) entered disabled state [ 266.251105][T17993] bond4: entered promiscuous mode [ 266.257147][T17993] bridge0: port 5(bond4) entered blocking state [ 266.263489][T17993] bridge0: port 5(bond4) entered forwarding state [ 266.746521][T18042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4704'. [ 266.837075][T18048] nbd36: detected capacity change from 0 to 127 [ 266.844520][ T5867] block nbd36: Receive control failed (result -32) [ 266.975423][T18069] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4716'. [ 267.140526][ T1087] bridge0: port 5(bond4) entered disabled state [ 267.403229][T18104] netlink: 'syz.4.4727': attribute type 10 has an invalid length. [ 267.411935][T18104] batman_adv: batadv0: Interface deactivated: team0 [ 267.494371][T18113] FAULT_INJECTION: forcing a failure. [ 267.494371][T18113] name failslab, interval 1, probability 0, space 0, times 0 [ 267.512410][T18113] CPU: 0 UID: 0 PID: 18113 Comm: syz.2.4731 Not tainted syzkaller #0 PREEMPT(full) [ 267.512438][T18113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.512449][T18113] Call Trace: [ 267.512457][T18113] [ 267.512465][T18113] dump_stack_lvl+0x189/0x250 [ 267.512491][T18113] ? __pfx____ratelimit+0x10/0x10 [ 267.512514][T18113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.512534][T18113] ? __pfx__printk+0x10/0x10 [ 267.512557][T18113] ? fs_reclaim_acquire+0x7d/0x100 [ 267.512578][T18113] ? rcu_is_watching+0x15/0xb0 [ 267.512594][T18113] ? __pfx___might_resched+0x10/0x10 [ 267.512609][T18113] ? lock_acquire+0x5f/0x360 [ 267.512631][T18113] should_fail_ex+0x414/0x560 [ 267.512655][T18113] should_failslab+0xa8/0x100 [ 267.512679][T18113] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 267.512701][T18113] ? __alloc_skb+0x112/0x2d0 [ 267.512727][T18113] __alloc_skb+0x112/0x2d0 [ 267.512752][T18113] netlink_dump+0x1b7/0xe90 [ 267.512780][T18113] ? __pfx_netlink_dump+0x10/0x10 [ 267.512809][T18113] ? kmem_cache_free+0x18f/0x400 [ 267.512832][T18113] netlink_recvmsg+0x676/0xa30 [ 267.512857][T18113] ? __pfx_netlink_recvmsg+0x10/0x10 [ 267.512880][T18113] ? unwind_next_frame+0xa5/0x2390 [ 267.512900][T18113] ? unwind_next_frame+0xa5/0x2390 [ 267.512916][T18113] ? aa_sock_msg_perm+0xf1/0x1d0 [ 267.512932][T18113] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 267.512948][T18113] ? security_socket_recvmsg+0x7e/0x2e0 [ 267.512967][T18113] ? __pfx_netlink_recvmsg+0x10/0x10 [ 267.512990][T18113] sock_recvmsg+0x22c/0x270 [ 267.513011][T18113] ____sys_recvmsg+0x1c9/0x460 [ 267.513032][T18113] ? __pfx_____sys_recvmsg+0x10/0x10 [ 267.513057][T18113] ? import_iovec+0x74/0xa0 [ 267.513078][T18113] ___sys_recvmsg+0x1b5/0x510 [ 267.513104][T18113] ? __pfx____sys_recvmsg+0x10/0x10 [ 267.513125][T18113] ? __fget_files+0x2a/0x420 [ 267.513147][T18113] ? rcu_is_watching+0x15/0xb0 [ 267.513170][T18113] ? __fget_files+0x3a0/0x420 [ 267.513197][T18113] do_recvmmsg+0x307/0x770 [ 267.513219][T18113] ? __pfx_do_recvmmsg+0x10/0x10 [ 267.513242][T18113] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 267.513274][T18113] __x64_sys_recvmmsg+0x190/0x240 [ 267.513294][T18113] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 267.513311][T18113] ? rcu_is_watching+0x15/0xb0 [ 267.513330][T18113] ? rcu_is_watching+0x15/0xb0 [ 267.513348][T18113] do_syscall_64+0xfa/0x3b0 [ 267.513372][T18113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.513393][T18113] ? clear_bhb_loop+0x60/0xb0 [ 267.513412][T18113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.513429][T18113] RIP: 0033:0x7fc65538ebe9 [ 267.513446][T18113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.513461][T18113] RSP: 002b:00007fc656185038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 267.513480][T18113] RAX: ffffffffffffffda RBX: 00007fc6555b5fa0 RCX: 00007fc65538ebe9 [ 267.513494][T18113] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 267.513506][T18113] RBP: 00007fc656185090 R08: 0000000000000000 R09: 0000000000000000 [ 267.513518][T18113] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 267.513530][T18113] R13: 00007fc6555b6038 R14: 00007fc6555b5fa0 R15: 00007ffdf36c9488 [ 267.513550][T18113] [ 267.939978][T18127] FAULT_INJECTION: forcing a failure. [ 267.939978][T18127] name failslab, interval 1, probability 0, space 0, times 0 [ 267.953254][T18127] CPU: 0 UID: 0 PID: 18127 Comm: syz.4.4737 Not tainted syzkaller #0 PREEMPT(full) [ 267.953280][T18127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.953289][T18127] Call Trace: [ 267.953295][T18127] [ 267.953302][T18127] dump_stack_lvl+0x189/0x250 [ 267.953322][T18127] ? rcu_is_watching+0x15/0xb0 [ 267.953337][T18127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.953357][T18127] should_fail_ex+0x414/0x560 [ 267.953377][T18127] should_failslab+0xa8/0x100 [ 267.953396][T18127] kmem_cache_alloc_noprof+0x73/0x3c0 [ 267.953414][T18127] ? skb_clone+0x212/0x3a0 [ 267.953431][T18127] skb_clone+0x212/0x3a0 [ 267.953445][T18127] __netlink_deliver_tap+0x404/0x850 [ 267.953469][T18127] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.953487][T18127] netlink_deliver_tap+0x19c/0x1b0 [ 267.953506][T18127] netlink_unicast+0x7fa/0x9e0 [ 267.953525][T18127] ? __pfx_netlink_unicast+0x10/0x10 [ 267.953542][T18127] ? netlink_sendmsg+0x642/0xb30 [ 267.953560][T18127] ? skb_put+0x11b/0x210 [ 267.953573][T18127] netlink_sendmsg+0x805/0xb30 [ 267.953596][T18127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.953617][T18127] ? aa_sock_msg_perm+0xf1/0x1d0 [ 267.953631][T18127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.953646][T18127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.953664][T18127] __sock_sendmsg+0x21c/0x270 [ 267.953682][T18127] ____sys_sendmsg+0x505/0x830 [ 267.953697][T18127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.953713][T18127] ? import_iovec+0x74/0xa0 [ 267.953729][T18127] ___sys_sendmsg+0x21f/0x2a0 [ 267.953743][T18127] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.953768][T18127] ? __fget_files+0x2a/0x420 [ 267.953787][T18127] ? __fget_files+0x3a0/0x420 [ 267.953808][T18127] __x64_sys_sendmsg+0x19b/0x260 [ 267.953829][T18127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.953845][T18127] ? __pfx_ksys_write+0x10/0x10 [ 267.953863][T18127] ? rcu_is_watching+0x15/0xb0 [ 267.953877][T18127] ? rcu_is_watching+0x15/0xb0 [ 267.953891][T18127] do_syscall_64+0xfa/0x3b0 [ 267.953911][T18127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.953925][T18127] ? clear_bhb_loop+0x60/0xb0 [ 267.953940][T18127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.953954][T18127] RIP: 0033:0x7f1f6018ebe9 [ 267.953967][T18127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.953980][T18127] RSP: 002b:00007f1f5e3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.953996][T18127] RAX: ffffffffffffffda RBX: 00007f1f603b5fa0 RCX: 00007f1f6018ebe9 [ 267.954007][T18127] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 267.954017][T18127] RBP: 00007f1f5e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.954026][T18127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.954035][T18127] R13: 00007f1f603b6038 R14: 00007f1f603b5fa0 R15: 00007ffc7e82c988 [ 267.954050][T18127] [ 268.763619][T18176] FAULT_INJECTION: forcing a failure. [ 268.763619][T18176] name failslab, interval 1, probability 0, space 0, times 0 [ 268.776309][T18176] CPU: 0 UID: 0 PID: 18176 Comm: syz.1.4756 Not tainted syzkaller #0 PREEMPT(full) [ 268.776335][T18176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.776347][T18176] Call Trace: [ 268.776355][T18176] [ 268.776364][T18176] dump_stack_lvl+0x189/0x250 [ 268.776390][T18176] ? __pfx____ratelimit+0x10/0x10 [ 268.776414][T18176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.776434][T18176] ? __pfx__printk+0x10/0x10 [ 268.776455][T18176] ? skb_network_protocol+0x508/0x760 [ 268.776473][T18176] ? unwind_next_frame+0xa5/0x2390 [ 268.776494][T18176] should_fail_ex+0x414/0x560 [ 268.776517][T18176] should_failslab+0xa8/0x100 [ 268.776541][T18176] kmem_cache_alloc_noprof+0x73/0x3c0 [ 268.776563][T18176] ? skb_clone+0x212/0x3a0 [ 268.776583][T18176] skb_clone+0x212/0x3a0 [ 268.776600][T18176] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 268.776618][T18176] dev_queue_xmit_nit+0x416/0xcc0 [ 268.776634][T18176] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 268.776649][T18176] ? unwind_get_return_address+0x4d/0x90 [ 268.776672][T18176] dev_hard_start_xmit+0x1be/0x830 [ 268.776698][T18176] __dev_queue_xmit+0x1b8d/0x3b50 [ 268.776722][T18176] ? __dev_queue_xmit+0x27b/0x3b50 [ 268.776748][T18176] ? __pfx___dev_queue_xmit+0x10/0x10 [ 268.776772][T18176] ? __copy_skb_header+0xa7/0x550 [ 268.776791][T18176] ? __asan_memcpy+0x40/0x70 [ 268.776817][T18176] ? skb_clone+0x246/0x3a0 [ 268.776837][T18176] __netlink_deliver_tap+0x5ad/0x850 [ 268.776867][T18176] ? netlink_deliver_tap+0x2e/0x1b0 [ 268.776891][T18176] netlink_deliver_tap+0x19c/0x1b0 [ 268.776922][T18176] netlink_unicast+0x7fa/0x9e0 [ 268.776948][T18176] ? __pfx_netlink_unicast+0x10/0x10 [ 268.776970][T18176] ? netlink_sendmsg+0x642/0xb30 [ 268.776992][T18176] ? skb_put+0x11b/0x210 [ 268.777010][T18176] netlink_sendmsg+0x805/0xb30 [ 268.777038][T18176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.777064][T18176] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.777081][T18176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.777100][T18176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.777124][T18176] __sock_sendmsg+0x21c/0x270 [ 268.777146][T18176] ____sys_sendmsg+0x505/0x830 [ 268.777167][T18176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.777188][T18176] ? import_iovec+0x74/0xa0 [ 268.777210][T18176] ___sys_sendmsg+0x21f/0x2a0 [ 268.777229][T18176] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.777263][T18176] ? __fget_files+0x2a/0x420 [ 268.777286][T18176] ? __fget_files+0x3a0/0x420 [ 268.777314][T18176] __x64_sys_sendmsg+0x19b/0x260 [ 268.777333][T18176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.777356][T18176] ? __pfx_ksys_write+0x10/0x10 [ 268.777376][T18176] ? rcu_is_watching+0x15/0xb0 [ 268.777396][T18176] ? rcu_is_watching+0x15/0xb0 [ 268.777414][T18176] do_syscall_64+0xfa/0x3b0 [ 268.777437][T18176] ? rcu_is_watching+0x15/0xb0 [ 268.777454][T18176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.777472][T18176] ? clear_bhb_loop+0x60/0xb0 [ 268.777491][T18176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.777509][T18176] RIP: 0033:0x7f7dc3f8ebe9 [ 268.777527][T18176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.777543][T18176] RSP: 002b:00007f7dc4e3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.777563][T18176] RAX: ffffffffffffffda RBX: 00007f7dc41b5fa0 RCX: 00007f7dc3f8ebe9 [ 268.777577][T18176] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 268.777590][T18176] RBP: 00007f7dc4e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 268.777602][T18176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.777614][T18176] R13: 00007f7dc41b6038 R14: 00007f7dc41b5fa0 R15: 00007ffdda850b58 [ 268.777635][T18176] [ 269.161005][T18189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.171821][T18189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.191979][T18198] __nla_validate_parse: 9 callbacks suppressed [ 269.191999][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4762'. [ 269.210637][T18189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.219151][T18189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.228442][T18189] batman_adv: batadv0: Interface deactivated: team0 [ 269.235126][T18189] batman_adv: batadv0: Removing interface: team0 [ 269.253158][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4763'. [ 269.270833][T18200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4763'. [ 269.341725][T18206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4766'. [ 269.412015][T18208] bond7: entered allmulticast mode [ 269.419475][T18208] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.427032][T18208] bridge0: port 7(bond7) entered blocking state [ 269.433517][T18208] bridge0: port 7(bond7) entered disabled state [ 269.439489][T18215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4770'. [ 269.441603][T18208] bond7: entered promiscuous mode [ 269.454386][T18208] bridge0: port 7(bond7) entered blocking state [ 269.460760][T18208] bridge0: port 7(bond7) entered forwarding state [ 269.468680][ T36] bridge0: port 7(bond7) entered disabled state [ 269.571040][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4774'. [ 269.621832][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4774'. [ 269.710260][T18237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4780'. [ 269.828776][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4786'. [ 269.921138][T18261] netlink: 'syz.1.4790': attribute type 13 has an invalid length. [ 269.934875][T18261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.211799][T18276] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4795'. [ 271.120711][T18332] bond9 (unregistering): Released all slaves [ 271.168611][T18336] openvswitch: netlink: IP tunnel dst address not specified [ 271.373058][T18355] FAULT_INJECTION: forcing a failure. [ 271.373058][T18355] name failslab, interval 1, probability 0, space 0, times 0 [ 271.387332][T18355] CPU: 1 UID: 0 PID: 18355 Comm: syz.0.4828 Not tainted syzkaller #0 PREEMPT(full) [ 271.387357][T18355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.387368][T18355] Call Trace: [ 271.387376][T18355] [ 271.387384][T18355] dump_stack_lvl+0x189/0x250 [ 271.387409][T18355] ? __pfx____ratelimit+0x10/0x10 [ 271.387433][T18355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.387452][T18355] ? __pfx__printk+0x10/0x10 [ 271.387475][T18355] ? fs_reclaim_acquire+0x7d/0x100 [ 271.387499][T18355] ? rcu_is_watching+0x15/0xb0 [ 271.387516][T18355] ? __pfx___might_resched+0x10/0x10 [ 271.387532][T18355] ? lock_acquire+0x5f/0x360 [ 271.387557][T18355] should_fail_ex+0x414/0x560 [ 271.387582][T18355] should_failslab+0xa8/0x100 [ 271.387606][T18355] __kmalloc_cache_noprof+0x70/0x3d0 [ 271.387628][T18355] ? call_usermodehelper_setup+0x8e/0x270 [ 271.387652][T18355] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 271.387677][T18355] call_usermodehelper_setup+0x8e/0x270 [ 271.387701][T18355] ? __pfx_free_modprobe_argv+0x10/0x10 [ 271.387732][T18355] __request_module+0x39f/0x5e0 [ 271.387758][T18355] ? __pfx___request_module+0x10/0x10 [ 271.387781][T18355] ? rcu_is_watching+0x15/0xb0 [ 271.387799][T18355] ? rcu_is_watching+0x15/0xb0 [ 271.387815][T18355] ? rtnl_link_ops_get+0x23/0x250 [ 271.387834][T18355] ? rtnl_link_ops_get+0x23/0x250 [ 271.387849][T18355] ? rtnl_link_ops_get+0x23/0x250 [ 271.387866][T18355] ? rtnl_link_ops_get+0x215/0x250 [ 271.387884][T18355] rtnl_newlink+0x64f/0x1c70 [ 271.387906][T18355] ? netlink_sendmsg+0x805/0xb30 [ 271.387930][T18355] ? __x64_sys_sendmsg+0x19b/0x260 [ 271.387948][T18355] ? do_syscall_64+0xfa/0x3b0 [ 271.387970][T18355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.387992][T18355] ? __pfx_rtnl_newlink+0x10/0x10 [ 271.388025][T18355] ? rcu_is_watching+0x15/0xb0 [ 271.388046][T18355] ? nlmon_xmit+0xb0/0x100 [ 271.388063][T18355] ? kmem_cache_free+0x18f/0x400 [ 271.388088][T18355] ? rcu_is_watching+0x15/0xb0 [ 271.388105][T18355] ? __dev_queue_xmit+0x27b/0x3b50 [ 271.388125][T18355] ? __local_bh_enable_ip+0x12d/0x1c0 [ 271.388142][T18355] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 271.388159][T18355] ? __dev_queue_xmit+0x27b/0x3b50 [ 271.388178][T18355] ? lock_release+0x4b/0x3e0 [ 271.388202][T18355] ? __dev_queue_xmit+0x27b/0x3b50 [ 271.388220][T18355] ? __dev_queue_xmit+0x27b/0x3b50 [ 271.388243][T18355] ? __dev_queue_xmit+0x1d79/0x3b50 [ 271.388270][T18355] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 271.388295][T18355] ? lock_release+0x4b/0x3e0 [ 271.388317][T18355] ? bpf_lsm_capable+0x9/0x20 [ 271.388340][T18355] ? security_capable+0x7e/0x2e0 [ 271.388366][T18355] ? __pfx_rtnl_newlink+0x10/0x10 [ 271.388389][T18355] rtnetlink_rcv_msg+0x7cc/0xb70 [ 271.388414][T18355] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 271.388434][T18355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.388454][T18355] ? ref_tracker_free+0x63a/0x7d0 [ 271.388475][T18355] ? __asan_memcpy+0x40/0x70 [ 271.388493][T18355] ? __pfx_ref_tracker_free+0x10/0x10 [ 271.388518][T18355] netlink_rcv_skb+0x208/0x470 [ 271.388541][T18355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.388565][T18355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.388595][T18355] netlink_unicast+0x82c/0x9e0 [ 271.388621][T18355] ? __pfx_netlink_unicast+0x10/0x10 [ 271.388643][T18355] ? netlink_sendmsg+0x642/0xb30 [ 271.388665][T18355] ? skb_put+0x11b/0x210 [ 271.388683][T18355] netlink_sendmsg+0x805/0xb30 [ 271.388716][T18355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.388742][T18355] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.388759][T18355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.388775][T18355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.388797][T18355] __sock_sendmsg+0x21c/0x270 [ 271.388820][T18355] ____sys_sendmsg+0x505/0x830 [ 271.388840][T18355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.388861][T18355] ? import_iovec+0x74/0xa0 [ 271.388882][T18355] ___sys_sendmsg+0x21f/0x2a0 [ 271.388901][T18355] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.388934][T18355] ? __fget_files+0x2a/0x420 [ 271.388958][T18355] ? __fget_files+0x3a0/0x420 [ 271.388986][T18355] __x64_sys_sendmsg+0x19b/0x260 [ 271.389006][T18355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.389029][T18355] ? __pfx_ksys_write+0x10/0x10 [ 271.389050][T18355] ? rcu_is_watching+0x15/0xb0 [ 271.389069][T18355] ? rcu_is_watching+0x15/0xb0 [ 271.389088][T18355] do_syscall_64+0xfa/0x3b0 [ 271.389113][T18355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.389130][T18355] ? clear_bhb_loop+0x60/0xb0 [ 271.389150][T18355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.389168][T18355] RIP: 0033:0x7f1379f8ebe9 [ 271.389184][T18355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.389199][T18355] RSP: 002b:00007f137ae20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.389217][T18355] RAX: ffffffffffffffda RBX: 00007f137a1b5fa0 RCX: 00007f1379f8ebe9 [ 271.389230][T18355] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 271.389242][T18355] RBP: 00007f137ae20090 R08: 0000000000000000 R09: 0000000000000000 [ 271.389253][T18355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.389263][T18355] R13: 00007f137a1b6038 R14: 00007f137a1b5fa0 R15: 00007fff49189148 [ 271.389283][T18355] [ 272.086381][T18373] netlink: 'syz.4.4832': attribute type 24 has an invalid length. [ 272.443666][ T1087] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.452912][ T1087] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.462234][ T1087] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.471258][ T1087] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.495144][ T1087] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.522447][ T1087] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.536346][ T1087] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.545945][ T1087] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.024765][T18421] netlink: 'syz.4.4854': attribute type 17 has an invalid length. [ 273.071809][T18422] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.248840][T18436] sock: sock_set_timeout: `syz.0.4860' (pid 18436) tries to set negative timeout [ 273.461528][T18448] FAULT_INJECTION: forcing a failure. [ 273.461528][T18448] name failslab, interval 1, probability 0, space 0, times 0 [ 273.491291][T18448] CPU: 1 UID: 0 PID: 18448 Comm: syz.3.4866 Not tainted syzkaller #0 PREEMPT(full) [ 273.491318][T18448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.491330][T18448] Call Trace: [ 273.491337][T18448] [ 273.491346][T18448] dump_stack_lvl+0x189/0x250 [ 273.491371][T18448] ? __pfx____ratelimit+0x10/0x10 [ 273.491394][T18448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.491414][T18448] ? __pfx__printk+0x10/0x10 [ 273.491443][T18448] should_fail_ex+0x414/0x560 [ 273.491467][T18448] should_failslab+0xa8/0x100 [ 273.491491][T18448] kmem_cache_alloc_noprof+0x73/0x3c0 [ 273.491513][T18448] ? skb_clone+0x212/0x3a0 [ 273.491534][T18448] skb_clone+0x212/0x3a0 [ 273.491554][T18448] __netlink_deliver_tap+0x404/0x850 [ 273.491584][T18448] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.491608][T18448] netlink_deliver_tap+0x19c/0x1b0 [ 273.491632][T18448] netlink_unicast+0x7fa/0x9e0 [ 273.491656][T18448] ? __pfx_netlink_unicast+0x10/0x10 [ 273.491679][T18448] ? netlink_sendmsg+0x642/0xb30 [ 273.491701][T18448] ? skb_put+0x11b/0x210 [ 273.491718][T18448] netlink_sendmsg+0x805/0xb30 [ 273.491746][T18448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.491771][T18448] ? aa_sock_msg_perm+0xf1/0x1d0 [ 273.491789][T18448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.491808][T18448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.491832][T18448] __sock_sendmsg+0x21c/0x270 [ 273.491854][T18448] sock_sendmsg+0x158/0x230 [ 273.491876][T18448] ? __pfx_sock_sendmsg+0x10/0x10 [ 273.491901][T18448] ? __asan_memset+0x22/0x50 [ 273.491918][T18448] ? iov_iter_bvec+0xb8/0x180 [ 273.491935][T18448] splice_to_socket+0x8ff/0xf10 [ 273.491968][T18448] ? __pfx_splice_to_socket+0x10/0x10 [ 273.492001][T18448] ? get_pid_task+0x20/0x1f0 [ 273.492021][T18448] ? rcu_is_watching+0x15/0xb0 [ 273.492038][T18448] ? get_pid_task+0x20/0x1f0 [ 273.492062][T18448] ? bpf_lsm_file_permission+0x9/0x20 [ 273.492083][T18448] ? security_file_permission+0x75/0x290 [ 273.492105][T18448] ? rw_verify_area+0x255/0x4d0 [ 273.492126][T18448] ? __pfx_splice_to_socket+0x10/0x10 [ 273.492148][T18448] do_splice+0xc79/0x1660 [ 273.492179][T18448] ? __fget_files+0x2a/0x420 [ 273.492205][T18448] ? rcu_is_watching+0x15/0xb0 [ 273.492222][T18448] ? __pfx_vfs_write+0x10/0x10 [ 273.492246][T18448] ? __pfx_do_splice+0x10/0x10 [ 273.492272][T18448] __se_sys_splice+0x2e1/0x460 [ 273.492302][T18448] ? __pfx___se_sys_splice+0x10/0x10 [ 273.492324][T18448] ? rcu_is_watching+0x15/0xb0 [ 273.492343][T18448] ? __x64_sys_splice+0x21/0xf0 [ 273.492368][T18448] do_syscall_64+0xfa/0x3b0 [ 273.492392][T18448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.492410][T18448] ? clear_bhb_loop+0x60/0xb0 [ 273.492429][T18448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.492447][T18448] RIP: 0033:0x7fbb3178ebe9 [ 273.492463][T18448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.492479][T18448] RSP: 002b:00007fbb325e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 273.492499][T18448] RAX: ffffffffffffffda RBX: 00007fbb319b5fa0 RCX: 00007fbb3178ebe9 [ 273.492512][T18448] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 273.492523][T18448] RBP: 00007fbb325e2090 R08: 001100000000f336 R09: 0000000000000000 [ 273.492537][T18448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.492548][T18448] R13: 00007fbb319b6038 R14: 00007fbb319b5fa0 R15: 00007ffee5b01a38 [ 273.492570][T18448] [ 273.944630][T18456] netlink: 'syz.3.4869': attribute type 13 has an invalid length. [ 273.977588][T18464] netlink: 'syz.0.4872': attribute type 10 has an invalid length. [ 274.014632][T18456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.033445][T18470] nbd: socks must be embedded in a SOCK_ITEM attr [ 274.208310][T18485] __nla_validate_parse: 12 callbacks suppressed [ 274.208351][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4881'. [ 274.413019][T18502] netlink: 'syz.2.4888': attribute type 13 has an invalid length. [ 274.504280][T18502] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.529737][T18502] batman_adv: batadv0: Interface activated: team0 [ 274.537690][T18502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.589532][T18511] bond5 (unregistering): Released all slaves [ 274.711468][T18524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4898'. [ 275.072272][T18569] pim6reg: entered allmulticast mode [ 275.090238][T18571] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 275.091838][T18569] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4917'. [ 275.300337][T18590] netlink: 'syz.1.4926': attribute type 13 has an invalid length. [ 275.319928][T18590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.638431][T18625] netlink: 'syz.4.4939': attribute type 10 has an invalid length. [ 275.675968][T18629] FAULT_INJECTION: forcing a failure. [ 275.675968][T18629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.708843][T18629] CPU: 1 UID: 0 PID: 18629 Comm: syz.1.4941 Not tainted syzkaller #0 PREEMPT(full) [ 275.708870][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.708881][T18629] Call Trace: [ 275.708889][T18629] [ 275.708896][T18629] dump_stack_lvl+0x189/0x250 [ 275.708921][T18629] ? __pfx____ratelimit+0x10/0x10 [ 275.708944][T18629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.708964][T18629] ? __pfx__printk+0x10/0x10 [ 275.708985][T18629] ? __might_fault+0xb0/0x130 [ 275.709011][T18629] ? rcu_is_watching+0x15/0xb0 [ 275.709029][T18629] should_fail_ex+0x414/0x560 [ 275.709050][T18631] FAULT_INJECTION: forcing a failure. [ 275.709050][T18631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.709053][T18629] _copy_from_iter+0x1db/0x16f0 [ 275.709073][T18629] ? rcu_is_watching+0x15/0xb0 [ 275.709089][T18629] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 275.709107][T18629] ? __pfx__copy_from_iter+0x10/0x10 [ 275.709121][T18629] ? __build_skb_around+0x257/0x3e0 [ 275.709146][T18629] ? netlink_sendmsg+0x642/0xb30 [ 275.709170][T18629] ? skb_put+0x11b/0x210 [ 275.709186][T18629] netlink_sendmsg+0x6b2/0xb30 [ 275.709213][T18629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.709244][T18629] ? aa_sock_msg_perm+0xf1/0x1d0 [ 275.709261][T18629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.709280][T18629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.709303][T18629] __sock_sendmsg+0x21c/0x270 [ 275.709326][T18629] ____sys_sendmsg+0x505/0x830 [ 275.709345][T18629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.709366][T18629] ? import_iovec+0x74/0xa0 [ 275.709385][T18629] ___sys_sendmsg+0x21f/0x2a0 [ 275.709403][T18629] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.709434][T18629] ? __fget_files+0x2a/0x420 [ 275.709457][T18629] ? __fget_files+0x3a0/0x420 [ 275.709485][T18629] __x64_sys_sendmsg+0x19b/0x260 [ 275.709503][T18629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.709525][T18629] ? __pfx_ksys_write+0x10/0x10 [ 275.709544][T18629] ? rcu_is_watching+0x15/0xb0 [ 275.709562][T18629] ? rcu_is_watching+0x15/0xb0 [ 275.709580][T18629] do_syscall_64+0xfa/0x3b0 [ 275.709604][T18629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.709621][T18629] ? clear_bhb_loop+0x60/0xb0 [ 275.709640][T18629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.709657][T18629] RIP: 0033:0x7f7dc3f8ebe9 [ 275.709673][T18629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.709688][T18629] RSP: 002b:00007f7dc4e3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.709707][T18629] RAX: ffffffffffffffda RBX: 00007f7dc41b5fa0 RCX: 00007f7dc3f8ebe9 [ 275.709721][T18629] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 275.709732][T18629] RBP: 00007f7dc4e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 275.709744][T18629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.709755][T18629] R13: 00007f7dc41b6038 R14: 00007f7dc41b5fa0 R15: 00007ffdda850b58 [ 275.709774][T18629] [ 276.023764][T18631] CPU: 0 UID: 0 PID: 18631 Comm: syz.2.4942 Not tainted syzkaller #0 PREEMPT(full) [ 276.023793][T18631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.023804][T18631] Call Trace: [ 276.023812][T18631] [ 276.023820][T18631] dump_stack_lvl+0x189/0x250 [ 276.023845][T18631] ? __pfx____ratelimit+0x10/0x10 [ 276.023869][T18631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.023889][T18631] ? __pfx__printk+0x10/0x10 [ 276.023910][T18631] ? __might_fault+0xb0/0x130 [ 276.023936][T18631] ? rcu_is_watching+0x15/0xb0 [ 276.023963][T18631] should_fail_ex+0x414/0x560 [ 276.023987][T18631] _copy_from_user+0x2d/0xb0 [ 276.024007][T18631] ___sys_recvmsg+0x12e/0x510 [ 276.024029][T18631] ? __pfx____sys_recvmsg+0x10/0x10 [ 276.024049][T18631] ? __fget_files+0x2a/0x420 [ 276.024081][T18631] ? rcu_is_watching+0x15/0xb0 [ 276.024098][T18631] ? lock_release+0x4b/0x3e0 [ 276.024121][T18631] ? __might_fault+0xcc/0x130 [ 276.024144][T18631] do_recvmmsg+0x307/0x770 [ 276.024166][T18631] ? __pfx_do_recvmmsg+0x10/0x10 [ 276.024190][T18631] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.024222][T18631] __x64_sys_recvmmsg+0x190/0x240 [ 276.024242][T18631] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 276.024260][T18631] ? rcu_is_watching+0x15/0xb0 [ 276.024279][T18631] ? rcu_is_watching+0x15/0xb0 [ 276.024297][T18631] do_syscall_64+0xfa/0x3b0 [ 276.024321][T18631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.024338][T18631] ? clear_bhb_loop+0x60/0xb0 [ 276.024358][T18631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.024375][T18631] RIP: 0033:0x7fc65538ebe9 [ 276.024391][T18631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.024406][T18631] RSP: 002b:00007fc656185038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 276.024426][T18631] RAX: ffffffffffffffda RBX: 00007fc6555b5fa0 RCX: 00007fc65538ebe9 [ 276.024440][T18631] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 276.024452][T18631] RBP: 00007fc656185090 R08: 0000000000000000 R09: 0000000000000000 [ 276.024464][T18631] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 276.024475][T18631] R13: 00007fc6555b6038 R14: 00007fc6555b5fa0 R15: 00007ffdf36c9488 [ 276.024496][T18631] [ 276.037771][T18645] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4948'. [ 276.566587][T18667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4957'. [ 276.649344][T18674] netlink: 'syz.1.4959': attribute type 13 has an invalid length. [ 276.795439][T18674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.252125][T18715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4972'. [ 277.272397][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4972'. [ 277.314664][T18722] netlink: 'syz.4.4976': attribute type 1 has an invalid length. [ 277.360835][T18722] bond7: (slave bridge3): making interface the new active one [ 277.383683][T18722] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 277.662308][T18745] netlink: 'syz.3.4986': attribute type 1 has an invalid length. [ 277.693046][T18745] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4986'. [ 277.777194][ T5867] Bluetooth: hci0: command 0x0419 tx timeout [ 277.815135][T18761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4992'. [ 277.845999][ T4592] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 277.865175][ T4592] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 277.890155][T18763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4994'. [ 277.912947][T18769] mac80211_hwsim hwsim25 ÿ: renamed from wlan1 [ 277.986006][T18759] nbd37: detected capacity change from 0 to 127 [ 277.996650][ T5867] block nbd37: Receive control failed (result -32) [ 278.003506][ T51] block nbd37: Receive control failed (result -32) [ 278.099678][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.106384][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.114024][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.127608][T18784] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 278.157251][T18786] geneve2: entered promiscuous mode [ 278.162661][T18786] geneve2: entered allmulticast mode [ 278.171350][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.171380][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.187137][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.208942][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.218240][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.225071][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.231806][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.242333][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.249219][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.260248][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.268512][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.277444][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.295462][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.308192][T18784] wg1 speed is unknown, defaulting to 1000 [ 278.340149][T18796] FAULT_INJECTION: forcing a failure. [ 278.340149][T18796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 278.373209][T18796] CPU: 0 UID: 0 PID: 18796 Comm: syz.4.5008 Not tainted syzkaller #0 PREEMPT(full) [ 278.373236][T18796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.373269][T18796] Call Trace: [ 278.373277][T18796] [ 278.373285][T18796] dump_stack_lvl+0x189/0x250 [ 278.373310][T18796] ? __pfx____ratelimit+0x10/0x10 [ 278.373331][T18796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.373349][T18796] ? __pfx__printk+0x10/0x10 [ 278.373372][T18796] ? lock_acquire+0x5f/0x360 [ 278.373405][T18796] should_fail_ex+0x414/0x560 [ 278.373430][T18796] prepare_alloc_pages+0x213/0x610 [ 278.373451][T18796] __alloc_frozen_pages_noprof+0x123/0x370 [ 278.373470][T18796] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 278.373490][T18796] ? kasan_save_track+0x4f/0x80 [ 278.373512][T18796] ? policy_nodemask+0x27c/0x720 [ 278.373534][T18796] ? bpf_map_area_alloc+0x12d/0x180 [ 278.373556][T18796] ? prealloc_init+0x123/0x630 [ 278.373578][T18796] ? htab_map_alloc+0x6ce/0xc70 [ 278.373597][T18796] ? map_create+0xaa0/0x14d0 [ 278.373619][T18796] alloc_pages_mpol+0x232/0x4a0 [ 278.373643][T18796] alloc_pages_noprof+0xa9/0x190 [ 278.373667][T18796] get_free_pages_noprof+0xf/0x80 [ 278.373683][T18796] kasan_populate_vmalloc+0x33/0x1a0 [ 278.373702][T18796] ? do_raw_spin_unlock+0x122/0x240 [ 278.373724][T18796] alloc_vmap_area+0xd51/0x1490 [ 278.373751][T18796] ? __pfx_alloc_vmap_area+0x10/0x10 [ 278.373772][T18796] ? __kasan_kmalloc+0x93/0xb0 [ 278.373794][T18796] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 278.373816][T18796] ? __get_vm_area_node+0x13f/0x300 [ 278.373838][T18796] ? prealloc_init+0x123/0x630 [ 278.373875][T18796] __get_vm_area_node+0x1f8/0x300 [ 278.373904][T18796] __vmalloc_node_range_noprof+0x301/0x12f0 [ 278.373927][T18796] ? prealloc_init+0x123/0x630 [ 278.373947][T18796] ? lock_release+0x4b/0x3e0 [ 278.373971][T18796] ? do_raw_spin_lock+0x121/0x290 [ 278.373993][T18796] ? do_raw_spin_lock+0x121/0x290 [ 278.374012][T18796] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 278.374037][T18796] ? rcu_is_watching+0x15/0xb0 [ 278.374055][T18796] bpf_map_area_alloc+0x12d/0x180 [ 278.374078][T18796] ? prealloc_init+0x123/0x630 [ 278.374101][T18796] prealloc_init+0x123/0x630 [ 278.374124][T18796] ? __percpu_counter_init_many+0x364/0x380 [ 278.374149][T18796] htab_map_alloc+0x6ce/0xc70 [ 278.374173][T18796] map_create+0xaa0/0x14d0 [ 278.374193][T18796] ? __might_fault+0xcc/0x130 [ 278.374215][T18796] ? security_bpf+0x7e/0x300 [ 278.374237][T18796] __sys_bpf+0x60f/0x870 [ 278.374266][T18796] ? __pfx___sys_bpf+0x10/0x10 [ 278.374292][T18796] ? ksys_write+0x22a/0x250 [ 278.374315][T18796] ? __pfx_ksys_write+0x10/0x10 [ 278.374338][T18796] __x64_sys_bpf+0x7c/0x90 [ 278.374358][T18796] do_syscall_64+0xfa/0x3b0 [ 278.374382][T18796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.374399][T18796] ? clear_bhb_loop+0x60/0xb0 [ 278.374416][T18796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.374432][T18796] RIP: 0033:0x7f1f6018ebe9 [ 278.374448][T18796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.374463][T18796] RSP: 002b:00007f1f5e3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.374483][T18796] RAX: ffffffffffffffda RBX: 00007f1f603b5fa0 RCX: 00007f1f6018ebe9 [ 278.374496][T18796] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 0000000000000000 [ 278.374508][T18796] RBP: 00007f1f5e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 278.374520][T18796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.374530][T18796] R13: 00007f1f603b6038 R14: 00007f1f603b5fa0 R15: 00007ffc7e82c988 [ 278.374550][T18796] [ 278.794564][T18806] FAULT_INJECTION: forcing a failure. [ 278.794564][T18806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.810187][T18806] CPU: 0 UID: 0 PID: 18806 Comm: syz.4.5013 Not tainted syzkaller #0 PREEMPT(full) [ 278.810216][T18806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.810227][T18806] Call Trace: [ 278.810235][T18806] [ 278.810244][T18806] dump_stack_lvl+0x189/0x250 [ 278.810269][T18806] ? __pfx____ratelimit+0x10/0x10 [ 278.810292][T18806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.810311][T18806] ? __pfx__printk+0x10/0x10 [ 278.810336][T18806] ? rcu_is_watching+0x15/0xb0 [ 278.810355][T18806] should_fail_ex+0x414/0x560 [ 278.810378][T18806] _copy_to_user+0x31/0xb0 [ 278.810399][T18806] simple_read_from_buffer+0xe1/0x170 [ 278.810425][T18806] proc_fail_nth_read+0x1b3/0x220 [ 278.810447][T18806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.810484][T18806] ? rw_verify_area+0x2a6/0x4d0 [ 278.810505][T18806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.810524][T18806] vfs_read+0x200/0xa30 [ 278.810543][T18806] ? fdget_pos+0x247/0x320 [ 278.810558][T18806] ? __pfx___mutex_lock+0x10/0x10 [ 278.810583][T18806] ? __pfx_vfs_read+0x10/0x10 [ 278.810607][T18806] ? __fget_files+0x3a0/0x420 [ 278.810630][T18806] ? __fget_files+0x2a/0x420 [ 278.810653][T18806] ksys_read+0x145/0x250 [ 278.810671][T18806] ? __pfx_ksys_read+0x10/0x10 [ 278.810687][T18806] ? rcu_is_watching+0x15/0xb0 [ 278.810705][T18806] ? rcu_is_watching+0x15/0xb0 [ 278.810724][T18806] do_syscall_64+0xfa/0x3b0 [ 278.810747][T18806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.810765][T18806] ? clear_bhb_loop+0x60/0xb0 [ 278.810784][T18806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.810801][T18806] RIP: 0033:0x7f1f6018d5fc [ 278.810818][T18806] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 278.810834][T18806] RSP: 002b:00007f1f5e3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.810853][T18806] RAX: ffffffffffffffda RBX: 00007f1f603b5fa0 RCX: 00007f1f6018d5fc [ 278.810867][T18806] RDX: 000000000000000f RSI: 00007f1f5e3f60a0 RDI: 0000000000000004 [ 278.810880][T18806] RBP: 00007f1f5e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 278.810898][T18806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.810909][T18806] R13: 00007f1f603b6038 R14: 00007f1f603b5fa0 R15: 00007ffc7e82c988 [ 278.810929][T18806] [ 279.130328][T18812] bond5: entered allmulticast mode [ 279.138812][T18812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.160134][T18812] bridge0: port 6(bond5) entered blocking state [ 279.178705][T18812] bridge0: port 6(bond5) entered disabled state [ 279.191842][T18812] bond5: entered promiscuous mode [ 279.197441][T18812] bridge0: port 6(bond5) entered blocking state [ 279.203767][T18812] bridge0: port 6(bond5) entered forwarding state [ 279.325947][T18831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.571092][T18859] __nla_validate_parse: 4 callbacks suppressed [ 279.571113][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5037'. [ 279.618800][T18861] netlink: 'syz.1.5039': attribute type 10 has an invalid length. [ 279.709442][T18870] netlink: 'syz.4.5041': attribute type 13 has an invalid length. [ 279.717484][T18873] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5043'. [ 279.764029][T18870] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.776953][T18870] batman_adv: batadv0: Interface activated: team0 [ 279.800809][T18870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.843884][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5045'. [ 279.860782][T18879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5045'. [ 279.902697][T18885] syzkaller1: entered promiscuous mode [ 279.908563][T18885] syzkaller1: entered allmulticast mode [ 280.007876][T18891] FAULT_INJECTION: forcing a failure. [ 280.007876][T18891] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 280.022169][T18879] syz.1.5045 (18879) used greatest stack depth: 17720 bytes left [ 280.038895][T18891] CPU: 1 UID: 0 PID: 18891 Comm: syz.2.5051 Not tainted syzkaller #0 PREEMPT(full) [ 280.038921][T18891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.038932][T18891] Call Trace: [ 280.038939][T18891] [ 280.038946][T18891] dump_stack_lvl+0x189/0x250 [ 280.038972][T18891] ? __pfx____ratelimit+0x10/0x10 [ 280.038995][T18891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.039014][T18891] ? __pfx__printk+0x10/0x10 [ 280.039036][T18891] ? lock_acquire+0x5f/0x360 [ 280.039062][T18891] should_fail_ex+0x414/0x560 [ 280.039084][T18891] prepare_alloc_pages+0x213/0x610 [ 280.039103][T18891] __alloc_frozen_pages_noprof+0x123/0x370 [ 280.039123][T18891] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 280.039143][T18891] ? kasan_save_track+0x4f/0x80 [ 280.039166][T18891] alloc_pages_bulk_noprof+0x560/0x710 [ 280.039185][T18891] ? alloc_pages_noprof+0xbe/0x190 [ 280.039207][T18891] kasan_populate_vmalloc+0xba/0x1a0 [ 280.039228][T18891] alloc_vmap_area+0xd51/0x1490 [ 280.039256][T18891] ? __pfx_alloc_vmap_area+0x10/0x10 [ 280.039275][T18891] ? __kasan_kmalloc+0x93/0xb0 [ 280.039297][T18891] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 280.039321][T18891] ? __get_vm_area_node+0x13f/0x300 [ 280.039342][T18891] ? prealloc_init+0x123/0x630 [ 280.039365][T18891] __get_vm_area_node+0x1f8/0x300 [ 280.039388][T18891] __vmalloc_node_range_noprof+0x301/0x12f0 [ 280.039412][T18891] ? prealloc_init+0x123/0x630 [ 280.039432][T18891] ? lock_release+0x4b/0x3e0 [ 280.039466][T18891] ? do_raw_spin_lock+0x121/0x290 [ 280.039489][T18891] ? do_raw_spin_lock+0x121/0x290 [ 280.039509][T18891] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 280.039533][T18891] ? rcu_is_watching+0x15/0xb0 [ 280.039550][T18891] bpf_map_area_alloc+0x12d/0x180 [ 280.039574][T18891] ? prealloc_init+0x123/0x630 [ 280.039597][T18891] prealloc_init+0x123/0x630 [ 280.039621][T18891] ? __percpu_counter_init_many+0x364/0x380 [ 280.039646][T18891] htab_map_alloc+0x6ce/0xc70 [ 280.039671][T18891] map_create+0xaa0/0x14d0 [ 280.039691][T18891] ? __might_fault+0xcc/0x130 [ 280.039711][T18891] ? security_bpf+0x7e/0x300 [ 280.039733][T18891] __sys_bpf+0x60f/0x870 [ 280.039751][T18891] ? __pfx___sys_bpf+0x10/0x10 [ 280.039776][T18891] ? ksys_write+0x22a/0x250 [ 280.039797][T18891] ? __pfx_ksys_write+0x10/0x10 [ 280.039824][T18891] __x64_sys_bpf+0x7c/0x90 [ 280.039842][T18891] do_syscall_64+0xfa/0x3b0 [ 280.039866][T18891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.039883][T18891] ? clear_bhb_loop+0x60/0xb0 [ 280.039902][T18891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.039917][T18891] RIP: 0033:0x7fc65538ebe9 [ 280.039932][T18891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.039948][T18891] RSP: 002b:00007fc656185038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.039966][T18891] RAX: ffffffffffffffda RBX: 00007fc6555b5fa0 RCX: 00007fc65538ebe9 [ 280.039979][T18891] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 0000000000000000 [ 280.039990][T18891] RBP: 00007fc656185090 R08: 0000000000000000 R09: 0000000000000000 [ 280.040001][T18891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.040009][T18891] R13: 00007fc6555b6038 R14: 00007fc6555b5fa0 R15: 00007ffdf36c9488 [ 280.040027][T18891] [ 280.372778][T12066] block nbd1: Possible stuck request ffff8880252c5080: control (read@0,1024B). Runtime 150 seconds [ 280.383616][T12066] block nbd1: Possible stuck request ffff8880252c5240: control (read@1024,1024B). Runtime 150 seconds [ 280.394831][T12066] block nbd1: Possible stuck request ffff8880252c5400: control (read@2048,1024B). Runtime 150 seconds [ 280.406092][T12066] block nbd1: Possible stuck request ffff8880252c55c0: control (read@3072,1024B). Runtime 150 seconds [ 280.421926][ T3582] bridge0: port 6(bond5) entered disabled state [ 280.448169][T18894] netlink: 'syz.1.5053': attribute type 10 has an invalid length. [ 280.756866][T18908] nbd38: detected capacity change from 0 to 127 [ 280.766402][ T51] block nbd38: Receive control failed (result -32) [ 280.773056][ T5867] block nbd38: Receive control failed (result -32) [ 280.775096][T18928] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5066'. [ 280.790275][T18930] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5066'. [ 280.807019][T18928] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.815255][T18928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.830141][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5067'. [ 280.988242][T18946] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5074'. [ 280.997550][T18946] netem: invalid attributes len -24 [ 281.003024][T18946] netem: change failed [ 281.009371][T18950] netlink: 'syz.2.5076': attribute type 3 has an invalid length. [ 281.018797][T18946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5074'. [ 281.053105][T18952] netlink: 'syz.0.5077': attribute type 13 has an invalid length. [ 281.065445][T18952] lo: entered promiscuous mode [ 281.070579][T18952] lo: entered allmulticast mode [ 281.084264][T18952] tunl0: entered promiscuous mode [ 281.097311][T18952] tunl0: entered allmulticast mode [ 281.105503][T18952] gre0: entered promiscuous mode [ 281.119072][T18952] gre0: entered allmulticast mode [ 281.131292][T18952] gretap0: entered promiscuous mode [ 281.137284][T18952] gretap0: entered allmulticast mode [ 281.145240][T18952] gretap0: refused to change device tx_queue_len [ 281.155452][T18952] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.174089][T18956] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5079'. [ 281.316525][T18965] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 281.422325][T18982] netlink: 'syz.3.5090': attribute type 13 has an invalid length. [ 281.440190][T18982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.593464][T18996] bond6: entered allmulticast mode [ 281.600490][T18996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.608029][T18996] bridge0: port 7(bond6) entered blocking state [ 281.614488][T18996] bridge0: port 7(bond6) entered disabled state [ 281.625778][T18996] bond6: entered promiscuous mode [ 281.631377][T18996] bridge0: port 7(bond6) entered blocking state [ 281.637739][T18996] bridge0: port 7(bond6) entered forwarding state [ 281.814625][T19015] batman_adv: batadv0: Interface deactivated: team0 [ 281.839848][T19015] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 281.847814][T19015] gtp0: left promiscuous mode [ 281.852572][T19015] gtp0: left allmulticast mode [ 281.860591][T19015] bond0: left allmulticast mode [ 281.865901][T19015] bond1: left allmulticast mode [ 281.886094][T19015] bridge1: left promiscuous mode [ 281.900447][T19015] bridge1: left allmulticast mode [ 282.027622][T19031] openvswitch: netlink: IPv4 tun info is not correct [ 282.064567][T19035] netlink: 'syz.2.5112': attribute type 3 has an invalid length. [ 282.099339][T19037] netlink: 'syz.0.5113': attribute type 21 has an invalid length. [ 282.139496][T19037] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.392482][T19065] netlink: 'syz.2.5125': attribute type 10 has an invalid length. [ 282.411271][T19065] batman_adv: batadv0: Interface deactivated: team0 [ 282.429341][ T4592] bridge0: port 7(bond6) entered disabled state [ 282.654051][T19087] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 282.690285][T19087] team0: Device macvtap1 is already an upper device of the team interface [ 282.741075][T19094] bond8 (unregistering): Released all slaves [ 282.954348][T19110] bond8: entered allmulticast mode [ 282.961814][T19110] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.965517][T19116] syz.4.5147: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 282.969418][T19110] bridge0: port 8(bond8) entered blocking state [ 282.989747][T19110] bridge0: port 8(bond8) entered disabled state [ 282.998093][T19110] bond8: entered promiscuous mode [ 283.003753][T19110] bridge0: port 8(bond8) entered blocking state [ 283.010142][T19110] bridge0: port 8(bond8) entered forwarding state [ 283.030719][T19116] CPU: 0 UID: 0 PID: 19116 Comm: syz.4.5147 Not tainted syzkaller #0 PREEMPT(full) [ 283.030747][T19116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.030759][T19116] Call Trace: [ 283.030766][T19116] [ 283.030774][T19116] dump_stack_lvl+0x189/0x250 [ 283.030802][T19116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.030821][T19116] ? __pfx__printk+0x10/0x10 [ 283.030844][T19116] ? lock_release+0x4b/0x3e0 [ 283.030868][T19116] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 283.030894][T19116] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 283.030914][T19116] warn_alloc+0x214/0x310 [ 283.030941][T19116] ? stack_depot_save_flags+0x40/0x860 [ 283.030965][T19116] ? __pfx_warn_alloc+0x10/0x10 [ 283.030991][T19116] ? kasan_save_track+0x4f/0x80 [ 283.031012][T19116] ? xskq_create+0x56/0x170 [ 283.031033][T19116] ? xsk_init_queue+0xb0/0x110 [ 283.031053][T19116] ? xsk_setsockopt+0x4dc/0x8d0 [ 283.031073][T19116] ? do_sock_setsockopt+0x17c/0x1b0 [ 283.031090][T19116] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 283.031106][T19116] ? do_syscall_64+0xfa/0x3b0 [ 283.031129][T19116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.031151][T19116] __vmalloc_node_range_noprof+0x125/0x12f0 [ 283.031188][T19116] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.031221][T19116] ? xsk_setsockopt+0x462/0x8d0 [ 283.031244][T19116] ? __kasan_kmalloc+0x93/0xb0 [ 283.031268][T19116] vmalloc_user_noprof+0xad/0xf0 [ 283.031293][T19116] ? xskq_create+0xbf/0x170 [ 283.031316][T19116] xskq_create+0xbf/0x170 [ 283.031340][T19116] xsk_init_queue+0xb0/0x110 [ 283.031363][T19116] xsk_setsockopt+0x4dc/0x8d0 [ 283.031385][T19116] ? __pfx_xsk_setsockopt+0x10/0x10 [ 283.031406][T19116] ? __pfx_aa_sk_perm+0x10/0x10 [ 283.031430][T19116] ? lock_release+0x4b/0x3e0 [ 283.031453][T19116] ? aa_sock_opt_perm+0xff/0x1b0 [ 283.031470][T19116] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 283.031491][T19116] ? __pfx_xsk_setsockopt+0x10/0x10 [ 283.031512][T19116] do_sock_setsockopt+0x17c/0x1b0 [ 283.031531][T19116] __x64_sys_setsockopt+0x13f/0x1b0 [ 283.031551][T19116] do_syscall_64+0xfa/0x3b0 [ 283.031576][T19116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.031593][T19116] ? clear_bhb_loop+0x60/0xb0 [ 283.031613][T19116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.031631][T19116] RIP: 0033:0x7f1f6018ebe9 [ 283.031648][T19116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.031664][T19116] RSP: 002b:00007f1f5e3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 283.031685][T19116] RAX: ffffffffffffffda RBX: 00007f1f603b5fa0 RCX: 00007f1f6018ebe9 [ 283.031699][T19116] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 283.031711][T19116] RBP: 00007f1f60211e19 R08: 0000000000000004 R09: 0000000000000000 [ 283.031723][T19116] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.031735][T19116] R13: 00007f1f603b6038 R14: 00007f1f603b5fa0 R15: 00007ffc7e82c988 [ 283.031757][T19116] [ 283.126597][T19105] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 283.133808][T19116] Mem-Info: [ 283.154045][T19105] syzkaller0: linktype set to 264 [ 283.154358][T19116] active_anon:9558 inactive_anon:0 isolated_anon:0 [ 283.154358][T19116] active_file:3922 inactive_file:39930 isolated_file:0 [ 283.154358][T19116] unevictable:768 dirty:235 writeback:0 [ 283.154358][T19116] slab_reclaimable:14018 slab_unreclaimable:216558 [ 283.154358][T19116] mapped:32850 shmem:5830 pagetables:1195 [ 283.154358][T19116] sec_pagetables:0 bounce:0 [ 283.154358][T19116] kernel_misc_reclaimable:0 [ 283.154358][T19116] free:1196050 free_pcp:15117 free_cma:0 [ 283.217797][T19121] netlink: 'syz.2.5148': attribute type 13 has an invalid length. [ 283.219924][T19116] Node 0 active_anon:38332kB inactive_anon:0kB active_file:15688kB inactive_file:159520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131400kB dirty:940kB writeback:0kB shmem:21784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16508kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.225649][ T3582] bridge0: port 8(bond8) entered disabled state [ 283.230105][T19116] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.473203][T19116] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.479535][T19121] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.502244][T19116] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 283.514924][T19116] Node 0 DMA32 free:878172kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38380kB inactive_anon:0kB active_file:15688kB inactive_file:157948kB unevictable:1536kB writepending:940kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:35892kB local_pcp:20604kB free_cma:0kB [ 283.551102][T19121] batman_adv: batadv0: Interface activated: team0 [ 283.564333][T19116] lowmem_reserve[]: 0 0 1 1 1 [ 283.577029][T19121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.583718][T19116] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 283.659061][T19116] lowmem_reserve[]: 0 0 0 0 0 [ 283.664007][T19116] Node 1 Normal free:3890656kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23012kB local_pcp:9312kB free_cma:0kB [ 283.707068][T19116] lowmem_reserve[]: 0 0 0 0 0 [ 283.729494][T19116] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.799224][T19116] Node 0 DMA32: 1895*4kB (UM) 742*8kB (UME) 482*16kB (UME) 294*32kB (UME) 65*64kB (UM) 35*128kB (UM) 15*256kB (UM) 13*512kB (UME) 7*1024kB (UME) 5*2048kB (UME) 199*4096kB (M) = 882284kB [ 283.855578][T19116] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 283.885718][T19116] Node 1 Normal: 218*4kB (UE) 59*8kB (UME) 46*16kB (UME) 70*32kB (UME) 26*64kB (UME) 5*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3890656kB [ 283.968155][T19116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.978784][T19116] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.988392][T19116] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.000414][T19116] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.010850][T19116] 45211 total pagecache pages [ 284.015631][T19116] 0 pages in swap cache [ 284.019849][T19116] Free swap = 124996kB [ 284.024418][T19116] Total swap = 124996kB [ 284.036116][T19116] 2097051 pages RAM [ 284.040067][T19116] 0 pages HighMem/MovableOnly [ 284.045976][T19116] 425661 pages reserved [ 284.066236][T19116] 0 pages cma reserved [ 284.206041][T19178] bond9 (unregistering): Released all slaves [ 284.206180][T19164] nbd39: detected capacity change from 0 to 127 [ 284.233876][ T5867] block nbd39: Receive control failed (result -32) [ 284.234064][T19183] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 284.240668][ T51] block nbd39: Receive control failed (result -32) [ 284.262747][T19183] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 284.858092][T19230] FAULT_INJECTION: forcing a failure. [ 284.858092][T19230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 284.871622][T19230] CPU: 1 UID: 0 PID: 19230 Comm: syz.1.5191 Not tainted syzkaller #0 PREEMPT(full) [ 284.871647][T19230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.871659][T19230] Call Trace: [ 284.871666][T19230] [ 284.871674][T19230] dump_stack_lvl+0x189/0x250 [ 284.871699][T19230] ? __pfx____ratelimit+0x10/0x10 [ 284.871722][T19230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.871742][T19230] ? __pfx__printk+0x10/0x10 [ 284.871764][T19230] ? lock_acquire+0x5f/0x360 [ 284.871791][T19230] should_fail_ex+0x414/0x560 [ 284.871815][T19230] prepare_alloc_pages+0x213/0x610 [ 284.871836][T19230] __alloc_frozen_pages_noprof+0x123/0x370 [ 284.871856][T19230] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 284.871877][T19230] ? policy_nodemask+0x27c/0x720 [ 284.871899][T19230] ? pfn_valid+0xba/0x490 [ 284.871920][T19230] ? rcu_is_watching+0x15/0xb0 [ 284.871939][T19230] alloc_pages_mpol+0x232/0x4a0 [ 284.871964][T19230] vma_alloc_folio_noprof+0xe4/0x200 [ 284.871986][T19230] ? rcu_read_lock_held+0xa/0x50 [ 284.872005][T19230] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 284.872038][T19230] ? rcu_is_watching+0x15/0xb0 [ 284.872055][T19230] ? lock_release+0x4b/0x3e0 [ 284.872078][T19230] folio_prealloc+0x30/0x180 [ 284.872101][T19230] __handle_mm_fault+0x2ab9/0x5440 [ 284.872129][T19230] ? __pfx___handle_mm_fault+0x10/0x10 [ 284.872149][T19230] ? rcu_is_watching+0x15/0xb0 [ 284.872174][T19230] ? find_vma+0xe7/0x160 [ 284.872195][T19230] ? __pfx_find_vma+0x10/0x10 [ 284.872215][T19230] handle_mm_fault+0x40a/0x8e0 [ 284.872242][T19230] do_user_addr_fault+0x764/0x1390 [ 284.872274][T19230] exc_page_fault+0x76/0xf0 [ 284.872297][T19230] asm_exc_page_fault+0x26/0x30 [ 284.872314][T19230] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 284.872335][T19230] Code: 09 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 284.872351][T19230] RSP: 0018:ffffc9000b2a74f8 EFLAGS: 00050202 [ 284.872369][T19230] RAX: ffff888052f42001 RBX: ffff888052f421c7 RCX: 0000000000000ac5 [ 284.872383][T19230] RDX: 0000000000000000 RSI: ffff888052f423c7 RDI: 0000200000004000 [ 284.872395][T19230] RBP: ffffc9000b2a7650 R08: ffff888052f42e8b R09: 1ffff1100a5e85d1 [ 284.872409][T19230] R10: dffffc0000000000 R11: ffffed100a5e85d2 R12: dffffc0000000000 [ 284.872422][T19230] R13: 0000000000000cc5 R14: 00007ffffffff000 R15: 0000200000004ac5 [ 284.872443][T19230] _copy_to_iter+0x5f6/0x16f0 [ 284.872466][T19230] ? __pfx__copy_to_iter+0x10/0x10 [ 284.872482][T19230] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 284.872505][T19230] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 284.872527][T19230] __skb_datagram_iter+0xf8/0x990 [ 284.872546][T19230] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 284.872569][T19230] skb_copy_datagram_iter+0xc5/0x230 [ 284.872590][T19230] netlink_recvmsg+0x2ab/0xa30 [ 284.872619][T19230] ? __pfx_netlink_recvmsg+0x10/0x10 [ 284.872642][T19230] ? unwind_next_frame+0xa5/0x2390 [ 284.872662][T19230] ? unwind_next_frame+0xa5/0x2390 [ 284.872680][T19230] ? aa_sock_msg_perm+0xf1/0x1d0 [ 284.872697][T19230] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 284.872715][T19230] ? security_socket_recvmsg+0x7e/0x2e0 [ 284.872735][T19230] ? __pfx_netlink_recvmsg+0x10/0x10 [ 284.872760][T19230] sock_recvmsg_nosec+0x183/0x1c0 [ 284.872784][T19230] ____sys_recvmsg+0x3aa/0x460 [ 284.872806][T19230] ? __pfx_____sys_recvmsg+0x10/0x10 [ 284.872831][T19230] ? import_iovec+0x74/0xa0 [ 284.872852][T19230] ___sys_recvmsg+0x1b5/0x510 [ 284.872873][T19230] ? __pfx____sys_recvmsg+0x10/0x10 [ 284.872894][T19230] ? __fget_files+0x2a/0x420 [ 284.872925][T19230] ? rcu_is_watching+0x15/0xb0 [ 284.872942][T19230] ? lock_release+0x4b/0x3e0 [ 284.872964][T19230] ? __might_fault+0xcc/0x130 [ 284.872987][T19230] do_recvmmsg+0x307/0x770 [ 284.873009][T19230] ? __pfx_do_recvmmsg+0x10/0x10 [ 284.873039][T19230] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 284.873069][T19230] __x64_sys_recvmmsg+0x190/0x240 [ 284.873088][T19230] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 284.873104][T19230] ? rcu_is_watching+0x15/0xb0 [ 284.873120][T19230] ? rcu_is_watching+0x15/0xb0 [ 284.873137][T19230] do_syscall_64+0xfa/0x3b0 [ 284.873160][T19230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.873177][T19230] ? clear_bhb_loop+0x60/0xb0 [ 284.873195][T19230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.873212][T19230] RIP: 0033:0x7f7dc3f8ebe9 [ 284.873227][T19230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.873242][T19230] RSP: 002b:00007f7dc4e3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 284.873261][T19230] RAX: ffffffffffffffda RBX: 00007f7dc41b5fa0 RCX: 00007f7dc3f8ebe9 [ 284.873275][T19230] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 284.873286][T19230] RBP: 00007f7dc4e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 284.873298][T19230] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 284.873310][T19230] R13: 00007f7dc41b6038 R14: 00007f7dc41b5fa0 R15: 00007ffdda850b58 [ 284.873331][T19230] [ 285.483230][T19241] FAULT_INJECTION: forcing a failure. [ 285.483230][T19241] name failslab, interval 1, probability 0, space 0, times 0 [ 285.489801][T19245] netlink: 'syz.0.5197': attribute type 13 has an invalid length. [ 285.504050][T19244] __nla_validate_parse: 13 callbacks suppressed [ 285.504070][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5194'. [ 285.522803][T19241] CPU: 1 UID: 0 PID: 19241 Comm: syz.2.5196 Not tainted syzkaller #0 PREEMPT(full) [ 285.522831][T19241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.522842][T19241] Call Trace: [ 285.522850][T19241] [ 285.522858][T19241] dump_stack_lvl+0x189/0x250 [ 285.522882][T19241] ? __pfx____ratelimit+0x10/0x10 [ 285.522912][T19241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.522932][T19241] ? __pfx__printk+0x10/0x10 [ 285.522956][T19241] ? fs_reclaim_acquire+0x7d/0x100 [ 285.522981][T19241] ? __pfx___might_resched+0x10/0x10 [ 285.522998][T19241] ? lock_acquire+0x5f/0x360 [ 285.523022][T19241] should_fail_ex+0x414/0x560 [ 285.523046][T19241] should_failslab+0xa8/0x100 [ 285.523071][T19241] __kmalloc_noprof+0xcb/0x4f0 [ 285.523093][T19241] ? security_sk_alloc+0x52/0x390 [ 285.523115][T19241] security_sk_alloc+0x52/0x390 [ 285.523135][T19241] sk_prot_alloc+0x101/0x220 [ 285.523151][T19241] ? sk_alloc+0x24/0x370 [ 285.523167][T19241] sk_alloc+0x3a/0x370 [ 285.523182][T19241] ? bpf_ctx_init+0x167/0x1d0 [ 285.523206][T19241] bpf_prog_test_run_skb+0x2ed/0x1560 [ 285.523228][T19241] ? rcu_is_watching+0x15/0xb0 [ 285.523253][T19241] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 285.523276][T19241] bpf_prog_test_run+0x2c7/0x340 [ 285.523301][T19241] __sys_bpf+0x581/0x870 [ 285.523322][T19241] ? __pfx___sys_bpf+0x10/0x10 [ 285.523348][T19241] ? ksys_write+0x22a/0x250 [ 285.523370][T19241] ? __pfx_ksys_write+0x10/0x10 [ 285.523391][T19241] ? rcu_is_watching+0x15/0xb0 [ 285.523411][T19241] __x64_sys_bpf+0x7c/0x90 [ 285.523431][T19241] do_syscall_64+0xfa/0x3b0 [ 285.523455][T19241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.523474][T19241] ? clear_bhb_loop+0x60/0xb0 [ 285.523493][T19241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.523510][T19241] RIP: 0033:0x7fc65538ebe9 [ 285.523526][T19241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.523543][T19241] RSP: 002b:00007fc656185038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.523564][T19241] RAX: ffffffffffffffda RBX: 00007fc6555b5fa0 RCX: 00007fc65538ebe9 [ 285.523578][T19241] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 285.523591][T19241] RBP: 00007fc656185090 R08: 0000000000000000 R09: 0000000000000000 [ 285.523603][T19241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.523615][T19241] R13: 00007fc6555b6038 R14: 00007fc6555b5fa0 R15: 00007ffdf36c9488 [ 285.523636][T19241] [ 285.789313][T19245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.805714][T19244] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 285.824555][T19244] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 285.931754][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 286.200201][T19291] netlink: 'syz.3.5215': attribute type 29 has an invalid length. [ 286.259286][T19291] netlink: 'syz.3.5215': attribute type 29 has an invalid length. [ 286.270295][T19291] netlink: 588 bytes leftover after parsing attributes in process `syz.3.5215'. [ 286.284728][T19291] nbd: must specify a size in bytes for the device [ 286.543937][T19317] bond9 (unregistering): Released all slaves [ 286.578118][T19328] netlink: 'syz.3.5230': attribute type 1 has an invalid length. [ 286.614162][T19326] bond9: entered allmulticast mode [ 286.643351][T19326] 8021q: adding VLAN 0 to HW filter on device bond9 [ 286.650983][T19326] bridge0: port 9(bond9) entered blocking state [ 286.658523][T19326] bridge0: port 9(bond9) entered disabled state [ 286.666714][T19326] bond9: entered promiscuous mode [ 286.672283][T19326] bridge0: port 9(bond9) entered blocking state [ 286.678663][T19326] bridge0: port 9(bond9) entered forwarding state [ 286.690639][ T4592] bridge0: port 9(bond9) entered disabled state [ 286.826433][T19331] nbd40: detected capacity change from 0 to 127 [ 286.837563][ T51] block nbd40: Receive control failed (result -32) [ 286.844151][ T5867] block nbd40: Receive control failed (result -32) [ 287.048615][T19371] FAULT_INJECTION: forcing a failure. [ 287.048615][T19371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.062520][T19371] CPU: 0 UID: 0 PID: 19371 Comm: syz.3.5249 Not tainted syzkaller #0 PREEMPT(full) [ 287.062547][T19371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.062558][T19371] Call Trace: [ 287.062566][T19371] [ 287.062574][T19371] dump_stack_lvl+0x189/0x250 [ 287.062599][T19371] ? __pfx____ratelimit+0x10/0x10 [ 287.062623][T19371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.062642][T19371] ? __pfx__printk+0x10/0x10 [ 287.062664][T19371] ? __might_fault+0xb0/0x130 [ 287.062689][T19371] ? rcu_is_watching+0x15/0xb0 [ 287.062709][T19371] should_fail_ex+0x414/0x560 [ 287.062733][T19371] _copy_from_iter+0x1db/0x16f0 [ 287.062753][T19371] ? rcu_is_watching+0x15/0xb0 [ 287.062770][T19371] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 287.062793][T19371] ? __pfx__copy_from_iter+0x10/0x10 [ 287.062811][T19371] ? __build_skb_around+0x257/0x3e0 [ 287.062836][T19371] ? skb_put+0x11b/0x210 [ 287.062853][T19371] pfkey_sendmsg+0x230/0x1090 [ 287.062870][T19371] ? mntput_no_expire+0xb9/0x9d0 [ 287.062892][T19371] ? rcu_is_watching+0x15/0xb0 [ 287.062909][T19371] ? __pfx___might_resched+0x10/0x10 [ 287.062926][T19371] ? unwind_next_frame+0xa5/0x2390 [ 287.062948][T19371] ? rcu_is_watching+0x15/0xb0 [ 287.062964][T19371] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 287.062980][T19371] ? rcu_is_watching+0x15/0xb0 [ 287.062998][T19371] ? aa_sk_perm+0x81e/0x950 [ 287.063034][T19371] ? __pfx_aa_sk_perm+0x10/0x10 [ 287.063056][T19371] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 287.063078][T19371] ? aa_sock_msg_perm+0xf1/0x1d0 [ 287.063095][T19371] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.063114][T19371] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 287.063131][T19371] __sock_sendmsg+0x21c/0x270 [ 287.063154][T19371] ____sys_sendmsg+0x505/0x830 [ 287.063174][T19371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.063200][T19371] ? import_iovec+0x74/0xa0 [ 287.063220][T19371] ___sys_sendmsg+0x21f/0x2a0 [ 287.063239][T19371] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.063271][T19371] ? __fget_files+0x2a/0x420 [ 287.063295][T19371] ? __fget_files+0x3a0/0x420 [ 287.063323][T19371] __x64_sys_sendmsg+0x19b/0x260 [ 287.063343][T19371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.063365][T19371] ? __pfx_ksys_write+0x10/0x10 [ 287.063387][T19371] ? rcu_is_watching+0x15/0xb0 [ 287.063405][T19371] ? rcu_is_watching+0x15/0xb0 [ 287.063424][T19371] do_syscall_64+0xfa/0x3b0 [ 287.063447][T19371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.063464][T19371] ? clear_bhb_loop+0x60/0xb0 [ 287.063483][T19371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.063501][T19371] RIP: 0033:0x7fbb3178ebe9 [ 287.063517][T19371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.063534][T19371] RSP: 002b:00007fbb325e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.063554][T19371] RAX: ffffffffffffffda RBX: 00007fbb319b5fa0 RCX: 00007fbb3178ebe9 [ 287.063567][T19371] RDX: 0000000004000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 287.063580][T19371] RBP: 00007fbb325e2090 R08: 0000000000000000 R09: 0000000000000000 [ 287.063592][T19371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.063604][T19371] R13: 00007fbb319b6038 R14: 00007fbb319b5fa0 R15: 00007ffee5b01a38 [ 287.063624][T19371] [ 287.630480][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5263'. [ 287.635425][T19397] netlink: 'syz.3.5262': attribute type 32 has an invalid length. [ 287.669182][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5262'. [ 287.678987][T19397] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 287.723473][T19403] netlink: 'syz.0.5265': attribute type 13 has an invalid length. [ 287.792460][T19403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.814485][T19410] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5268'. [ 287.893011][T19417] netlink: 'syz.4.5271': attribute type 1 has an invalid length. [ 287.904584][T19418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.920288][T19417] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5271'. [ 288.068516][T19435] netlink: 'syz.1.5277': attribute type 23 has an invalid length. [ 288.182774][T19446] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 288.260242][T19455] netlink: 'syz.1.5285': attribute type 10 has an invalid length. [ 288.283055][T19455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5285'. [ 288.361728][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5290'. [ 288.375110][T19465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5290'. [ 288.397995][T19467] bond10 (unregistering): Released all slaves [ 288.477830][T19476] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 288.763471][T19498] dvmrp0: entered allmulticast mode [ 288.912596][T19514] nbd: nbd4 already in use [ 288.918305][T19515] FAULT_INJECTION: forcing a failure. [ 288.918305][T19515] name failslab, interval 1, probability 0, space 0, times 0 [ 288.931071][T19515] CPU: 0 UID: 0 PID: 19515 Comm: syz.2.5311 Not tainted syzkaller #0 PREEMPT(full) [ 288.931095][T19515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.931107][T19515] Call Trace: [ 288.931115][T19515] [ 288.931124][T19515] dump_stack_lvl+0x189/0x250 [ 288.931149][T19515] ? __pfx____ratelimit+0x10/0x10 [ 288.931172][T19515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.931191][T19515] ? __pfx__printk+0x10/0x10 [ 288.931214][T19515] ? rcu_is_watching+0x15/0xb0 [ 288.931234][T19515] should_fail_ex+0x414/0x560 [ 288.931257][T19515] should_failslab+0xa8/0x100 [ 288.931273][T19515] kmem_cache_alloc_noprof+0x73/0x3c0 [ 288.931286][T19515] ? skb_clone+0x212/0x3a0 [ 288.931298][T19515] skb_clone+0x212/0x3a0 [ 288.931309][T19515] bpf_clone_redirect+0xad/0x3d0 [ 288.931325][T19515] ? bpf_test_run+0x197/0x7b0 [ 288.931339][T19515] bpf_prog_e97454e6a39c6b06+0x62/0x6b [ 288.931349][T19515] ? ktime_get+0x3e/0x1f0 [ 288.931359][T19515] ? rcu_is_watching+0x15/0xb0 [ 288.931368][T19515] ? ktime_get+0x3e/0x1f0 [ 288.931378][T19515] ? rcu_is_watching+0x15/0xb0 [ 288.931386][T19515] ? ktime_get+0x3e/0x1f0 [ 288.931397][T19515] ? rcu_is_watching+0x15/0xb0 [ 288.931406][T19515] ? ktime_get+0x3e/0x1f0 [ 288.931416][T19515] ? ktime_get+0x3e/0x1f0 [ 288.931425][T19515] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 288.931438][T19515] ? __local_bh_disable_ip+0xf1/0x190 [ 288.931448][T19515] ? __pfx___cant_migrate+0x10/0x10 [ 288.931457][T19515] ? __local_bh_enable_ip+0x12d/0x1c0 [ 288.931466][T19515] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 288.931476][T19515] ? bpf_test_timer_continue+0x136/0x350 [ 288.931490][T19515] bpf_test_run+0x318/0x7b0 [ 288.931508][T19515] ? __pfx_bpf_test_run+0x10/0x10 [ 288.931546][T19515] ? slab_build_skb+0x273/0x3e0 [ 288.931560][T19515] ? convert___skb_to_skb+0x3d/0x590 [ 288.931573][T19515] bpf_prog_test_run_skb+0xb30/0x1560 [ 288.931589][T19515] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 288.931602][T19515] bpf_prog_test_run+0x2c7/0x340 [ 288.931616][T19515] __sys_bpf+0x581/0x870 [ 288.931628][T19515] ? __pfx___sys_bpf+0x10/0x10 [ 288.931643][T19515] ? ksys_write+0x22a/0x250 [ 288.931656][T19515] ? __pfx_ksys_write+0x10/0x10 [ 288.931667][T19515] ? rcu_is_watching+0x15/0xb0 [ 288.931677][T19515] __x64_sys_bpf+0x7c/0x90 [ 288.931689][T19515] do_syscall_64+0xfa/0x3b0 [ 288.931703][T19515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.931713][T19515] ? clear_bhb_loop+0x60/0xb0 [ 288.931723][T19515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.931733][T19515] RIP: 0033:0x7fc65538ebe9 [ 288.931743][T19515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.931752][T19515] RSP: 002b:00007fc656185038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.931764][T19515] RAX: ffffffffffffffda RBX: 00007fc6555b5fa0 RCX: 00007fc65538ebe9 [ 288.931772][T19515] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 288.931781][T19515] RBP: 00007fc656185090 R08: 0000000000000000 R09: 0000000000000000 [ 288.931787][T19515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.931793][T19515] R13: 00007fc6555b6038 R14: 00007fc6555b5fa0 R15: 00007ffdf36c9488 [ 288.931804][T19515] [ 289.302999][T19517] netlink: 'syz.3.5312': attribute type 2 has an invalid length. [ 289.373874][T19526] syzkaller1: entered promiscuous mode [ 289.384379][T19526] syzkaller1: entered allmulticast mode [ 289.744943][T19549] FAULT_INJECTION: forcing a failure. [ 289.744943][T19549] name failslab, interval 1, probability 0, space 0, times 0 [ 289.759988][T19549] CPU: 1 UID: 0 PID: 19549 Comm: syz.2.5328 Not tainted syzkaller #0 PREEMPT(full) [ 289.760015][T19549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.760026][T19549] Call Trace: [ 289.760033][T19549] [ 289.760042][T19549] dump_stack_lvl+0x189/0x250 [ 289.760066][T19549] ? __pfx____ratelimit+0x10/0x10 [ 289.760089][T19549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.760109][T19549] ? __pfx__printk+0x10/0x10 [ 289.760132][T19549] ? fs_reclaim_acquire+0x7d/0x100 [ 289.760158][T19549] ? rcu_is_watching+0x15/0xb0 [ 289.760175][T19549] ? __pfx___might_resched+0x10/0x10 [ 289.760192][T19549] ? lock_acquire+0x5f/0x360 [ 289.760216][T19549] should_fail_ex+0x414/0x560 [ 289.760240][T19549] should_failslab+0xa8/0x100 [ 289.760264][T19549] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 289.760287][T19549] ? __alloc_skb+0x112/0x2d0 [ 289.760314][T19549] __alloc_skb+0x112/0x2d0 [ 289.760339][T19549] netlink_dump+0x1b7/0xe90 [ 289.760368][T19549] ? __pfx_netlink_dump+0x10/0x10 [ 289.760399][T19549] ? kmem_cache_free+0x18f/0x400 [ 289.760423][T19549] netlink_recvmsg+0x676/0xa30 [ 289.760451][T19549] ? __pfx_netlink_recvmsg+0x10/0x10 [ 289.760480][T19549] ? unwind_next_frame+0xa5/0x2390 [ 289.760501][T19549] ? unwind_next_frame+0xa5/0x2390 [ 289.760520][T19549] ? aa_sock_msg_perm+0xf1/0x1d0 [ 289.760537][T19549] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 289.760556][T19549] ? security_socket_recvmsg+0x7e/0x2e0 [ 289.760576][T19549] ? __pfx_netlink_recvmsg+0x10/0x10 [ 289.760599][T19549] sock_recvmsg+0x22c/0x270 [ 289.760622][T19549] ____sys_recvmsg+0x1c9/0x460 [ 289.760644][T19549] ? __pfx_____sys_recvmsg+0x10/0x10 [ 289.760669][T19549] ? import_iovec+0x74/0xa0 [ 289.760690][T19549] ___sys_recvmsg+0x1b5/0x510 [ 289.760711][T19549] ? __pfx____sys_recvmsg+0x10/0x10 [ 289.760732][T19549] ? __fget_files+0x2a/0x420 [ 289.760755][T19549] ? rcu_is_watching+0x15/0xb0 [ 289.760779][T19549] ? __fget_files+0x3a0/0x420 [ 289.760807][T19549] do_recvmmsg+0x307/0x770 [ 289.760829][T19549] ? __pfx_do_recvmmsg+0x10/0x10 [ 289.760853][T19549] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 289.760886][T19549] __x64_sys_recvmmsg+0x190/0x240 [ 289.760907][T19549] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 289.760925][T19549] ? rcu_is_watching+0x15/0xb0 [ 289.760944][T19549] ? rcu_is_watching+0x15/0xb0 [ 289.760962][T19549] do_syscall_64+0xfa/0x3b0 [ 289.760987][T19549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.761004][T19549] ? clear_bhb_loop+0x60/0xb0 [ 289.761023][T19549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.761041][T19549] RIP: 0033:0x7fc65538ebe9 [ 289.761056][T19549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.761072][T19549] RSP: 002b:00007fc656185038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 289.761093][T19549] RAX: ffffffffffffffda RBX: 00007fc6555b5fa0 RCX: 00007fc65538ebe9 [ 289.761107][T19549] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 289.761120][T19549] RBP: 00007fc656185090 R08: 0000000000000000 R09: 0000000000000000 [ 289.761132][T19549] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 289.761143][T19549] R13: 00007fc6555b6038 R14: 00007fc6555b5fa0 R15: 00007ffdf36c9488 [ 289.761165][T19549] [ 290.238460][T19566] veth1_to_bond: entered allmulticast mode [ 290.303627][T19566] bond0: (slave bond_slave_1): Releasing backup interface [ 290.324890][T19566] veth1_to_bond (unregistering): left allmulticast mode [ 290.367099][T19573] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.375819][T19573] batman_adv: batadv0: Interface activated: team0 [ 290.385026][T19573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.482212][T19579] vlan0: entered allmulticast mode [ 290.496936][T19579] bridge0: entered allmulticast mode [ 290.508077][T19579] bridge6: port 1(vlan0) entered blocking state [ 290.526960][T19579] bridge6: port 1(vlan0) entered disabled state [ 290.544389][T19579] vlan0: entered promiscuous mode [ 290.549433][T19594] __nla_validate_parse: 9 callbacks suppressed [ 290.549451][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5343'. [ 290.578571][T19579] bridge0: entered promiscuous mode [ 290.591523][T19597] validate_nla: 3 callbacks suppressed [ 290.591585][T19597] netlink: 'syz.0.5344': attribute type 10 has an invalid length. [ 290.633264][T19597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5344'. [ 290.674525][T19602] netlink: 'syz.2.5346': attribute type 13 has an invalid length. [ 290.707571][T19605] FAULT_INJECTION: forcing a failure. [ 290.707571][T19605] name failslab, interval 1, probability 0, space 0, times 0 [ 290.730220][T19602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.765384][T19605] CPU: 1 UID: 0 PID: 19605 Comm: syz.3.5347 Not tainted syzkaller #0 PREEMPT(full) [ 290.765410][T19605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.765422][T19605] Call Trace: [ 290.765429][T19605] [ 290.765437][T19605] dump_stack_lvl+0x189/0x250 [ 290.765466][T19605] ? __pfx____ratelimit+0x10/0x10 [ 290.765488][T19605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.765506][T19605] ? __pfx__printk+0x10/0x10 [ 290.765528][T19605] ? __pfx___might_resched+0x10/0x10 [ 290.765545][T19605] ? lock_acquire+0x5f/0x360 [ 290.765571][T19605] should_fail_ex+0x414/0x560 [ 290.765594][T19605] should_failslab+0xa8/0x100 [ 290.765619][T19605] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 290.765642][T19605] ? __alloc_skb+0x112/0x2d0 [ 290.765667][T19605] __alloc_skb+0x112/0x2d0 [ 290.765693][T19605] alloc_skb_with_frags+0xca/0x890 [ 290.765717][T19605] sock_alloc_send_pskb+0x857/0x990 [ 290.765738][T19605] ? unwind_next_frame+0xa5/0x2390 [ 290.765763][T19605] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 290.765781][T19605] ? is_bpf_text_address+0x26/0x2b0 [ 290.765805][T19605] ? rcu_is_watching+0x15/0xb0 [ 290.765824][T19605] ? rcu_is_watching+0x15/0xb0 [ 290.765845][T19605] tun_get_user+0xa43/0x3e20 [ 290.765866][T19605] ? rcu_is_watching+0x15/0xb0 [ 290.765883][T19605] ? lock_release+0x4b/0x3e0 [ 290.765909][T19605] ? aa_file_perm+0x44d/0x1550 [ 290.765926][T19605] ? __pfx_tun_get_user+0x10/0x10 [ 290.765943][T19605] ? _parse_integer_limit+0x1ae/0x1f0 [ 290.765969][T19605] ? kstrtoull+0x12f/0x1d0 [ 290.765995][T19605] ? ref_tracker_alloc+0x318/0x460 [ 290.766017][T19605] ? get_pid_task+0x20/0x1f0 [ 290.766038][T19605] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 290.766062][T19605] ? tun_get+0x1c/0x2f0 [ 290.766077][T19605] ? tun_get+0x1c/0x2f0 [ 290.766092][T19605] ? rcu_is_watching+0x15/0xb0 [ 290.766108][T19605] ? tun_get+0x1c/0x2f0 [ 290.766123][T19605] ? lock_release+0x4b/0x3e0 [ 290.766145][T19605] ? common_file_perm+0x1b5/0x230 [ 290.766171][T19605] ? tun_get+0x1c/0x2f0 [ 290.766189][T19605] tun_chr_write_iter+0x113/0x200 [ 290.766206][T19605] vfs_write+0x5c9/0xb30 [ 290.766230][T19605] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 290.766247][T19605] ? __pfx_vfs_write+0x10/0x10 [ 290.766273][T19605] ? __fget_files+0x2a/0x420 [ 290.766301][T19605] ksys_write+0x145/0x250 [ 290.766322][T19605] ? __pfx_ksys_write+0x10/0x10 [ 290.766352][T19605] ? rcu_is_watching+0x15/0xb0 [ 290.766370][T19605] do_syscall_64+0xfa/0x3b0 [ 290.766394][T19605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.766412][T19605] ? clear_bhb_loop+0x60/0xb0 [ 290.766433][T19605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.766450][T19605] RIP: 0033:0x7fbb3178d69f [ 290.766467][T19605] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 290.766483][T19605] RSP: 002b:00007fbb325e2000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 290.766503][T19605] RAX: ffffffffffffffda RBX: 00007fbb319b5fa0 RCX: 00007fbb3178d69f [ 290.766517][T19605] RDX: 0000000000000f87 RSI: 0000200000001180 RDI: 00000000000000c8 [ 290.766529][T19605] RBP: 00007fbb325e2090 R08: 0000000000000000 R09: 0000000000000000 [ 290.766541][T19605] R10: 0000000000000f87 R11: 0000000000000293 R12: 0000000000000001 [ 290.766553][T19605] R13: 00007fbb319b6038 R14: 00007fbb319b5fa0 R15: 00007ffee5b01a38 [ 290.766574][T19605] [ 291.241590][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5355'. [ 291.531459][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5361'. [ 291.583004][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5368'. [ 292.029999][T19696] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5382'. [ 292.039227][T19696] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5382'. [ 292.048401][T19696] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 292.138544][T19702] netlink: 'syz.3.5384': attribute type 13 has an invalid length. [ 292.154363][T19702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.172643][T19700] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5385'. [ 292.250457][T19709] FAULT_INJECTION: forcing a failure. [ 292.250457][T19709] name failslab, interval 1, probability 0, space 0, times 0 [ 292.265840][T19709] CPU: 0 UID: 0 PID: 19709 Comm: syz.3.5388 Not tainted syzkaller #0 PREEMPT(full) [ 292.265865][T19709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.265875][T19709] Call Trace: [ 292.265882][T19709] [ 292.265890][T19709] dump_stack_lvl+0x189/0x250 [ 292.265914][T19709] ? __pfx____ratelimit+0x10/0x10 [ 292.265937][T19709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.265956][T19709] ? __pfx__printk+0x10/0x10 [ 292.265977][T19709] ? trace_contention_end+0x39/0x120 [ 292.265996][T19709] ? rcu_is_watching+0x15/0xb0 [ 292.266015][T19709] should_fail_ex+0x414/0x560 [ 292.266038][T19709] should_failslab+0xa8/0x100 [ 292.266062][T19709] kmem_cache_alloc_noprof+0x73/0x3c0 [ 292.266081][T19709] ? skb_clone+0x212/0x3a0 [ 292.266101][T19709] skb_clone+0x212/0x3a0 [ 292.266120][T19709] __netlink_deliver_tap+0x404/0x850 [ 292.266149][T19709] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.266172][T19709] netlink_deliver_tap+0x19c/0x1b0 [ 292.266212][T19709] netlink_dump+0x92b/0xe90 [ 292.266239][T19709] ? __pfx_netlink_dump+0x10/0x10 [ 292.266268][T19709] ? kmem_cache_free+0x18f/0x400 [ 292.266292][T19709] netlink_recvmsg+0x676/0xa30 [ 292.266319][T19709] ? __pfx_netlink_recvmsg+0x10/0x10 [ 292.266342][T19709] ? unwind_next_frame+0xa5/0x2390 [ 292.266362][T19709] ? unwind_next_frame+0xa5/0x2390 [ 292.266379][T19709] ? aa_sock_msg_perm+0xf1/0x1d0 [ 292.266395][T19709] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 292.266412][T19709] ? security_socket_recvmsg+0x7e/0x2e0 [ 292.266430][T19709] ? __pfx_netlink_recvmsg+0x10/0x10 [ 292.266451][T19709] sock_recvmsg+0x22c/0x270 [ 292.266471][T19709] ____sys_recvmsg+0x1c9/0x460 [ 292.266491][T19709] ? __pfx_____sys_recvmsg+0x10/0x10 [ 292.266513][T19709] ? import_iovec+0x74/0xa0 [ 292.266533][T19709] ___sys_recvmsg+0x1b5/0x510 [ 292.266552][T19709] ? __pfx____sys_recvmsg+0x10/0x10 [ 292.266573][T19709] ? __fget_files+0x2a/0x420 [ 292.266594][T19709] ? rcu_is_watching+0x15/0xb0 [ 292.266617][T19709] ? __fget_files+0x3a0/0x420 [ 292.266642][T19709] do_recvmmsg+0x307/0x770 [ 292.266661][T19709] ? __pfx_do_recvmmsg+0x10/0x10 [ 292.266679][T19709] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 292.266706][T19709] __x64_sys_recvmmsg+0x190/0x240 [ 292.266725][T19709] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 292.266746][T19709] ? rcu_is_watching+0x15/0xb0 [ 292.266764][T19709] ? rcu_is_watching+0x15/0xb0 [ 292.266782][T19709] do_syscall_64+0xfa/0x3b0 [ 292.266806][T19709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.266824][T19709] ? clear_bhb_loop+0x60/0xb0 [ 292.266843][T19709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.266860][T19709] RIP: 0033:0x7fbb3178ebe9 [ 292.266875][T19709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.266889][T19709] RSP: 002b:00007fbb325e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 292.266907][T19709] RAX: ffffffffffffffda RBX: 00007fbb319b5fa0 RCX: 00007fbb3178ebe9 [ 292.266918][T19709] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 292.266927][T19709] RBP: 00007fbb325e2090 R08: 0000000000000000 R09: 0000000000000000 [ 292.266936][T19709] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 292.266945][T19709] R13: 00007fbb319b6038 R14: 00007fbb319b5fa0 R15: 00007ffee5b01a38 [ 292.266959][T19709] [ 292.772642][T19734] batman_adv: batadv0: Interface deactivated: team0 [ 292.793697][T19734] batman_adv: batadv0: Removing interface: team0 [ 292.815272][T19734] team0 (unregistering): Port device team_slave_0 removed [ 292.841945][T19734] team0 (unregistering): Port device team_slave_1 removed [ 292.859739][T19735] bridge0: port 5(syz_tun) entered blocking state [ 292.867239][T19735] bridge0: port 5(syz_tun) entered disabled state [ 292.873980][T19735] syz_tun: entered allmulticast mode [ 292.880597][T19735] syz_tun: entered promiscuous mode [ 292.887878][T19735] bridge0: port 5(syz_tun) entered blocking state [ 292.894389][T19735] bridge0: port 5(syz_tun) entered listening state [ 292.939669][T19750] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5404'. [ 292.949215][T19750] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5404'. [ 293.250106][T19778] netlink: 'syz.2.5414': attribute type 4 has an invalid length. [ 293.263272][T19778] netlink: 'syz.2.5414': attribute type 4 has an invalid length. [ 293.403039][T19788] tipc: Started in network mode [ 293.410765][T19788] tipc: Node identity 32100ff41336, cluster identity 4711 [ 293.420970][T19788] tipc: Enabled bearer , priority 0 [ 293.443988][T19790] bond10: entered allmulticast mode [ 293.449993][T19790] 8021q: adding VLAN 0 to HW filter on device bond10 [ 293.460996][T19790] bridge0: port 10(bond10) entered blocking state [ 293.467506][T19795] netlink: 'syz.2.5423': attribute type 13 has an invalid length. [ 293.475905][T19790] bridge0: port 10(bond10) entered disabled state [ 293.483451][T19790] bond10: entered promiscuous mode [ 293.489111][T19790] bridge0: port 10(bond10) entered blocking state [ 293.495649][T19790] bridge0: port 10(bond10) entered forwarding state [ 293.502825][T19788] syzkaller0: entered promiscuous mode [ 293.510656][T19788] syzkaller0: entered allmulticast mode [ 293.523299][T19795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.544433][ T36] bridge0: port 10(bond10) entered disabled state [ 293.586955][T19788] tipc: Resetting bearer [ 293.620116][T19787] tipc: Resetting bearer [ 293.663976][T19787] tipc: Disabling bearer [ 293.712387][T19809] FAULT_INJECTION: forcing a failure. [ 293.712387][T19809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.726423][T19809] CPU: 0 UID: 0 PID: 19809 Comm: syz.4.5428 Not tainted syzkaller #0 PREEMPT(full) [ 293.726449][T19809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.726460][T19809] Call Trace: [ 293.726467][T19809] [ 293.726475][T19809] dump_stack_lvl+0x189/0x250 [ 293.726501][T19809] ? __pfx____ratelimit+0x10/0x10 [ 293.726524][T19809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.726544][T19809] ? __pfx__printk+0x10/0x10 [ 293.726565][T19809] ? __might_fault+0xb0/0x130 [ 293.726591][T19809] ? rcu_is_watching+0x15/0xb0 [ 293.726610][T19809] should_fail_ex+0x414/0x560 [ 293.726633][T19809] _copy_from_user+0x2d/0xb0 [ 293.726653][T19809] ___sys_recvmsg+0x12e/0x510 [ 293.726674][T19809] ? __pfx____sys_recvmsg+0x10/0x10 [ 293.726695][T19809] ? __fget_files+0x2a/0x420 [ 293.726727][T19809] ? rcu_is_watching+0x15/0xb0 [ 293.726744][T19809] ? lock_release+0x4b/0x3e0 [ 293.726768][T19809] ? __might_fault+0xcc/0x130 [ 293.726791][T19809] do_recvmmsg+0x307/0x770 [ 293.726812][T19809] ? __pfx_do_recvmmsg+0x10/0x10 [ 293.726837][T19809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 293.726870][T19809] __x64_sys_recvmmsg+0x190/0x240 [ 293.726890][T19809] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 293.726908][T19809] ? rcu_is_watching+0x15/0xb0 [ 293.726927][T19809] ? rcu_is_watching+0x15/0xb0 [ 293.726946][T19809] do_syscall_64+0xfa/0x3b0 [ 293.726970][T19809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.726988][T19809] ? clear_bhb_loop+0x60/0xb0 [ 293.727014][T19809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.727032][T19809] RIP: 0033:0x7f1f6018ebe9 [ 293.727048][T19809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.727065][T19809] RSP: 002b:00007f1f5e3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 293.727085][T19809] RAX: ffffffffffffffda RBX: 00007f1f603b5fa0 RCX: 00007f1f6018ebe9 [ 293.727099][T19809] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 293.727112][T19809] RBP: 00007f1f5e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.727124][T19809] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 293.727136][T19809] R13: 00007f1f603b6038 R14: 00007f1f603b5fa0 R15: 00007ffc7e82c988 [ 293.727157][T19809] [ 293.885879][T19820] bridge0: port 11(syz_tun) entered blocking state [ 293.969719][T19820] bridge0: port 11(syz_tun) entered disabled state [ 293.977101][T19820] syz_tun: entered allmulticast mode [ 293.983834][T19820] syz_tun: entered promiscuous mode [ 293.991904][T19820] bridge0: port 11(syz_tun) entered blocking state [ 293.998535][T19820] bridge0: port 11(syz_tun) entered forwarding state [ 294.032437][T19822] macvtap1: entered promiscuous mode [ 294.038535][T19822] vlan0: entered promiscuous mode [ 294.043818][T19822] macvtap1: entered allmulticast mode [ 294.049462][T19822] vlan0: entered allmulticast mode [ 294.054585][T19822] veth0_vlan: entered allmulticast mode [ 294.138621][T19837] batman_adv: batadv0: Interface deactivated: team0 [ 294.145906][T19837] batman_adv: batadv0: Removing interface: team0 [ 294.155915][T19837] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 294.292656][T19851] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 294.303280][T19851] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 294.313094][T19851] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 294.651644][T19875] FAULT_INJECTION: forcing a failure. [ 294.651644][T19875] name failslab, interval 1, probability 0, space 0, times 0 [ 294.673459][T19877] nbd: illegal input index -8454144 [ 294.715458][T19875] CPU: 0 UID: 0 PID: 19875 Comm: syz.4.5457 Not tainted syzkaller #0 PREEMPT(full) [ 294.715485][T19875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.715496][T19875] Call Trace: [ 294.715503][T19875] [ 294.715511][T19875] dump_stack_lvl+0x189/0x250 [ 294.715537][T19875] ? __pfx____ratelimit+0x10/0x10 [ 294.715558][T19875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.715576][T19875] ? __pfx__printk+0x10/0x10 [ 294.715597][T19875] ? fs_reclaim_acquire+0x7d/0x100 [ 294.715621][T19875] ? rcu_is_watching+0x15/0xb0 [ 294.715637][T19875] ? __pfx___might_resched+0x10/0x10 [ 294.715652][T19875] ? lock_acquire+0x5f/0x360 [ 294.715674][T19875] should_fail_ex+0x414/0x560 [ 294.715698][T19875] should_failslab+0xa8/0x100 [ 294.715721][T19875] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 294.715743][T19875] ? __alloc_skb+0x112/0x2d0 [ 294.715769][T19875] __alloc_skb+0x112/0x2d0 [ 294.715792][T19875] netlink_dump+0x1b7/0xe90 [ 294.715820][T19875] ? __pfx_netlink_dump+0x10/0x10 [ 294.715848][T19875] ? kmem_cache_free+0x18f/0x400 [ 294.715872][T19875] netlink_recvmsg+0x676/0xa30 [ 294.715899][T19875] ? __pfx_netlink_recvmsg+0x10/0x10 [ 294.715922][T19875] ? unwind_next_frame+0xa5/0x2390 [ 294.715943][T19875] ? unwind_next_frame+0xa5/0x2390 [ 294.715960][T19875] ? aa_sock_msg_perm+0xf1/0x1d0 [ 294.715976][T19875] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 294.715993][T19875] ? security_socket_recvmsg+0x7e/0x2e0 [ 294.716013][T19875] ? __pfx_netlink_recvmsg+0x10/0x10 [ 294.716035][T19875] sock_recvmsg_nosec+0x183/0x1c0 [ 294.716058][T19875] ____sys_recvmsg+0x3aa/0x460 [ 294.716080][T19875] ? __pfx_____sys_recvmsg+0x10/0x10 [ 294.716104][T19875] ? import_iovec+0x74/0xa0 [ 294.716133][T19875] ___sys_recvmsg+0x1b5/0x510 [ 294.716154][T19875] ? __pfx____sys_recvmsg+0x10/0x10 [ 294.716174][T19875] ? __fget_files+0x2a/0x420 [ 294.716206][T19875] ? rcu_is_watching+0x15/0xb0 [ 294.716224][T19875] ? lock_release+0x4b/0x3e0 [ 294.716246][T19875] ? __might_fault+0xcc/0x130 [ 294.716269][T19875] do_recvmmsg+0x307/0x770 [ 294.716290][T19875] ? __pfx_do_recvmmsg+0x10/0x10 [ 294.716313][T19875] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.716347][T19875] __x64_sys_recvmmsg+0x190/0x240 [ 294.716367][T19875] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 294.716384][T19875] ? rcu_is_watching+0x15/0xb0 [ 294.716403][T19875] ? rcu_is_watching+0x15/0xb0 [ 294.716421][T19875] do_syscall_64+0xfa/0x3b0 [ 294.716446][T19875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.716463][T19875] ? clear_bhb_loop+0x60/0xb0 [ 294.716482][T19875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.716502][T19875] RIP: 0033:0x7f1f6018ebe9 [ 294.716519][T19875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.716535][T19875] RSP: 002b:00007f1f5e3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 294.716555][T19875] RAX: ffffffffffffffda RBX: 00007f1f603b5fa0 RCX: 00007f1f6018ebe9 [ 294.716568][T19875] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 294.716580][T19875] RBP: 00007f1f5e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.716591][T19875] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 294.716603][T19875] R13: 00007f1f603b6038 R14: 00007f1f603b5fa0 R15: 00007ffc7e82c988 [ 294.716623][T19875] [ 294.751485][T19888] netlink: 'syz.0.5460': attribute type 13 has an invalid length. [ 294.838230][T19893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.089871][T19888] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.104284][T19888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.402419][T19920] can: request_module (can-proto-4) failed. [ 295.467887][T19935] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 295.831293][T19958] FAULT_INJECTION: forcing a failure. [ 295.831293][T19958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.848199][T19958] CPU: 0 UID: 0 PID: 19958 Comm: syz.0.5489 Not tainted syzkaller #0 PREEMPT(full) [ 295.848226][T19958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.848237][T19958] Call Trace: [ 295.848245][T19958] [ 295.848252][T19958] dump_stack_lvl+0x189/0x250 [ 295.848277][T19958] ? __pfx____ratelimit+0x10/0x10 [ 295.848301][T19958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.848322][T19958] ? __pfx__printk+0x10/0x10 [ 295.848343][T19958] ? __might_fault+0xb0/0x130 [ 295.848370][T19958] ? rcu_is_watching+0x15/0xb0 [ 295.848388][T19958] should_fail_ex+0x414/0x560 [ 295.848413][T19958] _copy_from_user+0x2d/0xb0 [ 295.848433][T19958] kstrtouint_from_user+0xc4/0x170 [ 295.848458][T19958] ? __might_fault+0xb0/0x130 [ 295.848480][T19958] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 295.848509][T19958] ? vfs_write+0x211/0xb30 [ 295.848529][T19958] ? rcu_is_watching+0x15/0xb0 [ 295.848547][T19958] proc_fail_nth_write+0x88/0x200 [ 295.848567][T19958] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 295.848585][T19958] ? security_file_permission+0x75/0x290 [ 295.848613][T19958] ? preempt_count_add+0x91/0x1a0 [ 295.848659][T19958] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 295.848679][T19958] vfs_write+0x27b/0xb30 [ 295.848705][T19958] ? __pfx_vfs_write+0x10/0x10 [ 295.848729][T19958] ? __fget_files+0x3a0/0x420 [ 295.848754][T19958] ? __fget_files+0x2a/0x420 [ 295.848780][T19958] ksys_write+0x145/0x250 [ 295.848803][T19958] ? __pfx_ksys_write+0x10/0x10 [ 295.848827][T19958] ? rcu_is_watching+0x15/0xb0 [ 295.848845][T19958] do_syscall_64+0xfa/0x3b0 [ 295.848870][T19958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.848888][T19958] ? clear_bhb_loop+0x60/0xb0 [ 295.848907][T19958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.848925][T19958] RIP: 0033:0x7f1379f8d69f [ 295.848941][T19958] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 295.848957][T19958] RSP: 002b:00007f137ae20030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 295.848978][T19958] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1379f8d69f [ 295.848991][T19958] RDX: 0000000000000001 RSI: 00007f137ae200a0 RDI: 0000000000000003 [ 295.849004][T19958] RBP: 00007f137ae20090 R08: 0000000000000000 R09: 0000000000000000 [ 295.849015][T19958] R10: 0000000000000f87 R11: 0000000000000293 R12: 0000000000000001 [ 295.849033][T19958] R13: 00007f137a1b6038 R14: 00007f137a1b5fa0 R15: 00007fff49189148 [ 295.849054][T19958] [ 296.271726][T19974] vxcan1: entered promiscuous mode [ 296.277233][T19974] vxcan1: entered allmulticast mode [ 296.428056][T19990] __nla_validate_parse: 15 callbacks suppressed [ 296.428074][T19990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5504'. [ 296.466360][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5503'. [ 296.473128][T19990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5504'. [ 296.563564][T20005] FAULT_INJECTION: forcing a failure. [ 296.563564][T20005] name failslab, interval 1, probability 0, space 0, times 0 [ 296.581900][T20007] bridge0: port 6(syz_tun) entered blocking state [ 296.590528][T20007] bridge0: port 6(syz_tun) entered disabled state [ 296.604154][T20005] CPU: 1 UID: 0 PID: 20005 Comm: syz.1.5508 Not tainted syzkaller #0 PREEMPT(full) [ 296.604181][T20005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.604192][T20005] Call Trace: [ 296.604198][T20005] [ 296.604205][T20005] dump_stack_lvl+0x189/0x250 [ 296.604228][T20005] ? __pfx____ratelimit+0x10/0x10 [ 296.604247][T20005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.604263][T20005] ? __pfx__printk+0x10/0x10 [ 296.604281][T20005] ? fs_reclaim_acquire+0x7d/0x100 [ 296.604302][T20005] ? rcu_is_watching+0x15/0xb0 [ 296.604308][T20007] syz_tun: entered allmulticast mode [ 296.604319][T20005] ? __pfx___might_resched+0x10/0x10 [ 296.604336][T20005] ? lock_acquire+0x5f/0x360 [ 296.604355][T20005] should_fail_ex+0x414/0x560 [ 296.604377][T20005] should_failslab+0xa8/0x100 [ 296.604400][T20005] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 296.604424][T20005] ? __alloc_skb+0x112/0x2d0 [ 296.604450][T20005] __alloc_skb+0x112/0x2d0 [ 296.604475][T20005] netlink_sendmsg+0x5c6/0xb30 [ 296.604504][T20005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.604528][T20005] ? aa_sock_msg_perm+0xf1/0x1d0 [ 296.604546][T20005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.604564][T20005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.604588][T20005] __sock_sendmsg+0x21c/0x270 [ 296.604610][T20005] ____sys_sendmsg+0x505/0x830 [ 296.604629][T20005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.604650][T20005] ? import_iovec+0x74/0xa0 [ 296.604671][T20005] ___sys_sendmsg+0x21f/0x2a0 [ 296.604689][T20005] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.604721][T20005] ? __fget_files+0x2a/0x420 [ 296.604744][T20005] ? __fget_files+0x3a0/0x420 [ 296.604772][T20005] __x64_sys_sendmsg+0x19b/0x260 [ 296.604791][T20005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.604812][T20005] ? __pfx_ksys_write+0x10/0x10 [ 296.604832][T20005] ? rcu_is_watching+0x15/0xb0 [ 296.604850][T20005] ? rcu_is_watching+0x15/0xb0 [ 296.604869][T20005] do_syscall_64+0xfa/0x3b0 [ 296.604893][T20005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.604910][T20005] ? clear_bhb_loop+0x60/0xb0 [ 296.604929][T20005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.604946][T20005] RIP: 0033:0x7f7dc3f8ebe9 [ 296.604962][T20005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.604977][T20005] RSP: 002b:00007f7dc4e3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.605004][T20005] RAX: ffffffffffffffda RBX: 00007f7dc41b5fa0 RCX: 00007f7dc3f8ebe9 [ 296.605017][T20005] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 296.605028][T20005] RBP: 00007f7dc4e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 296.605039][T20005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.605050][T20005] R13: 00007f7dc41b6038 R14: 00007f7dc41b5fa0 R15: 00007ffdda850b58 [ 296.605071][T20005] [ 296.736475][ C0] ------------[ cut here ]------------ [ 296.736490][ C0] ODEBUG: free active (active state 0) object: ffff8880566ae490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 296.737141][ C0] WARNING: CPU: 0 PID: 20007 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 296.737179][ C0] Modules linked in: [ 296.737199][ C0] CPU: 0 UID: 0 PID: 20007 Comm: syz.2.5505 Not tainted syzkaller #0 PREEMPT(full) [ 296.737223][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.737237][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 296.737264][ C0] Code: 4c 89 ff e8 97 e8 52 fd 4d 8b 0f 48 c7 c7 20 40 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 1e b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 8a d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 296.737284][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 296.737303][ C0] RAX: a992f44c8ad18900 RBX: dffffc0000000000 RCX: ffff888056565a00 [ 296.737321][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 296.737335][ C0] RBP: 0000000000000000 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 296.737352][ C0] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffffffff8a6c9760 [ 296.737368][ C0] R13: ffffffff8be341a0 R14: ffff8880566ae490 R15: ffffffff8b8cdfa0 [ 296.737385][ C0] FS: 00007fc6561646c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 296.737404][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.737419][ C0] CR2: 00007f1f60ee56c0 CR3: 000000004e37a000 CR4: 00000000003526f0 [ 296.737438][ C0] Call Trace: [ 296.737447][ C0] [ 296.737459][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 296.737490][ C0] ? do_raw_spin_lock+0x121/0x290 [ 296.737518][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 296.737545][ C0] kfree+0x112/0x440 [ 296.737573][ C0] rose_timer_expiry+0x4cb/0x600 [ 296.737601][ C0] call_timer_fn+0x17e/0x5f0 [ 296.737629][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 296.737656][ C0] ? call_timer_fn+0xbe/0x5f0 [ 296.737685][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 296.737718][ C0] ? rcu_is_watching+0x15/0xb0 [ 296.737739][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 296.737763][ C0] __run_timer_base+0x61a/0x860 [ 296.737782][ C0] ? ktime_get+0x3e/0x1f0 [ 296.737804][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 296.737826][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 296.737856][ C0] run_timer_softirq+0xb7/0x180 [ 296.737882][ C0] handle_softirqs+0x283/0x870 [ 296.737904][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 296.737927][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 296.737950][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 296.737978][ C0] __irq_exit_rcu+0xca/0x1f0 [ 296.738004][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 296.738029][ C0] irq_exit_rcu+0x9/0x30 [ 296.738048][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 296.738076][ C0] [ 296.738084][ C0] [ 296.738093][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.738116][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 296.738142][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 15 49 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 06 49 1f 00 eb 06 e8 ff 48 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 3a b2 82 00 48 8b 1b 48 8b 44 24 [ 296.738162][ C0] RSP: 0018:ffffc9000b287520 EFLAGS: 00000287 [ 296.738181][ C0] RAX: 1ffffffff1d367d7 RBX: ffffffff8e9b3eb8 RCX: 0000000000080000 [ 296.738195][ C0] RDX: ffffc9001d968000 RSI: 000000000002f941 RDI: 000000000002f942 [ 296.738209][ C0] RBP: ffffc9000b287670 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 296.738223][ C0] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: dffffc0000000000 [ 296.738236][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b3e60 [ 296.738262][ C0] ? console_flush_all+0x13a/0xc40 [ 296.738289][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 296.738312][ C0] ? lock_acquire+0x5f/0x360 [ 296.738347][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 296.738377][ C0] console_unlock+0xc4/0x270 [ 296.738418][ C0] ? __pfx_console_unlock+0x10/0x10 [ 296.738440][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 296.738467][ C0] vprintk_emit+0x5b7/0x7a0 [ 296.738488][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 296.738510][ C0] ? rcu_is_watching+0x15/0xb0 [ 296.738529][ C0] ? rcu_is_watching+0x15/0xb0 [ 296.738551][ C0] _printk+0xcf/0x120 [ 296.738578][ C0] ? rcu_is_watching+0x15/0xb0 [ 296.738600][ C0] ? __pfx__printk+0x10/0x10 [ 296.738630][ C0] ? __netdev_printk+0x365/0x4d0 [ 296.738659][ C0] netdev_info+0x10a/0x160 [ 296.738693][ C0] ? __pfx_netdev_info+0x10/0x10 [ 296.738721][ C0] ? ip6_route_dev_notify+0x9a/0x5b0 [ 296.738745][ C0] ? notifier_call_chain+0x3bf/0x3e0 [ 296.738766][ C0] netif_set_allmulti+0x1b8/0x380 [ 296.738788][ C0] dev_set_allmulti+0x12b/0x260 [ 296.738807][ C0] br_add_if+0x313/0xec0 [ 296.738834][ C0] ? apparmor_capable+0x137/0x1b0 [ 296.738858][ C0] ? bpf_lsm_capable+0x9/0x20 [ 296.738889][ C0] br_ioctl_stub+0x6aa/0xc80 [ 296.738911][ C0] ? __mutex_lock+0x335/0x1350 [ 296.738941][ C0] ? __pfx_br_ioctl_stub+0x10/0x10 [ 296.738962][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 296.738989][ C0] ? sock_ioctl+0x4b4/0x790 [ 296.739024][ C0] ? do_futex+0x395/0x420 [ 296.739054][ C0] ? __pfx_br_ioctl_stub+0x10/0x10 [ 296.739073][ C0] sock_ioctl+0x4d5/0x790 [ 296.739092][ C0] ? lock_release+0x4b/0x3e0 [ 296.739120][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 296.739143][ C0] ? __fget_files+0x2a/0x420 [ 296.739173][ C0] ? __fget_files+0x3a0/0x420 [ 296.739202][ C0] ? __fget_files+0x2a/0x420 [ 296.739230][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 296.739254][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 296.739277][ C0] __se_sys_ioctl+0xfc/0x170 [ 296.739299][ C0] do_syscall_64+0xfa/0x3b0 [ 296.739326][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.739345][ C0] ? clear_bhb_loop+0x60/0xb0 [ 296.739366][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.739386][ C0] RIP: 0033:0x7fc65538ebe9 [ 296.739404][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.739423][ C0] RSP: 002b:00007fc656164038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.739445][ C0] RAX: ffffffffffffffda RBX: 00007fc6555b6090 RCX: 00007fc65538ebe9 [ 296.739461][ C0] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000003 [ 296.739476][ C0] RBP: 00007fc655411e19 R08: 0000000000000000 R09: 0000000000000000 [ 296.739490][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.739504][ C0] R13: 00007fc6555b6128 R14: 00007fc6555b6090 R15: 00007ffdf36c9488 [ 296.739528][ C0] [ 296.739539][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 296.739555][ C0] CPU: 0 UID: 0 PID: 20007 Comm: syz.2.5505 Not tainted syzkaller #0 PREEMPT(full) [ 296.739579][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.739593][ C0] Call Trace: [ 296.739600][ C0] [ 296.739608][ C0] dump_stack_lvl+0x99/0x250 [ 296.739633][ C0] ? __asan_memcpy+0x40/0x70 [ 296.739655][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.739678][ C0] ? __pfx__printk+0x10/0x10 [ 296.739711][ C0] vpanic+0x281/0x750 [ 296.739732][ C0] ? __pfx__printk+0x10/0x10 [ 296.739757][ C0] ? __pfx_vpanic+0x10/0x10 [ 296.739779][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 296.739813][ C0] panic+0xb9/0xc0 [ 296.739834][ C0] ? __pfx_panic+0x10/0x10 [ 296.739863][ C0] __warn+0x31b/0x4b0 [ 296.739884][ C0] ? debug_print_object+0x16b/0x1e0 [ 296.739911][ C0] ? debug_print_object+0x16b/0x1e0 [ 296.739934][ C0] report_bug+0x2be/0x4f0 [ 296.739959][ C0] ? debug_print_object+0x16b/0x1e0 [ 296.739983][ C0] ? debug_print_object+0x16b/0x1e0 [ 296.740012][ C0] ? debug_print_object+0x16d/0x1e0 [ 296.740036][ C0] handle_bug+0x84/0x160 [ 296.740056][ C0] exc_invalid_op+0x1a/0x50 [ 296.740073][ C0] asm_exc_invalid_op+0x1a/0x20 [ 296.740089][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 296.740111][ C0] Code: 4c 89 ff e8 97 e8 52 fd 4d 8b 0f 48 c7 c7 20 40 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 1e b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 8a d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 296.740127][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292 [ 296.740144][ C0] RAX: a992f44c8ad18900 RBX: dffffc0000000000 RCX: ffff888056565a00 [ 296.740160][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 296.740174][ C0] RBP: 0000000000000000 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 296.740191][ C0] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffffffff8a6c9760 [ 296.740206][ C0] R13: ffffffff8be341a0 R14: ffff8880566ae490 R15: ffffffff8b8cdfa0 [ 296.740224][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 296.740252][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 296.740282][ C0] ? do_raw_spin_lock+0x121/0x290 [ 296.740310][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 296.740335][ C0] kfree+0x112/0x440 [ 296.740363][ C0] rose_timer_expiry+0x4cb/0x600 [ 296.740392][ C0] call_timer_fn+0x17e/0x5f0 [ 296.740421][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 296.740443][ C0] ? call_timer_fn+0xbe/0x5f0 [ 296.740467][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 296.740500][ C0] ? rcu_is_watching+0x15/0xb0 [ 296.740519][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 296.740547][ C0] __run_timer_base+0x61a/0x860 [ 296.740573][ C0] ? ktime_get+0x3e/0x1f0 [ 296.740601][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 296.740627][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 296.740660][ C0] run_timer_softirq+0xb7/0x180 [ 296.740687][ C0] handle_softirqs+0x283/0x870 [ 296.740710][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 296.740733][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 296.740756][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 296.740783][ C0] __irq_exit_rcu+0xca/0x1f0 [ 296.740804][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 296.740829][ C0] irq_exit_rcu+0x9/0x30 [ 296.740848][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 296.740874][ C0] [ 296.740882][ C0] [ 296.740889][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.740908][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 296.740934][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 15 49 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 06 49 1f 00 eb 06 e8 ff 48 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 3a b2 82 00 48 8b 1b 48 8b 44 24 [ 296.740951][ C0] RSP: 0018:ffffc9000b287520 EFLAGS: 00000287 [ 296.740970][ C0] RAX: 1ffffffff1d367d7 RBX: ffffffff8e9b3eb8 RCX: 0000000000080000 [ 296.740984][ C0] RDX: ffffc9001d968000 RSI: 000000000002f941 RDI: 000000000002f942 [ 296.741007][ C0] RBP: ffffc9000b287670 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 296.741022][ C0] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: dffffc0000000000 [ 296.741038][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b3e60 [ 296.741062][ C0] ? console_flush_all+0x13a/0xc40 [ 296.741088][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 296.741110][ C0] ? lock_acquire+0x5f/0x360 [ 296.741140][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 296.741168][ C0] console_unlock+0xc4/0x270 [ 296.741191][ C0] ? __pfx_console_unlock+0x10/0x10 [ 296.741214][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 296.741243][ C0] vprintk_emit+0x5b7/0x7a0 [ 296.741270][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 296.741293][ C0] ? rcu_is_watching+0x15/0xb0 [ 296.741313][ C0] ? rcu_is_watching+0x15/0xb0 [ 296.741336][ C0] _printk+0xcf/0x120 [ 296.741363][ C0] ? rcu_is_watching+0x15/0xb0 [ 296.741385][ C0] ? __pfx__printk+0x10/0x10 [ 296.741415][ C0] ? __netdev_printk+0x365/0x4d0 [ 296.741442][ C0] netdev_info+0x10a/0x160 [ 296.741474][ C0] ? __pfx_netdev_info+0x10/0x10 [ 296.741505][ C0] ? ip6_route_dev_notify+0x9a/0x5b0 [ 296.741528][ C0] ? notifier_call_chain+0x3bf/0x3e0 [ 296.741551][ C0] netif_set_allmulti+0x1b8/0x380 [ 296.741573][ C0] dev_set_allmulti+0x12b/0x260 [ 296.741593][ C0] br_add_if+0x313/0xec0 [ 296.741621][ C0] ? apparmor_capable+0x137/0x1b0 [ 296.741646][ C0] ? bpf_lsm_capable+0x9/0x20 [ 296.741677][ C0] br_ioctl_stub+0x6aa/0xc80 [ 296.741696][ C0] ? __mutex_lock+0x335/0x1350 [ 296.741727][ C0] ? __pfx_br_ioctl_stub+0x10/0x10 [ 296.741745][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 296.741769][ C0] ? sock_ioctl+0x4b4/0x790 [ 296.741793][ C0] ? do_futex+0x395/0x420 [ 296.741823][ C0] ? __pfx_br_ioctl_stub+0x10/0x10 [ 296.741843][ C0] sock_ioctl+0x4d5/0x790 [ 296.741866][ C0] ? lock_release+0x4b/0x3e0 [ 296.741894][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 296.741919][ C0] ? __fget_files+0x2a/0x420 [ 296.741949][ C0] ? __fget_files+0x3a0/0x420 [ 296.741977][ C0] ? __fget_files+0x2a/0x420 [ 296.742016][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 296.742039][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 296.742060][ C0] __se_sys_ioctl+0xfc/0x170 [ 296.742084][ C0] do_syscall_64+0xfa/0x3b0 [ 296.742115][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.742136][ C0] ? clear_bhb_loop+0x60/0xb0 [ 296.742159][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.742178][ C0] RIP: 0033:0x7fc65538ebe9 [ 296.742194][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.742211][ C0] RSP: 002b:00007fc656164038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.742232][ C0] RAX: ffffffffffffffda RBX: 00007fc6555b6090 RCX: 00007fc65538ebe9 [ 296.742247][ C0] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000003 [ 296.742259][ C0] RBP: 00007fc655411e19 R08: 0000000000000000 R09: 0000000000000000 [ 296.742272][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.742284][ C0] R13: 00007fc6555b6128 R14: 00007fc6555b6090 R15: 00007ffdf36c9488 [ 296.742307][ C0] [ 296.742445][ C0] Kernel Offset: disabled