last executing test programs: 5.789340796s ago: executing program 1 (id=7298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x200a, 0x6, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000001c0)="800000800000210ee7decd7a00d94069ffffff22a7b3811ca510e2c084de4aae1ba527ef73d0276802bd1832a9d9609cd2c8f6310ce5cad17f7f1377240256b0e2c2c48f7246f553026e883be1b2b988350764815d3307000000", 0x55, 0x0, &(0x7f00000000c0)={0x11, 0xf8, r8, 0x1, 0xc}, 0xfffffc4a) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, r10, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x4, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4de4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8619}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40815}, 0x20000040) 5.340973189s ago: executing program 1 (id=7306): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}, 0x50}, 0x1, 0x7}, 0x20000030) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x8000) 4.929995756s ago: executing program 1 (id=7309): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x1000ffff, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4003, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) 3.956271596s ago: executing program 1 (id=7317): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) sendto$isdn(0xffffffffffffffff, 0x0, 0xfe, 0x4800, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$nci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x80, 0x4) 3.149825182s ago: executing program 4 (id=7321): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r6, 0x25, 0x2, @void}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r7, &(0x7f0000000a80), 0x0}, 0x20) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="200500"/18], 0x12) 3.003827933s ago: executing program 3 (id=7323): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000020, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x86c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.951105559s ago: executing program 4 (id=7324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911004000000fef0ffffff0000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r0, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xac, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) unshare(0x20000400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) 2.863114001s ago: executing program 3 (id=7326): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x1}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.862599811s ago: executing program 4 (id=7327): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x290, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x13}]}}}, @IFLA_VF_PORTS={0x24c, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "92143884c94c7574a24110ae587fb982"}, @IFLA_PORT_VF={0x8, 0x1, 0xfff}, @IFLA_PORT_PROFILE={0x7, 0x2, ',*\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '#\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, ':\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xe063}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7b3971e13a5f2c8b4fe09901f50ce41d"}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "9ac01d289fd0f0a421380ab5b3eacff7"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9ab43144a6051abd6a79aeb9ec454839"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4936ff18c00cc6ee8ab200b90d1c3ae7"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a2141b008c4d1d820a8d3ab157a790cc"}, @IFLA_PORT_PROFILE={0x7, 0x2, '\'\\\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @IFLA_PORT_VF={0x8, 0x1, 0x9f}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "03d3c1ea19df655e887a685435ce7ee1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "180dbd4a14942e0c1f6db2ca2f5e7669"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}, @IFLA_PORT_PROFILE={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffc}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "264ad162b9e40ad817dfc19e35819e39"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xf8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "782eeba4c54e2015d544a87cac03e8e1"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "67df9e70537fe40280a73acdc2428993"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '@.]\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "26560d9bb109053fbcef3beeb5360068"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "10ec41da31a06cbe4979ff10e501af61"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7b914edd02c6e253c29b7b5c0aae08e2"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b5a4c57bc74ee9d35e78c4c1956fc84b"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffd}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0f92a536838008e40153c60aabdf7bb1"}]}]}]}, 0x290}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x1c}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000082000016085bee07c8b07976e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a7aadf991fd2e9ba10000c0a9000000000000000000000100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r10) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x3e, 0x3c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty, {[@ssrr={0x89, 0x3, 0x55}, @timestamp_prespec={0x44, 0x4, 0x1a, 0x3, 0x9}]}}, {0x0, 0x0, 0x20, 0x0, @opaque="ae87490ce97a93d62fcb4444d79df0bdf6d5a20310abf827"}}}}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000180)=r5, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 2.832153232s ago: executing program 3 (id=7329): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffde6, &(0x7f0000000100)={&(0x7f0000001000)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@nested={0x0, 0x11b, 0x0, 0x1, [@generic="996fb09acf86159c154946ba15a088a5fc9bb98c18210624cbe69c8497bf17b949568e66ac8e800e60619038deee299e7c29f86534815f7fadcf9d44da4a850e65d5525f2a73386421a4b39a36549ec1db6b4197680d38f1edf45ad4ed2cda10df08ff7a5567", @typed={0x0, 0x56, 0x0, 0x0, @u64=0x180000000000000}, @typed={0x0, 0x24, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x0, 0x14, 0x0, 0x1, [@nested={0x0, 0xfa}, @nested={0x0, 0xb8}, @generic="ca02c2beac57e4d4ee66cd7c60757de9d9261b70425a8bbde2a6f00bfdc9bf614b61d7712e7d5e4503e7e93e5f3e9b0722ea96ff78"]}, @nested={0x0, 0x13f, 0x0, 0x1, [@generic="f672ad96beb25b858ec51a3db695f05215ea2035d2e509b3546c7c764ecf7760466b72fb0eeed05ac7d52defae20ee3306307ebfc1e949f8ff7ff8d6029ec9da1e82273ba1b2fc5b105a35714fd293f13ad310c8187bed800e449685528ff82593afee1128bfd23bc045f7979e406c0d2bcc1067bcc93a784ec35a3aa1c165958d07488cebfb4c349e8b6fe3555fd0691969ad58d67a823cd5f508459cab46af0fde322d792f42c689cb8edadcfa5e7d819f494961fecff9094594b024bd8ab96424a04eb164cfac60d335ca935d5bc9bbee186a91bea64c3a8ee65c6858428bc8d34742602a4367d3f5c134ee55adb2aa82b5b12b3835cd4e15cf89112498e482a44ece582adeeba2630ef9ac1f07c1ab5c23c5a08c5d84fbaa1e982999d1657dfbbef654aa946fa274365eaafdf6f09ee6670194c4f0c0b8716dc10ce6777284ce6b11be17368905bd00ce9ff35d5f30fe8cc15ca3cb7c007bcda8f720f6ddfe2a34b9dfde8a8ae6798ac850a737bef735168880d959a2c2d5e20de0e4fa81adb4720d037655539954e826213e46fc55a5c092e37962f8c21e9ad045e597ae5842082981cedfb7bd3475b5143af020fa95ed9803cb8f6c39c130af7e8f9495d11f6025b5a2953706423681a47e9278e63f357f56b0de2514fe281e7d7e59e1849cbd5a15f8f432de5abcab8873d5c8be24ad2726a94eff8d8b287700d9f7869c91a389127d586b5981fd18bea189878e730f03528e6d7bad2bb644c4aee2c66e0340f8b4075adae47028087150b542a8d8867cd8fa9a9f6c6c3497aa0cd4681f1b44ac047cad2e20f60c74e4f77d77ebedd1cc529cd71e17216fa2b1a61554d1de944a74b72859421bb8833ee7720bc81e5f079fe892dff662efd897c7087d2a6930247650332178efc5912ecf1701b22b7334f74d6f55d3922aeac5ea18657e7ce06244dfd57253f790e9a2d8d6d282680b20a56f4feefb54bac7450d5f83d0e9a61557d6074fb23158cef0eb9dc062e1871deef01be3fb617cd7430a141f7f2ecb207ba2e47cb084e17d7d4de8734b31f593d49735ca27e79f5957cf23e5a6f05227576870d7ca1c6604725f567825e6db0588e27662b0ee3221d5485beeab2fc1c068213bce4fe3f64aa11f789db4876ed2b65a539568cacd9061b4db7d16f01be7a71b626d942ea023ec57be7eebd5cd70e5394afb44f0801d997cdb001b39bc2af731877981251b1cc1b867c1b0f5a335d7d13b230460b3e21c0f4df0068615b4b1335834532dc19ad58eb8a664916ac5e96711ec92e5b1d278a6419cd01e3d314b2dd67413d361c9de234a49630a3e3d050f5bd5ed20a0870a99b6d4fcb721ebfe30f93567861c0a6f7ccb56b8e77226eeb078ca24943e38b3eb6d4a74d5ef8a944443b438e4889e1589066ac53fc1af9ade9ba79b4b54266215fc40b6535b7762b34ef3ff9c9db49347f01e7a938955f3e6d4aa99fbcce59406f52798860c90a71e197da4e66fd7a068c0412de0ae187146474fcc770173c8fb01fd3a72e183caab8d32ef24755604367c99a2c3174191f61bf0f9bda5a1fce4dd5b0f8e5ee0ed3ea4a37d42083ebf23036a742a3d0eb965ac35a5386adfcaa37ed6c5f1ed583c32ab1f942c692432d151f6c98d03edae4bd2c5a088c46ba6aaf7d7c2a93e6f41969632e39e5a95c9f51d2c8aa2eb90cd234cee9682751270f4771b27f855b2f42e699df0a6a4de6f7ca47ef35bbec1d3900ff098575eb4d177faf6c0e90ce97722d1f1baea266c08caec1f76e809e6d80499164763ce4d892eef85e6a6a1058f6f50ef9f2b35f7ff39e77fa8c17301e6b1a24a47b963e2c1f2cac10820a9e02bfb3586dbf1c9bcd031c757091fa4fa80c20215df21beb2e1b4883f70f9002abb55c3f8d4aef47fc1b06e4c2e2f06b51b0075b4198f7dcc25281b238af4eb6ea901cee60c60c11800525c0341ea93e7c264a05591af63de871b11ae9935eba530f434fb199b820bff4341335d34c3a4b290c714ea61bccad90e4f67e6e474ab0911b967f341abb1c26528e2ac901923a88b92da2263bcf311a5f6396546cce2c1559dce14b29f37cbd7b52711cb2d2d8430516dfea489c0edbd6dab0508106ff42cc5631d59f23442891e5e872baef550890f63d76bbc9e124967bd3eb3195513af78aceaa82dac70d378529025e3a615eb443e0f3fb33f90b60ee336caad7231e0e70ad064c4d35f8d4883a97a479891a4c55a1b1a2a7da73d7b3b2df8aa383fc4773af967bfd43ce71e4d7f31a99a0857fd5e4328d55794bdf124a08aa769696af37551b7431114164695b7144ade557dac67e1d845561ef67af4894d7b3b05dce1453c01860446475c3f8e484e5ceb774401731b0e4b0700407ca63eb78e5040c2b7395fb7c00056a7f22bfe2506a12401b32599e2a795a0c038710b7006614d2f0f1c2aa27c1615106a64a35585486d8b42077e926adb49ad7b18ff23695f3050e69967c9bb923fb4373809f6bfbbc7f166ebe2c499de3a61e007c59af08ce6bcf202310186943076f15f2944e778609e0f2f60bb9da0e7efa04ae5d8d8d57e8935e5b41d23bc3535023ff48c800240d17f622f18964a5983086cb563bebb63967f4442873248945df22437de833cd8dbbf9ec7b448022b6d05f32137380959469c897820d5917b3d99e6148b8d1b0cb53b2fb59a0503dfd84eb661f476d98a048859ab941687e64e84142d48fcfe07f1c066fab468b9ce87cd398e720ab2ae6f18af679acffc754d6fabadf4d38ec6f4dc46b72cdde81c7932e6166dce07700a0d14e6b1e3faf2a4022304f2326a02a3c1bf8009299728c3aaa04f4885797c69a4dd898a91ad1d7d0aafdca3d6f927443a475631a2c9e2a79b1badb4ffd0752fe4a7969487ff071c0e7020e8437b1ec1de55bf25132b8a69dc382b0c053d152eb2c2ce978675560f006c77125c0926eb87d96e750be02ae13b0a4f6381acc7a3efd854645b2069b80a341babb348cac76deb00e09a7caf519ba63d8cf232b585c568cc74241b7b7efd2bd7c84c244e9856dc3db7b18b9f5f73649386bc6e0216869ff388f9924c6281c8fdf9861a9fe420a284283c5303227b7cbe6687c07642eb2725cef14fd81b06fee2297b61af0db24185bf2e8ded9aeefa52165e3e813b45938ac840f32fb1314631f4c24cb4d7ebe6593cd0d975e72d509e40f80e4c47dfc246854f71f36852f2eeab34fdbe7ddcbfecd59192ee992449676af316bbde7d9aff1632f871d4d29941b35523d128547d8a3e2928c03f8d19e1274a91ab2ede09f83b3c283cf4cd7f8db15573c8583531543873d022d228ff8fe0728c590d85efa22a074b95611a44000e1e489e2e8fd19dee4295814abfd0ce0b379904bcc99eec8674cbf2a0b1c5ea250553d0c5b4252369150c0b1bc8e203af9dcbad847d0afa6073e7c1a19e67f01489fd3f8278b5b889d3531655ce362cbcb5e9b11e29622ab770d0b1f546b25b41a3609b35e0b3dc6ed11cbdde0f28361b33d4a84c962b615a50a9ca87810285e0316af3bd6afa2d8fcb1fcb7e67923ba7ce4d503c31977b6fc4b628f9fb5b999a3fff000dadd977ae3e1df9c1a1e165f95de36dd62d445abcd107e05e45d13d3bf8b90b982534c6dcff4e72a4bbe9070fbbc52edf3c3b2f6e391cccc263920c13924d346cee5f1221d365ece6941dc7132bd1dd6d36bfbce6e6914d2d8104a366da99d09454db2145f4eaf2307cc7f800df937882d5256524ed4ab28fbbe0b91187565be31289c4ffb2ff34ced8ddd2ef621a82838782bda9de6b1c0b8740f560b9c3b6355dec7f05419dc8fcaceecb71c151a12e5acd1913a93c0b2189eae2df047fb01e0a2a42c4341f224d9b833e4e7459e5609dac27018a4c9bba09e7f0823f816cfe29d3e213e6f0083deb1488424f3481795c5e82272118824d47658cc1c26d3271dfb5bfb7c3c7d8a376bac2215bb542eb35d3a868fe173900bf840be05a0df02017b2048849bea1ce5898e79b797af5512caffd07d02f00a4eaecdeca5c709d1ac69678ff47ae03fa1301d30522de94132f35e46293c7cd3ed983c8fb11e94fba2d22954d79d42a7177e96f967d96784e2f54f2533d65bfc5cabd7b4e24b1bccd0060648f4dae8a3fa99c0803a3328539ed0ac50027eef3024d668e27622a73b7b5dcbb3079013d450b172168ec12d13c2400178751d6ffe240adfde9ba5f7f3000f7bc5ca92b86cbf157f51979093c7abdf6b1b78f26c0d31385a844a1451e9a86c1163c0e9567649d0d968d4eed05ea09233456faa791a7a5dc2911408eb6fa2f14e7557b386d5184732241ab738c5bd3096d308874bc1e56d1fc6582f7eb239f11427985bbf54928f59f3eb50359874b790c5432144523d1de7919066d375f4b5a3ec9279bad68372694ac17adaccfb141063cb670a7ff56ad9c120523eb42eda6e3237f8c886f203e7c26de7ebf7cfe87de665559337042b4246750892e9d83f630f2a1b00a7aaed2cd37145290f9082fce9dab1970edd2b6b09a50d79f7398ff2c986514d588201579b9f94097a97771c3a1c1c72fbf49ae7efb01bda7251745460b7243067baa39addd7d33e25556651caaa75bbb41acaa697d70d4ec4e0381f663b6c4f598b0e5750b5e23c8a61d436af5a82aa1efa4926d4f51042263d7882975f4c2a33e96704dea63e1bd11c8492891928759f73b665227c15b92968516cea150aac258a2952071be675889d0c612ccc62076ff301878dfc02201825a2e8cf2443b5131375921c84d87e693bdce8160e1a9e9f4cdc3e856194a1e8b8571f9c9048e131dba18cef8c8470e2116950fe23ab98c48f32b1fd733cf9ed72f020f2825f7288c082a509ee146da5b4c80fd0021a254f5678c9c29a7b26d568f812f164baf1384efa5bbd279e5ebcfa87c62bf5f3253ae0be8118aa248fac5cc0dbf3c76ec39a6a8b945fb91790cd67a0a9984713108d0392687d18e3a00e2b5baf56a58319b65deb4ae0cb0f50ed959c9821e52aac743fe3e0dd835d2db7e82d873e4f7e56fac06c5fb5a6222414764ee107a4bf3a4e4eb945a084ae212bd0884a5d1bd19534b4e317fcc30fdd64f8d36cd5ec8107dd5dd4bd9c1b6dd02de4ae60320622e84130cc7a5c6ccc60c0aa68e858699d6e2f70d606b6257048116a8a524fd984ffa6d67ef0593caa6a5f195f2a2813ec0ad6aefb67e50efb36aad32580f949e2f02b43e9269d4da8d56e9503b57413c6a1af96b8143570b19a525b58a4a259cce0a8b1bfb39b4d654811f9896bee586f3af69318cb8c0f56528d8768c9fe24ce8a173ed870fef0862c5f84cab731495a95c7c5bcd209684c0178fccaafc3b347babb7a2075d9c241e3308118357a183c91f6d1c8e4fffe44f69a6d98561e7322832e75978f80618cd7b53ef457a35ac27a5b95a84c1fc180a48598dabf982bd526f4f1d9871d83b2c376823252f4d2d785afff5b8aeefa11d4cd9d1839a8423bea92dba525638e57e831f21b5dcab4b031d29a67a17f6cbef2ae493cf0479493d1479685b4bce441415495fd037b684f24636d3ba16c6ef5c3c2b076494f22b00184fff0f273cb8473d3a744525d6b5142e32ccb6712af6dc10b117dc2e9c7c8e9c52538c4a91def2ad63f437ea2bcf85c2d84f045253fef4df0790915fc2739a1069820084800804863e6e856fda9bd930959f0d5f42bfa739f5fb5cd3980cbe3664a7ac6b02dc5e1b6310caab1ddd897012443f30054e9175c38a4199a251974e0f13", @generic="e5cf1f12233b45c11a85d63dd06a039b4f12924760ae82f022e6cd4d72a080537624e1c263272f6ab3c623a975a56aff123b0eec22198f877fc8dd39b4a4c55ee5aff7a5a353a1ec2eeb02a86cc72b8c0ac1fd06f7959ad491bbaf24efa1d47a180c378ed2a3494f6dee21ff0dc26396b156d21dce05a2f4cfd73d9567538747c4c6acca61d5c25c02a9d5f69ad8d1de1aba258721786687043a273bf9717d3ef003e6b6409d63c8725f85a9b3bfefa195600955091834837ac9f22ac754971cf9a4e675f932129e", @nested={0x0, 0x73}]}, @typed={0x0, 0xad, 0x0, 0x0, @pid}, @typed={0x0, 0x39, 0x0, 0x0, @fd}]}]}, 0x18}}, 0x8804) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa030490780300fffe45000000808259600cd9f714560000ffff002f0000ac14140ae00000"], 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x38}}], 0x1, 0xc080) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0xb4, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c4b74d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38d834c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x653c6aec}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x698f15cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d75df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x495ef80}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x20000040) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, 0x0, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) r10 = socket(0x22, 0x4, 0x7) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)={0x24, r12, 0x1, 0xfffffffc, 0x0, {{0x2}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r10, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00122b6a0000000800030000000000010000", @ANYRES32=r8, @ANYBLOB="0c00990007000000570000000500d200000000000500d2000b0000000500d200020000000a00060008021100000000000500d200020000000a000600ffffffffffff00000500d200070000000500d2000b000000"], 0x70}}, 0x4000001) sendmsg$rds(r9, &(0x7f0000001800)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/38, 0x26}, {&(0x7f0000001140)=""/108, 0x6c}], 0x4, &(0x7f0000001580)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x89}, 0x0, &(0x7f0000001240)=0x7ffffffe, 0x5, 0x9, 0x740, 0xfffffffffffffff9, 0x32, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0xffffffff}, &(0x7f0000001280)=0x80, &(0x7f00000012c0)=0x7ff, 0x4, 0x8000, 0x40, 0x6, 0x28, 0xfffffffffffffffd}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x5}, &(0x7f0000001300)=0x400, &(0x7f0000001340)=0x7fffffffffffffff, 0x8, 0xfc25, 0x1, 0x0, 0x0, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0xfffffffe}, &(0x7f0000001380)=0x7fff, &(0x7f00000013c0)=0x4, 0x0, 0x0, 0x6d5b50fd, 0x1fc, 0x40, 0x43e}}, @fadd={0x58, 0x114, 0x6, {{0x80000000, 0xffff0000}, &(0x7f0000001400)=0x7, 0x0, 0x1, 0x105, 0x1ff, 0xffffffffffffff97, 0x8, 0x100}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x8001}, &(0x7f0000001480)=0x99d, &(0x7f00000014c0)=0xb5f, 0xce, 0x0, 0x1000, 0x5, 0x2, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x4}, &(0x7f0000001500)=0x6, &(0x7f0000001540)=0x3, 0x8000000000000000, 0xfffffffffffffff7, 0x9, 0x0, 0x2, 0x8000000000000000}}], 0x268, 0x1}, 0x40) 2.61220788s ago: executing program 0 (id=7331): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, [0x3, 0x1, 0x5, 0x2d57cad4, 0x0, 0x100000001, 0x8000, 0x9, 0x81, 0x3, 0x4, 0x7, 0x1, 0x2, 0xec5]}, &(0x7f00000001c0)=0x100) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x6a0000}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.498224815s ago: executing program 0 (id=7332): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x7, 0x6, @mcast2}]}, 0x44}}, 0x0) 901.623737ms ago: executing program 4 (id=7334): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x16, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x3, 0x7, 0x0, 0x0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x64, &(0x7f0000000240)=""/100, 0x40f00, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xd, 0x20000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x5, 0xe}, {0x2, 0x3, 0x7, 0x2}, {0x2, 0x5, 0xb, 0x3}], 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x520}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$tcp_mem(r8, &(0x7f0000000140)={0x5, 0x20, 0x6, 0x20, 0xe4bb}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000700)='memory.events\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000180)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf841}}, @call={0x85, 0x0, 0x0, 0x34}], &(0x7f0000000500)='GPL\x00', 0x5, 0x76, &(0x7f0000000640)=""/118, 0x41100, 0x12, '\x00', r7, 0x1b, r9, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x0, 0x614, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000300000104000039b999d3b245fdcab800", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 900.637001ms ago: executing program 0 (id=7335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 891.535605ms ago: executing program 1 (id=7336): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r1}, 0x20) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={r1}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000000000008578b3fe4a86fd81c07af20c00000013000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@rand_addr=0x64010101, {0x1, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0xfffffffd, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x89, 0x1, {{'rmd160\x00'}, 0x208, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52b9fbdc312b5aeab8894c493c358ef76ec179b21865e1b6f29b2da7d564f2bcd96ec67ffc"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000280), 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x58}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 890.706929ms ago: executing program 3 (id=7337): socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}, 0x34000}], 0xfdef, 0x0) 827.719568ms ago: executing program 2 (id=7338): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x300, 0xc084}, 0x24000080) 772.540325ms ago: executing program 2 (id=7339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="c3aa00fef10009b3bbc26ce7670309009500000000000000066182738b4a7f8b458e0445c2f00c2c4b8eee9f"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x241, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) sendto(r0, &(0x7f0000000080)="4bae6506f42d616f8314d2be9b8d891616402bf526f1e249b59490e30019a34e3fb4ace16676f0e9828c39c949b5827a1e89375c347dcb679f872e22c12543572876486634080372379d1a467d4a6e29faad41b407e97cf360dc3f68bdd2b0ec115c7ff38b9bda70d8cb37273b620e556281b2a9afec56e5da6078e75a87f832908063495ef11b96603a6edf980d8ff8a933887e3c32f45dc05f24fa7d83569cfccc8e617f0f008d71", 0xa9, 0x80, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x1, 0x0, {0xa, 0x4e21, 0xbc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe6}}}, 0x80) 749.577093ms ago: executing program 0 (id=7340): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbf7, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xcdb}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x30044080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4(r1, &(0x7f00000000c0)=@alg, &(0x7f0000000040)=0x80, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, &(0x7f0000000380)="0434e0f7f7cd149d16", 0x0, 0x2, 0x0, 0x3}, 0x50) ioctl$sock_netdev_private(r3, 0x8947, &(0x7f0000000140)="a6b86e3a") socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0xdb) write$cgroup_int(r6, &(0x7f00000001c0)=0x2, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x4, 0x8be6, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 692.321943ms ago: executing program 3 (id=7341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0xb01, 0x70bd25, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x4000000000000000, 0x24040015}, 0x40000) 682.649666ms ago: executing program 2 (id=7342): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000003000000000400000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300fe8000000000000000000000000000bb14000400ff020000000000000000000000000001e7010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000018000d8014000400ff0100"/172], 0xac}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x3) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0xfffffffd) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0xfffffffd) r7 = socket(0xa, 0x5, 0x0) listen(r7, 0x100) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(r9, 0xfff) r11 = socket$netlink(0x10, 0x3, 0x4) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r12, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r11) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) unshare(0x2c020400) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 656.777894ms ago: executing program 4 (id=7343): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendto(r1, 0x0, 0x0, 0x400c044, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 608.110749ms ago: executing program 3 (id=7344): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto(r2, 0x0, 0x0, 0x8800, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601080000000000a4c5000000fffd14000780080011400000001805001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x80) r4 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0x80, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0xfc, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_MATCHALL_ACT={0xcb, 0x2, [@m_skbedit={0xa0, 0xe, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000000, 0xfffffffd, 0xffffffffffffffff, 0x3, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x50e}]}, {0x34, 0x6, "4451f677e1feba51f0ca936c35676af75510a35c3d1e76db91483b29378a9cfebc4ed602044c88674ebdcbd0ed1f7310"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) 510.070384ms ago: executing program 2 (id=7345): socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) (fail_nth: 7) 474.878317ms ago: executing program 4 (id=7346): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) sendto$isdn(0xffffffffffffffff, 0x0, 0xfe, 0x4800, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$nci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x80, 0x4) 416.214151ms ago: executing program 0 (id=7347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x34}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r10, 0x3b}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d0", 0x5dc}], 0x1}, 0xc804) 152.604535ms ago: executing program 2 (id=7348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 100.697418ms ago: executing program 2 (id=7349): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffde6, &(0x7f0000000100)={&(0x7f0000001000)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@nested={0x0, 0x11b, 0x0, 0x1, [@generic="996fb09acf86159c154946ba15a088a5fc9bb98c18210624cbe69c8497bf17b949568e66ac8e800e60619038deee299e7c29f86534815f7fadcf9d44da4a850e65d5525f2a73386421a4b39a36549ec1db6b4197680d38f1edf45ad4ed2cda10df08ff7a5567", @typed={0x0, 0x56, 0x0, 0x0, @u64=0x180000000000000}, @typed={0x0, 0x24, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x0, 0x14, 0x0, 0x1, [@nested={0x0, 0xfa}, @nested={0x0, 0xb8}, @generic="ca02c2beac57e4d4ee66cd7c60757de9d9261b70425a8bbde2a6f00bfdc9bf614b61d7712e7d5e4503e7e93e5f3e9b0722ea96ff78"]}, @nested={0x0, 0x13f, 0x0, 0x1, [@generic="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", @generic="e5cf1f12233b45c11a85d63dd06a039b4f12924760ae82f022e6cd4d72a080537624e1c263272f6ab3c623a975a56aff123b0eec22198f877fc8dd39b4a4c55ee5aff7a5a353a1ec2eeb02a86cc72b8c0ac1fd06f7959ad491bbaf24efa1d47a180c378ed2a3494f6dee21ff0dc26396b156d21dce05a2f4cfd73d9567538747c4c6acca61d5c25c02a9d5f69ad8d1de1aba258721786687043a273bf9717d3ef003e6b6409d63c8725f85a9b3bfefa195600955091834837ac9f22ac754971cf9a4e675f932129e", @nested={0x0, 0x73}]}, @typed={0x0, 0xad, 0x0, 0x0, @pid}, @typed={0x0, 0x39, 0x0, 0x0, @fd}]}]}, 0x18}}, 0x8804) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa030490780300fffe45000000808259600cd9f714560000ffff002f0000ac14140ae00000"], 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x38}}], 0x1, 0xc080) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0xb4, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c4b74d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38d834c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x653c6aec}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x698f15cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d75df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x495ef80}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x20000040) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) r10 = socket(0x22, 0x4, 0x7) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)={0x24, r12, 0x1, 0xfffffffc, 0x0, {{0x2}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r10, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00122b6a0000000800030000000000010000", @ANYRES32=r8, @ANYBLOB="0c00990007000000570000000500d200000000000500d2000b0000000500d200020000000a00060008021100000000000500d200020000000a000600ffffffffffff00000500d200070000000500d2000b000000"], 0x70}}, 0x4000001) sendmsg$rds(r9, &(0x7f0000001800)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/38, 0x26}, {&(0x7f0000001140)=""/108, 0x6c}], 0x4, &(0x7f0000001580)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x89}, 0x0, &(0x7f0000001240)=0x7ffffffe, 0x5, 0x9, 0x740, 0xfffffffffffffff9, 0x32, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0xffffffff}, &(0x7f0000001280)=0x80, &(0x7f00000012c0)=0x7ff, 0x4, 0x8000, 0x40, 0x6, 0x28, 0xfffffffffffffffd}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x5}, &(0x7f0000001300)=0x400, &(0x7f0000001340)=0x7fffffffffffffff, 0x8, 0xfc25, 0x1, 0x0, 0x0, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0xfffffffe}, &(0x7f0000001380)=0x7fff, &(0x7f00000013c0)=0x4, 0x0, 0x0, 0x6d5b50fd, 0x1fc, 0x40, 0x43e}}, @fadd={0x58, 0x114, 0x6, {{0x80000000, 0xffff0000}, &(0x7f0000001400)=0x7, 0x0, 0x1, 0x105, 0x1ff, 0xffffffffffffff97, 0x8, 0x100}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x8001}, &(0x7f0000001480)=0x99d, &(0x7f00000014c0)=0xb5f, 0xce, 0x0, 0x1000, 0x5, 0x2, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x4}, &(0x7f0000001500)=0x6, &(0x7f0000001540)=0x3, 0x8000000000000000, 0xfffffffffffffff7, 0x9, 0x0, 0x2, 0x8000000000000000}}], 0x268, 0x1}, 0x40) 40.32675ms ago: executing program 0 (id=7350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x9, 0xb}, {0xa, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x83, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x1, 0x800005, 0x4, 0x9, 0x7, 0x9, 0xd, 0x3, 0x4, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=7351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x13}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) kernel console output (not intermixed with test programs): 896.690404][T30083] should_failslab+0xa8/0x100 [ 896.690429][T30083] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 896.690451][T30083] ? page_pool_create_percpu+0x76/0xb80 [ 896.690473][T30083] ? rcu_is_watching+0x15/0xb0 [ 896.690496][T30083] page_pool_create_percpu+0x76/0xb80 [ 896.690519][T30083] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 896.690545][T30083] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 896.690570][T30083] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 896.690599][T30083] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 896.690623][T30083] ? __pfx_autoremove_wake_function+0x10/0x10 [ 896.690649][T30083] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 896.690688][T30083] ? 0xffffffffa0201648 [ 896.690702][T30083] ? 0xffffffffa020169c [ 896.690716][T30083] ? 0xffffffffa0201714 [ 896.690755][T30083] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 896.690784][T30083] ? _copy_from_user+0x94/0xb0 [ 896.690809][T30083] ? bpf_test_init+0x113/0x150 [ 896.690824][T30083] ? xdp_convert_md_to_buff+0x5b/0x330 [ 896.690844][T30083] bpf_prog_test_run_xdp+0x81c/0x1160 [ 896.690875][T30083] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 896.690897][T30083] ? __fget_files+0x2a/0x420 [ 896.690920][T30083] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 896.690938][T30083] bpf_prog_test_run+0x2c7/0x340 [ 896.690964][T30083] __sys_bpf+0x643/0x950 [ 896.690986][T30083] ? __pfx___sys_bpf+0x10/0x10 [ 896.691021][T30083] ? ksys_write+0x242/0x270 [ 896.691043][T30083] ? __pfx_ksys_write+0x10/0x10 [ 896.691070][T30083] __x64_sys_bpf+0x7c/0x90 [ 896.691089][T30083] do_syscall_64+0x14d/0xf80 [ 896.691111][T30083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.691128][T30083] ? trace_irq_disable+0x37/0x100 [ 896.691146][T30083] ? clear_bhb_loop+0x40/0x90 [ 896.691167][T30083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.691184][T30083] RIP: 0033:0x7fe4eab9bf79 [ 896.691200][T30083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.691214][T30083] RSP: 002b:00007fe4eb9b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 896.691233][T30083] RAX: ffffffffffffffda RBX: 00007fe4eae15fa0 RCX: 00007fe4eab9bf79 [ 896.691247][T30083] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 896.691259][T30083] RBP: 00007fe4eb9b0090 R08: 0000000000000000 R09: 0000000000000000 [ 896.691270][T30083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.691281][T30083] R13: 00007fe4eae16038 R14: 00007fe4eae15fa0 R15: 00007ffc04f9d418 [ 896.691317][T30083] [ 897.180924][T30106] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 897.225295][T30101] wg1 speed is unknown, defaulting to 1000 [ 897.232765][T30101] lo speed is unknown, defaulting to 1000 [ 897.270272][T30096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6603'. [ 897.365597][T30096] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6603'. [ 897.392933][T30113] wg1 speed is unknown, defaulting to 1000 [ 897.412426][T30096] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 897.455502][T30113] lo speed is unknown, defaulting to 1000 [ 897.739707][T30124] xt_CT: No such helper "syz0" [ 897.813913][T30128] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 897.840298][T30128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6612'. [ 897.990135][T30128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6612'. [ 898.132204][T30135] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 898.199991][T30137] syzkaller0: entered promiscuous mode [ 898.213383][T30137] syzkaller0: entered allmulticast mode [ 898.317763][T30142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6618'. [ 898.380921][T30148] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20002 [ 898.446708][T30158] FAULT_INJECTION: forcing a failure. [ 898.446708][T30158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 898.461644][T30158] CPU: 0 UID: 0 PID: 30158 Comm: syz.1.6625 Not tainted syzkaller #0 PREEMPT(full) [ 898.461668][T30158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 898.461680][T30158] Call Trace: [ 898.461688][T30158] [ 898.461696][T30158] dump_stack_lvl+0xe8/0x150 [ 898.461723][T30158] should_fail_ex+0x412/0x560 [ 898.461751][T30158] prepare_alloc_pages+0x22a/0x650 [ 898.461782][T30158] __alloc_frozen_pages_noprof+0x12f/0x380 [ 898.461809][T30158] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 898.461836][T30158] ? __pfx_policy_nodemask+0x10/0x10 [ 898.461868][T30158] alloc_pages_mpol+0x232/0x4a0 [ 898.461896][T30158] vma_alloc_folio_noprof+0xea/0x210 [ 898.461922][T30158] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 898.461954][T30158] do_wp_page+0x127b/0x5990 [ 898.461982][T30158] ? __pte_offset_map+0x29/0x240 [ 898.462002][T30158] ? __pte_offset_map+0x29/0x240 [ 898.462026][T30158] ? __pfx_do_wp_page+0x10/0x10 [ 898.462041][T30158] ? do_raw_spin_lock+0x12b/0x2f0 [ 898.462065][T30158] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 898.462098][T30158] handle_mm_fault+0x1520/0x32a0 [ 898.462129][T30158] ? handle_mm_fault+0xee/0x32a0 [ 898.462155][T30158] ? __pfx_handle_mm_fault+0x10/0x10 [ 898.462193][T30158] ? lock_mm_and_find_vma+0xa7/0x340 [ 898.462217][T30158] do_user_addr_fault+0x75b/0x1360 [ 898.462251][T30158] exc_page_fault+0x6a/0xc0 [ 898.462274][T30158] asm_exc_page_fault+0x26/0x30 [ 898.462290][T30158] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 898.462311][T30158] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d1 75 03 00 90 90 90 90 90 90 90 90 90 90 [ 898.462326][T30158] RSP: 0018:ffffc9001c28f8b8 EFLAGS: 00050206 [ 898.462342][T30158] RAX: 0000000040000000 RBX: 0000000040000000 RCX: 0000200000001030 [ 898.462355][T30158] RDX: ffff88804e0bbc80 RSI: 00000000400000de RDI: 00000000ffffffff [ 898.462367][T30158] RBP: ffffc9001c28fa30 R08: ffffc9001c28f687 R09: 1ffff92003851ed0 [ 898.462380][T30158] R10: dffffc0000000000 R11: fffff52003851ed1 R12: 1ffff92003851f24 [ 898.462392][T30158] R13: 00000000400000de R14: 0000200000001000 R15: dffffc0000000000 [ 898.462422][T30158] ____sys_recvmsg+0x2be/0x4a0 [ 898.462451][T30158] ? __pfx_____sys_recvmsg+0x10/0x10 [ 898.462485][T30158] ? import_iovec+0x73/0xa0 [ 898.462508][T30158] ___sys_recvmsg+0x215/0x590 [ 898.462535][T30158] ? __pfx____sys_recvmsg+0x10/0x10 [ 898.462562][T30158] ? __fget_files+0x2a/0x420 [ 898.462607][T30158] do_recvmmsg+0x334/0x800 [ 898.462642][T30158] ? __pfx_do_recvmmsg+0x10/0x10 [ 898.462674][T30158] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 898.462713][T30158] __x64_sys_recvmmsg+0x198/0x250 [ 898.462737][T30158] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 898.462770][T30158] do_syscall_64+0x14d/0xf80 [ 898.462790][T30158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.462807][T30158] ? trace_irq_disable+0x37/0x100 [ 898.462825][T30158] ? clear_bhb_loop+0x40/0x90 [ 898.462847][T30158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.462864][T30158] RIP: 0033:0x7fe4eab9bf79 [ 898.462879][T30158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.462894][T30158] RSP: 002b:00007fe4eb9b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 898.462912][T30158] RAX: ffffffffffffffda RBX: 00007fe4eae15fa0 RCX: 00007fe4eab9bf79 [ 898.462925][T30158] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 898.462937][T30158] RBP: 00007fe4eb9b0090 R08: 0000000000000000 R09: 0000000000000000 [ 898.462948][T30158] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 898.462960][T30158] R13: 00007fe4eae16038 R14: 00007fe4eae15fa0 R15: 00007ffc04f9d418 [ 898.462990][T30158] [ 898.828137][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 898.836153][ C0] lec:lec_tx_timeout: lec0 [ 898.855107][T30161] netlink: 'syz.2.6626': attribute type 10 has an invalid length. [ 898.862973][T30161] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6626'. [ 898.979902][T30168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.086845][T30174] syzkaller0: entered promiscuous mode [ 899.097341][T30174] syzkaller0: entered allmulticast mode [ 899.128214][T30182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6632'. [ 899.212501][T30187] block nbd3: Unsupported socket: should be TCP or UNIX. [ 899.280591][T30185] wg1 speed is unknown, defaulting to 1000 [ 899.317461][T30185] lo speed is unknown, defaulting to 1000 [ 899.377098][T30191] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6635'. [ 899.404905][T30191] netlink: Unknown conntrack attr (0) [ 899.557815][T30200] syzkaller0: entered promiscuous mode [ 899.570295][T30200] syzkaller0: entered allmulticast mode [ 900.055816][T30225] FAULT_INJECTION: forcing a failure. [ 900.055816][T30225] name failslab, interval 1, probability 0, space 0, times 0 [ 900.169495][T30225] CPU: 1 UID: 0 PID: 30225 Comm: syz.0.6648 Not tainted syzkaller #0 PREEMPT(full) [ 900.169522][T30225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 900.169533][T30225] Call Trace: [ 900.169540][T30225] [ 900.169549][T30225] dump_stack_lvl+0xe8/0x150 [ 900.169577][T30225] should_fail_ex+0x412/0x560 [ 900.169606][T30225] should_failslab+0xa8/0x100 [ 900.169631][T30225] __kvmalloc_node_noprof+0x178/0x8a0 [ 900.169655][T30225] ? page_pool_create_percpu+0x2dd/0xb80 [ 900.169679][T30225] ? page_pool_create_percpu+0xaf/0xb80 [ 900.169706][T30225] page_pool_create_percpu+0x2dd/0xb80 [ 900.169729][T30225] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 900.169756][T30225] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 900.169781][T30225] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 900.169809][T30225] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 900.169832][T30225] ? __pfx_autoremove_wake_function+0x10/0x10 [ 900.169859][T30225] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 900.169897][T30225] ? 0xffffffffa0201648 [ 900.169912][T30225] ? 0xffffffffa020169c [ 900.169926][T30225] ? 0xffffffffa0201714 [ 900.169964][T30225] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 900.169992][T30225] ? _copy_from_user+0x94/0xb0 [ 900.170012][T30225] ? bpf_test_init+0x113/0x150 [ 900.170027][T30225] ? xdp_convert_md_to_buff+0x5b/0x330 [ 900.170048][T30225] bpf_prog_test_run_xdp+0x81c/0x1160 [ 900.170081][T30225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 900.170103][T30225] ? __fget_files+0x2a/0x420 [ 900.170129][T30225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 900.170147][T30225] bpf_prog_test_run+0x2c7/0x340 [ 900.170173][T30225] __sys_bpf+0x643/0x950 [ 900.170195][T30225] ? __pfx___sys_bpf+0x10/0x10 [ 900.170237][T30225] ? ksys_write+0x242/0x270 [ 900.170260][T30225] ? __pfx_ksys_write+0x10/0x10 [ 900.170288][T30225] __x64_sys_bpf+0x7c/0x90 [ 900.170307][T30225] do_syscall_64+0x14d/0xf80 [ 900.170328][T30225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.170345][T30225] ? trace_irq_disable+0x37/0x100 [ 900.170364][T30225] ? clear_bhb_loop+0x40/0x90 [ 900.170385][T30225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.170402][T30225] RIP: 0033:0x7f8f8ad9bf79 [ 900.170418][T30225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.170432][T30225] RSP: 002b:00007f8f8bbbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 900.170452][T30225] RAX: ffffffffffffffda RBX: 00007f8f8b015fa0 RCX: 00007f8f8ad9bf79 [ 900.170465][T30225] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 900.170477][T30225] RBP: 00007f8f8bbbd090 R08: 0000000000000000 R09: 0000000000000000 [ 900.170489][T30225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.170500][T30225] R13: 00007f8f8b016038 R14: 00007f8f8b015fa0 R15: 00007ffdd722b788 [ 900.170529][T30225] [ 900.170561][T30225] page_pool_create_percpu() gave up with errno -12 [ 900.591353][ T30] audit: type=1800 audit(1771305287.871:137): pid=30229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6647" name="memory.events" dev="tmpfs" ino=6763 res=0 errno=0 [ 900.776615][T30231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.832020][T30242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.880930][ T30] audit: type=1800 audit(1771305288.171:138): pid=30233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6649" name="memory.events" dev="tmpfs" ino=6605 res=0 errno=0 [ 901.286049][T30251] set match dimension is over the limit! [ 901.397458][T30258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 901.697350][T30275] wg1 speed is unknown, defaulting to 1000 [ 901.735723][T30275] lo speed is unknown, defaulting to 1000 [ 901.884567][T30296] FAULT_INJECTION: forcing a failure. [ 901.884567][T30296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.923584][T30296] CPU: 0 UID: 0 PID: 30296 Comm: syz.3.6667 Not tainted syzkaller #0 PREEMPT(full) [ 901.923608][T30296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 901.923618][T30296] Call Trace: [ 901.923627][T30296] [ 901.923635][T30296] dump_stack_lvl+0xe8/0x150 [ 901.923661][T30296] should_fail_ex+0x412/0x560 [ 901.923686][T30296] _copy_from_user+0x2d/0xb0 [ 901.923705][T30296] do_sock_getsockopt+0x165/0x3f0 [ 901.923729][T30296] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 901.923749][T30296] ? __fget_files+0x3a0/0x420 [ 901.923765][T30296] ? __fget_files+0x2a/0x420 [ 901.923784][T30296] __x64_sys_getsockopt+0x1a4/0x240 [ 901.923807][T30296] do_syscall_64+0x14d/0xf80 [ 901.923823][T30296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.923836][T30296] ? trace_irq_disable+0x37/0x100 [ 901.923850][T30296] ? clear_bhb_loop+0x40/0x90 [ 901.923866][T30296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.923878][T30296] RIP: 0033:0x7f7f6959bf79 [ 901.923892][T30296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.923903][T30296] RSP: 002b:00007f7f6a4f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 901.923918][T30296] RAX: ffffffffffffffda RBX: 00007f7f69815fa0 RCX: 00007f7f6959bf79 [ 901.923929][T30296] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 901.923938][T30296] RBP: 00007f7f6a4f8090 R08: 0000200000000000 R09: 0000000000000000 [ 901.923947][T30296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.923955][T30296] R13: 00007f7f69816038 R14: 00007f7f69815fa0 R15: 00007ffd7c0c3508 [ 901.923977][T30296] [ 902.172623][T30292] wg1 speed is unknown, defaulting to 1000 [ 902.182011][T30292] lo speed is unknown, defaulting to 1000 [ 902.207530][ T36] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 902.272053][T30288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.362983][T30307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6669'. [ 902.472525][T30313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6671'. [ 902.601066][T30317] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6673'. [ 902.605509][T30319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6674'. [ 902.621062][T30320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6674'. [ 902.652079][T30315] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 902.735329][T30315] syzkaller0: entered promiscuous mode [ 902.741089][T30315] syzkaller0: entered allmulticast mode [ 902.775929][T30328] FAULT_INJECTION: forcing a failure. [ 902.775929][T30328] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 902.802004][T30328] CPU: 1 UID: 0 PID: 30328 Comm: syz.0.6677 Not tainted syzkaller #0 PREEMPT(full) [ 902.802030][T30328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 902.802041][T30328] Call Trace: [ 902.802049][T30328] [ 902.802057][T30328] dump_stack_lvl+0xe8/0x150 [ 902.802085][T30328] should_fail_ex+0x412/0x560 [ 902.802111][T30328] prepare_alloc_pages+0x22a/0x650 [ 902.802141][T30328] __alloc_frozen_pages_noprof+0x12f/0x380 [ 902.802166][T30328] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 902.802191][T30328] ? __pfx_policy_nodemask+0x10/0x10 [ 902.802222][T30328] alloc_pages_mpol+0x232/0x4a0 [ 902.802258][T30328] folio_alloc_mpol_noprof+0x39/0x70 [ 902.802282][T30328] shmem_alloc_and_add_folio+0x445/0xf80 [ 902.802307][T30328] ? filemap_get_entry+0xca/0x320 [ 902.802327][T30328] ? filemap_get_entry+0xca/0x320 [ 902.802349][T30328] ? filemap_get_entry+0x2ac/0x320 [ 902.802369][T30328] ? __pfx_filemap_get_entry+0x10/0x10 [ 902.802391][T30328] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 902.802414][T30328] ? filemap_map_pages+0x1bbe/0x2000 [ 902.802437][T30328] ? shmem_allowable_huge_orders+0x1bb/0x690 [ 902.802463][T30328] shmem_get_folio_gfp+0x5a9/0x1670 [ 902.802502][T30328] shmem_fault+0x179/0x390 [ 902.802532][T30328] __do_fault+0x138/0x390 [ 902.802557][T30328] do_pte_missing+0x21a2/0x37a0 [ 902.802577][T30328] ? do_pte_missing+0x1258/0x37a0 [ 902.802609][T30328] ? handle_mm_fault+0xee/0x32a0 [ 902.802632][T30328] handle_mm_fault+0x1b8c/0x32a0 [ 902.802665][T30328] ? handle_mm_fault+0xee/0x32a0 [ 902.802693][T30328] ? __pfx_handle_mm_fault+0x10/0x10 [ 902.802712][T30328] ? follow_page_pte+0x825/0x1460 [ 902.802741][T30328] ? __pfx_follow_page_pte+0x10/0x10 [ 902.802771][T30328] __get_user_pages+0x165b/0x29d0 [ 902.802821][T30328] populate_vma_page_range+0x2be/0x3c0 [ 902.802843][T30328] ? __pfx_populate_vma_page_range+0x10/0x10 [ 902.802865][T30328] ? down_read+0x272/0x2e0 [ 902.802886][T30328] ? __mm_populate+0x173/0x390 [ 902.802909][T30328] __mm_populate+0x25f/0x390 [ 902.802929][T30328] ? __pfx___mm_populate+0x10/0x10 [ 902.802958][T30328] vm_mmap_pgoff+0x3aa/0x4f0 [ 902.802982][T30328] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 902.802997][T30328] ? ksys_write+0x242/0x270 [ 902.803020][T30328] ? __pfx_ksys_write+0x10/0x10 [ 902.803042][T30328] ? ksys_mmap_pgoff+0xf3/0x760 [ 902.803061][T30328] ? __x64_sys_mmap+0x7f/0x140 [ 902.803085][T30328] do_syscall_64+0x14d/0xf80 [ 902.803106][T30328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.803123][T30328] ? trace_irq_disable+0x37/0x100 [ 902.803141][T30328] ? clear_bhb_loop+0x40/0x90 [ 902.803162][T30328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.803179][T30328] RIP: 0033:0x7f8f8ad9bf79 [ 902.803196][T30328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.803211][T30328] RSP: 002b:00007f8f8bbbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 902.803230][T30328] RAX: ffffffffffffffda RBX: 00007f8f8b015fa0 RCX: 00007f8f8ad9bf79 [ 902.803248][T30328] RDX: 0000000002000004 RSI: 0000000000c00000 RDI: 0000200000001000 [ 902.803260][T30328] RBP: 00007f8f8bbbd090 R08: ffffffffffffffff R09: 0000000000000000 [ 902.803272][T30328] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000002 [ 902.803283][T30328] R13: 00007f8f8b016038 R14: 00007f8f8b015fa0 R15: 00007ffdd722b788 [ 902.803314][T30328] [ 903.200465][T30333] netlink: 'syz.2.6679': attribute type 3 has an invalid length. [ 904.029526][T30367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6690'. [ 904.257819][T30380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6693'. [ 904.316212][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.332708][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.362639][T30387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.387781][T30390] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6697'. [ 904.396025][T30388] wg1 speed is unknown, defaulting to 1000 [ 904.407732][T30385] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 904.424014][T30385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6695'. [ 904.433247][T30388] lo speed is unknown, defaulting to 1000 [ 904.439231][ T30] audit: type=1800 audit(1771305291.721:139): pid=30373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6689" name="memory.events" dev="tmpfs" ino=7157 res=0 errno=0 [ 904.479754][T30385] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6695'. [ 904.514481][T30385] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 904.893982][T30409] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 904.902285][T30409] netlink: 'syz.4.6700': attribute type 32 has an invalid length. [ 904.938034][T30409] bond10: option coupled_control: invalid value (12) [ 904.954194][T30409] bond10 (unregistering): Released all slaves [ 906.094649][T24991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.102575][T24991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.147006][ T30] audit: type=1800 audit(1771305293.441:140): pid=30469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6716" name="memory.events" dev="tmpfs" ino=6829 res=0 errno=0 [ 906.239216][T30475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.350292][T30480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.387248][ T30] audit: type=1800 audit(1771305293.681:141): pid=30479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6723" name="memory.events" dev="tmpfs" ino=6854 res=0 errno=0 [ 906.513406][T30483] bond0: entered promiscuous mode [ 906.518868][T30483] : entered promiscuous mode [ 906.524236][T30483] bond_slave_1: entered promiscuous mode [ 906.531668][T30483] batadv0: entered promiscuous mode [ 906.538055][T30483] debugfs: 'hsr1' already exists in 'hsr' [ 906.543929][T30483] Cannot create hsr debugfs directory [ 906.549416][T30483] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 906.559533][T30483] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 906.570070][T30483] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 906.578389][T30483] bond0: left promiscuous mode [ 906.583166][T30483] : left promiscuous mode [ 906.587959][T30483] bond_slave_1: left promiscuous mode [ 906.595049][T30483] batadv0: left promiscuous mode [ 907.069025][T30508] batadv0: entered promiscuous mode [ 907.125464][T30508] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 907.247756][T30526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.369646][ T30] audit: type=1800 audit(1771305294.661:142): pid=30506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6729" name="memory.events" dev="tmpfs" ino=6835 res=0 errno=0 [ 907.382200][T30527] wg1 speed is unknown, defaulting to 1000 [ 907.438886][T30527] lo speed is unknown, defaulting to 1000 [ 907.454259][T30529] wg1 speed is unknown, defaulting to 1000 [ 907.498453][T30529] lo speed is unknown, defaulting to 1000 [ 907.912078][T30540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.946509][ T30] audit: type=1800 audit(1771305295.241:143): pid=30545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6739" name="memory.events" dev="tmpfs" ino=6677 res=0 errno=0 [ 908.077663][T30558] __nla_validate_parse: 8 callbacks suppressed [ 908.077682][T30558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6744'. [ 908.376511][T30574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6750'. [ 908.415249][T30574] netlink: 'syz.4.6750': attribute type 1 has an invalid length. [ 908.477303][T30583] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 908.672679][T30589] tipc: Enabling of bearer rejected, already enabled [ 908.918881][T30600] wg1 speed is unknown, defaulting to 1000 [ 908.936775][T30600] lo speed is unknown, defaulting to 1000 [ 909.097586][T30613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.104024][ T30] audit: type=1800 audit(1771305296.381:144): pid=30598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6755" name="memory.events" dev="tmpfs" ino=6861 res=0 errno=0 [ 909.389417][T30614] wg1 speed is unknown, defaulting to 1000 [ 909.455093][T30623] FAULT_INJECTION: forcing a failure. [ 909.455093][T30623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.514285][T30623] CPU: 0 UID: 0 PID: 30623 Comm: syz.4.6763 Not tainted syzkaller #0 PREEMPT(full) [ 909.514311][T30623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.514323][T30623] Call Trace: [ 909.514330][T30623] [ 909.514339][T30623] dump_stack_lvl+0xe8/0x150 [ 909.514368][T30623] should_fail_ex+0x412/0x560 [ 909.514396][T30623] _copy_from_user+0x2d/0xb0 [ 909.514416][T30623] ___sys_recvmsg+0x175/0x590 [ 909.514444][T30623] ? __pfx____sys_recvmsg+0x10/0x10 [ 909.514470][T30623] ? __fget_files+0x2a/0x420 [ 909.514517][T30623] do_recvmmsg+0x334/0x800 [ 909.514548][T30623] ? __pfx_do_recvmmsg+0x10/0x10 [ 909.514581][T30623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 909.514621][T30623] __x64_sys_recvmmsg+0x198/0x250 [ 909.514646][T30623] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 909.514679][T30623] do_syscall_64+0x14d/0xf80 [ 909.514700][T30623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.514717][T30623] ? trace_irq_disable+0x37/0x100 [ 909.514736][T30623] ? clear_bhb_loop+0x40/0x90 [ 909.514757][T30623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.514773][T30623] RIP: 0033:0x7f440b79bf79 [ 909.514789][T30623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.514803][T30623] RSP: 002b:00007f440c655028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 909.514822][T30623] RAX: ffffffffffffffda RBX: 00007f440ba15fa0 RCX: 00007f440b79bf79 [ 909.514834][T30623] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 909.514846][T30623] RBP: 00007f440c655090 R08: 0000000000000000 R09: 0000000000000000 [ 909.514858][T30623] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 909.514869][T30623] R13: 00007f440ba16038 R14: 00007f440ba15fa0 R15: 00007ffc54e79738 [ 909.514900][T30623] [ 909.517459][T30614] lo speed is unknown, defaulting to 1000 [ 909.791400][T30626] FAULT_INJECTION: forcing a failure. [ 909.791400][T30626] name failslab, interval 1, probability 0, space 0, times 0 [ 909.805141][T30626] CPU: 0 UID: 0 PID: 30626 Comm: syz.2.6764 Not tainted syzkaller #0 PREEMPT(full) [ 909.805166][T30626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.805177][T30626] Call Trace: [ 909.805184][T30626] [ 909.805193][T30626] dump_stack_lvl+0xe8/0x150 [ 909.805220][T30626] should_fail_ex+0x412/0x560 [ 909.805255][T30626] should_failslab+0xa8/0x100 [ 909.805280][T30626] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 909.805303][T30626] ? page_pool_create_percpu+0x76/0xb80 [ 909.805325][T30626] ? rcu_is_watching+0x15/0xb0 [ 909.805348][T30626] page_pool_create_percpu+0x76/0xb80 [ 909.805371][T30626] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 909.805396][T30626] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 909.805422][T30626] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 909.805452][T30626] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 909.805476][T30626] ? __pfx_autoremove_wake_function+0x10/0x10 [ 909.805501][T30626] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 909.805540][T30626] ? 0xffffffffa0201648 [ 909.805554][T30626] ? 0xffffffffa0201690 [ 909.805567][T30626] ? 0xffffffffa0201758 [ 909.805605][T30626] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 909.805635][T30626] ? _copy_from_user+0x94/0xb0 [ 909.805653][T30626] ? bpf_test_init+0x113/0x150 [ 909.805668][T30626] ? xdp_convert_md_to_buff+0x5b/0x330 [ 909.805689][T30626] bpf_prog_test_run_xdp+0x81c/0x1160 [ 909.805721][T30626] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 909.805744][T30626] ? __fget_files+0x2a/0x420 [ 909.805767][T30626] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 909.805786][T30626] bpf_prog_test_run+0x2c7/0x340 [ 909.805810][T30626] __sys_bpf+0x643/0x950 [ 909.805832][T30626] ? __pfx___sys_bpf+0x10/0x10 [ 909.805867][T30626] ? ksys_write+0x242/0x270 [ 909.805889][T30626] ? __pfx_ksys_write+0x10/0x10 [ 909.805917][T30626] __x64_sys_bpf+0x7c/0x90 [ 909.805936][T30626] do_syscall_64+0x14d/0xf80 [ 909.805956][T30626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.805973][T30626] ? trace_irq_disable+0x37/0x100 [ 909.805991][T30626] ? clear_bhb_loop+0x40/0x90 [ 909.806012][T30626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.806029][T30626] RIP: 0033:0x7fa38259bf79 [ 909.806044][T30626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.806059][T30626] RSP: 002b:00007fa383438028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 909.806077][T30626] RAX: ffffffffffffffda RBX: 00007fa382815fa0 RCX: 00007fa38259bf79 [ 909.806091][T30626] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 909.806102][T30626] RBP: 00007fa383438090 R08: 0000000000000000 R09: 0000000000000000 [ 909.806113][T30626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.806123][T30626] R13: 00007fa382816038 R14: 00007fa382815fa0 R15: 00007fff2b388768 [ 909.806156][T30626] [ 910.279131][T30639] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 910.425145][T30638] tipc: Enabled bearer , priority 0 [ 910.482118][T30628] tipc: Resetting bearer [ 910.585698][T30642] syzkaller0: entered promiscuous mode [ 910.591417][T30642] syzkaller0: entered allmulticast mode [ 910.691226][T30652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 910.760719][T30627] tipc: Resetting bearer [ 910.828764][T30627] tipc: Disabling bearer [ 911.007794][T30662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6774'. [ 911.050966][T30664] netlink: 'syz.2.6775': attribute type 11 has an invalid length. [ 911.139277][T30669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6777'. [ 911.177584][T30669] bond10: option arp_interval: invalid value (18446744072937799682) [ 911.185905][T30669] bond10: option arp_interval: allowed values 0 - 2147483647 [ 911.197054][T30675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6777'. [ 911.216188][T30669] bond10 (unregistering): Released all slaves [ 911.421572][T30682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6780'. [ 911.461650][T30671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.511094][ T30] audit: type=1800 audit(1771305298.801:145): pid=30677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6778" name="memory.events" dev="tmpfs" ino=7259 res=0 errno=0 [ 911.652464][T30694] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 911.660095][T30691] tipc: Enabled bearer , priority 0 [ 911.668523][T30687] wg1 speed is unknown, defaulting to 1000 [ 911.678258][T30691] syzkaller0: entered promiscuous mode [ 911.684076][T30691] syzkaller0: entered allmulticast mode [ 911.693851][T30687] lo speed is unknown, defaulting to 1000 [ 911.698046][T30691] tipc: Resetting bearer [ 911.721769][T30690] tipc: Resetting bearer [ 911.728604][T30694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6781'. [ 911.730609][T30698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6783'. [ 911.749104][T30694] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6781'. [ 911.760317][T30693] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6783'. [ 911.771183][T30690] tipc: Disabling bearer [ 911.794613][T30694] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 912.371969][T30714] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 912.647999][T30732] netlink: 'syz.4.6796': attribute type 1 has an invalid length. [ 912.684043][T30732] bond10: entered promiscuous mode [ 912.689691][T30732] 8021q: adding VLAN 0 to HW filter on device bond10 [ 912.986982][T30758] FAULT_INJECTION: forcing a failure. [ 912.986982][T30758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.011950][T30758] CPU: 0 UID: 0 PID: 30758 Comm: syz.1.6802 Not tainted syzkaller #0 PREEMPT(full) [ 913.011974][T30758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.011984][T30758] Call Trace: [ 913.011991][T30758] [ 913.011999][T30758] dump_stack_lvl+0xe8/0x150 [ 913.012024][T30758] should_fail_ex+0x412/0x560 [ 913.012050][T30758] _copy_from_user+0x2d/0xb0 [ 913.012069][T30758] ___sys_recvmsg+0x175/0x590 [ 913.012097][T30758] ? __pfx____sys_recvmsg+0x10/0x10 [ 913.012123][T30758] ? __fget_files+0x2a/0x420 [ 913.012179][T30758] do_recvmmsg+0x334/0x800 [ 913.012208][T30758] ? __pfx_do_recvmmsg+0x10/0x10 [ 913.012236][T30758] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 913.012272][T30758] __x64_sys_recvmmsg+0x198/0x250 [ 913.012295][T30758] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 913.012326][T30758] do_syscall_64+0x14d/0xf80 [ 913.012346][T30758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.012363][T30758] ? trace_irq_disable+0x37/0x100 [ 913.012380][T30758] ? clear_bhb_loop+0x40/0x90 [ 913.012400][T30758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.012416][T30758] RIP: 0033:0x7fe4eab9bf79 [ 913.012431][T30758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.012445][T30758] RSP: 002b:00007fe4eb9b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 913.012464][T30758] RAX: ffffffffffffffda RBX: 00007fe4eae15fa0 RCX: 00007fe4eab9bf79 [ 913.012477][T30758] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 913.012490][T30758] RBP: 00007fe4eb9b0090 R08: 0000000000000000 R09: 0000000000000000 [ 913.012501][T30758] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 913.012512][T30758] R13: 00007fe4eae16038 R14: 00007fe4eae15fa0 R15: 00007ffc04f9d418 [ 913.012539][T30758] [ 913.229858][T30764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 913.267305][ T30] audit: type=1800 audit(1771305300.521:146): pid=30753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6798" name="memory.events" dev="tmpfs" ino=7285 res=0 errno=0 [ 913.303554][T30750] bond10: (slave bridge11): making interface the new active one [ 913.322824][T30750] bridge11: entered promiscuous mode [ 913.332501][T30750] bridge11: left promiscuous mode [ 913.417159][T30752] wg1 speed is unknown, defaulting to 1000 [ 913.435497][T30752] lo speed is unknown, defaulting to 1000 [ 913.451533][T30766] __nla_validate_parse: 1 callbacks suppressed [ 913.451550][T30766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6804'. [ 913.643911][T30778] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 913.662936][T30776] syzkaller0: entered promiscuous mode [ 913.668879][T30776] syzkaller0: entered allmulticast mode [ 913.680141][T30776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6806'. [ 913.692948][T30776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6806'. [ 913.870013][T30792] FAULT_INJECTION: forcing a failure. [ 913.870013][T30792] name failslab, interval 1, probability 0, space 0, times 0 [ 913.885019][T30792] CPU: 1 UID: 0 PID: 30792 Comm: syz.4.6812 Not tainted syzkaller #0 PREEMPT(full) [ 913.885044][T30792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.885056][T30792] Call Trace: [ 913.885063][T30792] [ 913.885072][T30792] dump_stack_lvl+0xe8/0x150 [ 913.885108][T30792] should_fail_ex+0x412/0x560 [ 913.885137][T30792] should_failslab+0xa8/0x100 [ 913.885163][T30792] __kmalloc_cache_noprof+0x88/0x660 [ 913.885184][T30792] ? netlink_lookup+0x30/0x200 [ 913.885202][T30792] ? genl_start+0x1c9/0x6c0 [ 913.885227][T30792] genl_start+0x1c9/0x6c0 [ 913.885247][T30792] ? netlink_lookup+0x30/0x200 [ 913.885270][T30792] __netlink_dump_start+0x469/0x7e0 [ 913.885296][T30792] genl_family_rcv_msg_dumpit+0x213/0x310 [ 913.885320][T30792] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 913.885340][T30792] ? genl_get_cmd+0x7f4/0x930 [ 913.885366][T30792] ? __pfx_genl_start+0x10/0x10 [ 913.885384][T30792] ? __pfx_genl_dumpit+0x10/0x10 [ 913.885402][T30792] ? __pfx_genl_done+0x10/0x10 [ 913.885424][T30792] ? __lock_acquire+0x6b5/0x2cf0 [ 913.885453][T30792] genl_rcv_msg+0x5e8/0x7a0 [ 913.885481][T30792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.885501][T30792] ? __pfx_nl80211_dump_station+0x10/0x10 [ 913.885534][T30792] netlink_rcv_skb+0x232/0x4b0 [ 913.885554][T30792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.885576][T30792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 913.885592][T30792] ? genl_rcv+0x19/0x40 [ 913.885629][T30792] ? down_read+0x272/0x2e0 [ 913.885649][T30792] ? genl_rcv+0xd/0x40 [ 913.885671][T30792] genl_rcv+0x28/0x40 [ 913.885688][T30792] netlink_unicast+0x80f/0x9b0 [ 913.885721][T30792] ? __pfx_netlink_unicast+0x10/0x10 [ 913.885746][T30792] ? netlink_sendmsg+0x650/0xb40 [ 913.885762][T30792] ? skb_put+0x11b/0x210 [ 913.885787][T30792] netlink_sendmsg+0x813/0xb40 [ 913.885830][T30792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.885852][T30792] ? aa_sock_msg_perm+0xf1/0x1b0 [ 913.885876][T30792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 913.885901][T30792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.885918][T30792] ____sys_sendmsg+0xa68/0xad0 [ 913.885940][T30792] ? __might_fault+0xaf/0x130 [ 913.885966][T30792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.885996][T30792] ? import_iovec+0x73/0xa0 [ 913.886018][T30792] ___sys_sendmsg+0x2a5/0x360 [ 913.886038][T30792] ? __lock_acquire+0x6b5/0x2cf0 [ 913.886060][T30792] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.886123][T30792] ? __fget_files+0x2a/0x420 [ 913.886140][T30792] ? __fget_files+0x3a0/0x420 [ 913.886168][T30792] __x64_sys_sendmsg+0x1bd/0x2a0 [ 913.886192][T30792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 913.886224][T30792] ? __pfx_ksys_write+0x10/0x10 [ 913.886257][T30792] do_syscall_64+0x14d/0xf80 [ 913.886279][T30792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.886296][T30792] ? trace_irq_disable+0x37/0x100 [ 913.886314][T30792] ? clear_bhb_loop+0x40/0x90 [ 913.886336][T30792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.886353][T30792] RIP: 0033:0x7f440b79bf79 [ 913.886369][T30792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.886384][T30792] RSP: 002b:00007f440c655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.886404][T30792] RAX: ffffffffffffffda RBX: 00007f440ba15fa0 RCX: 00007f440b79bf79 [ 913.886417][T30792] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 913.886428][T30792] RBP: 00007f440c655090 R08: 0000000000000000 R09: 0000000000000000 [ 913.886440][T30792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.886451][T30792] R13: 00007f440ba16038 R14: 00007f440ba15fa0 R15: 00007ffc54e79738 [ 913.886482][T30792] [ 914.517649][T30801] wg1 speed is unknown, defaulting to 1000 [ 914.535787][T30801] lo speed is unknown, defaulting to 1000 [ 914.536538][T30805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6816'. [ 915.339877][T30814] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 915.395419][T30817] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6819'. [ 915.717314][T30820] wg1 speed is unknown, defaulting to 1000 [ 915.727468][T30820] lo speed is unknown, defaulting to 1000 [ 916.848851][T30787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 917.078571][T30843] netlink: 'syz.0.6827': attribute type 46 has an invalid length. [ 917.106947][T30841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6826'. [ 917.315584][T30849] wg1 speed is unknown, defaulting to 1000 [ 917.323152][T30849] lo speed is unknown, defaulting to 1000 [ 917.383856][ T30] audit: type=1800 audit(1771305304.671:147): pid=30836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6823" name="memory.events" dev="tmpfs" ino=6928 res=0 errno=0 [ 917.452607][T30859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.488284][T30860] tipc: Resetting bearer [ 917.534130][T30862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.563043][T30866] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6831'. [ 917.569689][T30844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.618761][ T30] audit: type=1800 audit(1771305304.911:148): pid=30851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6825" name="memory.events" dev="tmpfs" ino=6928 res=0 errno=0 [ 917.760185][T30871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6833'. [ 918.150181][T30890] A link change request failed with some changes committed already. Interface 30 may have been left with an inconsistent configuration, please check. [ 918.240756][T30895] FAULT_INJECTION: forcing a failure. [ 918.240756][T30895] name failslab, interval 1, probability 0, space 0, times 0 [ 918.278774][T30895] CPU: 0 UID: 0 PID: 30895 Comm: syz.4.6844 Not tainted syzkaller #0 PREEMPT(full) [ 918.278799][T30895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 918.278810][T30895] Call Trace: [ 918.278818][T30895] [ 918.278826][T30895] dump_stack_lvl+0xe8/0x150 [ 918.278854][T30895] should_fail_ex+0x412/0x560 [ 918.278881][T30895] should_failslab+0xa8/0x100 [ 918.278906][T30895] __kmalloc_cache_noprof+0x88/0x660 [ 918.278929][T30895] ? nl80211_prepare_wdev_dump+0x2c3/0x6a0 [ 918.278962][T30895] nl80211_prepare_wdev_dump+0x2c3/0x6a0 [ 918.278988][T30895] nl80211_dump_station+0x192/0xd80 [ 918.279007][T30895] ? kasan_save_track+0x4f/0x80 [ 918.279025][T30895] ? kasan_save_track+0x3e/0x80 [ 918.279042][T30895] ? __kasan_kmalloc+0x93/0xb0 [ 918.279059][T30895] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 918.279078][T30895] ? netlink_dump+0x1ef/0xe80 [ 918.279092][T30895] ? __netlink_dump_start+0x5cb/0x7e0 [ 918.279106][T30895] ? netlink_rcv_skb+0x232/0x4b0 [ 918.279119][T30895] ? genl_rcv+0x28/0x40 [ 918.279136][T30895] ? netlink_unicast+0x80f/0x9b0 [ 918.279155][T30895] ? netlink_sendmsg+0x813/0xb40 [ 918.279169][T30895] ? ____sys_sendmsg+0xa68/0xad0 [ 918.279187][T30895] ? ___sys_sendmsg+0x2a5/0x360 [ 918.279207][T30895] ? __pfx_nl80211_dump_station+0x10/0x10 [ 918.279263][T30895] ? rcu_is_watching+0x15/0xb0 [ 918.279284][T30895] ? trace_kmalloc+0x1f/0xb0 [ 918.279304][T30895] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 918.279336][T30895] genl_dumpit+0x10b/0x1b0 [ 918.279359][T30895] netlink_dump+0x722/0xe80 [ 918.279425][T30895] ? __pfx_netlink_dump+0x10/0x10 [ 918.279460][T30895] ? genl_start+0x499/0x6c0 [ 918.279486][T30895] __netlink_dump_start+0x5cb/0x7e0 [ 918.279511][T30895] genl_family_rcv_msg_dumpit+0x213/0x310 [ 918.279536][T30895] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 918.279555][T30895] ? genl_get_cmd+0x7f4/0x930 [ 918.279580][T30895] ? __pfx_genl_start+0x10/0x10 [ 918.279597][T30895] ? __pfx_genl_dumpit+0x10/0x10 [ 918.279615][T30895] ? __pfx_genl_done+0x10/0x10 [ 918.279636][T30895] ? __lock_acquire+0x6b5/0x2cf0 [ 918.279664][T30895] genl_rcv_msg+0x5e8/0x7a0 [ 918.279689][T30895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 918.279707][T30895] ? __pfx_nl80211_dump_station+0x10/0x10 [ 918.279739][T30895] netlink_rcv_skb+0x232/0x4b0 [ 918.279757][T30895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 918.279779][T30895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 918.279794][T30895] ? genl_rcv+0x19/0x40 [ 918.279831][T30895] ? down_read+0x272/0x2e0 [ 918.279851][T30895] ? genl_rcv+0xd/0x40 [ 918.279871][T30895] genl_rcv+0x28/0x40 [ 918.279889][T30895] netlink_unicast+0x80f/0x9b0 [ 918.279921][T30895] ? __pfx_netlink_unicast+0x10/0x10 [ 918.279943][T30895] ? netlink_sendmsg+0x650/0xb40 [ 918.279959][T30895] ? skb_put+0x11b/0x210 [ 918.279981][T30895] netlink_sendmsg+0x813/0xb40 [ 918.280008][T30895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.280029][T30895] ? aa_sock_msg_perm+0xf1/0x1b0 [ 918.280054][T30895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 918.280076][T30895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.280092][T30895] ____sys_sendmsg+0xa68/0xad0 [ 918.280114][T30895] ? __might_fault+0xaf/0x130 [ 918.280140][T30895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 918.280171][T30895] ? import_iovec+0x73/0xa0 [ 918.280193][T30895] ___sys_sendmsg+0x2a5/0x360 [ 918.280212][T30895] ? __lock_acquire+0x6b5/0x2cf0 [ 918.280235][T30895] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.280291][T30895] ? __fget_files+0x2a/0x420 [ 918.280308][T30895] ? __fget_files+0x3a0/0x420 [ 918.280335][T30895] __x64_sys_sendmsg+0x1bd/0x2a0 [ 918.280360][T30895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.280397][T30895] ? __pfx_ksys_write+0x10/0x10 [ 918.280430][T30895] do_syscall_64+0x14d/0xf80 [ 918.280451][T30895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.280468][T30895] ? trace_irq_disable+0x37/0x100 [ 918.280486][T30895] ? clear_bhb_loop+0x40/0x90 [ 918.280508][T30895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.280524][T30895] RIP: 0033:0x7f440b79bf79 [ 918.280541][T30895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.280556][T30895] RSP: 002b:00007f440c655028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.280575][T30895] RAX: ffffffffffffffda RBX: 00007f440ba15fa0 RCX: 00007f440b79bf79 [ 918.280588][T30895] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 918.280600][T30895] RBP: 00007f440c655090 R08: 0000000000000000 R09: 0000000000000000 [ 918.280611][T30895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.280622][T30895] R13: 00007f440ba16038 R14: 00007f440ba15fa0 R15: 00007ffc54e79738 [ 918.280651][T30895] [ 918.929652][ T13] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 918.984635][T30916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.012712][T30913] wg1 speed is unknown, defaulting to 1000 [ 919.065703][T30913] lo speed is unknown, defaulting to 1000 [ 919.258010][T30929] wg1 speed is unknown, defaulting to 1000 [ 919.265857][T30929] lo speed is unknown, defaulting to 1000 [ 919.266090][T30932] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 919.324443][T30932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6858'. [ 919.337147][T30932] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6858'. [ 919.354637][ T30] audit: type=1800 audit(1771305306.651:149): pid=30931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6857" name="memory.events" dev="tmpfs" ino=6954 res=0 errno=0 [ 919.380649][T30929] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 919.393121][T30927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.744741][T30954] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 919.844688][T30962] FAULT_INJECTION: forcing a failure. [ 919.844688][T30962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.912583][T30967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6866'. [ 919.916493][T30962] CPU: 0 UID: 0 PID: 30962 Comm: syz.4.6864 Not tainted syzkaller #0 PREEMPT(full) [ 919.916516][T30962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 919.916527][T30962] Call Trace: [ 919.916534][T30962] [ 919.916542][T30962] dump_stack_lvl+0xe8/0x150 [ 919.916569][T30962] should_fail_ex+0x412/0x560 [ 919.916597][T30962] _copy_from_user+0x2d/0xb0 [ 919.916615][T30962] ___sys_sendmsg+0x1c6/0x360 [ 919.916635][T30962] ? __lock_acquire+0x6b5/0x2cf0 [ 919.916657][T30962] ? __pfx____sys_sendmsg+0x10/0x10 [ 919.916710][T30962] ? __fget_files+0x2a/0x420 [ 919.916726][T30962] ? __fget_files+0x3a0/0x420 [ 919.916751][T30962] __x64_sys_sendmsg+0x1bd/0x2a0 [ 919.916774][T30962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 919.916803][T30962] ? __pfx_ksys_write+0x10/0x10 [ 919.916833][T30962] do_syscall_64+0x14d/0xf80 [ 919.916854][T30962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.916870][T30962] ? trace_irq_disable+0x37/0x100 [ 919.916889][T30962] ? clear_bhb_loop+0x40/0x90 [ 919.916909][T30962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.916925][T30962] RIP: 0033:0x7f440b79bf79 [ 919.916941][T30962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.916955][T30962] RSP: 002b:00007f440c634028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.916974][T30962] RAX: ffffffffffffffda RBX: 00007f440ba16090 RCX: 00007f440b79bf79 [ 919.916987][T30962] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 919.916998][T30962] RBP: 00007f440c634090 R08: 0000000000000000 R09: 0000000000000000 [ 919.917009][T30962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.917019][T30962] R13: 00007f440ba16128 R14: 00007f440ba16090 R15: 00007ffc54e79738 [ 919.917048][T30962] [ 920.094764][T30973] netlink: 71 bytes leftover after parsing attributes in process `syz.3.6868'. [ 920.318380][T30989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6871'. [ 920.331320][T30989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6871'. [ 920.350517][T30989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6871'. [ 920.371797][T30981] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 920.388040][T30981] bond11 (unregistering): Released all slaves [ 920.435878][T30991] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 920.469071][T30989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6871'. [ 920.478986][T30989] tipc: Enabling of bearer rejected, failed to enable media [ 920.553266][T30996] wg1 speed is unknown, defaulting to 1000 [ 920.565971][T31002] netlink: 'syz.1.6875': attribute type 46 has an invalid length. [ 920.577281][T30996] lo speed is unknown, defaulting to 1000 [ 920.965727][T31020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6881'. [ 920.975366][T31020] netlink: 'syz.4.6881': attribute type 15 has an invalid length. [ 921.069536][T31024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6884'. [ 921.337069][T31036] netlink: 'syz.2.6888': attribute type 46 has an invalid length. [ 921.531306][T31042] vlan2: entered promiscuous mode [ 921.542279][T31042] bridge0: entered promiscuous mode [ 921.572634][T31040] xt_CT: No such helper "syz0" [ 921.622499][T31045] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 921.671311][T31045] bond11 (unregistering): Released all slaves [ 921.721520][T31047] tipc: Enabling of bearer rejected, failed to enable media [ 921.848470][T31055] wg1 speed is unknown, defaulting to 1000 [ 921.866167][T31055] lo speed is unknown, defaulting to 1000 [ 922.240365][T31067] wg1 speed is unknown, defaulting to 1000 [ 922.271101][T31067] lo speed is unknown, defaulting to 1000 [ 922.405876][T31074] netlink: 'syz.0.6900': attribute type 46 has an invalid length. [ 922.628541][T31081] wg1 speed is unknown, defaulting to 1000 [ 922.638757][T31081] lo speed is unknown, defaulting to 1000 [ 922.667902][T31085] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 922.860239][T31095] netlink: 'syz.2.6906': attribute type 3 has an invalid length. [ 922.869468][T31088] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 922.887000][T31095] netlink: 'syz.2.6906': attribute type 1 has an invalid length. [ 922.911596][T31088] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 923.030438][T31092] wg1 speed is unknown, defaulting to 1000 [ 923.074028][T31092] lo speed is unknown, defaulting to 1000 [ 923.521041][T31108] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 923.557664][T31108] bond0 (unregistering): Released all slaves [ 923.608462][T31111] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 923.958243][T31133] wg1 speed is unknown, defaulting to 1000 [ 923.974761][T31127] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 924.009236][T31133] lo speed is unknown, defaulting to 1000 [ 924.363669][T31140] openvswitch: netlink: Key type 30 is not supported [ 925.267146][T31165] __nla_validate_parse: 20 callbacks suppressed [ 925.267165][T31165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6929'. [ 925.358199][T31165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6929'. [ 925.414271][T31165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6929'. [ 925.465131][T31163] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 925.518932][T31163] bond8 (unregistering): Released all slaves [ 925.598435][T31166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6929'. [ 925.624894][T31166] tipc: Enabling of bearer rejected, failed to enable media [ 925.644071][T31176] veth1_to_bond: entered promiscuous mode [ 925.649825][T31176] veth1_to_bond: entered allmulticast mode [ 926.271498][T31200] FAULT_INJECTION: forcing a failure. [ 926.271498][T31200] name failslab, interval 1, probability 0, space 0, times 0 [ 926.310036][T31200] CPU: 0 UID: 0 PID: 31200 Comm: syz.0.6940 Not tainted syzkaller #0 PREEMPT(full) [ 926.310062][T31200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 926.310074][T31200] Call Trace: [ 926.310081][T31200] [ 926.310090][T31200] dump_stack_lvl+0xe8/0x150 [ 926.310116][T31200] should_fail_ex+0x412/0x560 [ 926.310145][T31200] should_failslab+0xa8/0x100 [ 926.310170][T31200] __kmalloc_cache_noprof+0x88/0x660 [ 926.310192][T31200] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.310215][T31200] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 926.310241][T31200] __xdp_reg_mem_model+0x1e3/0x5d0 [ 926.310267][T31200] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 926.310289][T31200] ? page_pool_create_percpu+0x7f9/0xb80 [ 926.310317][T31200] xdp_reg_mem_model+0x22/0x40 [ 926.310338][T31200] bpf_test_run_xdp_live+0x295/0x1cf0 [ 926.310363][T31200] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 926.310393][T31200] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 926.310417][T31200] ? __pfx_autoremove_wake_function+0x10/0x10 [ 926.310443][T31200] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 926.310481][T31200] ? 0xffffffffa0201690 [ 926.310495][T31200] ? 0xffffffffa02016c8 [ 926.310509][T31200] ? 0xffffffffa0201750 [ 926.310522][T31200] ? 0xffffffffa0201798 [ 926.310559][T31200] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 926.310585][T31200] ? rep_movs_alternative+0x4a/0x90 [ 926.310603][T31200] ? _copy_from_user+0x94/0xb0 [ 926.310621][T31200] ? bpf_test_init+0x113/0x150 [ 926.310636][T31200] ? xdp_convert_md_to_buff+0x5b/0x330 [ 926.310657][T31200] bpf_prog_test_run_xdp+0x81c/0x1160 [ 926.310689][T31200] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 926.310713][T31200] ? __fget_files+0x2a/0x420 [ 926.310736][T31200] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 926.310755][T31200] bpf_prog_test_run+0x2c7/0x340 [ 926.310780][T31200] __sys_bpf+0x643/0x950 [ 926.310803][T31200] ? __pfx___sys_bpf+0x10/0x10 [ 926.310837][T31200] ? ksys_write+0x242/0x270 [ 926.310865][T31200] ? __pfx_ksys_write+0x10/0x10 [ 926.310892][T31200] __x64_sys_bpf+0x7c/0x90 [ 926.310911][T31200] do_syscall_64+0x14d/0xf80 [ 926.310932][T31200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.310948][T31200] ? trace_irq_disable+0x37/0x100 [ 926.310966][T31200] ? clear_bhb_loop+0x40/0x90 [ 926.310986][T31200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.311003][T31200] RIP: 0033:0x7f8f8ad9bf79 [ 926.311019][T31200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.311033][T31200] RSP: 002b:00007f8f8bbbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 926.311053][T31200] RAX: ffffffffffffffda RBX: 00007f8f8b015fa0 RCX: 00007f8f8ad9bf79 [ 926.311066][T31200] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 926.311078][T31200] RBP: 00007f8f8bbbd090 R08: 0000000000000000 R09: 0000000000000000 [ 926.311089][T31200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 926.311100][T31200] R13: 00007f8f8b016038 R14: 00007f8f8b015fa0 R15: 00007ffdd722b788 [ 926.311130][T31200] [ 926.740613][T31209] vlan3: entered allmulticast mode [ 926.777512][T31209] veth0_to_bond: entered allmulticast mode [ 927.016206][T31224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6947'. [ 927.093297][T31220] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 927.122081][T31220] bond11 (unregistering): Released all slaves [ 927.265891][ T30] audit: type=1800 audit(1771305314.561:150): pid=31226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6944" name="memory.events" dev="tmpfs" ino=6960 res=0 errno=0 [ 927.438118][T31211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.510763][T31240] mac80211_hwsim hwsim49 wlan0: default FDB implementation only supports local addresses [ 927.660211][T31244] pim6reg: entered allmulticast mode [ 927.757478][T31246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6954'. [ 927.961243][T31254] wg1 speed is unknown, defaulting to 1000 [ 927.970600][T31254] lo speed is unknown, defaulting to 1000 [ 928.201624][T31263] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6960'. [ 928.966514][T31286] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 929.078607][T31290] tipc: Enabling of bearer rejected, failed to enable media [ 929.118228][T31290] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 929.152020][T31295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6968'. [ 929.225938][T31299] netlink: 'syz.0.6970': attribute type 46 has an invalid length. [ 929.246135][T31297] xt_CT: No such helper "syz0" [ 929.346816][T31301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6971'. [ 929.445752][T31307] wg1 speed is unknown, defaulting to 1000 [ 929.523620][T31307] lo speed is unknown, defaulting to 1000 [ 929.567041][T31316] IPVS: set_ctl: invalid protocol: 135 172.30.0.3:20002 [ 929.836496][T31337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6981'. [ 930.045300][T31344] FAULT_INJECTION: forcing a failure. [ 930.045300][T31344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.097319][T31344] CPU: 1 UID: 0 PID: 31344 Comm: syz.1.6983 Not tainted syzkaller #0 PREEMPT(full) [ 930.097345][T31344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 930.097356][T31344] Call Trace: [ 930.097365][T31344] [ 930.097373][T31344] dump_stack_lvl+0xe8/0x150 [ 930.097400][T31344] should_fail_ex+0x412/0x560 [ 930.097429][T31344] _copy_to_user+0x31/0xb0 [ 930.097450][T31344] simple_read_from_buffer+0xe1/0x170 [ 930.097479][T31344] proc_fail_nth_read+0x1bb/0x230 [ 930.097501][T31344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 930.097523][T31344] ? rw_verify_area+0x2a6/0x4d0 [ 930.097542][T31344] ? __fget_files+0x2a/0x420 [ 930.097557][T31344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 930.097579][T31344] vfs_read+0x20c/0xa70 [ 930.097596][T31344] ? fdget_pos+0x246/0x320 [ 930.097617][T31344] ? __pfx___mutex_lock+0x10/0x10 [ 930.097639][T31344] ? __pfx_vfs_read+0x10/0x10 [ 930.097660][T31344] ? __fget_files+0x2a/0x420 [ 930.097678][T31344] ? __fget_files+0x3a0/0x420 [ 930.097694][T31344] ? __fget_files+0x2a/0x420 [ 930.097718][T31344] ksys_read+0x150/0x270 [ 930.097740][T31344] ? __pfx_ksys_read+0x10/0x10 [ 930.097770][T31344] do_syscall_64+0x14d/0xf80 [ 930.097790][T31344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.097806][T31344] ? trace_irq_disable+0x37/0x100 [ 930.097823][T31344] ? clear_bhb_loop+0x40/0x90 [ 930.097843][T31344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.097860][T31344] RIP: 0033:0x7fe4eab5c84e [ 930.097875][T31344] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 930.097888][T31344] RSP: 002b:00007fe4eb9affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 930.097907][T31344] RAX: ffffffffffffffda RBX: 00007fe4eb9b06c0 RCX: 00007fe4eab5c84e [ 930.097919][T31344] RDX: 000000000000000f RSI: 00007fe4eb9b00a0 RDI: 0000000000000005 [ 930.097930][T31344] RBP: 00007fe4eb9b0090 R08: 0000000000000000 R09: 0000000000000000 [ 930.097940][T31344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 930.097951][T31344] R13: 00007fe4eae16038 R14: 00007fe4eae15fa0 R15: 00007ffc04f9d418 [ 930.097979][T31344] [ 930.503342][T31354] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 930.516227][T31354] bond8 (unregistering): Released all slaves [ 930.518631][T31361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6985'. [ 930.716168][T31354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6985'. [ 930.739480][T31354] tipc: Enabling of bearer rejected, failed to enable media [ 931.299708][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.302669][T31399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.343920][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.439599][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 931.452686][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 931.463767][T31406] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6995'. [ 931.557189][T31405] syzkaller0: entered promiscuous mode [ 931.593601][T31405] syzkaller0: entered allmulticast mode [ 931.599224][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 931.812684][T31429] FAULT_INJECTION: forcing a failure. [ 931.812684][T31429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.862315][T31429] CPU: 1 UID: 0 PID: 31429 Comm: syz.0.6999 Not tainted syzkaller #0 PREEMPT(full) [ 931.862344][T31429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.862355][T31429] Call Trace: [ 931.862362][T31429] [ 931.862371][T31429] dump_stack_lvl+0xe8/0x150 [ 931.862398][T31429] should_fail_ex+0x412/0x560 [ 931.862424][T31429] _copy_from_iter+0x1d3/0x1670 [ 931.862456][T31429] ? rcu_is_watching+0x15/0xb0 [ 931.862477][T31429] ? __pfx__copy_from_iter+0x10/0x10 [ 931.862509][T31429] ? netlink_sendmsg+0x650/0xb40 [ 931.862527][T31429] ? skb_put+0x11b/0x210 [ 931.862551][T31429] netlink_sendmsg+0x6c0/0xb40 [ 931.862578][T31429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.862598][T31429] ? aa_sock_msg_perm+0xf1/0x1b0 [ 931.862622][T31429] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 931.862646][T31429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.862663][T31429] ____sys_sendmsg+0xa68/0xad0 [ 931.862685][T31429] ? __might_fault+0xaf/0x130 [ 931.862710][T31429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 931.862740][T31429] ? import_iovec+0x73/0xa0 [ 931.862761][T31429] ___sys_sendmsg+0x2a5/0x360 [ 931.862780][T31429] ? __lock_acquire+0x6b5/0x2cf0 [ 931.862803][T31429] ? __pfx____sys_sendmsg+0x10/0x10 [ 931.862859][T31429] ? __fget_files+0x2a/0x420 [ 931.862876][T31429] ? __fget_files+0x3a0/0x420 [ 931.862903][T31429] __x64_sys_sendmsg+0x1bd/0x2a0 [ 931.862927][T31429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 931.862957][T31429] ? __pfx_ksys_write+0x10/0x10 [ 931.862989][T31429] do_syscall_64+0x14d/0xf80 [ 931.863011][T31429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.863028][T31429] ? trace_irq_disable+0x37/0x100 [ 931.863053][T31429] ? clear_bhb_loop+0x40/0x90 [ 931.863074][T31429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.863090][T31429] RIP: 0033:0x7f8f8ad9bf79 [ 931.863107][T31429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.863122][T31429] RSP: 002b:00007f8f8bb7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.863142][T31429] RAX: ffffffffffffffda RBX: 00007f8f8b016180 RCX: 00007f8f8ad9bf79 [ 931.863156][T31429] RDX: 0000000020004000 RSI: 0000200000000140 RDI: 0000000000000004 [ 931.863168][T31429] RBP: 00007f8f8bb7b090 R08: 0000000000000000 R09: 0000000000000000 [ 931.863180][T31429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.863191][T31429] R13: 00007f8f8b016218 R14: 00007f8f8b016180 R15: 00007ffdd722b788 [ 931.863220][T31429] [ 932.255799][T31420] tipc: Resetting bearer [ 932.522076][T31451] FAULT_INJECTION: forcing a failure. [ 932.522076][T31451] name failslab, interval 1, probability 0, space 0, times 0 [ 932.553398][T31451] CPU: 1 UID: 0 PID: 31451 Comm: syz.1.7008 Not tainted syzkaller #0 PREEMPT(full) [ 932.553424][T31451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 932.553435][T31451] Call Trace: [ 932.553443][T31451] [ 932.553451][T31451] dump_stack_lvl+0xe8/0x150 [ 932.553478][T31451] should_fail_ex+0x412/0x560 [ 932.553509][T31451] should_failslab+0xa8/0x100 [ 932.553533][T31451] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 932.553554][T31451] ? __alloc_skb+0x186/0x7d0 [ 932.553570][T31451] ? __alloc_skb+0x1d0/0x7d0 [ 932.553585][T31451] ? __local_bh_enable_ip+0xd0/0x130 [ 932.553608][T31451] __alloc_skb+0x1d0/0x7d0 [ 932.553631][T31451] netlink_sendmsg+0x5d4/0xb40 [ 932.553657][T31451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.553677][T31451] ? aa_sock_msg_perm+0xf1/0x1b0 [ 932.553699][T31451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 932.553722][T31451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.553738][T31451] ____sys_sendmsg+0xa68/0xad0 [ 932.553760][T31451] ? __might_fault+0xaf/0x130 [ 932.553786][T31451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 932.553816][T31451] ? import_iovec+0x73/0xa0 [ 932.553837][T31451] ___sys_sendmsg+0x2a5/0x360 [ 932.553855][T31451] ? __lock_acquire+0x6b5/0x2cf0 [ 932.553877][T31451] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.553939][T31451] ? __fget_files+0x2a/0x420 [ 932.553955][T31451] ? __fget_files+0x3a0/0x420 [ 932.553981][T31451] __x64_sys_sendmsg+0x1bd/0x2a0 [ 932.554005][T31451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 932.554035][T31451] ? __pfx_ksys_write+0x10/0x10 [ 932.554066][T31451] do_syscall_64+0x14d/0xf80 [ 932.554087][T31451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.554104][T31451] ? trace_irq_disable+0x37/0x100 [ 932.554123][T31451] ? clear_bhb_loop+0x40/0x90 [ 932.554143][T31451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.554160][T31451] RIP: 0033:0x7fe4eab9bf79 [ 932.554176][T31451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.554191][T31451] RSP: 002b:00007fe4eb9b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.554209][T31451] RAX: ffffffffffffffda RBX: 00007fe4eae15fa0 RCX: 00007fe4eab9bf79 [ 932.554223][T31451] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 932.554234][T31451] RBP: 00007fe4eb9b0090 R08: 0000000000000000 R09: 0000000000000000 [ 932.554245][T31451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.554255][T31451] R13: 00007fe4eae16038 R14: 00007fe4eae15fa0 R15: 00007ffc04f9d418 [ 932.554284][T31451] [ 933.040407][T31468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7009'. [ 933.198388][T31473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7014'. [ 933.548560][T31493] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 933.571795][T31496] wg1 speed is unknown, defaulting to 1000 [ 933.626967][T31496] lo speed is unknown, defaulting to 1000 [ 933.680104][T31509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7024'. [ 933.704631][T31504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7020'. [ 933.749052][T31504] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7020'. [ 933.776747][T31514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7027'. [ 934.007669][T31519] netlink: 'syz.2.7028': attribute type 10 has an invalid length. [ 934.085145][T31530] FAULT_INJECTION: forcing a failure. [ 934.085145][T31530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.139999][T31530] CPU: 0 UID: 0 PID: 31530 Comm: syz.0.7030 Not tainted syzkaller #0 PREEMPT(full) [ 934.140034][T31530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 934.140045][T31530] Call Trace: [ 934.140052][T31530] [ 934.140060][T31530] dump_stack_lvl+0xe8/0x150 [ 934.140087][T31530] should_fail_ex+0x412/0x560 [ 934.140119][T31530] _copy_from_user+0x2d/0xb0 [ 934.140138][T31530] ___sys_sendmsg+0x1c6/0x360 [ 934.140158][T31530] ? __lock_acquire+0x6b5/0x2cf0 [ 934.140179][T31530] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.140228][T31530] ? __fget_files+0x2a/0x420 [ 934.140244][T31530] ? __fget_files+0x3a0/0x420 [ 934.140269][T31530] __x64_sys_sendmsg+0x1bd/0x2a0 [ 934.140291][T31530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 934.140318][T31530] ? __pfx_ksys_write+0x10/0x10 [ 934.140347][T31530] do_syscall_64+0x14d/0xf80 [ 934.140367][T31530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.140382][T31530] ? trace_irq_disable+0x37/0x100 [ 934.140399][T31530] ? clear_bhb_loop+0x40/0x90 [ 934.140419][T31530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.140434][T31530] RIP: 0033:0x7f8f8ad9bf79 [ 934.140450][T31530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.140464][T31530] RSP: 002b:00007f8f8bbbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.140483][T31530] RAX: ffffffffffffffda RBX: 00007f8f8b015fa0 RCX: 00007f8f8ad9bf79 [ 934.140496][T31530] RDX: 0000000004004050 RSI: 0000200000000040 RDI: 0000000000000003 [ 934.140508][T31530] RBP: 00007f8f8bbbd090 R08: 0000000000000000 R09: 0000000000000000 [ 934.140520][T31530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.140531][T31530] R13: 00007f8f8b016038 R14: 00007f8f8b015fa0 R15: 00007ffdd722b788 [ 934.140560][T31530] [ 934.358325][T31532] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 934.423690][T31538] FAULT_INJECTION: forcing a failure. [ 934.423690][T31538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.461344][T31538] CPU: 1 UID: 0 PID: 31538 Comm: syz.2.7032 Not tainted syzkaller #0 PREEMPT(full) [ 934.461368][T31538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 934.461379][T31538] Call Trace: [ 934.461386][T31538] [ 934.461394][T31538] dump_stack_lvl+0xe8/0x150 [ 934.461421][T31538] should_fail_ex+0x412/0x560 [ 934.461449][T31538] _copy_to_user+0x31/0xb0 [ 934.461470][T31538] bpf_test_finish+0x1db/0x6b0 [ 934.461495][T31538] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 934.461514][T31538] ? __pfx_bpf_test_finish+0x10/0x10 [ 934.461537][T31538] ? _copy_from_user+0x94/0xb0 [ 934.461555][T31538] ? bpf_test_init+0x113/0x150 [ 934.461573][T31538] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 934.461608][T31538] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 934.461630][T31538] ? __fget_files+0x2a/0x420 [ 934.461653][T31538] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 934.461671][T31538] bpf_prog_test_run+0x2c7/0x340 [ 934.461696][T31538] __sys_bpf+0x643/0x950 [ 934.461718][T31538] ? __pfx___sys_bpf+0x10/0x10 [ 934.461759][T31538] ? ksys_write+0x242/0x270 [ 934.461782][T31538] ? __pfx_ksys_write+0x10/0x10 [ 934.461809][T31538] __x64_sys_bpf+0x7c/0x90 [ 934.461829][T31538] do_syscall_64+0x14d/0xf80 [ 934.461849][T31538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.461865][T31538] ? trace_irq_disable+0x37/0x100 [ 934.461884][T31538] ? clear_bhb_loop+0x40/0x90 [ 934.461915][T31538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.461932][T31538] RIP: 0033:0x7fa38259bf79 [ 934.461948][T31538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.461963][T31538] RSP: 002b:00007fa383438028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 934.461981][T31538] RAX: ffffffffffffffda RBX: 00007fa382815fa0 RCX: 00007fa38259bf79 [ 934.461994][T31538] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 934.462006][T31538] RBP: 00007fa383438090 R08: 0000000000000000 R09: 0000000000000000 [ 934.462017][T31538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 934.462027][T31538] R13: 00007fa382816038 R14: 00007fa382815fa0 R15: 00007fff2b388768 [ 934.462056][T31538] [ 934.778989][T31544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7034'. [ 935.236554][T31568] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 935.378296][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.388552][T31577] syzkaller0: entered promiscuous mode [ 935.397237][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.406966][T31577] syzkaller0: entered allmulticast mode [ 936.016167][T31573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.793587][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 936.801678][ C0] lec:lec_tx_timeout: lec0 [ 936.910957][T31591] wg1 speed is unknown, defaulting to 1000 [ 936.928867][T31591] lo speed is unknown, defaulting to 1000 [ 937.065659][T31604] __nla_validate_parse: 2 callbacks suppressed [ 937.065678][T31604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7050'. [ 937.161255][T31611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7053'. [ 937.315481][T31619] wg1 speed is unknown, defaulting to 1000 [ 937.330750][T31619] lo speed is unknown, defaulting to 1000 [ 937.380958][T31625] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 937.659776][T31633] syzkaller0: entered promiscuous mode [ 937.671862][T31633] syzkaller0: entered allmulticast mode [ 937.854307][T31642] syzkaller0: entered promiscuous mode [ 937.862187][T31642] syzkaller0: entered allmulticast mode [ 937.901394][T31647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7065'. [ 937.928746][T31647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7065'. [ 937.969556][T31650] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 938.055894][T31655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7068'. [ 938.256281][T31664] wg1 speed is unknown, defaulting to 1000 [ 938.277350][T31664] lo speed is unknown, defaulting to 1000 [ 938.327951][T31678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7071'. [ 938.622714][T31688] FAULT_INJECTION: forcing a failure. [ 938.622714][T31688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.629388][T31692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7076'. [ 938.646418][T31688] CPU: 1 UID: 0 PID: 31688 Comm: syz.4.7074 Not tainted syzkaller #0 PREEMPT(full) [ 938.646443][T31688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 938.646453][T31688] Call Trace: [ 938.646461][T31688] [ 938.646470][T31688] dump_stack_lvl+0xe8/0x150 [ 938.646496][T31688] should_fail_ex+0x412/0x560 [ 938.646523][T31688] _copy_from_user+0x2d/0xb0 [ 938.646543][T31688] ___sys_recvmsg+0x175/0x590 [ 938.646569][T31688] ? __pfx____sys_recvmsg+0x10/0x10 [ 938.646595][T31688] ? __fget_files+0x2a/0x420 [ 938.646642][T31688] do_recvmmsg+0x334/0x800 [ 938.646671][T31688] ? __pfx_do_recvmmsg+0x10/0x10 [ 938.646704][T31688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 938.646743][T31688] __x64_sys_recvmmsg+0x198/0x250 [ 938.646767][T31688] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 938.646800][T31688] do_syscall_64+0x14d/0xf80 [ 938.646820][T31688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.646837][T31688] ? trace_irq_disable+0x37/0x100 [ 938.646855][T31688] ? clear_bhb_loop+0x40/0x90 [ 938.646876][T31688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.646892][T31688] RIP: 0033:0x7f440b79bf79 [ 938.646908][T31688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.646923][T31688] RSP: 002b:00007f440c655028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 938.646942][T31688] RAX: ffffffffffffffda RBX: 00007f440ba15fa0 RCX: 00007f440b79bf79 [ 938.646956][T31688] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000004 [ 938.646968][T31688] RBP: 00007f440c655090 R08: 0000000000000000 R09: 0000000000000000 [ 938.646979][T31688] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 938.646991][T31688] R13: 00007f440ba16038 R14: 00007f440ba15fa0 R15: 00007ffc54e79738 [ 938.647021][T31688] [ 938.978335][T31699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7077'. [ 939.015992][T31699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7077'. [ 939.058907][T31702] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 939.116063][T31704] syzkaller0: entered promiscuous mode [ 939.121567][T31704] syzkaller0: entered allmulticast mode [ 939.312382][T31705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7081'. [ 939.580844][T31741] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 939.616471][T31734] wg1 speed is unknown, defaulting to 1000 [ 939.645466][T31734] lo speed is unknown, defaulting to 1000 [ 939.735583][T31748] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 939.760977][T31746] syzkaller0: entered promiscuous mode [ 939.767517][T31746] syzkaller0: entered allmulticast mode [ 939.941539][T31759] syzkaller0: entered promiscuous mode [ 939.981149][T31759] syzkaller0: entered allmulticast mode [ 940.046113][T31767] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 940.077826][T31762] wg1 speed is unknown, defaulting to 1000 [ 940.087122][T31766] netlink: 'syz.4.7101': attribute type 6 has an invalid length. [ 940.110023][T31766] netlink: 'syz.4.7101': attribute type 6 has an invalid length. [ 940.132411][T31769] tipc: Resetting bearer [ 940.172303][T31769] tipc: Resetting bearer [ 940.184165][ T5974] lo speed is unknown, defaulting to 1000 [ 940.189992][T31762] lo speed is unknown, defaulting to 1000 [ 940.195985][T21597] wg1 speed is unknown, defaulting to 1000 [ 940.199465][ T30] audit: type=1804 audit(1771305327.491:151): pid=31774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7103" name="/newroot/1373/memory.events" dev="tmpfs" ino=7080 res=1 errno=0 [ 940.244784][T31775] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 940.311907][T31778] FAULT_INJECTION: forcing a failure. [ 940.311907][T31778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 940.349245][T31778] CPU: 1 UID: 0 PID: 31778 Comm: syz.4.7104 Not tainted syzkaller #0 PREEMPT(full) [ 940.349269][T31778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 940.349280][T31778] Call Trace: [ 940.349288][T31778] [ 940.349295][T31778] dump_stack_lvl+0xe8/0x150 [ 940.349322][T31778] should_fail_ex+0x412/0x560 [ 940.349350][T31778] prepare_alloc_pages+0x22a/0x650 [ 940.349389][T31778] __alloc_frozen_pages_noprof+0x12f/0x380 [ 940.349416][T31778] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 940.349442][T31778] ? __pfx_policy_nodemask+0x10/0x10 [ 940.349475][T31778] alloc_pages_mpol+0x232/0x4a0 [ 940.349503][T31778] folio_alloc_mpol_noprof+0x39/0x70 [ 940.349528][T31778] shmem_alloc_and_add_folio+0x445/0xf80 [ 940.349556][T31778] ? filemap_get_entry+0xca/0x320 [ 940.349576][T31778] ? filemap_get_entry+0xca/0x320 [ 940.349598][T31778] ? filemap_get_entry+0x2ac/0x320 [ 940.349617][T31778] ? __pfx_filemap_get_entry+0x10/0x10 [ 940.349639][T31778] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 940.349661][T31778] ? filemap_map_pages+0x1bbe/0x2000 [ 940.349683][T31778] ? shmem_allowable_huge_orders+0x1bb/0x690 [ 940.349710][T31778] shmem_get_folio_gfp+0x5a9/0x1670 [ 940.349748][T31778] shmem_fault+0x179/0x390 [ 940.349777][T31778] __do_fault+0x138/0x390 [ 940.349801][T31778] do_pte_missing+0x21a2/0x37a0 [ 940.349821][T31778] ? do_pte_missing+0x1258/0x37a0 [ 940.349853][T31778] ? handle_mm_fault+0xee/0x32a0 [ 940.349877][T31778] handle_mm_fault+0x1b8c/0x32a0 [ 940.349907][T31778] ? handle_mm_fault+0xee/0x32a0 [ 940.349933][T31778] ? __pfx_handle_mm_fault+0x10/0x10 [ 940.349952][T31778] ? follow_page_pte+0x825/0x1460 [ 940.349979][T31778] ? __pfx_follow_page_pte+0x10/0x10 [ 940.350007][T31778] __get_user_pages+0x165b/0x29d0 [ 940.350053][T31778] populate_vma_page_range+0x2be/0x3c0 [ 940.350075][T31778] ? __pfx_populate_vma_page_range+0x10/0x10 [ 940.350097][T31778] ? down_read+0x272/0x2e0 [ 940.350118][T31778] ? __mm_populate+0x173/0x390 [ 940.350135][T31778] __mm_populate+0x25f/0x390 [ 940.350154][T31778] ? __pfx___mm_populate+0x10/0x10 [ 940.350181][T31778] vm_mmap_pgoff+0x3aa/0x4f0 [ 940.350204][T31778] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 940.350218][T31778] ? ksys_write+0x242/0x270 [ 940.350239][T31778] ? __pfx_ksys_write+0x10/0x10 [ 940.350261][T31778] ? ksys_mmap_pgoff+0xf3/0x760 [ 940.350280][T31778] ? __x64_sys_mmap+0x7f/0x140 [ 940.350304][T31778] do_syscall_64+0x14d/0xf80 [ 940.350325][T31778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.350341][T31778] ? trace_irq_disable+0x37/0x100 [ 940.350360][T31778] ? clear_bhb_loop+0x40/0x90 [ 940.350387][T31778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.350404][T31778] RIP: 0033:0x7f440b79bf79 [ 940.350421][T31778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.350436][T31778] RSP: 002b:00007f440c655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 940.350455][T31778] RAX: ffffffffffffffda RBX: 00007f440ba15fa0 RCX: 00007f440b79bf79 [ 940.350467][T31778] RDX: 0000000002000004 RSI: 0000000000c00000 RDI: 0000200000001000 [ 940.350479][T31778] RBP: 00007f440c655090 R08: ffffffffffffffff R09: 0000000000000000 [ 940.350491][T31778] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000002 [ 940.350503][T31778] R13: 00007f440ba16038 R14: 00007f440ba15fa0 R15: 00007ffc54e79738 [ 940.350532][T31778] [ 940.373816][T31780] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 940.610787][T31784] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 941.140011][T31802] syzkaller0: entered promiscuous mode [ 941.147106][T31802] syzkaller0: entered allmulticast mode [ 941.369776][T31813] wg1 speed is unknown, defaulting to 1000 [ 941.399310][T31813] lo speed is unknown, defaulting to 1000 [ 941.651556][T31831] netlink: 'syz.4.7120': attribute type 4 has an invalid length. [ 941.715971][T31831] netlink: 'syz.4.7120': attribute type 4 has an invalid length. [ 941.873257][T31835] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 942.029793][T31844] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 942.133407][T31841] bond11: option arp_interval: invalid value (18446744072937799682) [ 942.141555][T31841] bond11: option arp_interval: allowed values 0 - 2147483647 [ 942.150995][T31841] bond11 (unregistering): Released all slaves [ 942.183157][T31837] wg1 speed is unknown, defaulting to 1000 [ 942.192718][T31837] lo speed is unknown, defaulting to 1000 [ 942.952029][T31880] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 942.982550][T31880] __nla_validate_parse: 10 callbacks suppressed [ 942.982567][T31880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7135'. [ 943.010215][T31880] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7135'. [ 943.088981][T31898] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 943.098337][T31887] wg1 speed is unknown, defaulting to 1000 [ 943.131681][T31899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.170419][T31887] lo speed is unknown, defaulting to 1000 [ 943.306576][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.315632][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.473674][ T30] audit: type=1800 audit(1771305330.761:152): pid=31893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7133" name="memory.events" dev="tmpfs" ino=7669 res=0 errno=0 [ 943.513341][T31909] FAULT_INJECTION: forcing a failure. [ 943.513341][T31909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.557709][T31909] CPU: 1 UID: 0 PID: 31909 Comm: syz.2.7140 Not tainted syzkaller #0 PREEMPT(full) [ 943.557734][T31909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.557746][T31909] Call Trace: [ 943.557753][T31909] [ 943.557760][T31909] dump_stack_lvl+0xe8/0x150 [ 943.557787][T31909] should_fail_ex+0x412/0x560 [ 943.557815][T31909] _copy_to_user+0x31/0xb0 [ 943.557837][T31909] bpf_test_finish+0x22c/0x6b0 [ 943.557864][T31909] ? __pfx_bpf_test_finish+0x10/0x10 [ 943.557888][T31909] ? _copy_from_user+0x94/0xb0 [ 943.557906][T31909] ? bpf_test_init+0x113/0x150 [ 943.557925][T31909] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 943.557960][T31909] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 943.557983][T31909] ? __fget_files+0x2a/0x420 [ 943.558006][T31909] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 943.558026][T31909] bpf_prog_test_run+0x2c7/0x340 [ 943.558051][T31909] __sys_bpf+0x643/0x950 [ 943.558078][T31909] ? __pfx___sys_bpf+0x10/0x10 [ 943.558114][T31909] ? ksys_write+0x242/0x270 [ 943.558137][T31909] ? __pfx_ksys_write+0x10/0x10 [ 943.558165][T31909] __x64_sys_bpf+0x7c/0x90 [ 943.558184][T31909] do_syscall_64+0x14d/0xf80 [ 943.558205][T31909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.558222][T31909] ? trace_irq_disable+0x37/0x100 [ 943.558240][T31909] ? clear_bhb_loop+0x40/0x90 [ 943.558260][T31909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.558277][T31909] RIP: 0033:0x7fa38259bf79 [ 943.558293][T31909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.558307][T31909] RSP: 002b:00007fa383438028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 943.558326][T31909] RAX: ffffffffffffffda RBX: 00007fa382815fa0 RCX: 00007fa38259bf79 [ 943.558340][T31909] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 943.558351][T31909] RBP: 00007fa383438090 R08: 0000000000000000 R09: 0000000000000000 [ 943.558363][T31909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.558373][T31909] R13: 00007fa382816038 R14: 00007fa382815fa0 R15: 00007fff2b388768 [ 943.558404][T31909] [ 943.608733][T31907] syzkaller0: entered promiscuous mode [ 943.796514][T31907] syzkaller0: entered allmulticast mode [ 944.526538][T31938] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 944.552760][T31938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7151'. [ 944.572134][T31938] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7151'. [ 944.631375][T31939] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 945.227083][T31934] FAULT_INJECTION: forcing a failure. [ 945.227083][T31934] name failslab, interval 1, probability 0, space 0, times 0 [ 945.240273][T31934] CPU: 0 UID: 0 PID: 31934 Comm: syz.2.7150 Not tainted syzkaller #0 PREEMPT(full) [ 945.240297][T31934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 945.240308][T31934] Call Trace: [ 945.240315][T31934] [ 945.240323][T31934] dump_stack_lvl+0xe8/0x150 [ 945.240350][T31934] should_fail_ex+0x412/0x560 [ 945.240378][T31934] should_failslab+0xa8/0x100 [ 945.240402][T31934] __kmalloc_node_noprof+0xf0/0x7c0 [ 945.240421][T31934] ? lock_acquire+0x106/0x330 [ 945.240439][T31934] ? qdisc_alloc+0x92/0x9e0 [ 945.240462][T31934] qdisc_alloc+0x92/0x9e0 [ 945.240489][T31934] qdisc_create+0x12c/0xf20 [ 945.240516][T31934] ? nla_strcmp+0xe6/0x140 [ 945.240536][T31934] tc_modify_qdisc+0x16f0/0x2290 [ 945.240559][T31934] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 945.240596][T31934] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 945.240649][T31934] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 945.240671][T31934] rtnetlink_rcv_msg+0x77e/0xbe0 [ 945.240695][T31934] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 945.240714][T31934] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.240739][T31934] ? __lock_acquire+0x6b5/0x2cf0 [ 945.240772][T31934] netlink_rcv_skb+0x232/0x4b0 [ 945.240792][T31934] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 945.240813][T31934] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 945.240843][T31934] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.240870][T31934] netlink_unicast+0x80f/0x9b0 [ 945.240903][T31934] ? __pfx_netlink_unicast+0x10/0x10 [ 945.240928][T31934] ? netlink_sendmsg+0x650/0xb40 [ 945.240944][T31934] ? skb_put+0x11b/0x210 [ 945.240969][T31934] netlink_sendmsg+0x813/0xb40 [ 945.240996][T31934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.241018][T31934] ? aa_sock_msg_perm+0xf1/0x1b0 [ 945.241042][T31934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 945.241066][T31934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.241084][T31934] ____sys_sendmsg+0xa68/0xad0 [ 945.241104][T31934] ? __might_fault+0xaf/0x130 [ 945.241131][T31934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.241165][T31934] ? import_iovec+0x73/0xa0 [ 945.241188][T31934] ___sys_sendmsg+0x2a5/0x360 [ 945.241208][T31934] ? __lock_acquire+0x6b5/0x2cf0 [ 945.241230][T31934] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.241288][T31934] ? __fget_files+0x2a/0x420 [ 945.241305][T31934] ? __fget_files+0x3a0/0x420 [ 945.241334][T31934] __x64_sys_sendmsg+0x1bd/0x2a0 [ 945.241357][T31934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 945.241388][T31934] ? __pfx_ksys_write+0x10/0x10 [ 945.241422][T31934] do_syscall_64+0x14d/0xf80 [ 945.241443][T31934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.241460][T31934] ? trace_irq_disable+0x37/0x100 [ 945.241479][T31934] ? clear_bhb_loop+0x40/0x90 [ 945.241501][T31934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.241518][T31934] RIP: 0033:0x7fa38259bf79 [ 945.241534][T31934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.241549][T31934] RSP: 002b:00007fa383438028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.241569][T31934] RAX: ffffffffffffffda RBX: 00007fa382815fa0 RCX: 00007fa38259bf79 [ 945.241582][T31934] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 945.241594][T31934] RBP: 00007fa383438090 R08: 0000000000000000 R09: 0000000000000000 [ 945.241605][T31934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.241616][T31934] R13: 00007fa382816038 R14: 00007fa382815fa0 R15: 00007fff2b388768 [ 945.241648][T31934] [ 945.275097][T31936] wg1 speed is unknown, defaulting to 1000 [ 945.381653][T31941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7152'. [ 945.451555][T31945] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7154'. [ 945.485647][T31936] lo speed is unknown, defaulting to 1000 [ 945.815658][T31957] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 945.827737][T31957] bond11 (unregistering): Released all slaves [ 945.837103][T31963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7160'. [ 945.881077][T31963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7160'. [ 945.906873][T31963] tipc: Enabling of bearer rejected, failed to enable media [ 945.950948][T31968] netlink: 'syz.1.7164': attribute type 2 has an invalid length. [ 945.958888][T31968] netlink: 'syz.1.7164': attribute type 1 has an invalid length. [ 945.983724][T31968] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7164'. [ 946.009913][T31972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.035858][T31972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.102368][T31974] FAULT_INJECTION: forcing a failure. [ 946.102368][T31974] name failslab, interval 1, probability 0, space 0, times 0 [ 946.144488][T31974] CPU: 1 UID: 0 PID: 31974 Comm: syz.3.7167 Not tainted syzkaller #0 PREEMPT(full) [ 946.144513][T31974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 946.144524][T31974] Call Trace: [ 946.144532][T31974] [ 946.144540][T31974] dump_stack_lvl+0xe8/0x150 [ 946.144567][T31974] should_fail_ex+0x412/0x560 [ 946.144597][T31974] should_failslab+0xa8/0x100 [ 946.144622][T31974] __kmalloc_noprof+0xe8/0x760 [ 946.144643][T31974] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 946.144673][T31974] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 946.144702][T31974] genl_family_rcv_msg_doit+0xd9/0x330 [ 946.144730][T31974] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 946.144759][T31974] ? apparmor_capable+0x137/0x1a0 [ 946.144780][T31974] ? bpf_lsm_capable+0x9/0x20 [ 946.144797][T31974] ? security_capable+0x7e/0x2c0 [ 946.144825][T31974] genl_rcv_msg+0x61c/0x7a0 [ 946.144853][T31974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 946.144872][T31974] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 946.144900][T31974] ? __pfx_nl80211_connect+0x10/0x10 [ 946.144917][T31974] ? __pfx_nl80211_post_doit+0x10/0x10 [ 946.144953][T31974] netlink_rcv_skb+0x232/0x4b0 [ 946.144973][T31974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 946.144995][T31974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 946.145010][T31974] ? genl_rcv+0x19/0x40 [ 946.145045][T31974] ? down_read+0x272/0x2e0 [ 946.145067][T31974] ? genl_rcv+0xd/0x40 [ 946.145092][T31974] genl_rcv+0x28/0x40 [ 946.145110][T31974] netlink_unicast+0x80f/0x9b0 [ 946.145142][T31974] ? __pfx_netlink_unicast+0x10/0x10 [ 946.145167][T31974] ? netlink_sendmsg+0x650/0xb40 [ 946.145183][T31974] ? skb_put+0x11b/0x210 [ 946.145207][T31974] netlink_sendmsg+0x813/0xb40 [ 946.145234][T31974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.145257][T31974] ? aa_sock_msg_perm+0xf1/0x1b0 [ 946.145280][T31974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 946.145304][T31974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.145320][T31974] ____sys_sendmsg+0xa68/0xad0 [ 946.145341][T31974] ? __might_fault+0xaf/0x130 [ 946.145369][T31974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 946.145399][T31974] ? import_iovec+0x73/0xa0 [ 946.145422][T31974] ___sys_sendmsg+0x2a5/0x360 [ 946.145441][T31974] ? __lock_acquire+0x6b5/0x2cf0 [ 946.145465][T31974] ? __pfx____sys_sendmsg+0x10/0x10 [ 946.145522][T31974] ? __fget_files+0x2a/0x420 [ 946.145539][T31974] ? __fget_files+0x3a0/0x420 [ 946.145567][T31974] __x64_sys_sendmsg+0x1bd/0x2a0 [ 946.145591][T31974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 946.145621][T31974] ? __pfx_ksys_write+0x10/0x10 [ 946.145653][T31974] do_syscall_64+0x14d/0xf80 [ 946.145674][T31974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.145690][T31974] ? trace_irq_disable+0x37/0x100 [ 946.145709][T31974] ? clear_bhb_loop+0x40/0x90 [ 946.145730][T31974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.145747][T31974] RIP: 0033:0x7f7f6959bf79 [ 946.145763][T31974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.145779][T31974] RSP: 002b:00007f7f6a4f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.145798][T31974] RAX: ffffffffffffffda RBX: 00007f7f69815fa0 RCX: 00007f7f6959bf79 [ 946.145812][T31974] RDX: 0000000004004050 RSI: 0000200000000040 RDI: 0000000000000003 [ 946.145824][T31974] RBP: 00007f7f6a4f8090 R08: 0000000000000000 R09: 0000000000000000 [ 946.145835][T31974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.145846][T31974] R13: 00007f7f69816038 R14: 00007f7f69815fa0 R15: 00007ffd7c0c3508 [ 946.145878][T31974] [ 946.640086][T31987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7171'. [ 946.757140][T31989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.951515][T32003] syzkaller0: entered promiscuous mode [ 946.963004][T32003] syzkaller0: entered allmulticast mode [ 947.074408][T32005] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 947.433679][T32010] wg1 speed is unknown, defaulting to 1000 [ 947.441106][T32010] lo speed is unknown, defaulting to 1000 [ 947.491813][T32008] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 947.608846][T32008] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 947.869672][T32029] gretap2: entered promiscuous mode [ 947.876083][T32029] batman_adv: batadv0: Adding interface: gretap2 [ 947.885544][T32029] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 947.970778][T32043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 948.056636][T32045] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 948.092090][T32048] FAULT_INJECTION: forcing a failure. [ 948.092090][T32048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.110959][T32048] CPU: 1 UID: 0 PID: 32048 Comm: syz.2.7191 Not tainted syzkaller #0 PREEMPT(full) [ 948.110984][T32048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 948.110996][T32048] Call Trace: [ 948.111004][T32048] [ 948.111013][T32048] dump_stack_lvl+0xe8/0x150 [ 948.111040][T32048] should_fail_ex+0x412/0x560 [ 948.111069][T32048] _copy_from_user+0x2d/0xb0 [ 948.111088][T32048] __sys_bpf+0x229/0x950 [ 948.111112][T32048] ? __pfx___sys_bpf+0x10/0x10 [ 948.111147][T32048] ? ksys_write+0x242/0x270 [ 948.111171][T32048] ? __pfx_ksys_write+0x10/0x10 [ 948.111199][T32048] __x64_sys_bpf+0x7c/0x90 [ 948.111219][T32048] do_syscall_64+0x14d/0xf80 [ 948.111240][T32048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.111257][T32048] ? trace_irq_disable+0x37/0x100 [ 948.111276][T32048] ? clear_bhb_loop+0x40/0x90 [ 948.111297][T32048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.111313][T32048] RIP: 0033:0x7fa38259bf79 [ 948.111330][T32048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.111344][T32048] RSP: 002b:00007fa383438028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 948.111363][T32048] RAX: ffffffffffffffda RBX: 00007fa382815fa0 RCX: 00007fa38259bf79 [ 948.111376][T32048] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 948.111388][T32048] RBP: 00007fa383438090 R08: 0000000000000000 R09: 0000000000000000 [ 948.111400][T32048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.111410][T32048] R13: 00007fa382816038 R14: 00007fa382815fa0 R15: 00007fff2b388768 [ 948.111441][T32048] [ 948.283134][T32051] gretap2: entered promiscuous mode [ 948.295832][T32051] batman_adv: batadv0: Adding interface: gretap2 [ 948.307195][T32051] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 948.328094][T32049] syzkaller0: entered promiscuous mode [ 948.333678][T32049] syzkaller0: entered allmulticast mode [ 948.398681][T32054] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 948.529266][T32066] __nla_validate_parse: 2 callbacks suppressed [ 948.529284][T32066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7198'. [ 948.877268][T32086] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 949.029953][T32094] syzkaller0: entered promiscuous mode [ 949.035835][T32094] syzkaller0: entered allmulticast mode [ 949.082155][T32093] tipc: Failed to remove unknown binding: 66,1,1/3519124734:553751784/553751786 [ 949.091770][T32093] tipc: Failed to remove unknown binding: 66,1,1/3519124734:553751784/553751786 [ 949.397941][T32114] netlink: 'syz.2.7221': attribute type 1 has an invalid length. [ 949.422704][T32114] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7221'. [ 949.469546][T32118] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 949.639783][T32130] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 949.689876][T32133] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 949.734419][T32137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7227'. [ 949.847033][T32146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7231'. [ 949.991102][T32153] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 950.035048][T32157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7236'. [ 950.066181][T32157] vlan3: entered promiscuous mode [ 950.071611][T32157] gretap0: entered promiscuous mode [ 950.086421][T32156] vlan3: left promiscuous mode [ 950.095276][T32156] gretap0: left promiscuous mode [ 950.163067][T32164] FAULT_INJECTION: forcing a failure. [ 950.163067][T32164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 950.180618][T32162] netlink: 'syz.1.7239': attribute type 1 has an invalid length. [ 950.189472][T32164] CPU: 0 UID: 0 PID: 32164 Comm: syz.0.7240 Not tainted syzkaller #0 PREEMPT(full) [ 950.189496][T32164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 950.189507][T32164] Call Trace: [ 950.189515][T32164] [ 950.189523][T32164] dump_stack_lvl+0xe8/0x150 [ 950.189550][T32164] should_fail_ex+0x412/0x560 [ 950.189577][T32164] prepare_alloc_pages+0x22a/0x650 [ 950.189608][T32164] __alloc_frozen_pages_noprof+0x12f/0x380 [ 950.189635][T32164] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 950.189662][T32164] ? __pfx_policy_nodemask+0x10/0x10 [ 950.189695][T32164] alloc_pages_mpol+0x232/0x4a0 [ 950.189724][T32164] folio_alloc_mpol_noprof+0x39/0x70 [ 950.189749][T32164] shmem_alloc_and_add_folio+0x445/0xf80 [ 950.189775][T32164] ? filemap_get_entry+0xca/0x320 [ 950.189794][T32164] ? filemap_get_entry+0xca/0x320 [ 950.189817][T32164] ? filemap_get_entry+0x2ac/0x320 [ 950.189837][T32164] ? __pfx_filemap_get_entry+0x10/0x10 [ 950.189859][T32164] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 950.189880][T32164] ? filemap_map_pages+0x1bbe/0x2000 [ 950.189903][T32164] ? shmem_allowable_huge_orders+0x1bb/0x690 [ 950.189929][T32164] shmem_get_folio_gfp+0x5a9/0x1670 [ 950.189969][T32164] shmem_fault+0x179/0x390 [ 950.189998][T32164] __do_fault+0x138/0x390 [ 950.190022][T32164] do_pte_missing+0x21a2/0x37a0 [ 950.190041][T32164] ? do_pte_missing+0x1258/0x37a0 [ 950.190073][T32164] ? handle_mm_fault+0xee/0x32a0 [ 950.190097][T32164] handle_mm_fault+0x1b8c/0x32a0 [ 950.190129][T32164] ? handle_mm_fault+0xee/0x32a0 [ 950.190157][T32164] ? __pfx_handle_mm_fault+0x10/0x10 [ 950.190177][T32164] ? follow_page_pte+0x825/0x1460 [ 950.190205][T32164] ? __pfx_follow_page_pte+0x10/0x10 [ 950.190244][T32164] __get_user_pages+0x165b/0x29d0 [ 950.190294][T32164] populate_vma_page_range+0x2be/0x3c0 [ 950.190316][T32164] ? __pfx_populate_vma_page_range+0x10/0x10 [ 950.190340][T32164] ? down_read+0x272/0x2e0 [ 950.190360][T32164] ? __mm_populate+0x173/0x390 [ 950.190380][T32164] __mm_populate+0x25f/0x390 [ 950.190400][T32164] ? __pfx___mm_populate+0x10/0x10 [ 950.190434][T32164] vm_mmap_pgoff+0x3aa/0x4f0 [ 950.190458][T32164] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 950.190473][T32164] ? ksys_write+0x242/0x270 [ 950.190495][T32164] ? __pfx_ksys_write+0x10/0x10 [ 950.190517][T32164] ? ksys_mmap_pgoff+0xf3/0x760 [ 950.190536][T32164] ? __x64_sys_mmap+0x7f/0x140 [ 950.190560][T32164] do_syscall_64+0x14d/0xf80 [ 950.190581][T32164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.190597][T32164] ? trace_irq_disable+0x37/0x100 [ 950.190615][T32164] ? clear_bhb_loop+0x40/0x90 [ 950.190636][T32164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.190653][T32164] RIP: 0033:0x7f8f8ad9bf79 [ 950.190669][T32164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.190684][T32164] RSP: 002b:00007f8f8bbbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 950.190703][T32164] RAX: ffffffffffffffda RBX: 00007f8f8b015fa0 RCX: 00007f8f8ad9bf79 [ 950.190716][T32164] RDX: 0000000002000004 RSI: 0000000000c00000 RDI: 0000200000001000 [ 950.190729][T32164] RBP: 00007f8f8bbbd090 R08: ffffffffffffffff R09: 0000000000000000 [ 950.190740][T32164] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000002 [ 950.190751][T32164] R13: 00007f8f8b016038 R14: 00007f8f8b015fa0 R15: 00007ffdd722b788 [ 950.190783][T32164] [ 950.527746][T32165] netlink: 'syz.1.7239': attribute type 1 has an invalid length. [ 950.574767][T32166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 950.977116][T32181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7247'. [ 950.982256][T32183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7246'. [ 951.083085][T32186] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 951.100532][T32190] FAULT_INJECTION: forcing a failure. [ 951.100532][T32190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.117718][T32190] CPU: 1 UID: 0 PID: 32190 Comm: syz.4.7248 Not tainted syzkaller #0 PREEMPT(full) [ 951.117742][T32190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 951.117754][T32190] Call Trace: [ 951.117762][T32190] [ 951.117770][T32190] dump_stack_lvl+0xe8/0x150 [ 951.117797][T32190] should_fail_ex+0x412/0x560 [ 951.117826][T32190] _copy_from_user+0x2d/0xb0 [ 951.117846][T32190] ___sys_recvmsg+0x175/0x590 [ 951.117874][T32190] ? __pfx____sys_recvmsg+0x10/0x10 [ 951.117900][T32190] ? __fget_files+0x2a/0x420 [ 951.117949][T32190] do_recvmmsg+0x334/0x800 [ 951.117979][T32190] ? __pfx_do_recvmmsg+0x10/0x10 [ 951.118012][T32190] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 951.118052][T32190] __x64_sys_recvmmsg+0x198/0x250 [ 951.118077][T32190] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 951.118109][T32190] do_syscall_64+0x14d/0xf80 [ 951.118130][T32190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.118146][T32190] ? trace_irq_disable+0x37/0x100 [ 951.118165][T32190] ? clear_bhb_loop+0x40/0x90 [ 951.118185][T32190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.118202][T32190] RIP: 0033:0x7f440b79bf79 [ 951.118218][T32190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.118234][T32190] RSP: 002b:00007f440c655028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 951.118252][T32190] RAX: ffffffffffffffda RBX: 00007f440ba15fa0 RCX: 00007f440b79bf79 [ 951.118266][T32190] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000004 [ 951.118279][T32190] RBP: 00007f440c655090 R08: 0000000000000000 R09: 0000000000000000 [ 951.118291][T32190] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 951.118302][T32190] R13: 00007f440ba16038 R14: 00007f440ba15fa0 R15: 00007ffc54e79738 [ 951.118331][T32190] [ 951.385254][T32197] delete_channel: no stack [ 951.454894][T32205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7256'. [ 951.476939][T32205] syzkaller0: entered promiscuous mode [ 951.482718][T32205] syzkaller0: entered allmulticast mode [ 951.565196][T32210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7257'. [ 951.585886][T32207] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 951.591732][T32210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7257'. [ 951.624853][T32207] bond11 (unregistering): Released all slaves [ 951.677070][T32213] tipc: Enabling of bearer rejected, failed to enable media [ 951.743168][T32211] wg1 speed is unknown, defaulting to 1000 [ 951.765731][T32211] lo speed is unknown, defaulting to 1000 [ 952.183870][T32228] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 952.200391][ T6393] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 952.270771][T32233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.322671][T32236] bond0: option arp_interval: invalid value (18446744072937799682) [ 952.334791][T32236] bond0: option arp_interval: allowed values 0 - 2147483647 [ 952.398685][T32236] bond0 (unregistering): Released all slaves [ 952.577825][T32243] wg1 speed is unknown, defaulting to 1000 [ 952.613158][T32243] lo speed is unknown, defaulting to 1000 [ 952.628939][T32246] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 952.695760][T32249] syzkaller0: entered promiscuous mode [ 952.701933][T32249] syzkaller0: entered allmulticast mode [ 952.723340][T32253] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 952.861616][T32258] netlink: 'syz.0.7273': attribute type 1 has an invalid length. [ 952.870861][T32258] netlink: 'syz.0.7273': attribute type 3 has an invalid length. [ 952.882197][T32258] netlink: 'syz.0.7273': attribute type 2 has an invalid length. [ 953.024174][T32264] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 953.228787][T32278] netlink: 'syz.4.7282': attribute type 6 has an invalid length. [ 953.396373][T32292] FAULT_INJECTION: forcing a failure. [ 953.396373][T32292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 953.419422][T32290] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 953.431471][T32292] CPU: 0 UID: 0 PID: 32292 Comm: syz.2.7287 Not tainted syzkaller #0 PREEMPT(full) [ 953.431493][T32292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 953.431502][T32292] Call Trace: [ 953.431508][T32292] [ 953.431515][T32292] dump_stack_lvl+0xe8/0x150 [ 953.431539][T32292] should_fail_ex+0x412/0x560 [ 953.431565][T32292] prepare_alloc_pages+0x22a/0x650 [ 953.431592][T32292] __alloc_frozen_pages_noprof+0x12f/0x380 [ 953.431615][T32292] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 953.431639][T32292] ? __pfx_policy_nodemask+0x10/0x10 [ 953.431668][T32292] alloc_pages_mpol+0x232/0x4a0 [ 953.431692][T32292] folio_alloc_mpol_noprof+0x39/0x70 [ 953.431714][T32292] shmem_alloc_and_add_folio+0x445/0xf80 [ 953.431737][T32292] ? filemap_get_entry+0xca/0x320 [ 953.431754][T32292] ? filemap_get_entry+0xca/0x320 [ 953.431772][T32292] ? filemap_get_entry+0x2ac/0x320 [ 953.431790][T32292] ? __pfx_filemap_get_entry+0x10/0x10 [ 953.431842][T32292] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 953.431861][T32292] ? filemap_map_pages+0x1bbe/0x2000 [ 953.431880][T32292] ? shmem_allowable_huge_orders+0x1bb/0x690 [ 953.431903][T32292] shmem_get_folio_gfp+0x5a9/0x1670 [ 953.431937][T32292] shmem_fault+0x179/0x390 [ 953.431962][T32292] __do_fault+0x138/0x390 [ 953.431983][T32292] do_pte_missing+0x21a2/0x37a0 [ 953.432000][T32292] ? do_pte_missing+0x1258/0x37a0 [ 953.432028][T32292] ? handle_mm_fault+0xee/0x32a0 [ 953.432047][T32292] handle_mm_fault+0x1b8c/0x32a0 [ 953.432077][T32292] ? handle_mm_fault+0xee/0x32a0 [ 953.432100][T32292] ? __pfx_handle_mm_fault+0x10/0x10 [ 953.432117][T32292] ? follow_page_pte+0x825/0x1460 [ 953.432142][T32292] ? __pfx_follow_page_pte+0x10/0x10 [ 953.432168][T32292] __get_user_pages+0x165b/0x29d0 [ 953.432213][T32292] populate_vma_page_range+0x2be/0x3c0 [ 953.432232][T32292] ? __pfx_populate_vma_page_range+0x10/0x10 [ 953.432251][T32292] ? down_read+0x272/0x2e0 [ 953.432270][T32292] ? __mm_populate+0x173/0x390 [ 953.432287][T32292] __mm_populate+0x25f/0x390 [ 953.432304][T32292] ? __pfx___mm_populate+0x10/0x10 [ 953.432329][T32292] vm_mmap_pgoff+0x3aa/0x4f0 [ 953.432350][T32292] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 953.432362][T32292] ? ksys_write+0x242/0x270 [ 953.432382][T32292] ? __pfx_ksys_write+0x10/0x10 [ 953.432401][T32292] ? ksys_mmap_pgoff+0xf3/0x760 [ 953.432418][T32292] ? __x64_sys_mmap+0x7f/0x140 [ 953.432440][T32292] do_syscall_64+0x14d/0xf80 [ 953.432458][T32292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.432473][T32292] ? trace_irq_disable+0x37/0x100 [ 953.432489][T32292] ? clear_bhb_loop+0x40/0x90 [ 953.432508][T32292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.432522][T32292] RIP: 0033:0x7fa38259bf79 [ 953.432537][T32292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.432550][T32292] RSP: 002b:00007fa383438028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 953.432567][T32292] RAX: ffffffffffffffda RBX: 00007fa382815fa0 RCX: 00007fa38259bf79 [ 953.432578][T32292] RDX: 0000000002000004 RSI: 0000000000c00000 RDI: 0000200000001000 [ 953.432589][T32292] RBP: 00007fa383438090 R08: ffffffffffffffff R09: 0000000000000000 [ 953.432599][T32292] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000002 [ 953.432609][T32292] R13: 00007fa382816038 R14: 00007fa382815fa0 R15: 00007fff2b388768 [ 953.432637][T32292] [ 953.912598][T32302] FAULT_INJECTION: forcing a failure. [ 953.912598][T32302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.926908][T32302] CPU: 0 UID: 0 PID: 32302 Comm: syz.0.7292 Not tainted syzkaller #0 PREEMPT(full) [ 953.926933][T32302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 953.926944][T32302] Call Trace: [ 953.926953][T32302] [ 953.926961][T32302] dump_stack_lvl+0xe8/0x150 [ 953.926989][T32302] should_fail_ex+0x412/0x560 [ 953.927024][T32302] _copy_from_iter+0x1d3/0x1670 [ 953.927056][T32302] ? rcu_is_watching+0x15/0xb0 [ 953.927076][T32302] ? __pfx__copy_from_iter+0x10/0x10 [ 953.927097][T32302] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 953.927128][T32302] ? netlink_sendmsg+0x650/0xb40 [ 953.927146][T32302] ? skb_put+0x11b/0x210 [ 953.927169][T32302] netlink_sendmsg+0x6c0/0xb40 [ 953.927196][T32302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.927218][T32302] ? aa_sock_msg_perm+0xf1/0x1b0 [ 953.927242][T32302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 953.927267][T32302] sock_write_iter+0x503/0x550 [ 953.927292][T32302] ? __pfx_sock_write_iter+0x10/0x10 [ 953.927326][T32302] ? bpf_lsm_file_permission+0x9/0x20 [ 953.927348][T32302] ? security_file_permission+0x75/0x260 [ 953.927377][T32302] vfs_write+0x61d/0xb90 [ 953.927406][T32302] ? __pfx_vfs_write+0x10/0x10 [ 953.927437][T32302] ? __fget_files+0x2a/0x420 [ 953.927463][T32302] ksys_write+0x150/0x270 [ 953.927486][T32302] ? __pfx_ksys_write+0x10/0x10 [ 953.927519][T32302] do_syscall_64+0x14d/0xf80 [ 953.927539][T32302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.927555][T32302] ? trace_irq_disable+0x37/0x100 [ 953.927574][T32302] ? clear_bhb_loop+0x40/0x90 [ 953.927595][T32302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.927612][T32302] RIP: 0033:0x7f8f8ad9bf79 [ 953.927628][T32302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.927643][T32302] RSP: 002b:00007f8f8bbbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 953.927663][T32302] RAX: ffffffffffffffda RBX: 00007f8f8b015fa0 RCX: 00007f8f8ad9bf79 [ 953.927677][T32302] RDX: 000000000000033a RSI: 0000200000000040 RDI: 0000000000000003 [ 953.927689][T32302] RBP: 00007f8f8bbbd090 R08: 0000000000000000 R09: 0000000000000000 [ 953.927700][T32302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.927711][T32302] R13: 00007f8f8b016038 R14: 00007f8f8b015fa0 R15: 00007ffdd722b788 [ 953.927742][T32302] [ 954.208475][T32305] __nla_validate_parse: 21 callbacks suppressed [ 954.208495][T32305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7294'. [ 954.331332][T32311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7293'. [ 954.380517][T32314] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 954.399825][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: macsec0 [ 954.411255][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.491023][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.495047][T32320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.501891][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.558754][T32316] syzkaller0: entered promiscuous mode [ 954.562110][T32320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7299'. [ 954.573969][T32316] syzkaller0: entered allmulticast mode [ 954.627688][T32316] netlink: 'syz.1.7298': attribute type 4 has an invalid length. [ 954.658899][T32324] netlink: 'syz.4.7300': attribute type 3 has an invalid length. [ 954.805694][T32334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7306'. [ 954.889022][T32334] 8021q: adding VLAN 0 to HW filter on device bond9 [ 954.908638][T32334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7306'. [ 954.946382][T32334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7306'. [ 954.979863][T32334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7306'. [ 954.999543][ T30] audit: type=1800 audit(1771305342.291:153): pid=32341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7303" name="memory.events" dev="tmpfs" ino=7360 res=0 errno=0 [ 955.026062][T32334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7306'. [ 955.063825][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.071915][T32334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7306'. [ 955.085041][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.103758][T32334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7306'. [ 955.104465][T32336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.144816][T32346] netlink: 'syz.3.7308': attribute type 5 has an invalid length. [ 955.157749][T32346] geneve2: entered promiscuous mode [ 955.162963][T32346] geneve2: entered allmulticast mode [ 955.188080][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 49503 - 0 [ 955.201723][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 49503 - 0 [ 955.211840][T32346] tipc: Enabled bearer , priority 28 [ 955.218727][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 49503 - 0 [ 955.227426][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 49503 - 0 [ 956.887413][T32381] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 956.936023][T32384] netlink: 'syz.4.7319': attribute type 6 has an invalid length. [ 956.977433][T32386] bond12: option arp_interval: invalid value (18446744072937799682) [ 956.985563][T32386] bond12: option arp_interval: allowed values 0 - 2147483647 [ 956.994982][T32386] bond12 (unregistering): Released all slaves [ 957.039494][T32390] syzkaller1: entered promiscuous mode [ 957.046179][T32390] syzkaller1: entered allmulticast mode [ 957.197515][T32397] xt_addrtype: ipv6 does not support BROADCAST matching [ 957.302807][T32403] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 957.323036][T32403] bond11 (unregistering): Released all slaves [ 957.537259][ T9692] lec:lec_start_xmit: lec0:No lecd attached [ 959.139605][T32373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 959.502777][T32451] __nla_validate_parse: 63 callbacks suppressed [ 959.502797][T32451] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7342'. [ 959.526547][T32451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7342'. [ 959.587560][T32459] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 959.704315][T32461] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7344'. [ 959.710512][T32465] FAULT_INJECTION: forcing a failure. [ 959.710512][T32465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.727117][T32465] CPU: 1 UID: 0 PID: 32465 Comm: syz.2.7345 Not tainted syzkaller #0 PREEMPT(full) [ 959.727140][T32465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 959.727150][T32465] Call Trace: [ 959.727157][T32465] [ 959.727165][T32465] dump_stack_lvl+0xe8/0x150 [ 959.727202][T32465] should_fail_ex+0x412/0x560 [ 959.727230][T32465] _copy_to_user+0x31/0xb0 [ 959.727255][T32465] simple_read_from_buffer+0xe1/0x170 [ 959.727284][T32465] proc_fail_nth_read+0x1bb/0x230 [ 959.727309][T32465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 959.727333][T32465] ? rw_verify_area+0x2a6/0x4d0 [ 959.727352][T32465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 959.727375][T32465] vfs_read+0x20c/0xa70 [ 959.727393][T32465] ? fdget_pos+0x246/0x320 [ 959.727414][T32465] ? __pfx___mutex_lock+0x10/0x10 [ 959.727437][T32465] ? __pfx_vfs_read+0x10/0x10 [ 959.727457][T32465] ? __fget_files+0x2a/0x420 [ 959.727479][T32465] ? __fget_files+0x3a0/0x420 [ 959.727494][T32465] ? __fget_files+0x2a/0x420 [ 959.727520][T32465] ksys_read+0x150/0x270 [ 959.727541][T32465] ? __pfx_ksys_read+0x10/0x10 [ 959.727572][T32465] do_syscall_64+0x14d/0xf80 [ 959.727592][T32465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.727608][T32465] ? trace_irq_disable+0x37/0x100 [ 959.727626][T32465] ? clear_bhb_loop+0x40/0x90 [ 959.727646][T32465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.727663][T32465] RIP: 0033:0x7fa38255c84e [ 959.727678][T32465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 959.727693][T32465] RSP: 002b:00007fa383437fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 959.727711][T32465] RAX: ffffffffffffffda RBX: 00007fa3834386c0 RCX: 00007fa38255c84e [ 959.727724][T32465] RDX: 000000000000000f RSI: 00007fa3834380a0 RDI: 0000000000000005 [ 959.727735][T32465] RBP: 00007fa383438090 R08: 0000000000000000 R09: 0000000000000000 [ 959.727746][T32465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.727757][T32465] R13: 00007fa382816038 R14: 00007fa382815fa0 R15: 00007fff2b388768 [ 959.727787][T32465] [ 959.977943][T32463] syzkaller0: entered promiscuous mode [ 959.983863][T32463] syzkaller0: entered allmulticast mode [ 962.153648][ C0] ------------[ cut here ]------------ [ 962.159477][ C0] ODEBUG: free active (active state 0) object: ffff88806a1a0890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 962.172396][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0 [ 962.182687][ C0] Modules linked in: [ 962.186899][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 962.195863][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 962.205945][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 962.212282][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 962.231898][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 962.237992][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a41db60 RCX: 0000000000000000 [ 962.245973][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 962.253978][ C0] RBP: ffffffff8bcf4a00 R08: ffff88806a1a0890 R09: ffffffff8bcf5d20 [ 962.261943][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88806a1a0a00 [ 962.269930][ C0] R13: ffffffff901b4570 R14: ffff88806a1a0000 R15: ffff88806a1a0890 [ 962.277917][ C0] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 962.286864][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 962.293446][ C0] CR2: 00007f8f8ade96c0 CR3: 000000006175a000 CR4: 00000000003526f0 [ 962.301450][ C0] Call Trace: [ 962.304753][ C0] [ 962.307603][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 962.313264][ C0] kfree+0x13a/0x610 [ 962.317186][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 962.322313][ C0] rose_timer_expiry+0x4cb/0x600 [ 962.327260][ C0] ? call_timer_fn+0x178/0x5a0 [ 962.332031][ C0] call_timer_fn+0x192/0x5a0 [ 962.336636][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 962.342109][ C0] ? call_timer_fn+0xd4/0x5a0 [ 962.346793][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 962.351919][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 962.357125][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 962.362596][ C0] __run_timer_base+0x652/0x8b0 [ 962.367452][ C0] ? ktime_get+0x45/0x200 [ 962.371794][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 962.377234][ C0] ? sched_clock_cpu+0x74/0x440 [ 962.382101][ C0] run_timer_softirq+0xb7/0x170 [ 962.386964][ C0] handle_softirqs+0x22a/0x7c0 [ 962.391742][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 962.396528][ C0] __irq_exit_rcu+0x5f/0x150 [ 962.401136][ C0] irq_exit_rcu+0x9/0x30 [ 962.405396][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 962.411037][ C0] [ 962.414003][ C0] [ 962.416942][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 962.422932][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 962.428618][ C0] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 962.448338][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 962.454441][ C0] RAX: 0000000000283417 RBX: ffffffff8199661d RCX: 0000000080000001 [ 962.462415][ C0] RDX: 0000000000000001 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 962.470399][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 962.478389][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff90109070 [ 962.486392][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 962.494384][ C0] ? do_idle+0x1bd/0x500 [ 962.498624][ C0] default_idle+0x9/0x20 [ 962.502851][ C0] default_idle_call+0x72/0xb0 [ 962.507632][ C0] do_idle+0x1bd/0x500 [ 962.511709][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 962.517881][ C0] ? __pfx_do_idle+0x10/0x10 [ 962.522519][ C0] cpu_startup_entry+0x43/0x60 [ 962.527294][ C0] rest_init+0x2de/0x300 [ 962.531549][ C0] start_kernel+0x380/0x3d0 [ 962.536081][ C0] x86_64_start_reservations+0x24/0x30 [ 962.541557][ C0] x86_64_start_kernel+0x143/0x1c0 [ 962.546715][ C0] common_startup_64+0x13e/0x147 [ 962.551682][ C0] [ 962.554741][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 962.562024][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 962.570945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 962.580986][ C0] Call Trace: [ 962.584259][ C0] [ 962.587092][ C0] vpanic+0x1e0/0x670 [ 962.591073][ C0] panic+0xc5/0xd0 [ 962.594792][ C0] ? __pfx_panic+0x10/0x10 [ 962.599208][ C0] ? common_startup_64+0x13e/0x147 [ 962.604314][ C0] __warn+0x315/0x4a0 [ 962.608286][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 962.613998][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 962.619706][ C0] __report_bug+0x29a/0x540 [ 962.624206][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 962.629914][ C0] ? __pfx___report_bug+0x10/0x10 [ 962.634931][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 962.640115][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 962.645824][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 962.651546][ C0] report_bug_entry+0x19a/0x290 [ 962.656385][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 962.662091][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 962.667795][ C0] handle_bug+0xca/0x200 [ 962.672029][ C0] exc_invalid_op+0x1a/0x50 [ 962.676520][ C0] asm_exc_invalid_op+0x1a/0x20 [ 962.681353][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 962.687679][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 962.707289][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 962.713364][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a41db60 RCX: 0000000000000000 [ 962.721338][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 962.729307][ C0] RBP: ffffffff8bcf4a00 R08: ffff88806a1a0890 R09: ffffffff8bcf5d20 [ 962.737278][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88806a1a0a00 [ 962.745240][ C0] R13: ffffffff901b4570 R14: ffff88806a1a0000 R15: ffff88806a1a0890 [ 962.753233][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 962.758600][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 962.764240][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 962.769894][ C0] kfree+0x13a/0x610 [ 962.773792][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 962.778911][ C0] rose_timer_expiry+0x4cb/0x600 [ 962.783844][ C0] ? call_timer_fn+0x178/0x5a0 [ 962.788602][ C0] call_timer_fn+0x192/0x5a0 [ 962.793176][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 962.798624][ C0] ? call_timer_fn+0xd4/0x5a0 [ 962.803289][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 962.808394][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 962.813577][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 962.819027][ C0] __run_timer_base+0x652/0x8b0 [ 962.823867][ C0] ? ktime_get+0x45/0x200 [ 962.828195][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 962.833559][ C0] ? sched_clock_cpu+0x74/0x440 [ 962.838402][ C0] run_timer_softirq+0xb7/0x170 [ 962.843234][ C0] handle_softirqs+0x22a/0x7c0 [ 962.847998][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 962.852754][ C0] __irq_exit_rcu+0x5f/0x150 [ 962.857328][ C0] irq_exit_rcu+0x9/0x30 [ 962.861556][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 962.867179][ C0] [ 962.870095][ C0] [ 962.873012][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 962.878977][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 962.884595][ C0] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 962.904184][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 962.910238][ C0] RAX: 0000000000283417 RBX: ffffffff8199661d RCX: 0000000080000001 [ 962.918192][ C0] RDX: 0000000000000001 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 962.926150][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 962.934105][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff90109070 [ 962.942068][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 962.950029][ C0] ? do_idle+0x1bd/0x500 [ 962.954273][ C0] default_idle+0x9/0x20 [ 962.958527][ C0] default_idle_call+0x72/0xb0 [ 962.963279][ C0] do_idle+0x1bd/0x500 [ 962.967343][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 962.973486][ C0] ? __pfx_do_idle+0x10/0x10 [ 962.978074][ C0] cpu_startup_entry+0x43/0x60 [ 962.982827][ C0] rest_init+0x2de/0x300 [ 962.987062][ C0] start_kernel+0x380/0x3d0 [ 962.991557][ C0] x86_64_start_reservations+0x24/0x30 [ 962.997005][ C0] x86_64_start_kernel+0x143/0x1c0 [ 963.002108][ C0] common_startup_64+0x13e/0x147 [ 963.007051][ C0] [ 963.010421][ C0] Kernel Offset: disabled [ 963.014734][ C0] Rebooting in 86400 seconds..