last executing test programs: 3.275305014s ago: executing program 3 (id=1734): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r2, 0x4010744d, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x10, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000600000000000800050000000000240007800800050000000000080005000000000008000500000000000800050000000000040007801400078008000600000000000800050000000000440007800800060012"], 0xd0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x8, 0x9, 0x0, 0x1}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r7) 1.731920306s ago: executing program 3 (id=1750): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000d0000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) 1.399471877s ago: executing program 1 (id=1757): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/110], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 1.195958165s ago: executing program 1 (id=1759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x4, 0x0, &(0x7f0000001680)="db6928e8"}, 0x50) r1 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r1, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x22020400) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x1}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c0000001000010800"/20, @ANYRES32=r6, @ANYBLOB="31200000000000005400198014000400ecf822bc3cbd24b6"], 0x7c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095", @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x2, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)={0xe8, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xa0, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.195561692s ago: executing program 3 (id=1760): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x6000000000000, 0x7}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000040)={{r1}, "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"}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001040)={r0}, 0x8) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000001080), 0x4) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000010c0)={0x96, 0x400, 0x1, 0x0, 0x0, [{{r2}, 0x100000000}]}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000001100)={{0x89, @empty, 0x4e24, 0x4, 'none\x00', 0x1f, 0x1, 0x63}, {@empty, 0x4e21, 0x2, 0x101, 0x1, 0x7}}, 0x44) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xa, [@float={0x1, 0x0, 0x0, 0x10, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @ptr={0x9}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x4e, 0x1}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x36}, @enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x10, 0x101, 0x9}, {0xc, 0x6, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x0, 0x0, 0x5e, 0x61, 0x5f]}}, &(0x7f0000001240)=""/147, 0xa2, 0x93, 0x0, 0x8}, 0x28) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000001340)=0x2, 0x2) bind$inet(r0, &(0x7f0000001380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0xb, [@fwd={0x10}, @func={0xe, 0x0, 0x0, 0xc, 0x3}, @float={0xa, 0x0, 0x0, 0x10, 0x4}, @typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @volatile={0xd}, @const={0x10, 0x0, 0x0, 0xa, 0x3}, @enum={0xd, 0x4, 0x0, 0x6, 0x4, [{0x2, 0x1}, {0x9, 0x4}, {0xc, 0x7}, {0x5, 0x4}]}, @enum64={0x10, 0x1, 0x0, 0x13, 0x1, 0x8, [{0x2, 0x5, 0xfff}]}, @ptr={0x8, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x0, 0x30, 0x2e, 0x0, 0x30, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000001480)=""/190, 0xbb, 0xbe, 0x0, 0xff, 0x10000, @value=r0}, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001580)=0x400) syz_init_net_socket$llc(0x1a, 0x0, 0x0) write$ppp(r2, &(0x7f00000015c0)="a98c2d0902f2bd5efdee018c04437f3741b0254864e61fd15f2587d71e8d8482978ab749d8584f8279f3439bd500ec87652ce0d4992706a6f869dd42f89d8613257327c1f6ebd52f16e950", 0x4b) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, 0x1402, 0x211, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x30}}, 0xd4) r4 = accept$packet(r0, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001780)=0x14) getpeername$packet(r0, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001880)=0x14) sendto$packet(r4, &(0x7f00000017c0)="b8a059c35492cde9f6cca147f43937d6b1caf0eba7a6ac9bfaff2553967344ec7f77b5aada3c66c087306427fada1881d1c29270f0f6d71812e8a8f4c33fd6decf5af38a0d9a802e7906a11b7a1bbe236b968f2f1ed8c9f987560d89cb5592cbad8fac731b116c51fce38b39ccd742679cc34b568001260b3688ea", 0x7b, 0x200040c0, &(0x7f00000018c0)={0x11, 0xd, r5, 0x1, 0x3, 0x6, @random="9d9ef1a4e7fd"}, 0x14) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000001900)={0x0, 'macsec0\x00', {}, 0x8}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001940)=0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, r6) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001980)={'veth0_to_hsr\x00'}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f00000019c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) 1.086123007s ago: executing program 3 (id=1764): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}}, 0x20}}, 0x24) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x5c14d826, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x75, 0x48}, &(0x7f0000000240)=0xc) 978.825216ms ago: executing program 2 (id=1766): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) 921.953182ms ago: executing program 0 (id=1767): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x5}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) 876.736119ms ago: executing program 2 (id=1769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/110], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 755.660123ms ago: executing program 0 (id=1770): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000027400", @ANYRES32=r2, @ANYBLOB="00000000000fff00240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 754.939125ms ago: executing program 4 (id=1771): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x40, 0x80, 0x2, 0x2, {{0x2c, 0x4, 0x1, 0x5, 0xb0, 0x67, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0xc, [{@loopback, 0x7}, {@private=0xa010102, 0x6}, {@private=0xa010101, 0x2}]}, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x8, "4a6b3338ddb1"}, {0x0, 0xb, "290635a06aa173728b"}, {0x2, 0x8, "d2fe1d7ca3d6"}, {0x0, 0x9, "3443387d3ef04b"}, {0x2, 0x6, "9dd1ad1f"}, {0x1, 0xc, "35bbd32a2984847b654e"}]}, @timestamp={0x44, 0x8, 0xde, 0x0, 0x3, [0x3]}, @cipso={0x86, 0x28, 0xfffffffffffffffc, [{0x2, 0xe, "17c851e8c9b4f0eda23e60d5"}, {0x1, 0x10, "cb789ee49a10e2a9b1074f34fb70"}, {0x5, 0x4, "91e8"}]}, @ssrr={0x89, 0x7, 0x36, [@dev={0xac, 0x14, 0x14, 0x31}]}, @noop, @timestamp={0x44, 0xc, 0xd1, 0x0, 0x9, [0x9, 0x1]}]}}}}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) sendmsg$AUDIT_SET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x3e9, 0x20, 0x70bd25, 0x25dfdbfb, {0x44, 0x0, 0x0, r4, 0x9, 0xd9b, 0x6, 0xfff, 0x0, 0x9, 0x7}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) 703.764566ms ago: executing program 1 (id=1772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 690.181762ms ago: executing program 2 (id=1773): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x30}}, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 638.628376ms ago: executing program 0 (id=1774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = getpid() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8000) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6010104000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22885183be5c820af561854f228dbd85933f87286cf03ab6321d26959f7d3ce85b8f46bf26f5d8e19ab2dba3f2153885d158", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5470000090780000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r6, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r6, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r6, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}]}, 0x38}}, 0x48010) close(r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r7, @ANYRES32=r0, @ANYRES64=r1], 0x0) socket$alg(0x26, 0x5, 0x0) 587.999955ms ago: executing program 4 (id=1775): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) 561.411938ms ago: executing program 1 (id=1776): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}}, 0x0) (fail_nth: 3) 546.767494ms ago: executing program 4 (id=1777): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 478.024455ms ago: executing program 2 (id=1778): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7d, &(0x7f0000000280)=[@in={0x2, 0x4e23, @multicast1}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x44}}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x30}}, @sndrcv={0x30, 0x84, 0x1, {0xb9, 0x8001, 0x1, 0x5, 0x3, 0x8, 0x48, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0xb, 0xfffffffe, 0xff}}], 0x68, 0x4054}, 0x4040041) 432.503462ms ago: executing program 1 (id=1779): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 431.875057ms ago: executing program 0 (id=1780): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x844) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x3b, 0x400, 0x70bd29, 0x25dfdbfb, {0x18}}, 0x14}}, 0x804) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 379.873789ms ago: executing program 4 (id=1781): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x5}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) 338.826316ms ago: executing program 4 (id=1782): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x420, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3ea, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}, 0x420}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) accept$alg(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.events\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000000)=0x7, &(0x7f0000000080)=0x4) 285.115358ms ago: executing program 0 (id=1783): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/110], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 247.175004ms ago: executing program 2 (id=1784): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1e}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x4, 0x6, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 245.891848ms ago: executing program 1 (id=1785): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000340)={0x1000, {{0xa, 0x4e22, 0x5, @empty, 0x400}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x82}, 0x18) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) close(0x3) r6 = socket$inet(0x2, 0x5, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000b000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r7, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r7, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={r8, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x6, 0x4}, &(0x7f00000002c0)=0x90) socket$igmp(0x2, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e1f, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}, 0x80000000}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000001140)="b3", 0x1}, {&(0x7f0000000000)="fe231a752047199b3c5fd2e1ca854a3068b87b71232da79c58976e6f2b001ac646b1ab309d49227f971cd38ea2f6a5d884076544130bf2a42f5374677c0a3e38338b02d755a76310878914f5ecba80e6f579774f960a135ef5e4e200b1af8de708", 0x61}], 0x2}, 0x8001) 142.698208ms ago: executing program 2 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 142.367959ms ago: executing program 3 (id=1787): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) 141.347219ms ago: executing program 4 (id=1788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711872000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x8, @mcast2, 0x7}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x17, 0x10}}]}}]}, 0x3c}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x20000080) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) (async) close(r4) (async) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) (async) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x9}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00'}) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000540)={r8, 0x5, 0x0, 0x9, 0x9, 0xffe4, 0x0, 0x5d4, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0xe5df, 0x0, 0x1, 0x10000, 0xed}}, &(0x7f00000004c0)=0xb0) (async) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) (async) close(r6) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0x4) (async) unshare(0x4000400) (async) tee(r10, 0xffffffffffffffff, 0x100000af5, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 114.555228ms ago: executing program 0 (id=1789): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 0s ago: executing program 3 (id=1790): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc910007ffffff7000000000000000000000107200000000006000000bb2c0000000000000000000000000000000000000000000000001800000000000000290000000400000000000000000000000801"], 0x180}, 0x851) kernel console output (not intermixed with test programs): wn, defaulting to 1000 [ 154.340122][ T8487] CPU: 0 UID: 0 PID: 8487 Comm: syz.1.747 Not tainted syzkaller #0 PREEMPT(full) [ 154.340149][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.340161][ T8487] Call Trace: [ 154.340168][ T8487] [ 154.340176][ T8487] dump_stack_lvl+0x189/0x250 [ 154.340201][ T8487] ? __pfx____ratelimit+0x10/0x10 [ 154.340220][ T8487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.340239][ T8487] ? __pfx__printk+0x10/0x10 [ 154.340266][ T8487] ? __pfx___might_resched+0x10/0x10 [ 154.340287][ T8487] should_fail_ex+0x414/0x560 [ 154.340312][ T8487] should_failslab+0xa8/0x100 [ 154.340337][ T8487] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 154.340360][ T8487] ? __get_vm_area_node+0x13f/0x300 [ 154.340386][ T8487] __get_vm_area_node+0x13f/0x300 [ 154.340412][ T8487] __vmalloc_node_range_noprof+0x301/0x12f0 [ 154.340435][ T8487] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 154.340456][ T8487] ? __lock_acquire+0xab9/0xd20 [ 154.340504][ T8487] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.340524][ T8487] ? __might_fault+0xb0/0x130 [ 154.340547][ T8487] ? _parse_integer_limit+0x1ae/0x1f0 [ 154.340575][ T8487] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 154.340595][ T8487] __vmalloc_noprof+0xb1/0xf0 [ 154.340616][ T8487] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 154.340641][ T8487] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 154.340668][ T8487] bpf_prog_alloc+0x3c/0x1a0 [ 154.340691][ T8487] bpf_prog_load+0x735/0x1930 [ 154.340724][ T8487] ? __pfx_bpf_prog_load+0x10/0x10 [ 154.340769][ T8487] ? bpf_lsm_bpf+0x9/0x20 [ 154.340787][ T8487] ? security_bpf+0x7e/0x300 [ 154.340811][ T8487] __sys_bpf+0x528/0x870 [ 154.340834][ T8487] ? __pfx___sys_bpf+0x10/0x10 [ 154.340867][ T8487] ? ksys_write+0x22a/0x250 [ 154.340890][ T8487] ? __pfx_ksys_write+0x10/0x10 [ 154.340918][ T8487] __x64_sys_bpf+0x7c/0x90 [ 154.340937][ T8487] do_syscall_64+0xfa/0x3b0 [ 154.340955][ T8487] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.340972][ T8487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.340988][ T8487] ? clear_bhb_loop+0x60/0xb0 [ 154.341008][ T8487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.341030][ T8487] RIP: 0033:0x7f2573f8ebe9 [ 154.341046][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.341060][ T8487] RSP: 002b:00007f2574ed1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.341080][ T8487] RAX: ffffffffffffffda RBX: 00007f25741c5fa0 RCX: 00007f2573f8ebe9 [ 154.341092][ T8487] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 154.341104][ T8487] RBP: 00007f2574ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 154.341114][ T8487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.341124][ T8487] R13: 00007f25741c6038 R14: 00007f25741c5fa0 R15: 00007ffeb148c528 [ 154.341153][ T8487] [ 154.394317][ T8487] syz.1.747: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 154.637484][ T8487] CPU: 1 UID: 0 PID: 8487 Comm: syz.1.747 Not tainted syzkaller #0 PREEMPT(full) [ 154.637506][ T8487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.637514][ T8487] Call Trace: [ 154.637521][ T8487] [ 154.637527][ T8487] dump_stack_lvl+0x189/0x250 [ 154.637555][ T8487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.637575][ T8487] ? __pfx__printk+0x10/0x10 [ 154.637597][ T8487] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 154.637617][ T8487] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 154.637638][ T8487] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 154.637660][ T8487] warn_alloc+0x214/0x310 [ 154.637689][ T8487] ? __pfx_warn_alloc+0x10/0x10 [ 154.637713][ T8487] ? __get_vm_area_node+0x13f/0x300 [ 154.637738][ T8487] ? __get_vm_area_node+0x2b5/0x300 [ 154.637765][ T8487] __vmalloc_node_range_noprof+0x326/0x12f0 [ 154.637788][ T8487] ? __lock_acquire+0xab9/0xd20 [ 154.637835][ T8487] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.637856][ T8487] ? __might_fault+0xb0/0x130 [ 154.637880][ T8487] ? _parse_integer_limit+0x1ae/0x1f0 [ 154.637908][ T8487] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 154.637927][ T8487] __vmalloc_noprof+0xb1/0xf0 [ 154.637949][ T8487] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 154.637973][ T8487] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 154.637998][ T8487] bpf_prog_alloc+0x3c/0x1a0 [ 154.638022][ T8487] bpf_prog_load+0x735/0x1930 [ 154.638055][ T8487] ? __pfx_bpf_prog_load+0x10/0x10 [ 154.638100][ T8487] ? bpf_lsm_bpf+0x9/0x20 [ 154.638118][ T8487] ? security_bpf+0x7e/0x300 [ 154.638143][ T8487] __sys_bpf+0x528/0x870 [ 154.638166][ T8487] ? __pfx___sys_bpf+0x10/0x10 [ 154.638199][ T8487] ? ksys_write+0x22a/0x250 [ 154.638221][ T8487] ? __pfx_ksys_write+0x10/0x10 [ 154.638255][ T8487] __x64_sys_bpf+0x7c/0x90 [ 154.638274][ T8487] do_syscall_64+0xfa/0x3b0 [ 154.638291][ T8487] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.638307][ T8487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.638324][ T8487] ? clear_bhb_loop+0x60/0xb0 [ 154.638341][ T8487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.638357][ T8487] RIP: 0033:0x7f2573f8ebe9 [ 154.638374][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.638388][ T8487] RSP: 002b:00007f2574ed1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.638406][ T8487] RAX: ffffffffffffffda RBX: 00007f25741c5fa0 RCX: 00007f2573f8ebe9 [ 154.638418][ T8487] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 154.638429][ T8487] RBP: 00007f2574ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 154.638440][ T8487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.638450][ T8487] R13: 00007f25741c6038 R14: 00007f25741c5fa0 R15: 00007ffeb148c528 [ 154.638477][ T8487] [ 154.638495][ T8487] Mem-Info: [ 154.926750][ T8487] active_anon:8796 inactive_anon:0 isolated_anon:0 [ 154.926750][ T8487] active_file:3450 inactive_file:39874 isolated_file:0 [ 154.926750][ T8487] unevictable:768 dirty:271 writeback:0 [ 154.926750][ T8487] slab_reclaimable:11288 slab_unreclaimable:100952 [ 154.926750][ T8487] mapped:31842 shmem:5299 pagetables:1057 [ 154.926750][ T8487] sec_pagetables:0 bounce:0 [ 154.926750][ T8487] kernel_misc_reclaimable:0 [ 154.926750][ T8487] free:1326339 free_pcp:12995 free_cma:0 [ 154.993915][ T8487] Node 0 active_anon:31984kB inactive_anon:0kB active_file:13800kB inactive_file:159292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127668kB dirty:1084kB writeback:0kB shmem:16560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12332kB pagetables:4084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.032805][ T8487] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.037927][ T8493] netlink: ct family unspecified [ 155.062721][ T8487] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.062788][ T8487] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 155.062828][ T8487] Node 0 DMA32 free:1402912kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31036kB inactive_anon:0kB active_file:13800kB inactive_file:157716kB unevictable:1536kB writepending:1084kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:37060kB local_pcp:20552kB free_cma:0kB [ 155.135349][ T8487] lowmem_reserve[]: 0 0 1 1 1 [ 155.140088][ T8487] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 155.170231][ T8493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.237721][ T8496] netlink: 72 bytes leftover after parsing attributes in process `syz.2.750'. [ 155.248736][ T8487] lowmem_reserve[]: 0 0 0 0 0 [ 155.253601][ T8487] Node 1 Normal free:3889672kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16676kB local_pcp:7652kB free_cma:0kB [ 155.309087][ T8487] lowmem_reserve[]: 0 0 0 0 0 [ 155.327311][ T8487] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.346114][ T8487] Node 0 DMA32: 946*4kB (UM) 703*8kB (UM) 197*16kB (UME) 417*32kB (UM) 72*64kB (UME) 50*128kB (UM) 21*256kB (UME) 5*512kB (UM) 6*1024kB (M) 4*2048kB (UME) 328*4096kB (UM) = 1402672kB [ 155.392626][ T8487] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 155.419597][ T8504] sock: sock_set_timeout: `syz.0.753' (pid 8504) tries to set negative timeout [ 155.432893][ T8487] Node 1 Normal: 174*4kB (UE) 48*8kB (UME) 29*16kB (UME) 72*32kB (UME) 26*64kB (UME) 9*128kB (UME) 6*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3889672kB [ 155.469533][ T8487] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.503835][ T8487] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.513162][ T8487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.542350][ T8487] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.556361][ T8487] 45970 total pagecache pages [ 155.561144][ T8487] 0 pages in swap cache [ 155.567906][ T8487] Free swap = 124996kB [ 155.572183][ T8487] Total swap = 124996kB [ 155.580603][ T8509] netlink: 'syz.0.754': attribute type 11 has an invalid length. [ 155.597770][ T8487] 2097051 pages RAM [ 155.598010][ T8508] netlink: 'syz.0.754': attribute type 11 has an invalid length. [ 155.601658][ T8487] 0 pages HighMem/MovableOnly [ 155.628758][ T8487] 425673 pages reserved [ 155.633186][ T8487] 0 pages cma reserved [ 155.741673][ T8515] sock: sock_set_timeout: `syz.2.757' (pid 8515) tries to set negative timeout [ 155.972044][ T8528] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 156.041330][ T8528] bond6: entered promiscuous mode [ 156.047716][ T8528] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.101027][ T8535] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.112956][ T8535] bond6: (slave gre5): The slave device specified does not support setting the MAC address [ 156.125736][ T8535] bond6: (slave gre5): Setting fail_over_mac to active for active-backup mode [ 156.136822][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 156.140734][ T8535] bond6: (slave gre5): making interface the new active one [ 156.153185][ T8535] gre5: entered promiscuous mode [ 156.160012][ T8535] bond6: (slave gre5): Enslaving as an active interface with an up link [ 156.509867][ T8556] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.773'. [ 156.606889][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 157.755463][ T8614] __nla_validate_parse: 3 callbacks suppressed [ 157.755482][ T8614] netlink: 136 bytes leftover after parsing attributes in process `syz.3.791'. [ 158.032132][ T8629] syzkaller1: entered promiscuous mode [ 158.042468][ T8629] syzkaller1: entered allmulticast mode [ 158.068075][ T8631] FAULT_INJECTION: forcing a failure. [ 158.068075][ T8631] name failslab, interval 1, probability 0, space 0, times 0 [ 158.105042][ T8631] CPU: 1 UID: 0 PID: 8631 Comm: syz.3.796 Not tainted syzkaller #0 PREEMPT(full) [ 158.105066][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.105077][ T8631] Call Trace: [ 158.105084][ T8631] [ 158.105091][ T8631] dump_stack_lvl+0x189/0x250 [ 158.105116][ T8631] ? __pfx____ratelimit+0x10/0x10 [ 158.105134][ T8631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.105151][ T8631] ? __pfx__printk+0x10/0x10 [ 158.105177][ T8631] ? __pfx___might_resched+0x10/0x10 [ 158.105198][ T8631] should_fail_ex+0x414/0x560 [ 158.105223][ T8631] should_failslab+0xa8/0x100 [ 158.105245][ T8631] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 158.105267][ T8631] ? xfrm_do_migrate+0x732/0x900 [ 158.105295][ T8631] kmemdup_noprof+0x2b/0x70 [ 158.105319][ T8631] xfrm_do_migrate+0x732/0x900 [ 158.105351][ T8631] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 158.105434][ T8631] ? __nla_parse+0x40/0x60 [ 158.105455][ T8631] xfrm_user_rcv_msg+0x7a0/0xab0 [ 158.105484][ T8631] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 158.105542][ T8631] ? __pfx___mutex_trylock_common+0x10/0x10 [ 158.105566][ T8631] ? rcu_is_watching+0x15/0xb0 [ 158.105582][ T8631] ? trace_contention_end+0x39/0x120 [ 158.105596][ T8631] ? __mutex_lock+0x335/0x1350 [ 158.105619][ T8631] netlink_rcv_skb+0x208/0x470 [ 158.105638][ T8631] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 158.105660][ T8631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.105691][ T8631] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.105706][ T8631] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.105725][ T8631] xfrm_netlink_rcv+0x79/0x90 [ 158.105746][ T8631] netlink_unicast+0x82f/0x9e0 [ 158.105777][ T8631] ? __pfx_netlink_unicast+0x10/0x10 [ 158.105801][ T8631] ? netlink_sendmsg+0x642/0xb30 [ 158.105816][ T8631] ? skb_put+0x11b/0x210 [ 158.105843][ T8631] netlink_sendmsg+0x805/0xb30 [ 158.105870][ T8631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.105891][ T8631] ? aa_sock_msg_perm+0xf1/0x1d0 [ 158.105909][ T8631] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.105927][ T8631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.105946][ T8631] __sock_sendmsg+0x21c/0x270 [ 158.105971][ T8631] ____sys_sendmsg+0x505/0x830 [ 158.105998][ T8631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.106028][ T8631] ? import_iovec+0x74/0xa0 [ 158.106051][ T8631] ___sys_sendmsg+0x21f/0x2a0 [ 158.106074][ T8631] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.106133][ T8631] ? __fget_files+0x2a/0x420 [ 158.106147][ T8631] ? __fget_files+0x3a0/0x420 [ 158.106174][ T8631] __x64_sys_sendmsg+0x19b/0x260 [ 158.106198][ T8631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.106227][ T8631] ? __pfx_ksys_write+0x10/0x10 [ 158.106245][ T8631] ? rcu_is_watching+0x15/0xb0 [ 158.106268][ T8631] ? do_syscall_64+0xbe/0x3b0 [ 158.106292][ T8631] do_syscall_64+0xfa/0x3b0 [ 158.106308][ T8631] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.106325][ T8631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.106342][ T8631] ? clear_bhb_loop+0x60/0xb0 [ 158.106363][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.106379][ T8631] RIP: 0033:0x7f6040d8ebe9 [ 158.106396][ T8631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.106410][ T8631] RSP: 002b:00007f6041c89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.106429][ T8631] RAX: ffffffffffffffda RBX: 00007f6040fc5fa0 RCX: 00007f6040d8ebe9 [ 158.106442][ T8631] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 158.106453][ T8631] RBP: 00007f6041c89090 R08: 0000000000000000 R09: 0000000000000000 [ 158.106464][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.106474][ T8631] R13: 00007f6040fc6038 R14: 00007f6040fc5fa0 R15: 00007ffd4708cc98 [ 158.106504][ T8631] [ 158.115179][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 158.502235][ T8633] batadv0: entered promiscuous mode [ 158.522877][ T8633] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.555718][ T8633] batadv0: left promiscuous mode [ 158.638675][ T8640] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.800'. [ 159.048533][ T8660] wg1 speed is unknown, defaulting to 1000 [ 159.098630][ T8660] lo speed is unknown, defaulting to 1000 [ 159.166517][ T8666] syzkaller1: entered promiscuous mode [ 159.172252][ T8666] syzkaller1: entered allmulticast mode [ 159.506286][ T8661] netlink: 56 bytes leftover after parsing attributes in process `syz.0.806'. [ 159.520368][ T8652] netlink: 156 bytes leftover after parsing attributes in process `syz.2.804'. [ 159.626623][ T8679] netlink: 'syz.4.814': attribute type 72 has an invalid length. [ 160.114850][ T8699] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 160.170023][ T8703] netlink: 'syz.4.826': attribute type 72 has an invalid length. [ 160.237883][ T8702] syzkaller1: entered promiscuous mode [ 160.243392][ T8702] syzkaller1: entered allmulticast mode [ 160.316907][ T8700] bond3: (slave gretap1): making interface the new active one [ 160.327051][ T8700] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 160.342271][ T8699] vlan0: entered allmulticast mode [ 160.347883][ T8699] bond3: entered allmulticast mode [ 160.353003][ T8699] gretap1: entered allmulticast mode [ 160.361092][ T8699] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 160.490463][ T8706] wg1 speed is unknown, defaulting to 1000 [ 160.501254][ T8720] FAULT_INJECTION: forcing a failure. [ 160.501254][ T8720] name failslab, interval 1, probability 0, space 0, times 0 [ 160.507524][ T8706] lo speed is unknown, defaulting to 1000 [ 160.530530][ T8720] CPU: 1 UID: 0 PID: 8720 Comm: syz.0.831 Not tainted syzkaller #0 PREEMPT(full) [ 160.530555][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.530565][ T8720] Call Trace: [ 160.530572][ T8720] [ 160.530580][ T8720] dump_stack_lvl+0x189/0x250 [ 160.530604][ T8720] ? __pfx____ratelimit+0x10/0x10 [ 160.530623][ T8720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.530648][ T8720] ? __pfx__printk+0x10/0x10 [ 160.530675][ T8720] ? __pfx___might_resched+0x10/0x10 [ 160.530697][ T8720] should_fail_ex+0x414/0x560 [ 160.530724][ T8720] should_failslab+0xa8/0x100 [ 160.530748][ T8720] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 160.530770][ T8720] ? __alloc_skb+0x112/0x2d0 [ 160.530791][ T8720] __alloc_skb+0x112/0x2d0 [ 160.530812][ T8720] netlink_sendmsg+0x5c6/0xb30 [ 160.530840][ T8720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.530860][ T8720] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.530879][ T8720] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.530897][ T8720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.530915][ T8720] __sock_sendmsg+0x21c/0x270 [ 160.530941][ T8720] ____sys_sendmsg+0x505/0x830 [ 160.530966][ T8720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.530994][ T8720] ? import_iovec+0x74/0xa0 [ 160.531018][ T8720] ___sys_sendmsg+0x21f/0x2a0 [ 160.531040][ T8720] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.531096][ T8720] ? __fget_files+0x2a/0x420 [ 160.531111][ T8720] ? __fget_files+0x3a0/0x420 [ 160.531137][ T8720] __x64_sys_sendmsg+0x19b/0x260 [ 160.531159][ T8720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.531188][ T8720] ? __pfx_ksys_write+0x10/0x10 [ 160.531207][ T8720] ? rcu_is_watching+0x15/0xb0 [ 160.531230][ T8720] ? do_syscall_64+0xbe/0x3b0 [ 160.531252][ T8720] do_syscall_64+0xfa/0x3b0 [ 160.531268][ T8720] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.531286][ T8720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.531303][ T8720] ? clear_bhb_loop+0x60/0xb0 [ 160.531323][ T8720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.531340][ T8720] RIP: 0033:0x7f60c838ebe9 [ 160.531355][ T8720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.531370][ T8720] RSP: 002b:00007f60c91d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.531388][ T8720] RAX: ffffffffffffffda RBX: 00007f60c85c5fa0 RCX: 00007f60c838ebe9 [ 160.531400][ T8720] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 160.531411][ T8720] RBP: 00007f60c91d4090 R08: 0000000000000000 R09: 0000000000000000 [ 160.531421][ T8720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.531432][ T8720] R13: 00007f60c85c6038 R14: 00007f60c85c5fa0 R15: 00007ffed90d1d08 [ 160.531460][ T8720] [ 160.989051][ T8729] FAULT_INJECTION: forcing a failure. [ 160.989051][ T8729] name failslab, interval 1, probability 0, space 0, times 0 [ 161.006578][ T8729] CPU: 1 UID: 0 PID: 8729 Comm: syz.0.834 Not tainted syzkaller #0 PREEMPT(full) [ 161.006609][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.006620][ T8729] Call Trace: [ 161.006626][ T8729] [ 161.006633][ T8729] dump_stack_lvl+0x189/0x250 [ 161.006656][ T8729] ? __pfx____ratelimit+0x10/0x10 [ 161.006675][ T8729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.006693][ T8729] ? __pfx__printk+0x10/0x10 [ 161.006714][ T8729] ? __mutex_trylock_common+0x153/0x260 [ 161.006735][ T8729] ? __pfx___mutex_trylock_common+0x10/0x10 [ 161.006757][ T8729] should_fail_ex+0x414/0x560 [ 161.006788][ T8729] should_failslab+0xa8/0x100 [ 161.006813][ T8729] __kmalloc_cache_noprof+0x70/0x3d0 [ 161.006834][ T8729] ? __hw_addr_add_ex+0x1f4/0x770 [ 161.006858][ T8729] __hw_addr_add_ex+0x1f4/0x770 [ 161.006886][ T8729] dev_addr_init+0x14f/0x230 [ 161.006910][ T8729] ? __pfx_dev_addr_init+0x10/0x10 [ 161.006943][ T8729] alloc_netdev_mqs+0x2ae/0x11b0 [ 161.006964][ T8729] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 161.006992][ T8729] __ip_tunnel_create+0x349/0x560 [ 161.007016][ T8729] ? __pfx___ip_tunnel_create+0x10/0x10 [ 161.007039][ T8729] ? bpf_lsm_capable+0x9/0x20 [ 161.007058][ T8729] ? security_capable+0x7e/0x2e0 [ 161.007089][ T8729] ip_tunnel_ctl+0x4dd/0xc30 [ 161.007116][ T8729] ipgre_tunnel_ctl+0x2ef/0x5c0 [ 161.007144][ T8729] ip_tunnel_siocdevprivate+0xf2/0x180 [ 161.007171][ T8729] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 161.007205][ T8729] ? netdev_name_node_lookup+0xdf/0x120 [ 161.007229][ T8729] dev_ifsioc+0xb54/0xf00 [ 161.007254][ T8729] dev_ioctl+0x84c/0x1150 [ 161.007274][ T8729] sock_ioctl+0x719/0x790 [ 161.007298][ T8729] ? __pfx_sock_ioctl+0x10/0x10 [ 161.007320][ T8729] ? __fget_files+0x3a0/0x420 [ 161.007334][ T8729] ? __fget_files+0x2a/0x420 [ 161.007351][ T8729] ? bpf_lsm_file_ioctl+0x9/0x20 [ 161.007370][ T8729] ? __pfx_sock_ioctl+0x10/0x10 [ 161.007390][ T8729] __se_sys_ioctl+0xfc/0x170 [ 161.007411][ T8729] do_syscall_64+0xfa/0x3b0 [ 161.007428][ T8729] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.007444][ T8729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.007460][ T8729] ? clear_bhb_loop+0x60/0xb0 [ 161.007479][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.007495][ T8729] RIP: 0033:0x7f60c838ebe9 [ 161.007510][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.007524][ T8729] RSP: 002b:00007f60c91d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.007542][ T8729] RAX: ffffffffffffffda RBX: 00007f60c85c5fa0 RCX: 00007f60c838ebe9 [ 161.007554][ T8729] RDX: 0000200000000280 RSI: 00000000000089f1 RDI: 0000000000000003 [ 161.007565][ T8729] RBP: 00007f60c91d4090 R08: 0000000000000000 R09: 0000000000000000 [ 161.007575][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.007584][ T8729] R13: 00007f60c85c6038 R14: 00007f60c85c5fa0 R15: 00007ffed90d1d08 [ 161.007617][ T8729] [ 161.368831][ T8734] netlink: 72 bytes leftover after parsing attributes in process `syz.0.837'. [ 161.482765][ T8741] netlink: 72 bytes leftover after parsing attributes in process `syz.1.838'. [ 161.523164][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'. [ 161.725154][ T8749] tipc: Enabled bearer , priority 0 [ 161.735532][ T8746] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 161.789040][ T8746] tipc: Resetting bearer [ 161.907093][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 161.934307][ T8745] tipc: Disabling bearer [ 162.073159][ T8767] tipc: Enabling of bearer rejected, failed to enable media [ 162.103964][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.846'. [ 162.123012][ T8767] netlink: 'syz.4.846': attribute type 7 has an invalid length. [ 162.152640][ T8767] netlink: 'syz.4.846': attribute type 8 has an invalid length. [ 162.309169][ T8779] batadv1: entered promiscuous mode [ 162.318900][ T8779] batadv1: entered allmulticast mode [ 162.979283][ T8803] wg1 speed is unknown, defaulting to 1000 [ 163.042820][ T8803] lo speed is unknown, defaulting to 1000 [ 163.206942][ T8810] wg1 speed is unknown, defaulting to 1000 [ 163.217052][ T8810] lo speed is unknown, defaulting to 1000 [ 163.423459][ T8821] FAULT_INJECTION: forcing a failure. [ 163.423459][ T8821] name failslab, interval 1, probability 0, space 0, times 0 [ 163.446766][ T8821] CPU: 0 UID: 0 PID: 8821 Comm: syz.1.860 Not tainted syzkaller #0 PREEMPT(full) [ 163.446793][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.446803][ T8821] Call Trace: [ 163.446810][ T8821] [ 163.446819][ T8821] dump_stack_lvl+0x189/0x250 [ 163.446843][ T8821] ? __pfx____ratelimit+0x10/0x10 [ 163.446862][ T8821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.446882][ T8821] ? __pfx__printk+0x10/0x10 [ 163.446913][ T8821] ? __pfx___might_resched+0x10/0x10 [ 163.446935][ T8821] should_fail_ex+0x414/0x560 [ 163.446962][ T8821] should_failslab+0xa8/0x100 [ 163.446986][ T8821] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 163.447008][ T8821] ? __alloc_skb+0x112/0x2d0 [ 163.447030][ T8821] __alloc_skb+0x112/0x2d0 [ 163.447052][ T8821] netlink_sendmsg+0x5c6/0xb30 [ 163.447080][ T8821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.447101][ T8821] ? aa_sock_msg_perm+0xf1/0x1d0 [ 163.447120][ T8821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.447138][ T8821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.447156][ T8821] __sock_sendmsg+0x21c/0x270 [ 163.447182][ T8821] ____sys_sendmsg+0x505/0x830 [ 163.447208][ T8821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.447236][ T8821] ? import_iovec+0x74/0xa0 [ 163.447259][ T8821] ___sys_sendmsg+0x21f/0x2a0 [ 163.447281][ T8821] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.447341][ T8821] ? __fget_files+0x2a/0x420 [ 163.447355][ T8821] ? __fget_files+0x3a0/0x420 [ 163.447382][ T8821] __x64_sys_sendmsg+0x19b/0x260 [ 163.447404][ T8821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.447432][ T8821] ? __pfx_ksys_write+0x10/0x10 [ 163.447457][ T8821] ? do_syscall_64+0xbe/0x3b0 [ 163.447480][ T8821] do_syscall_64+0xfa/0x3b0 [ 163.447496][ T8821] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.447513][ T8821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.447530][ T8821] ? clear_bhb_loop+0x60/0xb0 [ 163.447550][ T8821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.447567][ T8821] RIP: 0033:0x7f2573f8ebe9 [ 163.447583][ T8821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.447597][ T8821] RSP: 002b:00007f2574eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.447616][ T8821] RAX: ffffffffffffffda RBX: 00007f25741c6090 RCX: 00007f2573f8ebe9 [ 163.447629][ T8821] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 163.447639][ T8821] RBP: 00007f2574eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 163.447650][ T8821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.447661][ T8821] R13: 00007f25741c6128 R14: 00007f25741c6090 R15: 00007ffeb148c528 [ 163.447690][ T8821] [ 163.877442][ T6283] IPVS: starting estimator thread 0... [ 163.974071][ T8829] IPVS: using max 33 ests per chain, 79200 per kthread [ 164.087004][ T8835] __nla_validate_parse: 4 callbacks suppressed [ 164.087020][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 164.453524][ T8849] netlink: 112 bytes leftover after parsing attributes in process `syz.0.870'. [ 164.569857][ T8849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.870'. [ 164.586701][ T8853] bridge2: entered allmulticast mode [ 164.642307][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.872'. [ 165.398362][ T8888] netlink: 72 bytes leftover after parsing attributes in process `syz.1.880'. [ 165.568953][ T8896] netlink: 17 bytes leftover after parsing attributes in process `syz.3.883'. [ 165.686220][ T8908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.743160][ T8907] wg1 speed is unknown, defaulting to 1000 [ 165.752542][ T8907] lo speed is unknown, defaulting to 1000 [ 165.777443][ T8911] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 165.990058][ T8915] wg1 speed is unknown, defaulting to 1000 [ 165.999958][ T8915] lo speed is unknown, defaulting to 1000 [ 166.336635][ T8936] netlink: 72 bytes leftover after parsing attributes in process `syz.3.895'. [ 166.499089][ T8942] tipc: Started in network mode [ 166.516164][ T8942] tipc: Node identity 3a662771d0a1, cluster identity 4711 [ 166.534756][ T8942] tipc: Enabled bearer , priority 0 [ 166.591668][ T8942] syzkaller0: entered promiscuous mode [ 166.614701][ T8942] syzkaller0: entered allmulticast mode [ 166.640604][ T8946] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 166.722848][ T8942] tipc: Resetting bearer [ 166.749081][ T8950] FAULT_INJECTION: forcing a failure. [ 166.749081][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 166.761999][ T8950] CPU: 1 UID: 0 PID: 8950 Comm: syz.4.900 Not tainted syzkaller #0 PREEMPT(full) [ 166.762027][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.762038][ T8950] Call Trace: [ 166.762045][ T8950] [ 166.762053][ T8950] dump_stack_lvl+0x189/0x250 [ 166.762076][ T8950] ? __pfx____ratelimit+0x10/0x10 [ 166.762095][ T8950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.762115][ T8950] ? __pfx__printk+0x10/0x10 [ 166.762138][ T8950] ? __lock_acquire+0xab9/0xd20 [ 166.762171][ T8950] should_fail_ex+0x414/0x560 [ 166.762197][ T8950] should_failslab+0xa8/0x100 [ 166.762222][ T8950] __kmalloc_noprof+0xcb/0x4f0 [ 166.762242][ T8950] ? hash_netnet4_add+0xe40/0x2770 [ 166.762267][ T8950] ? hash_netnet4_add+0x7f/0x2770 [ 166.762288][ T8950] hash_netnet4_add+0xe40/0x2770 [ 166.762309][ T8950] ? hash_netnet4_add+0x7f/0x2770 [ 166.762356][ T8950] hash_netnet4_uadt+0xb0b/0xe40 [ 166.762383][ T8950] ? __pfx_hash_netnet4_add+0x10/0x10 [ 166.762405][ T8950] ? __pfx_hash_netnet4_uadt+0x10/0x10 [ 166.762430][ T8950] ? __nla_validate_parse+0x2400/0x2d40 [ 166.762474][ T8950] call_ad+0x175/0xb00 [ 166.762502][ T8950] ? __pfx_call_ad+0x10/0x10 [ 166.762535][ T8950] ? __nla_parse+0x40/0x60 [ 166.762553][ T8950] ip_set_ad+0x791/0x930 [ 166.762581][ T8950] ? __pfx_ip_set_ad+0x10/0x10 [ 166.762638][ T8950] nfnetlink_rcv_msg+0xb4a/0x1130 [ 166.762659][ T8950] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 166.762699][ T8950] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 166.762751][ T8950] ? is_bpf_text_address+0x26/0x2b0 [ 166.762788][ T8950] netlink_rcv_skb+0x208/0x470 [ 166.762805][ T8950] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 166.762829][ T8950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.762855][ T8950] ? bpf_lsm_capable+0x9/0x20 [ 166.762872][ T8950] ? security_capable+0x7e/0x2e0 [ 166.762899][ T8950] nfnetlink_rcv+0x26a/0x2520 [ 166.762919][ T8950] ? is_bpf_text_address+0x26/0x2b0 [ 166.762944][ T8950] ? kernel_text_address+0xa5/0xe0 [ 166.762964][ T8950] ? __kernel_text_address+0xd/0x40 [ 166.762982][ T8950] ? unwind_get_return_address+0x4d/0x90 [ 166.762999][ T8950] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 166.763025][ T8950] ? arch_stack_walk+0xfc/0x150 [ 166.763058][ T8950] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 166.763080][ T8950] ? stack_depot_save_flags+0x40/0x860 [ 166.763106][ T8950] ? __lock_acquire+0xab9/0xd20 [ 166.763151][ T8950] ? __lock_acquire+0xab9/0xd20 [ 166.763180][ T8950] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.763202][ T8950] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.763225][ T8950] netlink_unicast+0x82f/0x9e0 [ 166.763257][ T8950] ? __pfx_netlink_unicast+0x10/0x10 [ 166.763282][ T8950] ? netlink_sendmsg+0x642/0xb30 [ 166.763296][ T8950] ? skb_put+0x11b/0x210 [ 166.763319][ T8950] netlink_sendmsg+0x805/0xb30 [ 166.763345][ T8950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.763366][ T8950] ? aa_sock_msg_perm+0xf1/0x1d0 [ 166.763383][ T8950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.763400][ T8950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.763418][ T8950] __sock_sendmsg+0x21c/0x270 [ 166.763444][ T8950] ____sys_sendmsg+0x505/0x830 [ 166.763466][ T8950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.763492][ T8950] ? import_iovec+0x74/0xa0 [ 166.763516][ T8950] ___sys_sendmsg+0x21f/0x2a0 [ 166.763537][ T8950] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.763593][ T8950] ? __fget_files+0x2a/0x420 [ 166.763608][ T8950] ? __fget_files+0x3a0/0x420 [ 166.763634][ T8950] __x64_sys_sendmsg+0x19b/0x260 [ 166.763656][ T8950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.763685][ T8950] ? __pfx_ksys_write+0x10/0x10 [ 166.763725][ T8950] ? rcu_is_watching+0x15/0xb0 [ 166.763750][ T8950] ? do_syscall_64+0xbe/0x3b0 [ 166.763770][ T8950] do_syscall_64+0xfa/0x3b0 [ 166.763786][ T8950] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.763803][ T8950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.763818][ T8950] ? clear_bhb_loop+0x60/0xb0 [ 166.763836][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.763851][ T8950] RIP: 0033:0x7f0d0a38ebe9 [ 166.763868][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.763882][ T8950] RSP: 002b:00007f0d0b21d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.763900][ T8950] RAX: ffffffffffffffda RBX: 00007f0d0a5c5fa0 RCX: 00007f0d0a38ebe9 [ 166.763912][ T8950] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 000000000000000c [ 166.763923][ T8950] RBP: 00007f0d0b21d090 R08: 0000000000000000 R09: 0000000000000000 [ 166.763933][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.763943][ T8950] R13: 00007f0d0a5c6038 R14: 00007f0d0a5c5fa0 R15: 00007ffe097a6d38 [ 166.763971][ T8950] [ 167.312649][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.904'. [ 167.327465][ T8941] tipc: Resetting bearer [ 167.358881][ T8941] tipc: Disabling bearer [ 167.471928][ T8961] netlink: 68 bytes leftover after parsing attributes in process `syz.1.904'. [ 168.107855][ T8992] wg1 speed is unknown, defaulting to 1000 [ 168.115772][ T8992] lo speed is unknown, defaulting to 1000 [ 168.379933][ T9001] wg1 speed is unknown, defaulting to 1000 [ 168.395739][ T9001] lo speed is unknown, defaulting to 1000 [ 168.665883][ T9019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.922'. [ 168.721604][ T9024] Driver unsupported XDP return value 0 on prog (id 233) dev N/A, expect packet loss! [ 168.779364][ T9019] team0: entered promiscuous mode [ 168.800519][ T9019] team_slave_0: entered promiscuous mode [ 168.834744][ T9019] team_slave_1: entered promiscuous mode [ 168.844089][ T9019] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 168.859561][ T9019] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 168.901468][ T9019] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 169.708041][ T9067] FAULT_INJECTION: forcing a failure. [ 169.708041][ T9067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.728380][ T9067] CPU: 1 UID: 0 PID: 9067 Comm: syz.4.935 Not tainted syzkaller #0 PREEMPT(full) [ 169.728405][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.728415][ T9067] Call Trace: [ 169.728421][ T9067] [ 169.728428][ T9067] dump_stack_lvl+0x189/0x250 [ 169.728452][ T9067] ? __pfx____ratelimit+0x10/0x10 [ 169.728470][ T9067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.728490][ T9067] ? __pfx__printk+0x10/0x10 [ 169.728510][ T9067] ? __might_fault+0xb0/0x130 [ 169.728541][ T9067] should_fail_ex+0x414/0x560 [ 169.728566][ T9067] _copy_from_user+0x2d/0xb0 [ 169.728586][ T9067] ___sys_sendmsg+0x158/0x2a0 [ 169.728608][ T9067] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.728662][ T9067] ? __fget_files+0x2a/0x420 [ 169.728686][ T9067] ? __fget_files+0x3a0/0x420 [ 169.728710][ T9067] __x64_sys_sendmsg+0x19b/0x260 [ 169.728732][ T9067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.728760][ T9067] ? __pfx_ksys_write+0x10/0x10 [ 169.728778][ T9067] ? rcu_is_watching+0x15/0xb0 [ 169.728800][ T9067] ? do_syscall_64+0xbe/0x3b0 [ 169.728820][ T9067] do_syscall_64+0xfa/0x3b0 [ 169.728837][ T9067] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.728855][ T9067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.728870][ T9067] ? clear_bhb_loop+0x60/0xb0 [ 169.728888][ T9067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.728904][ T9067] RIP: 0033:0x7f0d0a38ebe9 [ 169.728919][ T9067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.728933][ T9067] RSP: 002b:00007f0d0b21d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.728952][ T9067] RAX: ffffffffffffffda RBX: 00007f0d0a5c5fa0 RCX: 00007f0d0a38ebe9 [ 169.728964][ T9067] RDX: 000000002000c058 RSI: 0000200000000480 RDI: 0000000000000003 [ 169.728974][ T9067] RBP: 00007f0d0b21d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.728985][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.728995][ T9067] R13: 00007f0d0a5c6038 R14: 00007f0d0a5c5fa0 R15: 00007ffe097a6d38 [ 169.729022][ T9067] [ 170.441803][ T9095] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 170.481433][ T9095] bond3: entered promiscuous mode [ 170.494770][ T9095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.649780][ T9095] __nla_validate_parse: 3 callbacks suppressed [ 170.649800][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 170.674890][ T9092] netlink: 56 bytes leftover after parsing attributes in process `syz.2.940'. [ 170.727080][ T9101] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.734303][ T9101] bond3: (slave gre3): The slave device specified does not support setting the MAC address [ 170.745809][ T9101] bond3: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 170.759888][ T9101] bond3: (slave gre3): making interface the new active one [ 170.767806][ T9101] gre3: entered promiscuous mode [ 170.774676][ T9101] bond3: (slave gre3): Enslaving as an active interface with an up link [ 171.337051][ T9128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.953'. [ 172.015246][ T9153] Bluetooth: MGMT ver 1.23 [ 172.169366][ T9163] wg1 speed is unknown, defaulting to 1000 [ 172.190954][ T9163] lo speed is unknown, defaulting to 1000 [ 172.919015][ T9207] netlink: 'syz.1.981': attribute type 1 has an invalid length. [ 172.992897][ T9213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.983'. [ 173.004556][ T9213] netlink: 260 bytes leftover after parsing attributes in process `syz.4.983'. [ 173.032836][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 173.035029][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 173.050984][ T9207] bond7: entered promiscuous mode [ 173.090537][ T9207] 8021q: adding VLAN 0 to HW filter on device bond7 [ 173.137956][ T9210] 8021q: adding VLAN 0 to HW filter on device bond7 [ 173.145135][ T9210] bond7: (slave gre6): The slave device specified does not support setting the MAC address [ 173.156306][ T9210] bond7: (slave gre6): Setting fail_over_mac to active for active-backup mode [ 173.178057][ T9210] bond7: (slave gre6): making interface the new active one [ 173.187998][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 173.198670][ T9210] gre6: entered promiscuous mode [ 173.210218][ T9210] bond7: (slave gre6): Enslaving as an active interface with an up link [ 173.220917][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 173.237757][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 173.348626][ T9231] netlink: 'syz.4.986': attribute type 6 has an invalid length. [ 173.380829][ T9221] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 174.238871][ T9270] wg1 speed is unknown, defaulting to 1000 [ 174.250561][ T9270] lo speed is unknown, defaulting to 1000 [ 175.008499][ T9312] wg1 speed is unknown, defaulting to 1000 [ 175.038483][ T9312] lo speed is unknown, defaulting to 1000 [ 175.385600][ T9330] wg1 speed is unknown, defaulting to 1000 [ 175.393325][ T9330] lo speed is unknown, defaulting to 1000 [ 175.919887][ T9332] __nla_validate_parse: 4 callbacks suppressed [ 175.919905][ T9332] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1014'. [ 176.394556][ T9369] wg1 speed is unknown, defaulting to 1000 [ 176.421167][ T9369] lo speed is unknown, defaulting to 1000 [ 176.874208][ T9397] tipc: Enabled bearer , priority 0 [ 176.930638][ T9392] wg1 speed is unknown, defaulting to 1000 [ 176.955241][ T9398] syzkaller0: entered promiscuous mode [ 176.961721][ T9398] syzkaller0: entered allmulticast mode [ 176.981523][ T9392] lo speed is unknown, defaulting to 1000 [ 176.994095][ T9393] wg1 speed is unknown, defaulting to 1000 [ 177.081064][ T9393] lo speed is unknown, defaulting to 1000 [ 177.266302][ T9403] tipc: Resetting bearer [ 177.602749][ T9389] tipc: Resetting bearer [ 177.720398][ T9389] tipc: Disabling bearer [ 178.128094][ T9426] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1036'. [ 178.220432][ T9438] netlink: 4916 bytes leftover after parsing attributes in process `syz.0.1041'. [ 178.243252][ T9438] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 178.416951][ T9445] FAULT_INJECTION: forcing a failure. [ 178.416951][ T9445] name failslab, interval 1, probability 0, space 0, times 0 [ 178.449702][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.2.1042 Not tainted syzkaller #0 PREEMPT(full) [ 178.449726][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.449736][ T9445] Call Trace: [ 178.449744][ T9445] [ 178.449751][ T9445] dump_stack_lvl+0x189/0x250 [ 178.449776][ T9445] ? __pfx____ratelimit+0x10/0x10 [ 178.449804][ T9445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.449823][ T9445] ? __pfx__printk+0x10/0x10 [ 178.449848][ T9445] ? __pfx___might_resched+0x10/0x10 [ 178.449864][ T9445] ? fs_reclaim_acquire+0x7d/0x100 [ 178.449883][ T9445] should_fail_ex+0x414/0x560 [ 178.449909][ T9445] should_failslab+0xa8/0x100 [ 178.449931][ T9445] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 178.449952][ T9445] ? __alloc_skb+0x112/0x2d0 [ 178.449974][ T9445] __alloc_skb+0x112/0x2d0 [ 178.449995][ T9445] netlink_ack+0x146/0xa50 [ 178.450009][ T9445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.450028][ T9445] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 178.450048][ T9445] ? __pfx_nl80211_post_doit+0x10/0x10 [ 178.450081][ T9445] netlink_rcv_skb+0x28c/0x470 [ 178.450096][ T9445] ? __lock_acquire+0xab9/0xd20 [ 178.450119][ T9445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.450139][ T9445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.450175][ T9445] ? down_read+0x1ad/0x2e0 [ 178.450196][ T9445] genl_rcv+0x28/0x40 [ 178.450212][ T9445] netlink_unicast+0x82f/0x9e0 [ 178.450244][ T9445] ? __pfx_netlink_unicast+0x10/0x10 [ 178.450267][ T9445] ? netlink_sendmsg+0x642/0xb30 [ 178.450281][ T9445] ? skb_put+0x11b/0x210 [ 178.450303][ T9445] netlink_sendmsg+0x805/0xb30 [ 178.450331][ T9445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.450351][ T9445] ? aa_sock_msg_perm+0xf1/0x1d0 [ 178.450370][ T9445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.450388][ T9445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.450406][ T9445] __sock_sendmsg+0x21c/0x270 [ 178.450431][ T9445] ____sys_sendmsg+0x505/0x830 [ 178.450457][ T9445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.450486][ T9445] ? import_iovec+0x74/0xa0 [ 178.450509][ T9445] ___sys_sendmsg+0x21f/0x2a0 [ 178.450531][ T9445] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.450586][ T9445] ? __fget_files+0x2a/0x420 [ 178.450601][ T9445] ? __fget_files+0x3a0/0x420 [ 178.450626][ T9445] __x64_sys_sendmsg+0x19b/0x260 [ 178.450647][ T9445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.450675][ T9445] ? __pfx_ksys_write+0x10/0x10 [ 178.450700][ T9445] ? do_syscall_64+0xbe/0x3b0 [ 178.450722][ T9445] do_syscall_64+0xfa/0x3b0 [ 178.450739][ T9445] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.450756][ T9445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.450771][ T9445] ? clear_bhb_loop+0x60/0xb0 [ 178.450798][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.450814][ T9445] RIP: 0033:0x7f6ca2f8ebe9 [ 178.450830][ T9445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.450844][ T9445] RSP: 002b:00007f6ca3db5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.450862][ T9445] RAX: ffffffffffffffda RBX: 00007f6ca31c6090 RCX: 00007f6ca2f8ebe9 [ 178.450874][ T9445] RDX: 0000000028008004 RSI: 0000200000000000 RDI: 0000000000000003 [ 178.450885][ T9445] RBP: 00007f6ca3db5090 R08: 0000000000000000 R09: 0000000000000000 [ 178.450896][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.450906][ T9445] R13: 00007f6ca31c6128 R14: 00007f6ca31c6090 R15: 00007fffcf8916d8 [ 178.450934][ T9445] [ 178.968058][ T9455] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 178.976544][ T9455] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 178.987027][ T9455] netlink: 'syz.2.1050': attribute type 12 has an invalid length. [ 179.146443][ T9459] vlan0: entered promiscuous mode [ 179.756288][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'. [ 179.978463][ T9496] syz.4.1061: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 180.002444][ T9496] CPU: 0 UID: 0 PID: 9496 Comm: syz.4.1061 Not tainted syzkaller #0 PREEMPT(full) [ 180.002467][ T9496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.002478][ T9496] Call Trace: [ 180.002486][ T9496] [ 180.002493][ T9496] dump_stack_lvl+0x189/0x250 [ 180.002522][ T9496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.002541][ T9496] ? __pfx__printk+0x10/0x10 [ 180.002563][ T9496] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 180.002583][ T9496] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 180.002605][ T9496] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 180.002626][ T9496] warn_alloc+0x214/0x310 [ 180.002654][ T9496] ? __pfx_warn_alloc+0x10/0x10 [ 180.002687][ T9496] ? __get_vm_area_node+0x28f/0x300 [ 180.002709][ T9496] ? xskq_create+0xbf/0x170 [ 180.002730][ T9496] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 180.002783][ T9496] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.002811][ T9496] ? __kasan_kmalloc+0x93/0xb0 [ 180.002835][ T9496] vmalloc_user_noprof+0xad/0xf0 [ 180.002857][ T9496] ? xskq_create+0xbf/0x170 [ 180.002874][ T9496] xskq_create+0xbf/0x170 [ 180.002893][ T9496] xsk_init_queue+0xb0/0x110 [ 180.002911][ T9496] xsk_setsockopt+0x57b/0x8d0 [ 180.002935][ T9496] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.002957][ T9496] ? __pfx_aa_sk_perm+0x10/0x10 [ 180.002980][ T9496] ? __fget_files+0x2a/0x420 [ 180.002993][ T9496] ? aa_sock_opt_perm+0xff/0x1b0 [ 180.003011][ T9496] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 180.003027][ T9496] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.003048][ T9496] do_sock_setsockopt+0x17c/0x1b0 [ 180.003072][ T9496] __x64_sys_setsockopt+0x13f/0x1b0 [ 180.003095][ T9496] do_syscall_64+0xfa/0x3b0 [ 180.003112][ T9496] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.003130][ T9496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.003146][ T9496] ? clear_bhb_loop+0x60/0xb0 [ 180.003167][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.003183][ T9496] RIP: 0033:0x7f0d0a38ebe9 [ 180.003199][ T9496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.003213][ T9496] RSP: 002b:00007f0d0b1fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.003231][ T9496] RAX: ffffffffffffffda RBX: 00007f0d0a5c6090 RCX: 00007f0d0a38ebe9 [ 180.003244][ T9496] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 180.003256][ T9496] RBP: 00007f0d0a411e19 R08: 0000000000000004 R09: 0000000000000000 [ 180.003267][ T9496] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 180.003277][ T9496] R13: 00007f0d0a5c6128 R14: 00007f0d0a5c6090 R15: 00007ffe097a6d38 [ 180.003306][ T9496] [ 180.264009][ T9496] Mem-Info: [ 180.267131][ T9496] active_anon:7168 inactive_anon:0 isolated_anon:0 [ 180.267131][ T9496] active_file:3516 inactive_file:39885 isolated_file:0 [ 180.267131][ T9496] unevictable:768 dirty:306 writeback:0 [ 180.267131][ T9496] slab_reclaimable:11268 slab_unreclaimable:101680 [ 180.267131][ T9496] mapped:31954 shmem:3627 pagetables:1020 [ 180.267131][ T9496] sec_pagetables:0 bounce:0 [ 180.267131][ T9496] kernel_misc_reclaimable:0 [ 180.267131][ T9496] free:1325889 free_pcp:14208 free_cma:0 [ 180.312477][ T9496] Node 0 active_anon:28672kB inactive_anon:0kB active_file:14064kB inactive_file:159336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127816kB dirty:1224kB writeback:0kB shmem:12972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12524kB pagetables:3936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.345138][ T9496] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.375091][ T9496] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.392918][ T9498] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1062'. [ 180.404075][ T9496] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 180.404156][ T9496] Node 0 DMA32 free:1398512kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31124kB inactive_anon:0kB active_file:14064kB inactive_file:157760kB unevictable:1536kB writepending:1224kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:37724kB local_pcp:15276kB free_cma:0kB [ 180.404205][ T9496] lowmem_reserve[]: 0 0 1 1 1 [ 180.456313][ T9496] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 180.485349][ T9496] lowmem_reserve[]: 0 0 0 0 0 [ 180.490073][ T9496] Node 1 Normal free:3889672kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16712kB local_pcp:9028kB free_cma:0kB [ 180.521421][ T9496] lowmem_reserve[]: 0 0 0 0 0 [ 180.526206][ T9496] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 180.539390][ T9496] Node 0 DMA32: 242*4kB (UM) 74*8kB (UE) 226*16kB (UME) 419*32kB (UME) 118*64kB (UME) 35*128kB (UME) 21*256kB (UM) 7*512kB (UME) 7*1024kB (ME) 4*2048kB (UM) 328*4096kB (UM) = 1398424kB [ 180.558227][ T9496] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 180.570663][ T9496] Node 1 Normal: 174*4kB (UE) 48*8kB (UME) 29*16kB (UME) 72*32kB (UME) 26*64kB (UME) 9*128kB (UME) 6*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3889672kB [ 180.589064][ T9496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.606398][ T9496] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.618494][ T9496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.632059][ T9496] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.646355][ T9496] 47625 total pagecache pages [ 180.651148][ T9496] 0 pages in swap cache [ 180.656200][ T9496] Free swap = 124996kB [ 180.660487][ T9496] Total swap = 124996kB [ 180.665317][ T9496] 2097051 pages RAM [ 180.669330][ T9496] 0 pages HighMem/MovableOnly [ 180.674460][ T9496] 425673 pages reserved [ 180.678700][ T9496] 0 pages cma reserved [ 180.803074][ T9522] openvswitch: netlink: IP tunnel dst address not specified [ 180.891087][ T9523] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 180.969440][ T9523] bond4: entered promiscuous mode [ 180.976187][ T9523] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.132160][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 181.362143][ T9534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.386273][ T9534] bond4: (slave gre4): The slave device specified does not support setting the MAC address [ 181.435092][ T9534] bond4: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 181.469055][ T9534] bond4: (slave gre4): making interface the new active one [ 181.483916][ T9534] gre4: entered promiscuous mode [ 181.490350][ T9534] bond4: (slave gre4): Enslaving as an active interface with an up link [ 181.815434][ T9569] netlink: 'syz.2.1081': attribute type 10 has an invalid length. [ 181.826109][ T9569] FAULT_INJECTION: forcing a failure. [ 181.826109][ T9569] name failslab, interval 1, probability 0, space 0, times 0 [ 181.849264][ T9569] CPU: 1 UID: 0 PID: 9569 Comm: syz.2.1081 Not tainted syzkaller #0 PREEMPT(full) [ 181.849289][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.849299][ T9569] Call Trace: [ 181.849307][ T9569] [ 181.849315][ T9569] dump_stack_lvl+0x189/0x250 [ 181.849339][ T9569] ? __pfx____ratelimit+0x10/0x10 [ 181.849358][ T9569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.849377][ T9569] ? __pfx__printk+0x10/0x10 [ 181.849405][ T9569] ? __pfx___might_resched+0x10/0x10 [ 181.849426][ T9569] should_fail_ex+0x414/0x560 [ 181.849452][ T9569] should_failslab+0xa8/0x100 [ 181.849477][ T9569] __kmalloc_cache_noprof+0x70/0x3d0 [ 181.849498][ T9569] ? ____ip_mc_inc_group+0x528/0xde0 [ 181.849521][ T9569] ____ip_mc_inc_group+0x528/0xde0 [ 181.849548][ T9569] ip_mc_up+0x125/0x300 [ 181.849568][ T9569] inetdev_event+0xfb3/0x15b0 [ 181.849587][ T9569] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 181.849606][ T9569] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 181.849627][ T9569] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 181.849648][ T9569] ? __pfx_inetdev_event+0x10/0x10 [ 181.849666][ T9569] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 181.849693][ T9569] notifier_call_chain+0x1b3/0x3e0 [ 181.849719][ T9569] netif_open+0xfd/0x170 [ 181.849743][ T9569] ? __pfx_netif_open+0x10/0x10 [ 181.849769][ T9569] ? rcu_is_watching+0x15/0xb0 [ 181.849790][ T9569] dev_open+0x125/0x260 [ 181.849812][ T9569] team_add_slave+0xab9/0x26f0 [ 181.849846][ T9569] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 181.849868][ T9569] ? __pfx_team_add_slave+0x10/0x10 [ 181.849884][ T9569] ? __dev_notify_flags+0x1d9/0x2e0 [ 181.849905][ T9569] ? __pfx___dev_notify_flags+0x10/0x10 [ 181.849922][ T9569] ? __dev_change_flags+0x4cc/0x6d0 [ 181.849946][ T9569] ? __pfx___dev_change_flags+0x10/0x10 [ 181.849968][ T9569] ? mutex_is_locked+0x17/0x50 [ 181.849989][ T9569] do_set_master+0x530/0x6d0 [ 181.850015][ T9569] do_setlink+0xcf0/0x41c0 [ 181.850049][ T9569] ? __pfx_do_setlink+0x10/0x10 [ 181.850071][ T9569] ? _printk+0xcf/0x120 [ 181.850090][ T9569] ? __pfx____ratelimit+0x10/0x10 [ 181.850115][ T9569] ? __lock_acquire+0xab9/0xd20 [ 181.850146][ T9569] ? __mutex_trylock_common+0x153/0x260 [ 181.850167][ T9569] ? __pfx___mutex_trylock_common+0x10/0x10 [ 181.850190][ T9569] ? rcu_is_watching+0x15/0xb0 [ 181.850207][ T9569] ? trace_contention_end+0x39/0x120 [ 181.850225][ T9569] ? __mutex_lock+0x335/0x1350 [ 181.850266][ T9569] ? rtnl_newlink+0x8db/0x1c70 [ 181.850286][ T9569] ? __pfx___mutex_lock+0x10/0x10 [ 181.850315][ T9569] ? ns_capable+0x8a/0xf0 [ 181.850333][ T9569] ? rtnl_link_get_net_capable+0x16a/0x350 [ 181.850355][ T9569] rtnl_newlink+0x160b/0x1c70 [ 181.850386][ T9569] ? __pfx_rtnl_newlink+0x10/0x10 [ 181.850412][ T9569] ? is_bpf_text_address+0x26/0x2b0 [ 181.850442][ T9569] ? __lock_acquire+0xab9/0xd20 [ 181.850477][ T9569] ? __lock_acquire+0xab9/0xd20 [ 181.850520][ T9569] ? is_bpf_text_address+0x26/0x2b0 [ 181.850547][ T9569] ? is_bpf_text_address+0x292/0x2b0 [ 181.850568][ T9569] ? is_bpf_text_address+0x26/0x2b0 [ 181.850599][ T9569] ? __lock_acquire+0xab9/0xd20 [ 181.850647][ T9569] ? __pfx_rtnl_newlink+0x10/0x10 [ 181.850664][ T9569] rtnetlink_rcv_msg+0x7cc/0xb70 [ 181.850680][ T9569] ? __lock_acquire+0xab9/0xd20 [ 181.850703][ T9569] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 181.850719][ T9569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.850753][ T9569] netlink_rcv_skb+0x208/0x470 [ 181.850769][ T9569] ? __lock_acquire+0xab9/0xd20 [ 181.850791][ T9569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.850809][ T9569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.850838][ T9569] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.850864][ T9569] netlink_unicast+0x82f/0x9e0 [ 181.850897][ T9569] ? __pfx_netlink_unicast+0x10/0x10 [ 181.850921][ T9569] ? netlink_sendmsg+0x642/0xb30 [ 181.850934][ T9569] ? skb_put+0x11b/0x210 [ 181.850955][ T9569] netlink_sendmsg+0x805/0xb30 [ 181.850983][ T9569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.851004][ T9569] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.851022][ T9569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.851040][ T9569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.851059][ T9569] __sock_sendmsg+0x21c/0x270 [ 181.851085][ T9569] ____sys_sendmsg+0x505/0x830 [ 181.851110][ T9569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.851139][ T9569] ? import_iovec+0x74/0xa0 [ 181.851162][ T9569] ___sys_sendmsg+0x21f/0x2a0 [ 181.851184][ T9569] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.851245][ T9569] ? __fget_files+0x2a/0x420 [ 181.851258][ T9569] ? __fget_files+0x3a0/0x420 [ 181.851278][ T9569] __x64_sys_sendmsg+0x19b/0x260 [ 181.851296][ T9569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.851318][ T9569] ? __pfx_ksys_write+0x10/0x10 [ 181.851333][ T9569] ? rcu_is_watching+0x15/0xb0 [ 181.851350][ T9569] ? do_syscall_64+0xbe/0x3b0 [ 181.851367][ T9569] do_syscall_64+0xfa/0x3b0 [ 181.851380][ T9569] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.851393][ T9569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.851406][ T9569] ? clear_bhb_loop+0x60/0xb0 [ 181.851422][ T9569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.851434][ T9569] RIP: 0033:0x7f6ca2f8ebe9 [ 181.851447][ T9569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.851458][ T9569] RSP: 002b:00007f6ca3db5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.851473][ T9569] RAX: ffffffffffffffda RBX: 00007f6ca31c6090 RCX: 00007f6ca2f8ebe9 [ 181.851483][ T9569] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008 [ 181.851492][ T9569] RBP: 00007f6ca3db5090 R08: 0000000000000000 R09: 0000000000000000 [ 181.851500][ T9569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.851508][ T9569] R13: 00007f6ca31c6128 R14: 00007f6ca31c6090 R15: 00007fffcf8916d8 [ 181.851530][ T9569] [ 181.865340][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.426581][ T9569] team0: Port device bond0 added [ 182.653645][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 183.406704][ T9596] wg1 speed is unknown, defaulting to 1000 [ 183.455916][ T9596] lo speed is unknown, defaulting to 1000 [ 183.639307][ T9627] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1100'. [ 183.651664][ T9622] wg1 speed is unknown, defaulting to 1000 [ 183.969824][ T9638] FAULT_INJECTION: forcing a failure. [ 183.969824][ T9638] name fail_futex, interval 1, probability 0, space 0, times 0 [ 183.984251][ T9622] lo speed is unknown, defaulting to 1000 [ 183.989486][ T9638] CPU: 0 UID: 0 PID: 9638 Comm: syz.1.1103 Not tainted syzkaller #0 PREEMPT(full) [ 183.989510][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.989520][ T9638] Call Trace: [ 183.989527][ T9638] [ 183.989535][ T9638] dump_stack_lvl+0x189/0x250 [ 183.989561][ T9638] ? __pfx____ratelimit+0x10/0x10 [ 183.989579][ T9638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.989598][ T9638] ? __pfx__printk+0x10/0x10 [ 183.989621][ T9638] ? __pfx___skb_recv_udp+0x10/0x10 [ 183.989637][ T9638] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.989661][ T9638] should_fail_ex+0x414/0x560 [ 183.989687][ T9638] get_futex_key+0x1a8/0x1660 [ 183.989708][ T9638] ? look_up_lock_class+0x74/0x170 [ 183.989732][ T9638] ? __pfx_get_futex_key+0x10/0x10 [ 183.989749][ T9638] ? __lock_acquire+0xab9/0xd20 [ 183.989782][ T9638] futex_wake+0xf8/0x560 [ 183.989803][ T9638] ? __pfx___mutex_trylock_common+0x10/0x10 [ 183.989824][ T9638] ? __pfx_futex_wake+0x10/0x10 [ 183.989848][ T9638] ? __lock_acquire+0xab9/0xd20 [ 183.989880][ T9638] do_futex+0x395/0x420 [ 183.989906][ T9638] ? __pfx_do_futex+0x10/0x10 [ 183.989927][ T9638] ? __might_fault+0xb0/0x130 [ 183.989951][ T9638] mm_release+0x188/0x390 [ 183.989969][ T9638] ? __pfx_mm_release+0x10/0x10 [ 183.989984][ T9638] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.990008][ T9638] exit_mm+0xa8/0x2c0 [ 183.990030][ T9638] ? __pfx_exit_mm+0x10/0x10 [ 183.990050][ T9638] ? rcu_is_watching+0x15/0xb0 [ 183.990070][ T9638] do_exit+0x648/0x2300 [ 183.990096][ T9638] ? do_raw_spin_lock+0x121/0x290 [ 183.990118][ T9638] ? __pfx_do_exit+0x10/0x10 [ 183.990152][ T9638] do_group_exit+0x21c/0x2d0 [ 183.990172][ T9638] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.990191][ T9638] get_signal+0x1286/0x1340 [ 183.990227][ T9638] arch_do_signal_or_restart+0x9a/0x750 [ 183.990263][ T9638] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 183.990301][ T9638] ? exit_to_user_mode_loop+0x40/0x110 [ 183.990326][ T9638] exit_to_user_mode_loop+0x75/0x110 [ 183.990348][ T9638] do_syscall_64+0x2bd/0x3b0 [ 183.990365][ T9638] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.990381][ T9638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.990397][ T9638] ? clear_bhb_loop+0x60/0xb0 [ 183.990417][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.990433][ T9638] RIP: 0033:0x7f2573f8ebe9 [ 183.990447][ T9638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.990461][ T9638] RSP: 002b:00007f2574eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.990482][ T9638] RAX: fffffffffffffe00 RBX: 00007f25741c6090 RCX: 00007f2573f8ebe9 [ 183.990494][ T9638] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000004 [ 183.990505][ T9638] RBP: 00007f2574eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 183.990515][ T9638] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 183.990525][ T9638] R13: 00007f25741c6128 R14: 00007f25741c6090 R15: 00007ffeb148c528 [ 183.990552][ T9638] [ 185.291753][ T9673] FAULT_INJECTION: forcing a failure. [ 185.291753][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 185.306192][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: syz.4.1113 Not tainted syzkaller #0 PREEMPT(full) [ 185.306217][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.306227][ T9673] Call Trace: [ 185.306234][ T9673] [ 185.306242][ T9673] dump_stack_lvl+0x189/0x250 [ 185.306266][ T9673] ? __pfx____ratelimit+0x10/0x10 [ 185.306285][ T9673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.306304][ T9673] ? __pfx__printk+0x10/0x10 [ 185.306340][ T9673] should_fail_ex+0x414/0x560 [ 185.306367][ T9673] should_failslab+0xa8/0x100 [ 185.306392][ T9673] __kmalloc_cache_noprof+0x70/0x3d0 [ 185.306413][ T9673] ? sctp_add_bind_addr+0x8c/0x370 [ 185.306435][ T9673] sctp_add_bind_addr+0x8c/0x370 [ 185.306457][ T9673] sctp_copy_local_addr_list+0x30b/0x4e0 [ 185.306485][ T9673] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 185.306508][ T9673] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 185.306535][ T9673] ? sctp_v6_is_any+0x64/0x80 [ 185.306554][ T9673] ? sctp_copy_one_addr+0x93/0x360 [ 185.306574][ T9673] sctp_bind_addr_copy+0xb3/0x3c0 [ 185.306593][ T9673] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 185.306619][ T9673] sctp_connect_new_asoc+0x2e0/0x690 [ 185.306642][ T9673] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 185.306660][ T9673] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.306685][ T9673] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 185.306704][ T9673] ? security_sctp_bind_connect+0x7e/0x2e0 [ 185.306729][ T9673] sctp_sendmsg+0x155c/0x2810 [ 185.306761][ T9673] ? __pfx_sctp_sendmsg+0x10/0x10 [ 185.306784][ T9673] ? aa_sk_perm+0x81e/0x950 [ 185.306812][ T9673] ? __pfx_aa_sk_perm+0x10/0x10 [ 185.306838][ T9673] ? sock_rps_record_flow+0x19/0x410 [ 185.306862][ T9673] ? inet_sendmsg+0x2f4/0x370 [ 185.306888][ T9673] __sock_sendmsg+0x19c/0x270 [ 185.306915][ T9673] __sys_sendto+0x3bd/0x520 [ 185.306936][ T9673] ? __pfx___sys_sendto+0x10/0x10 [ 185.306950][ T9673] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 185.306983][ T9673] ? __fget_files+0x3a0/0x420 [ 185.307010][ T9673] ? ksys_write+0x22a/0x250 [ 185.307034][ T9673] ? __pfx_ksys_write+0x10/0x10 [ 185.307051][ T9673] ? rcu_is_watching+0x15/0xb0 [ 185.307074][ T9673] __x64_sys_sendto+0xde/0x100 [ 185.307102][ T9673] do_syscall_64+0xfa/0x3b0 [ 185.307119][ T9673] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.307136][ T9673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.307153][ T9673] ? clear_bhb_loop+0x60/0xb0 [ 185.307174][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.307190][ T9673] RIP: 0033:0x7f0d0a38ebe9 [ 185.307206][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.307219][ T9673] RSP: 002b:00007f0d0b21d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 185.307239][ T9673] RAX: ffffffffffffffda RBX: 00007f0d0a5c5fa0 RCX: 00007f0d0a38ebe9 [ 185.307252][ T9673] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 185.307263][ T9673] RBP: 00007f0d0b21d090 R08: 0000200000000340 R09: 000000000000001c [ 185.307274][ T9673] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000002 [ 185.307285][ T9673] R13: 00007f0d0a5c6038 R14: 00007f0d0a5c5fa0 R15: 00007ffe097a6d38 [ 185.307315][ T9673] [ 185.765547][ T9681] openvswitch: netlink: IP tunnel dst address not specified [ 185.793421][ T9683] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1116'. [ 185.871489][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1116'. [ 186.060440][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 186.439661][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 186.996835][ T9731] netlink: 'syz.3.1132': attribute type 32 has an invalid length. [ 187.008480][ T9729] wg1 speed is unknown, defaulting to 1000 [ 187.050962][ T9731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1132'. [ 187.058902][ T9733] sctp: [Deprecated]: syz.4.1134 (pid 9733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.058902][ T9733] Use struct sctp_sack_info instead [ 187.130087][ T9729] lo speed is unknown, defaulting to 1000 [ 187.166680][ T9736] FAULT_INJECTION: forcing a failure. [ 187.166680][ T9736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.191428][ T9736] CPU: 1 UID: 0 PID: 9736 Comm: syz.2.1135 Not tainted syzkaller #0 PREEMPT(full) [ 187.191453][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.191463][ T9736] Call Trace: [ 187.191470][ T9736] [ 187.191477][ T9736] dump_stack_lvl+0x189/0x250 [ 187.191502][ T9736] ? __pfx____ratelimit+0x10/0x10 [ 187.191521][ T9736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.191540][ T9736] ? __pfx__printk+0x10/0x10 [ 187.191561][ T9736] ? __might_fault+0xb0/0x130 [ 187.191595][ T9736] should_fail_ex+0x414/0x560 [ 187.191622][ T9736] _copy_from_user+0x2d/0xb0 [ 187.191642][ T9736] ___sys_sendmsg+0x158/0x2a0 [ 187.191665][ T9736] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.191725][ T9736] ? __fget_files+0x2a/0x420 [ 187.191740][ T9736] ? __fget_files+0x3a0/0x420 [ 187.191763][ T9736] __x64_sys_sendmsg+0x19b/0x260 [ 187.191785][ T9736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.191810][ T9736] ? __pfx_ksys_write+0x10/0x10 [ 187.191827][ T9736] ? rcu_is_watching+0x15/0xb0 [ 187.191848][ T9736] ? do_syscall_64+0xbe/0x3b0 [ 187.191869][ T9736] do_syscall_64+0xfa/0x3b0 [ 187.191884][ T9736] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.191901][ T9736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.191918][ T9736] ? clear_bhb_loop+0x60/0xb0 [ 187.191939][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.191955][ T9736] RIP: 0033:0x7f6ca2f8ebe9 [ 187.191971][ T9736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.191985][ T9736] RSP: 002b:00007f6ca3dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.192004][ T9736] RAX: ffffffffffffffda RBX: 00007f6ca31c5fa0 RCX: 00007f6ca2f8ebe9 [ 187.192017][ T9736] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 187.192027][ T9736] RBP: 00007f6ca3dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.192038][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.192049][ T9736] R13: 00007f6ca31c6038 R14: 00007f6ca31c5fa0 R15: 00007fffcf8916d8 [ 187.192078][ T9736] [ 188.047985][ T9762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.405658][ T9756] netlink: 'syz.3.1140': attribute type 2 has an invalid length. [ 188.684476][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'. [ 188.726790][ T9770] IPv6: Can't replace route, no match found [ 189.314839][ T9792] wg1 speed is unknown, defaulting to 1000 [ 189.322536][ T9792] lo speed is unknown, defaulting to 1000 [ 189.327577][ T9797] openvswitch: netlink: IP tunnel dst address not specified [ 189.683314][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1153'. [ 190.170227][ T9810] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1156'. [ 190.223598][ T9810] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 190.254529][ T9814] netlink: 'syz.0.1156': attribute type 26 has an invalid length. [ 190.292781][ T9815] wg1 speed is unknown, defaulting to 1000 [ 190.323585][ T9815] lo speed is unknown, defaulting to 1000 [ 190.830003][ T9834] FAULT_INJECTION: forcing a failure. [ 190.830003][ T9834] name failslab, interval 1, probability 0, space 0, times 0 [ 190.885042][ T9834] CPU: 1 UID: 0 PID: 9834 Comm: syz.2.1161 Not tainted syzkaller #0 PREEMPT(full) [ 190.885089][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.885112][ T9834] Call Trace: [ 190.885127][ T9834] [ 190.885144][ T9834] dump_stack_lvl+0x189/0x250 [ 190.885192][ T9834] ? __pfx____ratelimit+0x10/0x10 [ 190.885234][ T9834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.885262][ T9834] ? __pfx__printk+0x10/0x10 [ 190.885299][ T9834] should_fail_ex+0x414/0x560 [ 190.885331][ T9834] should_failslab+0xa8/0x100 [ 190.885356][ T9834] __kmalloc_cache_noprof+0x70/0x3d0 [ 190.885377][ T9834] ? sctp_add_bind_addr+0x8c/0x370 [ 190.885399][ T9834] sctp_add_bind_addr+0x8c/0x370 [ 190.885421][ T9834] sctp_copy_local_addr_list+0x30b/0x4e0 [ 190.885449][ T9834] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 190.885473][ T9834] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 190.885498][ T9834] ? sctp_v6_is_any+0x64/0x80 [ 190.885518][ T9834] ? sctp_copy_one_addr+0x93/0x360 [ 190.885538][ T9834] sctp_bind_addr_copy+0xb3/0x3c0 [ 190.885557][ T9834] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 190.885582][ T9834] sctp_connect_new_asoc+0x2e0/0x690 [ 190.885606][ T9834] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 190.885624][ T9834] ? __local_bh_enable_ip+0x12d/0x1c0 [ 190.885649][ T9834] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 190.885668][ T9834] ? security_sctp_bind_connect+0x7e/0x2e0 [ 190.885692][ T9834] sctp_sendmsg+0x155c/0x2810 [ 190.885724][ T9834] ? __pfx_sctp_sendmsg+0x10/0x10 [ 190.885748][ T9834] ? aa_sk_perm+0x81e/0x950 [ 190.885776][ T9834] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.885802][ T9834] ? sock_rps_record_flow+0x19/0x410 [ 190.885827][ T9834] ? inet_sendmsg+0x2f4/0x370 [ 190.885854][ T9834] __sock_sendmsg+0x19c/0x270 [ 190.885880][ T9834] __sys_sendto+0x3bd/0x520 [ 190.885902][ T9834] ? __pfx___sys_sendto+0x10/0x10 [ 190.885917][ T9834] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 190.885950][ T9834] ? __fget_files+0x3a0/0x420 [ 190.885977][ T9834] ? ksys_write+0x22a/0x250 [ 190.886001][ T9834] ? __pfx_ksys_write+0x10/0x10 [ 190.886019][ T9834] ? rcu_is_watching+0x15/0xb0 [ 190.886042][ T9834] __x64_sys_sendto+0xde/0x100 [ 190.886064][ T9834] do_syscall_64+0xfa/0x3b0 [ 190.886084][ T9834] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.886101][ T9834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.886118][ T9834] ? clear_bhb_loop+0x60/0xb0 [ 190.886139][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.886155][ T9834] RIP: 0033:0x7f6ca2f8ebe9 [ 190.886170][ T9834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.886185][ T9834] RSP: 002b:00007f6ca3dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 190.886205][ T9834] RAX: ffffffffffffffda RBX: 00007f6ca31c5fa0 RCX: 00007f6ca2f8ebe9 [ 190.886218][ T9834] RDX: 0000000000000001 RSI: 00002000000009c0 RDI: 0000000000000003 [ 190.886229][ T9834] RBP: 00007f6ca3dd6090 R08: 000020000005ffe4 R09: 000000000000001c [ 190.886241][ T9834] R10: 0000000020000081 R11: 0000000000000246 R12: 0000000000000002 [ 190.886251][ T9834] R13: 00007f6ca31c6038 R14: 00007f6ca31c5fa0 R15: 00007fffcf8916d8 [ 190.886282][ T9834] [ 191.391606][ T9822] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1157'. [ 191.448116][ T9846] wg1 speed is unknown, defaulting to 1000 [ 191.468721][ T9846] lo speed is unknown, defaulting to 1000 [ 191.967324][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'. [ 192.378419][ T9] IPVS: starting estimator thread 0... [ 192.385947][ T9889] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 192.434799][ T9889] bond8: entered promiscuous mode [ 192.440297][ T9889] 8021q: adding VLAN 0 to HW filter on device bond8 [ 192.473917][ T9894] IPVS: using max 26 ests per chain, 62400 per kthread [ 192.510038][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 192.545134][ T9889] 8021q: adding VLAN 0 to HW filter on device bond8 [ 192.552161][ T9889] bond8: (slave gre7): The slave device specified does not support setting the MAC address [ 192.570734][ T9889] bond8: (slave gre7): Setting fail_over_mac to active for active-backup mode [ 192.641302][ T9889] bond8: (slave gre7): making interface the new active one [ 192.708548][ T9889] gre7: entered promiscuous mode [ 192.740937][ T9889] bond8: (slave gre7): Enslaving as an active interface with an up link [ 192.917152][ T9901] wg1 speed is unknown, defaulting to 1000 [ 192.942138][ T9901] lo speed is unknown, defaulting to 1000 [ 192.991598][ T9915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1184'. [ 193.003474][ T9912] delete_channel: no stack [ 193.385452][ T9917] pim6reg1: entered promiscuous mode [ 193.397126][ T9917] pim6reg1: entered allmulticast mode [ 193.897280][ T9945] netlink: 'syz.0.1195': attribute type 2 has an invalid length. [ 193.961784][ T9945] k›*·]‘: entered promiscuous mode [ 193.998908][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 194.069383][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 194.108191][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 194.151289][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 194.169803][ T9957] netlink: 'syz.0.1195': attribute type 4 has an invalid length. [ 194.172736][ T9961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.178135][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 194.198035][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 194.207665][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 194.236679][ T9955] bridge0: left promiscuous mode [ 194.262367][ T9955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.325574][ T5873] lo speed is unknown, defaulting to 1000 [ 194.355642][ T9954] wg1 speed is unknown, defaulting to 1000 [ 194.400454][ T9954] lo speed is unknown, defaulting to 1000 [ 195.219284][ T9997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.239960][ T9994] netlink: 'syz.2.1211': attribute type 38 has an invalid length. [ 195.292637][T10002] FAULT_INJECTION: forcing a failure. [ 195.292637][T10002] name failslab, interval 1, probability 0, space 0, times 0 [ 195.321678][T10002] CPU: 1 UID: 0 PID: 10002 Comm: syz.4.1212 Not tainted syzkaller #0 PREEMPT(full) [ 195.321702][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.321713][T10002] Call Trace: [ 195.321721][T10002] [ 195.321728][T10002] dump_stack_lvl+0x189/0x250 [ 195.321754][T10002] ? __pfx____ratelimit+0x10/0x10 [ 195.321773][T10002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.321792][T10002] ? __pfx__printk+0x10/0x10 [ 195.321816][T10002] ? __pfx___might_resched+0x10/0x10 [ 195.321832][T10002] ? fs_reclaim_acquire+0x7d/0x100 [ 195.321854][T10002] should_fail_ex+0x414/0x560 [ 195.321881][T10002] should_failslab+0xa8/0x100 [ 195.321905][T10002] __kmalloc_noprof+0xcb/0x4f0 [ 195.321925][T10002] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 195.321953][T10002] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 195.321982][T10002] genl_family_rcv_msg_doit+0xb8/0x300 [ 195.322010][T10002] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 195.322040][T10002] ? apparmor_capable+0x137/0x1b0 [ 195.322062][T10002] ? bpf_lsm_capable+0x9/0x20 [ 195.322081][T10002] ? security_capable+0x7e/0x2e0 [ 195.322111][T10002] genl_rcv_msg+0x60e/0x790 [ 195.322139][T10002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.322166][T10002] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 195.322200][T10002] netlink_rcv_skb+0x208/0x470 [ 195.322216][T10002] ? __lock_acquire+0xab9/0xd20 [ 195.322238][T10002] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.322261][T10002] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.322299][T10002] ? down_read+0x1ad/0x2e0 [ 195.322321][T10002] genl_rcv+0x28/0x40 [ 195.322340][T10002] netlink_unicast+0x82f/0x9e0 [ 195.322372][T10002] ? __pfx_netlink_unicast+0x10/0x10 [ 195.322396][T10002] ? netlink_sendmsg+0x642/0xb30 [ 195.322411][T10002] ? skb_put+0x11b/0x210 [ 195.322434][T10002] netlink_sendmsg+0x805/0xb30 [ 195.322462][T10002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.322483][T10002] ? aa_sock_msg_perm+0xf1/0x1d0 [ 195.322502][T10002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.322520][T10002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.322538][T10002] __sock_sendmsg+0x21c/0x270 [ 195.322564][T10002] ____sys_sendmsg+0x505/0x830 [ 195.322590][T10002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.322619][T10002] ? import_iovec+0x74/0xa0 [ 195.322643][T10002] ___sys_sendmsg+0x21f/0x2a0 [ 195.322665][T10002] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.322724][T10002] ? __fget_files+0x2a/0x420 [ 195.322740][T10002] ? __fget_files+0x3a0/0x420 [ 195.322767][T10002] __x64_sys_sendmsg+0x19b/0x260 [ 195.322789][T10002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.322817][T10002] ? __pfx_ksys_write+0x10/0x10 [ 195.322836][T10002] ? rcu_is_watching+0x15/0xb0 [ 195.322859][T10002] ? do_syscall_64+0xbe/0x3b0 [ 195.322881][T10002] do_syscall_64+0xfa/0x3b0 [ 195.322897][T10002] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.322915][T10002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.322932][T10002] ? clear_bhb_loop+0x60/0xb0 [ 195.322952][T10002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.322968][T10002] RIP: 0033:0x7f0d0a38ebe9 [ 195.322984][T10002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.322998][T10002] RSP: 002b:00007f0d0b1fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.323017][T10002] RAX: ffffffffffffffda RBX: 00007f0d0a5c6090 RCX: 00007f0d0a38ebe9 [ 195.323029][T10002] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000009 [ 195.323040][T10002] RBP: 00007f0d0b1fc090 R08: 0000000000000000 R09: 0000000000000000 [ 195.323051][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.323060][T10002] R13: 00007f0d0a5c6128 R14: 00007f0d0a5c6090 R15: 00007ffe097a6d38 [ 195.323091][T10002] [ 196.152384][T10015] wg1 speed is unknown, defaulting to 1000 [ 196.206652][T10015] lo speed is unknown, defaulting to 1000 [ 196.213708][T10023] FAULT_INJECTION: forcing a failure. [ 196.213708][T10023] name failslab, interval 1, probability 0, space 0, times 0 [ 196.234504][T10023] CPU: 0 UID: 0 PID: 10023 Comm: syz.1.1219 Not tainted syzkaller #0 PREEMPT(full) [ 196.234528][T10023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.234538][T10023] Call Trace: [ 196.234544][T10023] [ 196.234551][T10023] dump_stack_lvl+0x189/0x250 [ 196.234575][T10023] ? __pfx____ratelimit+0x10/0x10 [ 196.234594][T10023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.234613][T10023] ? __pfx__printk+0x10/0x10 [ 196.234642][T10023] ? __pfx___might_resched+0x10/0x10 [ 196.234658][T10023] ? fs_reclaim_acquire+0x7d/0x100 [ 196.234679][T10023] should_fail_ex+0x414/0x560 [ 196.234706][T10023] should_failslab+0xa8/0x100 [ 196.234730][T10023] __kmalloc_cache_noprof+0x70/0x3d0 [ 196.234750][T10023] ? nf_tables_newchain+0x1d01/0x2900 [ 196.234776][T10023] nf_tables_newchain+0x1d01/0x2900 [ 196.234813][T10023] ? __pfx_nf_tables_newchain+0x10/0x10 [ 196.234870][T10023] ? nfnl_pernet+0x23/0x240 [ 196.234903][T10023] ? __nla_parse+0x40/0x60 [ 196.234924][T10023] nfnetlink_rcv+0x112f/0x2520 [ 196.234980][T10023] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 196.235028][T10023] ? ref_tracker_free+0x63a/0x7d0 [ 196.235081][T10023] ? __netlink_deliver_tap+0x807/0x850 [ 196.235098][T10023] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.235135][T10023] netlink_unicast+0x82f/0x9e0 [ 196.235168][T10023] ? __pfx_netlink_unicast+0x10/0x10 [ 196.235192][T10023] ? netlink_sendmsg+0x642/0xb30 [ 196.235207][T10023] ? skb_put+0x11b/0x210 [ 196.235230][T10023] netlink_sendmsg+0x805/0xb30 [ 196.235258][T10023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.235280][T10023] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.235299][T10023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.235317][T10023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.235336][T10023] __sock_sendmsg+0x21c/0x270 [ 196.235362][T10023] ____sys_sendmsg+0x505/0x830 [ 196.235388][T10023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.235416][T10023] ? import_iovec+0x74/0xa0 [ 196.235439][T10023] ___sys_sendmsg+0x21f/0x2a0 [ 196.235462][T10023] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.235521][T10023] ? __fget_files+0x2a/0x420 [ 196.235535][T10023] ? __fget_files+0x3a0/0x420 [ 196.235563][T10023] __x64_sys_sendmsg+0x19b/0x260 [ 196.235584][T10023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.235613][T10023] ? __pfx_ksys_write+0x10/0x10 [ 196.235632][T10023] ? rcu_is_watching+0x15/0xb0 [ 196.235655][T10023] ? do_syscall_64+0xbe/0x3b0 [ 196.235677][T10023] do_syscall_64+0xfa/0x3b0 [ 196.235694][T10023] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.235711][T10023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.235729][T10023] ? clear_bhb_loop+0x60/0xb0 [ 196.235748][T10023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.235764][T10023] RIP: 0033:0x7f2573f8ebe9 [ 196.235780][T10023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.235794][T10023] RSP: 002b:00007f2574ed1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.235813][T10023] RAX: ffffffffffffffda RBX: 00007f25741c5fa0 RCX: 00007f2573f8ebe9 [ 196.235827][T10023] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 196.235838][T10023] RBP: 00007f2574ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 196.235848][T10023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.235859][T10023] R13: 00007f25741c6038 R14: 00007f25741c5fa0 R15: 00007ffeb148c528 [ 196.235889][T10023] [ 196.600647][ T9962] Bluetooth: hci1: command 0x0406 tx timeout [ 196.606855][ T9962] Bluetooth: hci2: command 0x0406 tx timeout [ 196.612872][ T9962] Bluetooth: hci0: command 0x0406 tx timeout [ 196.619105][ T9962] Bluetooth: hci3: command 0x0406 tx timeout [ 196.895964][T10037] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 197.009850][T10039] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 198.023356][T10084] wg1 speed is unknown, defaulting to 1000 [ 198.041104][T10084] lo speed is unknown, defaulting to 1000 [ 198.912526][T10114] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 199.423062][T10142] __nla_validate_parse: 18 callbacks suppressed [ 199.423079][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 199.609129][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'. [ 199.795611][T10156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.921223][T10159] netlink: 'syz.4.1259': attribute type 1 has an invalid length. [ 199.975204][T10159] bond5: entered promiscuous mode [ 199.975886][T10161] FAULT_INJECTION: forcing a failure. [ 199.975886][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 199.980736][T10159] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.993131][T10161] CPU: 0 UID: 0 PID: 10161 Comm: syz.2.1257 Not tainted syzkaller #0 PREEMPT(full) [ 199.993152][T10161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.993162][T10161] Call Trace: [ 199.993169][T10161] [ 199.993177][T10161] dump_stack_lvl+0x189/0x250 [ 199.993202][T10161] ? __pfx____ratelimit+0x10/0x10 [ 199.993222][T10161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.993241][T10161] ? __pfx__printk+0x10/0x10 [ 199.993264][T10161] ? __lock_acquire+0xab9/0xd20 [ 199.993295][T10161] should_fail_ex+0x414/0x560 [ 199.993322][T10161] should_failslab+0xa8/0x100 [ 199.993346][T10161] kmem_cache_alloc_noprof+0x73/0x3c0 [ 199.993366][T10161] ? sctp_get_port_local+0x6d3/0x1680 [ 199.993391][T10161] sctp_get_port_local+0x6d3/0x1680 [ 199.993423][T10161] ? __pfx_sctp_get_port_local+0x10/0x10 [ 199.993452][T10161] ? sctp_bind_addr_match+0x28b/0x2b0 [ 199.993474][T10161] sctp_do_bind+0x4ea/0x940 [ 199.993506][T10161] sctp_connect_new_asoc+0x25c/0x690 [ 199.993528][T10161] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 199.993545][T10161] ? __local_bh_enable_ip+0x12d/0x1c0 [ 199.993570][T10161] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 199.993588][T10161] ? security_sctp_bind_connect+0x7e/0x2e0 [ 199.993613][T10161] sctp_sendmsg+0x155c/0x2810 [ 199.993643][T10161] ? __pfx_sctp_sendmsg+0x10/0x10 [ 199.993665][T10161] ? aa_sk_perm+0x81e/0x950 [ 199.993692][T10161] ? __pfx_aa_sk_perm+0x10/0x10 [ 199.993718][T10161] ? sock_rps_record_flow+0x19/0x410 [ 199.993746][T10161] ? inet_sendmsg+0x2f4/0x370 [ 199.993771][T10161] __sock_sendmsg+0x19c/0x270 [ 199.993796][T10161] ____sys_sendmsg+0x52d/0x830 [ 199.993822][T10161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.993849][T10161] ? import_iovec+0x74/0xa0 [ 199.993872][T10161] ___sys_sendmsg+0x21f/0x2a0 [ 199.993893][T10161] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.993948][T10161] ? __fget_files+0x2a/0x420 [ 199.993963][T10161] ? __fget_files+0x3a0/0x420 [ 199.993988][T10161] __sys_sendmmsg+0x227/0x430 [ 199.994012][T10161] ? __pfx___sys_sendmmsg+0x10/0x10 [ 199.994028][T10161] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 199.994072][T10161] ? ksys_write+0x22a/0x250 [ 199.994094][T10161] ? __pfx_ksys_write+0x10/0x10 [ 199.994111][T10161] ? rcu_is_watching+0x15/0xb0 [ 199.994135][T10161] __x64_sys_sendmmsg+0xa0/0xc0 [ 199.994156][T10161] do_syscall_64+0xfa/0x3b0 [ 199.994172][T10161] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.994189][T10161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.994205][T10161] ? clear_bhb_loop+0x60/0xb0 [ 199.994224][T10161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.994239][T10161] RIP: 0033:0x7f6ca2f8ebe9 [ 199.994255][T10161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.994268][T10161] RSP: 002b:00007f6ca3dd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 199.994287][T10161] RAX: ffffffffffffffda RBX: 00007f6ca31c5fa0 RCX: 00007f6ca2f8ebe9 [ 199.994299][T10161] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 199.994309][T10161] RBP: 00007f6ca3dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.994319][T10161] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000001 [ 199.994328][T10161] R13: 00007f6ca31c6038 R14: 00007f6ca31c5fa0 R15: 00007fffcf8916d8 [ 199.994357][T10161] [ 200.234310][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'. [ 200.407210][T10167] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.469726][T10167] bond5: (slave gre5): The slave device specified does not support setting the MAC address [ 200.487434][T10167] bond5: (slave gre5): Setting fail_over_mac to active for active-backup mode [ 200.502671][T10167] bond5: (slave gre5): making interface the new active one [ 200.510479][T10167] gre5: entered promiscuous mode [ 200.517258][T10167] bond5: (slave gre5): Enslaving as an active interface with an up link [ 201.037750][T10200] syzkaller0: entered promiscuous mode [ 201.040287][T10207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1272'. [ 201.051158][T10200] syzkaller0: entered allmulticast mode [ 201.215388][T10216] netlink: 'syz.2.1273': attribute type 10 has an invalid length. [ 201.237945][T10216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1273'. [ 201.470413][T10228] FAULT_INJECTION: forcing a failure. [ 201.470413][T10228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.486471][T10228] CPU: 1 UID: 0 PID: 10228 Comm: syz.1.1276 Not tainted syzkaller #0 PREEMPT(full) [ 201.486495][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.486505][T10228] Call Trace: [ 201.486512][T10228] [ 201.486519][T10228] dump_stack_lvl+0x189/0x250 [ 201.486545][T10228] ? __pfx____ratelimit+0x10/0x10 [ 201.486563][T10228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.486582][T10228] ? __pfx__printk+0x10/0x10 [ 201.486604][T10228] ? __might_fault+0xb0/0x130 [ 201.486637][T10228] should_fail_ex+0x414/0x560 [ 201.486663][T10228] _copy_from_user+0x2d/0xb0 [ 201.486683][T10228] __sys_sendto+0x25c/0x520 [ 201.486704][T10228] ? __pfx___sys_sendto+0x10/0x10 [ 201.486732][T10228] ? count_memcg_event_mm+0x21/0x260 [ 201.486764][T10228] ? exc_page_fault+0x76/0xf0 [ 201.486785][T10228] ? do_user_addr_fault+0xc8a/0x1390 [ 201.486814][T10228] __x64_sys_sendto+0xde/0x100 [ 201.486834][T10228] do_syscall_64+0xfa/0x3b0 [ 201.486851][T10228] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.486868][T10228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.486884][T10228] ? clear_bhb_loop+0x60/0xb0 [ 201.486904][T10228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.486920][T10228] RIP: 0033:0x7f2573f90a7c [ 201.486935][T10228] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 201.486949][T10228] RSP: 002b:00007f2574ecfec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 201.486968][T10228] RAX: ffffffffffffffda RBX: 00007f2574ecffc0 RCX: 00007f2573f90a7c [ 201.486981][T10228] RDX: 0000000000000020 RSI: 00007f2574ed0010 RDI: 0000000000000005 [ 201.486992][T10228] RBP: 0000000000000000 R08: 00007f2574ecff14 R09: 000000000000000c [ 201.487002][T10228] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 201.487012][T10228] R13: 00007f2574ecff68 R14: 00007f2574ed0010 R15: 0000000000000000 [ 201.487041][T10228] [ 202.775625][T10216] team0: Port device geneve0 added [ 202.798823][ T2971] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.817945][ T2971] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.864810][ T2971] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.915309][ T2971] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.950004][T10237] FAULT_INJECTION: forcing a failure. [ 202.950004][T10237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.973185][T10235] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1278'. [ 202.988188][T10237] CPU: 0 UID: 0 PID: 10237 Comm: syz.4.1281 Not tainted syzkaller #0 PREEMPT(full) [ 202.988209][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.988219][T10237] Call Trace: [ 202.988226][T10237] [ 202.988234][T10237] dump_stack_lvl+0x189/0x250 [ 202.988257][T10237] ? __pfx____ratelimit+0x10/0x10 [ 202.988276][T10237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.988295][T10237] ? __pfx__printk+0x10/0x10 [ 202.988316][T10237] ? __might_fault+0xb0/0x130 [ 202.988348][T10237] should_fail_ex+0x414/0x560 [ 202.988373][T10237] _copy_from_user+0x2d/0xb0 [ 202.988393][T10237] ___sys_recvmsg+0x12e/0x510 [ 202.988419][T10237] ? __pfx____sys_recvmsg+0x10/0x10 [ 202.988470][T10237] ? __might_fault+0xb0/0x130 [ 202.988494][T10237] do_recvmmsg+0x307/0x770 [ 202.988522][T10237] ? __pfx_do_recvmmsg+0x10/0x10 [ 202.988553][T10237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.988589][T10237] __x64_sys_recvmmsg+0x190/0x240 [ 202.988612][T10237] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 202.988629][T10237] ? rcu_is_watching+0x15/0xb0 [ 202.988651][T10237] ? do_syscall_64+0xbe/0x3b0 [ 202.988672][T10237] do_syscall_64+0xfa/0x3b0 [ 202.988688][T10237] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.988704][T10237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.988720][T10237] ? clear_bhb_loop+0x60/0xb0 [ 202.988740][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.988755][T10237] RIP: 0033:0x7f0d0a38ebe9 [ 202.988771][T10237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.988784][T10237] RSP: 002b:00007f0d0b21d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 202.988803][T10237] RAX: ffffffffffffffda RBX: 00007f0d0a5c5fa0 RCX: 00007f0d0a38ebe9 [ 202.988815][T10237] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 202.988826][T10237] RBP: 00007f0d0b21d090 R08: 0000000000000000 R09: 0000000000000000 [ 202.988836][T10237] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 202.988846][T10237] R13: 00007f0d0a5c6038 R14: 00007f0d0a5c5fa0 R15: 00007ffe097a6d38 [ 202.988875][T10237] [ 203.007822][T10235] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1278'. [ 203.077153][T10240] FAULT_INJECTION: forcing a failure. [ 203.077153][T10240] name failslab, interval 1, probability 0, space 0, times 0 [ 203.281355][T10240] CPU: 0 UID: 0 PID: 10240 Comm: syz.0.1279 Not tainted syzkaller #0 PREEMPT(full) [ 203.281379][T10240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.281390][T10240] Call Trace: [ 203.281397][T10240] [ 203.281403][T10240] dump_stack_lvl+0x189/0x250 [ 203.281427][T10240] ? __pfx____ratelimit+0x10/0x10 [ 203.281446][T10240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.281462][T10240] ? __pfx__printk+0x10/0x10 [ 203.281484][T10240] ? __mutex_trylock_common+0x153/0x260 [ 203.281514][T10240] should_fail_ex+0x414/0x560 [ 203.281541][T10240] should_failslab+0xa8/0x100 [ 203.281565][T10240] __kmalloc_cache_noprof+0x70/0x3d0 [ 203.281584][T10240] ? __hw_addr_add_ex+0x1f4/0x770 [ 203.281608][T10240] __hw_addr_add_ex+0x1f4/0x770 [ 203.281634][T10240] dev_addr_init+0x14f/0x230 [ 203.281657][T10240] ? __pfx_dev_addr_init+0x10/0x10 [ 203.281689][T10240] alloc_netdev_mqs+0x2ae/0x11b0 [ 203.281708][T10240] ? __pfx_macsec_setup+0x10/0x10 [ 203.281738][T10240] rtnl_create_link+0x31f/0xd10 [ 203.281767][T10240] rtnl_newlink_create+0x25c/0xb00 [ 203.281796][T10240] ? __lock_acquire+0xab9/0xd20 [ 203.281823][T10240] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 203.281847][T10240] ? __pfx___mutex_lock+0x10/0x10 [ 203.281875][T10240] ? ns_capable+0x8a/0xf0 [ 203.281897][T10240] rtnl_newlink+0x16d6/0x1c70 [ 203.281916][T10240] ? netlink_sendmsg+0x805/0xb30 [ 203.281948][T10240] ? __pfx_rtnl_newlink+0x10/0x10 [ 203.281988][T10240] ? kasan_quarantine_put+0xdd/0x220 [ 203.282007][T10240] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.282030][T10240] ? nlmon_xmit+0xb0/0x100 [ 203.282045][T10240] ? kmem_cache_free+0x18f/0x400 [ 203.282074][T10240] ? __local_bh_enable_ip+0x12d/0x1c0 [ 203.282091][T10240] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.282117][T10240] ? __local_bh_enable_ip+0x12d/0x1c0 [ 203.282134][T10240] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 203.282155][T10240] ? __dev_queue_xmit+0x27b/0x3b50 [ 203.282176][T10240] ? __dev_queue_xmit+0x27b/0x3b50 [ 203.282194][T10240] ? __dev_queue_xmit+0x27b/0x3b50 [ 203.282215][T10240] ? __dev_queue_xmit+0x1d79/0x3b50 [ 203.282239][T10240] ? __lock_acquire+0xab9/0xd20 [ 203.282284][T10240] ? __pfx_rtnl_newlink+0x10/0x10 [ 203.282300][T10240] rtnetlink_rcv_msg+0x7cc/0xb70 [ 203.282319][T10240] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 203.282334][T10240] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.282349][T10240] ? ref_tracker_free+0x63a/0x7d0 [ 203.282372][T10240] ? __asan_memcpy+0x40/0x70 [ 203.282390][T10240] ? __pfx_ref_tracker_free+0x10/0x10 [ 203.282409][T10240] ? __skb_clone+0x63/0x7a0 [ 203.282439][T10240] netlink_rcv_skb+0x208/0x470 [ 203.282458][T10240] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.282477][T10240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.282508][T10240] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.282535][T10240] netlink_unicast+0x82f/0x9e0 [ 203.282568][T10240] ? __pfx_netlink_unicast+0x10/0x10 [ 203.282593][T10240] ? netlink_sendmsg+0x642/0xb30 [ 203.282608][T10240] ? skb_put+0x11b/0x210 [ 203.282631][T10240] netlink_sendmsg+0x805/0xb30 [ 203.282659][T10240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.282679][T10240] ? aa_sock_msg_perm+0xf1/0x1d0 [ 203.282697][T10240] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.282714][T10240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.282732][T10240] __sock_sendmsg+0x21c/0x270 [ 203.282758][T10240] ____sys_sendmsg+0x505/0x830 [ 203.282784][T10240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.282814][T10240] ? import_iovec+0x74/0xa0 [ 203.282838][T10240] ___sys_sendmsg+0x21f/0x2a0 [ 203.282860][T10240] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.282920][T10240] ? __fget_files+0x2a/0x420 [ 203.282935][T10240] ? __fget_files+0x3a0/0x420 [ 203.282963][T10240] __x64_sys_sendmsg+0x19b/0x260 [ 203.282986][T10240] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.283016][T10240] ? __pfx_ksys_write+0x10/0x10 [ 203.283034][T10240] ? rcu_is_watching+0x15/0xb0 [ 203.283058][T10240] ? do_syscall_64+0xbe/0x3b0 [ 203.283080][T10240] do_syscall_64+0xfa/0x3b0 [ 203.283096][T10240] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.283118][T10240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.283135][T10240] ? clear_bhb_loop+0x60/0xb0 [ 203.283157][T10240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.283173][T10240] RIP: 0033:0x7f60c838ebe9 [ 203.283189][T10240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.283202][T10240] RSP: 002b:00007f60c91d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.283222][T10240] RAX: ffffffffffffffda RBX: 00007f60c85c5fa0 RCX: 00007f60c838ebe9 [ 203.283235][T10240] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 203.283246][T10240] RBP: 00007f60c91d4090 R08: 0000000000000000 R09: 0000000000000000 [ 203.283256][T10240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.283265][T10240] R13: 00007f60c85c6038 R14: 00007f60c85c5fa0 R15: 00007ffed90d1d08 [ 203.283296][T10240] [ 204.357215][T10283] openvswitch: netlink: IP tunnel dst address not specified [ 204.441515][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 204.453677][T10287] 8021q: VLANs not supported on vcan0 [ 204.459668][T10277] can: request_module (can-proto-0) failed. [ 204.515125][T10287] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 204.606027][T10293] openvswitch: netlink: Flow actions attr not present in new flow. [ 205.086766][T10301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.580486][T10315] wg1 speed is unknown, defaulting to 1000 [ 205.613735][T10315] lo speed is unknown, defaulting to 1000 [ 206.545398][T10349] sock: sock_set_timeout: `syz.4.1318' (pid 10349) tries to set negative timeout [ 206.653525][T10352] sock: sock_set_timeout: `syz.4.1319' (pid 10352) tries to set negative timeout [ 206.922004][T10357] sock: sock_set_timeout: `syz.3.1321' (pid 10357) tries to set negative timeout [ 206.932920][T10357] FAULT_INJECTION: forcing a failure. [ 206.932920][T10357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.965698][T10357] CPU: 0 UID: 0 PID: 10357 Comm: syz.3.1321 Not tainted syzkaller #0 PREEMPT(full) [ 206.965733][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.965744][T10357] Call Trace: [ 206.965751][T10357] [ 206.965759][T10357] dump_stack_lvl+0x189/0x250 [ 206.965784][T10357] ? __pfx____ratelimit+0x10/0x10 [ 206.965803][T10357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.965823][T10357] ? __pfx__printk+0x10/0x10 [ 206.965856][T10357] should_fail_ex+0x414/0x560 [ 206.965883][T10357] _copy_to_user+0x31/0xb0 [ 206.965904][T10357] simple_read_from_buffer+0xe1/0x170 [ 206.965932][T10357] proc_fail_nth_read+0x1b3/0x220 [ 206.965955][T10357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.965977][T10357] ? rw_verify_area+0x2a6/0x4d0 [ 206.965996][T10357] ? __lock_acquire+0xab9/0xd20 [ 206.966016][T10357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.966037][T10357] vfs_read+0x200/0xa30 [ 206.966057][T10357] ? fdget_pos+0x247/0x320 [ 206.966077][T10357] ? __pfx___mutex_lock+0x10/0x10 [ 206.966096][T10357] ? __pfx_vfs_read+0x10/0x10 [ 206.966118][T10357] ? __fget_files+0x2a/0x420 [ 206.966139][T10357] ? __fget_files+0x3a0/0x420 [ 206.966153][T10357] ? __fget_files+0x2a/0x420 [ 206.966177][T10357] ksys_read+0x145/0x250 [ 206.966200][T10357] ? __pfx_ksys_read+0x10/0x10 [ 206.966218][T10357] ? rcu_is_watching+0x15/0xb0 [ 206.966240][T10357] ? do_syscall_64+0xbe/0x3b0 [ 206.966264][T10357] do_syscall_64+0xfa/0x3b0 [ 206.966282][T10357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.966298][T10357] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.966315][T10357] ? clear_bhb_loop+0x60/0xb0 [ 206.966335][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.966352][T10357] RIP: 0033:0x7f6040d8d5fc [ 206.966368][T10357] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.966382][T10357] RSP: 002b:00007f6041c89030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.966400][T10357] RAX: ffffffffffffffda RBX: 00007f6040fc5fa0 RCX: 00007f6040d8d5fc [ 206.966413][T10357] RDX: 000000000000000f RSI: 00007f6041c890a0 RDI: 0000000000000005 [ 206.966424][T10357] RBP: 00007f6041c89090 R08: 0000000000000000 R09: 0000000000000000 [ 206.966435][T10357] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 206.966445][T10357] R13: 00007f6040fc6038 R14: 00007f6040fc5fa0 R15: 00007ffd4708cc98 [ 206.966475][T10357] [ 207.715110][T10388] netlink: 'syz.3.1326': attribute type 13 has an invalid length. [ 207.739219][T10388] netlink: 'syz.3.1326': attribute type 17 has an invalid length. [ 207.830707][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 209.052627][T10388] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.068453][T10388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.068882][T10406] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1329'. [ 209.136132][T10354] wg1 speed is unknown, defaulting to 1000 [ 209.188806][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 209.367866][T10418] netlink: 'syz.3.1333': attribute type 1 has an invalid length. [ 210.225031][T10432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1334'. [ 211.198542][T10458] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1345'. [ 211.280802][T10461] wg1 speed is unknown, defaulting to 1000 [ 211.994062][T10468] IPVS: set_ctl: invalid protocol: 150 0.0.0.0:20000 [ 212.005743][T10471] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.282700][T10482] IPVS: Error joining to the multicast group [ 212.881716][T10509] netlink: 'syz.1.1365': attribute type 3 has an invalid length. [ 213.094556][ T5185] Bluetooth: hci4: command 0x0405 tx timeout [ 213.291388][T10525] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1372'. [ 213.555924][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1380'. [ 213.699968][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 213.810465][T10558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1386'. [ 213.922104][T10562] vlan3: entered promiscuous mode [ 213.927438][T10562] batadv0: entered promiscuous mode [ 213.948738][T10564] netlink: 'syz.3.1391': attribute type 10 has an invalid length. [ 213.968727][T10564] dummy0: entered promiscuous mode [ 213.975657][T10564] team0: Port device dummy0 added [ 215.102963][T10609] nbd0: detected capacity change from 0 to 127 [ 215.112017][ T5185] block nbd0: Receive control failed (result -32) [ 215.145884][ T5875] block nbd0: Dead connection, failed to find a fallback [ 215.197426][ T5875] block nbd0: shutting down sockets [ 215.203133][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.242705][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 215.273451][ T5875] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.318192][ T5875] Buffer I/O error on dev nbd0, logical block 1, async page read [ 215.355034][ T5875] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.399449][ T5875] Buffer I/O error on dev nbd0, logical block 2, async page read [ 215.431319][ T5875] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.470447][ T5875] Buffer I/O error on dev nbd0, logical block 3, async page read [ 215.494075][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.514622][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 215.553053][ T5875] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.586944][ T5875] Buffer I/O error on dev nbd0, logical block 1, async page read [ 215.619887][ T5875] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.653877][ T5875] Buffer I/O error on dev nbd0, logical block 2, async page read [ 215.661795][ T5875] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.688569][ T5875] Buffer I/O error on dev nbd0, logical block 3, async page read [ 215.713074][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.742651][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 215.780447][ T5875] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 215.807788][ T5875] Buffer I/O error on dev nbd0, logical block 1, async page read [ 215.859179][ T5875] ldm_validate_partition_table(): Disk read failed. [ 215.887038][ T5875] Dev nbd0: unable to read RDB block 0 [ 215.907388][ T5875] nbd0: unable to read partition table [ 215.953085][ T5875] ldm_validate_partition_table(): Disk read failed. [ 215.972017][ T5875] Dev nbd0: unable to read RDB block 0 [ 216.013463][ T5875] nbd0: unable to read partition table [ 216.058889][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'. [ 216.225179][T10663] bond5: entered allmulticast mode [ 216.826198][T10690] syzkaller0: entered promiscuous mode [ 216.831713][T10690] syzkaller0: entered allmulticast mode [ 216.881062][T10698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1447'. [ 217.015057][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 217.851061][T10747] sctp: [Deprecated]: syz.4.1469 (pid 10747) Use of int in maxseg socket option. [ 217.851061][T10747] Use struct sctp_assoc_value instead [ 217.926538][T10753] pimreg: entered allmulticast mode [ 218.231104][T10766] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.1475'. [ 218.820805][T10798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 218.820822][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 219.138914][T10824] pimreg: entered allmulticast mode [ 219.147972][T10825] netlink: 'syz.0.1502': attribute type 12 has an invalid length. [ 219.263089][T10828] syzkaller1: entered promiscuous mode [ 219.279985][T10828] syzkaller1: entered allmulticast mode [ 219.314770][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 219.387928][T10834] bridge0: port 3(syz_tun) entered blocking state [ 219.395651][T10834] bridge0: port 3(syz_tun) entered disabled state [ 219.402977][T10834] syz_tun: entered allmulticast mode [ 219.410445][T10834] syz_tun: entered promiscuous mode [ 219.416525][T10834] bridge0: port 3(syz_tun) entered blocking state [ 219.423286][T10834] bridge0: port 3(syz_tun) entered forwarding state [ 219.653306][T10838] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.721179][ T6283] IPVS: starting estimator thread 0... [ 219.787901][T10847] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.825987][T10843] IPVS: using max 29 ests per chain, 69600 per kthread [ 220.212153][T10865] Bluetooth: MGMT ver 1.23 [ 220.426699][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 220.463670][T10880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1524'. [ 220.595756][T10875] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.666993][T10880] vlan0: entered promiscuous mode [ 220.678477][T10880] gretap0: entered promiscuous mode [ 220.698287][T10881] vlan0: entered promiscuous mode [ 220.703431][T10881] bond5: entered promiscuous mode [ 220.713145][T10881] vlan0: entered allmulticast mode [ 220.718980][T10881] bond5: entered allmulticast mode [ 220.739752][T10886] gretap1: entered promiscuous mode [ 220.754577][T10886] gretap1: entered allmulticast mode [ 220.761884][T10886] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 221.073362][T10913] netlink: 'syz.3.1540': attribute type 4 has an invalid length. [ 221.347286][T10932] netem: change failed [ 222.290459][T10960] tipc: Enabled bearer , priority 0 [ 222.294070][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 222.303208][ T5185] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 222.310802][T10960] syzkaller0: entered promiscuous mode [ 222.332237][T10960] syzkaller0: entered allmulticast mode [ 222.474466][T10960] tipc: Resetting bearer [ 222.498485][T10968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.529276][T10959] tipc: Resetting bearer [ 222.599617][T10959] tipc: Disabling bearer [ 222.904243][T10982] lo speed is unknown, defaulting to 1000 [ 222.929974][T10982] lo speed is unknown, defaulting to 1000 [ 222.949984][T10982] lo speed is unknown, defaulting to 1000 [ 223.103239][T10994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1574'. [ 223.564272][ T9] lo speed is unknown, defaulting to 1000 [ 223.572341][T10982] infiniband syz2: set active [ 223.577888][T10982] infiniband syz2: added lo [ 223.761631][T10982] RDS/IB: syz2: added [ 223.780521][T10982] smc: adding ib device syz2 with port count 1 [ 223.808723][T10982] smc: ib device syz2 port 1 has no pnetid [ 223.841845][ T9] lo speed is unknown, defaulting to 1000 [ 223.857382][T10982] lo speed is unknown, defaulting to 1000 [ 224.047214][T11023] vlan0: entered promiscuous mode [ 224.209313][T10982] lo speed is unknown, defaulting to 1000 [ 224.331510][T11036] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1593'. [ 224.572915][T10982] lo speed is unknown, defaulting to 1000 [ 224.573325][T11042] wg1 speed is unknown, defaulting to 1000 [ 224.595719][T11045] tipc: Enabled bearer , priority 0 [ 224.614172][T11045] syzkaller0: entered promiscuous mode [ 224.619662][T11045] syzkaller0: entered allmulticast mode [ 224.648335][T11045] tipc: Resetting bearer [ 224.660931][T11043] tipc: Resetting bearer [ 224.689023][T11043] tipc: Disabling bearer [ 224.930132][T10982] lo speed is unknown, defaulting to 1000 [ 225.099436][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 225.204500][T11052] bond6: entered promiscuous mode [ 225.209972][T11052] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.412632][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1605'. [ 225.468792][T11070] bond4: entered promiscuous mode [ 225.482172][T11070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.555807][T11074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.565885][T11074] bond5: entered promiscuous mode [ 225.571835][T11074] bond4: (slave bond5): Enslaving as an active interface with an up link [ 225.583096][T11042] lo speed is unknown, defaulting to 1000 [ 225.774929][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1610'. [ 225.936734][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1611'. [ 226.033151][T11100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1614'. [ 226.054898][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 226.077518][T10982] lo speed is unknown, defaulting to 1000 [ 226.621055][T11121] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1624'. [ 226.728154][T11127] netlink: 'syz.3.1627': attribute type 10 has an invalid length. [ 227.024664][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1630'. [ 227.188265][T11145] tipc: Invalid UDP bearer configuration [ 227.188321][T11145] tipc: Enabling of bearer rejected, failed to enable media [ 227.308184][T11148] pimreg: entered allmulticast mode [ 227.351415][T11151] pimreg: left allmulticast mode [ 228.196770][T11196] netlink: 'syz.2.1654': attribute type 27 has an invalid length. [ 228.301585][T11203] netlink: 'syz.1.1655': attribute type 10 has an invalid length. [ 228.370981][T11203] team0: Port device dummy0 added [ 228.635032][T11190] __nla_validate_parse: 8 callbacks suppressed [ 228.635050][T11190] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1646'. [ 228.753577][ T6283] IPVS: starting estimator thread 0... [ 228.790598][T11213] netlink: 'syz.4.1660': attribute type 9 has an invalid length. [ 228.845065][T11216] IPVS: using max 34 ests per chain, 81600 per kthread [ 228.952600][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1663'. [ 228.978381][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 229.163970][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1664'. [ 229.301054][T11241] netlink: 'syz.3.1668': attribute type 10 has an invalid length. [ 229.805642][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'. [ 230.164032][T11283] netlink: 'syz.0.1682': attribute type 10 has an invalid length. [ 230.190507][T11283] team0: Port device dummy0 added [ 230.196656][T11276] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1676'. [ 231.010708][T11312] netlink: 'syz.3.1694': attribute type 1 has an invalid length. [ 231.047741][ T6285] lo speed is unknown, defaulting to 1000 [ 231.047814][ T9] wg1 speed is unknown, defaulting to 1000 [ 231.085881][T11312] bond6: entered promiscuous mode [ 231.091485][T11312] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.117430][T11314] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.137589][T11314] bond6: (slave gre4): The slave device specified does not support setting the MAC address [ 231.148211][T11314] bond6: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 231.178437][T11314] bond6: (slave gre4): making interface the new active one [ 231.191136][T11314] gre4: entered promiscuous mode [ 231.201944][T11314] bond6: (slave gre4): Enslaving as an active interface with an up link [ 231.227381][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 231.293134][T11318] netlink: 'syz.0.1696': attribute type 10 has an invalid length. [ 231.722700][T11345] syz2: rxe_newlink: already configured on lo [ 232.075787][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 232.080383][T11344] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1704'. [ 232.095854][T11358] batadv0: entered promiscuous mode [ 232.102675][T11358] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 232.111211][T11358] batadv0: left promiscuous mode [ 232.226207][T11362] netlink: 'syz.4.1712': attribute type 10 has an invalid length. [ 232.237935][T11362] team0: Port device dummy0 added [ 232.475224][T11372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.777343][T11386] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1723'. [ 233.059495][T11398] syzkaller0: entered promiscuous mode [ 233.066808][T11398] syzkaller0: entered allmulticast mode [ 233.551980][T11423] wg1 speed is unknown, defaulting to 1000 [ 233.582227][T11423] lo speed is unknown, defaulting to 1000 [ 233.838013][T11415] __nla_validate_parse: 1 callbacks suppressed [ 233.838030][T11415] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1734'. [ 233.841687][T11435] pim6reg1: entered promiscuous mode [ 233.864780][T11435] pim6reg1: entered allmulticast mode [ 234.009520][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 234.023100][T11444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'. [ 234.216849][T11450] FAULT_INJECTION: forcing a failure. [ 234.216849][T11450] name failslab, interval 1, probability 0, space 0, times 0 [ 234.227218][T11419] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 234.249965][T11450] CPU: 0 UID: 0 PID: 11450 Comm: syz.4.1745 Not tainted syzkaller #0 PREEMPT(full) [ 234.249991][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.250002][T11450] Call Trace: [ 234.250009][T11450] [ 234.250017][T11450] dump_stack_lvl+0x189/0x250 [ 234.250041][T11450] ? __pfx____ratelimit+0x10/0x10 [ 234.250061][T11450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.250080][T11450] ? __pfx__printk+0x10/0x10 [ 234.250107][T11450] ? __pfx___might_resched+0x10/0x10 [ 234.250123][T11450] ? fs_reclaim_acquire+0x7d/0x100 [ 234.250145][T11450] should_fail_ex+0x414/0x560 [ 234.250171][T11450] should_failslab+0xa8/0x100 [ 234.250195][T11450] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 234.250216][T11450] ? __pfx_nf_tables_abort+0x10/0x10 [ 234.250234][T11450] ? __alloc_skb+0x112/0x2d0 [ 234.250257][T11450] __alloc_skb+0x112/0x2d0 [ 234.250279][T11450] netlink_ack+0x146/0xa50 [ 234.250301][T11450] ? __kasan_kmalloc+0x93/0xb0 [ 234.250331][T11450] nfnetlink_rcv+0x2290/0x2520 [ 234.250386][T11450] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 234.250458][T11450] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.250494][T11450] netlink_unicast+0x82f/0x9e0 [ 234.250525][T11450] ? __pfx_netlink_unicast+0x10/0x10 [ 234.250549][T11450] ? netlink_sendmsg+0x642/0xb30 [ 234.250565][T11450] ? skb_put+0x11b/0x210 [ 234.250586][T11450] netlink_sendmsg+0x805/0xb30 [ 234.250614][T11450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.250635][T11450] ? aa_sock_msg_perm+0xf1/0x1d0 [ 234.250654][T11450] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.250672][T11450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.250691][T11450] __sock_sendmsg+0x21c/0x270 [ 234.250717][T11450] ____sys_sendmsg+0x505/0x830 [ 234.250742][T11450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.250771][T11450] ? import_iovec+0x74/0xa0 [ 234.250794][T11450] ___sys_sendmsg+0x21f/0x2a0 [ 234.250816][T11450] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.250873][T11450] ? __fget_files+0x2a/0x420 [ 234.250887][T11450] ? __fget_files+0x3a0/0x420 [ 234.250919][T11450] __x64_sys_sendmsg+0x19b/0x260 [ 234.250942][T11450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.250974][T11450] ? __pfx_ksys_write+0x10/0x10 [ 234.250993][T11450] ? rcu_is_watching+0x15/0xb0 [ 234.251015][T11450] ? do_syscall_64+0xbe/0x3b0 [ 234.251038][T11450] do_syscall_64+0xfa/0x3b0 [ 234.251055][T11450] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.251072][T11450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.251089][T11450] ? clear_bhb_loop+0x60/0xb0 [ 234.251109][T11450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.251125][T11450] RIP: 0033:0x7f0d0a38ebe9 [ 234.251140][T11450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.251153][T11450] RSP: 002b:00007f0d0b21d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.251172][T11450] RAX: ffffffffffffffda RBX: 00007f0d0a5c5fa0 RCX: 00007f0d0a38ebe9 [ 234.251185][T11450] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 234.251196][T11450] RBP: 00007f0d0b21d090 R08: 0000000000000000 R09: 0000000000000000 [ 234.251207][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.251218][T11450] R13: 00007f0d0a5c6038 R14: 00007f0d0a5c5fa0 R15: 00007ffe097a6d38 [ 234.251247][T11450] [ 235.362594][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 235.447920][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 235.461357][T11495] netlink: 'syz.4.1765': attribute type 10 has an invalid length. [ 235.958313][T11523] netem: change failed [ 236.108225][T11529] netlink: 'syz.1.1779': attribute type 10 has an invalid length. [ 236.404039][ T5873] skbuff: skb_under_panic: text:ffffffff8a121657 len:-1823513952 put:-1823514044 head:ffff88807d9d3000 data:ffff887fea4dcdfc tail:0x9c end:0x6c0 dev:bond1 [ 236.442318][ T5873] ------------[ cut here ]------------ [ 236.447932][ T5873] kernel BUG at net/core/skbuff.c:211! [ 236.482545][ T5873] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 236.488826][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 236.498194][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.508247][ T5873] Workqueue: mld mld_ifc_work [ 236.512938][ T5873] RIP: 0010:skb_panic+0x157/0x160 [ 236.517991][ T5873] Code: c7 80 fb 93 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 8e 0c f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 236.537603][ T5873] RSP: 0018:ffffc900042ef3f8 EFLAGS: 00010282 [ 236.543678][ T5873] RAX: 0000000000000098 RBX: dffffc0000000000 RCX: 626b0459048fc500 [ 236.551649][ T5873] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 236.559608][ T5873] RBP: 00000000000006c0 R08: ffffc900042ef107 R09: 1ffff9200085de20 [ 236.567560][ T5873] R10: dffffc0000000000 R11: fffff5200085de21 R12: ffff888054453b50 [ 236.575511][ T5873] R13: ffff88807d9d3000 R14: ffff887fea4dcdfc R15: 000000000000009c [ 236.583460][ T5873] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 236.592367][ T5873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.598934][ T5873] CR2: 00007f9a27a7f85c CR3: 000000007ecd0000 CR4: 00000000003526f0 [ 236.606890][ T5873] Call Trace: [ 236.610156][ T5873] [ 236.613068][ T5873] ? ipgre_header+0x67/0x290 [ 236.617644][ T5873] ? ipgre_header+0x67/0x290 [ 236.622216][ T5873] skb_push+0xc3/0xe0 [ 236.626186][ T5873] ipgre_header+0x67/0x290 [ 236.630585][ T5873] ? __pfx_ipgre_header+0x10/0x10 [ 236.635591][ T5873] neigh_connected_output+0x283/0x460 [ 236.640970][ T5873] ip6_finish_output2+0xfb0/0x1480 [ 236.646063][ T5873] ? __pfx_ip6_finish_output2+0x10/0x10 [ 236.651593][ T5873] ? ip6_mtu+0x7d/0x490 [ 236.655731][ T5873] ? ip6_mtu+0x38c/0x490 [ 236.659958][ T5873] ? ip6_finish_output+0x2ef/0x4e0 [ 236.665054][ T5873] ? ip6_output+0x126/0x550 [ 236.669537][ T5873] ip6_output+0x340/0x550 [ 236.673849][ T5873] NF_HOOK+0x9e/0x380 [ 236.677816][ T5873] ? NF_HOOK+0x101/0x380 [ 236.682039][ T5873] ? __pfx_NF_HOOK+0x10/0x10 [ 236.686613][ T5873] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 236.692403][ T5873] ? do_raw_spin_unlock+0x122/0x240 [ 236.697585][ T5873] ? icmp6_dst_alloc+0x3a5/0x420 [ 236.702506][ T5873] ? icmp6_dst_alloc+0x3a5/0x420 [ 236.707426][ T5873] mld_sendpack+0x8d4/0xe60 [ 236.711907][ T5873] ? __pfx_mld_newpack+0x10/0x10 [ 236.716826][ T5873] ? mld_sendpack+0x1e7/0xe60 [ 236.721483][ T5873] ? __pfx_mld_sendpack+0x10/0x10 [ 236.726494][ T5873] mld_ifc_work+0x83e/0xd60 [ 236.730982][ T5873] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.736166][ T5873] ? process_scheduled_works+0x9ef/0x17b0 [ 236.741869][ T5873] process_scheduled_works+0xae1/0x17b0 [ 236.747400][ T5873] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.753457][ T5873] worker_thread+0x8a0/0xda0 [ 236.758115][ T5873] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 236.764429][ T5873] ? __kthread_parkme+0x7b/0x200 [ 236.769353][ T5873] kthread+0x70e/0x8a0 [ 236.773403][ T5873] ? __pfx_worker_thread+0x10/0x10 [ 236.778489][ T5873] ? __pfx_kthread+0x10/0x10 [ 236.783078][ T5873] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.788261][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.793438][ T5873] ? __pfx_kthread+0x10/0x10 [ 236.798094][ T5873] ret_from_fork+0x3fc/0x770 [ 236.802664][ T5873] ? __pfx_ret_from_fork+0x10/0x10 [ 236.807757][ T5873] ? __switch_to_asm+0x39/0x70 [ 236.812501][ T5873] ? __switch_to_asm+0x33/0x70 [ 236.817242][ T5873] ? __pfx_kthread+0x10/0x10 [ 236.821812][ T5873] ret_from_fork_asm+0x1a/0x30 [ 236.826562][ T5873] [ 236.829562][ T5873] Modules linked in: [ 236.834095][ T5873] ---[ end trace 0000000000000000 ]--- [ 236.847636][ T5873] RIP: 0010:skb_panic+0x157/0x160 [ 236.853206][ T5873] Code: c7 80 fb 93 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 8e 0c f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 236.873059][ T5873] RSP: 0018:ffffc900042ef3f8 EFLAGS: 00010282 [ 236.879155][ T5873] RAX: 0000000000000098 RBX: dffffc0000000000 RCX: 626b0459048fc500 [ 236.887245][ T5873] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 236.895254][ T5873] RBP: 00000000000006c0 R08: ffffc900042ef107 R09: 1ffff9200085de20 [ 236.903464][ T5873] R10: dffffc0000000000 R11: fffff5200085de21 R12: ffff888054453b50 [ 236.911701][ T5873] R13: ffff88807d9d3000 R14: ffff887fea4dcdfc R15: 000000000000009c [ 236.919713][ T5873] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 236.928741][ T5873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.935356][ T5873] CR2: 00007f6041c67f98 CR3: 000000007efd4000 CR4: 00000000003526f0 [ 236.943330][ T5873] Kernel panic - not syncing: Fatal exception [ 236.949619][ T5873] Kernel Offset: disabled [ 236.953930][ T5873] Rebooting in 86400 seconds..