last executing test programs: 1.931534843s ago: executing program 3 (id=4518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000ff0300000000000000ba440000003835ba0dff8c7002a63b2f0668aebba7b54bdb3a24448226db0c9f69025522449b7cbf9ad790dda5560fcb7608cc0054def048bdbdc9540716a51d6482000000007720f9a4769f982415e70de9bd44d3eeee6c61db9a5aa5e5ce399cfeb2f7616fd46d9c7e17efbc9f24c19115c89ccf69882f5051d02d8238b858"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYRES32=r0, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000ff0300000000000000ba440000003835ba0dff8c7002a63b2f0668aebba7b54bdb3a24448226db0c9f69025522449b7cbf9ad790dda5560fcb7608cc0054def048bdbdc9540716a51d6482000000007720f9a4769f982415e70de9bd44d3eeee6c61db9a5aa5e5ce399cfeb2f7616fd46d9c7e17efbc9f24c19115c89ccf69882f5051d02d8238b858"], 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) (async) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYRES32=r0, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 1.765803717s ago: executing program 0 (id=4521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003d00037c0000141e3780100003"], 0x28}}, 0xc000) 1.764884554s ago: executing program 2 (id=4522): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x2, 0x2, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x2, 0x6}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) 1.690132941s ago: executing program 3 (id=4524): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1, 0x8, 0x30}, 0xc) 1.594767667s ago: executing program 0 (id=4526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x40084) socket$nl_netfilter(0x10, 0x3, 0xc) 1.559681467s ago: executing program 3 (id=4527): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0xb, 0xfffffffffffffff8, 0xfffffffffffffffc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa2}, 0x94) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller1\x00'}) 1.43032765s ago: executing program 0 (id=4529): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x1}, 0x14}}, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_b, @device_a, {0x0, 0x1}, @device_b, @void, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, @a_msdu}, 0x22) 1.279473456s ago: executing program 2 (id=4531): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x1, 0x0, 0x41, [{}]}, 0x88) 1.176984606s ago: executing program 2 (id=4532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x1cd0, 0x30, 0x3f, 0x0, 0x0, {}, [{0x1cbc, 0x1, [@m_pedit={0x1cb8, 0x4, 0x0, 0x0, {{0xa}, {0x1c8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0xa6c6, 0x5, 0x8, 0x8, 0x6}, 0x6, 0x3, [{0x9909, 0x4, 0x0, 0x3, 0x3, 0x4}, {0x4, 0x6, 0xe2, 0x8, 0x2a}, {0x4, 0x10001, 0x9, 0x101, 0xe, 0x5}]}, [{0x6, 0x7, 0x5, 0x8, 0x5, 0x5}, {0x80, 0x7fffffff, 0x2, 0xfffffe00, 0x396f, 0x5}, {0xcd7, 0xfffffe01, 0x0, 0x6, 0x8, 0x8}, {0xffffffb0, 0x200, 0x6, 0xffff0a18, 0x6, 0xc5}, {0x8, 0xfffffffd, 0x21, 0x9, 0x3, 0x5}, {0x6, 0x7, 0xd029, 0x9, 0x18000000, 0x6}, {0x8, 0x8, 0x6, 0x4, 0x6, 0x7f}, {0x8, 0x558, 0x40, 0x0, 0x2, 0xe22c}, {0x0, 0x5, 0x6, 0x6, 0x8, 0x2}, {0x2, 0x6, 0x963a2bd, 0x0, 0x1, 0x1000}, {0x5, 0x80000001, 0x8f, 0x9, 0x1, 0x80000001}, {0x7, 0x101, 0x3, 0x7fffffff, 0x7d, 0x401}, {0x6, 0xbe, 0x30, 0x7, 0x9, 0x86}, {0x8, 0x1, 0x8, 0x1, 0xfffff49b, 0x2}, {0x204, 0x4, 0x7, 0x7, 0x4, 0x1000}, {0xf, 0xfffffff7, 0x0, 0xffffffff, 0x0, 0x5}, {0x8, 0x2a300613, 0x6, 0x5, 0x800, 0x80000001}, {0x8, 0x2, 0x4, 0x8, 0x9, 0xff}, {0x6, 0x1, 0x7, 0x7, 0xfffffffe, 0x558}, {0x5, 0x3, 0x0, 0xaa25, 0x46b7, 0x8}, {0x8, 0x7fff, 0x0, 0x10000, 0xe, 0x1}, {0x8, 0x100, 0x6, 0x3, 0x4a3, 0x8}, {0xa0e, 0x101, 0x8, 0x100, 0x3, 0x4}, {0x3, 0x8, 0x3, 0x3ff, 0xff, 0xfffffffb}, {0x3, 0xfffffffc, 0x10001, 0x0, 0x1, 0x3}, {0x91, 0x8, 0x6, 0x0, 0x91, 0x5}, {0xffff, 0x6, 0x9, 0x5, 0x4, 0x3}, {0x6, 0x7, 0x6, 0xffffffff, 0xc, 0x80000000}, {0x1, 0x85e7, 0x4, 0xff, 0x2, 0xae}, {0x5, 0x16c, 0x400, 0xdec, 0x6, 0x6}, {0x9, 0x9, 0x1, 0x5, 0x7fff, 0x81}, {0x6, 0x6, 0x8, 0x7bd1, 0x3, 0x7}, {0x29df, 0xfffeffff, 0x6, 0x9, 0x1cdd, 0x54a3}, {0x8, 0x200, 0x28f000, 0xe75a, 0xb39, 0x3}, {0xfff, 0xb25, 0x6, 0x8, 0xfff, 0xbdaf}, {0x6, 0xfffffffa, 0x0, 0x8, 0x8, 0xa64}, {0x0, 0x80000001, 0x5, 0x776, 0x10, 0x1}, {0x1, 0x0, 0x4, 0x8, 0x4, 0x5}, {0x6, 0xb5, 0x7e8, 0x9, 0x8001, 0x5}, {0x7, 0xfffffff9, 0x8, 0x80, 0x0, 0x227}, {0x9, 0x7ff, 0x51, 0x9, 0x7}, {0x1, 0xffffffff, 0x6, 0x61, 0xde}, {0x3, 0x2, 0x6e4, 0x0, 0xe1, 0x3}, {0x8, 0x401, 0x1, 0x6, 0x202, 0xfffffff7}, {0x1, 0x7be, 0x6, 0x7, 0xffffffff, 0x80000000}, {0x7, 0x2, 0x8275, 0x3, 0x2, 0xb}, {0x8, 0x5, 0x80, 0x8, 0x160, 0x7fffffff}, {0x8, 0x9, 0xfffffffb, 0x2, 0x1, 0xbc}, {0xfffff88f, 0x1, 0xfffffffd, 0xff, 0x4, 0x13}, {0x5, 0xf4, 0x2, 0xacc, 0x3, 0x1}, {0x0, 0x4, 0xf, 0xf0, 0x7fff, 0x80000001}, {0xb, 0x0, 0x1, 0xa287, 0x8, 0x3}, {0x1, 0x4, 0x6, 0xa, 0x7, 0x2}, {0x4, 0x9, 0x2, 0x800, 0x0, 0x9}, {0x4, 0x5, 0xd4, 0x6800000, 0x2, 0x3}, {0xf, 0xea97, 0x9, 0x6ae51c76, 0x2, 0x1}, {0x5, 0x96, 0x3ff, 0x9, 0x10}, {0x5, 0x2, 0x7, 0xc9, 0x7, 0x9}, {0x6, 0x186, 0x7, 0x5, 0x4, 0x401}, {0xff, 0xb1, 0x7, 0x6, 0xaf3, 0x7}, {0x9, 0x4, 0x8001, 0x1, 0x34, 0x7ff}, {0xfff, 0x1, 0xeb, 0x6, 0x7, 0x6}, {0x9, 0x8d, 0x401, 0x2, 0x8, 0x3}, {0x1, 0x6, 0x3, 0x3, 0x0, 0x7}, {0xb37a, 0x5, 0xb554, 0x8, 0xfffffff8, 0x3}, {0xf60, 0x3, 0x7ff, 0xcc, 0x1, 0x9}, {0x6, 0x3, 0x3, 0x4, 0x4, 0x6}, {0x9, 0x0, 0x7, 0x10001, 0x6, 0xd55}, {0x4, 0x8000, 0xffff, 0x74f, 0x81, 0xfffffffa}, {0x0, 0x0, 0xa, 0x4, 0x4, 0x5}, {0x9, 0x7, 0xffffffff, 0x7f, 0x0, 0x17}, {0x5, 0x2, 0xfd90, 0x4, 0x70}, {0xde19, 0x4, 0x1, 0x3, 0x1, 0x2}, {0x1, 0x6, 0x7f42, 0x4, 0xb, 0x9d77}, {0x8000, 0xfffffff7, 0x4, 0x0, 0x3, 0xffffff81}, {0x2, 0xfff, 0x6, 0x5, 0x0, 0x67}, {0x1, 0x2, 0x5, 0x7fffffff, 0x1000, 0x4}, {0x6, 0x7, 0xfff, 0x9, 0x4, 0xb}, {0x8, 0x8000, 0x0, 0x4, 0x4, 0x6}, {0x0, 0x2, 0x60ef, 0x1, 0x8, 0x5}, {0x4, 0xf, 0x0, 0xeb, 0xc, 0x3}, {0x2, 0x80, 0x4, 0x7, 0x1065, 0x4}, {0x62af8d43, 0x1ff, 0x0, 0x4, 0x9, 0x200}, {0x4, 0xa128, 0xdcd, 0x3, 0xfff, 0x7fffffff}, {0x0, 0xffff0001, 0x1, 0x3, 0x9c, 0x3}, {0xffff9b48, 0x8, 0x8, 0xfffffffb, 0x4, 0x2}, {0x10000, 0x282b, 0x1, 0xff, 0x1, 0x5}, {0xfff, 0x5b, 0x3ff, 0x7, 0x6, 0x6}, {0x1, 0x0, 0x8e8b, 0x9753, 0x4, 0x1}, {0x0, 0x400, 0x7, 0x75, 0x8000, 0x72}, {0xfb30, 0xf2, 0xe, 0x3, 0x7, 0xb4}, {0x1, 0x556a, 0x7, 0x6, 0xfffffffd, 0x5c}, {0x7, 0x4, 0x0, 0x7, 0x4986, 0xffff}, {0x9, 0x800, 0x9, 0x9, 0x8}, {0x8, 0xde, 0x0, 0x5, 0x7ff, 0x8}, {0x2, 0x7fffffff, 0x0, 0x7fffffff, 0x5}, {0xe, 0x5, 0x5, 0x7, 0x0, 0x7}, {0x4, 0x800, 0x0, 0x2, 0x6, 0xffffffff}, {0x9, 0xf, 0x80, 0x6, 0xfffffff7, 0x1}, {0x2, 0xf0000000, 0x200, 0x110b, 0x4, 0x8}, {0x10000, 0x4a6d, 0x5, 0xffffffff, 0x6, 0xfffffe00}, {0x51b, 0x7, 0xe2, 0x3, 0x8a64, 0xe}, {0x40, 0x7, 0x200, 0xfa, 0x7, 0xae}, {0x4, 0x7, 0x2, 0x9, 0x12, 0x6}, {0xffffffff, 0x6, 0x8, 0x0, 0x1, 0x2}, {0x2, 0x7, 0xffffffff, 0x9, 0xd, 0xd01}, {0x7, 0x9, 0x5, 0xe64, 0x100, 0x4}, {0x7, 0xb3, 0xfffff000, 0x4, 0xc, 0x9}, {0x9, 0x5, 0x5, 0x0, 0xc, 0x1}, {0x800, 0x12487554, 0x81, 0x7, 0x9, 0x7}, {0x200, 0x4, 0xa9a, 0x1000, 0xde78, 0xffffffff}, {0x4859, 0xffffffff, 0x4, 0xe702, 0x7, 0x2}, {0x2, 0x5, 0x6, 0x1ff, 0x6, 0x6}, {0x22f0, 0x9, 0x2, 0x8, 0x8, 0x4}, {0x5, 0x10000, 0xfffffff1, 0x3, 0x7, 0x7}, {0x6, 0x8, 0x0, 0x9, 0x1, 0x924}, {0x2, 0x2, 0x80000000, 0x4, 0x6, 0x9}, {0x4, 0xffffffe4, 0xf9c, 0xffff, 0x5, 0x81}, {0x3ff, 0x8001, 0x10, 0x2, 0x2, 0x8001}, {0x4, 0x0, 0x0, 0xcc, 0xfffffff7, 0x6}, {0x7d, 0x8, 0x5, 0x9, 0x12ecdb9a, 0x2}, {0x1, 0x0, 0x8, 0x7, 0xfffffff8}, {0xffff7fff, 0x0, 0xb628, 0x1, 0x96, 0x1}, {0xc8, 0x4, 0x2, 0xff, 0x8, 0x80}, {0x6f, 0xfffeffff, 0x4, 0x1, 0x7fff, 0x1f}, {0x6, 0xaa54, 0xa8a5, 0x4, 0x100, 0x9}, {0xffffffff, 0x5, 0x1, 0x7c06cc46, 0x3}, {0x0, 0x101, 0x80000000, 0x6, 0x7, 0x80000000}], [{0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x3}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x9, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x2}, {0x4, 0x1}, {0x6, 0xadf7b1cb2a2c561}, {0x3}, {}, {0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x6}, {0x2}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x17ef20ca385f9ae9}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x5}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x4}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x3439f1285de59def, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x2, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3, 0x8}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1cd0}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3a}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f00000012c0)=""/4109, 0x100d) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0x2, 0xb}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$alg(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e00)="7911bf87e318844b7b7ece8fe95693844ba2b4c29049c749521cf970374e19e3e0eb47e456c6b48e9e6cbd7bf0c99099ca842917790c07a3922b2732c0b26c06681e5f6eeb013cae354f9e4cbdb1e2740ed027e6cea3bf48243cf3a4dfea964f056d9750a3845e1afa1cd4746ed1de3dcd86984fcb49e380144defb2648b5d28438225bdb08ba43fde421a07274d5d77389ddda7dbfec5ce2019fb2b85555c3adbf6812125af1e846cf1c0e4b88a751c58dfad1d210fbec40a1b21115f69230ca80b3ed558b27f6c46fe25c01fe4c18c0ba7d1e6861f6eb75b6f4903971921f799a56c12097998d9cfdce430335046f02dd1fef77b36c617b8b67621", 0xfc}, {&(0x7f0000002300)="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", 0xf11}], 0x2, 0x0, 0x0, 0x8801}, 0x4000001) accept$ax25(r1, 0x0, 0x0) 1.176413288s ago: executing program 4 (id=4533): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1}, 0x10}, 0x1, 0x0, 0x5c01000000000000, 0x40080}, 0x0) 1.062297903s ago: executing program 3 (id=4535): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{0x0, 0x41000000}, {}, {}, {}, {}]}, 0x78) 1.05986371s ago: executing program 4 (id=4536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003d00037c0000141e3780100003"], 0x28}}, 0xc000) 1.003551768s ago: executing program 3 (id=4537): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x1}, 0x14}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_b, @device_a, {0x0, 0x1}, @device_b, @void, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, @a_msdu}, 0x22) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) 845.818562ms ago: executing program 2 (id=4540): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b00000000000001000000090002007379"], 0xb4}}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x0, [0x2f, 0x200000001, 0x3, 0x32c2, 0x1000, 0x44b4d304], 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x78) 829.289725ms ago: executing program 4 (id=4541): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x70bd29, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 808.025104ms ago: executing program 1 (id=4542): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_BLACKHOLE={0x4}]}, 0x34}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xaf, 0x1, 0x54, @remote, @private2, 0x80, 0x80, 0x5, 0xffffffff}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0x6, 0x2, 0x6, 0xfffffff8}, 0x14) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 758.366893ms ago: executing program 0 (id=4543): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x8400, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 678.322918ms ago: executing program 1 (id=4544): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x24, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 657.302043ms ago: executing program 4 (id=4545): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000300)) 635.12146ms ago: executing program 1 (id=4546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x3c, 0x29, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 546.277233ms ago: executing program 0 (id=4547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000380)="f51424ce5e36637acda84e8cc02525fe77ed38f7be8e43a3ad00d934edf0c53132664242ce429ad4dbf1ab3a20283c19dac9acb075d44fd096294acd5915974f320b65139c448ad65de73a9b6c232a52d9c2fcc295f5a87b7e6aaf0d4ac1f69b7246c6f1928d5449b047c228b5420438b467c1021f1d2c3ff5e6d39a43f3fc4220b709f93b964c91", &(0x7f0000000300)=""/55, &(0x7f0000000440)="d730668d2ad5cd7e53b6aa11c1c57a0e6ec57724750c54d106a7cdfecc5b2439ef21335ab5737442a26c58", &(0x7f0000000480)="d5ad97c190b5d88ced8f58016538dc610cafbe18775385e2104c0e775ab4be72690a7a1eee8fedc7890cc9a7208b69fd9ae08256c1ecdf9af74c0bf8fa1fd674d2527eae5f34075254dce478099f614b9aa4572726931a8bf09457df833816f7146c0f37c2b9b9843f8e2c206debbcedfe6aa8bbd711aca5295efad3d9fc3be0dfb7919e10cd6aa8fda606cc4e0f29b3d2321799ca56a03f58851d27f99cab7b288c62a3bebdfc6505650dd8cd2ce1d22e", 0x0, r0}, 0x38) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a000000000000000000000008001a"], 0x2c}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x0, 0x39ca8789921a5cd7}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x911, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x8c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x8c}}, 0x40040) openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) 546.120705ms ago: executing program 1 (id=4548): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {0x0, 0x41}, {}, {}]}, 0x68) 516.767152ms ago: executing program 2 (id=4549): syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x2, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty=0x20000000}}}}}}, 0x0) 446.462587ms ago: executing program 2 (id=4550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000007000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000008000000000000000000000063cf7f1b755256cc8e1d5d8afde1f0dfd54affb49e4c1d042ca0ca89f9d2670fee3077776a8af203df78dfd68c67386b3033f3ed7048b65357"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000840000090000000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000000580)}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008044}], 0x1, 0x40081) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @remote}, &(0x7f0000000180)=0xc) 398.203583ms ago: executing program 4 (id=4551): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x1, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r1, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8060010) 360.361222ms ago: executing program 3 (id=4552): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0x278, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x8000, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) (fail_nth: 6) 348.358558ms ago: executing program 0 (id=4553): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r3) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) recvmmsg(r5, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = accept(r0, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000300)={'ah\x00'}, &(0x7f0000000340)=0x1e) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r7, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 298.31031ms ago: executing program 1 (id=4554): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "913cde59ea6265a9", "f0f4af39b553b7cbb6dadf2e322e34b7", "7304e104", "16e190c0370a18ee"}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a000000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1b, 0x0, 0x0, 0x2663}, 0x0) 297.920902ms ago: executing program 4 (id=4555): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x70bd29, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 0s ago: executing program 1 (id=4556): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) kernel console output (not intermixed with test programs): _SYSCALL_64_after_hwframe+0x77/0x7f [ 379.342537][T16656] RIP: 0033:0x7fda1518d8dc [ 379.342555][T16656] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 379.342571][T16656] RSP: 002b:00007fda15f4e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.342592][T16656] RAX: ffffffffffffffda RBX: 00007fda153e5fa0 RCX: 00007fda1518d8dc [ 379.342605][T16656] RDX: 000000000000000f RSI: 00007fda15f4e0a0 RDI: 0000000000000004 [ 379.342617][T16656] RBP: 00007fda15f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 379.342629][T16656] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 379.342640][T16656] R13: 00007fda153e6038 R14: 00007fda153e5fa0 R15: 00007ffd86cb7328 [ 379.342674][T16656] [ 380.366100][T16666] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 380.596332][T16691] FAULT_INJECTION: forcing a failure. [ 380.596332][T16691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.651438][T16691] CPU: 1 UID: 0 PID: 16691 Comm: syz.2.3779 Not tainted syzkaller #0 PREEMPT(full) [ 380.651471][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.651486][T16691] Call Trace: [ 380.651496][T16691] [ 380.651506][T16691] dump_stack_lvl+0x189/0x250 [ 380.651533][T16691] ? __pfx____ratelimit+0x10/0x10 [ 380.651563][T16691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.651586][T16691] ? __pfx__printk+0x10/0x10 [ 380.651608][T16691] ? __might_fault+0xb0/0x130 [ 380.651642][T16691] should_fail_ex+0x414/0x560 [ 380.651671][T16691] _copy_from_user+0x2d/0xb0 [ 380.651699][T16691] do_ip_getsockopt+0x25f/0x1b60 [ 380.651736][T16691] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 380.651768][T16691] ? __lock_acquire+0xab9/0xd20 [ 380.651805][T16691] ? __mutex_trylock_common+0x153/0x260 [ 380.651829][T16691] ? __pfx___mutex_trylock_common+0x10/0x10 [ 380.651855][T16691] ? rcu_is_watching+0x15/0xb0 [ 380.651874][T16691] ? trace_contention_end+0x39/0x120 [ 380.651904][T16691] ? __mutex_lock+0x335/0x1350 [ 380.651938][T16691] ? smc_getsockopt+0x123/0x380 [ 380.651970][T16691] ip_getsockopt+0xbb/0x220 [ 380.652003][T16691] ? __pfx_ip_getsockopt+0x10/0x10 [ 380.652032][T16691] ? sock_common_getsockopt+0x2d/0xb0 [ 380.652059][T16691] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 380.652081][T16691] smc_getsockopt+0x1ba/0x380 [ 380.652114][T16691] ? __pfx_smc_getsockopt+0x10/0x10 [ 380.652149][T16691] ? __pfx_smc_getsockopt+0x10/0x10 [ 380.652182][T16691] do_sock_getsockopt+0x36f/0x450 [ 380.652215][T16691] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 380.652241][T16691] ? do_syscall_64+0xa0/0xfa0 [ 380.652269][T16691] ? __fget_files+0x2a/0x420 [ 380.652292][T16691] ? __fget_files+0x3a0/0x420 [ 380.652315][T16691] ? __fget_files+0x2a/0x420 [ 380.652348][T16691] __x64_sys_getsockopt+0x1a5/0x250 [ 380.652375][T16691] ? do_syscall_64+0xa0/0xfa0 [ 380.652406][T16691] ? do_syscall_64+0xa0/0xfa0 [ 380.652439][T16691] do_syscall_64+0xfa/0xfa0 [ 380.652466][T16691] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.652494][T16691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.652514][T16691] ? clear_bhb_loop+0x60/0xb0 [ 380.652539][T16691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.652558][T16691] RIP: 0033:0x7fbabc38eec9 [ 380.652578][T16691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.652595][T16691] RSP: 002b:00007fbabd250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 380.652619][T16691] RAX: ffffffffffffffda RBX: 00007fbabc5e5fa0 RCX: 00007fbabc38eec9 [ 380.652634][T16691] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 380.652647][T16691] RBP: 00007fbabd250090 R08: 0000200000007cc0 R09: 0000000000000000 [ 380.652661][T16691] R10: 0000200000007c40 R11: 0000000000000246 R12: 0000000000000001 [ 380.652674][T16691] R13: 00007fbabc5e6038 R14: 00007fbabc5e5fa0 R15: 00007fff1d7bae48 [ 380.652712][T16691] [ 380.657036][T16697] __nla_validate_parse: 3 callbacks suppressed [ 380.657057][T16697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3783'. [ 380.770117][T16702] netlink: 'syz.0.3781': attribute type 1 has an invalid length. [ 381.000930][T16702] netlink: 'syz.0.3781': attribute type 10 has an invalid length. [ 381.005606][T16711] FAULT_INJECTION: forcing a failure. [ 381.005606][T16711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.009684][T16702] netlink: 'syz.0.3781': attribute type 4 has an invalid length. [ 381.050572][T16711] CPU: 0 UID: 0 PID: 16711 Comm: syz.4.3788 Not tainted syzkaller #0 PREEMPT(full) [ 381.050604][T16711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.050617][T16711] Call Trace: [ 381.050626][T16711] [ 381.050635][T16711] dump_stack_lvl+0x189/0x250 [ 381.050664][T16711] ? __pfx____ratelimit+0x10/0x10 [ 381.050693][T16711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.050715][T16711] ? __pfx__printk+0x10/0x10 [ 381.050737][T16711] ? __might_fault+0xb0/0x130 [ 381.050772][T16711] should_fail_ex+0x414/0x560 [ 381.050800][T16711] _copy_from_user+0x2d/0xb0 [ 381.050830][T16711] do_ipv6_setsockopt+0x23e/0x2eb0 [ 381.050873][T16711] ? get_pid_task+0x20/0x1f0 [ 381.050897][T16711] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 381.050921][T16711] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 381.050957][T16711] ? vfs_write+0x956/0xb30 [ 381.050985][T16711] ? __pfx___might_resched+0x10/0x10 [ 381.051023][T16711] ? __lock_acquire+0xab9/0xd20 [ 381.051059][T16711] ? aa_sk_perm+0x81e/0x950 [ 381.051087][T16711] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.051113][T16711] ? aa_sock_opt_perm+0xff/0x1b0 [ 381.051142][T16711] ipv6_setsockopt+0x59/0x170 [ 381.051163][T16711] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 381.051192][T16711] do_sock_setsockopt+0x179/0x1b0 [ 381.051225][T16711] __x64_sys_setsockopt+0x13f/0x1b0 [ 381.051265][T16711] do_syscall_64+0xfa/0xfa0 [ 381.051293][T16711] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.051322][T16711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.051342][T16711] ? clear_bhb_loop+0x60/0xb0 [ 381.051367][T16711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.051387][T16711] RIP: 0033:0x7fda1518eec9 [ 381.051407][T16711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.051425][T16711] RSP: 002b:00007fda15f4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 381.051448][T16711] RAX: ffffffffffffffda RBX: 00007fda153e5fa0 RCX: 00007fda1518eec9 [ 381.051463][T16711] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 381.051476][T16711] RBP: 00007fda15f4e090 R08: 00000000000003c8 R09: 0000000000000000 [ 381.051490][T16711] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 381.051503][T16711] R13: 00007fda153e6038 R14: 00007fda153e5fa0 R15: 00007ffd86cb7328 [ 381.051540][T16711] [ 381.068318][T16702] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3781'. [ 381.191142][T16717] erspan0: entered promiscuous mode [ 381.198375][T16715] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3791'. [ 381.202355][T16717] vlan2: entered promiscuous mode [ 381.405791][T16718] vlan2: entered promiscuous mode [ 381.554312][T16731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3795'. [ 381.805146][T16745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3800'. [ 381.837838][T16745] team0: Device ip6gre1 is of different type [ 381.869669][T16752] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3799'. [ 382.216368][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3804'. [ 382.918331][ T30] audit: type=1800 audit(1759819593.235:4): pid=16792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3816" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=4022 res=0 errno=0 [ 383.062881][T16797] FAULT_INJECTION: forcing a failure. [ 383.062881][T16797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.128834][T16797] CPU: 0 UID: 0 PID: 16797 Comm: syz.1.3817 Not tainted syzkaller #0 PREEMPT(full) [ 383.128867][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.128880][T16797] Call Trace: [ 383.128888][T16797] [ 383.128898][T16797] dump_stack_lvl+0x189/0x250 [ 383.128925][T16797] ? __pfx____ratelimit+0x10/0x10 [ 383.128953][T16797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.128974][T16797] ? __pfx__printk+0x10/0x10 [ 383.128996][T16797] ? __might_fault+0xb0/0x130 [ 383.129030][T16797] should_fail_ex+0x414/0x560 [ 383.129059][T16797] _copy_from_user+0x2d/0xb0 [ 383.129087][T16797] do_arpt_get_ctl+0x1e7/0x1010 [ 383.129114][T16797] ? __lock_acquire+0xab9/0xd20 [ 383.129142][T16797] ? __pfx_do_arpt_get_ctl+0x10/0x10 [ 383.129170][T16797] ? __mutex_trylock_common+0x153/0x260 [ 383.129201][T16797] ? __pfx___mutex_trylock_common+0x10/0x10 [ 383.129228][T16797] ? rcu_is_watching+0x15/0xb0 [ 383.129249][T16797] ? trace_contention_end+0x39/0x120 [ 383.129281][T16797] ? nf_getsockopt+0x224/0x290 [ 383.129306][T16797] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 383.129334][T16797] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 383.129358][T16797] ? __might_fault+0xb0/0x130 [ 383.129391][T16797] nf_getsockopt+0x26e/0x290 [ 383.129417][T16797] ip_getsockopt+0x1c4/0x220 [ 383.129451][T16797] ? __pfx_ip_getsockopt+0x10/0x10 [ 383.129484][T16797] ? sock_common_getsockopt+0x2d/0xb0 [ 383.129511][T16797] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 383.129534][T16797] smc_getsockopt+0x1ba/0x380 [ 383.129568][T16797] ? __pfx_smc_getsockopt+0x10/0x10 [ 383.129605][T16797] ? __pfx_smc_getsockopt+0x10/0x10 [ 383.129636][T16797] do_sock_getsockopt+0x36f/0x450 [ 383.129670][T16797] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 383.129697][T16797] ? do_syscall_64+0xa0/0xfa0 [ 383.129725][T16797] ? __fget_files+0x2a/0x420 [ 383.129749][T16797] ? __fget_files+0x3a0/0x420 [ 383.129771][T16797] ? __fget_files+0x2a/0x420 [ 383.129816][T16797] __x64_sys_getsockopt+0x1a5/0x250 [ 383.129844][T16797] ? do_syscall_64+0xa0/0xfa0 [ 383.129875][T16797] ? do_syscall_64+0xa0/0xfa0 [ 383.129909][T16797] do_syscall_64+0xfa/0xfa0 [ 383.129936][T16797] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.129964][T16797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.129985][T16797] ? clear_bhb_loop+0x60/0xb0 [ 383.130012][T16797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.130032][T16797] RIP: 0033:0x7f6f41b8eec9 [ 383.130052][T16797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.130070][T16797] RSP: 002b:00007f6f42aa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 383.130095][T16797] RAX: ffffffffffffffda RBX: 00007f6f41de5fa0 RCX: 00007f6f41b8eec9 [ 383.130110][T16797] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 383.130122][T16797] RBP: 00007f6f42aa6090 R08: 0000200000007cc0 R09: 0000000000000000 [ 383.130146][T16797] R10: 0000200000007c40 R11: 0000000000000246 R12: 0000000000000001 [ 383.130160][T16797] R13: 00007f6f41de6038 R14: 00007f6f41de5fa0 R15: 00007ffeff521498 [ 383.130199][T16797] [ 383.513757][T16801] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3819'. [ 383.750474][T16811] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.787540][T16815] veth1_to_batadv: entered promiscuous mode [ 383.841816][T16824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3824'. [ 384.033353][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3832'. [ 384.070925][T16835] netlink: 'syz.0.3831': attribute type 1 has an invalid length. [ 384.146355][T16837] netlink: 'syz.3.3833': attribute type 2 has an invalid length. [ 384.189673][T16839] FAULT_INJECTION: forcing a failure. [ 384.189673][T16839] name failslab, interval 1, probability 0, space 0, times 0 [ 384.215768][T16839] CPU: 1 UID: 0 PID: 16839 Comm: syz.2.3834 Not tainted syzkaller #0 PREEMPT(full) [ 384.215798][T16839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.215811][T16839] Call Trace: [ 384.215820][T16839] [ 384.215830][T16839] dump_stack_lvl+0x189/0x250 [ 384.215857][T16839] ? __pfx____ratelimit+0x10/0x10 [ 384.215886][T16839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.215917][T16839] ? __pfx__printk+0x10/0x10 [ 384.215945][T16839] ? __pfx___might_resched+0x10/0x10 [ 384.215980][T16839] should_fail_ex+0x414/0x560 [ 384.216007][T16839] should_failslab+0xa8/0x100 [ 384.216031][T16839] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 384.216054][T16839] ? __get_vm_area_node+0x13f/0x300 [ 384.216082][T16839] __get_vm_area_node+0x13f/0x300 [ 384.216109][T16839] __vmalloc_node_range_noprof+0x301/0x12f0 [ 384.216135][T16839] ? xt_copy_counters+0x298/0x460 [ 384.216184][T16839] ? __might_fault+0xb0/0x130 [ 384.216210][T16839] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.216243][T16839] ? xt_copy_counters+0x298/0x460 [ 384.216264][T16839] vmalloc_noprof+0xb2/0xf0 [ 384.216288][T16839] ? xt_copy_counters+0x298/0x460 [ 384.216312][T16839] xt_copy_counters+0x298/0x460 [ 384.216337][T16839] ? __pfx_xt_copy_counters+0x10/0x10 [ 384.216360][T16839] ? apparmor_capable+0x137/0x1b0 [ 384.216393][T16839] ? bpf_lsm_capable+0x9/0x20 [ 384.216414][T16839] ? security_capable+0x7e/0x2e0 [ 384.216459][T16839] do_ipt_set_ctl+0x178/0xcd0 [ 384.216494][T16839] ? rcu_is_watching+0x15/0xb0 [ 384.216515][T16839] ? trace_contention_end+0x39/0x120 [ 384.216535][T16839] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 384.216573][T16839] ? nf_setsockopt+0x221/0x290 [ 384.216598][T16839] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 384.216627][T16839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 384.216660][T16839] ? __pfx_aa_sk_perm+0x10/0x10 [ 384.216691][T16839] nf_setsockopt+0x26c/0x290 [ 384.216713][T16839] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 384.216741][T16839] do_sock_setsockopt+0x179/0x1b0 [ 384.216775][T16839] __x64_sys_setsockopt+0x13f/0x1b0 [ 384.216810][T16839] do_syscall_64+0xfa/0xfa0 [ 384.216838][T16839] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.216867][T16839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.216888][T16839] ? clear_bhb_loop+0x60/0xb0 [ 384.216920][T16839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.216938][T16839] RIP: 0033:0x7fbabc38eec9 [ 384.216957][T16839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.216973][T16839] RSP: 002b:00007fbabd250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.216996][T16839] RAX: ffffffffffffffda RBX: 00007fbabc5e5fa0 RCX: 00007fbabc38eec9 [ 384.217011][T16839] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 384.217024][T16839] RBP: 00007fbabd250090 R08: 0000000000000078 R09: 0000000000000000 [ 384.217037][T16839] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.217049][T16839] R13: 00007fbabc5e6038 R14: 00007fbabc5e5fa0 R15: 00007fff1d7bae48 [ 384.217086][T16839] [ 384.217097][T16839] syz.2.3834: vmalloc error: size 80, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 384.598283][T16839] CPU: 1 UID: 0 PID: 16839 Comm: syz.2.3834 Not tainted syzkaller #0 PREEMPT(full) [ 384.598313][T16839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.598325][T16839] Call Trace: [ 384.598335][T16839] [ 384.598346][T16839] dump_stack_lvl+0x189/0x250 [ 384.598379][T16839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.598400][T16839] ? __pfx__printk+0x10/0x10 [ 384.598421][T16839] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.598446][T16839] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.598471][T16839] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 384.598497][T16839] warn_alloc+0x214/0x310 [ 384.598528][T16839] ? __pfx_warn_alloc+0x10/0x10 [ 384.598555][T16839] ? __get_vm_area_node+0x13f/0x300 [ 384.598581][T16839] ? __get_vm_area_node+0x2b5/0x300 [ 384.598611][T16839] __vmalloc_node_range_noprof+0x326/0x12f0 [ 384.598664][T16839] ? __might_fault+0xb0/0x130 [ 384.598689][T16839] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.598721][T16839] ? xt_copy_counters+0x298/0x460 [ 384.598743][T16839] vmalloc_noprof+0xb2/0xf0 [ 384.598767][T16839] ? xt_copy_counters+0x298/0x460 [ 384.598790][T16839] xt_copy_counters+0x298/0x460 [ 384.598814][T16839] ? __pfx_xt_copy_counters+0x10/0x10 [ 384.598836][T16839] ? apparmor_capable+0x137/0x1b0 [ 384.598868][T16839] ? bpf_lsm_capable+0x9/0x20 [ 384.598885][T16839] ? security_capable+0x7e/0x2e0 [ 384.598911][T16839] do_ipt_set_ctl+0x178/0xcd0 [ 384.598941][T16839] ? rcu_is_watching+0x15/0xb0 [ 384.598962][T16839] ? trace_contention_end+0x39/0x120 [ 384.598983][T16839] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 384.599021][T16839] ? nf_setsockopt+0x221/0x290 [ 384.599047][T16839] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 384.599076][T16839] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 384.599119][T16839] ? __pfx_aa_sk_perm+0x10/0x10 [ 384.599150][T16839] nf_setsockopt+0x26c/0x290 [ 384.599172][T16839] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 384.599200][T16839] do_sock_setsockopt+0x179/0x1b0 [ 384.599243][T16839] __x64_sys_setsockopt+0x13f/0x1b0 [ 384.599278][T16839] do_syscall_64+0xfa/0xfa0 [ 384.599307][T16839] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.599336][T16839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.599365][T16839] ? clear_bhb_loop+0x60/0xb0 [ 384.599391][T16839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.599411][T16839] RIP: 0033:0x7fbabc38eec9 [ 384.599432][T16839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.599450][T16839] RSP: 002b:00007fbabd250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.599473][T16839] RAX: ffffffffffffffda RBX: 00007fbabc5e5fa0 RCX: 00007fbabc38eec9 [ 384.599489][T16839] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 384.599502][T16839] RBP: 00007fbabd250090 R08: 0000000000000078 R09: 0000000000000000 [ 384.599516][T16839] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.599530][T16839] R13: 00007fbabc5e6038 R14: 00007fbabc5e5fa0 R15: 00007fff1d7bae48 [ 384.599568][T16839] [ 384.599577][T16839] Mem-Info: [ 384.938263][T16839] active_anon:8544 inactive_anon:0 isolated_anon:0 [ 384.938263][T16839] active_file:3467 inactive_file:39998 isolated_file:0 [ 384.938263][T16839] unevictable:792 dirty:218 writeback:0 [ 384.938263][T16839] slab_reclaimable:11543 slab_unreclaimable:106246 [ 384.938263][T16839] mapped:32202 shmem:4188 pagetables:1406 [ 384.938263][T16839] sec_pagetables:0 bounce:0 [ 384.938263][T16839] kernel_misc_reclaimable:0 [ 384.938263][T16839] free:1317074 free_pcp:13007 free_cma:0 [ 384.963886][T16858] tipc: Enabled bearer , priority 0 [ 385.020708][T16839] Node 0 active_anon:31476kB inactive_anon:0kB active_file:13868kB inactive_file:159792kB unevictable:1632kB isolated(anon):0kB isolated(file):0kB mapped:117508kB dirty:868kB writeback:0kB shmem:15216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13628kB pagetables:5292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.035263][T16858] syzkaller0: entered promiscuous mode [ 385.089857][T16839] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.131904][T16858] syzkaller0: entered allmulticast mode [ 385.133027][T16839] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.176449][T16839] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 385.216279][T16839] Node 0 DMA32 free:1367520kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22792kB inactive_anon:0kB active_file:13868kB inactive_file:157960kB unevictable:1536kB writepending:876kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:42160kB local_pcp:20720kB free_cma:0kB [ 385.257533][T16855] tipc: Resetting bearer [ 385.278930][T16839] lowmem_reserve[]: 0 0 1 1 1 [ 385.284207][T16839] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 385.329003][T16854] tipc: Resetting bearer [ 385.330921][T16839] lowmem_reserve[]: 0 0 0 0 0 [ 385.340090][T16839] Node 1 Normal free:3889800kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17368kB local_pcp:8160kB free_cma:0kB [ 385.373452][T16839] lowmem_reserve[]: 0 0 0 0 0 [ 385.378340][T16839] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 385.392469][T16839] Node 0 DMA32: 2146*4kB (UME) 1979*8kB (UME) 954*16kB (UME) 1234*32kB (UM) 709*64kB (UM) 511*128kB (UM) 386*256kB (U) 233*512kB (U) 99*1024kB (UM) 7*2048kB (UME) 207*4096kB (UM) = 1371648kB [ 385.413980][T16854] tipc: Disabling bearer [ 385.418076][T16839] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 385.434899][T16839] Node 1 Normal: 144*4kB (UME) 57*8kB (UME) 48*16kB (UME) 150*32kB (UME) 51*64kB (UME) 16*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3889800kB [ 385.455755][T16839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.466757][T16839] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.476485][T16839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.487347][T16839] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.502818][T16839] 44842 total pagecache pages [ 385.508933][T16839] 0 pages in swap cache [ 385.513121][T16839] Free swap = 124996kB [ 385.517288][T16839] Total swap = 124996kB [ 385.562052][T16839] 2097051 pages RAM [ 385.604276][T16839] 0 pages HighMem/MovableOnly [ 385.615609][T16873] FAULT_INJECTION: forcing a failure. [ 385.615609][T16873] name failslab, interval 1, probability 0, space 0, times 0 [ 385.628263][T16839] 424452 pages reserved [ 385.632821][T16839] 0 pages cma reserved [ 385.675117][T16873] CPU: 0 UID: 0 PID: 16873 Comm: syz.4.3845 Not tainted syzkaller #0 PREEMPT(full) [ 385.675146][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.675158][T16873] Call Trace: [ 385.675167][T16873] [ 385.675177][T16873] dump_stack_lvl+0x189/0x250 [ 385.675204][T16873] ? __pfx____ratelimit+0x10/0x10 [ 385.675234][T16873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.675256][T16873] ? __pfx__printk+0x10/0x10 [ 385.675285][T16873] ? __pfx___might_resched+0x10/0x10 [ 385.675322][T16873] should_fail_ex+0x414/0x560 [ 385.675348][T16873] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 385.675377][T16873] should_failslab+0xa8/0x100 [ 385.675402][T16873] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 385.675428][T16873] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 385.675450][T16873] ? alloc_inode+0x67/0x1b0 [ 385.675472][T16873] ? __pfx_simple_start_creating+0x10/0x10 [ 385.675501][T16873] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 385.675527][T16873] alloc_inode+0x67/0x1b0 [ 385.675553][T16873] new_inode+0x22/0x170 [ 385.675584][T16873] __debugfs_create_file+0x14d/0x4f0 [ 385.675618][T16873] debugfs_create_file_full+0x3f/0x60 [ 385.675651][T16873] ref_tracker_dir_debugfs+0x14e/0x270 [ 385.675676][T16873] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 385.675735][T16873] ? rcu_is_watching+0x15/0xb0 [ 385.675754][T16873] ? alloc_netdev_mqs+0xa3/0x11b0 [ 385.675782][T16873] ? __raw_spin_lock_init+0x45/0x100 [ 385.675810][T16873] alloc_netdev_mqs+0x26f/0x11b0 [ 385.675829][T16873] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 385.675860][T16873] rtnl_create_link+0x31f/0xd10 [ 385.675901][T16873] rtnl_newlink_create+0x25c/0xb00 [ 385.675937][T16873] ? __lock_acquire+0xab9/0xd20 [ 385.675973][T16873] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 385.676007][T16873] ? __pfx___mutex_lock+0x10/0x10 [ 385.676041][T16873] ? ns_capable+0x8a/0xf0 [ 385.676076][T16873] rtnl_newlink+0x16e4/0x1c80 [ 385.676105][T16873] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 385.676146][T16873] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.676208][T16873] ? kasan_quarantine_put+0xdd/0x220 [ 385.676229][T16873] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.676267][T16873] ? nlmon_xmit+0xb0/0x100 [ 385.676290][T16873] ? kmem_cache_free+0x18f/0x400 [ 385.676322][T16873] ? __local_bh_enable_ip+0x12d/0x1c0 [ 385.676354][T16873] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.676384][T16873] ? __local_bh_enable_ip+0x12d/0x1c0 [ 385.676413][T16873] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 385.676446][T16873] ? __dev_queue_xmit+0x27b/0x3b50 [ 385.676466][T16873] ? __dev_queue_xmit+0x27b/0x3b50 [ 385.676483][T16873] ? __dev_queue_xmit+0x27b/0x3b50 [ 385.676504][T16873] ? __dev_queue_xmit+0x1d79/0x3b50 [ 385.676531][T16873] ? __lock_acquire+0xab9/0xd20 [ 385.676591][T16873] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.676616][T16873] rtnetlink_rcv_msg+0x7cc/0xb70 [ 385.676647][T16873] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 385.676672][T16873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.676694][T16873] ? ref_tracker_free+0x63a/0x7d0 [ 385.676717][T16873] ? __asan_memcpy+0x40/0x70 [ 385.676745][T16873] ? __pfx_ref_tracker_free+0x10/0x10 [ 385.676784][T16873] netlink_rcv_skb+0x205/0x470 [ 385.676813][T16873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.676840][T16873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.676891][T16873] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.676929][T16873] netlink_unicast+0x82f/0x9e0 [ 385.676967][T16873] ? __pfx_netlink_unicast+0x10/0x10 [ 385.676994][T16873] ? netlink_sendmsg+0x642/0xb30 [ 385.677018][T16873] ? skb_put+0x11b/0x210 [ 385.677050][T16873] netlink_sendmsg+0x805/0xb30 [ 385.677090][T16873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.677121][T16873] ? aa_sock_msg_perm+0xf1/0x1d0 [ 385.677149][T16873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.677177][T16873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.677204][T16873] __sock_sendmsg+0x21c/0x270 [ 385.677232][T16873] ____sys_sendmsg+0x505/0x830 [ 385.677270][T16873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.677312][T16873] ? import_iovec+0x74/0xa0 [ 385.677345][T16873] ___sys_sendmsg+0x21f/0x2a0 [ 385.677378][T16873] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.677454][T16873] ? __fget_files+0x2a/0x420 [ 385.677478][T16873] ? __fget_files+0x3a0/0x420 [ 385.677516][T16873] __x64_sys_sendmsg+0x19b/0x260 [ 385.677550][T16873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.677593][T16873] ? __pfx_ksys_write+0x10/0x10 [ 385.677620][T16873] ? do_syscall_64+0xbe/0xfa0 [ 385.677654][T16873] do_syscall_64+0xfa/0xfa0 [ 385.677681][T16873] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.677711][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.677732][T16873] ? clear_bhb_loop+0x60/0xb0 [ 385.677758][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.677778][T16873] RIP: 0033:0x7fda1518eec9 [ 385.677799][T16873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.677817][T16873] RSP: 002b:00007fda15f4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.677841][T16873] RAX: ffffffffffffffda RBX: 00007fda153e5fa0 RCX: 00007fda1518eec9 [ 385.677857][T16873] RDX: 0000000000048010 RSI: 0000200000000280 RDI: 0000000000000003 [ 385.677881][T16873] RBP: 00007fda15f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 385.677895][T16873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.677908][T16873] R13: 00007fda153e6038 R14: 00007fda153e5fa0 R15: 00007ffd86cb7328 [ 385.677948][T16873] [ 386.204564][T16873] debugfs: out of free dentries, can not create file 'netdev@ffff888028f5c610' [ 386.347294][T16886] __nla_validate_parse: 4 callbacks suppressed [ 386.347316][T16886] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3847'. [ 386.624889][T16901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.646236][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3857'. [ 386.672339][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3855'. [ 386.720256][T16899] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.830595][T16899] bridge_slave_1 (unregistering): left allmulticast mode [ 386.844417][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3858'. [ 386.845950][T16899] bridge_slave_1 (unregistering): left promiscuous mode [ 386.865548][T16899] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.030084][T16913] netlink: 'syz.4.3861': attribute type 11 has an invalid length. [ 387.043203][T16914] netlink: 'syz.3.3862': attribute type 1 has an invalid length. [ 387.414908][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3870'. [ 387.515080][T16939] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3873'. [ 387.541038][T16939] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3873'. [ 387.554592][T16942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3874'. [ 387.563909][T16939] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3873'. [ 387.862128][T16956] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3881'. [ 387.983560][T16960] FAULT_INJECTION: forcing a failure. [ 387.983560][T16960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.017402][T16960] CPU: 0 UID: 0 PID: 16960 Comm: syz.0.3882 Not tainted syzkaller #0 PREEMPT(full) [ 388.017432][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.017445][T16960] Call Trace: [ 388.017459][T16960] [ 388.017469][T16960] dump_stack_lvl+0x189/0x250 [ 388.017497][T16960] ? __pfx____ratelimit+0x10/0x10 [ 388.017527][T16960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.017549][T16960] ? __pfx__printk+0x10/0x10 [ 388.017570][T16960] ? __might_fault+0xb0/0x130 [ 388.017612][T16960] should_fail_ex+0x414/0x560 [ 388.017640][T16960] _copy_from_user+0x2d/0xb0 [ 388.017671][T16960] ___sys_sendmsg+0x158/0x2a0 [ 388.017704][T16960] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.017778][T16960] ? __fget_files+0x2a/0x420 [ 388.017802][T16960] ? __fget_files+0x3a0/0x420 [ 388.017839][T16960] __x64_sys_sendmsg+0x19b/0x260 [ 388.017872][T16960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.017912][T16960] ? __pfx_ksys_write+0x10/0x10 [ 388.017939][T16960] ? do_syscall_64+0xbe/0xfa0 [ 388.017974][T16960] do_syscall_64+0xfa/0xfa0 [ 388.018001][T16960] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.018030][T16960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.018050][T16960] ? clear_bhb_loop+0x60/0xb0 [ 388.018084][T16960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.018104][T16960] RIP: 0033:0x7f342cf8eec9 [ 388.018124][T16960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.018143][T16960] RSP: 002b:00007f342ddfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.018167][T16960] RAX: ffffffffffffffda RBX: 00007f342d1e5fa0 RCX: 00007f342cf8eec9 [ 388.018182][T16960] RDX: 0000000000004000 RSI: 0000200000000300 RDI: 0000000000000003 [ 388.018195][T16960] RBP: 00007f342ddfb090 R08: 0000000000000000 R09: 0000000000000000 [ 388.018208][T16960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.018221][T16960] R13: 00007f342d1e6038 R14: 00007f342d1e5fa0 R15: 00007fffd670cc38 [ 388.018258][T16960] [ 388.536023][T16982] tipc: Enabled bearer , priority 0 [ 388.583442][T16982] tipc: Resetting bearer [ 388.693649][T16979] tipc: Disabling bearer [ 388.772690][T16994] FAULT_INJECTION: forcing a failure. [ 388.772690][T16994] name failslab, interval 1, probability 0, space 0, times 0 [ 388.787430][T16994] CPU: 0 UID: 0 PID: 16994 Comm: syz.1.3896 Not tainted syzkaller #0 PREEMPT(full) [ 388.787460][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.787473][T16994] Call Trace: [ 388.787482][T16994] [ 388.787492][T16994] dump_stack_lvl+0x189/0x250 [ 388.787520][T16994] ? __pfx____ratelimit+0x10/0x10 [ 388.787550][T16994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.787572][T16994] ? __pfx__printk+0x10/0x10 [ 388.787591][T16994] ? nfnetlink_rcv+0x282/0x2590 [ 388.787613][T16994] ? ____sys_sendmsg+0x505/0x830 [ 388.787640][T16994] ? __x64_sys_sendmsg+0x19b/0x260 [ 388.787680][T16994] should_fail_ex+0x414/0x560 [ 388.787706][T16994] should_failslab+0xa8/0x100 [ 388.787732][T16994] kmem_cache_alloc_noprof+0x73/0x3c0 [ 388.787753][T16994] ? skb_clone+0x212/0x3a0 [ 388.787787][T16994] skb_clone+0x212/0x3a0 [ 388.787820][T16994] __netlink_deliver_tap+0x404/0x850 [ 388.787861][T16994] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.787890][T16994] netlink_deliver_tap+0x19c/0x1b0 [ 388.787918][T16994] netlink_sendskb+0x68/0x140 [ 388.787944][T16994] netlink_unicast+0x397/0x9e0 [ 388.787965][T16994] ? __asan_memcpy+0x40/0x70 [ 388.788003][T16994] ? __pfx_netlink_unicast+0x10/0x10 [ 388.788038][T16994] netlink_rcv_skb+0x28c/0x470 [ 388.788076][T16994] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 388.788102][T16994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.788140][T16994] ? bpf_lsm_capable+0x9/0x20 [ 388.788161][T16994] ? security_capable+0x7e/0x2e0 [ 388.788199][T16994] nfnetlink_rcv+0x282/0x2590 [ 388.788225][T16994] ? __dev_queue_xmit+0x27b/0x3b50 [ 388.788247][T16994] ? __dev_queue_xmit+0x1d79/0x3b50 [ 388.788278][T16994] ? __dev_queue_xmit+0x27b/0x3b50 [ 388.788312][T16994] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 388.788335][T16994] ? __pfx___dev_queue_xmit+0x10/0x10 [ 388.788372][T16994] ? ref_tracker_free+0x63a/0x7d0 [ 388.788396][T16994] ? __asan_memcpy+0x40/0x70 [ 388.788425][T16994] ? __pfx_ref_tracker_free+0x10/0x10 [ 388.788468][T16994] ? skb_clone+0x246/0x3a0 [ 388.788502][T16994] ? __netlink_deliver_tap+0x807/0x850 [ 388.788528][T16994] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.788561][T16994] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.788597][T16994] netlink_unicast+0x82f/0x9e0 [ 388.788632][T16994] ? __pfx_netlink_unicast+0x10/0x10 [ 388.788658][T16994] ? netlink_sendmsg+0x642/0xb30 [ 388.788682][T16994] ? skb_put+0x11b/0x210 [ 388.788712][T16994] netlink_sendmsg+0x805/0xb30 [ 388.788750][T16994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.788781][T16994] ? aa_sock_msg_perm+0xf1/0x1d0 [ 388.788807][T16994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.788834][T16994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.788860][T16994] __sock_sendmsg+0x21c/0x270 [ 388.788886][T16994] ____sys_sendmsg+0x505/0x830 [ 388.788921][T16994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.788961][T16994] ? import_iovec+0x74/0xa0 [ 388.788994][T16994] ___sys_sendmsg+0x21f/0x2a0 [ 388.789027][T16994] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.789110][T16994] ? __fget_files+0x2a/0x420 [ 388.789133][T16994] ? __fget_files+0x3a0/0x420 [ 388.789171][T16994] __x64_sys_sendmsg+0x19b/0x260 [ 388.789204][T16994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.789245][T16994] ? __pfx_ksys_write+0x10/0x10 [ 388.789273][T16994] ? do_syscall_64+0xbe/0xfa0 [ 388.789307][T16994] do_syscall_64+0xfa/0xfa0 [ 388.789334][T16994] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.789363][T16994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.789384][T16994] ? clear_bhb_loop+0x60/0xb0 [ 388.789411][T16994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.789431][T16994] RIP: 0033:0x7f6f41b8eec9 [ 388.789450][T16994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.789469][T16994] RSP: 002b:00007f6f42aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.789492][T16994] RAX: ffffffffffffffda RBX: 00007f6f41de5fa0 RCX: 00007f6f41b8eec9 [ 388.789507][T16994] RDX: 0000000004000000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 388.789521][T16994] RBP: 00007f6f42aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 388.789534][T16994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.789546][T16994] R13: 00007f6f41de6038 R14: 00007f6f41de5fa0 R15: 00007ffeff521498 [ 388.789584][T16994] [ 389.771052][T17021] bond8 (unregistering): Released all slaves [ 390.319419][T17049] FAULT_INJECTION: forcing a failure. [ 390.319419][T17049] name failslab, interval 1, probability 0, space 0, times 0 [ 390.371195][T17049] CPU: 0 UID: 0 PID: 17049 Comm: syz.3.3916 Not tainted syzkaller #0 PREEMPT(full) [ 390.371226][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.371238][T17049] Call Trace: [ 390.371247][T17049] [ 390.371256][T17049] dump_stack_lvl+0x189/0x250 [ 390.371283][T17049] ? __pfx____ratelimit+0x10/0x10 [ 390.371312][T17049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.371334][T17049] ? __pfx__printk+0x10/0x10 [ 390.371351][T17049] ? genl_rcv+0x28/0x40 [ 390.371369][T17049] ? ____sys_sendmsg+0x505/0x830 [ 390.371395][T17049] ? __x64_sys_sendmsg+0x19b/0x260 [ 390.371434][T17049] should_fail_ex+0x414/0x560 [ 390.371460][T17049] should_failslab+0xa8/0x100 [ 390.371486][T17049] kmem_cache_alloc_noprof+0x73/0x3c0 [ 390.371507][T17049] ? skb_clone+0x212/0x3a0 [ 390.371540][T17049] skb_clone+0x212/0x3a0 [ 390.371574][T17049] __netlink_deliver_tap+0x404/0x850 [ 390.371615][T17049] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.371644][T17049] netlink_deliver_tap+0x19c/0x1b0 [ 390.371672][T17049] netlink_sendskb+0x68/0x140 [ 390.371700][T17049] netlink_unicast+0x397/0x9e0 [ 390.371720][T17049] ? __asan_memcpy+0x40/0x70 [ 390.371758][T17049] ? __pfx_netlink_unicast+0x10/0x10 [ 390.371794][T17049] netlink_rcv_skb+0x28c/0x470 [ 390.371815][T17049] ? __lock_acquire+0xab9/0xd20 [ 390.371843][T17049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.371865][T17049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.371921][T17049] ? down_read+0x1ad/0x2e0 [ 390.371948][T17049] genl_rcv+0x28/0x40 [ 390.371964][T17049] netlink_unicast+0x82f/0x9e0 [ 390.371998][T17049] ? __pfx_netlink_unicast+0x10/0x10 [ 390.372026][T17049] ? netlink_sendmsg+0x642/0xb30 [ 390.372049][T17049] ? skb_put+0x11b/0x210 [ 390.372081][T17049] netlink_sendmsg+0x805/0xb30 [ 390.372121][T17049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.372151][T17049] ? aa_sock_msg_perm+0xf1/0x1d0 [ 390.372180][T17049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.372208][T17049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.372236][T17049] __sock_sendmsg+0x21c/0x270 [ 390.372263][T17049] ____sys_sendmsg+0x505/0x830 [ 390.372299][T17049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.372339][T17049] ? import_iovec+0x74/0xa0 [ 390.372373][T17049] ___sys_sendmsg+0x21f/0x2a0 [ 390.372405][T17049] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.372482][T17049] ? __fget_files+0x2a/0x420 [ 390.372505][T17049] ? __fget_files+0x3a0/0x420 [ 390.372543][T17049] __x64_sys_sendmsg+0x19b/0x260 [ 390.372575][T17049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.372614][T17049] ? __pfx_ksys_write+0x10/0x10 [ 390.372642][T17049] ? do_syscall_64+0xbe/0xfa0 [ 390.372678][T17049] do_syscall_64+0xfa/0xfa0 [ 390.372705][T17049] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.372734][T17049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.372754][T17049] ? clear_bhb_loop+0x60/0xb0 [ 390.372780][T17049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.372800][T17049] RIP: 0033:0x7fa131f8eec9 [ 390.372819][T17049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.372837][T17049] RSP: 002b:00007fa132d66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.372861][T17049] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8eec9 [ 390.372877][T17049] RDX: 0000000004008800 RSI: 0000200000000080 RDI: 0000000000000004 [ 390.372899][T17049] RBP: 00007fa132d66090 R08: 0000000000000000 R09: 0000000000000000 [ 390.372912][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.372925][T17049] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 390.372961][T17049] [ 390.879974][T17060] netlink: 'syz.4.3919': attribute type 32 has an invalid length. [ 390.941537][T17060] bond13: Setting coupled_control to off (0) [ 390.948100][T17060] netlink: 'syz.4.3919': attribute type 32 has an invalid length. [ 390.979636][T17060] bond14: Setting coupled_control to off (0) [ 390.986172][T17060] netlink: 'syz.4.3919': attribute type 32 has an invalid length. [ 391.041780][T17060] bond15: Setting coupled_control to off (0) [ 391.048485][T17060] netlink: 'syz.4.3919': attribute type 32 has an invalid length. [ 391.082334][T17060] bond16: Setting coupled_control to off (0) [ 391.089083][T17060] netlink: 'syz.4.3919': attribute type 32 has an invalid length. [ 391.156114][T17060] bond17: Setting coupled_control to off (0) [ 391.168891][T17060] netlink: 'syz.4.3919': attribute type 32 has an invalid length. [ 391.239209][T17060] bond18: Setting coupled_control to off (0) [ 391.245818][T17060] netlink: 'syz.4.3919': attribute type 32 has an invalid length. [ 391.298296][T17060] bond19: Setting coupled_control to off (0) [ 391.305634][T17060] netlink: 'syz.4.3919': attribute type 32 has an invalid length. [ 391.338490][T17086] netlink: 'syz.2.3927': attribute type 3 has an invalid length. [ 391.342424][T17060] bond20: Setting coupled_control to off (0) [ 391.353502][T17060] __nla_validate_parse: 18 callbacks suppressed [ 391.353521][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 391.402170][T17081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3926'. [ 391.411827][T17060] bond21: Setting coupled_control to off (0) [ 391.412281][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 391.456500][T17060] bond22: Setting coupled_control to off (0) [ 391.463242][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 391.506685][T17060] bond23: Setting coupled_control to off (0) [ 391.513415][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 391.572857][T17060] bond24: Setting coupled_control to off (0) [ 391.580260][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 391.633292][T17060] bond25: Setting coupled_control to off (0) [ 391.641138][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 391.656565][T17102] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3929'. [ 391.692976][T17060] bond26: Setting coupled_control to off (0) [ 391.728617][T17105] FAULT_INJECTION: forcing a failure. [ 391.728617][T17105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.762179][T17105] CPU: 0 UID: 0 PID: 17105 Comm: syz.0.3933 Not tainted syzkaller #0 PREEMPT(full) [ 391.762211][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 391.762224][T17105] Call Trace: [ 391.762237][T17105] [ 391.762247][T17105] dump_stack_lvl+0x189/0x250 [ 391.762275][T17105] ? __pfx____ratelimit+0x10/0x10 [ 391.762305][T17105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.762326][T17105] ? __pfx__printk+0x10/0x10 [ 391.762348][T17105] ? __might_fault+0xb0/0x130 [ 391.762384][T17105] should_fail_ex+0x414/0x560 [ 391.762413][T17105] _copy_from_user+0x2d/0xb0 [ 391.762443][T17105] ___sys_sendmsg+0x158/0x2a0 [ 391.762476][T17105] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.762548][T17105] ? __fget_files+0x2a/0x420 [ 391.762571][T17105] ? __fget_files+0x3a0/0x420 [ 391.762608][T17105] __x64_sys_sendmsg+0x19b/0x260 [ 391.762640][T17105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.762680][T17105] ? __pfx_ksys_write+0x10/0x10 [ 391.762706][T17105] ? do_syscall_64+0xbe/0xfa0 [ 391.762740][T17105] do_syscall_64+0xfa/0xfa0 [ 391.762767][T17105] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.762795][T17105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.762815][T17105] ? clear_bhb_loop+0x60/0xb0 [ 391.762841][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.762859][T17105] RIP: 0033:0x7f342cf8eec9 [ 391.762879][T17105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.762896][T17105] RSP: 002b:00007f342ddfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.762919][T17105] RAX: ffffffffffffffda RBX: 00007f342d1e5fa0 RCX: 00007f342cf8eec9 [ 391.762935][T17105] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 391.762948][T17105] RBP: 00007f342ddfb090 R08: 0000000000000000 R09: 0000000000000000 [ 391.762961][T17105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.762973][T17105] R13: 00007f342d1e6038 R14: 00007f342d1e5fa0 R15: 00007fffd670cc38 [ 391.763009][T17105] [ 392.111878][T17113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3935'. [ 392.124109][T17113] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3935'. [ 392.604753][T17134] tipc: Trying to set illegal importance in message [ 392.923579][T17153] x_tables: duplicate underflow at hook 1 [ 393.021785][T17158] validate_nla: 7 callbacks suppressed [ 393.021805][T17158] netlink: 'syz.0.3954': attribute type 1 has an invalid length. [ 393.072477][T17162] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 393.561958][T17176] FAULT_INJECTION: forcing a failure. [ 393.561958][T17176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.575905][T17176] CPU: 0 UID: 0 PID: 17176 Comm: syz.3.3964 Not tainted syzkaller #0 PREEMPT(full) [ 393.575934][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 393.575947][T17176] Call Trace: [ 393.575956][T17176] [ 393.575965][T17176] dump_stack_lvl+0x189/0x250 [ 393.575995][T17176] ? __pfx____ratelimit+0x10/0x10 [ 393.576024][T17176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.576046][T17176] ? __pfx__printk+0x10/0x10 [ 393.576084][T17176] should_fail_ex+0x414/0x560 [ 393.576112][T17176] _copy_to_user+0x31/0xb0 [ 393.576144][T17176] simple_read_from_buffer+0xe1/0x170 [ 393.576174][T17176] proc_fail_nth_read+0x1b3/0x220 [ 393.576208][T17176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.576242][T17176] ? rw_verify_area+0x2a6/0x4d0 [ 393.576262][T17176] ? __lock_acquire+0xab9/0xd20 [ 393.576288][T17176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.576320][T17176] vfs_read+0x1fd/0xa30 [ 393.576340][T17176] ? fdget_pos+0x247/0x320 [ 393.576370][T17176] ? __pfx___mutex_lock+0x10/0x10 [ 393.576392][T17176] ? __pfx_vfs_read+0x10/0x10 [ 393.576415][T17176] ? __fget_files+0x2a/0x420 [ 393.576446][T17176] ? __fget_files+0x3a0/0x420 [ 393.576468][T17176] ? __fget_files+0x2a/0x420 [ 393.576503][T17176] ksys_read+0x145/0x250 [ 393.576527][T17176] ? __pfx_ksys_read+0x10/0x10 [ 393.576554][T17176] ? do_syscall_64+0xbe/0xfa0 [ 393.576588][T17176] do_syscall_64+0xfa/0xfa0 [ 393.576616][T17176] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.576644][T17176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.576664][T17176] ? clear_bhb_loop+0x60/0xb0 [ 393.576691][T17176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.576710][T17176] RIP: 0033:0x7fa131f8d8dc [ 393.576729][T17176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 393.576747][T17176] RSP: 002b:00007fa132d66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.576769][T17176] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8d8dc [ 393.576799][T17176] RDX: 000000000000000f RSI: 00007fa132d660a0 RDI: 0000000000000004 [ 393.576812][T17176] RBP: 00007fa132d66090 R08: 0000000000000000 R09: 0000000000000000 [ 393.576825][T17176] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 393.576839][T17176] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 393.576877][T17176] [ 394.032001][T17187] netlink: 'syz.0.3968': attribute type 11 has an invalid length. [ 394.240176][T17199] FAULT_INJECTION: forcing a failure. [ 394.240176][T17199] name failslab, interval 1, probability 0, space 0, times 0 [ 394.280977][T17199] CPU: 1 UID: 0 PID: 17199 Comm: syz.3.3974 Not tainted syzkaller #0 PREEMPT(full) [ 394.281008][T17199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.281021][T17199] Call Trace: [ 394.281030][T17199] [ 394.281040][T17199] dump_stack_lvl+0x189/0x250 [ 394.281068][T17199] ? __pfx____ratelimit+0x10/0x10 [ 394.281098][T17199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.281120][T17199] ? __pfx__printk+0x10/0x10 [ 394.281144][T17199] ? __lock_acquire+0xab9/0xd20 [ 394.281184][T17199] should_fail_ex+0x414/0x560 [ 394.281212][T17199] should_failslab+0xa8/0x100 [ 394.281239][T17199] kmem_cache_alloc_noprof+0x73/0x3c0 [ 394.281261][T17199] ? skb_clone+0x212/0x3a0 [ 394.281296][T17199] skb_clone+0x212/0x3a0 [ 394.281331][T17199] __netlink_deliver_tap+0x404/0x850 [ 394.281373][T17199] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.281402][T17199] netlink_deliver_tap+0x19c/0x1b0 [ 394.281430][T17199] netlink_dump+0x92b/0xe90 [ 394.281471][T17199] ? __pfx_netlink_dump+0x10/0x10 [ 394.281518][T17199] ? kmem_cache_free+0x18f/0x400 [ 394.281548][T17199] netlink_recvmsg+0x676/0xa30 [ 394.281587][T17199] ? __pfx_netlink_recvmsg+0x10/0x10 [ 394.281621][T17199] ? aa_sock_msg_perm+0xf1/0x1d0 [ 394.281650][T17199] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 394.281677][T17199] ? security_socket_recvmsg+0x7e/0x2e0 [ 394.281707][T17199] ? __pfx_netlink_recvmsg+0x10/0x10 [ 394.281734][T17199] sock_recvmsg+0x22c/0x270 [ 394.281764][T17199] ____sys_recvmsg+0x1c9/0x460 [ 394.281805][T17199] ? __pfx_____sys_recvmsg+0x10/0x10 [ 394.281863][T17199] ? import_iovec+0x74/0xa0 [ 394.281897][T17199] ___sys_recvmsg+0x1b5/0x510 [ 394.281934][T17199] ? __pfx____sys_recvmsg+0x10/0x10 [ 394.281996][T17199] ? __fget_files+0x3a0/0x420 [ 394.282035][T17199] do_recvmmsg+0x307/0x770 [ 394.282075][T17199] ? __pfx_do_recvmmsg+0x10/0x10 [ 394.282120][T17199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 394.282163][T17199] __x64_sys_recvmmsg+0x190/0x240 [ 394.282198][T17199] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 394.282235][T17199] ? do_syscall_64+0xbe/0xfa0 [ 394.282269][T17199] do_syscall_64+0xfa/0xfa0 [ 394.282297][T17199] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.282326][T17199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.282347][T17199] ? clear_bhb_loop+0x60/0xb0 [ 394.282373][T17199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.282393][T17199] RIP: 0033:0x7fa131f8eec9 [ 394.282413][T17199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.282430][T17199] RSP: 002b:00007fa132d66038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 394.282453][T17199] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8eec9 [ 394.282468][T17199] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 394.282481][T17199] RBP: 00007fa132d66090 R08: 0000000000000000 R09: 0000000000000000 [ 394.282495][T17199] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 394.282508][T17199] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 394.282546][T17199] [ 394.669633][T17206] netlink: 'syz.0.3978': attribute type 1 has an invalid length. [ 394.688411][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 395.799186][T17253] netlink: 'syz.0.3993': attribute type 83 has an invalid length. [ 396.224244][T17275] netlink: 'syz.4.3999': attribute type 12 has an invalid length. [ 396.438374][T17287] syzkaller1: entered promiscuous mode [ 396.444199][T17287] syzkaller1: entered allmulticast mode [ 396.771378][T17299] team0: Device ip6gre2 is of different type [ 397.007434][T17311] __nla_validate_parse: 11 callbacks suppressed [ 397.007457][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4017'. [ 397.288676][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4020'. [ 397.346519][T17325] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4020'. [ 397.643699][T17348] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4027'. [ 397.708569][T17351] x_tables: duplicate underflow at hook 1 [ 397.924923][T17361] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4031'. [ 397.955507][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4031'. [ 397.984890][T17365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4035'. [ 398.024936][T17365] bond27: option xmit_hash_policy: invalid value (64) [ 398.036249][T17365] bond27 (unregistering): Released all slaves [ 398.080208][T17367] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.4035'. [ 398.310605][T17381] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4041'. [ 398.505442][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4043'. [ 398.760200][T17399] netlink: 'syz.2.4047': attribute type 1 has an invalid length. [ 398.964642][T17413] sctp: [Deprecated]: syz.1.4051 (pid 17413) Use of int in maxseg socket option. [ 398.964642][T17413] Use struct sctp_assoc_value instead [ 399.405592][T17437] netlink: 'syz.3.4063': attribute type 1 has an invalid length. [ 399.921060][T17417] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 400.402794][T17494] FAULT_INJECTION: forcing a failure. [ 400.402794][T17494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.416359][T17494] CPU: 1 UID: 0 PID: 17494 Comm: syz.4.4082 Not tainted syzkaller #0 PREEMPT(full) [ 400.416389][T17494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.416401][T17494] Call Trace: [ 400.416410][T17494] [ 400.416419][T17494] dump_stack_lvl+0x189/0x250 [ 400.416446][T17494] ? __pfx____ratelimit+0x10/0x10 [ 400.416475][T17494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.416496][T17494] ? __pfx__printk+0x10/0x10 [ 400.416517][T17494] ? __might_fault+0xb0/0x130 [ 400.416551][T17494] should_fail_ex+0x414/0x560 [ 400.416579][T17494] _copy_from_user+0x2d/0xb0 [ 400.416607][T17494] do_ip_getsockopt+0x25f/0x1b60 [ 400.416639][T17494] ? __might_fault+0xb0/0x130 [ 400.416663][T17494] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 400.416686][T17494] ? aa_label_sk_perm+0x4cd/0x630 [ 400.416721][T17494] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 400.416787][T17494] ? __lock_acquire+0xab9/0xd20 [ 400.416829][T17494] ip_getsockopt+0xbb/0x220 [ 400.416863][T17494] ? __pfx_ip_getsockopt+0x10/0x10 [ 400.416893][T17494] ? sock_common_getsockopt+0x2d/0xb0 [ 400.416916][T17494] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 400.416942][T17494] do_sock_getsockopt+0x36f/0x450 [ 400.416973][T17494] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 400.417002][T17494] ? do_syscall_64+0xa0/0xfa0 [ 400.417029][T17494] ? __fget_files+0x2a/0x420 [ 400.417052][T17494] ? __fget_files+0x3a0/0x420 [ 400.417075][T17494] ? __fget_files+0x2a/0x420 [ 400.417108][T17494] __x64_sys_getsockopt+0x1a5/0x250 [ 400.417135][T17494] ? do_syscall_64+0xa0/0xfa0 [ 400.417165][T17494] ? do_syscall_64+0xa0/0xfa0 [ 400.417198][T17494] do_syscall_64+0xfa/0xfa0 [ 400.417225][T17494] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.417253][T17494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.417274][T17494] ? clear_bhb_loop+0x60/0xb0 [ 400.417304][T17494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.417324][T17494] RIP: 0033:0x7fda1518eec9 [ 400.417343][T17494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.417362][T17494] RSP: 002b:00007fda15f4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 400.417386][T17494] RAX: ffffffffffffffda RBX: 00007fda153e5fa0 RCX: 00007fda1518eec9 [ 400.417401][T17494] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 400.417414][T17494] RBP: 00007fda15f4e090 R08: 0000200000000300 R09: 0000000000000000 [ 400.417428][T17494] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 400.417442][T17494] R13: 00007fda153e6038 R14: 00007fda153e5fa0 R15: 00007ffd86cb7328 [ 400.417479][T17494] [ 400.749411][T17499] netlink: 'syz.0.4083': attribute type 30 has an invalid length. [ 400.810609][T17499] bond8: option arp_missed_max: invalid value (0) [ 400.817732][T17499] bond8: option arp_missed_max: allowed values 1 - 255 [ 400.831613][T17499] bond8 (unregistering): Released all slaves [ 400.987960][T17513] netlink: 'syz.3.4089': attribute type 1 has an invalid length. [ 401.060005][T17513] veth19: entered promiscuous mode [ 401.713610][T17548] netlink: 'syz.0.4103': attribute type 1 has an invalid length. [ 401.922911][T17561] x_tables: duplicate underflow at hook 2 [ 401.931794][T17548] veth15: entered promiscuous mode [ 402.216059][T17574] FAULT_INJECTION: forcing a failure. [ 402.216059][T17574] name failslab, interval 1, probability 0, space 0, times 0 [ 402.281155][T17574] CPU: 1 UID: 0 PID: 17574 Comm: syz.1.4109 Not tainted syzkaller #0 PREEMPT(full) [ 402.281185][T17574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 402.281198][T17574] Call Trace: [ 402.281207][T17574] [ 402.281215][T17574] dump_stack_lvl+0x189/0x250 [ 402.281242][T17574] ? __pfx____ratelimit+0x10/0x10 [ 402.281270][T17574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.281292][T17574] ? __pfx__printk+0x10/0x10 [ 402.281319][T17574] ? __pfx___might_resched+0x10/0x10 [ 402.281353][T17574] should_fail_ex+0x414/0x560 [ 402.281381][T17574] should_failslab+0xa8/0x100 [ 402.281408][T17574] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 402.281431][T17574] ? __alloc_skb+0x112/0x2d0 [ 402.281461][T17574] __alloc_skb+0x112/0x2d0 [ 402.281493][T17574] netlink_sendmsg+0x5c6/0xb30 [ 402.281531][T17574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.281562][T17574] ? aa_sock_msg_perm+0xf1/0x1d0 [ 402.281591][T17574] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.281616][T17574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.281644][T17574] __sock_sendmsg+0x21c/0x270 [ 402.281670][T17574] ____sys_sendmsg+0x505/0x830 [ 402.281705][T17574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.281755][T17574] ? import_iovec+0x74/0xa0 [ 402.281788][T17574] ___sys_sendmsg+0x21f/0x2a0 [ 402.281819][T17574] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.281891][T17574] ? __fget_files+0x2a/0x420 [ 402.281914][T17574] ? __fget_files+0x3a0/0x420 [ 402.281949][T17574] __x64_sys_sendmsg+0x19b/0x260 [ 402.281981][T17574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.282020][T17574] ? __pfx_ksys_write+0x10/0x10 [ 402.282048][T17574] ? do_syscall_64+0xbe/0xfa0 [ 402.282081][T17574] do_syscall_64+0xfa/0xfa0 [ 402.282108][T17574] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.282137][T17574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.282158][T17574] ? clear_bhb_loop+0x60/0xb0 [ 402.282183][T17574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.282202][T17574] RIP: 0033:0x7f6f41b8eec9 [ 402.282220][T17574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.282238][T17574] RSP: 002b:00007f6f42a85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.282262][T17574] RAX: ffffffffffffffda RBX: 00007f6f41de6090 RCX: 00007f6f41b8eec9 [ 402.282278][T17574] RDX: 0000000004008800 RSI: 0000200000000080 RDI: 0000000000000004 [ 402.282292][T17574] RBP: 00007f6f42a85090 R08: 0000000000000000 R09: 0000000000000000 [ 402.282306][T17574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.282319][T17574] R13: 00007f6f41de6128 R14: 00007f6f41de6090 R15: 00007ffeff521498 [ 402.282356][T17574] [ 402.822577][T17583] x_tables: duplicate underflow at hook 1 [ 403.431449][T17604] __nla_validate_parse: 10 callbacks suppressed [ 403.431476][T17604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4121'. [ 403.648608][T17621] FAULT_INJECTION: forcing a failure. [ 403.648608][T17621] name failslab, interval 1, probability 0, space 0, times 0 [ 403.660190][T17618] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 403.671383][T17621] CPU: 1 UID: 0 PID: 17621 Comm: syz.2.4128 Not tainted syzkaller #0 PREEMPT(full) [ 403.671414][T17621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.671427][T17621] Call Trace: [ 403.671436][T17621] [ 403.671446][T17621] dump_stack_lvl+0x189/0x250 [ 403.671482][T17621] ? __pfx____ratelimit+0x10/0x10 [ 403.671513][T17621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.671535][T17621] ? __pfx__printk+0x10/0x10 [ 403.671560][T17621] ? __pfx___might_resched+0x10/0x10 [ 403.671590][T17621] ? fs_reclaim_acquire+0x7d/0x100 [ 403.671622][T17621] should_fail_ex+0x414/0x560 [ 403.671651][T17621] should_failslab+0xa8/0x100 [ 403.671678][T17621] __kmalloc_cache_noprof+0x70/0x3d0 [ 403.671699][T17621] ? alloc_netdev_mqs+0xb90/0x11b0 [ 403.671718][T17621] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 403.671749][T17621] alloc_netdev_mqs+0xb90/0x11b0 [ 403.671786][T17621] rtnl_create_link+0x31f/0xd10 [ 403.671813][T17621] rtnl_newlink_create+0x25c/0xb00 [ 403.671844][T17621] ? __lock_acquire+0xab9/0xd20 [ 403.671875][T17621] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 403.671904][T17621] ? __pfx___mutex_lock+0x10/0x10 [ 403.671934][T17621] ? ns_capable+0x8a/0xf0 [ 403.671965][T17621] rtnl_newlink+0x16e4/0x1c80 [ 403.671989][T17621] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 403.672020][T17621] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.672072][T17621] ? kasan_quarantine_put+0xdd/0x220 [ 403.672089][T17621] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.672122][T17621] ? nlmon_xmit+0xb0/0x100 [ 403.672144][T17621] ? kmem_cache_free+0x18f/0x400 [ 403.672172][T17621] ? __local_bh_enable_ip+0x12d/0x1c0 [ 403.672199][T17621] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.672226][T17621] ? __local_bh_enable_ip+0x12d/0x1c0 [ 403.672251][T17621] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 403.672282][T17621] ? __dev_queue_xmit+0x27b/0x3b50 [ 403.672299][T17621] ? __dev_queue_xmit+0x27b/0x3b50 [ 403.672314][T17621] ? __dev_queue_xmit+0x27b/0x3b50 [ 403.672333][T17621] ? __dev_queue_xmit+0x1d79/0x3b50 [ 403.672356][T17621] ? __lock_acquire+0xab9/0xd20 [ 403.672409][T17621] ? __pfx_rtnl_newlink+0x10/0x10 [ 403.672431][T17621] rtnetlink_rcv_msg+0x7cc/0xb70 [ 403.672459][T17621] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 403.672480][T17621] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.672501][T17621] ? ref_tracker_free+0x63a/0x7d0 [ 403.672523][T17621] ? __asan_memcpy+0x40/0x70 [ 403.672548][T17621] ? __pfx_ref_tracker_free+0x10/0x10 [ 403.672580][T17621] netlink_rcv_skb+0x205/0x470 [ 403.672606][T17621] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.672630][T17621] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.672666][T17621] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.672699][T17621] netlink_unicast+0x82f/0x9e0 [ 403.672731][T17621] ? __pfx_netlink_unicast+0x10/0x10 [ 403.672763][T17621] ? netlink_sendmsg+0x642/0xb30 [ 403.672784][T17621] ? skb_put+0x11b/0x210 [ 403.672813][T17621] netlink_sendmsg+0x805/0xb30 [ 403.672847][T17621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.672875][T17621] ? aa_sock_msg_perm+0xf1/0x1d0 [ 403.672900][T17621] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.672925][T17621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.672950][T17621] __sock_sendmsg+0x21c/0x270 [ 403.672974][T17621] ____sys_sendmsg+0x505/0x830 [ 403.673006][T17621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.673042][T17621] ? import_iovec+0x74/0xa0 [ 403.673072][T17621] ___sys_sendmsg+0x21f/0x2a0 [ 403.673100][T17621] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.673168][T17621] ? __fget_files+0x2a/0x420 [ 403.673189][T17621] ? __fget_files+0x3a0/0x420 [ 403.673222][T17621] __x64_sys_sendmsg+0x19b/0x260 [ 403.673251][T17621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.673288][T17621] ? __pfx_ksys_write+0x10/0x10 [ 403.673312][T17621] ? do_syscall_64+0xbe/0xfa0 [ 403.673342][T17621] do_syscall_64+0xfa/0xfa0 [ 403.673365][T17621] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.673390][T17621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.673408][T17621] ? clear_bhb_loop+0x60/0xb0 [ 403.673431][T17621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.673449][T17621] RIP: 0033:0x7fbabc38eec9 [ 403.673466][T17621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.673483][T17621] RSP: 002b:00007fbabd250038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.673504][T17621] RAX: ffffffffffffffda RBX: 00007fbabc5e5fa0 RCX: 00007fbabc38eec9 [ 403.673518][T17621] RDX: 0000000000048010 RSI: 0000200000000280 RDI: 0000000000000003 [ 403.673531][T17621] RBP: 00007fbabd250090 R08: 0000000000000000 R09: 0000000000000000 [ 403.673543][T17621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.673554][T17621] R13: 00007fbabc5e6038 R14: 00007fbabc5e5fa0 R15: 00007fff1d7bae48 [ 403.673588][T17621] [ 403.754919][T17626] x_tables: duplicate underflow at hook 1 [ 403.797505][T17623] wg1 speed is unknown, defaulting to 1000 [ 404.878501][T17664] FAULT_INJECTION: forcing a failure. [ 404.878501][T17664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.892025][T17664] CPU: 0 UID: 0 PID: 17664 Comm: syz.2.4141 Not tainted syzkaller #0 PREEMPT(full) [ 404.892054][T17664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.892067][T17664] Call Trace: [ 404.892076][T17664] [ 404.892086][T17664] dump_stack_lvl+0x189/0x250 [ 404.892115][T17664] ? __pfx____ratelimit+0x10/0x10 [ 404.892145][T17664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.892167][T17664] ? __pfx__printk+0x10/0x10 [ 404.892190][T17664] ? __might_fault+0xb0/0x130 [ 404.892226][T17664] should_fail_ex+0x414/0x560 [ 404.892255][T17664] _copy_from_iter+0x1de/0x1790 [ 404.892285][T17664] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 404.892323][T17664] ? policy_nodemask+0x27c/0x720 [ 404.892348][T17664] ? __pfx__copy_from_iter+0x10/0x10 [ 404.892381][T17664] ? set_page_refcounted+0xa0/0x1e0 [ 404.892406][T17664] ? page_copy_sane+0x4e/0x280 [ 404.892434][T17664] copy_page_from_iter+0xdd/0x170 [ 404.892466][T17664] tun_get_user+0x1d7b/0x3e90 [ 404.892502][T17664] ? tun_get_user+0x6f6/0x3e90 [ 404.892537][T17664] ? aa_file_perm+0x44d/0x1550 [ 404.892565][T17664] ? __pfx_tun_get_user+0x10/0x10 [ 404.892589][T17664] ? _parse_integer_limit+0x1ae/0x1f0 [ 404.892623][T17664] ? __lock_acquire+0xab9/0xd20 [ 404.892660][T17664] ? ref_tracker_alloc+0x318/0x460 [ 404.892680][T17664] ? __lock_acquire+0xab9/0xd20 [ 404.892707][T17664] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 404.892744][T17664] ? tun_get+0x1c/0x2f0 [ 404.892776][T17664] ? tun_get+0x1c/0x2f0 [ 404.892801][T17664] ? tun_get+0x1c/0x2f0 [ 404.892831][T17664] tun_chr_write_iter+0x113/0x200 [ 404.892860][T17664] vfs_write+0x5c9/0xb30 [ 404.892889][T17664] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 404.892915][T17664] ? __pfx_vfs_write+0x10/0x10 [ 404.892950][T17664] ? __fget_files+0x2a/0x420 [ 404.892986][T17664] ksys_write+0x145/0x250 [ 404.893011][T17664] ? __pfx_ksys_write+0x10/0x10 [ 404.893037][T17664] ? do_syscall_64+0xbe/0xfa0 [ 404.893072][T17664] do_syscall_64+0xfa/0xfa0 [ 404.893098][T17664] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.893127][T17664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.893148][T17664] ? clear_bhb_loop+0x60/0xb0 [ 404.893173][T17664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.893193][T17664] RIP: 0033:0x7fbabc38d97f [ 404.893212][T17664] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 404.893231][T17664] RSP: 002b:00007fbabd250000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 404.893255][T17664] RAX: ffffffffffffffda RBX: 00007fbabc5e5fa0 RCX: 00007fbabc38d97f [ 404.893271][T17664] RDX: 0000000000000082 RSI: 0000200000000140 RDI: 00000000000000c8 [ 404.893285][T17664] RBP: 00007fbabd250090 R08: 0000000000000000 R09: 0000000000000000 [ 404.893298][T17664] R10: 0000000000000082 R11: 0000000000000293 R12: 0000000000000001 [ 404.893311][T17664] R13: 00007fbabc5e6038 R14: 00007fbabc5e5fa0 R15: 00007fff1d7bae48 [ 404.893348][T17664] [ 405.570473][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4147'. [ 405.736833][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 405.957547][T17693] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4152'. [ 406.159687][T17709] FAULT_INJECTION: forcing a failure. [ 406.159687][T17709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.184814][T17707] wg1 speed is unknown, defaulting to 1000 [ 406.217277][T17709] CPU: 0 UID: 0 PID: 17709 Comm: syz.0.4157 Not tainted syzkaller #0 PREEMPT(full) [ 406.217309][T17709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 406.217322][T17709] Call Trace: [ 406.217332][T17709] [ 406.217343][T17709] dump_stack_lvl+0x189/0x250 [ 406.217371][T17709] ? __pfx____ratelimit+0x10/0x10 [ 406.217401][T17709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.217423][T17709] ? __pfx__printk+0x10/0x10 [ 406.217445][T17709] ? __might_fault+0xb0/0x130 [ 406.217482][T17709] should_fail_ex+0x414/0x560 [ 406.217511][T17709] _copy_from_user+0x2d/0xb0 [ 406.217541][T17709] do_ip_getsockopt+0x25f/0x1b60 [ 406.217573][T17709] ? __might_fault+0xb0/0x130 [ 406.217598][T17709] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 406.217628][T17709] ? aa_label_sk_perm+0x4cd/0x630 [ 406.217665][T17709] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 406.217723][T17709] ? __lock_acquire+0xab9/0xd20 [ 406.217773][T17709] ip_getsockopt+0xbb/0x220 [ 406.217808][T17709] ? __pfx_ip_getsockopt+0x10/0x10 [ 406.217838][T17709] ? sock_common_getsockopt+0x2d/0xb0 [ 406.217859][T17709] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 406.217885][T17709] do_sock_getsockopt+0x36f/0x450 [ 406.217916][T17709] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 406.217941][T17709] ? do_syscall_64+0xa0/0xfa0 [ 406.217970][T17709] ? __fget_files+0x2a/0x420 [ 406.217993][T17709] ? __fget_files+0x3a0/0x420 [ 406.218012][T17709] ? __fget_files+0x2a/0x420 [ 406.218045][T17709] __x64_sys_getsockopt+0x1a5/0x250 [ 406.218072][T17709] ? do_syscall_64+0xa0/0xfa0 [ 406.218103][T17709] ? do_syscall_64+0xa0/0xfa0 [ 406.218136][T17709] do_syscall_64+0xfa/0xfa0 [ 406.218164][T17709] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.218197][T17709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.218216][T17709] ? clear_bhb_loop+0x60/0xb0 [ 406.218242][T17709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.218262][T17709] RIP: 0033:0x7f342cf8eec9 [ 406.218280][T17709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.218298][T17709] RSP: 002b:00007f342ddfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 406.218322][T17709] RAX: ffffffffffffffda RBX: 00007f342d1e5fa0 RCX: 00007f342cf8eec9 [ 406.218337][T17709] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 406.218350][T17709] RBP: 00007f342ddfb090 R08: 0000200000000300 R09: 0000000000000000 [ 406.218365][T17709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.218378][T17709] R13: 00007f342d1e6038 R14: 00007f342d1e5fa0 R15: 00007fffd670cc38 [ 406.218415][T17709] [ 406.811742][T17730] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4165'. [ 407.192422][T17743] FAULT_INJECTION: forcing a failure. [ 407.192422][T17743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.259980][T17743] CPU: 1 UID: 0 PID: 17743 Comm: syz.3.4170 Not tainted syzkaller #0 PREEMPT(full) [ 407.260010][T17743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.260023][T17743] Call Trace: [ 407.260031][T17743] [ 407.260041][T17743] dump_stack_lvl+0x189/0x250 [ 407.260069][T17743] ? __pfx____ratelimit+0x10/0x10 [ 407.260098][T17743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.260119][T17743] ? __pfx__printk+0x10/0x10 [ 407.260157][T17743] should_fail_ex+0x414/0x560 [ 407.260184][T17743] _copy_to_user+0x31/0xb0 [ 407.260217][T17743] simple_read_from_buffer+0xe1/0x170 [ 407.260247][T17743] proc_fail_nth_read+0x1b3/0x220 [ 407.260283][T17743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 407.260317][T17743] ? rw_verify_area+0x2a6/0x4d0 [ 407.260337][T17743] ? __lock_acquire+0xab9/0xd20 [ 407.260362][T17743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 407.260394][T17743] vfs_read+0x1fd/0xa30 [ 407.260414][T17743] ? fdget_pos+0x247/0x320 [ 407.260444][T17743] ? __pfx___mutex_lock+0x10/0x10 [ 407.260464][T17743] ? __pfx_vfs_read+0x10/0x10 [ 407.260488][T17743] ? __fget_files+0x2a/0x420 [ 407.260517][T17743] ? __fget_files+0x3a0/0x420 [ 407.260539][T17743] ? __fget_files+0x2a/0x420 [ 407.260574][T17743] ksys_read+0x145/0x250 [ 407.260599][T17743] ? __pfx_ksys_read+0x10/0x10 [ 407.260625][T17743] ? do_syscall_64+0xbe/0xfa0 [ 407.260658][T17743] do_syscall_64+0xfa/0xfa0 [ 407.260708][T17743] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.260737][T17743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.260758][T17743] ? clear_bhb_loop+0x60/0xb0 [ 407.260784][T17743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.260805][T17743] RIP: 0033:0x7fa131f8d8dc [ 407.260826][T17743] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 407.260844][T17743] RSP: 002b:00007fa132d66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 407.260868][T17743] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8d8dc [ 407.260884][T17743] RDX: 000000000000000f RSI: 00007fa132d660a0 RDI: 0000000000000004 [ 407.260897][T17743] RBP: 00007fa132d66090 R08: 0000000000000000 R09: 0000000000000000 [ 407.260909][T17743] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 407.260922][T17743] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 407.260966][T17743] [ 407.919193][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4175'. [ 408.146521][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4178'. [ 409.026407][T17734] syz.2.4167: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 409.044824][T17734] CPU: 1 UID: 0 PID: 17734 Comm: syz.2.4167 Not tainted syzkaller #0 PREEMPT(full) [ 409.044852][T17734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.044866][T17734] Call Trace: [ 409.044876][T17734] [ 409.044885][T17734] dump_stack_lvl+0x189/0x250 [ 409.044918][T17734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.044941][T17734] ? __pfx__printk+0x10/0x10 [ 409.044964][T17734] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 409.044990][T17734] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 409.045026][T17734] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 409.045055][T17734] warn_alloc+0x214/0x310 [ 409.045090][T17734] ? __pfx_warn_alloc+0x10/0x10 [ 409.045128][T17734] ? __get_vm_area_node+0x28f/0x300 [ 409.045153][T17734] ? translate_table+0x198/0x2000 [ 409.045189][T17734] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 409.045249][T17734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 409.045280][T17734] ? rcu_is_watching+0x15/0xb0 [ 409.045302][T17734] ? translate_table+0x198/0x2000 [ 409.045331][T17734] ? translate_table+0x198/0x2000 [ 409.045358][T17734] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 409.045383][T17734] ? translate_table+0x198/0x2000 [ 409.045410][T17734] ? xt_alloc_table_info+0x3b/0xa0 [ 409.045440][T17734] translate_table+0x198/0x2000 [ 409.045488][T17734] ? __lock_acquire+0xab9/0xd20 [ 409.045525][T17734] ? __pfx_translate_table+0x10/0x10 [ 409.045558][T17734] ? __might_fault+0xb0/0x130 [ 409.045605][T17734] ? _copy_from_user+0x94/0xb0 [ 409.045658][T17734] do_ipt_set_ctl+0x967/0xcd0 [ 409.045695][T17734] ? rcu_is_watching+0x15/0xb0 [ 409.045715][T17734] ? trace_contention_end+0x39/0x120 [ 409.045737][T17734] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 409.045791][T17734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 409.045827][T17734] ? __pfx_aa_sk_perm+0x10/0x10 [ 409.045859][T17734] nf_setsockopt+0x26c/0x290 [ 409.045883][T17734] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 409.045912][T17734] do_sock_setsockopt+0x179/0x1b0 [ 409.045947][T17734] __x64_sys_setsockopt+0x13f/0x1b0 [ 409.045983][T17734] do_syscall_64+0xfa/0xfa0 [ 409.046020][T17734] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.046051][T17734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.046072][T17734] ? clear_bhb_loop+0x60/0xb0 [ 409.046100][T17734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.046120][T17734] RIP: 0033:0x7fbabc38eec9 [ 409.046140][T17734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.046159][T17734] RSP: 002b:00007fbabd250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 409.046184][T17734] RAX: ffffffffffffffda RBX: 00007fbabc5e5fa0 RCX: 00007fbabc38eec9 [ 409.046201][T17734] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 409.046215][T17734] RBP: 00007fbabc411f91 R08: 0000000000000478 R09: 0000000000000000 [ 409.046229][T17734] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000000 [ 409.046243][T17734] R13: 00007fbabc5e6038 R14: 00007fbabc5e5fa0 R15: 00007fff1d7bae48 [ 409.046281][T17734] [ 409.046291][T17734] Mem-Info: [ 409.109707][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4188'. [ 409.113493][T17734] active_anon:5149 inactive_anon:0 isolated_anon:0 [ 409.113493][T17734] active_file:3545 inactive_file:40008 isolated_file:0 [ 409.113493][T17734] unevictable:768 dirty:157 writeback:0 [ 409.113493][T17734] slab_reclaimable:11917 slab_unreclaimable:107523 [ 409.113493][T17734] mapped:29369 shmem:1774 pagetables:1311 [ 409.113493][T17734] sec_pagetables:0 bounce:0 [ 409.113493][T17734] kernel_misc_reclaimable:0 [ 409.113493][T17734] free:1295612 free_pcp:20237 free_cma:0 [ 409.420443][T17734] Node 0 active_anon:19020kB inactive_anon:0kB active_file:14180kB inactive_file:159832kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117512kB dirty:632kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13872kB pagetables:5532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.453267][T17734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.483656][T17734] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.513539][T17734] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 409.519867][T17734] Node 0 DMA32 free:1277384kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18976kB inactive_anon:0kB active_file:14180kB inactive_file:158000kB unevictable:1536kB writepending:632kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:63344kB local_pcp:26764kB free_cma:0kB [ 409.521566][T17799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4193'. [ 409.553952][T17734] lowmem_reserve[]: 0 0 1 1 1 [ 409.567673][T17734] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 409.599372][T17734] lowmem_reserve[]: 0 0 0 0 0 [ 409.604486][T17734] Node 1 Normal free:3889608kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17552kB local_pcp:9680kB free_cma:0kB [ 409.650713][T17734] lowmem_reserve[]: 0 0 0 0 0 [ 409.660069][T17734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 409.695569][T17734] Node 0 DMA32: 2*4kB (ME) 2*8kB (UE) 31*16kB (M) 152*32kB (UM) 616*64kB (UM) 517*128kB (UME) 395*256kB (UME) 237*512kB (UE) 102*1024kB (UM) 2*2048kB (UM) 204*4096kB (UM) = 1277576kB [ 409.725249][T17734] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 409.741584][T17734] Node 1 Normal: 18*4kB (UME) 58*8kB (UME) 49*16kB (UME) 159*32kB (UME) 51*64kB (UME) 16*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3889608kB [ 409.760719][T17734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.761311][T17802] FAULT_INJECTION: forcing a failure. [ 409.761311][T17802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.771017][T17734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.771043][T17734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.771062][T17734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.771080][T17734] 44902 total pagecache pages [ 409.771091][T17734] 0 pages in swap cache [ 409.771101][T17734] Free swap = 124996kB [ 409.771111][T17734] Total swap = 124996kB [ 409.771123][T17734] 2097051 pages RAM [ 409.771133][T17734] 0 pages HighMem/MovableOnly [ 409.771144][T17734] 424452 pages reserved [ 409.771153][T17734] 0 pages cma reserved [ 409.855080][T17802] CPU: 0 UID: 0 PID: 17802 Comm: syz.3.4194 Not tainted syzkaller #0 PREEMPT(full) [ 409.855110][T17802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.855122][T17802] Call Trace: [ 409.855131][T17802] [ 409.855141][T17802] dump_stack_lvl+0x189/0x250 [ 409.855168][T17802] ? __pfx____ratelimit+0x10/0x10 [ 409.855197][T17802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.855219][T17802] ? __pfx__printk+0x10/0x10 [ 409.855241][T17802] ? __might_fault+0xb0/0x130 [ 409.855277][T17802] should_fail_ex+0x414/0x560 [ 409.855307][T17802] _copy_from_user+0x2d/0xb0 [ 409.855338][T17802] ___sys_recvmsg+0x12e/0x510 [ 409.855373][T17802] ? __pfx____sys_recvmsg+0x10/0x10 [ 409.855440][T17802] ? __might_fault+0xb0/0x130 [ 409.855468][T17802] do_recvmmsg+0x307/0x770 [ 409.855508][T17802] ? __pfx_do_recvmmsg+0x10/0x10 [ 409.855555][T17802] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 409.855596][T17802] __x64_sys_recvmmsg+0x190/0x240 [ 409.855631][T17802] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 409.855668][T17802] ? do_syscall_64+0xbe/0xfa0 [ 409.855701][T17802] do_syscall_64+0xfa/0xfa0 [ 409.855728][T17802] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.855756][T17802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.855776][T17802] ? clear_bhb_loop+0x60/0xb0 [ 409.855801][T17802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.855820][T17802] RIP: 0033:0x7fa131f8eec9 [ 409.855839][T17802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.855857][T17802] RSP: 002b:00007fa132d66038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 409.855880][T17802] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8eec9 [ 409.855896][T17802] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 409.855910][T17802] RBP: 00007fa132d66090 R08: 0000000000000000 R09: 0000000000000000 [ 409.855936][T17802] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 409.855949][T17802] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 409.855985][T17802] [ 410.565267][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4205'. [ 410.676623][T17832] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4204'. [ 410.723887][T17833] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4206'. [ 410.846416][T17833] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4206'. [ 410.916158][T17833] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 410.944812][T17833] 0ªî{X¹¦: entered allmulticast mode [ 410.951641][T17833] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 410.996876][T17847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.706853][T17885] FAULT_INJECTION: forcing a failure. [ 411.706853][T17885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.720587][T17885] CPU: 0 UID: 0 PID: 17885 Comm: syz.3.4223 Not tainted syzkaller #0 PREEMPT(full) [ 411.720617][T17885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.720628][T17885] Call Trace: [ 411.720636][T17885] [ 411.720644][T17885] dump_stack_lvl+0x189/0x250 [ 411.720695][T17885] ? __pfx____ratelimit+0x10/0x10 [ 411.720723][T17885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.720744][T17885] ? __pfx__printk+0x10/0x10 [ 411.720781][T17885] should_fail_ex+0x414/0x560 [ 411.720810][T17885] _copy_to_user+0x31/0xb0 [ 411.720841][T17885] simple_read_from_buffer+0xe1/0x170 [ 411.720870][T17885] proc_fail_nth_read+0x1b3/0x220 [ 411.720911][T17885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.720945][T17885] ? rw_verify_area+0x2a6/0x4d0 [ 411.720972][T17885] ? __lock_acquire+0xab9/0xd20 [ 411.720997][T17885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.721027][T17885] vfs_read+0x1fd/0xa30 [ 411.721045][T17885] ? fdget_pos+0x247/0x320 [ 411.721073][T17885] ? __pfx___mutex_lock+0x10/0x10 [ 411.721095][T17885] ? __pfx_vfs_read+0x10/0x10 [ 411.721119][T17885] ? __fget_files+0x2a/0x420 [ 411.721150][T17885] ? __fget_files+0x3a0/0x420 [ 411.721172][T17885] ? __fget_files+0x2a/0x420 [ 411.721208][T17885] ksys_read+0x145/0x250 [ 411.721233][T17885] ? __pfx_ksys_read+0x10/0x10 [ 411.721260][T17885] ? do_syscall_64+0xbe/0xfa0 [ 411.721294][T17885] do_syscall_64+0xfa/0xfa0 [ 411.721320][T17885] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.721349][T17885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.721369][T17885] ? clear_bhb_loop+0x60/0xb0 [ 411.721396][T17885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.721415][T17885] RIP: 0033:0x7fa131f8d8dc [ 411.721435][T17885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 411.721459][T17885] RSP: 002b:00007fa132d66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 411.721482][T17885] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8d8dc [ 411.721498][T17885] RDX: 000000000000000f RSI: 00007fa132d660a0 RDI: 0000000000000004 [ 411.721512][T17885] RBP: 00007fa132d66090 R08: 0000000000000000 R09: 0000000000000000 [ 411.721525][T17885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.721538][T17885] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 411.721577][T17885] [ 412.156934][T17892] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4225'. [ 412.191137][T17894] tipc: Enabled bearer , priority 0 [ 412.199661][T17894] syzkaller0: entered promiscuous mode [ 412.205293][T17894] syzkaller0: entered allmulticast mode [ 412.228536][T17891] netlink: 'syz.3.4225': attribute type 23 has an invalid length. [ 412.260419][T17894] tipc: Resetting bearer [ 412.270515][T17896] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4228'. [ 412.341357][T17893] tipc: Resetting bearer [ 412.403382][T17893] tipc: Disabling bearer [ 412.419460][T17904] FAULT_INJECTION: forcing a failure. [ 412.419460][T17904] name failslab, interval 1, probability 0, space 0, times 0 [ 412.441098][T17904] CPU: 1 UID: 0 PID: 17904 Comm: syz.3.4233 Not tainted syzkaller #0 PREEMPT(full) [ 412.441128][T17904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 412.441140][T17904] Call Trace: [ 412.441149][T17904] [ 412.441159][T17904] dump_stack_lvl+0x189/0x250 [ 412.441186][T17904] ? __pfx____ratelimit+0x10/0x10 [ 412.441215][T17904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.441235][T17904] ? __pfx__printk+0x10/0x10 [ 412.441261][T17904] ? __pfx___might_resched+0x10/0x10 [ 412.441292][T17904] ? fs_reclaim_acquire+0x7d/0x100 [ 412.441323][T17904] should_fail_ex+0x414/0x560 [ 412.441352][T17904] should_failslab+0xa8/0x100 [ 412.441379][T17904] __kmalloc_noprof+0xcb/0x4f0 [ 412.441399][T17904] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 412.441429][T17904] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 412.441461][T17904] genl_family_rcv_msg_doit+0xb8/0x300 [ 412.441489][T17904] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 412.441517][T17904] ? apparmor_capable+0x137/0x1b0 [ 412.441548][T17904] ? bpf_lsm_capable+0x9/0x20 [ 412.441569][T17904] ? security_capable+0x7e/0x2e0 [ 412.441602][T17904] genl_rcv_msg+0x60e/0x790 [ 412.441631][T17904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.441649][T17904] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 412.441672][T17904] ? __pfx_nl80211_connect+0x10/0x10 [ 412.441700][T17904] ? __pfx_nl80211_post_doit+0x10/0x10 [ 412.441735][T17904] ? __asan_memcpy+0x40/0x70 [ 412.441761][T17904] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.441793][T17904] netlink_rcv_skb+0x205/0x470 [ 412.441816][T17904] ? __lock_acquire+0xab9/0xd20 [ 412.441843][T17904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.441866][T17904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.441917][T17904] ? down_read+0x1ad/0x2e0 [ 412.441942][T17904] genl_rcv+0x28/0x40 [ 412.441959][T17904] netlink_unicast+0x82f/0x9e0 [ 412.441994][T17904] ? __pfx_netlink_unicast+0x10/0x10 [ 412.442020][T17904] ? netlink_sendmsg+0x642/0xb30 [ 412.442043][T17904] ? skb_put+0x11b/0x210 [ 412.442075][T17904] netlink_sendmsg+0x805/0xb30 [ 412.442113][T17904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.442142][T17904] ? aa_sock_msg_perm+0xf1/0x1d0 [ 412.442169][T17904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.442195][T17904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.442222][T17904] __sock_sendmsg+0x21c/0x270 [ 412.442248][T17904] ____sys_sendmsg+0x505/0x830 [ 412.442284][T17904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.442325][T17904] ? import_iovec+0x74/0xa0 [ 412.442363][T17904] ___sys_sendmsg+0x21f/0x2a0 [ 412.442394][T17904] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.442464][T17904] ? __fget_files+0x2a/0x420 [ 412.442487][T17904] ? __fget_files+0x3a0/0x420 [ 412.442525][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4234'. [ 412.442523][T17904] __x64_sys_sendmsg+0x19b/0x260 [ 412.442557][T17904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.442594][T17904] ? __pfx_ksys_write+0x10/0x10 [ 412.442618][T17904] ? do_syscall_64+0xbe/0xfa0 [ 412.442649][T17904] do_syscall_64+0xfa/0xfa0 [ 412.442673][T17904] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.442699][T17904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.442727][T17904] ? clear_bhb_loop+0x60/0xb0 [ 412.442750][T17904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.442768][T17904] RIP: 0033:0x7fa131f8eec9 [ 412.442786][T17904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.442803][T17904] RSP: 002b:00007fa132d66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.442824][T17904] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8eec9 [ 412.442839][T17904] RDX: 0000000004008800 RSI: 0000200000000080 RDI: 0000000000000004 [ 412.442851][T17904] RBP: 00007fa132d66090 R08: 0000000000000000 R09: 0000000000000000 [ 412.442863][T17904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.442875][T17904] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 412.442908][T17904] [ 412.633087][T17912] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4235'. [ 412.676133][T17917] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 413.085819][T17932] x_tables: duplicate underflow at hook 1 [ 413.112735][T17935] netlink: 'syz.2.4243': attribute type 58 has an invalid length. [ 413.736721][T17971] IPVS: Unknown mcast interface: vcan0 [ 414.124598][T17992] syzkaller0: entered promiscuous mode [ 414.130368][T17992] syzkaller0: entered allmulticast mode [ 414.142323][T17995] x_tables: duplicate underflow at hook 1 [ 414.302823][T18005] __nla_validate_parse: 9 callbacks suppressed [ 414.302847][T18005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4271'. [ 414.471494][T18007] syzkaller0: entered promiscuous mode [ 414.477153][T18007] syzkaller0: entered allmulticast mode [ 414.565196][T18013] x_tables: duplicate underflow at hook 1 [ 414.681852][T18022] netlink: 'syz.1.4278': attribute type 25 has an invalid length. [ 414.773649][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4280'. [ 415.041810][T18037] FAULT_INJECTION: forcing a failure. [ 415.041810][T18037] name failslab, interval 1, probability 0, space 0, times 0 [ 415.056923][T18037] CPU: 0 UID: 0 PID: 18037 Comm: syz.3.4283 Not tainted syzkaller #0 PREEMPT(full) [ 415.056960][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.056973][T18037] Call Trace: [ 415.056982][T18037] [ 415.056990][T18037] dump_stack_lvl+0x189/0x250 [ 415.057019][T18037] ? __pfx____ratelimit+0x10/0x10 [ 415.057048][T18037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.057068][T18037] ? __pfx__printk+0x10/0x10 [ 415.057096][T18037] ? __pfx___might_resched+0x10/0x10 [ 415.057130][T18037] should_fail_ex+0x414/0x560 [ 415.057158][T18037] should_failslab+0xa8/0x100 [ 415.057183][T18037] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 415.057206][T18037] ? __alloc_skb+0x112/0x2d0 [ 415.057236][T18037] __alloc_skb+0x112/0x2d0 [ 415.057267][T18037] netlink_sendmsg+0x5c6/0xb30 [ 415.057304][T18037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.057334][T18037] ? aa_sock_msg_perm+0xf1/0x1d0 [ 415.057363][T18037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.057390][T18037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.057417][T18037] __sock_sendmsg+0x21c/0x270 [ 415.057443][T18037] ____sys_sendmsg+0x505/0x830 [ 415.057479][T18037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.057518][T18037] ? import_iovec+0x74/0xa0 [ 415.057550][T18037] ___sys_sendmsg+0x21f/0x2a0 [ 415.057581][T18037] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.057649][T18037] ? __fget_files+0x2a/0x420 [ 415.057674][T18037] ? __fget_files+0x3a0/0x420 [ 415.057719][T18037] __x64_sys_sendmsg+0x19b/0x260 [ 415.057751][T18037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.057791][T18037] ? __pfx_ksys_write+0x10/0x10 [ 415.057817][T18037] ? do_syscall_64+0xbe/0xfa0 [ 415.057852][T18037] do_syscall_64+0xfa/0xfa0 [ 415.057877][T18037] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.057906][T18037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.057932][T18037] ? clear_bhb_loop+0x60/0xb0 [ 415.057957][T18037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.057975][T18037] RIP: 0033:0x7fa131f8eec9 [ 415.057995][T18037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.058013][T18037] RSP: 002b:00007fa132d66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.058036][T18037] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8eec9 [ 415.058051][T18037] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 415.058064][T18037] RBP: 00007fa132d66090 R08: 0000000000000000 R09: 0000000000000000 [ 415.058078][T18037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.058091][T18037] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 415.058125][T18037] [ 415.488524][T18020] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 415.686568][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4291'. [ 415.773834][T18065] x_tables: duplicate underflow at hook 1 [ 415.789053][T18067] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4294'. [ 415.972284][T18078] x_tables: duplicate underflow at hook 1 [ 416.067836][T18086] x_tables: duplicate underflow at hook 1 [ 416.342607][T18098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4306'. [ 416.543161][T18107] team0: Device ip6gre2 is of different type [ 416.849385][T18121] FAULT_INJECTION: forcing a failure. [ 416.849385][T18121] name failslab, interval 1, probability 0, space 0, times 0 [ 416.903677][T18121] CPU: 1 UID: 0 PID: 18121 Comm: syz.2.4317 Not tainted syzkaller #0 PREEMPT(full) [ 416.903708][T18121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.903720][T18121] Call Trace: [ 416.903728][T18121] [ 416.903737][T18121] dump_stack_lvl+0x189/0x250 [ 416.903765][T18121] ? __pfx____ratelimit+0x10/0x10 [ 416.903794][T18121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.903816][T18121] ? __pfx__printk+0x10/0x10 [ 416.903835][T18121] ? netlink_unicast+0x82f/0x9e0 [ 416.903859][T18121] ? ___sys_sendmsg+0x21f/0x2a0 [ 416.903894][T18121] ? do_syscall_64+0xfa/0xfa0 [ 416.903936][T18121] should_fail_ex+0x414/0x560 [ 416.903963][T18121] should_failslab+0xa8/0x100 [ 416.903988][T18121] kmem_cache_alloc_noprof+0x73/0x3c0 [ 416.904010][T18121] ? skb_clone+0x212/0x3a0 [ 416.904042][T18121] skb_clone+0x212/0x3a0 [ 416.904074][T18121] __netlink_deliver_tap+0x404/0x850 [ 416.904113][T18121] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.904141][T18121] netlink_deliver_tap+0x19c/0x1b0 [ 416.904168][T18121] netlink_sendskb+0x68/0x140 [ 416.904193][T18121] netlink_unicast+0x397/0x9e0 [ 416.904213][T18121] ? __asan_memcpy+0x40/0x70 [ 416.904251][T18121] ? __pfx_netlink_unicast+0x10/0x10 [ 416.904287][T18121] nfnetlink_rcv+0x2309/0x2590 [ 416.904354][T18121] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 416.904397][T18121] ? ref_tracker_free+0x63a/0x7d0 [ 416.904459][T18121] ? __netlink_deliver_tap+0x807/0x850 [ 416.904487][T18121] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.904531][T18121] netlink_unicast+0x82f/0x9e0 [ 416.904564][T18121] ? __pfx_netlink_unicast+0x10/0x10 [ 416.904590][T18121] ? netlink_sendmsg+0x642/0xb30 [ 416.904613][T18121] ? skb_put+0x11b/0x210 [ 416.904642][T18121] netlink_sendmsg+0x805/0xb30 [ 416.904679][T18121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.904710][T18121] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.904738][T18121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.904765][T18121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.904792][T18121] __sock_sendmsg+0x21c/0x270 [ 416.904819][T18121] ____sys_sendmsg+0x505/0x830 [ 416.904856][T18121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.904906][T18121] ? import_iovec+0x74/0xa0 [ 416.904940][T18121] ___sys_sendmsg+0x21f/0x2a0 [ 416.904972][T18121] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.905042][T18121] ? __fget_files+0x2a/0x420 [ 416.905066][T18121] ? __fget_files+0x3a0/0x420 [ 416.905103][T18121] __x64_sys_sendmsg+0x19b/0x260 [ 416.905136][T18121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.905175][T18121] ? __pfx_ksys_write+0x10/0x10 [ 416.905201][T18121] ? do_syscall_64+0xbe/0xfa0 [ 416.905233][T18121] do_syscall_64+0xfa/0xfa0 [ 416.905260][T18121] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.905289][T18121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.905310][T18121] ? clear_bhb_loop+0x60/0xb0 [ 416.905335][T18121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.905354][T18121] RIP: 0033:0x7fbabc38eec9 [ 416.905373][T18121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.905392][T18121] RSP: 002b:00007fbabd250038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.905416][T18121] RAX: ffffffffffffffda RBX: 00007fbabc5e5fa0 RCX: 00007fbabc38eec9 [ 416.905430][T18121] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 416.905444][T18121] RBP: 00007fbabd250090 R08: 0000000000000000 R09: 0000000000000000 [ 416.905456][T18121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 416.905468][T18121] R13: 00007fbabc5e6038 R14: 00007fbabc5e5fa0 R15: 00007fff1d7bae48 [ 416.905506][T18121] [ 417.284819][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4320'. [ 417.343290][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4319'. [ 417.679800][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4328'. [ 419.265130][T18163] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4331'. [ 419.523801][T18180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4332'. [ 419.896321][T18200] Bluetooth: MGMT ver 1.23 [ 419.914044][T18200] Bluetooth: hci1: too big key_count value 32778 [ 420.078901][T18208] FAULT_INJECTION: forcing a failure. [ 420.078901][T18208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.110296][T18208] CPU: 1 UID: 0 PID: 18208 Comm: syz.1.4343 Not tainted syzkaller #0 PREEMPT(full) [ 420.110327][T18208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.110339][T18208] Call Trace: [ 420.110348][T18208] [ 420.110357][T18208] dump_stack_lvl+0x189/0x250 [ 420.110386][T18208] ? __pfx____ratelimit+0x10/0x10 [ 420.110414][T18208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.110432][T18208] ? __pfx__printk+0x10/0x10 [ 420.110453][T18208] ? __might_fault+0xb0/0x130 [ 420.110484][T18208] should_fail_ex+0x414/0x560 [ 420.110510][T18208] _copy_from_user+0x2d/0xb0 [ 420.110540][T18208] ___sys_sendmsg+0x158/0x2a0 [ 420.110573][T18208] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.110645][T18208] ? __fget_files+0x2a/0x420 [ 420.110679][T18208] ? __fget_files+0x3a0/0x420 [ 420.110715][T18208] __x64_sys_sendmsg+0x19b/0x260 [ 420.110747][T18208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.110786][T18208] ? __pfx_ksys_write+0x10/0x10 [ 420.110812][T18208] ? do_syscall_64+0xbe/0xfa0 [ 420.110843][T18208] do_syscall_64+0xfa/0xfa0 [ 420.110870][T18208] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.110897][T18208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.110917][T18208] ? clear_bhb_loop+0x60/0xb0 [ 420.110940][T18208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.110958][T18208] RIP: 0033:0x7f6f41b8eec9 [ 420.110979][T18208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.110995][T18208] RSP: 002b:00007f6f42aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.111018][T18208] RAX: ffffffffffffffda RBX: 00007f6f41de5fa0 RCX: 00007f6f41b8eec9 [ 420.111034][T18208] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 420.111048][T18208] RBP: 00007f6f42aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.111060][T18208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.111073][T18208] R13: 00007f6f41de6038 R14: 00007f6f41de5fa0 R15: 00007ffeff521498 [ 420.111111][T18208] [ 420.422523][T18214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.596224][T18220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4349'. [ 420.620685][T18227] netlink: 'syz.4.4350': attribute type 11 has an invalid length. [ 420.639213][T18227] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4350'. [ 420.734786][T18230] vlan2: entered promiscuous mode [ 420.749805][T18230] vlan2: entered allmulticast mode [ 420.769360][T18230] hsr_slave_1: entered allmulticast mode [ 420.788997][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4352'. [ 421.203655][T18256] FAULT_INJECTION: forcing a failure. [ 421.203655][T18256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.220443][T18214] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 421.242530][T18258] netlink: 'syz.1.4364': attribute type 11 has an invalid length. [ 421.254483][T18256] CPU: 0 UID: 0 PID: 18256 Comm: syz.3.4362 Not tainted syzkaller #0 PREEMPT(full) [ 421.254512][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.254524][T18256] Call Trace: [ 421.254533][T18256] [ 421.254542][T18256] dump_stack_lvl+0x189/0x250 [ 421.254570][T18256] ? __pfx____ratelimit+0x10/0x10 [ 421.254599][T18256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.254619][T18256] ? __pfx__printk+0x10/0x10 [ 421.254640][T18256] ? __might_fault+0xb0/0x130 [ 421.254683][T18256] should_fail_ex+0x414/0x560 [ 421.254710][T18256] _copy_from_user+0x2d/0xb0 [ 421.254739][T18256] do_ip6t_set_ctl+0x69f/0xce0 [ 421.254764][T18256] ? rcu_is_watching+0x15/0xb0 [ 421.254784][T18256] ? trace_contention_end+0x39/0x120 [ 421.254804][T18256] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 421.254850][T18256] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 421.254882][T18256] ? __pfx_aa_sk_perm+0x10/0x10 [ 421.254910][T18256] nf_setsockopt+0x26c/0x290 [ 421.254931][T18256] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 421.254957][T18256] do_sock_setsockopt+0x179/0x1b0 [ 421.254989][T18256] __x64_sys_setsockopt+0x13f/0x1b0 [ 421.255022][T18256] do_syscall_64+0xfa/0xfa0 [ 421.255049][T18256] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.255076][T18256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.255095][T18256] ? clear_bhb_loop+0x60/0xb0 [ 421.255119][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.255138][T18256] RIP: 0033:0x7fa131f8eec9 [ 421.255156][T18256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.255175][T18256] RSP: 002b:00007fa132d66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 421.255199][T18256] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8eec9 [ 421.255215][T18256] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 421.255229][T18256] RBP: 00007fa132d66090 R08: 00000000000003d8 R09: 0000000000000000 [ 421.255242][T18256] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 421.255256][T18256] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 421.255295][T18256] [ 421.472580][T18258] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4364'. [ 421.576562][T18262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.632021][T18262] x_tables: duplicate underflow at hook 1 [ 421.798374][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4371'. [ 421.843036][ T3438] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.852357][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4371'. [ 421.863838][ T3438] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.885797][T18278] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4369'. [ 421.885870][ T3438] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.924931][ T3438] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.046652][T18288] netlink: 'syz.3.4376': attribute type 11 has an invalid length. [ 422.074414][T18288] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4376'. [ 422.181645][T18297] IPVS: ip_vs_edit_dest(): server weight less than zero [ 422.526917][T18316] x_tables: duplicate underflow at hook 1 [ 422.545403][T18316] tipc: Enabled bearer , priority 0 [ 422.553745][T18316] syzkaller0: entered promiscuous mode [ 422.562405][T18316] syzkaller0: entered allmulticast mode [ 422.594116][T18318] netlink: 'syz.3.4390': attribute type 11 has an invalid length. [ 422.602183][T18318] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4390'. [ 422.616297][T18316] tipc: Resetting bearer [ 422.636091][T18315] tipc: Resetting bearer [ 422.704535][T18315] tipc: Disabling bearer [ 422.767298][T18325] FAULT_INJECTION: forcing a failure. [ 422.767298][T18325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.783355][T18325] CPU: 1 UID: 0 PID: 18325 Comm: syz.3.4394 Not tainted syzkaller #0 PREEMPT(full) [ 422.783386][T18325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.783398][T18325] Call Trace: [ 422.783407][T18325] [ 422.783417][T18325] dump_stack_lvl+0x189/0x250 [ 422.783446][T18325] ? __pfx____ratelimit+0x10/0x10 [ 422.783475][T18325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.783496][T18325] ? __pfx__printk+0x10/0x10 [ 422.783532][T18325] should_fail_ex+0x414/0x560 [ 422.783561][T18325] _copy_to_user+0x31/0xb0 [ 422.783593][T18325] simple_read_from_buffer+0xe1/0x170 [ 422.783622][T18325] proc_fail_nth_read+0x1b3/0x220 [ 422.783656][T18325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.783699][T18325] ? rw_verify_area+0x2a6/0x4d0 [ 422.783718][T18325] ? __lock_acquire+0xab9/0xd20 [ 422.783743][T18325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.783772][T18325] vfs_read+0x1fd/0xa30 [ 422.783792][T18325] ? fdget_pos+0x247/0x320 [ 422.783821][T18325] ? __pfx___mutex_lock+0x10/0x10 [ 422.783841][T18325] ? __pfx_vfs_read+0x10/0x10 [ 422.783865][T18325] ? __fget_files+0x2a/0x420 [ 422.783895][T18325] ? __fget_files+0x3a0/0x420 [ 422.783917][T18325] ? __fget_files+0x2a/0x420 [ 422.783952][T18325] ksys_read+0x145/0x250 [ 422.783977][T18325] ? __pfx_ksys_read+0x10/0x10 [ 422.784003][T18325] ? do_syscall_64+0xbe/0xfa0 [ 422.784037][T18325] do_syscall_64+0xfa/0xfa0 [ 422.784065][T18325] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.784094][T18325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.784114][T18325] ? clear_bhb_loop+0x60/0xb0 [ 422.784139][T18325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.784157][T18325] RIP: 0033:0x7fa131f8d8dc [ 422.784176][T18325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 422.784194][T18325] RSP: 002b:00007fa132d66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.784217][T18325] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8d8dc [ 422.784231][T18325] RDX: 000000000000000f RSI: 00007fa132d660a0 RDI: 0000000000000003 [ 422.784243][T18325] RBP: 00007fa132d66090 R08: 0000000000000000 R09: 0000000000000000 [ 422.784256][T18325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.784268][T18325] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 422.784309][T18325] [ 423.194523][T18334] siw: device registration error -23 [ 423.793831][T18368] netlink: 'syz.0.4409': attribute type 1 has an invalid length. [ 423.832703][T18369] x_tables: duplicate underflow at hook 1 [ 423.860698][T18368] veth17: entered promiscuous mode [ 423.871968][T18368] bond9: (slave veth17): Enslaving as a backup interface with a down link [ 423.911694][T18369] tipc: Enabled bearer , priority 0 [ 423.919508][T18369] syzkaller0: entered promiscuous mode [ 423.925177][T18369] syzkaller0: entered allmulticast mode [ 423.974510][T18369] tipc: Resetting bearer [ 423.982586][T18376] FAULT_INJECTION: forcing a failure. [ 423.982586][T18376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.012351][T18379] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004 [ 424.026738][T18376] CPU: 0 UID: 0 PID: 18376 Comm: syz.0.4412 Not tainted syzkaller #0 PREEMPT(full) [ 424.026770][T18376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.026784][T18376] Call Trace: [ 424.026793][T18376] [ 424.026802][T18376] dump_stack_lvl+0x189/0x250 [ 424.026830][T18376] ? __pfx____ratelimit+0x10/0x10 [ 424.026859][T18376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.026879][T18376] ? __pfx__printk+0x10/0x10 [ 424.026902][T18376] ? __might_fault+0xb0/0x130 [ 424.026938][T18376] should_fail_ex+0x414/0x560 [ 424.026966][T18376] _copy_from_user+0x2d/0xb0 [ 424.026996][T18376] xsk_setsockopt+0x2f5/0x8d0 [ 424.027028][T18376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 424.027057][T18376] ? __pfx_aa_sk_perm+0x10/0x10 [ 424.027084][T18376] ? aa_sock_opt_perm+0xff/0x1b0 [ 424.027114][T18376] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 424.027142][T18376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 424.027169][T18376] do_sock_setsockopt+0x179/0x1b0 [ 424.027205][T18376] __x64_sys_setsockopt+0x13f/0x1b0 [ 424.027239][T18376] do_syscall_64+0xfa/0xfa0 [ 424.027267][T18376] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.027295][T18376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.027315][T18376] ? clear_bhb_loop+0x60/0xb0 [ 424.027341][T18376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.027360][T18376] RIP: 0033:0x7f342cf8eec9 [ 424.027380][T18376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.027398][T18376] RSP: 002b:00007f342ddfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 424.027421][T18376] RAX: ffffffffffffffda RBX: 00007f342d1e5fa0 RCX: 00007f342cf8eec9 [ 424.027437][T18376] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 424.027451][T18376] RBP: 00007f342ddfb090 R08: 0000000000000004 R09: 0000000000000000 [ 424.027464][T18376] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.027477][T18376] R13: 00007f342d1e6038 R14: 00007f342d1e5fa0 R15: 00007fffd670cc38 [ 424.027515][T18376] [ 424.107256][T18366] tipc: Resetting bearer [ 424.277316][T18366] tipc: Disabling bearer [ 424.431209][T18386] wg1 speed is unknown, defaulting to 1000 [ 424.565426][T18390] __nla_validate_parse: 1 callbacks suppressed [ 424.565449][T18390] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4417'. [ 424.853372][T18407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.953241][T18415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4423'. [ 425.013010][T18417] x_tables: duplicate underflow at hook 1 [ 425.049652][T18417] tipc: Enabled bearer , priority 0 [ 425.060419][T18417] syzkaller0: entered promiscuous mode [ 425.065936][T18417] syzkaller0: entered allmulticast mode [ 425.072419][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4429'. [ 425.094426][T18422] netlink: 'syz.2.4423': attribute type 83 has an invalid length. [ 425.110988][T18416] tipc: Resetting bearer [ 425.147076][T18416] tipc: Disabling bearer [ 425.168567][T18420] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4429'. [ 425.377430][T18437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 425.384872][T18437] IPv6: NLM_F_CREATE should be set when creating new route [ 425.485943][T18440] tipc: Enabled bearer , priority 0 [ 425.510222][T18440] tipc: Resetting bearer [ 425.527221][T18439] tipc: Disabling bearer [ 425.889922][T18463] tun0: tun_chr_ioctl cmd 1074025675 [ 425.906845][T18463] tun0: persist disabled [ 425.996591][T18468] x_tables: duplicate underflow at hook 1 [ 426.185878][T18475] netlink: 'syz.0.4453': attribute type 12 has an invalid length. [ 426.257929][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4457'. [ 426.267655][T18484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4457'. [ 426.412228][T18493] xt_socket: unknown flags 0x50 [ 426.658285][T18505] sctp: [Deprecated]: syz.1.4466 (pid 18505) Use of int in max_burst socket option deprecated. [ 426.658285][T18505] Use struct sctp_assoc_value instead [ 426.734390][T18505] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.4466'. [ 426.793545][T18516] netlink: 'syz.3.4469': attribute type 12 has an invalid length. [ 427.163948][T18535] netlink: 'syz.4.4477': attribute type 11 has an invalid length. [ 427.178300][T18535] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4477'. [ 427.437796][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4486'. [ 427.457632][T18551] chnl_net:caif_netlink_parms(): no params data found [ 427.467626][T18554] netlink: 'syz.1.4487': attribute type 1 has an invalid length. [ 427.485490][T18548] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.522542][T18559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4487'. [ 427.597958][T18548] netlink: 'syz.4.4485': attribute type 1 has an invalid length. [ 427.610656][T18565] nftables ruleset with unbound chain [ 427.699759][T18562] bond10: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 427.730855][T18562] bond10 (unregistering): Released all slaves [ 427.805798][T18564] veth39: entered promiscuous mode [ 427.842790][T18564] bond16: (slave veth39): Enslaving as a backup interface with a down link [ 428.034199][T18580] netlink: 'syz.0.4495': attribute type 11 has an invalid length. [ 428.343398][T18599] FAULT_INJECTION: forcing a failure. [ 428.343398][T18599] name failslab, interval 1, probability 0, space 0, times 0 [ 428.363411][T18599] CPU: 0 UID: 0 PID: 18599 Comm: syz.4.4503 Not tainted syzkaller #0 PREEMPT(full) [ 428.363441][T18599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 428.363454][T18599] Call Trace: [ 428.363462][T18599] [ 428.363472][T18599] dump_stack_lvl+0x189/0x250 [ 428.363501][T18599] ? __pfx____ratelimit+0x10/0x10 [ 428.363530][T18599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.363551][T18599] ? __pfx__printk+0x10/0x10 [ 428.363579][T18599] ? __pfx___might_resched+0x10/0x10 [ 428.363625][T18599] should_fail_ex+0x414/0x560 [ 428.363653][T18599] ? translate_table+0x19b/0x2040 [ 428.363672][T18599] should_failslab+0xa8/0x100 [ 428.363699][T18599] __kvmalloc_node_noprof+0x161/0x5f0 [ 428.363723][T18599] ? translate_table+0x19b/0x2040 [ 428.363750][T18599] translate_table+0x19b/0x2040 [ 428.363789][T18599] ? __lock_acquire+0xab9/0xd20 [ 428.363821][T18599] ? __pfx_translate_table+0x10/0x10 [ 428.363844][T18599] ? __might_fault+0xb0/0x130 [ 428.363889][T18599] ? _copy_from_user+0x94/0xb0 [ 428.363924][T18599] do_ip6t_set_ctl+0x970/0xce0 [ 428.363950][T18599] ? rcu_is_watching+0x15/0xb0 [ 428.363970][T18599] ? trace_contention_end+0x39/0x120 [ 428.363991][T18599] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 428.364039][T18599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 428.364072][T18599] ? __pfx_aa_sk_perm+0x10/0x10 [ 428.364103][T18599] nf_setsockopt+0x26c/0x290 [ 428.364124][T18599] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 428.364151][T18599] do_sock_setsockopt+0x179/0x1b0 [ 428.364184][T18599] __x64_sys_setsockopt+0x13f/0x1b0 [ 428.364219][T18599] do_syscall_64+0xfa/0xfa0 [ 428.364246][T18599] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.364273][T18599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.364292][T18599] ? clear_bhb_loop+0x60/0xb0 [ 428.364317][T18599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.364336][T18599] RIP: 0033:0x7fda1518eec9 [ 428.364356][T18599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.364374][T18599] RSP: 002b:00007fda15f4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 428.364395][T18599] RAX: ffffffffffffffda RBX: 00007fda153e5fa0 RCX: 00007fda1518eec9 [ 428.364409][T18599] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 428.364421][T18599] RBP: 00007fda15f4e090 R08: 00000000000003d8 R09: 0000000000000000 [ 428.364434][T18599] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 428.364447][T18599] R13: 00007fda153e6038 R14: 00007fda153e5fa0 R15: 00007ffd86cb7328 [ 428.364481][T18599] [ 428.758547][T18608] netlink: 'syz.3.4509': attribute type 11 has an invalid length. [ 429.311047][T18638] netlink: 'syz.0.4521': attribute type 11 has an invalid length. [ 429.650148][T18659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.030144][T18678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.049210][T18676] netlink: 'syz.4.4536': attribute type 11 has an invalid length. [ 430.057176][T18676] __nla_validate_parse: 6 callbacks suppressed [ 430.057195][T18676] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4536'. [ 430.140730][T18684] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4539'. [ 430.240155][T18685] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4540'. [ 430.290872][T18689] x_tables: duplicate underflow at hook 1 [ 430.691575][T18713] FAULT_INJECTION: forcing a failure. [ 430.691575][T18713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.743857][T18713] CPU: 1 UID: 0 PID: 18713 Comm: syz.3.4552 Not tainted syzkaller #0 PREEMPT(full) [ 430.743887][T18713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.743900][T18713] Call Trace: [ 430.743909][T18713] [ 430.743918][T18713] dump_stack_lvl+0x189/0x250 [ 430.743946][T18713] ? __pfx____ratelimit+0x10/0x10 [ 430.743976][T18713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.743997][T18713] ? __pfx__printk+0x10/0x10 [ 430.744034][T18713] should_fail_ex+0x414/0x560 [ 430.744062][T18713] _copy_to_user+0x31/0xb0 [ 430.744093][T18713] simple_read_from_buffer+0xe1/0x170 [ 430.744121][T18713] proc_fail_nth_read+0x1b3/0x220 [ 430.744153][T18713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.744185][T18713] ? rw_verify_area+0x2a6/0x4d0 [ 430.744205][T18713] ? __lock_acquire+0xab9/0xd20 [ 430.744230][T18713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.744261][T18713] vfs_read+0x1fd/0xa30 [ 430.744281][T18713] ? fdget_pos+0x247/0x320 [ 430.744309][T18713] ? __pfx___mutex_lock+0x10/0x10 [ 430.744328][T18713] ? __pfx_vfs_read+0x10/0x10 [ 430.744351][T18713] ? __fget_files+0x2a/0x420 [ 430.744380][T18713] ? __fget_files+0x3a0/0x420 [ 430.744401][T18713] ? __fget_files+0x2a/0x420 [ 430.744436][T18713] ksys_read+0x145/0x250 [ 430.744461][T18713] ? __pfx_ksys_read+0x10/0x10 [ 430.744486][T18713] ? do_syscall_64+0xbe/0xfa0 [ 430.744519][T18713] do_syscall_64+0xfa/0xfa0 [ 430.744544][T18713] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.744572][T18713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.744593][T18713] ? clear_bhb_loop+0x60/0xb0 [ 430.744627][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.744647][T18713] RIP: 0033:0x7fa131f8d8dc [ 430.744667][T18713] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 430.744685][T18713] RSP: 002b:00007fa132d66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.744708][T18713] RAX: ffffffffffffffda RBX: 00007fa1321e5fa0 RCX: 00007fa131f8d8dc [ 430.744723][T18713] RDX: 000000000000000f RSI: 00007fa132d660a0 RDI: 0000000000000004 [ 430.744736][T18713] RBP: 00007fa132d66090 R08: 0000000000000000 R09: 0000000000000000 [ 430.744748][T18713] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 430.744761][T18713] R13: 00007fa1321e6038 R14: 00007fa1321e5fa0 R15: 00007ffc849e9278 [ 430.744799][T18713] [ 431.009107][T18719] [ 431.011538][T18719] ====================================================== [ 431.018569][T18719] WARNING: possible circular locking dependency detected [ 431.025711][T18719] syzkaller #0 Not tainted [ 431.030124][T18719] ------------------------------------------------------ [ 431.037142][T18719] syz.0.4553/18719 is trying to acquire lock: [ 431.043212][T18719] ffffffff8f62d718 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 431.052712][T18719] [ 431.052712][T18719] but task is already holding lock: [ 431.060073][T18719] ffffffff8f62d6b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 431.069665][T18719] [ 431.069665][T18719] which lock already depends on the new lock. [ 431.069665][T18719] [ 431.080076][T18719] [ 431.080076][T18719] the existing dependency chain (in reverse order) is: [ 431.089092][T18719] [ 431.089092][T18719] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 431.097004][T18719] lock_acquire+0x120/0x360 [ 431.102039][T18719] _raw_spin_lock_bh+0x36/0x50 [ 431.107329][T18719] nr_rt_ioctl+0x390/0xd50 [ 431.112270][T18719] sock_do_ioctl+0xdc/0x300 [ 431.117297][T18719] sock_ioctl+0x576/0x790 [ 431.122153][T18719] __se_sys_ioctl+0xf9/0x170 [ 431.127275][T18719] do_syscall_64+0xfa/0xfa0 [ 431.132395][T18719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.138906][T18719] [ 431.138906][T18719] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 431.146920][T18719] lock_acquire+0x120/0x360 [ 431.151979][T18719] _raw_spin_lock_bh+0x36/0x50 [ 431.157283][T18719] nr_rt_ioctl+0x193/0xd50 [ 431.162240][T18719] sock_do_ioctl+0xdc/0x300 [ 431.167265][T18719] sock_ioctl+0x576/0x790 [ 431.172118][T18719] __se_sys_ioctl+0xf9/0x170 [ 431.177240][T18719] do_syscall_64+0xfa/0xfa0 [ 431.182280][T18719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.188695][T18719] [ 431.188695][T18719] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 431.196523][T18719] validate_chain+0xb9b/0x2140 [ 431.201807][T18719] __lock_acquire+0xab9/0xd20 [ 431.207010][T18719] lock_acquire+0x120/0x360 [ 431.212041][T18719] _raw_spin_lock_bh+0x36/0x50 [ 431.217332][T18719] nr_rt_device_down+0xa9/0x720 [ 431.222713][T18719] nr_device_event+0x137/0x150 [ 431.228101][T18719] notifier_call_chain+0x1b6/0x3e0 [ 431.233744][T18719] __dev_notify_flags+0x18d/0x2e0 [ 431.239410][T18719] netif_change_flags+0xe8/0x1a0 [ 431.244899][T18719] dev_change_flags+0x130/0x260 [ 431.250296][T18719] dev_ioctl+0x7b4/0x1150 [ 431.255161][T18719] sock_do_ioctl+0x22c/0x300 [ 431.260361][T18719] sock_ioctl+0x576/0x790 [ 431.265215][T18719] __se_sys_ioctl+0xf9/0x170 [ 431.270337][T18719] do_syscall_64+0xfa/0xfa0 [ 431.275373][T18719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.281787][T18719] [ 431.281787][T18719] other info that might help us debug this: [ 431.281787][T18719] [ 431.292017][T18719] Chain exists of: [ 431.292017][T18719] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 431.292017][T18719] [ 431.305844][T18719] Possible unsafe locking scenario: [ 431.305844][T18719] [ 431.313301][T18719] CPU0 CPU1 [ 431.318667][T18719] ---- ---- [ 431.324035][T18719] lock(nr_neigh_list_lock); [ 431.328723][T18719] lock(&nr_node->node_lock); [ 431.336009][T18719] lock(nr_neigh_list_lock); [ 431.343208][T18719] lock(nr_node_list_lock); [ 431.347804][T18719] [ 431.347804][T18719] *** DEADLOCK *** [ 431.347804][T18719] [ 431.355945][T18719] 2 locks held by syz.0.4553/18719: [ 431.361138][T18719] #0: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 431.369939][T18719] #1: ffffffff8f62d6b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 431.379965][T18719] [ 431.379965][T18719] stack backtrace: [ 431.385870][T18719] CPU: 0 UID: 0 PID: 18719 Comm: syz.0.4553 Not tainted syzkaller #0 PREEMPT(full) [ 431.385894][T18719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 431.385905][T18719] Call Trace: [ 431.385915][T18719] [ 431.385924][T18719] dump_stack_lvl+0x189/0x250 [ 431.385949][T18719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.385965][T18719] ? __pfx__printk+0x10/0x10 [ 431.385983][T18719] ? print_lock_name+0xde/0x100 [ 431.386000][T18719] print_circular_bug+0x2ee/0x310 [ 431.386019][T18719] check_noncircular+0x134/0x160 [ 431.386038][T18719] validate_chain+0xb9b/0x2140 [ 431.386056][T18719] ? rt6_disable_ip+0x6b3/0x720 [ 431.386072][T18719] ? __queue_work+0xc56/0xfb0 [ 431.386090][T18719] ? __lock_acquire+0xab9/0xd20 [ 431.386112][T18719] __lock_acquire+0xab9/0xd20 [ 431.386135][T18719] ? nr_rt_device_down+0xa9/0x720 [ 431.386155][T18719] lock_acquire+0x120/0x360 [ 431.386175][T18719] ? nr_rt_device_down+0xa9/0x720 [ 431.386199][T18719] ? nr_rt_device_down+0xa9/0x720 [ 431.386218][T18719] _raw_spin_lock_bh+0x36/0x50 [ 431.386239][T18719] ? nr_rt_device_down+0xa9/0x720 [ 431.386258][T18719] nr_rt_device_down+0xa9/0x720 [ 431.386278][T18719] ? do_raw_spin_unlock+0x122/0x240 [ 431.386298][T18719] nr_device_event+0x137/0x150 [ 431.386317][T18719] notifier_call_chain+0x1b6/0x3e0 [ 431.386334][T18719] __dev_notify_flags+0x18d/0x2e0 [ 431.386356][T18719] ? __pfx___dev_notify_flags+0x10/0x10 [ 431.386375][T18719] ? __dev_change_flags+0x4cc/0x6d0 [ 431.386397][T18719] ? __pfx___dev_change_flags+0x10/0x10 [ 431.386418][T18719] ? full_name_hash+0x92/0xe0 [ 431.386441][T18719] netif_change_flags+0xe8/0x1a0 [ 431.386462][T18719] dev_change_flags+0x130/0x260 [ 431.386484][T18719] dev_ioctl+0x7b4/0x1150 [ 431.386504][T18719] sock_do_ioctl+0x22c/0x300 [ 431.386521][T18719] ? __pfx_sock_do_ioctl+0x10/0x10 [ 431.386542][T18719] sock_ioctl+0x576/0x790 [ 431.386558][T18719] ? __pfx_sock_ioctl+0x10/0x10 [ 431.386575][T18719] ? __fget_files+0x3a0/0x420 [ 431.386592][T18719] ? __fget_files+0x2a/0x420 [ 431.386611][T18719] ? bpf_lsm_file_ioctl+0x9/0x20 [ 431.386626][T18719] ? __pfx_sock_ioctl+0x10/0x10 [ 431.386641][T18719] __se_sys_ioctl+0xf9/0x170 [ 431.386665][T18719] do_syscall_64+0xfa/0xfa0 [ 431.386689][T18719] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.386712][T18719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.386728][T18719] ? clear_bhb_loop+0x60/0xb0 [ 431.386746][T18719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.386761][T18719] RIP: 0033:0x7f342cf8eec9 [ 431.386777][T18719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.386792][T18719] RSP: 002b:00007f342ddda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.386818][T18719] RAX: ffffffffffffffda RBX: 00007f342d1e6090 RCX: 00007f342cf8eec9 [ 431.386830][T18719] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 431.386841][T18719] RBP: 00007f342d011f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.386851][T18719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.386862][T18719] R13: 00007f342d1e6128 R14: 00007f342d1e6090 R15: 00007fffd670cc38 [ 431.386880][T18719] [ 431.402478][T18721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4556'. [ 431.453415][T18717] x_tables: duplicate underflow at hook 1 [ 431.489986][T18714] warn_alloc: 2 callbacks suppressed [ 431.490006][T18714] syz.0.4553: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 431.742559][T18714] CPU: 1 UID: 0 PID: 18714 Comm: syz.0.4553 Not tainted syzkaller #0 PREEMPT(full) [ 431.742588][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 431.742603][T18714] Call Trace: [ 431.742611][T18714] [ 431.742621][T18714] dump_stack_lvl+0x189/0x250 [ 431.742650][T18714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.742716][T18714] ? __pfx__printk+0x10/0x10 [ 431.742735][T18714] ? lock_release+0x4b/0x3e0 [ 431.742765][T18714] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 431.742790][T18714] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 431.742822][T18714] warn_alloc+0x214/0x310 [ 431.742848][T18714] ? stack_depot_save_flags+0x40/0x860 [ 431.742870][T18714] ? __pfx_warn_alloc+0x10/0x10 [ 431.742894][T18714] ? kasan_save_track+0x4f/0x80 [ 431.742913][T18714] ? xskq_create+0x56/0x170 [ 431.743004][T18714] ? xsk_init_queue+0xb0/0x110 [ 431.743029][T18714] ? xsk_setsockopt+0x4dc/0x8d0 [ 431.743068][T18714] ? do_sock_setsockopt+0x179/0x1b0 [ 431.743095][T18714] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 431.743120][T18714] ? do_syscall_64+0xfa/0xfa0 [ 431.743149][T18714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.743174][T18714] __vmalloc_node_range_noprof+0x125/0x12f0 [ 431.743212][T18714] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 431.743235][T18714] ? xsk_setsockopt+0x462/0x8d0 [ 431.743261][T18714] ? __kasan_kmalloc+0x93/0xb0 [ 431.743284][T18714] vmalloc_user_noprof+0xad/0xf0 [ 431.743307][T18714] ? xskq_create+0xbf/0x170 [ 431.743334][T18714] xskq_create+0xbf/0x170 [ 431.743362][T18714] xsk_init_queue+0xb0/0x110 [ 431.743389][T18714] xsk_setsockopt+0x4dc/0x8d0 [ 431.743414][T18714] ? __pfx_xsk_setsockopt+0x10/0x10 [ 431.743441][T18714] ? __pfx_aa_sk_perm+0x10/0x10 [ 431.743463][T18714] ? lock_release+0x4b/0x3e0 [ 431.743490][T18714] ? aa_sock_opt_perm+0xff/0x1b0 [ 431.743517][T18714] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 431.743544][T18714] ? __pfx_xsk_setsockopt+0x10/0x10 [ 431.743571][T18714] do_sock_setsockopt+0x179/0x1b0 [ 431.743600][T18714] __x64_sys_setsockopt+0x13f/0x1b0 [ 431.743628][T18714] do_syscall_64+0xfa/0xfa0 [ 431.743653][T18714] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.743678][T18714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.743697][T18714] ? clear_bhb_loop+0x60/0xb0 [ 431.743718][T18714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.743739][T18714] RIP: 0033:0x7f342cf8eec9 [ 431.743758][T18714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.743777][T18714] RSP: 002b:00007f342ddfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.743802][T18714] RAX: ffffffffffffffda RBX: 00007f342d1e5fa0 RCX: 00007f342cf8eec9 [ 431.743818][T18714] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 431.743831][T18714] RBP: 00007f342d011f91 R08: 0000000000000004 R09: 0000000000000000 [ 431.743844][T18714] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.743857][T18714] R13: 00007f342d1e6038 R14: 00007f342d1e5fa0 R15: 00007fffd670cc38 [ 431.743891][T18714] [ 431.743937][T18714] Mem-Info: [ 432.050646][T18714] active_anon:4646 inactive_anon:0 isolated_anon:0 [ 432.050646][T18714] active_file:3545 inactive_file:40016 isolated_file:0 [ 432.050646][T18714] unevictable:768 dirty:218 writeback:0 [ 432.050646][T18714] slab_reclaimable:11854 slab_unreclaimable:108820 [ 432.050646][T18714] mapped:29344 shmem:1353 pagetables:1233 [ 432.050646][T18714] sec_pagetables:0 bounce:0 [ 432.050646][T18714] kernel_misc_reclaimable:0 [ 432.050646][T18714] free:1317160 free_pcp:14051 free_cma:0 [ 432.096509][T18714] Node 0 active_anon:18584kB inactive_anon:0kB active_file:14180kB inactive_file:159864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117376kB dirty:872kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13680kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 432.128532][T18714] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 432.159721][T18714] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.188997][T18714] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 432.194885][T18714] Node 0 DMA32 free:1362232kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18540kB inactive_anon:0kB active_file:14180kB inactive_file:158032kB unevictable:1536kB writepending:872kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:40524kB local_pcp:19692kB free_cma:0kB [ 432.227329][T18714] lowmem_reserve[]: 0 0 1 1 1 [ 432.232154][T18714] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 432.261543][T18714] lowmem_reserve[]: 0 0 0 0 0 [ 432.266295][T18714] Node 1 Normal free:3890648kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16512kB local_pcp:7872kB free_cma:0kB [ 432.298125][T18714] lowmem_reserve[]: 0 0 0 0 0 [ 432.302978][T18714] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 432.315703][T18714] Node 0 DMA32: 1320*4kB (UME) 1787*8kB (UM) 1084*16kB (UME) 1283*32kB (UME) 745*64kB (UM) 513*128kB (UME) 394*256kB (UM) 240*512kB (UE) 107*1024kB (UM) 7*2048kB (UM) 201*4096kB (UM) = 1362264kB [ 432.335203][T18714] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 432.347217][T18714] Node 1 Normal: 206*4kB (UME) 58*8kB (UME) 49*16kB (UME) 162*32kB (UME) 50*64kB (UME) 16*128kB (UME) 5*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3890648kB [ 432.365538][T18714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.375120][T18714] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.384528][T18714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.394245][T18714] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.403941][T18714] 44910 total pagecache pages [ 432.412260][T18714] 0 pages in swap cache [ 432.416562][T18714] Free swap = 124996kB [ 432.420945][T18714] Total swap = 124996kB [ 432.425117][T18714] 2097051 pages RAM [ 432.429003][T18714] 0 pages HighMem/MovableOnly [ 432.433784][T18714] 424452 pages reserved [ 432.437941][T18714] 0 pages cma reserved [ 440.330204][ T1300] ieee802154 phy1 wpan1: encryption failed: -22