last executing test programs: 1m48.921335848s ago: executing program 3 (id=20): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000380)='y', 0x1, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0xa8}], 0x1, 0x3, 0x0) 1m48.666358252s ago: executing program 3 (id=21): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "bf72ffbf28697fa1", "86ee872aa4c479cc540918f2194b0a36", "dd64a4d6", "10f863246e29ba38"}, 0x28) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r1, 0x0, 0x8005) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000500), &(0x7f0000000580)=0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendto$inet6(r2, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000480)='yeah', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) shutdown(r2, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x30, 0x1, 0x4, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x58a}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m47.382400999s ago: executing program 3 (id=31): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmsg$inet6(r0, 0x0, 0x4000000) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 1m47.058340715s ago: executing program 3 (id=34): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, 0x0, 0x60b, 0x70bd31, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x4000000) 1m46.811697625s ago: executing program 3 (id=38): close(0x4) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4000085) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) unshare(0x2c020400) writev(r3, 0x0, 0x0) write$tun(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x5}, 0x8) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) 1m45.670724256s ago: executing program 3 (id=45): r0 = socket$unix(0x1, 0x5, 0x0) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r0, 0x7) accept$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbd}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) 1m30.400218824s ago: executing program 32 (id=45): r0 = socket$unix(0x1, 0x5, 0x0) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r0, 0x7) accept$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbd}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) 2.947426159s ago: executing program 1 (id=1113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) socket$inet(0x2, 0x3, 0x33) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.860488053s ago: executing program 1 (id=1115): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x900, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) 2.764092651s ago: executing program 5 (id=1118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70a000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000001540)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)) 2.69194208s ago: executing program 5 (id=1120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket(0x10, 0x5, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="f00014000a000100"], 0x30}}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{}]}) 2.566500279s ago: executing program 5 (id=1122): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB='\f'], 0x34}}, 0x8080) (fail_nth: 6) 2.173235334s ago: executing program 5 (id=1123): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x31}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x4, 0x7, 0xe48, 0x4, 0xffd, 0x10000, 0x9, 0x9}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 2.038749034s ago: executing program 5 (id=1126): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) socket$inet(0x2, 0x3, 0x33) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.897076267s ago: executing program 1 (id=1129): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x411, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x34000, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.882742244s ago: executing program 5 (id=1130): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r2, 0x0, 0x80, 0x8) socket(0x2, 0x80805, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) 1.633845839s ago: executing program 4 (id=1137): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000680)={0xc24f, 0xc, 0x200, 0x8}, &(0x7f00000006c0)=0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x2, 0xc8, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x80, 0x80, 0xffff, 0x10001}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000611468000000000005000000000000009500000000000000779f9fa2e91cfa4af1ccc92c5a388253597a5af4a7db3b1ebf2645589098a327d63ecbd5e23c039b1c21acc73ea3ce5a35ff5c8d9aecbb8bbb1ce5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sock_ops}, 0x94) (async) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000200)) 1.520898987s ago: executing program 0 (id=1138): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0xffffffff, 0x12, 0x110}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0xa, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7ff, 0x1, 0x8, 0x9, 0x5b, 0x200, 0xe, 0xfffffc01, 0x8000}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0xfff1, 0x4}}}, 0x24}}, 0x0) 1.429572334s ago: executing program 0 (id=1139): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x71) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(r1, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x3, {{}, 0x4}}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) write(r5, &(0x7f0000000300)="1c0000001a005f0214f9f4070d0903001f000000fe05000000020000", 0x1c) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, 0x0, 0x44811) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) connect$802154_dgram(r1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x12}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x20, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x23}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$sock(r10, &(0x7f0000000240)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x100000001, @my=0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)="5921151a75bd964e2d64b4aa7d5c5a947f6a7284f4fa8ea527c5c0d3c4a2dc1961643fc6082a9117ff0f7bb98c25b6fc0b667ca78ddd9d3f79f4c87a9262c1d698e398fc8ed74ecac89f0faf44b2a8c8541058df3b9573b0866918d4e1d2194ef7c11e3e53c7d0fa88315afbc7e6a8d03878d4e96e69120d9f7960853e9112f85588f36a80b842fed155e356c50de73bc2d14d18bd908e04cc4c4ec990c9d251cf2fc2fc064a39fd217b311f292eba7ce8da776806ea04e46bd08f81ddf6073fca7d8a8064959202ce16309ac2fbefcc1f7ec7791a06d1069a77f3306ded3190d08d4c", 0xe3}, {&(0x7f0000000400)="b2e671d63464114a176cd87c9eedd6206743a6e88943706d9f81ce739e49824bee52a6dd9924cafe35e9affe9185e8df9f4f154deb47ab58a81824e13ad8a0fbcfdce6b1ac42a55f8f53f0113188d40b152485ad2b79c406d6aa9149b57d3c9c5bf3a37a59493afdeeba63d0b6d53cd60e7c970904e229fc7181a2e4f28fa150e1", 0x81}, {&(0x7f00000004c0)="a5d36280b2d7470bb4ce512af75f654fe27d07659bd5f895b2e70c19e8a20ed910c0135147991cc74117a54d334f5d1542fa30899845ac6c82165200ec390eda368aeb55d9fc406ddb2d6dec719fb0f40b63d0025888ec96798fbd976753f4805d4f605bb94ef7341e773b12d5be02c8c50ba630be5f703759d1ba50ecd774ffbdbe5f52b50b87543dd48d55c7b6cfa7a627be6d45c7003d84073e8233d953e81b423f63574365b07d54a2e5be152e48f0d202abcf475b3714f1a8aedfdd04943d97", 0xc2}], 0x3, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x4587}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xe00}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}], 0xf0}, 0x40014) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x26008001, &(0x7f0000000040)={0xa, 0x2, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 1.354083508s ago: executing program 2 (id=1140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x26}, 0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000300)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000020000006d0500000100000000", @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r5}, 0x38) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0xd0, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xce}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0xc080) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.218739497s ago: executing program 2 (id=1141): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x1, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_SET(r0, 0x0, 0x800) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x1084) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) sendmmsg$inet(r2, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x7}, @remote}}}], 0x20}}], 0x1, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xa, 0xb, 0x5, 0x2b, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}, @sadb_key={0x5, 0x8, 0xd0, 0x0, "624981fbe847947b09885f2bc939854dc7fb96656e6b5fe6fa51"}, @sadb_x_sec_ctx={0x1d, 0x18, 0xfc, 0xd, 0xd9, "691b9b48e4a2e06620160ddc8161912e0cba923720abcfa40bbba0f6bdb3812293c56c2f8b13ad043c1799d8e1ff1ba44ff8cdde989304123c42ebde0c63ff6bac11190f5b8a1d8d5f54c75bbea04d88ba38eb376b472766bc6fc45e7d4c246f68900becc1b45612eaaa923aa0d815e6e4c8deed2266286dccda532d37b9b7a4058397502891fc4551935517697a010250a7bacf3bc8ea6c05fd7d25dd34ed1be8a25afe027ee142b5ea62489b8102855796e77f9679fbeac595a635bd326530c21045f666e6e11aadfcd617d0a4ccfc6265d5594c39c9555b"}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x1, 0x4, 0x6}]}, 0x158}}, 0xc800) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0100000002001a7094580f010e42127e01eba085"]) 1.218393432s ago: executing program 4 (id=1142): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000000000000020000001800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a32000000001400"], 0x6c}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 1.106250542s ago: executing program 4 (id=1143): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b705000000000000711048000000000006000000000095000000000000003575e8a83d3f0aa35908faa724cfb26b2e28908e207e9195a260e0f12ec42c583a66e352f2a0a0932ca764cb9121570385ee3d613933a8ee80820000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0xccc73dd78b70f8c5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0xa, 0x0, 0x87) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd00000000000000720896bba4b0ac43109cd34e9d7dc51dcf26960026404e7a5ef4b249cab8526efda284634ae585a109c012c40676d7d60ebd142af34706d1166b6e66b47ad55be0ed6b1a6f8ee46ad14ab46c", 0x83}, {0x0}, {0x0}], 0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) recvfrom$inet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000fde100140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.038005381s ago: executing program 2 (id=1144): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040400) unshare(0x44000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (fail_nth: 2) 964.796958ms ago: executing program 1 (id=1145): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0xb026e000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/29, 0x1d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x44101) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@broadcast, @remote}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 945.859437ms ago: executing program 0 (id=1146): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002000c0002001b0000001f00000006000100000004060600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}}, 0x0) 722.256592ms ago: executing program 1 (id=1147): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934", 0x52}], 0x1, 0x0, 0x0, 0x41020000}}], 0x1, 0x480e0) 563.803641ms ago: executing program 1 (id=1148): socket$nl_netfilter(0x10, 0x3, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x90}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00P\x00', @ANYRES16, @ANYBLOB="02022abd7000fcdbdf25070000001c000380050008007000000008000500e0000002060007004e20000008000400d3000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) 430.296629ms ago: executing program 0 (id=1149): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb080045000030000000000502907800000000e000030003099078006701ff450969d200660fff04210008e0000001e0000002c007a5c1023222319178c19479738eaba474eaf3dc5a732f0c02db96a32c7074dd609f182ed224edac6f53ba7f3b76050c839054a6cd51ddd20706cc0167ddda7531e5a77f544b4fff8462c3d97cf7c1edc65a3634f867681a24622106c4a02106586f971b812c6a7a872b223873299e45c0711b6848aeba73aa5ec8c03d1252349190c4f7dabaaf4496ce64e1d0e46833f7186dffb60cadb4cf5d2c11894a59a989a7aa93822570"], 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 329.827463ms ago: executing program 2 (id=1150): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) unshare(0x20000400) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r1, 0xa1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) recvmmsg$unix(r2, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/238, 0xee}, {&(0x7f00000014c0)=""/47, 0x2f}], 0x6, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001680)=""/115, 0x73}, {&(0x7f0000001700)=""/49, 0x31}, {&(0x7f0000001740)=""/122, 0x7a}, {&(0x7f00000017c0)=""/146, 0x92}, {&(0x7f0000001880)=""/137, 0x89}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/247, 0xf7}], 0x7, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}], 0x2, 0x2100, &(0x7f0000002c80)) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x4, 0x25ffdbfe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 296.049503ms ago: executing program 2 (id=1151): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0xa, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd5000000ea00000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff030000080009000100"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) 273.570535ms ago: executing program 0 (id=1152): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="3e8d2c921542f66838a3b7"], 0x38}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000001c0)=0x9, 0x4) 162.255422ms ago: executing program 4 (id=1153): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000000000000020000001800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a32000000001400"], 0x6c}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 124.801476ms ago: executing program 4 (id=1154): r0 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000340)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xfffffdd7, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netlink_extack\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x18, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x8, 0x117, 0x0, 0x1, [@typed={0x4, 0xeb}]}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) 77.969502ms ago: executing program 0 (id=1155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x411, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x34000, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 887.509µs ago: executing program 4 (id=1156): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x9081}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x17}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24020800}, 0x4001) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/61, 0x3d}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000003c80)=""/4100, 0x1004}, {&(0x7f0000001480)=""/4102, 0x1006}], 0x4}, 0x9}], 0x1, 0x40010141, 0x0) 0s ago: executing program 2 (id=1157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = accept4(r1, &(0x7f0000000000)=@phonet, &(0x7f00000000c0)=0x80, 0x80000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cubic', 0xfcc1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): n process `syz.0.710'. [ 157.306567][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 157.359322][ T8051] netlink: 'syz.1.714': attribute type 10 has an invalid length. [ 157.461360][ T8051] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.612411][ T8061] netlink: 'syz.4.719': attribute type 10 has an invalid length. [ 157.655899][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.673739][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.722'. [ 157.685811][ T8061] bridge_slave_1: left allmulticast mode [ 157.692835][ T8061] bridge_slave_1: left promiscuous mode [ 157.718597][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.828618][ T8061] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 158.470919][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 158.611474][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'. [ 158.785513][ T8102] 8021q: VLANs not supported on gre0 [ 159.955901][ T8164] FAULT_INJECTION: forcing a failure. [ 159.955901][ T8164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.013929][ T8164] CPU: 0 UID: 0 PID: 8164 Comm: syz.0.746 Not tainted syzkaller #0 PREEMPT(full) [ 160.013956][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.013967][ T8164] Call Trace: [ 160.013975][ T8164] [ 160.013984][ T8164] dump_stack_lvl+0x189/0x250 [ 160.014014][ T8164] ? __pfx____ratelimit+0x10/0x10 [ 160.014047][ T8164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.014071][ T8164] ? __pfx__printk+0x10/0x10 [ 160.014090][ T8164] ? __might_fault+0xb0/0x130 [ 160.014127][ T8164] should_fail_ex+0x414/0x560 [ 160.014162][ T8164] _copy_from_user+0x2d/0xb0 [ 160.014188][ T8164] kstrtouint_from_user+0xc4/0x170 [ 160.014211][ T8164] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 160.014251][ T8164] proc_fail_nth_write+0x88/0x200 [ 160.014277][ T8164] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.014308][ T8164] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.014334][ T8164] vfs_write+0x27e/0xb30 [ 160.014371][ T8164] ? __pfx_vfs_write+0x10/0x10 [ 160.014399][ T8164] ? __fget_files+0x2a/0x420 [ 160.014422][ T8164] ? __fget_files+0x3a0/0x420 [ 160.014438][ T8164] ? __fget_files+0x2a/0x420 [ 160.014465][ T8164] ksys_write+0x145/0x250 [ 160.014494][ T8164] ? __pfx_ksys_write+0x10/0x10 [ 160.014525][ T8164] ? do_syscall_64+0xbe/0xfa0 [ 160.014555][ T8164] do_syscall_64+0xfa/0xfa0 [ 160.014580][ T8164] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.014607][ T8164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.014625][ T8164] ? clear_bhb_loop+0x60/0xb0 [ 160.014648][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.014666][ T8164] RIP: 0033:0x7fe9b098e1ff [ 160.014686][ T8164] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 160.014703][ T8164] RSP: 002b:00007fe9b18ea030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 160.014722][ T8164] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe9b098e1ff [ 160.014735][ T8164] RDX: 0000000000000001 RSI: 00007fe9b18ea0a0 RDI: 0000000000000004 [ 160.014746][ T8164] RBP: 00007fe9b18ea090 R08: 0000000000000000 R09: 0000000000000000 [ 160.014758][ T8164] R10: 00000000000480e0 R11: 0000000000000293 R12: 0000000000000001 [ 160.014769][ T8164] R13: 00007fe9b0be6038 R14: 00007fe9b0be5fa0 R15: 00007fffd70cb8a8 [ 160.014801][ T8164] [ 160.514252][ T8169] FAULT_INJECTION: forcing a failure. [ 160.514252][ T8169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.565089][ T8169] CPU: 0 UID: 0 PID: 8169 Comm: syz.4.747 Not tainted syzkaller #0 PREEMPT(full) [ 160.565116][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.565128][ T8169] Call Trace: [ 160.565136][ T8169] [ 160.565144][ T8169] dump_stack_lvl+0x189/0x250 [ 160.565176][ T8169] ? __pfx____ratelimit+0x10/0x10 [ 160.565203][ T8169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.565229][ T8169] ? __pfx__printk+0x10/0x10 [ 160.565250][ T8169] ? __might_fault+0xb0/0x130 [ 160.565289][ T8169] should_fail_ex+0x414/0x560 [ 160.565324][ T8169] _copy_from_iter+0x1de/0x1790 [ 160.565354][ T8169] ? rcu_is_watching+0x15/0xb0 [ 160.565381][ T8169] ? kmalloc_reserve+0xbd/0x290 [ 160.565400][ T8169] ? __pfx__copy_from_iter+0x10/0x10 [ 160.565425][ T8169] ? __build_skb_around+0x262/0x3f0 [ 160.565448][ T8169] ? netlink_sendmsg+0x642/0xb30 [ 160.565467][ T8169] ? skb_put+0x11b/0x210 [ 160.565490][ T8169] netlink_sendmsg+0x6b2/0xb30 [ 160.565520][ T8169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.565545][ T8169] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.565575][ T8169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.565593][ T8169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.565613][ T8169] __sock_sendmsg+0x21c/0x270 [ 160.565643][ T8169] ____sys_sendmsg+0x505/0x830 [ 160.565672][ T8169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.565704][ T8169] ? import_iovec+0x74/0xa0 [ 160.565731][ T8169] ___sys_sendmsg+0x21f/0x2a0 [ 160.565756][ T8169] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.565817][ T8169] ? __fget_files+0x2a/0x420 [ 160.565835][ T8169] ? __fget_files+0x3a0/0x420 [ 160.565866][ T8169] __x64_sys_sendmsg+0x19b/0x260 [ 160.565891][ T8169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.565924][ T8169] ? __pfx_ksys_write+0x10/0x10 [ 160.565956][ T8169] ? do_syscall_64+0xbe/0xfa0 [ 160.565993][ T8169] do_syscall_64+0xfa/0xfa0 [ 160.566019][ T8169] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.566047][ T8169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.566067][ T8169] ? clear_bhb_loop+0x60/0xb0 [ 160.566091][ T8169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.566110][ T8169] RIP: 0033:0x7fc55818f749 [ 160.566128][ T8169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.566146][ T8169] RSP: 002b:00007fc559040038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.566167][ T8169] RAX: ffffffffffffffda RBX: 00007fc5583e5fa0 RCX: 00007fc55818f749 [ 160.566182][ T8169] RDX: 0000000025000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 160.566196][ T8169] RBP: 00007fc559040090 R08: 0000000000000000 R09: 0000000000000000 [ 160.566208][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.566220][ T8169] R13: 00007fc5583e6038 R14: 00007fc5583e5fa0 R15: 00007ffc6a488658 [ 160.566254][ T8169] [ 161.015698][ T8180] FAULT_INJECTION: forcing a failure. [ 161.015698][ T8180] name failslab, interval 1, probability 0, space 0, times 0 [ 161.030451][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 161.067292][ T8180] CPU: 0 UID: 0 PID: 8180 Comm: syz.2.752 Not tainted syzkaller #0 PREEMPT(full) [ 161.067318][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.067330][ T8180] Call Trace: [ 161.067338][ T8180] [ 161.067346][ T8180] dump_stack_lvl+0x189/0x250 [ 161.067377][ T8180] ? __pfx____ratelimit+0x10/0x10 [ 161.067404][ T8180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.067431][ T8180] ? __pfx__printk+0x10/0x10 [ 161.067457][ T8180] ? __lock_acquire+0xab9/0xd20 [ 161.067484][ T8180] should_fail_ex+0x414/0x560 [ 161.067518][ T8180] should_failslab+0xa8/0x100 [ 161.067540][ T8180] kmem_cache_alloc_noprof+0x74/0x6e0 [ 161.067568][ T8180] ? skb_clone+0x212/0x3a0 [ 161.067596][ T8180] skb_clone+0x212/0x3a0 [ 161.067620][ T8180] __netlink_deliver_tap+0x404/0x850 [ 161.067654][ T8180] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.067675][ T8180] netlink_deliver_tap+0x19c/0x1b0 [ 161.067693][ T8180] netlink_unicast+0x7fa/0x9e0 [ 161.067728][ T8180] ? __pfx_netlink_unicast+0x10/0x10 [ 161.067756][ T8180] ? netlink_sendmsg+0x642/0xb30 [ 161.067772][ T8180] ? skb_put+0x11b/0x210 [ 161.067793][ T8180] netlink_sendmsg+0x805/0xb30 [ 161.067822][ T8180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.067846][ T8180] ? aa_sock_msg_perm+0xf1/0x1d0 [ 161.067876][ T8180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.067896][ T8180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.067917][ T8180] __sock_sendmsg+0x21c/0x270 [ 161.067947][ T8180] ____sys_sendmsg+0x505/0x830 [ 161.067975][ T8180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.068007][ T8180] ? import_iovec+0x74/0xa0 [ 161.068043][ T8180] ___sys_sendmsg+0x21f/0x2a0 [ 161.068067][ T8180] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.068129][ T8180] ? __fget_files+0x2a/0x420 [ 161.068146][ T8180] ? __fget_files+0x3a0/0x420 [ 161.068175][ T8180] __x64_sys_sendmsg+0x19b/0x260 [ 161.068200][ T8180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.068230][ T8180] ? __pfx_ksys_write+0x10/0x10 [ 161.068267][ T8180] ? do_syscall_64+0xbe/0xfa0 [ 161.068299][ T8180] do_syscall_64+0xfa/0xfa0 [ 161.068325][ T8180] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.068353][ T8180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.068372][ T8180] ? clear_bhb_loop+0x60/0xb0 [ 161.068396][ T8180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.068414][ T8180] RIP: 0033:0x7f33d578f749 [ 161.068432][ T8180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.068449][ T8180] RSP: 002b:00007f33d658a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.068470][ T8180] RAX: ffffffffffffffda RBX: 00007f33d59e5fa0 RCX: 00007f33d578f749 [ 161.068484][ T8180] RDX: 0000000000004004 RSI: 0000200000000200 RDI: 0000000000000003 [ 161.068496][ T8180] RBP: 00007f33d658a090 R08: 0000000000000000 R09: 0000000000000000 [ 161.068509][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.068521][ T8180] R13: 00007f33d59e6038 R14: 00007f33d59e5fa0 R15: 00007ffde49bdf68 [ 161.068554][ T8180] [ 161.417118][ T8185] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 161.444198][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 161.696977][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.704909][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.751342][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.756'. [ 161.804278][ T8180] team0: left promiscuous mode [ 161.852831][ T8216] netlink: 28 bytes leftover after parsing attributes in process `syz.5.756'. [ 161.872768][ T8180] team_slave_0: left promiscuous mode [ 161.903403][ T8180] team_slave_1: left promiscuous mode [ 162.249375][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.281333][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.575317][ T3476] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.606587][ T3476] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.657357][ T3476] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.692541][ T3476] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.755436][ T8244] FAULT_INJECTION: forcing a failure. [ 162.755436][ T8244] name failslab, interval 1, probability 0, space 0, times 0 [ 162.803935][ T8244] CPU: 0 UID: 0 PID: 8244 Comm: syz.1.763 Not tainted syzkaller #0 PREEMPT(full) [ 162.803962][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.803973][ T8244] Call Trace: [ 162.803981][ T8244] [ 162.803989][ T8244] dump_stack_lvl+0x189/0x250 [ 162.804019][ T8244] ? __pfx____ratelimit+0x10/0x10 [ 162.804045][ T8244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.804071][ T8244] ? __pfx__printk+0x10/0x10 [ 162.804095][ T8244] ? __nla_validate_parse+0x2400/0x2d40 [ 162.804120][ T8244] should_fail_ex+0x414/0x560 [ 162.804152][ T8244] should_failslab+0xa8/0x100 [ 162.804173][ T8244] kmem_cache_alloc_noprof+0x74/0x6e0 [ 162.804201][ T8244] ? xfrm_state_alloc+0x24/0x2f0 [ 162.804227][ T8244] ? kasan_quarantine_put+0xdd/0x220 [ 162.804257][ T8244] xfrm_state_alloc+0x24/0x2f0 [ 162.804287][ T8244] xfrm_add_sa+0x17d1/0x4200 [ 162.804320][ T8244] ? __pfx_xfrm_add_sa+0x10/0x10 [ 162.804340][ T8244] ? apparmor_capable+0x137/0x1b0 [ 162.804367][ T8244] ? __nla_parse+0x40/0x60 [ 162.804391][ T8244] xfrm_user_rcv_msg+0x7a3/0xab0 [ 162.804420][ T8244] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 162.804476][ T8244] ? __pfx___mutex_trylock_common+0x10/0x10 [ 162.804505][ T8244] ? rcu_is_watching+0x15/0xb0 [ 162.804529][ T8244] ? trace_contention_end+0x39/0x120 [ 162.804553][ T8244] ? __mutex_lock+0x335/0x1350 [ 162.804587][ T8244] netlink_rcv_skb+0x208/0x470 [ 162.804618][ T8244] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 162.804643][ T8244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.804681][ T8244] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.804697][ T8244] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.804716][ T8244] xfrm_netlink_rcv+0x79/0x90 [ 162.804738][ T8244] netlink_unicast+0x82f/0x9e0 [ 162.804771][ T8244] ? __pfx_netlink_unicast+0x10/0x10 [ 162.804800][ T8244] ? netlink_sendmsg+0x642/0xb30 [ 162.804817][ T8244] ? skb_put+0x11b/0x210 [ 162.804841][ T8244] netlink_sendmsg+0x805/0xb30 [ 162.804867][ T8244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.804889][ T8244] ? aa_sock_msg_perm+0xf1/0x1d0 [ 162.804917][ T8244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.804936][ T8244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.804957][ T8244] __sock_sendmsg+0x21c/0x270 [ 162.804986][ T8244] ____sys_sendmsg+0x505/0x830 [ 162.805013][ T8244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.805044][ T8244] ? import_iovec+0x74/0xa0 [ 162.805071][ T8244] ___sys_sendmsg+0x21f/0x2a0 [ 162.805093][ T8244] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.805153][ T8244] ? __fget_files+0x2a/0x420 [ 162.805171][ T8244] ? __fget_files+0x3a0/0x420 [ 162.805201][ T8244] __x64_sys_sendmsg+0x19b/0x260 [ 162.805225][ T8244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.805255][ T8244] ? __pfx_ksys_write+0x10/0x10 [ 162.805286][ T8244] ? do_syscall_64+0xbe/0xfa0 [ 162.805317][ T8244] do_syscall_64+0xfa/0xfa0 [ 162.805343][ T8244] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.805368][ T8244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.805385][ T8244] ? clear_bhb_loop+0x60/0xb0 [ 162.805408][ T8244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.805426][ T8244] RIP: 0033:0x7f56d1d8f749 [ 162.805443][ T8244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.805460][ T8244] RSP: 002b:00007f56d2c53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.805481][ T8244] RAX: ffffffffffffffda RBX: 00007f56d1fe5fa0 RCX: 00007f56d1d8f749 [ 162.805496][ T8244] RDX: 0000000020004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 162.805509][ T8244] RBP: 00007f56d2c53090 R08: 0000000000000000 R09: 0000000000000000 [ 162.805520][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.805532][ T8244] R13: 00007f56d1fe6038 R14: 00007f56d1fe5fa0 R15: 00007ffc5831ead8 [ 162.805565][ T8244] [ 163.216941][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 163.288317][ T8255] xt_cgroup: xt_cgroup: no path or classid specified [ 163.473273][ T8267] openvswitch: netlink: Missing valid actions attribute. [ 163.480921][ T8267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.595745][ T8273] Bluetooth: MGMT ver 1.23 [ 163.686105][ T8276] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.121744][ T8297] netlink: 'syz.5.780': attribute type 10 has an invalid length. [ 164.236975][ T8297] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 164.246522][ T8303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.787'. [ 164.256314][ T8303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.787'. [ 164.267028][ T8301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.785'. [ 164.272479][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 164.295709][ T8301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.785'. [ 164.309703][ T8300] IPVS: length: 157 != 24 [ 164.340651][ T8308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.787'. [ 164.942447][ T8345] FAULT_INJECTION: forcing a failure. [ 164.942447][ T8345] name failslab, interval 1, probability 0, space 0, times 0 [ 164.956213][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 164.974422][ T8345] CPU: 0 UID: 0 PID: 8345 Comm: syz.2.801 Not tainted syzkaller #0 PREEMPT(full) [ 164.974473][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.974483][ T8345] Call Trace: [ 164.974491][ T8345] [ 164.974499][ T8345] dump_stack_lvl+0x189/0x250 [ 164.974528][ T8345] ? __pfx____ratelimit+0x10/0x10 [ 164.974554][ T8345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.974587][ T8345] ? __pfx__printk+0x10/0x10 [ 164.974612][ T8345] ? __pfx___might_resched+0x10/0x10 [ 164.974639][ T8345] should_fail_ex+0x414/0x560 [ 164.974677][ T8345] should_failslab+0xa8/0x100 [ 164.974696][ T8345] kmem_cache_alloc_node_noprof+0x77/0x710 [ 164.974721][ T8345] ? __alloc_skb+0x112/0x2d0 [ 164.974744][ T8345] __alloc_skb+0x112/0x2d0 [ 164.974765][ T8345] netlink_ack+0x146/0xa50 [ 164.974781][ T8345] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.974828][ T8345] netlink_rcv_skb+0x28c/0x470 [ 164.974845][ T8345] ? __lock_acquire+0xab9/0xd20 [ 164.974864][ T8345] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.974895][ T8345] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.974926][ T8345] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.974954][ T8345] netlink_unicast+0x82f/0x9e0 [ 164.974990][ T8345] ? __pfx_netlink_unicast+0x10/0x10 [ 164.975020][ T8345] ? netlink_sendmsg+0x642/0xb30 [ 164.975037][ T8345] ? skb_put+0x11b/0x210 [ 164.975060][ T8345] netlink_sendmsg+0x805/0xb30 [ 164.975089][ T8345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.975110][ T8345] ? aa_sock_msg_perm+0xf1/0x1d0 [ 164.975139][ T8345] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.975158][ T8345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.975180][ T8345] __sock_sendmsg+0x21c/0x270 [ 164.975207][ T8345] ____sys_sendmsg+0x52d/0x830 [ 164.975232][ T8345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.975262][ T8345] ? import_iovec+0x74/0xa0 [ 164.975287][ T8345] ___sys_sendmsg+0x21f/0x2a0 [ 164.975310][ T8345] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.975364][ T8345] ? __fget_files+0x2a/0x420 [ 164.975381][ T8345] ? __fget_files+0x3a0/0x420 [ 164.975409][ T8345] __sys_sendmmsg+0x227/0x430 [ 164.975432][ T8345] ? __pfx___sys_sendmmsg+0x10/0x10 [ 164.975462][ T8345] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.975507][ T8345] ? ksys_write+0x22a/0x250 [ 164.975536][ T8345] ? __pfx_ksys_write+0x10/0x10 [ 164.975567][ T8345] __x64_sys_sendmmsg+0xa0/0xc0 [ 164.975599][ T8345] do_syscall_64+0xfa/0xfa0 [ 164.975624][ T8345] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.975648][ T8345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.975666][ T8345] ? clear_bhb_loop+0x60/0xb0 [ 164.975688][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.975707][ T8345] RIP: 0033:0x7f33d578f749 [ 164.975724][ T8345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.975740][ T8345] RSP: 002b:00007f33d658a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 164.975759][ T8345] RAX: ffffffffffffffda RBX: 00007f33d59e5fa0 RCX: 00007f33d578f749 [ 164.975773][ T8345] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 164.975787][ T8345] RBP: 00007f33d658a090 R08: 0000000000000000 R09: 0000000000000000 [ 164.975798][ T8345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.975810][ T8345] R13: 00007f33d59e6038 R14: 00007f33d59e5fa0 R15: 00007ffde49bdf68 [ 164.975842][ T8345] [ 164.995970][ T8348] tipc: Enabling of bearer rejected, already enabled [ 165.311586][ T8352] vcan0: entered allmulticast mode [ 165.480834][ T8364] netlink: 'syz.4.808': attribute type 39 has an invalid length. [ 165.823267][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'. [ 165.867444][ T8388] netlink: 204 bytes leftover after parsing attributes in process `syz.0.818'. [ 166.000664][ T8394] tipc: Enabling of bearer rejected, already enabled [ 166.193495][ T8403] veth0_to_team: entered promiscuous mode [ 166.247328][ T8403] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 166.291065][ T8408] netlink: 'syz.0.825': attribute type 1 has an invalid length. [ 166.310982][ T8408] openvswitch: netlink: Unknown key attributes 2 [ 166.574872][ T8425] netlink: 'syz.0.831': attribute type 10 has an invalid length. [ 166.603238][ T8425] team0: entered promiscuous mode [ 166.623454][ T8425] team_slave_0: entered promiscuous mode [ 166.644377][ T8425] team_slave_1: entered promiscuous mode [ 166.849508][ T8439] netlink: 'syz.0.838': attribute type 3 has an invalid length. [ 166.939239][ T8448] syz_tun: entered allmulticast mode [ 166.955120][ T8448] FAULT_INJECTION: forcing a failure. [ 166.955120][ T8448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.990610][ T8451] FAULT_INJECTION: forcing a failure. [ 166.990610][ T8451] name failslab, interval 1, probability 0, space 0, times 0 [ 167.015065][ T8448] CPU: 0 UID: 0 PID: 8448 Comm: syz.2.841 Not tainted syzkaller #0 PREEMPT(full) [ 167.015093][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.015105][ T8448] Call Trace: [ 167.015112][ T8448] [ 167.015121][ T8448] dump_stack_lvl+0x189/0x250 [ 167.015152][ T8448] ? __pfx____ratelimit+0x10/0x10 [ 167.015180][ T8448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.015206][ T8448] ? __pfx__printk+0x10/0x10 [ 167.015239][ T8448] should_fail_ex+0x414/0x560 [ 167.015274][ T8448] _copy_to_user+0x31/0xb0 [ 167.015302][ T8448] simple_read_from_buffer+0xe1/0x170 [ 167.015336][ T8448] proc_fail_nth_read+0x1b3/0x220 [ 167.015365][ T8448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.015399][ T8448] ? rw_verify_area+0x2a6/0x4d0 [ 167.015424][ T8448] ? __lock_acquire+0xab9/0xd20 [ 167.015441][ T8448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.015467][ T8448] vfs_read+0x200/0xa30 [ 167.015493][ T8448] ? fdget_pos+0x247/0x320 [ 167.015516][ T8448] ? __pfx___mutex_lock+0x10/0x10 [ 167.015546][ T8448] ? __pfx_vfs_read+0x10/0x10 [ 167.015572][ T8448] ? __fget_files+0x2a/0x420 [ 167.015595][ T8448] ? __fget_files+0x3a0/0x420 [ 167.015613][ T8448] ? __fget_files+0x2a/0x420 [ 167.015639][ T8448] ksys_read+0x145/0x250 [ 167.015669][ T8448] ? __pfx_ksys_read+0x10/0x10 [ 167.015699][ T8448] ? do_syscall_64+0xbe/0xfa0 [ 167.015731][ T8448] do_syscall_64+0xfa/0xfa0 [ 167.015757][ T8448] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.015784][ T8448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.015803][ T8448] ? clear_bhb_loop+0x60/0xb0 [ 167.015827][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.015845][ T8448] RIP: 0033:0x7f33d578e15c [ 167.015862][ T8448] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.015880][ T8448] RSP: 002b:00007f33d658a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.015900][ T8448] RAX: ffffffffffffffda RBX: 00007f33d59e5fa0 RCX: 00007f33d578e15c [ 167.015915][ T8448] RDX: 000000000000000f RSI: 00007f33d658a0a0 RDI: 0000000000000006 [ 167.015928][ T8448] RBP: 00007f33d658a090 R08: 0000000000000000 R09: 0000000000000000 [ 167.015939][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.015951][ T8448] R13: 00007f33d59e6038 R14: 00007f33d59e5fa0 R15: 00007ffde49bdf68 [ 167.015985][ T8448] [ 167.277456][ T8451] CPU: 0 UID: 0 PID: 8451 Comm: syz.0.844 Not tainted syzkaller #0 PREEMPT(full) [ 167.277483][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.277496][ T8451] Call Trace: [ 167.277504][ T8451] [ 167.277512][ T8451] dump_stack_lvl+0x189/0x250 [ 167.277544][ T8451] ? __pfx____ratelimit+0x10/0x10 [ 167.277572][ T8451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.277599][ T8451] ? __pfx__printk+0x10/0x10 [ 167.277627][ T8451] ? __pfx___might_resched+0x10/0x10 [ 167.277654][ T8451] should_fail_ex+0x414/0x560 [ 167.277690][ T8451] should_failslab+0xa8/0x100 [ 167.277713][ T8451] __kmalloc_cache_noprof+0x6f/0x6f0 [ 167.277743][ T8451] ? sctp_stream_init_ext+0x57/0x180 [ 167.277766][ T8451] ? __pfx_sctp_hash_transport+0x10/0x10 [ 167.277796][ T8451] sctp_stream_init_ext+0x57/0x180 [ 167.277825][ T8451] sctp_sendmsg_to_asoc+0x12f8/0x1810 [ 167.277845][ T8451] ? __asan_memcpy+0x40/0x70 [ 167.277879][ T8451] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 167.277914][ T8451] ? sctp_connect_new_asoc+0x3f0/0x690 [ 167.277935][ T8451] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 167.277957][ T8451] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 167.277979][ T8451] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 167.278000][ T8451] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 167.278019][ T8451] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 167.278041][ T8451] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 167.278063][ T8451] ? security_sctp_bind_connect+0x7e/0x2e0 [ 167.278091][ T8451] sctp_sendmsg+0x1941/0x2810 [ 167.278124][ T8451] ? __pfx_sctp_sendmsg+0x10/0x10 [ 167.278147][ T8451] ? aa_sk_perm+0x81e/0x950 [ 167.278181][ T8451] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.278212][ T8451] ? sock_rps_record_flow+0x19/0x410 [ 167.278236][ T8451] ? inet_sendmsg+0x2f4/0x370 [ 167.278254][ T8451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.278276][ T8451] __sock_sendmsg+0x19c/0x270 [ 167.278308][ T8451] __sys_sendto+0x3bd/0x520 [ 167.278330][ T8451] ? __pfx___sys_sendto+0x10/0x10 [ 167.278357][ T8451] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 167.278403][ T8451] ? __fget_files+0x3a0/0x420 [ 167.278434][ T8451] ? ksys_write+0x22a/0x250 [ 167.278465][ T8451] ? __pfx_ksys_write+0x10/0x10 [ 167.278502][ T8451] __x64_sys_sendto+0xde/0x100 [ 167.278525][ T8451] do_syscall_64+0xfa/0xfa0 [ 167.278552][ T8451] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.278580][ T8451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.278600][ T8451] ? clear_bhb_loop+0x60/0xb0 [ 167.278625][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.278644][ T8451] RIP: 0033:0x7fe9b098f749 [ 167.278662][ T8451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.278680][ T8451] RSP: 002b:00007fe9b18ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 167.278701][ T8451] RAX: ffffffffffffffda RBX: 00007fe9b0be5fa0 RCX: 00007fe9b098f749 [ 167.278716][ T8451] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 167.278729][ T8451] RBP: 00007fe9b18ea090 R08: 0000200000000200 R09: 000000000000001c [ 167.278743][ T8451] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 167.278756][ T8451] R13: 00007fe9b0be6038 R14: 00007fe9b0be5fa0 R15: 00007fffd70cb8a8 [ 167.278791][ T8451] [ 167.884890][ T8449] hsr_slave_0 (unregistering): left promiscuous mode [ 167.929309][ T8448] syz_tun: left allmulticast mode [ 168.715705][ T8506] __nla_validate_parse: 3 callbacks suppressed [ 168.715723][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 168.733625][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 168.744838][ T8506] netlink: 'syz.0.857': attribute type 3 has an invalid length. [ 168.849883][ T8512] netlink: 'syz.4.858': attribute type 4 has an invalid length. [ 169.217597][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 169.226104][ T8528] openvswitch: netlink: Flow actions attr not present in new flow. [ 169.688442][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.869'. [ 169.893436][ T5902] IPVS: starting estimator thread 0... [ 169.901129][ T8556] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.942023][ T8563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.996432][ T8565] IPVS: using max 32 ests per chain, 76800 per kthread [ 170.435135][ T8590] tipc: Enabling of bearer rejected, already enabled [ 170.560359][ T8598] FAULT_INJECTION: forcing a failure. [ 170.560359][ T8598] name failslab, interval 1, probability 0, space 0, times 0 [ 170.603840][ T8598] CPU: 1 UID: 0 PID: 8598 Comm: syz.2.881 Not tainted syzkaller #0 PREEMPT(full) [ 170.603866][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.603877][ T8598] Call Trace: [ 170.603885][ T8598] [ 170.603893][ T8598] dump_stack_lvl+0x189/0x250 [ 170.603923][ T8598] ? __pfx____ratelimit+0x10/0x10 [ 170.603948][ T8598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.603973][ T8598] ? __pfx__printk+0x10/0x10 [ 170.603990][ T8598] ? crng_make_state+0x34c/0x700 [ 170.604014][ T8598] ? crng_make_state+0x3fc/0x700 [ 170.604046][ T8598] ? crng_make_state+0x13a/0x700 [ 170.604068][ T8598] should_fail_ex+0x414/0x560 [ 170.604101][ T8598] should_failslab+0xa8/0x100 [ 170.604123][ T8598] __kmalloc_cache_noprof+0x6f/0x6f0 [ 170.604150][ T8598] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 170.604174][ T8598] ? sctp_add_bind_addr+0x8c/0x370 [ 170.604203][ T8598] sctp_add_bind_addr+0x8c/0x370 [ 170.604229][ T8598] sctp_copy_local_addr_list+0x30b/0x4e0 [ 170.604255][ T8598] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 170.604277][ T8598] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 170.604301][ T8598] ? sctp_v6_is_any+0x64/0x80 [ 170.604326][ T8598] ? sctp_copy_one_addr+0x93/0x360 [ 170.604350][ T8598] sctp_bind_addr_copy+0xb3/0x3c0 [ 170.604373][ T8598] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 170.604397][ T8598] sctp_connect_new_asoc+0x2e0/0x690 [ 170.604416][ T8598] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 170.604431][ T8598] ? __local_bh_enable_ip+0x12d/0x1c0 [ 170.604455][ T8598] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 170.604473][ T8598] ? security_sctp_bind_connect+0x7e/0x2e0 [ 170.604495][ T8598] sctp_sendmsg+0x155c/0x2810 [ 170.604523][ T8598] ? __pfx_sctp_sendmsg+0x10/0x10 [ 170.604542][ T8598] ? aa_sk_perm+0x81e/0x950 [ 170.604563][ T8598] ? __lock_acquire+0xab9/0xd20 [ 170.604582][ T8598] ? __pfx_aa_sk_perm+0x10/0x10 [ 170.604607][ T8598] ? sock_rps_record_flow+0x19/0x410 [ 170.604625][ T8598] ? inet_sendmsg+0x2f4/0x370 [ 170.604644][ T8598] __sock_sendmsg+0x19c/0x270 [ 170.604669][ T8598] ____sys_sendmsg+0x52d/0x830 [ 170.604694][ T8598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.604721][ T8598] ? import_iovec+0x74/0xa0 [ 170.604745][ T8598] ___sys_sendmsg+0x21f/0x2a0 [ 170.604765][ T8598] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.604816][ T8598] ? __fget_files+0x2a/0x420 [ 170.604830][ T8598] ? __fget_files+0x3a0/0x420 [ 170.604855][ T8598] __sys_sendmmsg+0x227/0x430 [ 170.604878][ T8598] ? __pfx___sys_sendmmsg+0x10/0x10 [ 170.604904][ T8598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 170.604945][ T8598] ? ksys_write+0x22a/0x250 [ 170.604969][ T8598] ? __pfx_ksys_write+0x10/0x10 [ 170.604996][ T8598] __x64_sys_sendmmsg+0xa0/0xc0 [ 170.605016][ T8598] do_syscall_64+0xfa/0xfa0 [ 170.605044][ T8598] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.605066][ T8598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.605081][ T8598] ? clear_bhb_loop+0x60/0xb0 [ 170.605101][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.605116][ T8598] RIP: 0033:0x7f33d578f749 [ 170.605131][ T8598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.605145][ T8598] RSP: 002b:00007f33d658a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 170.605164][ T8598] RAX: ffffffffffffffda RBX: 00007f33d59e5fa0 RCX: 00007f33d578f749 [ 170.605176][ T8598] RDX: 0000000000000001 RSI: 0000200000003c40 RDI: 0000000000000003 [ 170.605186][ T8598] RBP: 00007f33d658a090 R08: 0000000000000000 R09: 0000000000000000 [ 170.605196][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.605205][ T8598] R13: 00007f33d59e6038 R14: 00007f33d59e5fa0 R15: 00007ffde49bdf68 [ 170.605233][ T8598] [ 171.033861][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.887'. [ 171.042876][ T8607] netlink: 'syz.5.887': attribute type 7 has an invalid length. [ 171.054009][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.887'. [ 171.096409][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 171.105509][ T8596] netlink: 'syz.4.882': attribute type 4 has an invalid length. [ 171.476485][ T8636] FAULT_INJECTION: forcing a failure. [ 171.476485][ T8636] name failslab, interval 1, probability 0, space 0, times 0 [ 171.494107][ T8636] CPU: 0 UID: 0 PID: 8636 Comm: syz.0.899 Not tainted syzkaller #0 PREEMPT(full) [ 171.494133][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.494145][ T8636] Call Trace: [ 171.494153][ T8636] [ 171.494162][ T8636] dump_stack_lvl+0x189/0x250 [ 171.494192][ T8636] ? __pfx____ratelimit+0x10/0x10 [ 171.494219][ T8636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.494244][ T8636] ? __pfx__printk+0x10/0x10 [ 171.494279][ T8636] should_fail_ex+0x414/0x560 [ 171.494313][ T8636] should_failslab+0xa8/0x100 [ 171.494334][ T8636] __kmalloc_cache_noprof+0x6f/0x6f0 [ 171.494361][ T8636] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 171.494387][ T8636] ? sctp_v6_cmp_addr+0x15/0xd0 [ 171.494410][ T8636] ? sctp_add_bind_addr+0x8c/0x370 [ 171.494442][ T8636] sctp_add_bind_addr+0x8c/0x370 [ 171.494474][ T8636] sctp_copy_local_addr_list+0x30b/0x4e0 [ 171.494503][ T8636] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 171.494528][ T8636] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 171.494552][ T8636] ? sctp_association_new+0x18b3/0x25f0 [ 171.494574][ T8636] ? sctp_v6_is_any+0x64/0x80 [ 171.494601][ T8636] ? sctp_copy_one_addr+0x93/0x360 [ 171.494630][ T8636] sctp_bind_addr_copy+0xb3/0x3c0 [ 171.494656][ T8636] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 171.494686][ T8636] sctp_connect_new_asoc+0x2e0/0x690 [ 171.494717][ T8636] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 171.494734][ T8636] ? __local_bh_enable_ip+0x12d/0x1c0 [ 171.494762][ T8636] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 171.494782][ T8636] ? security_sctp_bind_connect+0x7e/0x2e0 [ 171.494813][ T8636] sctp_sendmsg+0x155c/0x2810 [ 171.494845][ T8636] ? __pfx_sctp_sendmsg+0x10/0x10 [ 171.494868][ T8636] ? aa_sk_perm+0x81e/0x950 [ 171.494900][ T8636] ? __pfx_aa_sk_perm+0x10/0x10 [ 171.494929][ T8636] ? sock_rps_record_flow+0x19/0x410 [ 171.494950][ T8636] ? inet_sendmsg+0x2f4/0x370 [ 171.494971][ T8636] __sock_sendmsg+0x19c/0x270 [ 171.495001][ T8636] __sys_sendto+0x3bd/0x520 [ 171.495022][ T8636] ? __pfx___sys_sendto+0x10/0x10 [ 171.495039][ T8636] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 171.495081][ T8636] ? __fget_files+0x3a0/0x420 [ 171.495109][ T8636] ? ksys_write+0x22a/0x250 [ 171.495138][ T8636] ? __pfx_ksys_write+0x10/0x10 [ 171.495168][ T8636] __x64_sys_sendto+0xde/0x100 [ 171.495190][ T8636] do_syscall_64+0xfa/0xfa0 [ 171.495217][ T8636] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.495244][ T8636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.495263][ T8636] ? clear_bhb_loop+0x60/0xb0 [ 171.495285][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.495304][ T8636] RIP: 0033:0x7fe9b098f749 [ 171.495320][ T8636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.495338][ T8636] RSP: 002b:00007fe9b18ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 171.495358][ T8636] RAX: ffffffffffffffda RBX: 00007fe9b0be5fa0 RCX: 00007fe9b098f749 [ 171.495372][ T8636] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 171.495384][ T8636] RBP: 00007fe9b18ea090 R08: 0000200000000140 R09: 000000000000001c [ 171.495396][ T8636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.495407][ T8636] R13: 00007fe9b0be6038 R14: 00007fe9b0be5fa0 R15: 00007fffd70cb8a8 [ 171.495439][ T8636] [ 171.949430][ T8649] netlink: 'syz.4.905': attribute type 14 has an invalid length. [ 171.963275][ T8651] FAULT_INJECTION: forcing a failure. [ 171.963275][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 171.983410][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.5.904 Not tainted syzkaller #0 PREEMPT(full) [ 171.983436][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.983449][ T8651] Call Trace: [ 171.983457][ T8651] [ 171.983465][ T8651] dump_stack_lvl+0x189/0x250 [ 171.983493][ T8651] ? __pfx____ratelimit+0x10/0x10 [ 171.983518][ T8651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.983540][ T8651] ? __pfx__printk+0x10/0x10 [ 171.983561][ T8651] ? __pfx___might_resched+0x10/0x10 [ 171.983578][ T8651] ? fs_reclaim_acquire+0x7d/0x100 [ 171.983607][ T8651] should_fail_ex+0x414/0x560 [ 171.983635][ T8651] should_failslab+0xa8/0x100 [ 171.983653][ T8651] kmem_cache_alloc_node_noprof+0x77/0x710 [ 171.983675][ T8651] ? __alloc_skb+0x112/0x2d0 [ 171.983690][ T8651] ? netlink_autobind+0xdb/0x300 [ 171.983719][ T8651] __alloc_skb+0x112/0x2d0 [ 171.983738][ T8651] netlink_sendmsg+0x5c6/0xb30 [ 171.983762][ T8651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.983781][ T8651] ? aa_sock_msg_perm+0xf1/0x1d0 [ 171.983806][ T8651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.983822][ T8651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.983839][ T8651] __sock_sendmsg+0x21c/0x270 [ 171.983863][ T8651] ____sys_sendmsg+0x505/0x830 [ 171.983885][ T8651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.983911][ T8651] ? import_iovec+0x74/0xa0 [ 171.983934][ T8651] ___sys_sendmsg+0x21f/0x2a0 [ 171.983954][ T8651] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.984003][ T8651] ? __fget_files+0x2a/0x420 [ 171.984017][ T8651] ? __fget_files+0x3a0/0x420 [ 171.984042][ T8651] __x64_sys_sendmsg+0x19b/0x260 [ 171.984062][ T8651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.984088][ T8651] ? __pfx_ksys_write+0x10/0x10 [ 171.984115][ T8651] ? do_syscall_64+0xbe/0xfa0 [ 171.984141][ T8651] do_syscall_64+0xfa/0xfa0 [ 171.984162][ T8651] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.984186][ T8651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.984201][ T8651] ? clear_bhb_loop+0x60/0xb0 [ 171.984221][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.984236][ T8651] RIP: 0033:0x7fa08db8f749 [ 171.984251][ T8651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.984266][ T8651] RSP: 002b:00007fa08e94b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.984283][ T8651] RAX: ffffffffffffffda RBX: 00007fa08dde5fa0 RCX: 00007fa08db8f749 [ 171.984295][ T8651] RDX: 0000000000008080 RSI: 0000200000000140 RDI: 0000000000000004 [ 171.984305][ T8651] RBP: 00007fa08e94b090 R08: 0000000000000000 R09: 0000000000000000 [ 171.984315][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.984325][ T8651] R13: 00007fa08dde6038 R14: 00007fa08dde5fa0 R15: 00007ffe533e5b28 [ 171.984351][ T8651] [ 172.473094][ T8666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 172.980915][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 173.047375][ T8697] netlink: 24 bytes leftover after parsing attributes in process `syz.5.922'. [ 173.191759][ T8707] FAULT_INJECTION: forcing a failure. [ 173.191759][ T8707] name failslab, interval 1, probability 0, space 0, times 0 [ 173.217184][ T8707] CPU: 1 UID: 0 PID: 8707 Comm: syz.5.925 Not tainted syzkaller #0 PREEMPT(full) [ 173.217210][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.217221][ T8707] Call Trace: [ 173.217229][ T8707] [ 173.217237][ T8707] dump_stack_lvl+0x189/0x250 [ 173.217269][ T8707] ? __pfx____ratelimit+0x10/0x10 [ 173.217295][ T8707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.217321][ T8707] ? __pfx__printk+0x10/0x10 [ 173.217343][ T8707] ? __pfx___might_resched+0x10/0x10 [ 173.217365][ T8707] ? fs_reclaim_acquire+0x7d/0x100 [ 173.217397][ T8707] should_fail_ex+0x414/0x560 [ 173.217429][ T8707] should_failslab+0xa8/0x100 [ 173.217449][ T8707] __kmalloc_cache_noprof+0x6f/0x6f0 [ 173.217476][ T8707] ? ip_set_pernet+0x23/0x240 [ 173.217499][ T8707] ? ip_set_create+0x348/0x1940 [ 173.217532][ T8707] ip_set_create+0x348/0x1940 [ 173.217571][ T8707] ? __mutex_lock+0x335/0x1350 [ 173.217603][ T8707] ? __pfx_ip_set_create+0x10/0x10 [ 173.217670][ T8707] nfnetlink_rcv_msg+0xb4d/0x1130 [ 173.217699][ T8707] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 173.217754][ T8707] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 173.217781][ T8707] ? kasan_save_track+0x4f/0x80 [ 173.217861][ T8707] netlink_rcv_skb+0x208/0x470 [ 173.217879][ T8707] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.217908][ T8707] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 173.217938][ T8707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.217971][ T8707] ? bpf_lsm_capable+0x9/0x20 [ 173.217994][ T8707] ? security_capable+0x7e/0x2e0 [ 173.218029][ T8707] nfnetlink_rcv+0x282/0x2590 [ 173.218060][ T8707] ? __dev_queue_xmit+0x27b/0x3b50 [ 173.218085][ T8707] ? __dev_queue_xmit+0x1d79/0x3b50 [ 173.218107][ T8707] ? kasan_save_track+0x3e/0x80 [ 173.218132][ T8707] ? __kasan_slab_alloc+0x6c/0x80 [ 173.218171][ T8707] ? __dev_queue_xmit+0x27b/0x3b50 [ 173.218208][ T8707] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 173.218234][ T8707] ? __pfx___dev_queue_xmit+0x10/0x10 [ 173.218275][ T8707] ? ref_tracker_free+0x63a/0x7d0 [ 173.218295][ T8707] ? __asan_memcpy+0x40/0x70 [ 173.218320][ T8707] ? __pfx_ref_tracker_free+0x10/0x10 [ 173.218357][ T8707] ? skb_clone+0x246/0x3a0 [ 173.218385][ T8707] ? __netlink_deliver_tap+0x807/0x850 [ 173.218404][ T8707] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.218431][ T8707] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.218460][ T8707] netlink_unicast+0x82f/0x9e0 [ 173.218498][ T8707] ? __pfx_netlink_unicast+0x10/0x10 [ 173.218528][ T8707] ? netlink_sendmsg+0x642/0xb30 [ 173.218546][ T8707] ? skb_put+0x11b/0x210 [ 173.218569][ T8707] netlink_sendmsg+0x805/0xb30 [ 173.218599][ T8707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.218622][ T8707] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.218650][ T8707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.218668][ T8707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.218688][ T8707] __sock_sendmsg+0x21c/0x270 [ 173.218718][ T8707] ____sys_sendmsg+0x505/0x830 [ 173.218745][ T8707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.218782][ T8707] ? import_iovec+0x74/0xa0 [ 173.218811][ T8707] ___sys_sendmsg+0x21f/0x2a0 [ 173.218835][ T8707] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.218896][ T8707] ? __fget_files+0x2a/0x420 [ 173.218914][ T8707] ? __fget_files+0x3a0/0x420 [ 173.218943][ T8707] __x64_sys_sendmsg+0x19b/0x260 [ 173.218968][ T8707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.219001][ T8707] ? __pfx_ksys_write+0x10/0x10 [ 173.219032][ T8707] ? do_syscall_64+0xbe/0xfa0 [ 173.219064][ T8707] do_syscall_64+0xfa/0xfa0 [ 173.219090][ T8707] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.219117][ T8707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.219136][ T8707] ? clear_bhb_loop+0x60/0xb0 [ 173.219160][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.219179][ T8707] RIP: 0033:0x7fa08db8f749 [ 173.219196][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.219214][ T8707] RSP: 002b:00007fa08e94b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.219235][ T8707] RAX: ffffffffffffffda RBX: 00007fa08dde5fa0 RCX: 00007fa08db8f749 [ 173.219250][ T8707] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 173.219262][ T8707] RBP: 00007fa08e94b090 R08: 0000000000000000 R09: 0000000000000000 [ 173.219274][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.219285][ T8707] R13: 00007fa08dde6038 R14: 00007fa08dde5fa0 R15: 00007ffe533e5b28 [ 173.219318][ T8707] [ 174.129535][ T8734] tipc: Enabling of bearer rejected, already enabled [ 174.386386][ T8754] FAULT_INJECTION: forcing a failure. [ 174.386386][ T8754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.405324][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 174.453934][ T8754] CPU: 0 UID: 0 PID: 8754 Comm: syz.0.939 Not tainted syzkaller #0 PREEMPT(full) [ 174.453962][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.453974][ T8754] Call Trace: [ 174.453982][ T8754] [ 174.453990][ T8754] dump_stack_lvl+0x189/0x250 [ 174.454021][ T8754] ? __pfx____ratelimit+0x10/0x10 [ 174.454048][ T8754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.454073][ T8754] ? __pfx__printk+0x10/0x10 [ 174.454091][ T8754] ? __might_fault+0xb0/0x130 [ 174.454128][ T8754] should_fail_ex+0x414/0x560 [ 174.454162][ T8754] _copy_from_user+0x2d/0xb0 [ 174.454189][ T8754] ___sys_sendmsg+0x158/0x2a0 [ 174.454214][ T8754] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.454267][ T8754] ? __fget_files+0x2a/0x420 [ 174.454284][ T8754] ? __fget_files+0x3a0/0x420 [ 174.454314][ T8754] __x64_sys_sendmsg+0x19b/0x260 [ 174.454339][ T8754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.454369][ T8754] ? __pfx_ksys_write+0x10/0x10 [ 174.454399][ T8754] ? do_syscall_64+0xbe/0xfa0 [ 174.454429][ T8754] do_syscall_64+0xfa/0xfa0 [ 174.454456][ T8754] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.454483][ T8754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.454503][ T8754] ? clear_bhb_loop+0x60/0xb0 [ 174.454526][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.454544][ T8754] RIP: 0033:0x7fe9b098f749 [ 174.454561][ T8754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.454578][ T8754] RSP: 002b:00007fe9b18ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.454599][ T8754] RAX: ffffffffffffffda RBX: 00007fe9b0be5fa0 RCX: 00007fe9b098f749 [ 174.454613][ T8754] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 174.454626][ T8754] RBP: 00007fe9b18ea090 R08: 0000000000000000 R09: 0000000000000000 [ 174.454639][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.454651][ T8754] R13: 00007fe9b0be6038 R14: 00007fe9b0be5fa0 R15: 00007fffd70cb8a8 [ 174.454691][ T8754] [ 174.674658][ T8762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.940'. [ 175.065364][ T8784] netlink: 104 bytes leftover after parsing attributes in process `syz.2.946'. [ 175.075959][ T8785] netlink: 104 bytes leftover after parsing attributes in process `syz.2.946'. [ 175.486318][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 175.501057][ T8809] tipc: Started in network mode [ 175.534910][ T8809] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 175.564869][ T8809] tipc: Enabling of bearer rejected, failed to enable media [ 175.592473][ T8810] netlink: 'syz.0.955': attribute type 7 has an invalid length. [ 175.603643][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 175.614226][ T8816] FAULT_INJECTION: forcing a failure. [ 175.614226][ T8816] name failslab, interval 1, probability 0, space 0, times 0 [ 175.635663][ T8810] FAULT_INJECTION: forcing a failure. [ 175.635663][ T8810] name failslab, interval 1, probability 0, space 0, times 0 [ 175.661967][ T8819] FAULT_INJECTION: forcing a failure. [ 175.661967][ T8819] name failslab, interval 1, probability 0, space 0, times 0 [ 175.674847][ T8810] CPU: 1 UID: 0 PID: 8810 Comm: syz.0.955 Not tainted syzkaller #0 PREEMPT(full) [ 175.674873][ T8810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.674886][ T8810] Call Trace: [ 175.674893][ T8810] [ 175.674901][ T8810] dump_stack_lvl+0x189/0x250 [ 175.674932][ T8810] ? __pfx____ratelimit+0x10/0x10 [ 175.674959][ T8810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.674985][ T8810] ? __pfx__printk+0x10/0x10 [ 175.675002][ T8810] ? netlink_sendmsg+0x805/0xb30 [ 175.675023][ T8810] ? __x64_sys_sendmsg+0x19b/0x260 [ 175.675044][ T8810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.675071][ T8810] should_fail_ex+0x414/0x560 [ 175.675105][ T8810] should_failslab+0xa8/0x100 [ 175.675126][ T8810] kmem_cache_alloc_noprof+0x74/0x6e0 [ 175.675154][ T8810] ? skb_clone+0x212/0x3a0 [ 175.675182][ T8810] skb_clone+0x212/0x3a0 [ 175.675208][ T8810] __netlink_deliver_tap+0x404/0x850 [ 175.675242][ T8810] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.675271][ T8810] netlink_deliver_tap+0x19c/0x1b0 [ 175.675292][ T8810] netlink_sendskb+0x68/0x140 [ 175.675322][ T8810] netlink_unicast+0x397/0x9e0 [ 175.675347][ T8810] ? __asan_memcpy+0x40/0x70 [ 175.675381][ T8810] ? __pfx_netlink_unicast+0x10/0x10 [ 175.675420][ T8810] netlink_rcv_skb+0x28c/0x470 [ 175.675437][ T8810] ? __lock_acquire+0xab9/0xd20 [ 175.675457][ T8810] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.675483][ T8810] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.675522][ T8810] ? down_read+0x1ad/0x2e0 [ 175.675543][ T8810] genl_rcv+0x28/0x40 [ 175.675564][ T8810] netlink_unicast+0x82f/0x9e0 [ 175.675603][ T8810] ? __pfx_netlink_unicast+0x10/0x10 [ 175.675633][ T8810] ? netlink_sendmsg+0x642/0xb30 [ 175.675651][ T8810] ? skb_put+0x11b/0x210 [ 175.675675][ T8810] netlink_sendmsg+0x805/0xb30 [ 175.675703][ T8810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.675727][ T8810] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.675759][ T8810] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.675776][ T8810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.675795][ T8810] __sock_sendmsg+0x21c/0x270 [ 175.675824][ T8810] ____sys_sendmsg+0x505/0x830 [ 175.675850][ T8810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.675883][ T8810] ? import_iovec+0x74/0xa0 [ 175.675910][ T8810] ___sys_sendmsg+0x21f/0x2a0 [ 175.675933][ T8810] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.675991][ T8810] ? __fget_files+0x2a/0x420 [ 175.676009][ T8810] ? __fget_files+0x3a0/0x420 [ 175.676038][ T8810] __x64_sys_sendmsg+0x19b/0x260 [ 175.676064][ T8810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.676097][ T8810] ? __pfx_ksys_write+0x10/0x10 [ 175.676128][ T8810] ? do_syscall_64+0xbe/0xfa0 [ 175.676160][ T8810] do_syscall_64+0xfa/0xfa0 [ 175.676185][ T8810] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.676213][ T8810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.676233][ T8810] ? clear_bhb_loop+0x60/0xb0 [ 175.676265][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.676284][ T8810] RIP: 0033:0x7fe9b098f749 [ 175.676302][ T8810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.676320][ T8810] RSP: 002b:00007fe9b18ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.676342][ T8810] RAX: ffffffffffffffda RBX: 00007fe9b0be5fa0 RCX: 00007fe9b098f749 [ 175.676357][ T8810] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 175.676369][ T8810] RBP: 00007fe9b18ea090 R08: 0000000000000000 R09: 0000000000000000 [ 175.676381][ T8810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.676392][ T8810] R13: 00007fe9b0be6038 R14: 00007fe9b0be5fa0 R15: 00007fffd70cb8a8 [ 175.676426][ T8810] [ 175.676664][ T8816] CPU: 1 UID: 0 PID: 8816 Comm: syz.4.956 Not tainted syzkaller #0 PREEMPT(full) [ 175.676687][ T8816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.676699][ T8816] Call Trace: [ 175.676706][ T8816] [ 175.676713][ T8816] dump_stack_lvl+0x189/0x250 [ 175.676740][ T8816] ? __pfx____ratelimit+0x10/0x10 [ 175.676766][ T8816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.676793][ T8816] ? __pfx__printk+0x10/0x10 [ 175.676819][ T8816] ? __lock_acquire+0xab9/0xd20 [ 175.676846][ T8816] should_fail_ex+0x414/0x560 [ 175.676878][ T8816] should_failslab+0xa8/0x100 [ 175.676899][ T8816] kmem_cache_alloc_noprof+0x74/0x6e0 [ 175.676924][ T8816] ? skb_clone+0x212/0x3a0 [ 175.676951][ T8816] skb_clone+0x212/0x3a0 [ 175.676977][ T8816] __netlink_deliver_tap+0x404/0x850 [ 175.677010][ T8816] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.677033][ T8816] netlink_deliver_tap+0x19c/0x1b0 [ 175.677054][ T8816] netlink_unicast+0x7fa/0x9e0 [ 175.677092][ T8816] ? __pfx_netlink_unicast+0x10/0x10 [ 175.677121][ T8816] ? netlink_sendmsg+0x642/0xb30 [ 175.677138][ T8816] ? skb_put+0x11b/0x210 [ 175.677161][ T8816] netlink_sendmsg+0x805/0xb30 [ 175.677191][ T8816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.677213][ T8816] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.677244][ T8816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.677271][ T8816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.677292][ T8816] __sock_sendmsg+0x21c/0x270 [ 175.677321][ T8816] ____sys_sendmsg+0x505/0x830 [ 175.677349][ T8816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.677380][ T8816] ? import_iovec+0x74/0xa0 [ 175.677409][ T8816] ___sys_sendmsg+0x21f/0x2a0 [ 175.677432][ T8816] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.677493][ T8816] ? __fget_files+0x2a/0x420 [ 175.677510][ T8816] ? __fget_files+0x3a0/0x420 [ 175.677543][ T8816] __x64_sys_sendmsg+0x19b/0x260 [ 175.677568][ T8816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.677600][ T8816] ? __pfx_ksys_write+0x10/0x10 [ 175.677631][ T8816] ? do_syscall_64+0xbe/0xfa0 [ 175.677662][ T8816] do_syscall_64+0xfa/0xfa0 [ 175.677688][ T8816] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.677715][ T8816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.677733][ T8816] ? clear_bhb_loop+0x60/0xb0 [ 175.677757][ T8816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.677775][ T8816] RIP: 0033:0x7fc55818f749 [ 175.677791][ T8816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.677809][ T8816] RSP: 002b:00007fc559040038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.677827][ T8816] RAX: ffffffffffffffda RBX: 00007fc5583e5fa0 RCX: 00007fc55818f749 [ 175.677842][ T8816] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 175.677855][ T8816] RBP: 00007fc559040090 R08: 0000000000000000 R09: 0000000000000000 [ 175.677867][ T8816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.677878][ T8816] R13: 00007fc5583e6038 R14: 00007fc5583e5fa0 R15: 00007ffc6a488658 [ 175.677911][ T8816] [ 175.785198][ T8819] CPU: 0 UID: 0 PID: 8819 Comm: syz.1.957 Not tainted syzkaller #0 PREEMPT(full) [ 175.785225][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.785237][ T8819] Call Trace: [ 175.785244][ T8819] [ 175.785252][ T8819] dump_stack_lvl+0x189/0x250 [ 175.785283][ T8819] ? __pfx____ratelimit+0x10/0x10 [ 175.785309][ T8819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.785334][ T8819] ? __pfx__printk+0x10/0x10 [ 175.785359][ T8819] ? __pfx___might_resched+0x10/0x10 [ 175.785380][ T8819] ? fs_reclaim_acquire+0x7d/0x100 [ 175.785414][ T8819] should_fail_ex+0x414/0x560 [ 175.785448][ T8819] should_failslab+0xa8/0x100 [ 175.785469][ T8819] __kmalloc_cache_noprof+0x6f/0x6f0 [ 175.785501][ T8819] ? __genradix_ptr_alloc+0x463/0x4a0 [ 175.785526][ T8819] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 175.785564][ T8819] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 175.785607][ T8819] sctp_association_new+0x15d3/0x25f0 [ 175.785643][ T8819] sctp_connect_new_asoc+0x2c5/0x690 [ 175.785667][ T8819] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 175.785688][ T8819] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 175.785708][ T8819] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 175.785726][ T8819] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 175.785746][ T8819] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 175.785766][ T8819] ? security_sctp_bind_connect+0x7e/0x2e0 [ 175.785792][ T8819] sctp_sendmsg+0x155c/0x2810 [ 175.785824][ T8819] ? __pfx_sctp_sendmsg+0x10/0x10 [ 175.785846][ T8819] ? aa_sk_perm+0x81e/0x950 [ 175.785877][ T8819] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.785906][ T8819] ? sock_rps_record_flow+0x19/0x410 [ 175.785928][ T8819] ? inet_sendmsg+0x2f4/0x370 [ 175.785943][ T8819] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.785965][ T8819] __sock_sendmsg+0x19c/0x270 [ 175.785995][ T8819] __sys_sendto+0x3bd/0x520 [ 175.786016][ T8819] ? __pfx___sys_sendto+0x10/0x10 [ 175.786032][ T8819] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 175.786073][ T8819] ? __fget_files+0x3a0/0x420 [ 175.786107][ T8819] ? ksys_write+0x22a/0x250 [ 175.786142][ T8819] ? __pfx_ksys_write+0x10/0x10 [ 175.786172][ T8819] __x64_sys_sendto+0xde/0x100 [ 175.786194][ T8819] do_syscall_64+0xfa/0xfa0 [ 175.786220][ T8819] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.786249][ T8819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.786267][ T8819] ? clear_bhb_loop+0x60/0xb0 [ 175.786291][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.786309][ T8819] RIP: 0033:0x7f56d1d8f749 [ 175.786326][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.786342][ T8819] RSP: 002b:00007f56d2c53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 175.786367][ T8819] RAX: ffffffffffffffda RBX: 00007f56d1fe5fa0 RCX: 00007f56d1d8f749 [ 175.786381][ T8819] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 175.786394][ T8819] RBP: 00007f56d2c53090 R08: 0000200000000140 R09: 000000000000001c [ 175.786406][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.786417][ T8819] R13: 00007f56d1fe6038 R14: 00007f56d1fe5fa0 R15: 00007ffc5831ead8 [ 175.786449][ T8819] [ 176.700836][ T8825] netlink: 'syz.2.959': attribute type 10 has an invalid length. [ 176.714342][ T8825] netlink: 2 bytes leftover after parsing attributes in process `syz.2.959'. [ 176.741879][ T8825] team0: entered promiscuous mode [ 176.754862][ T8827] netlink: 'syz.1.960': attribute type 4 has an invalid length. [ 176.787852][ T8825] team_slave_0: entered promiscuous mode [ 176.794008][ T8825] team_slave_1: entered promiscuous mode [ 176.810095][ T8825] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.819473][ T8825] bridge0: port 3(team0) entered blocking state [ 176.826050][ T8825] bridge0: port 3(team0) entered disabled state [ 176.832552][ T8825] team0: entered allmulticast mode [ 176.837743][ T8825] team_slave_0: entered allmulticast mode [ 176.843565][ T8825] team_slave_1: entered allmulticast mode [ 177.052938][ T8845] netlink: 'syz.2.966': attribute type 2 has an invalid length. [ 177.167302][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 177.277990][ T8860] FAULT_INJECTION: forcing a failure. [ 177.277990][ T8860] name failslab, interval 1, probability 0, space 0, times 0 [ 177.290707][ T8860] CPU: 1 UID: 0 PID: 8860 Comm: syz.5.972 Not tainted syzkaller #0 PREEMPT(full) [ 177.290751][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.290774][ T8860] Call Trace: [ 177.290789][ T8860] [ 177.290805][ T8860] dump_stack_lvl+0x189/0x250 [ 177.290862][ T8860] ? __pfx____ratelimit+0x10/0x10 [ 177.290915][ T8860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.290968][ T8860] ? __pfx__printk+0x10/0x10 [ 177.291018][ T8860] ? __pfx___might_resched+0x10/0x10 [ 177.291038][ T8860] ? fs_reclaim_acquire+0x7d/0x100 [ 177.291073][ T8860] should_fail_ex+0x414/0x560 [ 177.291108][ T8860] should_failslab+0xa8/0x100 [ 177.291137][ T8860] __kmalloc_noprof+0xcb/0x7f0 [ 177.291163][ T8860] ? iovec_from_user+0x87/0x250 [ 177.291195][ T8860] iovec_from_user+0x87/0x250 [ 177.291224][ T8860] __import_iovec+0x163/0x7f0 [ 177.291260][ T8860] import_iovec+0x74/0xa0 [ 177.291288][ T8860] ___sys_recvmsg+0x43a/0x510 [ 177.291317][ T8860] ? __pfx____sys_recvmsg+0x10/0x10 [ 177.291365][ T8860] ? __fget_files+0x3a0/0x420 [ 177.291395][ T8860] do_recvmmsg+0x307/0x770 [ 177.291427][ T8860] ? __pfx_do_recvmmsg+0x10/0x10 [ 177.291465][ T8860] ? _copy_from_user+0x94/0xb0 [ 177.291507][ T8860] __x64_sys_recvmmsg+0x1af/0x240 [ 177.291533][ T8860] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 177.291562][ T8860] ? do_syscall_64+0xbe/0xfa0 [ 177.291594][ T8860] do_syscall_64+0xfa/0xfa0 [ 177.291620][ T8860] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.291647][ T8860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.291667][ T8860] ? clear_bhb_loop+0x60/0xb0 [ 177.291691][ T8860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.291710][ T8860] RIP: 0033:0x7fa08db8f749 [ 177.291727][ T8860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.291745][ T8860] RSP: 002b:00007fa08e94b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 177.291767][ T8860] RAX: ffffffffffffffda RBX: 00007fa08dde5fa0 RCX: 00007fa08db8f749 [ 177.291782][ T8860] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 177.291796][ T8860] RBP: 00007fa08e94b090 R08: 0000200000003700 R09: 0000000000000000 [ 177.291809][ T8860] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 177.291822][ T8860] R13: 00007fa08dde6038 R14: 00007fa08dde5fa0 R15: 00007ffe533e5b28 [ 177.291855][ T8860] [ 177.650535][ T8870] FAULT_INJECTION: forcing a failure. [ 177.650535][ T8870] name failslab, interval 1, probability 0, space 0, times 0 [ 177.692415][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: syz.5.976 Not tainted syzkaller #0 PREEMPT(full) [ 177.692443][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.692456][ T8870] Call Trace: [ 177.692463][ T8870] [ 177.692471][ T8870] dump_stack_lvl+0x189/0x250 [ 177.692503][ T8870] ? __pfx____ratelimit+0x10/0x10 [ 177.692529][ T8870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.692556][ T8870] ? __pfx__printk+0x10/0x10 [ 177.692582][ T8870] ? __pfx___might_resched+0x10/0x10 [ 177.692603][ T8870] ? fs_reclaim_acquire+0x7d/0x100 [ 177.692638][ T8870] should_fail_ex+0x414/0x560 [ 177.692673][ T8870] should_failslab+0xa8/0x100 [ 177.692695][ T8870] __kmalloc_node_noprof+0xd2/0x800 [ 177.692722][ T8870] ? crypto_create_tfm_node+0x83/0x3f0 [ 177.692756][ T8870] crypto_create_tfm_node+0x83/0x3f0 [ 177.692792][ T8870] crypto_spawn_tfm2+0x5c/0x90 [ 177.692813][ T8870] aead_init_geniv+0x169/0x240 [ 177.692845][ T8870] crypto_create_tfm_node+0x18c/0x3f0 [ 177.692877][ T8870] crypto_alloc_tfm_node+0x172/0x3f0 [ 177.692912][ T8870] esp_init_state+0x36b/0x1140 [ 177.692937][ T8870] ? __sock_sendmsg+0x21c/0x270 [ 177.692957][ T8870] ? ____sys_sendmsg+0x505/0x830 [ 177.692972][ T8870] ? ___sys_sendmsg+0x21f/0x2a0 [ 177.692989][ T8870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.693013][ T8870] ? __pfx_esp_init_state+0x10/0x10 [ 177.693042][ T8870] ? __lock_acquire+0xab9/0xd20 [ 177.693078][ T8870] ? __xfrm_init_state+0x7ef/0x13f0 [ 177.693103][ T8870] __xfrm_init_state+0xa76/0x13f0 [ 177.693122][ T8870] ? __xfrm_init_state+0x7ef/0x13f0 [ 177.693146][ T8870] xfrm_add_sa+0x3066/0x4200 [ 177.693173][ T8870] ? __pfx_xfrm_add_sa+0x10/0x10 [ 177.693190][ T8870] ? apparmor_capable+0x137/0x1b0 [ 177.693213][ T8870] ? __nla_parse+0x40/0x60 [ 177.693235][ T8870] xfrm_user_rcv_msg+0x7a3/0xab0 [ 177.693260][ T8870] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 177.693278][ T8870] ? bpf_trace_run2+0x322/0x4b0 [ 177.693349][ T8870] ? rcu_is_watching+0x15/0xb0 [ 177.693369][ T8870] ? trace_contention_end+0x39/0x120 [ 177.693389][ T8870] ? __mutex_lock+0x335/0x1350 [ 177.693419][ T8870] netlink_rcv_skb+0x208/0x470 [ 177.693437][ T8870] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 177.693459][ T8870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.693488][ T8870] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.693504][ T8870] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.693522][ T8870] xfrm_netlink_rcv+0x79/0x90 [ 177.693541][ T8870] netlink_unicast+0x82f/0x9e0 [ 177.693578][ T8870] ? __pfx_netlink_unicast+0x10/0x10 [ 177.693604][ T8870] ? netlink_sendmsg+0x642/0xb30 [ 177.693619][ T8870] ? skb_put+0x11b/0x210 [ 177.693638][ T8870] netlink_sendmsg+0x805/0xb30 [ 177.693663][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.693682][ T8870] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.693708][ T8870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.693724][ T8870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.693742][ T8870] __sock_sendmsg+0x21c/0x270 [ 177.693767][ T8870] ____sys_sendmsg+0x505/0x830 [ 177.693790][ T8870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.693817][ T8870] ? import_iovec+0x74/0xa0 [ 177.693841][ T8870] ___sys_sendmsg+0x21f/0x2a0 [ 177.693861][ T8870] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.693911][ T8870] ? __fget_files+0x2a/0x420 [ 177.693926][ T8870] ? __fget_files+0x3a0/0x420 [ 177.693951][ T8870] __x64_sys_sendmsg+0x19b/0x260 [ 177.693971][ T8870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.693998][ T8870] ? __pfx_ksys_write+0x10/0x10 [ 177.694025][ T8870] ? do_syscall_64+0xbe/0xfa0 [ 177.694051][ T8870] do_syscall_64+0xfa/0xfa0 [ 177.694073][ T8870] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.694096][ T8870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.694112][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 177.694132][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.694148][ T8870] RIP: 0033:0x7fa08db8f749 [ 177.694163][ T8870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.694178][ T8870] RSP: 002b:00007fa08e94b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.694195][ T8870] RAX: ffffffffffffffda RBX: 00007fa08dde5fa0 RCX: 00007fa08db8f749 [ 177.694208][ T8870] RDX: 0000000020004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 177.694219][ T8870] RBP: 00007fa08e94b090 R08: 0000000000000000 R09: 0000000000000000 [ 177.694229][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.694239][ T8870] R13: 00007fa08dde6038 R14: 00007fa08dde5fa0 R15: 00007ffe533e5b28 [ 177.694267][ T8870] [ 178.366514][ T8886] netlink: 'syz.2.983': attribute type 10 has an invalid length. [ 178.374611][ T8886] bridge_slave_1: left allmulticast mode [ 178.381018][ T8886] bridge_slave_1: left promiscuous mode [ 178.392943][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.411630][ T8886] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 178.607660][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.989'. [ 178.616725][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 178.641180][ T8901] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 178.653038][ T8901] bond1 (unregistering): Released all slaves [ 179.212130][ T8924] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 179.382178][ T8936] netlink: 'syz.0.999': attribute type 12 has an invalid length. [ 179.520972][ T8943] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1002'. [ 179.538078][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1003'. [ 179.549665][ T8945] FAULT_INJECTION: forcing a failure. [ 179.549665][ T8945] name failslab, interval 1, probability 0, space 0, times 0 [ 179.562902][ T8945] CPU: 1 UID: 0 PID: 8945 Comm: syz.4.1003 Not tainted syzkaller #0 PREEMPT(full) [ 179.562929][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.562940][ T8945] Call Trace: [ 179.562948][ T8945] [ 179.562956][ T8945] dump_stack_lvl+0x189/0x250 [ 179.562988][ T8945] ? __pfx____ratelimit+0x10/0x10 [ 179.563014][ T8945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.563042][ T8945] ? __pfx__printk+0x10/0x10 [ 179.563059][ T8945] ? netlink_sendmsg+0x805/0xb30 [ 179.563081][ T8945] ? __x64_sys_sendmsg+0x19b/0x260 [ 179.563103][ T8945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.563141][ T8945] should_fail_ex+0x414/0x560 [ 179.563176][ T8945] should_failslab+0xa8/0x100 [ 179.563200][ T8945] kmem_cache_alloc_noprof+0x74/0x6e0 [ 179.563227][ T8945] ? skb_clone+0x212/0x3a0 [ 179.563256][ T8945] skb_clone+0x212/0x3a0 [ 179.563282][ T8945] __netlink_deliver_tap+0x404/0x850 [ 179.563317][ T8945] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.563339][ T8945] netlink_deliver_tap+0x19c/0x1b0 [ 179.563361][ T8945] netlink_sendskb+0x68/0x140 [ 179.563393][ T8945] netlink_unicast+0x397/0x9e0 [ 179.563418][ T8945] ? __asan_memcpy+0x40/0x70 [ 179.563450][ T8945] ? __pfx_netlink_unicast+0x10/0x10 [ 179.563490][ T8945] netlink_rcv_skb+0x28c/0x470 [ 179.563506][ T8945] ? __lock_acquire+0xab9/0xd20 [ 179.563527][ T8945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.563553][ T8945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.563594][ T8945] ? down_read+0x1ad/0x2e0 [ 179.563617][ T8945] genl_rcv+0x28/0x40 [ 179.563639][ T8945] netlink_unicast+0x82f/0x9e0 [ 179.563677][ T8945] ? __pfx_netlink_unicast+0x10/0x10 [ 179.563707][ T8945] ? netlink_sendmsg+0x642/0xb30 [ 179.563724][ T8945] ? skb_put+0x11b/0x210 [ 179.563747][ T8945] netlink_sendmsg+0x805/0xb30 [ 179.563778][ T8945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.563801][ T8945] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.563832][ T8945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.563851][ T8945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.563872][ T8945] __sock_sendmsg+0x21c/0x270 [ 179.563901][ T8945] ____sys_sendmsg+0x505/0x830 [ 179.563929][ T8945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.563962][ T8945] ? import_iovec+0x74/0xa0 [ 179.563989][ T8945] ___sys_sendmsg+0x21f/0x2a0 [ 179.564011][ T8945] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.564071][ T8945] ? __fget_files+0x2a/0x420 [ 179.564088][ T8945] ? __fget_files+0x3a0/0x420 [ 179.564117][ T8945] __x64_sys_sendmsg+0x19b/0x260 [ 179.564148][ T8945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.564180][ T8945] ? __pfx_ksys_write+0x10/0x10 [ 179.564211][ T8945] ? do_syscall_64+0xbe/0xfa0 [ 179.564243][ T8945] do_syscall_64+0xfa/0xfa0 [ 179.564267][ T8945] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.564294][ T8945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.564312][ T8945] ? clear_bhb_loop+0x60/0xb0 [ 179.564335][ T8945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.564354][ T8945] RIP: 0033:0x7fc55818f749 [ 179.564372][ T8945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.564390][ T8945] RSP: 002b:00007fc559040038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.564410][ T8945] RAX: ffffffffffffffda RBX: 00007fc5583e5fa0 RCX: 00007fc55818f749 [ 179.564425][ T8945] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 179.564438][ T8945] RBP: 00007fc559040090 R08: 0000000000000000 R09: 0000000000000000 [ 179.564450][ T8945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.564461][ T8945] R13: 00007fc5583e6038 R14: 00007fc5583e5fa0 R15: 00007ffc6a488658 [ 179.564497][ T8945] [ 180.020977][ T8956] tipc: Enabling of bearer rejected, failed to enable media [ 180.041318][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 180.121745][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 180.212888][ T8965] netlink: 'syz.4.1010': attribute type 7 has an invalid length. [ 180.276803][ T8969] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.287927][ T8969] netlink: 'syz.2.1012': attribute type 11 has an invalid length. [ 180.329331][ T8972] netlink: 'syz.1.1013': attribute type 3 has an invalid length. [ 180.339921][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 180.431724][ T8976] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 180.480480][ T8976] Cannot find set identified by id 1 to match [ 180.516991][ T8976] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 180.553295][ T8978] vlan2: entered promiscuous mode [ 180.569276][ T8976] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1016'. [ 180.579154][ T8978] bridge0: entered promiscuous mode [ 180.602285][ T8976] team0: entered promiscuous mode [ 180.615251][ T8976] team_slave_0: entered promiscuous mode [ 180.621503][ T8976] team_slave_1: entered promiscuous mode [ 180.635375][ T8976] bridge0: port 2(team0) entered blocking state [ 180.659259][ T8988] FAULT_INJECTION: forcing a failure. [ 180.659259][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 180.673100][ T8976] bridge0: port 2(team0) entered disabled state [ 180.673342][ T8976] team0: entered allmulticast mode [ 180.673360][ T8976] team_slave_0: entered allmulticast mode [ 180.673376][ T8976] team_slave_1: entered allmulticast mode [ 180.683916][ T8976] bridge0: port 2(team0) entered blocking state [ 180.687883][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.0.1020 Not tainted syzkaller #0 PREEMPT(full) [ 180.687909][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.687921][ T8988] Call Trace: [ 180.687928][ T8988] [ 180.687937][ T8988] dump_stack_lvl+0x189/0x250 [ 180.687978][ T8988] ? __pfx____ratelimit+0x10/0x10 [ 180.688005][ T8988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.688032][ T8988] ? __pfx__printk+0x10/0x10 [ 180.688066][ T8988] should_fail_ex+0x414/0x560 [ 180.688100][ T8988] should_failslab+0xa8/0x100 [ 180.688123][ T8988] kmem_cache_alloc_noprof+0x74/0x6e0 [ 180.688151][ T8988] ? skb_clone+0x212/0x3a0 [ 180.688178][ T8988] skb_clone+0x212/0x3a0 [ 180.688204][ T8988] __netlink_deliver_tap+0x404/0x850 [ 180.688239][ T8988] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.688260][ T8988] netlink_deliver_tap+0x19c/0x1b0 [ 180.688281][ T8988] netlink_sendskb+0x68/0x140 [ 180.688312][ T8988] netlink_unicast+0x397/0x9e0 [ 180.688338][ T8988] ? __asan_memcpy+0x40/0x70 [ 180.688372][ T8988] ? __pfx_netlink_unicast+0x10/0x10 [ 180.688411][ T8988] netlink_rcv_skb+0x28c/0x470 [ 180.688428][ T8988] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.688457][ T8988] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 180.688487][ T8988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.688519][ T8988] ? bpf_lsm_capable+0x9/0x20 [ 180.688543][ T8988] ? security_capable+0x7e/0x2e0 [ 180.688578][ T8988] nfnetlink_rcv+0x282/0x2590 [ 180.688608][ T8988] ? __dev_queue_xmit+0x27b/0x3b50 [ 180.688633][ T8988] ? __dev_queue_xmit+0x1d79/0x3b50 [ 180.688654][ T8988] ? kasan_save_track+0x3e/0x80 [ 180.688679][ T8988] ? __kasan_slab_alloc+0x6c/0x80 [ 180.688715][ T8988] ? __dev_queue_xmit+0x27b/0x3b50 [ 180.688751][ T8988] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 180.688777][ T8988] ? __pfx___dev_queue_xmit+0x10/0x10 [ 180.688814][ T8988] ? ref_tracker_free+0x63a/0x7d0 [ 180.688839][ T8988] ? __asan_memcpy+0x40/0x70 [ 180.688862][ T8988] ? __pfx_ref_tracker_free+0x10/0x10 [ 180.688904][ T8988] ? skb_clone+0x246/0x3a0 [ 180.688930][ T8988] ? __netlink_deliver_tap+0x807/0x850 [ 180.688949][ T8988] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.688974][ T8988] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.689001][ T8988] netlink_unicast+0x82f/0x9e0 [ 180.689037][ T8988] ? __pfx_netlink_unicast+0x10/0x10 [ 180.689066][ T8988] ? netlink_sendmsg+0x642/0xb30 [ 180.689083][ T8988] ? skb_put+0x11b/0x210 [ 180.689105][ T8988] netlink_sendmsg+0x805/0xb30 [ 180.689134][ T8988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.689157][ T8988] ? aa_sock_msg_perm+0xf1/0x1d0 [ 180.689187][ T8988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.689205][ T8988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.689225][ T8988] __sock_sendmsg+0x21c/0x270 [ 180.689255][ T8988] ____sys_sendmsg+0x505/0x830 [ 180.689281][ T8988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.689312][ T8988] ? import_iovec+0x74/0xa0 [ 180.689340][ T8988] ___sys_sendmsg+0x21f/0x2a0 [ 180.689363][ T8988] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.689421][ T8988] ? __fget_files+0x2a/0x420 [ 180.689438][ T8988] ? __fget_files+0x3a0/0x420 [ 180.689467][ T8988] __x64_sys_sendmsg+0x19b/0x260 [ 180.689491][ T8988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.689521][ T8988] ? __pfx_ksys_write+0x10/0x10 [ 180.689552][ T8988] ? do_syscall_64+0xbe/0xfa0 [ 180.689583][ T8988] do_syscall_64+0xfa/0xfa0 [ 180.689608][ T8988] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.689634][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.689653][ T8988] ? clear_bhb_loop+0x60/0xb0 [ 180.689676][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.689694][ T8988] RIP: 0033:0x7fe9b098f749 [ 180.689719][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.689736][ T8988] RSP: 002b:00007fe9b18ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.689764][ T8988] RAX: ffffffffffffffda RBX: 00007fe9b0be5fa0 RCX: 00007fe9b098f749 [ 180.689778][ T8988] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 180.689790][ T8988] RBP: 00007fe9b18ea090 R08: 0000000000000000 R09: 0000000000000000 [ 180.689802][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.689812][ T8988] R13: 00007fe9b0be6038 R14: 00007fe9b0be5fa0 R15: 00007fffd70cb8a8 [ 180.689846][ T8988] [ 180.761066][ T8992] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 180.763873][ T8976] bridge0: port 2(team0) entered forwarding state [ 180.779456][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 180.805616][ T8986] tipc: Enabling of bearer rejected, failed to enable media [ 181.075591][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 181.131076][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1023'. [ 181.143821][ T8998] netlink: 'syz.4.1023': attribute type 3 has an invalid length. [ 181.320886][ T9001] FAULT_INJECTION: forcing a failure. [ 181.320886][ T9001] name failslab, interval 1, probability 0, space 0, times 0 [ 181.364339][ T9001] CPU: 1 UID: 0 PID: 9001 Comm: syz.2.1024 Not tainted syzkaller #0 PREEMPT(full) [ 181.364367][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.364379][ T9001] Call Trace: [ 181.364386][ T9001] [ 181.364395][ T9001] dump_stack_lvl+0x189/0x250 [ 181.364425][ T9001] ? __pfx____ratelimit+0x10/0x10 [ 181.364452][ T9001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.364478][ T9001] ? __pfx__printk+0x10/0x10 [ 181.364514][ T9001] should_fail_ex+0x414/0x560 [ 181.364549][ T9001] should_failslab+0xa8/0x100 [ 181.364571][ T9001] __kmalloc_cache_noprof+0x6f/0x6f0 [ 181.364599][ T9001] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 181.364625][ T9001] ? sctp_add_bind_addr+0x8c/0x370 [ 181.364649][ T9001] ? sctp_add_bind_addr+0xb0/0x370 [ 181.364681][ T9001] sctp_add_bind_addr+0x8c/0x370 [ 181.364708][ T9001] sctp_copy_local_addr_list+0x30b/0x4e0 [ 181.364736][ T9001] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 181.364761][ T9001] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 181.364790][ T9001] ? sctp_v6_is_any+0x64/0x80 [ 181.364819][ T9001] ? sctp_copy_one_addr+0x93/0x360 [ 181.364848][ T9001] sctp_bind_addr_copy+0xb3/0x3c0 [ 181.364872][ T9001] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 181.364897][ T9001] sctp_connect_new_asoc+0x2e0/0x690 [ 181.364919][ T9001] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 181.364936][ T9001] ? __local_bh_enable_ip+0x12d/0x1c0 [ 181.364965][ T9001] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 181.364985][ T9001] ? security_sctp_bind_connect+0x7e/0x2e0 [ 181.365012][ T9001] sctp_sendmsg+0x155c/0x2810 [ 181.365046][ T9001] ? __pfx_sctp_sendmsg+0x10/0x10 [ 181.365078][ T9001] ? aa_sk_perm+0x81e/0x950 [ 181.365111][ T9001] ? __pfx_aa_sk_perm+0x10/0x10 [ 181.365140][ T9001] ? sock_rps_record_flow+0x19/0x410 [ 181.365163][ T9001] ? inet_sendmsg+0x2f4/0x370 [ 181.365186][ T9001] __sock_sendmsg+0x19c/0x270 [ 181.365218][ T9001] __sys_sendto+0x3bd/0x520 [ 181.365241][ T9001] ? __pfx___sys_sendto+0x10/0x10 [ 181.365257][ T9001] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 181.365301][ T9001] ? __fget_files+0x3a0/0x420 [ 181.365338][ T9001] ? ksys_write+0x22a/0x250 [ 181.365367][ T9001] ? __pfx_ksys_write+0x10/0x10 [ 181.365399][ T9001] __x64_sys_sendto+0xde/0x100 [ 181.365422][ T9001] do_syscall_64+0xfa/0xfa0 [ 181.365448][ T9001] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.365475][ T9001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.365494][ T9001] ? clear_bhb_loop+0x60/0xb0 [ 181.365518][ T9001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.365537][ T9001] RIP: 0033:0x7f33d578f749 [ 181.365554][ T9001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.365571][ T9001] RSP: 002b:00007f33d658a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 181.365593][ T9001] RAX: ffffffffffffffda RBX: 00007f33d59e5fa0 RCX: 00007f33d578f749 [ 181.365607][ T9001] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 181.365619][ T9001] RBP: 00007f33d658a090 R08: 0000200000000200 R09: 000000000000001c [ 181.365632][ T9001] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 181.365644][ T9001] R13: 00007f33d59e6038 R14: 00007f33d59e5fa0 R15: 00007ffde49bdf68 [ 181.365679][ T9001] [ 181.720516][ T9009] tipc: New replicast peer: 255.255.255.255 [ 181.731195][ T9009] tipc: Enabled bearer , priority 10 [ 181.761146][ T9013] FAULT_INJECTION: forcing a failure. [ 181.761146][ T9013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.774398][ T9013] CPU: 1 UID: 0 PID: 9013 Comm: syz.1.1029 Not tainted syzkaller #0 PREEMPT(full) [ 181.774421][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.774431][ T9013] Call Trace: [ 181.774438][ T9013] [ 181.774445][ T9013] dump_stack_lvl+0x189/0x250 [ 181.774475][ T9013] ? __pfx____ratelimit+0x10/0x10 [ 181.774500][ T9013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.774523][ T9013] ? __pfx__printk+0x10/0x10 [ 181.774553][ T9013] should_fail_ex+0x414/0x560 [ 181.774587][ T9013] _copy_to_user+0x31/0xb0 [ 181.774613][ T9013] simple_read_from_buffer+0xe1/0x170 [ 181.774644][ T9013] proc_fail_nth_read+0x1b3/0x220 [ 181.774675][ T9013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.774701][ T9013] ? rw_verify_area+0x2a6/0x4d0 [ 181.774724][ T9013] ? __lock_acquire+0xab9/0xd20 [ 181.774739][ T9013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.774772][ T9013] vfs_read+0x200/0xa30 [ 181.774796][ T9013] ? fdget_pos+0x247/0x320 [ 181.774819][ T9013] ? __pfx___mutex_lock+0x10/0x10 [ 181.774848][ T9013] ? __pfx_vfs_read+0x10/0x10 [ 181.774875][ T9013] ? __fget_files+0x2a/0x420 [ 181.774898][ T9013] ? __fget_files+0x3a0/0x420 [ 181.774915][ T9013] ? __fget_files+0x2a/0x420 [ 181.774943][ T9013] ksys_read+0x145/0x250 [ 181.774973][ T9013] ? __pfx_ksys_read+0x10/0x10 [ 181.775004][ T9013] ? do_syscall_64+0xbe/0xfa0 [ 181.775035][ T9013] do_syscall_64+0xfa/0xfa0 [ 181.775061][ T9013] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.775088][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.775107][ T9013] ? clear_bhb_loop+0x60/0xb0 [ 181.775131][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.775150][ T9013] RIP: 0033:0x7f56d1d8e15c [ 181.775167][ T9013] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 181.775184][ T9013] RSP: 002b:00007f56d2c53030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.775205][ T9013] RAX: ffffffffffffffda RBX: 00007f56d1fe5fa0 RCX: 00007f56d1d8e15c [ 181.775220][ T9013] RDX: 000000000000000f RSI: 00007f56d2c530a0 RDI: 0000000000000006 [ 181.775232][ T9013] RBP: 00007f56d2c53090 R08: 0000000000000000 R09: 0000000000000000 [ 181.775244][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.775256][ T9013] R13: 00007f56d1fe6038 R14: 00007f56d1fe5fa0 R15: 00007ffc5831ead8 [ 181.775290][ T9013] [ 182.042605][ T9017] FAULT_INJECTION: forcing a failure. [ 182.042605][ T9017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.056928][ T9017] CPU: 1 UID: 0 PID: 9017 Comm: syz.2.1031 Not tainted syzkaller #0 PREEMPT(full) [ 182.056955][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.056968][ T9017] Call Trace: [ 182.056976][ T9017] [ 182.056984][ T9017] dump_stack_lvl+0x189/0x250 [ 182.057014][ T9017] ? __pfx____ratelimit+0x10/0x10 [ 182.057042][ T9017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.057067][ T9017] ? __pfx__printk+0x10/0x10 [ 182.057087][ T9017] ? __might_fault+0xb0/0x130 [ 182.057126][ T9017] should_fail_ex+0x414/0x560 [ 182.057159][ T9017] _copy_to_iter+0x404/0x1790 [ 182.057185][ T9017] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 182.057222][ T9017] ? __pfx__copy_to_iter+0x10/0x10 [ 182.057242][ T9017] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 182.057272][ T9017] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 182.057302][ T9017] __skb_datagram_iter+0xf8/0x990 [ 182.057326][ T9017] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 182.057360][ T9017] skb_copy_datagram_iter+0xc5/0x230 [ 182.057387][ T9017] netlink_recvmsg+0x2ab/0xa30 [ 182.057418][ T9017] ? __pfx_netlink_recvmsg+0x10/0x10 [ 182.057443][ T9017] ? aa_sock_msg_perm+0xf1/0x1d0 [ 182.057474][ T9017] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 182.057492][ T9017] ? security_socket_recvmsg+0x7e/0x2e0 [ 182.057513][ T9017] ? __pfx_netlink_recvmsg+0x10/0x10 [ 182.057534][ T9017] sock_recvmsg+0x22c/0x270 [ 182.057564][ T9017] ____sys_recvmsg+0x1c9/0x460 [ 182.057595][ T9017] ? __pfx_____sys_recvmsg+0x10/0x10 [ 182.057634][ T9017] ? import_iovec+0x74/0xa0 [ 182.057669][ T9017] ___sys_recvmsg+0x1b5/0x510 [ 182.057696][ T9017] ? __pfx____sys_recvmsg+0x10/0x10 [ 182.057745][ T9017] ? __fget_files+0x3a0/0x420 [ 182.057775][ T9017] do_recvmmsg+0x307/0x770 [ 182.057806][ T9017] ? __pfx_do_recvmmsg+0x10/0x10 [ 182.057842][ T9017] ? _copy_from_user+0x94/0xb0 [ 182.057883][ T9017] __x64_sys_recvmmsg+0x1af/0x240 [ 182.057909][ T9017] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 182.057936][ T9017] ? do_syscall_64+0xbe/0xfa0 [ 182.057967][ T9017] do_syscall_64+0xfa/0xfa0 [ 182.057993][ T9017] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.058020][ T9017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.058038][ T9017] ? clear_bhb_loop+0x60/0xb0 [ 182.058061][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.058080][ T9017] RIP: 0033:0x7f33d578f749 [ 182.058098][ T9017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.058115][ T9017] RSP: 002b:00007f33d658a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 182.058136][ T9017] RAX: ffffffffffffffda RBX: 00007f33d59e5fa0 RCX: 00007f33d578f749 [ 182.058151][ T9017] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 182.058164][ T9017] RBP: 00007f33d658a090 R08: 0000200000003700 R09: 0000000000000000 [ 182.058177][ T9017] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 182.058190][ T9017] R13: 00007f33d59e6038 R14: 00007f33d59e5fa0 R15: 00007ffde49bdf68 [ 182.058223][ T9017] [ 182.378249][ T9021] FAULT_INJECTION: forcing a failure. [ 182.378249][ T9021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.391396][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.4.1033 Not tainted syzkaller #0 PREEMPT(full) [ 182.391422][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.391433][ T9021] Call Trace: [ 182.391441][ T9021] [ 182.391449][ T9021] dump_stack_lvl+0x189/0x250 [ 182.391481][ T9021] ? __pfx____ratelimit+0x10/0x10 [ 182.391506][ T9021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.391531][ T9021] ? __pfx__printk+0x10/0x10 [ 182.391549][ T9021] ? __might_fault+0xb0/0x130 [ 182.391589][ T9021] should_fail_ex+0x414/0x560 [ 182.391623][ T9021] _copy_from_iter+0x1de/0x1790 [ 182.391652][ T9021] ? rcu_is_watching+0x15/0xb0 [ 182.391679][ T9021] ? kmalloc_reserve+0xbd/0x290 [ 182.391698][ T9021] ? __pfx__copy_from_iter+0x10/0x10 [ 182.391726][ T9021] ? __build_skb_around+0x262/0x3f0 [ 182.391746][ T9021] ? netlink_sendmsg+0x642/0xb30 [ 182.391764][ T9021] ? skb_put+0x11b/0x210 [ 182.391787][ T9021] netlink_sendmsg+0x6b2/0xb30 [ 182.391817][ T9021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.391839][ T9021] ? aa_sock_msg_perm+0xf1/0x1d0 [ 182.391870][ T9021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.391889][ T9021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.391910][ T9021] __sock_sendmsg+0x21c/0x270 [ 182.391940][ T9021] ____sys_sendmsg+0x505/0x830 [ 182.391967][ T9021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.391999][ T9021] ? import_iovec+0x74/0xa0 [ 182.392027][ T9021] ___sys_sendmsg+0x21f/0x2a0 [ 182.392051][ T9021] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.392111][ T9021] ? __fget_files+0x2a/0x420 [ 182.392129][ T9021] ? __fget_files+0x3a0/0x420 [ 182.392158][ T9021] __x64_sys_sendmsg+0x19b/0x260 [ 182.392184][ T9021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.392216][ T9021] ? __pfx_ksys_write+0x10/0x10 [ 182.392247][ T9021] ? do_syscall_64+0xbe/0xfa0 [ 182.392279][ T9021] do_syscall_64+0xfa/0xfa0 [ 182.392305][ T9021] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.392333][ T9021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.392353][ T9021] ? clear_bhb_loop+0x60/0xb0 [ 182.392377][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.392394][ T9021] RIP: 0033:0x7fc55818f749 [ 182.392410][ T9021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.392426][ T9021] RSP: 002b:00007fc559040038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.392445][ T9021] RAX: ffffffffffffffda RBX: 00007fc5583e5fa0 RCX: 00007fc55818f749 [ 182.392458][ T9021] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 182.392469][ T9021] RBP: 00007fc559040090 R08: 0000000000000000 R09: 0000000000000000 [ 182.392481][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.392492][ T9021] R13: 00007fc5583e6038 R14: 00007fc5583e5fa0 R15: 00007ffc6a488658 [ 182.392522][ T9021] [ 182.424810][ T9015] veth0: entered promiscuous mode [ 182.687203][ T9018] veth0: left promiscuous mode [ 182.962714][ T9039] bridge0: port 3(team0) entered disabled state [ 182.969507][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.977313][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.102105][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.124632][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.242234][ T50] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.269556][ T50] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.318943][ T50] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.343612][ T50] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.370487][ T50] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.402004][ T50] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.431422][ T50] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.443996][ T50] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.571639][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1047'. [ 183.826362][ T9076] FAULT_INJECTION: forcing a failure. [ 183.826362][ T9076] name failslab, interval 1, probability 0, space 0, times 0 [ 183.865413][ T9076] CPU: 1 UID: 0 PID: 9076 Comm: syz.5.1053 Not tainted syzkaller #0 PREEMPT(full) [ 183.865440][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.865450][ T9076] Call Trace: [ 183.865457][ T9076] [ 183.865464][ T9076] dump_stack_lvl+0x189/0x250 [ 183.865492][ T9076] ? __pfx____ratelimit+0x10/0x10 [ 183.865526][ T9076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.865552][ T9076] ? __pfx__printk+0x10/0x10 [ 183.865576][ T9076] ? __pfx___might_resched+0x10/0x10 [ 183.865597][ T9076] ? fs_reclaim_acquire+0x7d/0x100 [ 183.865631][ T9076] should_fail_ex+0x414/0x560 [ 183.865664][ T9076] should_failslab+0xa8/0x100 [ 183.865686][ T9076] kmem_cache_alloc_node_noprof+0x77/0x710 [ 183.865712][ T9076] ? __alloc_skb+0x112/0x2d0 [ 183.865727][ T9076] ? __pfx_netlink_unicast+0x10/0x10 [ 183.865755][ T9076] __alloc_skb+0x112/0x2d0 [ 183.865774][ T9076] netlink_sendmsg+0x5c6/0xb30 [ 183.865801][ T9076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.865824][ T9076] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.865854][ T9076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.865872][ T9076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.865893][ T9076] __sock_sendmsg+0x21c/0x270 [ 183.865924][ T9076] ____sys_sendmsg+0x52d/0x830 [ 183.865952][ T9076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.865984][ T9076] ? import_iovec+0x74/0xa0 [ 183.866013][ T9076] ___sys_sendmsg+0x21f/0x2a0 [ 183.866037][ T9076] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.866105][ T9076] ? __might_fault+0xb0/0x130 [ 183.866137][ T9076] __sys_sendmmsg+0x227/0x430 [ 183.866165][ T9076] ? __pfx___sys_sendmmsg+0x10/0x10 [ 183.866197][ T9076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.866247][ T9076] ? ksys_write+0x22a/0x250 [ 183.866277][ T9076] ? __pfx_ksys_write+0x10/0x10 [ 183.866310][ T9076] __x64_sys_sendmmsg+0xa0/0xc0 [ 183.866335][ T9076] do_syscall_64+0xfa/0xfa0 [ 183.866362][ T9076] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.866390][ T9076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.866410][ T9076] ? clear_bhb_loop+0x60/0xb0 [ 183.866434][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.866453][ T9076] RIP: 0033:0x7fa08db8f749 [ 183.866471][ T9076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.866489][ T9076] RSP: 002b:00007fa08e94b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 183.866516][ T9076] RAX: ffffffffffffffda RBX: 00007fa08dde5fa0 RCX: 00007fa08db8f749 [ 183.866532][ T9076] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000004 [ 183.866545][ T9076] RBP: 00007fa08e94b090 R08: 0000000000000000 R09: 0000000000000000 [ 183.866558][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.866570][ T9076] R13: 00007fa08dde6038 R14: 00007fa08dde5fa0 R15: 00007ffe533e5b28 [ 183.866604][ T9076] [ 183.917682][ T9081] syz_tun: entered allmulticast mode [ 184.169355][ T9080] syz_tun: left allmulticast mode [ 184.302260][ T9107] FAULT_INJECTION: forcing a failure. [ 184.302260][ T9107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.332065][ T9105] FAULT_INJECTION: forcing a failure. [ 184.332065][ T9105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.354829][ T9105] CPU: 1 UID: 0 PID: 9105 Comm: syz.4.1061 Not tainted syzkaller #0 PREEMPT(full) [ 184.354856][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.354868][ T9105] Call Trace: [ 184.354876][ T9105] [ 184.354883][ T9105] dump_stack_lvl+0x189/0x250 [ 184.354915][ T9105] ? __pfx____ratelimit+0x10/0x10 [ 184.354941][ T9105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.354967][ T9105] ? __pfx__printk+0x10/0x10 [ 184.355001][ T9105] should_fail_ex+0x414/0x560 [ 184.355035][ T9105] _copy_from_user+0x2d/0xb0 [ 184.355061][ T9105] __copy_msghdr+0x3c5/0x5b0 [ 184.355087][ T9105] ___sys_sendmsg+0x1a5/0x2a0 [ 184.355111][ T9105] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.355169][ T9105] ? __fget_files+0x2a/0x420 [ 184.355187][ T9105] ? __fget_files+0x3a0/0x420 [ 184.355216][ T9105] __x64_sys_sendmsg+0x19b/0x260 [ 184.355241][ T9105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.355272][ T9105] ? __pfx_ksys_write+0x10/0x10 [ 184.355304][ T9105] ? do_syscall_64+0xbe/0xfa0 [ 184.355336][ T9105] do_syscall_64+0xfa/0xfa0 [ 184.355362][ T9105] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.355390][ T9105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.355409][ T9105] ? clear_bhb_loop+0x60/0xb0 [ 184.355433][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.355458][ T9105] RIP: 0033:0x7fc55818f749 [ 184.355476][ T9105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.355493][ T9105] RSP: 002b:00007fc559040038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.355513][ T9105] RAX: ffffffffffffffda RBX: 00007fc5583e5fa0 RCX: 00007fc55818f749 [ 184.355528][ T9105] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 184.355540][ T9105] RBP: 00007fc559040090 R08: 0000000000000000 R09: 0000000000000000 [ 184.355552][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.355564][ T9105] R13: 00007fc5583e6038 R14: 00007fc5583e5fa0 R15: 00007ffc6a488658 [ 184.355597][ T9105] [ 184.382115][ T9107] CPU: 0 UID: 0 PID: 9107 Comm: syz.5.1059 Not tainted syzkaller #0 PREEMPT(full) [ 184.382141][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.382154][ T9107] Call Trace: [ 184.382165][ T9107] [ 184.382173][ T9107] dump_stack_lvl+0x189/0x250 [ 184.382202][ T9107] ? __pfx____ratelimit+0x10/0x10 [ 184.382233][ T9107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.382257][ T9107] ? __pfx__printk+0x10/0x10 [ 184.382277][ T9107] ? __might_fault+0xb0/0x130 [ 184.382314][ T9107] should_fail_ex+0x414/0x560 [ 184.382347][ T9107] _copy_from_user+0x2d/0xb0 [ 184.382372][ T9107] __sys_connect+0x123/0x440 [ 184.382390][ T9107] ? __fget_files+0x3a0/0x420 [ 184.382410][ T9107] ? __pfx___sys_connect+0x10/0x10 [ 184.382450][ T9107] ? __pfx_ksys_write+0x10/0x10 [ 184.382483][ T9107] __x64_sys_connect+0x7a/0x90 [ 184.382501][ T9107] do_syscall_64+0xfa/0xfa0 [ 184.382526][ T9107] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.382553][ T9107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.382572][ T9107] ? clear_bhb_loop+0x60/0xb0 [ 184.382595][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.382613][ T9107] RIP: 0033:0x7fa08db8f749 [ 184.382629][ T9107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.382646][ T9107] RSP: 002b:00007fa08bdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 184.382667][ T9107] RAX: ffffffffffffffda RBX: 00007fa08dde6180 RCX: 00007fa08db8f749 [ 184.382681][ T9107] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 184.382693][ T9107] RBP: 00007fa08bdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 184.382711][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.382722][ T9107] R13: 00007fa08dde6218 R14: 00007fa08dde6180 R15: 00007ffe533e5b28 [ 184.382753][ T9107] [ 184.832624][ T9111] FAULT_INJECTION: forcing a failure. [ 184.832624][ T9111] name failslab, interval 1, probability 0, space 0, times 0 [ 184.845575][ T5840] Bluetooth: hci3: command 0x0405 tx timeout [ 184.857241][ T9111] CPU: 0 UID: 0 PID: 9111 Comm: syz.0.1062 Not tainted syzkaller #0 PREEMPT(full) [ 184.857269][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.857281][ T9111] Call Trace: [ 184.857289][ T9111] [ 184.857297][ T9111] dump_stack_lvl+0x189/0x250 [ 184.857328][ T9111] ? __pfx____ratelimit+0x10/0x10 [ 184.857356][ T9111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.857381][ T9111] ? __pfx__printk+0x10/0x10 [ 184.857416][ T9111] should_fail_ex+0x414/0x560 [ 184.857458][ T9111] should_failslab+0xa8/0x100 [ 184.857481][ T9111] __kmalloc_cache_noprof+0x6f/0x6f0 [ 184.857508][ T9111] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 184.857535][ T9111] ? sctp_add_bind_addr+0x8c/0x370 [ 184.857569][ T9111] sctp_add_bind_addr+0x8c/0x370 [ 184.857601][ T9111] sctp_copy_local_addr_list+0x30b/0x4e0 [ 184.857633][ T9111] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 184.857658][ T9111] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 184.857682][ T9111] ? sctp_association_new+0x18b3/0x25f0 [ 184.857704][ T9111] ? sctp_v6_is_any+0x64/0x80 [ 184.857733][ T9111] ? sctp_copy_one_addr+0x93/0x360 [ 184.857763][ T9111] sctp_bind_addr_copy+0xb3/0x3c0 [ 184.857791][ T9111] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 184.857818][ T9111] sctp_connect_new_asoc+0x2e0/0x690 [ 184.857841][ T9111] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 184.857860][ T9111] ? __local_bh_enable_ip+0x12d/0x1c0 [ 184.857889][ T9111] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 184.857911][ T9111] ? security_sctp_bind_connect+0x7e/0x2e0 [ 184.857938][ T9111] sctp_sendmsg+0x155c/0x2810 [ 184.857971][ T9111] ? __pfx_sctp_sendmsg+0x10/0x10 [ 184.857994][ T9111] ? aa_sk_perm+0x81e/0x950 [ 184.858027][ T9111] ? __pfx_aa_sk_perm+0x10/0x10 [ 184.858057][ T9111] ? sock_rps_record_flow+0x19/0x410 [ 184.858080][ T9111] ? inet_sendmsg+0x2f4/0x370 [ 184.858103][ T9111] __sock_sendmsg+0x19c/0x270 [ 184.858131][ T9111] __sys_sendto+0x3bd/0x520 [ 184.858148][ T9111] ? __pfx___sys_sendto+0x10/0x10 [ 184.858163][ T9111] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 184.858205][ T9111] ? __fget_files+0x3a0/0x420 [ 184.858249][ T9111] ? ksys_write+0x22a/0x250 [ 184.858281][ T9111] ? __pfx_ksys_write+0x10/0x10 [ 184.858310][ T9111] __x64_sys_sendto+0xde/0x100 [ 184.858330][ T9111] do_syscall_64+0xfa/0xfa0 [ 184.858354][ T9111] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.858377][ T9111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.858395][ T9111] ? clear_bhb_loop+0x60/0xb0 [ 184.858431][ T9111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.858450][ T9111] RIP: 0033:0x7fe9b098f749 [ 184.858468][ T9111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.858486][ T9111] RSP: 002b:00007fe9b18ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 184.858508][ T9111] RAX: ffffffffffffffda RBX: 00007fe9b0be5fa0 RCX: 00007fe9b098f749 [ 184.858523][ T9111] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 184.858536][ T9111] RBP: 00007fe9b18ea090 R08: 0000200000000140 R09: 000000000000001c [ 184.858549][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.858561][ T9111] R13: 00007fe9b0be6038 R14: 00007fe9b0be5fa0 R15: 00007fffd70cb8a8 [ 184.858596][ T9111] [ 185.208699][ T9113] netlink: 'syz.4.1064': attribute type 3 has an invalid length. [ 185.216721][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 185.376187][ T9121] FAULT_INJECTION: forcing a failure. [ 185.376187][ T9121] name failslab, interval 1, probability 0, space 0, times 0 [ 185.389534][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.4.1067 Not tainted syzkaller #0 PREEMPT(full) [ 185.389564][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.389576][ T9121] Call Trace: [ 185.389584][ T9121] [ 185.389591][ T9121] dump_stack_lvl+0x189/0x250 [ 185.389623][ T9121] ? __pfx____ratelimit+0x10/0x10 [ 185.389649][ T9121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.389675][ T9121] ? __pfx__printk+0x10/0x10 [ 185.389707][ T9121] should_fail_ex+0x414/0x560 [ 185.389740][ T9121] should_failslab+0xa8/0x100 [ 185.389760][ T9121] __kmalloc_cache_noprof+0x6f/0x6f0 [ 185.389786][ T9121] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 185.389813][ T9121] ? sctp_add_bind_addr+0x8c/0x370 [ 185.389845][ T9121] sctp_add_bind_addr+0x8c/0x370 [ 185.389876][ T9121] sctp_copy_local_addr_list+0x30b/0x4e0 [ 185.389906][ T9121] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 185.389933][ T9121] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 185.389962][ T9121] ? sctp_v6_is_any+0x64/0x80 [ 185.389992][ T9121] ? sctp_copy_one_addr+0x93/0x360 [ 185.390022][ T9121] sctp_bind_addr_copy+0xb3/0x3c0 [ 185.390051][ T9121] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 185.390078][ T9121] sctp_connect_new_asoc+0x2e0/0x690 [ 185.390103][ T9121] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 185.390121][ T9121] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.390151][ T9121] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 185.390172][ T9121] ? security_sctp_bind_connect+0x7e/0x2e0 [ 185.390200][ T9121] sctp_sendmsg+0x155c/0x2810 [ 185.390233][ T9121] ? __pfx_sctp_sendmsg+0x10/0x10 [ 185.390257][ T9121] ? aa_sk_perm+0x81e/0x950 [ 185.390283][ T9121] ? __lock_acquire+0xab9/0xd20 [ 185.390305][ T9121] ? __pfx_aa_sk_perm+0x10/0x10 [ 185.390335][ T9121] ? sock_rps_record_flow+0x19/0x410 [ 185.390357][ T9121] ? inet_sendmsg+0x2f4/0x370 [ 185.390377][ T9121] __sock_sendmsg+0x19c/0x270 [ 185.390406][ T9121] ____sys_sendmsg+0x52d/0x830 [ 185.390430][ T9121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.390460][ T9121] ? import_iovec+0x74/0xa0 [ 185.390490][ T9121] ___sys_sendmsg+0x21f/0x2a0 [ 185.390515][ T9121] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.390585][ T9121] ? __fget_files+0x2a/0x420 [ 185.390603][ T9121] ? __fget_files+0x3a0/0x420 [ 185.390634][ T9121] __sys_sendmmsg+0x227/0x430 [ 185.390663][ T9121] ? __pfx___sys_sendmmsg+0x10/0x10 [ 185.390696][ T9121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.390746][ T9121] ? ksys_write+0x22a/0x250 [ 185.390776][ T9121] ? __pfx_ksys_write+0x10/0x10 [ 185.390810][ T9121] __x64_sys_sendmmsg+0xa0/0xc0 [ 185.390835][ T9121] do_syscall_64+0xfa/0xfa0 [ 185.390862][ T9121] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.390889][ T9121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.390908][ T9121] ? clear_bhb_loop+0x60/0xb0 [ 185.390931][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.390948][ T9121] RIP: 0033:0x7fc55818f749 [ 185.390966][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.390984][ T9121] RSP: 002b:00007fc559040038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 185.391006][ T9121] RAX: ffffffffffffffda RBX: 00007fc5583e5fa0 RCX: 00007fc55818f749 [ 185.391020][ T9121] RDX: 0000000000000001 RSI: 0000200000003c40 RDI: 0000000000000003 [ 185.391033][ T9121] RBP: 00007fc559040090 R08: 0000000000000000 R09: 0000000000000000 [ 185.391046][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.391057][ T9121] R13: 00007fc5583e6038 R14: 00007fc5583e5fa0 R15: 00007ffc6a488658 [ 185.391093][ T9121] [ 185.783017][ T9119] syzkaller0: entered promiscuous mode [ 185.788602][ T9119] syzkaller0: entered allmulticast mode [ 185.853186][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1069'. [ 186.056464][ T9132] FAULT_INJECTION: forcing a failure. [ 186.056464][ T9132] name failslab, interval 1, probability 0, space 0, times 0 [ 186.070392][ T9132] CPU: 1 UID: 0 PID: 9132 Comm: syz.0.1071 Not tainted syzkaller #0 PREEMPT(full) [ 186.070416][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.070427][ T9132] Call Trace: [ 186.070435][ T9132] [ 186.070442][ T9132] dump_stack_lvl+0x189/0x250 [ 186.070470][ T9132] ? __pfx____ratelimit+0x10/0x10 [ 186.070493][ T9132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.070516][ T9132] ? __pfx__printk+0x10/0x10 [ 186.070539][ T9132] ? __pfx___might_resched+0x10/0x10 [ 186.070556][ T9132] ? fs_reclaim_acquire+0x7d/0x100 [ 186.070586][ T9132] should_fail_ex+0x414/0x560 [ 186.070617][ T9132] should_failslab+0xa8/0x100 [ 186.070635][ T9132] __kmalloc_noprof+0xcb/0x7f0 [ 186.070658][ T9132] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 186.070689][ T9132] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 186.070718][ T9132] genl_family_rcv_msg_doit+0xb8/0x300 [ 186.070747][ T9132] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 186.070777][ T9132] ? apparmor_capable+0x137/0x1b0 [ 186.070799][ T9132] ? bpf_lsm_capable+0x9/0x20 [ 186.070819][ T9132] ? security_capable+0x7e/0x2e0 [ 186.070849][ T9132] genl_rcv_msg+0x60e/0x790 [ 186.070877][ T9132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.070897][ T9132] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 186.070915][ T9132] ? __pfx_nl80211_vendor_cmd+0x10/0x10 [ 186.070932][ T9132] ? __pfx_nl80211_post_doit+0x10/0x10 [ 186.070966][ T9132] netlink_rcv_skb+0x208/0x470 [ 186.070981][ T9132] ? __lock_acquire+0xab9/0xd20 [ 186.070998][ T9132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.071022][ T9132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.071057][ T9132] ? down_read+0x1ad/0x2e0 [ 186.071077][ T9132] genl_rcv+0x28/0x40 [ 186.071096][ T9132] netlink_unicast+0x82f/0x9e0 [ 186.071129][ T9132] ? __pfx_netlink_unicast+0x10/0x10 [ 186.071156][ T9132] ? netlink_sendmsg+0x642/0xb30 [ 186.071172][ T9132] ? skb_put+0x11b/0x210 [ 186.071193][ T9132] netlink_sendmsg+0x805/0xb30 [ 186.071220][ T9132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.071241][ T9132] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.071268][ T9132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.071285][ T9132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.071311][ T9132] __sock_sendmsg+0x21c/0x270 [ 186.071338][ T9132] ____sys_sendmsg+0x505/0x830 [ 186.071367][ T9132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.071395][ T9132] ? import_iovec+0x74/0xa0 [ 186.071420][ T9132] ___sys_sendmsg+0x21f/0x2a0 [ 186.071442][ T9132] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.071498][ T9132] ? __fget_files+0x2a/0x420 [ 186.071514][ T9132] ? __fget_files+0x3a0/0x420 [ 186.071540][ T9132] __x64_sys_sendmsg+0x19b/0x260 [ 186.071562][ T9132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.071591][ T9132] ? __pfx_ksys_write+0x10/0x10 [ 186.071620][ T9132] ? do_syscall_64+0xbe/0xfa0 [ 186.071649][ T9132] do_syscall_64+0xfa/0xfa0 [ 186.071672][ T9132] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.071696][ T9132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.071713][ T9132] ? clear_bhb_loop+0x60/0xb0 [ 186.071734][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.071751][ T9132] RIP: 0033:0x7fe9b098f749 [ 186.071768][ T9132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.071783][ T9132] RSP: 002b:00007fe9b18ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.071804][ T9132] RAX: ffffffffffffffda RBX: 00007fe9b0be5fa0 RCX: 00007fe9b098f749 [ 186.071817][ T9132] RDX: 0000000000008080 RSI: 0000200000000140 RDI: 0000000000000004 [ 186.071828][ T9132] RBP: 00007fe9b18ea090 R08: 0000000000000000 R09: 0000000000000000 [ 186.071839][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.071849][ T9132] R13: 00007fe9b0be6038 R14: 00007fe9b0be5fa0 R15: 00007fffd70cb8a8 [ 186.071880][ T9132] [ 186.748316][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 187.407718][ T9127] netlink: 'syz.4.1069': attribute type 7 has an invalid length. [ 187.415650][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 187.594024][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 187.815449][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 187.844902][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 187.984212][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1082'. [ 188.245496][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1087'. [ 188.275928][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1087'. [ 188.516894][ T9190] xt_l2tp: invalid flags combination: 0 [ 188.682179][ T9197] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.688182][ T9198] syz_tun: entered allmulticast mode [ 188.696760][ T9197] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.697557][ T9196] syz_tun: left allmulticast mode [ 188.833066][ T9206] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 188.843741][ T9206] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 188.851617][ T9206] gretap1: entered promiscuous mode [ 188.856981][ T9206] gretap1: entered allmulticast mode [ 189.438093][ T9235] netlink: 'syz.1.1105': attribute type 3 has an invalid length. [ 189.773547][ T9249] tipc: Enabling of bearer rejected, already enabled [ 190.105407][ T9271] netlink: 'syz.5.1122': attribute type 3 has an invalid length. [ 190.120272][ T9271] FAULT_INJECTION: forcing a failure. [ 190.120272][ T9271] name failslab, interval 1, probability 0, space 0, times 0 [ 190.133524][ T9271] CPU: 0 UID: 0 PID: 9271 Comm: syz.5.1122 Not tainted syzkaller #0 PREEMPT(full) [ 190.133550][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.133562][ T9271] Call Trace: [ 190.133570][ T9271] [ 190.133577][ T9271] dump_stack_lvl+0x189/0x250 [ 190.133608][ T9271] ? __pfx____ratelimit+0x10/0x10 [ 190.133634][ T9271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.133660][ T9271] ? __pfx__printk+0x10/0x10 [ 190.133686][ T9271] ? __pfx___might_resched+0x10/0x10 [ 190.133713][ T9271] should_fail_ex+0x414/0x560 [ 190.133747][ T9271] should_failslab+0xa8/0x100 [ 190.133769][ T9271] kmem_cache_alloc_node_noprof+0x77/0x710 [ 190.133797][ T9271] ? __alloc_skb+0x112/0x2d0 [ 190.133821][ T9271] __alloc_skb+0x112/0x2d0 [ 190.133845][ T9271] netlink_ack+0x146/0xa50 [ 190.133862][ T9271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.133925][ T9271] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 190.133947][ T9271] ? __pfx_nl80211_post_doit+0x10/0x10 [ 190.133985][ T9271] netlink_rcv_skb+0x28c/0x470 [ 190.134002][ T9271] ? __lock_acquire+0xab9/0xd20 [ 190.134022][ T9271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.134048][ T9271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.134087][ T9271] ? down_read+0x1ad/0x2e0 [ 190.134109][ T9271] genl_rcv+0x28/0x40 [ 190.134128][ T9271] netlink_unicast+0x82f/0x9e0 [ 190.134166][ T9271] ? __pfx_netlink_unicast+0x10/0x10 [ 190.134196][ T9271] ? netlink_sendmsg+0x642/0xb30 [ 190.134215][ T9271] ? skb_put+0x11b/0x210 [ 190.134238][ T9271] netlink_sendmsg+0x805/0xb30 [ 190.134267][ T9271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.134291][ T9271] ? aa_sock_msg_perm+0xf1/0x1d0 [ 190.134322][ T9271] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.134341][ T9271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.134365][ T9271] __sock_sendmsg+0x21c/0x270 [ 190.134394][ T9271] ____sys_sendmsg+0x505/0x830 [ 190.134420][ T9271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.134451][ T9271] ? import_iovec+0x74/0xa0 [ 190.134480][ T9271] ___sys_sendmsg+0x21f/0x2a0 [ 190.134504][ T9271] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.134564][ T9271] ? __fget_files+0x2a/0x420 [ 190.134582][ T9271] ? __fget_files+0x3a0/0x420 [ 190.134612][ T9271] __x64_sys_sendmsg+0x19b/0x260 [ 190.134637][ T9271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.134668][ T9271] ? __pfx_ksys_write+0x10/0x10 [ 190.134697][ T9271] ? do_syscall_64+0xbe/0xfa0 [ 190.134727][ T9271] do_syscall_64+0xfa/0xfa0 [ 190.134751][ T9271] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.134777][ T9271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.134795][ T9271] ? clear_bhb_loop+0x60/0xb0 [ 190.134819][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.134837][ T9271] RIP: 0033:0x7fa08db8f749 [ 190.134854][ T9271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.134878][ T9271] RSP: 002b:00007fa08e94b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.134899][ T9271] RAX: ffffffffffffffda RBX: 00007fa08dde5fa0 RCX: 00007fa08db8f749 [ 190.134913][ T9271] RDX: 0000000000008080 RSI: 0000200000000140 RDI: 0000000000000004 [ 190.134926][ T9271] RBP: 00007fa08e94b090 R08: 0000000000000000 R09: 0000000000000000 [ 190.134938][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.134949][ T9271] R13: 00007fa08dde6038 R14: 00007fa08dde5fa0 R15: 00007ffe533e5b28 [ 190.134983][ T9271] [ 190.750802][ T9280] tipc: Enabling of bearer rejected, already enabled [ 191.069469][ T9306] FAULT_INJECTION: forcing a failure. [ 191.069469][ T9306] name failslab, interval 1, probability 0, space 0, times 0 [ 191.084812][ T9306] CPU: 1 UID: 0 PID: 9306 Comm: syz.0.1135 Not tainted syzkaller #0 PREEMPT(full) [ 191.084839][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.084851][ T9306] Call Trace: [ 191.084858][ T9306] [ 191.084866][ T9306] dump_stack_lvl+0x189/0x250 [ 191.084896][ T9306] ? __pfx____ratelimit+0x10/0x10 [ 191.084923][ T9306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.084949][ T9306] ? __pfx__printk+0x10/0x10 [ 191.084975][ T9306] ? __pfx___might_resched+0x10/0x10 [ 191.085001][ T9306] should_fail_ex+0x414/0x560 [ 191.085045][ T9306] should_failslab+0xa8/0x100 [ 191.085068][ T9306] kmem_cache_alloc_node_noprof+0x77/0x710 [ 191.085096][ T9306] ? __alloc_skb+0x112/0x2d0 [ 191.085121][ T9306] __alloc_skb+0x112/0x2d0 [ 191.085145][ T9306] netlink_ack+0x146/0xa50 [ 191.085181][ T9306] netlink_rcv_skb+0x28c/0x470 [ 191.085198][ T9306] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.085225][ T9306] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 191.085255][ T9306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.085285][ T9306] ? bpf_lsm_capable+0x9/0x20 [ 191.085309][ T9306] ? security_capable+0x7e/0x2e0 [ 191.085344][ T9306] nfnetlink_rcv+0x282/0x2590 [ 191.085375][ T9306] ? __dev_queue_xmit+0x27b/0x3b50 [ 191.085399][ T9306] ? __dev_queue_xmit+0x1d79/0x3b50 [ 191.085420][ T9306] ? kasan_save_track+0x3e/0x80 [ 191.085445][ T9306] ? __kasan_slab_alloc+0x6c/0x80 [ 191.085481][ T9306] ? __dev_queue_xmit+0x27b/0x3b50 [ 191.085522][ T9306] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.085550][ T9306] ? __pfx___dev_queue_xmit+0x10/0x10 [ 191.085589][ T9306] ? ref_tracker_free+0x63a/0x7d0 [ 191.085609][ T9306] ? __asan_memcpy+0x40/0x70 [ 191.085634][ T9306] ? __pfx_ref_tracker_free+0x10/0x10 [ 191.085671][ T9306] ? skb_clone+0x246/0x3a0 [ 191.085696][ T9306] ? __netlink_deliver_tap+0x807/0x850 [ 191.085716][ T9306] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.085743][ T9306] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.085770][ T9306] netlink_unicast+0x82f/0x9e0 [ 191.085807][ T9306] ? __pfx_netlink_unicast+0x10/0x10 [ 191.085837][ T9306] ? netlink_sendmsg+0x642/0xb30 [ 191.085854][ T9306] ? skb_put+0x11b/0x210 [ 191.085874][ T9306] netlink_sendmsg+0x805/0xb30 [ 191.085903][ T9306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.085926][ T9306] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.085956][ T9306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.085974][ T9306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.085995][ T9306] __sock_sendmsg+0x21c/0x270 [ 191.086022][ T9306] ____sys_sendmsg+0x505/0x830 [ 191.086057][ T9306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.086088][ T9306] ? import_iovec+0x74/0xa0 [ 191.086118][ T9306] ___sys_sendmsg+0x21f/0x2a0 [ 191.086143][ T9306] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.086202][ T9306] ? __fget_files+0x2a/0x420 [ 191.086219][ T9306] ? __fget_files+0x3a0/0x420 [ 191.086248][ T9306] __x64_sys_sendmsg+0x19b/0x260 [ 191.086285][ T9306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.086315][ T9306] ? __pfx_ksys_write+0x10/0x10 [ 191.086346][ T9306] ? do_syscall_64+0xbe/0xfa0 [ 191.086378][ T9306] do_syscall_64+0xfa/0xfa0 [ 191.086402][ T9306] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.086429][ T9306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.086447][ T9306] ? clear_bhb_loop+0x60/0xb0 [ 191.086480][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.086499][ T9306] RIP: 0033:0x7fe9b098f749 [ 191.086516][ T9306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.086532][ T9306] RSP: 002b:00007fe9b18ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.086552][ T9306] RAX: ffffffffffffffda RBX: 00007fe9b0be5fa0 RCX: 00007fe9b098f749 [ 191.086566][ T9306] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 191.086578][ T9306] RBP: 00007fe9b18ea090 R08: 0000000000000000 R09: 0000000000000000 [ 191.086590][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.086601][ T9306] R13: 00007fe9b0be6038 R14: 00007fe9b0be5fa0 R15: 00007fffd70cb8a8 [ 191.086633][ T9306] [ 191.086913][ T9304] syz.4.1137 uses old SIOCAX25GETINFO [ 191.356899][ T9313] __nla_validate_parse: 8 callbacks suppressed [ 191.356915][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 191.519945][ T9313] veth0_macvtap: left promiscuous mode [ 191.757697][ T9331] FAULT_INJECTION: forcing a failure. [ 191.757697][ T9331] name failslab, interval 1, probability 0, space 0, times 0 [ 191.780657][ T9331] CPU: 0 UID: 0 PID: 9331 Comm: syz.2.1144 Not tainted syzkaller #0 PREEMPT(full) [ 191.780686][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.780698][ T9331] Call Trace: [ 191.780706][ T9331] [ 191.780714][ T9331] dump_stack_lvl+0x189/0x250 [ 191.780743][ T9331] ? __pfx____ratelimit+0x10/0x10 [ 191.780773][ T9331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.780797][ T9331] ? __pfx__printk+0x10/0x10 [ 191.780818][ T9331] ? __pfx___might_resched+0x10/0x10 [ 191.780840][ T9331] ? fs_reclaim_acquire+0x7d/0x100 [ 191.780873][ T9331] should_fail_ex+0x414/0x560 [ 191.780905][ T9331] ? __pfx_sock_alloc_inode+0x10/0x10 [ 191.780928][ T9331] should_failslab+0xa8/0x100 [ 191.780948][ T9331] ? __pfx_sock_alloc_inode+0x10/0x10 [ 191.780970][ T9331] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 191.781007][ T9331] ? sock_alloc_inode+0x28/0xc0 [ 191.781028][ T9331] ? format_decode+0x5a3/0xe30 [ 191.781052][ T9331] ? __pfx_sock_alloc_inode+0x10/0x10 [ 191.781075][ T9331] sock_alloc_inode+0x28/0xc0 [ 191.781097][ T9331] alloc_inode+0x6a/0x1b0 [ 191.781126][ T9331] __sock_create+0x12d/0x9f0 [ 191.781169][ T9331] mptcp_subflow_create_socket+0xf0/0x7d0 [ 191.781197][ T9331] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 191.781221][ T9331] ? tomoyo_check_inet_address+0x275/0x8c0 [ 191.781255][ T9331] __mptcp_nmpc_sk+0x148/0x760 [ 191.781278][ T9331] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 191.781297][ T9331] ? look_up_lock_class+0x74/0x170 [ 191.781329][ T9331] mptcp_connect+0x71/0x830 [ 191.781360][ T9331] __inet_stream_connect+0x2ae/0xe70 [ 191.781389][ T9331] ? __local_bh_enable_ip+0x12d/0x1c0 [ 191.781410][ T9331] ? __pfx___inet_stream_connect+0x10/0x10 [ 191.781428][ T9331] ? __local_bh_enable_ip+0x12d/0x1c0 [ 191.781448][ T9331] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 191.781478][ T9331] inet_stream_connect+0x66/0xa0 [ 191.781497][ T9331] __sys_connect+0x316/0x440 [ 191.781513][ T9331] ? __fget_files+0x3a0/0x420 [ 191.781528][ T9331] ? __pfx___sys_connect+0x10/0x10 [ 191.781567][ T9331] ? __pfx_ksys_write+0x10/0x10 [ 191.781592][ T9331] __x64_sys_connect+0x7a/0x90 [ 191.781606][ T9331] do_syscall_64+0xfa/0xfa0 [ 191.781627][ T9331] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.781646][ T9331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.781663][ T9331] ? clear_bhb_loop+0x60/0xb0 [ 191.781685][ T9331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.781702][ T9331] RIP: 0033:0x7f33d578f749 [ 191.781719][ T9331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.781736][ T9331] RSP: 002b:00007f33d6548038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 191.781756][ T9331] RAX: ffffffffffffffda RBX: 00007f33d59e6180 RCX: 00007f33d578f749 [ 191.781771][ T9331] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 191.781783][ T9331] RBP: 00007f33d6548090 R08: 0000000000000000 R09: 0000000000000000 [ 191.781794][ T9331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.781805][ T9331] R13: 00007f33d59e6218 R14: 00007f33d59e6180 R15: 00007ffde49bdf68 [ 191.781836][ T9331] [ 191.782961][ T9331] socket: no more sockets [ 191.830064][ T9333] vlan3: entered promiscuous mode [ 191.847792][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'. [ 191.850118][ T9333] bond0: entered promiscuous mode [ 192.120833][ T9333] bond_slave_0: entered promiscuous mode [ 192.126954][ T9333] bond_slave_1: entered promiscuous mode [ 192.299144][ T9349] syz_tun: entered allmulticast mode [ 192.310953][ T9348] syz_tun: left allmulticast mode [ 192.401375][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1151'. [ 192.414062][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'. [ 192.459116][ T9355] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 192.478401][ T9355] bond3 (unregistering): Released all slaves [ 192.516600][ T9358] gtp0: entered promiscuous mode [ 192.521847][ T9358] gtp0: entered allmulticast mode [ 192.582445][ T9363] ipvlan2: entered promiscuous mode [ 192.684895][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI [ 192.696819][ C1] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 192.705244][ C1] CPU: 1 UID: 0 PID: 9366 Comm: syz.4.1156 Not tainted syzkaller #0 PREEMPT(full) [ 192.714694][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.724748][ C1] RIP: 0010:rt6_find_cached_rt+0xb9/0x270 [ 192.730497][ C1] Code: 48 c1 e8 03 48 89 44 24 08 48 8b 44 24 08 80 3c 18 00 74 08 4c 89 f7 e8 e5 71 2c f8 49 8b 2e 48 83 c5 60 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 c9 71 2c f8 4c 8b 6d 00 e8 10 35 4d [ 192.750185][ C1] RSP: 0018:ffffc90000a08360 EFLAGS: 00010206 [ 192.756257][ C1] RAX: 000000000000000c RBX: dffffc0000000000 RCX: 0000000000000100 [ 192.764217][ C1] RDX: ffff88802ad4dac0 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.772202][ C1] RBP: 0000000000000060 R08: ffff888078939833 R09: 1ffff1100f127306 [ 192.780263][ C1] R10: dffffc0000000000 R11: ffffed100f127307 R12: ffffc90000a08438 [ 192.788240][ C1] R13: 0000000000000000 R14: ffffc90000a08430 R15: 0000000000000000 [ 192.796724][ C1] FS: 0000000000000000(0000) GS:ffff888126239000(0000) knlGS:0000000000000000 [ 192.805662][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.812347][ C1] CR2: 0000200000001440 CR3: 0000000074862000 CR4: 00000000003526f0 [ 192.820426][ C1] Call Trace: [ 192.824416][ C1] [ 192.827268][ C1] ? ip6_pol_route+0x162/0x1180 [ 192.832119][ C1] ip6_pol_route+0x28d/0x1180 [ 192.836798][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 192.842001][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 192.847306][ C1] ? sched_clock+0x3f/0x60 [ 192.851748][ C1] ? clockevents_program_event+0x24d/0x360 [ 192.858011][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 192.863298][ C1] fib6_rule_lookup+0x348/0x6f0 [ 192.868161][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 192.873900][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 192.879282][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 192.884745][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 192.890201][ C1] ? dev_get_by_index_rcu+0xf4/0x110 [ 192.895493][ C1] ip6_route_output_flags+0x364/0x5d0 [ 192.900860][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 192.906324][ C1] ip6_dst_lookup_tail+0x299/0x1510 [ 192.911550][ C1] ? __lock_acquire+0xab9/0xd20 [ 192.916411][ C1] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 192.922041][ C1] ? dst_cache_get+0x10e/0x5b0 [ 192.926809][ C1] ? dst_cache_get+0x10e/0x5b0 [ 192.931582][ C1] ip6_dst_lookup_flow+0x47/0xe0 [ 192.936801][ C1] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 192.942450][ C1] tipc_udp_xmit+0x315/0xb60 [ 192.947164][ C1] ? tipc_udp_xmit+0xa4/0xb60 [ 192.951949][ C1] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 192.957145][ C1] ? tipc_net+0x45/0x270 [ 192.961394][ C1] ? tipc_udp_send_msg+0x2a6/0x3f0 [ 192.966503][ C1] tipc_bearer_xmit_skb+0x2b3/0x400 [ 192.971715][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 192.977014][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 192.982745][ C1] tipc_disc_timeout+0x580/0x6d0 [ 192.987699][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 192.993163][ C1] call_timer_fn+0x17e/0x5f0 [ 192.997745][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 193.003198][ C1] ? call_timer_fn+0xbe/0x5f0 [ 193.007952][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 193.013053][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 193.018259][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.023485][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 193.028942][ C1] __run_timer_base+0x61a/0x860 [ 193.033886][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 193.039256][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 193.045532][ C1] run_timer_softirq+0xb7/0x180 [ 193.050399][ C1] handle_softirqs+0x286/0x870 [ 193.055175][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 193.059947][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 193.065229][ C1] __irq_exit_rcu+0xca/0x1f0 [ 193.069812][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 193.075003][ C1] irq_exit_rcu+0x9/0x30 [ 193.079235][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 193.084866][ C1] [ 193.087789][ C1] [ 193.090715][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.096685][ C1] RIP: 0010:kasan_check_range+0xd/0x2c0 [ 193.102233][ C1] Code: ff ff ff eb e1 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 41 55 41 54 <53> b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d 04 37 49 39 f8 0f 82 82 [ 193.121840][ C1] RSP: 0018:ffffc9000463f278 EFLAGS: 00000246 [ 193.127993][ C1] RAX: ffffffff821ce4fc RBX: ffffea0001745c80 RCX: ffffffff821ce513 [ 193.135959][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001745c80 [ 193.144023][ C1] RBP: ffffc9000463f568 R08: ffffea0001745c47 R09: 1ffffd40002e8b88 [ 193.151997][ C1] R10: dffffc0000000000 R11: fffff940002e8b89 R12: dffffc0000000000 [ 193.159963][ C1] R13: 1ffffd40002e8b91 R14: ffffea0001745c88 R15: 0000000000000000 [ 193.167930][ C1] ? free_swap_cache+0x4c/0x300 [ 193.172774][ C1] ? free_swap_cache+0x63/0x300 [ 193.177622][ C1] free_swap_cache+0x63/0x300 [ 193.182295][ C1] free_pages_and_swap_cache+0x17a/0x520 [ 193.187925][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 193.194775][ C1] ? get_flush_tlb_info+0x171/0x260 [ 193.199970][ C1] ? tlb_table_flush+0x145/0x410 [ 193.204895][ C1] tlb_flush_mmu+0x3a0/0x680 [ 193.209481][ C1] ? unmap_page_range+0x3b14/0x4370 [ 193.214669][ C1] unmap_page_range+0x3b37/0x4370 [ 193.219703][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 193.225066][ C1] ? mas_find+0xb0e/0xd30 [ 193.229390][ C1] ? unmap_vmas+0x144/0x580 [ 193.233879][ C1] unmap_vmas+0x399/0x580 [ 193.238203][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 193.243048][ C1] exit_mmap+0x240/0xb40 [ 193.247284][ C1] ? uprobe_clear_state+0x20f/0x290 [ 193.252500][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 193.257306][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 193.262960][ C1] ? __pfx_exit_aio+0x10/0x10 [ 193.267643][ C1] ? uprobe_clear_state+0x27c/0x290 [ 193.272866][ C1] __mmput+0x118/0x430 [ 193.276950][ C1] exit_mm+0x1da/0x2c0 [ 193.281024][ C1] ? __pfx_exit_mm+0x10/0x10 [ 193.285615][ C1] ? rcu_is_watching+0x15/0xb0 [ 193.290440][ C1] do_exit+0x648/0x2300 [ 193.294590][ C1] ? preempt_schedule+0xae/0xc0 [ 193.299432][ C1] ? preempt_schedule_common+0x83/0xd0 [ 193.304886][ C1] ? preempt_schedule+0xae/0xc0 [ 193.309732][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 193.315096][ C1] ? __pfx_do_exit+0x10/0x10 [ 193.319681][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 193.325046][ C1] do_group_exit+0x21c/0x2d0 [ 193.329631][ C1] __x64_sys_exit_group+0x3f/0x40 [ 193.334647][ C1] x64_sys_call+0x21f7/0x2200 [ 193.339313][ C1] do_syscall_64+0xfa/0xfa0 [ 193.343810][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.349002][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.355059][ C1] ? clear_bhb_loop+0x60/0xb0 [ 193.359723][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.365783][ C1] RIP: 0033:0x7fc55818f749 [ 193.370191][ C1] Code: Unable to access opcode bytes at 0x7fc55818f71f. [ 193.377192][ C1] RSP: 002b:00007ffc6a4889b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 193.385594][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc55818f749 [ 193.393640][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.401596][ C1] RBP: 00007ffc6a488a1c R08: 000000066a488aaf R09: 00000000000927c0 [ 193.409555][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000f6 [ 193.417511][ C1] R13: 00000000000927c0 R14: 000000000002f03a R15: 00007ffc6a488a70 [ 193.425476][ C1] [ 193.428483][ C1] Modules linked in: [ 193.432430][ C1] ---[ end trace 0000000000000000 ]--- [ 193.437914][ C1] RIP: 0010:rt6_find_cached_rt+0xb9/0x270 [ 193.443673][ C1] Code: 48 c1 e8 03 48 89 44 24 08 48 8b 44 24 08 80 3c 18 00 74 08 4c 89 f7 e8 e5 71 2c f8 49 8b 2e 48 83 c5 60 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 c9 71 2c f8 4c 8b 6d 00 e8 10 35 4d [ 193.463331][ C1] RSP: 0018:ffffc90000a08360 EFLAGS: 00010206 [ 193.469434][ C1] RAX: 000000000000000c RBX: dffffc0000000000 RCX: 0000000000000100 [ 193.477445][ C1] RDX: ffff88802ad4dac0 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.485458][ C1] RBP: 0000000000000060 R08: ffff888078939833 R09: 1ffff1100f127306 [ 193.493444][ C1] R10: dffffc0000000000 R11: ffffed100f127307 R12: ffffc90000a08438 [ 193.501465][ C1] R13: 0000000000000000 R14: ffffc90000a08430 R15: 0000000000000000 [ 193.509482][ C1] FS: 0000000000000000(0000) GS:ffff888126239000(0000) knlGS:0000000000000000 [ 193.518472][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.525098][ C1] CR2: 0000200000001440 CR3: 0000000074862000 CR4: 00000000003526f0 [ 193.533100][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 193.540432][ C1] Kernel Offset: disabled [ 193.544745][ C1] Rebooting in 86400 seconds..