last executing test programs: 1m5.480534337s ago: executing program 4 (id=1458): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000002240)=ANY=[], 0x6a) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x60}, 0x1, 0x7}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1m4.499749944s ago: executing program 4 (id=1472): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102) close(0x3) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x8100000) 1m4.308579039s ago: executing program 4 (id=1475): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xf, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bfd007df4a000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) close(0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000be1846050000000600010005000000080009000200000008000b000000000008000c00a80a00000c0010001fb702cfff"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m3.735909093s ago: executing program 2 (id=1484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="001a2b25850200000000000000040f6ad60000000000000000000e000000"], 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000003c0)={'erspan0\x00', r5, 0x0, 0x9, 0x1, 0x6, {{0x10, 0x4, 0x2, 0x6, 0x40, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x13, 0xe7, [@broadcast, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x13}]}, @lsrr={0x83, 0xb, 0xd3, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp_prespec={0x44, 0xc, 0x74, 0x3, 0x2, [{@local, 0xb1fb}]}]}}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000440)={@dev, @loopback, 0x0}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, r7, 0x110, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xa55f7728a29fb614}, 0x4041) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000007d0041ff000000008000000000000000c86f", @ANYRES32=0x0, @ANYBLOB="00000000003f0000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5800000010000304000000000000000000000000985266bbf4bfdcae0b549c04b4874b9b59ab13c5d2b17d0d2820a1f8766cd803ccbc6db146ccdca58fc318a611d16e53ce5f34b4", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) epoll_create(0x6) 1m3.535590876s ago: executing program 2 (id=1487): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000bc0)=@deltaction={0x138, 0x31, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x6, 0x3ffc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffdaf}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xfffffffffffffe34, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044074) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_TIOCINQ(r5, 0x541b, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000b80)={&(0x7f0000000980)=@in6={0xa, 0x4e24, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000d00)="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", 0x13f}, {&(0x7f0000000900)="4fad5d76f42590f50d092cf0bc3ce38add5a1ab4efd0243acb6bf48415ad98f054bcf86dfb28f7cb4380a19fc7bab1269a21c3f9b834374d11e93a9abda5d21c26db45fef8b0e9ac4e8b62c2e9e775a86229b457ac3f27991f4983799129ecfba4b4969c10e40b1f787a2e", 0x6b}, {&(0x7f00000009c0)="c0334256e7645361b77208472a5be15b22988080b3d4a65ab389a70813f015032f2d12207c62f902bf50d2b033aba48305", 0x31}, {&(0x7f0000000a00)="1c0c38582ea7c3c86963e8a4eb9cb85c07c9a6b16f740b06712e195270970949c722129f2faa8ad3708c8aea0bcef4ee4190d1eab95a6140647a0fdcc54085ab7be4e8571c2d1dc18a0d7503987f1338c0f3d6bd7ed43df7c045851310f3ccbe36a940fef3235129fe53f4252a11382a9281992c7aa747e2c0f4a706c7af94c142bd67b6b301d6ed4d4e70a32676ba52b8042e3cba6fc406cd4a4f26267d26e1db660cbfda365d4656ae041fb4fa7feedfa60dfc4cdffcefb5abf0b93656cd13245448a53c316f5369c42d15949aeee117d75ab8d928b91497aa5522dee1", 0xde}], 0x4, &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES32=r3], 0x48, 0x8002}, 0x400c0) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, r6}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341204007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0xc64b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) recvmsg(r4, &(0x7f0000000840)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/138, 0x8a}], 0x7, &(0x7f0000000800)=""/16, 0x10}, 0x40002000) 1m3.264423961s ago: executing program 4 (id=1489): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)="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", 0x147}, {&(0x7f0000000580)="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", 0x2c1}, {&(0x7f0000002100)="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", 0xb00}, {0x0}], 0x4}, 0x20008000) epoll_wait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400d080}, 0x4040) 1m2.384267484s ago: executing program 2 (id=1495): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108ffffffde00000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m2.215500728s ago: executing program 4 (id=1498): syz_emit_ethernet(0x3f, &(0x7f0000001380)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd608907a600092c03cb697a653e336f000000500000000000ff0200000000"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd60bb0700001c2c03cb697a653e336f000000500000000000ff0200000000000000000000000000010000002e"], 0x0) 1m2.207334127s ago: executing program 2 (id=1499): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="e4bd9dd29bc6a30e7b0039b6622f6b2467f17fc7d52a61e1ddda34e1d18c63f037bd3ac0cbad5fc38ebc8ea06f4dfead8a5c0ceae4ae162d16276c08a8515366a07b9c8a4e398610ce1d9562e1cd7a7270e2558e12d18711fb1d28f8107a59a9d2c2c9f5b5f4f265251893c61c499dd19c42a5efa06499", 0x77}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m2.015861279s ago: executing program 4 (id=1500): unshare(0x62040200) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@loopback, 0x80, r2}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, r2}, 0x14) 58.981811027s ago: executing program 0 (id=1519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'batadv_slave_1\x00', 0x200}) 58.872985574s ago: executing program 0 (id=1520): r0 = socket$netlink(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800010a00000000000000000400000008000c"], 0x1c}}, 0x0) 58.739688446s ago: executing program 0 (id=1522): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="9ea0dfe47c2e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfe, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "66dbdf92e484719f21d99fbb30db555c4f7d806b552cc1f49a4a1637182871e4", "68f1a62e40edcd60a7ad1928ea681206", {"601ef9c200b3e146861a847f823a14fd", "eaff4338225e4445b23a69a83d4ebe7d"}}}}}}}, 0x0) 58.561907868s ago: executing program 3 (id=1524): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], 0xa) 58.479924741s ago: executing program 1 (id=1525): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x0) 58.443326649s ago: executing program 1 (id=1526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 58.395760167s ago: executing program 3 (id=1527): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 58.296095383s ago: executing program 1 (id=1528): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) 58.276710898s ago: executing program 3 (id=1529): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x20044808, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x12) 58.218512868s ago: executing program 1 (id=1530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="440000000201050000000000000000000a000004300001802c00018014000300"], 0x44}, 0x1, 0x0, 0x0, 0x2000c080}, 0x10) 58.056098722s ago: executing program 3 (id=1531): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000001640)={0xa, 0x4e20, 0x85, @rand_addr=' \x01\x00', 0x80000007}, 0x1c, 0x0}}], 0x2, 0x20008810) 58.050916323s ago: executing program 0 (id=1532): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0xfffd, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, {[@generic={0x86, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 57.930046891s ago: executing program 2 (id=1533): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4000800) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000012000302000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000", @ANYRES32, @ANYBLOB="814b00000000000000000000000000002100010007"], 0x70}}, 0x4040000) 57.820114651s ago: executing program 1 (id=1534): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000240), 0x4) 57.791994959s ago: executing program 0 (id=1535): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)="896b6bb38cf1b52353635304f9c9ceeccb7d09fa1c18ca6b3990bbbd0ace0d65ab59dd3198dcdc0c19d95fa6987e7d2232a213387e955785c6a6c9ad9b40de6cac8021832025aae7f263c0cd1199e09ee31f98c4bf2cfa1ee78cbfdca17e4d7f93ca727cbcaa97e8b155a92ac13350cc3ab6c20935cfaaec9cca3f6603641f1bedf1ad3fe6f5a152c9f7fe73771bb453325c7a41cb8d29398244da1f9e1d26f5a22a23fb76391b2619850c29ec2af0f1bd9a71d07dca6ee069c9ee10fd1f2b3db5a8d9bed329f2a27cc9830eb637a9c85b49491f791bbd0d99414b9208346605b94b3b0da3a53d107b74172c0041a8c4e7098cc5b9a74fd4c330aa3990a1dadd6d70e765d008aedde7209e330ea38c10eb8be72248f3c68616dfcf55733344253756ec1bb87a30eb18af353cde008b3f277371ac1b2b0876bfc140dfb2d47491ee2741992927a6", 0x147}, {&(0x7f0000000580)="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", 0x2c1}, {&(0x7f0000002100)="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", 0xb00}, {0x0}], 0x4}, 0x20008000) epoll_wait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400d080}, 0x4040) 57.789890005s ago: executing program 3 (id=1536): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x0) 55.81537418s ago: executing program 0 (id=1537): bpf$PROG_LOAD(0x5, 0x0, 0x0) 55.527457643s ago: executing program 3 (id=1538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0x11, 0xf7, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 55.225586366s ago: executing program 1 (id=1539): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) unshare(0x20000400) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0008002abd70000000000007e80000aa7cf06f915338b61d617a2fce524181a5361bcef395183b57eaaa3db5aa2314f9f59936ece313fb34e89dee47e2d6e2f1785512fd8c308f8c7cc2d6", @ANYRES32=r3, @ANYBLOB="0c0000800800090064010101"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffffffffffffff9d, 0x0}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket(0x18, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000440)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) 52.429114418s ago: executing program 2 (id=1540): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) unshare(0x20000400) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x6, 0xd}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x5, 0xc, 0x7, 0x5}]}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000500)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x1, 0x9, 0x5, 0x5, 0xbc, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x5}}) listen(r6, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='jbd2_shrink_scan_exit\x00'}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 41.503685198s ago: executing program 32 (id=1500): unshare(0x62040200) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@loopback, 0x80, r2}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, r2}, 0x14) 36.015290927s ago: executing program 33 (id=1537): bpf$PROG_LOAD(0x5, 0x0, 0x0) 30.615723849s ago: executing program 34 (id=1539): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) unshare(0x20000400) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="240000002e0008002abd70000000000007e80000aa7cf06f915338b61d617a2fce524181a5361bcef395183b57eaaa3db5aa2314f9f59936ece313fb34e89dee47e2d6e2f1785512fd8c308f8c7cc2d6", @ANYRES32=r3, @ANYBLOB="0c0000800800090064010101"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffffffffffffff9d, 0x0}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket(0x18, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000440)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) 12.584160493s ago: executing program 35 (id=1538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0x11, 0xf7, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 0s ago: executing program 36 (id=1540): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) unshare(0x20000400) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x6, 0xd}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x5, 0xc, 0x7, 0x5}]}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000500)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x1, 0x9, 0x5, 0x5, 0xbc, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x5}}) listen(r6, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='jbd2_shrink_scan_exit\x00'}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): bearer , priority 0 [ 134.171076][ T8045] tipc: Disabling bearer [ 134.416971][ T8067] v: renamed from vlan0 [ 134.417997][ T8073] netlink: 'syz.2.653': attribute type 11 has an invalid length. [ 134.431109][ T8073] FAULT_INJECTION: forcing a failure. [ 134.431109][ T8073] name failslab, interval 1, probability 0, space 0, times 0 [ 134.446839][ T8073] CPU: 1 UID: 0 PID: 8073 Comm: syz.2.653 Not tainted syzkaller #0 PREEMPT(full) [ 134.446862][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.446873][ T8073] Call Trace: [ 134.446880][ T8073] [ 134.446888][ T8073] dump_stack_lvl+0x189/0x250 [ 134.446916][ T8073] ? __pfx____ratelimit+0x10/0x10 [ 134.446938][ T8073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.446961][ T8073] ? __pfx__printk+0x10/0x10 [ 134.446986][ T8073] ? __pfx___might_resched+0x10/0x10 [ 134.447011][ T8073] should_fail_ex+0x414/0x560 [ 134.447041][ T8073] should_failslab+0xa8/0x100 [ 134.447061][ T8073] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 134.447086][ T8073] ? __alloc_workqueue+0x6a9/0x1b80 [ 134.447116][ T8073] __alloc_workqueue+0x6a9/0x1b80 [ 134.447157][ T8073] alloc_workqueue_noprof+0xd4/0x210 [ 134.447188][ T8073] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 134.447214][ T8073] ? trace_kmalloc+0x1f/0xd0 [ 134.447234][ T8073] ? __kmalloc_noprof+0x432/0x7f0 [ 134.447265][ T8073] ieee80211_register_hw+0x2dbb/0x40d0 [ 134.447308][ T8073] ? ieee80211_register_hw+0x1401/0x40d0 [ 134.447342][ T8073] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 134.447366][ T8073] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 134.447396][ T8073] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 134.447416][ T8073] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 134.447443][ T8073] ? __hrtimer_setup+0x187/0x210 [ 134.447461][ T8073] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 134.447483][ T8073] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 134.447541][ T8073] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 134.447566][ T8073] ? __nla_validate_parse+0x2400/0x2d40 [ 134.447584][ T8073] ? __x64_sys_sendmsg+0x19b/0x260 [ 134.447612][ T8073] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 134.447643][ T8073] ? __pfx___nla_validate_parse+0x10/0x10 [ 134.447677][ T8073] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 134.447706][ T8073] ? rcu_is_watching+0x15/0xb0 [ 134.447730][ T8073] ? __nla_parse+0x40/0x60 [ 134.447752][ T8073] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 134.447783][ T8073] genl_family_rcv_msg_doit+0x215/0x300 [ 134.447811][ T8073] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 134.447846][ T8073] ? bpf_lsm_capable+0x9/0x20 [ 134.447865][ T8073] ? security_capable+0x7e/0x2e0 [ 134.447895][ T8073] genl_rcv_msg+0x60e/0x790 [ 134.447922][ T8073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.447941][ T8073] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 134.447981][ T8073] netlink_rcv_skb+0x208/0x470 [ 134.448003][ T8073] ? __lock_acquire+0xab9/0xd20 [ 134.448022][ T8073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.448043][ T8073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.448089][ T8073] ? down_read+0x1ad/0x2e0 [ 134.448120][ T8073] genl_rcv+0x28/0x40 [ 134.448137][ T8073] netlink_unicast+0x82f/0x9e0 [ 134.448170][ T8073] ? __pfx_netlink_unicast+0x10/0x10 [ 134.448195][ T8073] ? netlink_sendmsg+0x642/0xb30 [ 134.448217][ T8073] ? skb_put+0x11b/0x210 [ 134.448246][ T8073] netlink_sendmsg+0x805/0xb30 [ 134.448281][ T8073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.448310][ T8073] ? aa_sock_msg_perm+0xf1/0x1d0 [ 134.448336][ T8073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.448353][ T8073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.448378][ T8073] __sock_sendmsg+0x21c/0x270 [ 134.448408][ T8073] ____sys_sendmsg+0x505/0x830 [ 134.448433][ T8073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.448461][ T8073] ? import_iovec+0x74/0xa0 [ 134.448487][ T8073] ___sys_sendmsg+0x21f/0x2a0 [ 134.448507][ T8073] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.448566][ T8073] ? __fget_files+0x2a/0x420 [ 134.448582][ T8073] ? __fget_files+0x3a0/0x420 [ 134.448611][ T8073] __x64_sys_sendmsg+0x19b/0x260 [ 134.448632][ T8073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.448665][ T8073] ? __pfx_ksys_write+0x10/0x10 [ 134.448693][ T8073] ? do_syscall_64+0xbe/0xfa0 [ 134.448717][ T8073] do_syscall_64+0xfa/0xfa0 [ 134.448738][ T8073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.448754][ T8073] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.448772][ T8073] ? clear_bhb_loop+0x60/0xb0 [ 134.448794][ T8073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.448811][ T8073] RIP: 0033:0x7ff42b98efc9 [ 134.448828][ T8073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.448842][ T8073] RSP: 002b:00007ff42c741038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.448862][ T8073] RAX: ffffffffffffffda RBX: 00007ff42bbe5fa0 RCX: 00007ff42b98efc9 [ 134.448875][ T8073] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 134.448887][ T8073] RBP: 00007ff42c741090 R08: 0000000000000000 R09: 0000000000000000 [ 134.448898][ T8073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.448908][ T8073] R13: 00007ff42bbe6038 R14: 00007ff42bbe5fa0 R15: 00007fffb2f30bf8 [ 134.448942][ T8073] [ 135.093435][ T8083] netlink: 'syz.4.657': attribute type 1 has an invalid length. [ 135.110779][ T8083] netlink: 'syz.4.657': attribute type 2 has an invalid length. [ 135.211917][ T8089] FAULT_INJECTION: forcing a failure. [ 135.211917][ T8089] name failslab, interval 1, probability 0, space 0, times 0 [ 135.289454][ T8089] CPU: 0 UID: 0 PID: 8089 Comm: syz.2.659 Not tainted syzkaller #0 PREEMPT(full) [ 135.289481][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.289491][ T8089] Call Trace: [ 135.289498][ T8089] [ 135.289507][ T8089] dump_stack_lvl+0x189/0x250 [ 135.289535][ T8089] ? __pfx____ratelimit+0x10/0x10 [ 135.289555][ T8089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.289586][ T8089] ? __pfx__printk+0x10/0x10 [ 135.289611][ T8089] ? __pfx___might_resched+0x10/0x10 [ 135.289628][ T8089] ? fs_reclaim_acquire+0x7d/0x100 [ 135.289658][ T8089] should_fail_ex+0x414/0x560 [ 135.289688][ T8089] should_failslab+0xa8/0x100 [ 135.289708][ T8089] __kmalloc_noprof+0xcb/0x7f0 [ 135.289731][ T8089] ? sock_kmalloc+0xd6/0x160 [ 135.289746][ T8089] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 135.289772][ T8089] sock_kmalloc+0xd6/0x160 [ 135.289793][ T8089] hash_recvmsg+0x1d4/0x840 [ 135.289821][ T8089] ? __pfx_hash_recvmsg+0x10/0x10 [ 135.289842][ T8089] sock_recvmsg_nosec+0x186/0x1c0 [ 135.289869][ T8089] ____sys_recvmsg+0x3aa/0x460 [ 135.289897][ T8089] ? __pfx_____sys_recvmsg+0x10/0x10 [ 135.289931][ T8089] ? import_iovec+0x74/0xa0 [ 135.289956][ T8089] ___sys_recvmsg+0x1b5/0x510 [ 135.289980][ T8089] ? __pfx____sys_recvmsg+0x10/0x10 [ 135.290031][ T8089] ? __might_fault+0xb0/0x130 [ 135.290058][ T8089] do_recvmmsg+0x307/0x770 [ 135.290086][ T8089] ? __pfx_do_recvmmsg+0x10/0x10 [ 135.290117][ T8089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.290157][ T8089] __x64_sys_recvmmsg+0x190/0x240 [ 135.290179][ T8089] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 135.290201][ T8089] ? do_syscall_64+0xbe/0xfa0 [ 135.290225][ T8089] do_syscall_64+0xfa/0xfa0 [ 135.290243][ T8089] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.290262][ T8089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.290279][ T8089] ? clear_bhb_loop+0x60/0xb0 [ 135.290300][ T8089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.290317][ T8089] RIP: 0033:0x7ff42b98efc9 [ 135.290332][ T8089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.290347][ T8089] RSP: 002b:00007ff42c741038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 135.290366][ T8089] RAX: ffffffffffffffda RBX: 00007ff42bbe5fa0 RCX: 00007ff42b98efc9 [ 135.290379][ T8089] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 135.290391][ T8089] RBP: 00007ff42c741090 R08: 0000000000000000 R09: 0000000000000000 [ 135.290402][ T8089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.290413][ T8089] R13: 00007ff42bbe6038 R14: 00007ff42bbe5fa0 R15: 00007fffb2f30bf8 [ 135.290445][ T8089] [ 135.677420][ T8099] __nla_validate_parse: 4 callbacks suppressed [ 135.677436][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 135.692842][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 135.711346][ T2952] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.711457][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 135.721188][ T2952] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.731558][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 135.777536][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 135.777847][ T2952] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.795703][ T2952] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.005550][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.667'. [ 136.116734][ T8113] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.287422][ T8118] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'. [ 136.307963][ T8118] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'. [ 136.327241][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 136.366878][ T8118] bond3: option arp_validate: invalid value (18446744073491447809) [ 136.387134][ T8118] bond3 (unregistering): Released all slaves [ 136.825464][ T8142] syzkaller0: entered promiscuous mode [ 136.830972][ T8142] syzkaller0: entered allmulticast mode [ 136.856225][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.677'. [ 136.867901][ T8142] tipc: Enabled bearer , priority 0 [ 136.876827][ T8140] tipc: Resetting bearer [ 136.907217][ T8140] tipc: Disabling bearer [ 136.916808][ T8147] batadv_slave_1: entered promiscuous mode [ 136.928382][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.954514][ T8147] batadv_slave_1 (unregistering): left promiscuous mode [ 136.973727][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.241965][ T8159] FAULT_INJECTION: forcing a failure. [ 137.241965][ T8159] name failslab, interval 1, probability 0, space 0, times 0 [ 137.274792][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.0.681 Not tainted syzkaller #0 PREEMPT(full) [ 137.274818][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.274828][ T8159] Call Trace: [ 137.274836][ T8159] [ 137.274844][ T8159] dump_stack_lvl+0x189/0x250 [ 137.274872][ T8159] ? __pfx____ratelimit+0x10/0x10 [ 137.274892][ T8159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.274914][ T8159] ? __pfx__printk+0x10/0x10 [ 137.274931][ T8159] ? netlink_sendmsg+0x805/0xb30 [ 137.274956][ T8159] ? __x64_sys_sendmsg+0x19b/0x260 [ 137.274973][ T8159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.275001][ T8159] should_fail_ex+0x414/0x560 [ 137.275032][ T8159] should_failslab+0xa8/0x100 [ 137.275052][ T8159] kmem_cache_alloc_noprof+0x74/0x6e0 [ 137.275076][ T8159] ? skb_clone+0x212/0x3a0 [ 137.275099][ T8159] skb_clone+0x212/0x3a0 [ 137.275121][ T8159] __netlink_deliver_tap+0x404/0x850 [ 137.275159][ T8159] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.275185][ T8159] netlink_deliver_tap+0x19c/0x1b0 [ 137.275210][ T8159] netlink_sendskb+0x68/0x140 [ 137.275235][ T8159] netlink_unicast+0x397/0x9e0 [ 137.275255][ T8159] ? __asan_memcpy+0x40/0x70 [ 137.275286][ T8159] ? __pfx_netlink_unicast+0x10/0x10 [ 137.275318][ T8159] netlink_rcv_skb+0x28c/0x470 [ 137.275342][ T8159] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 137.275371][ T8159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.275410][ T8159] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.275434][ T8159] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.275459][ T8159] xfrm_netlink_rcv+0x79/0x90 [ 137.275476][ T8159] netlink_unicast+0x82f/0x9e0 [ 137.275506][ T8159] ? __pfx_netlink_unicast+0x10/0x10 [ 137.275530][ T8159] ? netlink_sendmsg+0x642/0xb30 [ 137.275556][ T8159] ? skb_put+0x11b/0x210 [ 137.275583][ T8159] netlink_sendmsg+0x805/0xb30 [ 137.275617][ T8159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.275645][ T8159] ? aa_sock_msg_perm+0xf1/0x1d0 [ 137.275670][ T8159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.275688][ T8159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.275713][ T8159] __sock_sendmsg+0x21c/0x270 [ 137.275737][ T8159] ____sys_sendmsg+0x505/0x830 [ 137.275760][ T8159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.275788][ T8159] ? import_iovec+0x74/0xa0 [ 137.275813][ T8159] ___sys_sendmsg+0x21f/0x2a0 [ 137.275833][ T8159] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.275889][ T8159] ? __fget_files+0x2a/0x420 [ 137.275905][ T8159] ? __fget_files+0x3a0/0x420 [ 137.275932][ T8159] __x64_sys_sendmsg+0x19b/0x260 [ 137.275953][ T8159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.275981][ T8159] ? __pfx_ksys_write+0x10/0x10 [ 137.276009][ T8159] ? do_syscall_64+0xbe/0xfa0 [ 137.276033][ T8159] do_syscall_64+0xfa/0xfa0 [ 137.276051][ T8159] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.276070][ T8159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.276088][ T8159] ? clear_bhb_loop+0x60/0xb0 [ 137.276109][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.276126][ T8159] RIP: 0033:0x7fe86cd8efc9 [ 137.276144][ T8159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.276158][ T8159] RSP: 002b:00007fe86dcdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.276178][ T8159] RAX: ffffffffffffffda RBX: 00007fe86cfe5fa0 RCX: 00007fe86cd8efc9 [ 137.276190][ T8159] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 137.276202][ T8159] RBP: 00007fe86dcdb090 R08: 0000000000000000 R09: 0000000000000000 [ 137.276214][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.276224][ T8159] R13: 00007fe86cfe6038 R14: 00007fe86cfe5fa0 R15: 00007ffc412a0268 [ 137.276257][ T8159] [ 138.389909][ T8203] IPv6: sit1: Disabled Multicast RS [ 138.509906][ T8203] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 138.518902][ T8203] macsec1: entered promiscuous mode [ 138.527273][ T8203] macsec1: entered allmulticast mode [ 138.539731][ T8203] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 138.777196][ T8220] trusted_key: syz.1.701 sent an empty control message without MSG_MORE. [ 139.602043][ T8255] syzkaller0: entered promiscuous mode [ 139.614567][ T8255] syzkaller0: entered allmulticast mode [ 139.728160][ T8266] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 139.765381][ T8266] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 140.079154][ T8288] vxcan1 speed is unknown, defaulting to 1000 [ 140.191523][ T8300] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 140.265444][ T8300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.465351][ T8310] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 140.506650][ T8310] bond1 (unregistering): Released all slaves [ 140.529790][ T8320] FAULT_INJECTION: forcing a failure. [ 140.529790][ T8320] name failslab, interval 1, probability 0, space 0, times 0 [ 140.564932][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.2.737 Not tainted syzkaller #0 PREEMPT(full) [ 140.564973][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.564990][ T8320] Call Trace: [ 140.564998][ T8320] [ 140.565006][ T8320] dump_stack_lvl+0x189/0x250 [ 140.565034][ T8320] ? __pfx____ratelimit+0x10/0x10 [ 140.565054][ T8320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.565076][ T8320] ? __pfx__printk+0x10/0x10 [ 140.565098][ T8320] ? kasan_save_track+0x4f/0x80 [ 140.565122][ T8320] ? kmem_cache_free+0x19b/0x690 [ 140.565144][ T8320] ? pfkey_flush+0x14d/0x340 [ 140.565161][ T8320] ? pfkey_sendmsg+0xbfe/0x1090 [ 140.565177][ T8320] ? __sock_sendmsg+0x21c/0x270 [ 140.565203][ T8320] ? ___sys_sendmsg+0x21f/0x2a0 [ 140.565218][ T8320] ? __x64_sys_sendmsg+0x19b/0x260 [ 140.565232][ T8320] ? do_syscall_64+0xfa/0xfa0 [ 140.565250][ T8320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.565273][ T8320] should_fail_ex+0x414/0x560 [ 140.565303][ T8320] should_failslab+0xa8/0x100 [ 140.565322][ T8320] kmem_cache_alloc_node_noprof+0x77/0x710 [ 140.565346][ T8320] ? __alloc_skb+0x112/0x2d0 [ 140.565376][ T8320] __alloc_skb+0x112/0x2d0 [ 140.565403][ T8320] xfrm_send_state_notify+0x77e/0x18b0 [ 140.565435][ T8320] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 140.565458][ T8320] ? km_state_notify+0x25/0x1f0 [ 140.565475][ T8320] ? pfkey_broadcast+0x3c2/0x3e0 [ 140.565490][ T8320] ? kmem_cache_free+0x19b/0x690 [ 140.565514][ T8320] ? km_state_notify+0x25/0x1f0 [ 140.565530][ T8320] ? km_state_notify+0x25/0x1f0 [ 140.565544][ T8320] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 140.565567][ T8320] km_state_notify+0x110/0x1f0 [ 140.565587][ T8320] pfkey_flush+0x219/0x340 [ 140.565609][ T8320] ? __pfx_pfkey_flush+0x10/0x10 [ 140.565639][ T8320] pfkey_sendmsg+0xbfe/0x1090 [ 140.565675][ T8320] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 140.565717][ T8320] ? aa_sock_msg_perm+0xf1/0x1d0 [ 140.565742][ T8320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.565758][ T8320] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 140.565776][ T8320] __sock_sendmsg+0x21c/0x270 [ 140.565799][ T8320] ____sys_sendmsg+0x505/0x830 [ 140.565821][ T8320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.565846][ T8320] ? import_iovec+0x74/0xa0 [ 140.565870][ T8320] ___sys_sendmsg+0x21f/0x2a0 [ 140.565889][ T8320] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.565941][ T8320] ? __fget_files+0x2a/0x420 [ 140.565957][ T8320] ? __fget_files+0x3a0/0x420 [ 140.565983][ T8320] __x64_sys_sendmsg+0x19b/0x260 [ 140.566003][ T8320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.566030][ T8320] ? __pfx_ksys_write+0x10/0x10 [ 140.566056][ T8320] ? do_syscall_64+0xbe/0xfa0 [ 140.566081][ T8320] do_syscall_64+0xfa/0xfa0 [ 140.566107][ T8320] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.566127][ T8320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.566144][ T8320] ? clear_bhb_loop+0x60/0xb0 [ 140.566165][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.566182][ T8320] RIP: 0033:0x7ff42b98efc9 [ 140.566198][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.566213][ T8320] RSP: 002b:00007ff42c741038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.566232][ T8320] RAX: ffffffffffffffda RBX: 00007ff42bbe5fa0 RCX: 00007ff42b98efc9 [ 140.566246][ T8320] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 140.566257][ T8320] RBP: 00007ff42c741090 R08: 0000000000000000 R09: 0000000000000000 [ 140.566269][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.566279][ T8320] R13: 00007ff42bbe6038 R14: 00007ff42bbe5fa0 R15: 00007fffb2f30bf8 [ 140.566310][ T8320] [ 140.940332][ T8308] bond4: (slave gretap2): making interface the new active one [ 140.951368][ T8308] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 141.055989][ T8330] __nla_validate_parse: 10 callbacks suppressed [ 141.056008][ T8330] netlink: 96 bytes leftover after parsing attributes in process `syz.2.739'. [ 141.516714][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 141.928492][ T8353] FAULT_INJECTION: forcing a failure. [ 141.928492][ T8353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.953041][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 141.964610][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.2.747 Not tainted syzkaller #0 PREEMPT(full) [ 141.964634][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.964644][ T8353] Call Trace: [ 141.964651][ T8353] [ 141.964658][ T8353] dump_stack_lvl+0x189/0x250 [ 141.964685][ T8353] ? __pfx____ratelimit+0x10/0x10 [ 141.964705][ T8353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.964726][ T8353] ? __pfx__printk+0x10/0x10 [ 141.964742][ T8353] ? __might_fault+0xb0/0x130 [ 141.964774][ T8353] should_fail_ex+0x414/0x560 [ 141.964803][ T8353] _copy_from_user+0x2d/0xb0 [ 141.964825][ T8353] do_sock_getsockopt+0x17d/0x450 [ 141.964853][ T8353] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 141.964886][ T8353] ? do_syscall_64+0xa0/0xfa0 [ 141.964904][ T8353] ? __fget_files+0x2a/0x420 [ 141.964918][ T8353] ? __fget_files+0x3a0/0x420 [ 141.964934][ T8353] ? __fget_files+0x2a/0x420 [ 141.964956][ T8353] __x64_sys_getsockopt+0x1a5/0x250 [ 141.964981][ T8353] ? do_syscall_64+0xa0/0xfa0 [ 141.965001][ T8353] ? do_syscall_64+0xa0/0xfa0 [ 141.965022][ T8353] do_syscall_64+0xfa/0xfa0 [ 141.965040][ T8353] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.965058][ T8353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.965075][ T8353] ? clear_bhb_loop+0x60/0xb0 [ 141.965095][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.965111][ T8353] RIP: 0033:0x7ff42b98efc9 [ 141.965128][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.965142][ T8353] RSP: 002b:00007ff42c741038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 141.965160][ T8353] RAX: ffffffffffffffda RBX: 00007ff42bbe5fa0 RCX: 00007ff42b98efc9 [ 141.965172][ T8353] RDX: 0000000000000082 RSI: 0000000000000084 RDI: 0000000000000003 [ 141.965182][ T8353] RBP: 00007ff42c741090 R08: 00002000000001c0 R09: 0000000000000000 [ 141.965193][ T8353] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.965204][ T8353] R13: 00007ff42bbe6038 R14: 00007ff42bbe5fa0 R15: 00007fffb2f30bf8 [ 141.965234][ T8353] [ 142.539867][ T8377] netlink: 'syz.0.750': attribute type 1 has an invalid length. [ 142.547724][ T8377] netlink: 'syz.0.750': attribute type 2 has an invalid length. [ 142.780858][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 142.813429][ T8389] tipc: Started in network mode [ 142.818535][ T8389] tipc: Node identity 224f68e36825, cluster identity 4711 [ 142.825993][ T8389] tipc: Enabled bearer , priority 0 [ 142.907957][ T8389] syzkaller0: entered promiscuous mode [ 142.918396][ T8389] syzkaller0: entered allmulticast mode [ 142.925505][ T8389] tipc: Resetting bearer [ 142.948696][ T8388] tipc: Resetting bearer [ 143.038024][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.760'. [ 143.054761][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.760'. [ 143.098088][ T8404] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 143.142321][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 143.375948][ T8411] ip6t_rpfilter: unknown options [ 143.405228][ T8411] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 143.413210][ T8411] netlink: 224 bytes leftover after parsing attributes in process `syz.3.763'. [ 143.943620][ T5842] tipc: Node number set to 1248487651 [ 144.190895][ T8388] tipc: Disabling bearer [ 144.397835][ T8421] tipc: Enabling of bearer rejected, failed to enable media [ 144.660080][ T8438] netlink: 56 bytes leftover after parsing attributes in process `syz.1.773'. [ 144.831414][ T8452] FAULT_INJECTION: forcing a failure. [ 144.831414][ T8452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.853146][ T8452] CPU: 1 UID: 0 PID: 8452 Comm: syz.2.778 Not tainted syzkaller #0 PREEMPT(full) [ 144.853171][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.853181][ T8452] Call Trace: [ 144.853188][ T8452] [ 144.853196][ T8452] dump_stack_lvl+0x189/0x250 [ 144.853223][ T8452] ? __pfx____ratelimit+0x10/0x10 [ 144.853241][ T8452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.853261][ T8452] ? __pfx__printk+0x10/0x10 [ 144.853291][ T8452] should_fail_ex+0x414/0x560 [ 144.853318][ T8452] _copy_to_user+0x31/0xb0 [ 144.853341][ T8452] simple_read_from_buffer+0xe1/0x170 [ 144.853371][ T8452] proc_fail_nth_read+0x1b3/0x220 [ 144.853394][ T8452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.853417][ T8452] ? rw_verify_area+0x2a6/0x4d0 [ 144.853437][ T8452] ? __lock_acquire+0xab9/0xd20 [ 144.853456][ T8452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.853476][ T8452] vfs_read+0x200/0xa30 [ 144.853496][ T8452] ? fdget_pos+0x247/0x320 [ 144.853515][ T8452] ? __pfx___mutex_lock+0x10/0x10 [ 144.853535][ T8452] ? __pfx_vfs_read+0x10/0x10 [ 144.853557][ T8452] ? __fget_files+0x2a/0x420 [ 144.853584][ T8452] ? __fget_files+0x3a0/0x420 [ 144.853598][ T8452] ? __fget_files+0x2a/0x420 [ 144.853622][ T8452] ksys_read+0x145/0x250 [ 144.853647][ T8452] ? __pfx_ksys_read+0x10/0x10 [ 144.853673][ T8452] ? do_syscall_64+0xbe/0xfa0 [ 144.853696][ T8452] do_syscall_64+0xfa/0xfa0 [ 144.853713][ T8452] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.853730][ T8452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.853749][ T8452] ? clear_bhb_loop+0x60/0xb0 [ 144.853769][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.853785][ T8452] RIP: 0033:0x7ff42b98d9dc [ 144.853802][ T8452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.853816][ T8452] RSP: 002b:00007ff42c741030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.853831][ T8452] RAX: ffffffffffffffda RBX: 00007ff42bbe5fa0 RCX: 00007ff42b98d9dc [ 144.853841][ T8452] RDX: 000000000000000f RSI: 00007ff42c7410a0 RDI: 0000000000000005 [ 144.853850][ T8452] RBP: 00007ff42c741090 R08: 0000000000000000 R09: 0000000000000000 [ 144.853858][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.853867][ T8452] R13: 00007ff42bbe6038 R14: 00007ff42bbe5fa0 R15: 00007fffb2f30bf8 [ 144.853890][ T8452] [ 145.153675][ T8454] vxcan1 speed is unknown, defaulting to 1000 [ 145.505145][ T8465] xt_recent: Unsupported userspace flags (000000b1) [ 145.769693][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.790'. [ 145.909617][ T8492] FAULT_INJECTION: forcing a failure. [ 145.909617][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 145.933853][ T8485] ieee802154 phy1 wpan1: encryption failed: -90 [ 145.941174][ T8492] CPU: 0 UID: 0 PID: 8492 Comm: syz.1.793 Not tainted syzkaller #0 PREEMPT(full) [ 145.941198][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.941207][ T8492] Call Trace: [ 145.941215][ T8492] [ 145.941223][ T8492] dump_stack_lvl+0x189/0x250 [ 145.941249][ T8492] ? __pfx____ratelimit+0x10/0x10 [ 145.941269][ T8492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.941291][ T8492] ? __pfx__printk+0x10/0x10 [ 145.941314][ T8492] ? __pfx___might_resched+0x10/0x10 [ 145.941332][ T8492] ? fs_reclaim_acquire+0x7d/0x100 [ 145.941362][ T8492] should_fail_ex+0x414/0x560 [ 145.941391][ T8492] should_failslab+0xa8/0x100 [ 145.941411][ T8492] kmem_cache_alloc_noprof+0x74/0x6e0 [ 145.941435][ T8492] ? getname_flags+0xb8/0x540 [ 145.941466][ T8492] getname_flags+0xb8/0x540 [ 145.941488][ T8492] __x64_sys_mkdirat+0x7a/0xa0 [ 145.941512][ T8492] do_syscall_64+0xfa/0xfa0 [ 145.941531][ T8492] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.941551][ T8492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.941569][ T8492] ? clear_bhb_loop+0x60/0xb0 [ 145.941590][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.941607][ T8492] RIP: 0033:0x7ffbd1f8efc9 [ 145.941624][ T8492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.941639][ T8492] RSP: 002b:00007ffbd2dbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 145.941658][ T8492] RAX: ffffffffffffffda RBX: 00007ffbd21e5fa0 RCX: 00007ffbd1f8efc9 [ 145.941672][ T8492] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 0000000000000006 [ 145.941684][ T8492] RBP: 00007ffbd2dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 145.941695][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.941705][ T8492] R13: 00007ffbd21e6038 R14: 00007ffbd21e5fa0 R15: 00007ffd3c227dd8 [ 145.941736][ T8492] [ 146.203387][ T8493] __nla_validate_parse: 1 callbacks suppressed [ 146.203405][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'. [ 146.358839][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'. [ 146.431998][ T8500] vlan2: entered promiscuous mode [ 146.462315][ T8500] dummy0: entered promiscuous mode [ 146.555589][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.799'. [ 146.575741][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 146.584704][ T8517] tc_dump_action: action bad kind [ 146.611593][ T8519] tipc: New replicast peer: 255.255.255.255 [ 146.632763][ T8519] tipc: Enabled bearer , priority 10 [ 146.703739][ T8522] netlink: 'syz.1.805': attribute type 11 has an invalid length. [ 146.958859][ T8524] vxcan1 speed is unknown, defaulting to 1000 [ 147.213963][ T8539] tipc: Enabling of bearer rejected, failed to enable media [ 147.245563][ T8549] netlink: 64 bytes leftover after parsing attributes in process `syz.1.813'. [ 147.267807][ T8549] block nbd0: not configured, cannot reconfigure [ 147.431475][ T8553] netlink: 76 bytes leftover after parsing attributes in process `syz.3.816'. [ 147.460364][ T8553] netlink: 2 bytes leftover after parsing attributes in process `syz.3.816'. [ 148.286561][ T8589] x_tables: unsorted entry at hook 2 [ 148.486438][ T8599] netlink: 144 bytes leftover after parsing attributes in process `syz.0.832'. [ 148.508458][ T8600] erspan0: entered promiscuous mode [ 149.092722][ T8625] vxcan1 speed is unknown, defaulting to 1000 [ 149.291016][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 149.807903][ T8652] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x91 [ 149.899707][ T8633] vxcan1 speed is unknown, defaulting to 1000 [ 150.005047][ T8654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.845'. [ 150.337812][ T8660] syz_tun: entered allmulticast mode [ 150.377312][ T8672] FAULT_INJECTION: forcing a failure. [ 150.377312][ T8672] name failslab, interval 1, probability 0, space 0, times 0 [ 150.390765][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.0.851 Not tainted syzkaller #0 PREEMPT(full) [ 150.390800][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.390811][ T8672] Call Trace: [ 150.390819][ T8672] [ 150.390828][ T8672] dump_stack_lvl+0x189/0x250 [ 150.390856][ T8672] ? __pfx____ratelimit+0x10/0x10 [ 150.390876][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.390899][ T8672] ? __pfx__printk+0x10/0x10 [ 150.390933][ T8672] should_fail_ex+0x414/0x560 [ 150.390963][ T8672] should_failslab+0xa8/0x100 [ 150.390983][ T8672] __kmalloc_cache_noprof+0x6f/0x6f0 [ 150.391005][ T8672] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 150.391025][ T8672] ? sctp_add_bind_addr+0x8c/0x370 [ 150.391051][ T8672] sctp_add_bind_addr+0x8c/0x370 [ 150.391076][ T8672] sctp_copy_local_addr_list+0x30b/0x4e0 [ 150.391100][ T8672] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 150.391120][ T8672] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 150.391142][ T8672] ? sctp_v6_is_any+0x64/0x80 [ 150.391164][ T8672] ? sctp_copy_one_addr+0x93/0x360 [ 150.391188][ T8672] sctp_bind_addr_copy+0xb3/0x3c0 [ 150.391210][ T8672] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 150.391240][ T8672] sctp_connect_new_asoc+0x2e0/0x690 [ 150.391267][ T8672] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 150.391293][ T8672] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 150.391316][ T8672] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 150.391338][ T8672] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 150.391362][ T8672] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 150.391388][ T8672] __sctp_connect+0x5ba/0xd50 [ 150.391424][ T8672] ? __pfx___sctp_connect+0x10/0x10 [ 150.391457][ T8672] sctp_inet_connect+0x12e/0x1e0 [ 150.391482][ T8672] __sys_connect+0x316/0x440 [ 150.391506][ T8672] ? __fget_files+0x3a0/0x420 [ 150.391522][ T8672] ? __pfx___sys_connect+0x10/0x10 [ 150.391558][ T8672] ? __pfx_ksys_write+0x10/0x10 [ 150.391588][ T8672] __x64_sys_connect+0x7a/0x90 [ 150.391612][ T8672] do_syscall_64+0xfa/0xfa0 [ 150.391630][ T8672] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.391649][ T8672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.391667][ T8672] ? clear_bhb_loop+0x60/0xb0 [ 150.391687][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.391704][ T8672] RIP: 0033:0x7fe86cd8efc9 [ 150.391721][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.391735][ T8672] RSP: 002b:00007fe86dcdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 150.391755][ T8672] RAX: ffffffffffffffda RBX: 00007fe86cfe5fa0 RCX: 00007fe86cd8efc9 [ 150.391775][ T8672] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 150.391786][ T8672] RBP: 00007fe86dcdb090 R08: 0000000000000000 R09: 0000000000000000 [ 150.391797][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.391808][ T8672] R13: 00007fe86cfe6038 R14: 00007fe86cfe5fa0 R15: 00007ffc412a0268 [ 150.391840][ T8672] [ 150.684695][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 150.694732][ T8626] vxcan1 speed is unknown, defaulting to 1000 [ 150.873343][ T8677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.941683][ T8679] FAULT_INJECTION: forcing a failure. [ 150.941683][ T8679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.979227][ T8679] CPU: 1 UID: 0 PID: 8679 Comm: syz.0.854 Not tainted syzkaller #0 PREEMPT(full) [ 150.979252][ T8679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.979262][ T8679] Call Trace: [ 150.979270][ T8679] [ 150.979278][ T8679] dump_stack_lvl+0x189/0x250 [ 150.979306][ T8679] ? __pfx____ratelimit+0x10/0x10 [ 150.979326][ T8679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.979346][ T8679] ? __pfx__printk+0x10/0x10 [ 150.979377][ T8679] should_fail_ex+0x414/0x560 [ 150.979405][ T8679] _copy_to_iter+0x589/0x1790 [ 150.979435][ T8679] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 150.979453][ T8679] ? __pfx__copy_to_iter+0x10/0x10 [ 150.979472][ T8679] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 150.979490][ T8679] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 150.979509][ T8679] ? __asan_memset+0x22/0x50 [ 150.979539][ T8679] __skb_datagram_iter+0xf8/0x990 [ 150.979557][ T8679] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 150.979576][ T8679] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 150.979603][ T8679] skb_copy_datagram_iter+0xc5/0x230 [ 150.979626][ T8679] __unix_dgram_recvmsg+0x640/0xd60 [ 150.979664][ T8679] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 150.979706][ T8679] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 150.979723][ T8679] ? unix_dgram_recvmsg+0xb1/0xd0 [ 150.979741][ T8679] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 150.979759][ T8679] sock_recvmsg+0x22c/0x270 [ 150.979784][ T8679] ____sys_recvmsg+0x1c9/0x460 [ 150.979810][ T8679] ? __pfx_____sys_recvmsg+0x10/0x10 [ 150.979843][ T8679] ? import_iovec+0x74/0xa0 [ 150.979866][ T8679] ___sys_recvmsg+0x1b5/0x510 [ 150.979889][ T8679] ? __pfx____sys_recvmsg+0x10/0x10 [ 150.979931][ T8679] ? __fget_files+0x3a0/0x420 [ 150.979955][ T8679] __x64_sys_recvmsg+0x198/0x260 [ 150.979975][ T8679] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 150.980008][ T8679] ? __pfx_ksys_write+0x10/0x10 [ 150.980034][ T8679] ? do_syscall_64+0xbe/0xfa0 [ 150.980055][ T8679] do_syscall_64+0xfa/0xfa0 [ 150.980073][ T8679] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.980091][ T8679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.980108][ T8679] ? clear_bhb_loop+0x60/0xb0 [ 150.980129][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.980146][ T8679] RIP: 0033:0x7fe86cd8efc9 [ 150.980162][ T8679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.980177][ T8679] RSP: 002b:00007fe86dcdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 150.980196][ T8679] RAX: ffffffffffffffda RBX: 00007fe86cfe5fa0 RCX: 00007fe86cd8efc9 [ 150.980208][ T8679] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 150.980219][ T8679] RBP: 00007fe86dcdb090 R08: 0000000000000000 R09: 0000000000000000 [ 150.980230][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.980241][ T8679] R13: 00007fe86cfe6038 R14: 00007fe86cfe5fa0 R15: 00007ffc412a0268 [ 150.980277][ T8679] [ 151.250454][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 151.313683][ T8624] syz_tun: left allmulticast mode [ 152.157862][ T8717] netlink: 'syz.3.862': attribute type 13 has an invalid length. [ 152.173647][ T8717] netlink: 'syz.3.862': attribute type 17 has an invalid length. [ 152.198781][ T8719] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 152.247472][ T8717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.377559][ T8717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.410832][ T8721] bond5: (slave gretap3): making interface the new active one [ 152.419888][ T8721] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 152.462181][ T8720] vxcan1 speed is unknown, defaulting to 1000 [ 152.700502][ T8737] netlink: 'syz.1.869': attribute type 4 has an invalid length. [ 152.756655][ T8738] netlink: 236 bytes leftover after parsing attributes in process `syz.1.869'. [ 152.785418][ T8738] netlink: 1 bytes leftover after parsing attributes in process `syz.1.869'. [ 153.001632][ T8744] syzkaller0: entered promiscuous mode [ 153.018733][ T8744] syzkaller0: entered allmulticast mode [ 153.043935][ T8747] bridge_slave_0: left allmulticast mode [ 153.049719][ T8747] bridge_slave_0: left promiscuous mode [ 153.055914][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.074064][ T8747] bridge_slave_1: left allmulticast mode [ 153.079835][ T8747] bridge_slave_1: left promiscuous mode [ 153.086870][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.100162][ T8747] bond0: (slave bond_slave_0): Releasing backup interface [ 153.110389][ T8747] bond0: (slave bond_slave_1): Releasing backup interface [ 153.122783][ T8747] team0: Port device team_slave_0 removed [ 153.133584][ T8747] team0: Port device team_slave_1 removed [ 153.141117][ T8747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.183709][ T8744] tipc: Started in network mode [ 153.194764][ T8744] tipc: Node identity cab6ac0da04a, cluster identity 4711 [ 153.207370][ T8744] tipc: Enabled bearer , priority 0 [ 153.227114][ T8743] tipc: Resetting bearer [ 153.261185][ T8743] tipc: Disabling bearer [ 153.335369][ T8747] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.359120][ T8747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.873'. [ 153.445410][ T8761] netlink: 104 bytes leftover after parsing attributes in process `syz.4.877'. [ 153.664268][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.881'. [ 153.698549][ T8771] bond0: entered promiscuous mode [ 153.719503][ T8771] bond_slave_0: entered promiscuous mode [ 153.735140][ T8771] bond_slave_1: entered promiscuous mode [ 153.754651][ T8771] bond0: left promiscuous mode [ 153.763638][ T8771] bond_slave_0: left promiscuous mode [ 153.769202][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 153.770176][ T8771] bond_slave_1: left promiscuous mode [ 154.030592][ T8778] syzkaller0: entered promiscuous mode [ 154.036626][ T8778] syzkaller0: entered allmulticast mode [ 154.136426][ T8778] tipc: Enabled bearer , priority 0 [ 154.156895][ T8776] tipc: Resetting bearer [ 154.185138][ T8776] tipc: Disabling bearer [ 154.471276][ T8796] FAULT_INJECTION: forcing a failure. [ 154.471276][ T8796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.521003][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.3.888 Not tainted syzkaller #0 PREEMPT(full) [ 154.521030][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.521040][ T8796] Call Trace: [ 154.521048][ T8796] [ 154.521056][ T8796] dump_stack_lvl+0x189/0x250 [ 154.521084][ T8796] ? __pfx____ratelimit+0x10/0x10 [ 154.521104][ T8796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.521127][ T8796] ? __pfx__printk+0x10/0x10 [ 154.521148][ T8796] ? fs_reclaim_acquire+0x7d/0x100 [ 154.521182][ T8796] should_fail_ex+0x414/0x560 [ 154.521213][ T8796] prepare_alloc_pages+0x213/0x610 [ 154.521238][ T8796] __alloc_frozen_pages_noprof+0x123/0x370 [ 154.521260][ T8796] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 154.521277][ T8796] ? css_rstat_updated+0x23a/0x4f0 [ 154.521305][ T8796] ? policy_nodemask+0x27c/0x720 [ 154.521336][ T8796] alloc_pages_mpol+0x232/0x4a0 [ 154.521359][ T8796] folio_alloc_mpol_noprof+0x39/0x70 [ 154.521379][ T8796] shmem_alloc_and_add_folio+0x447/0xf60 [ 154.521407][ T8796] ? filemap_get_entry+0xad/0x2f0 [ 154.521432][ T8796] ? filemap_get_entry+0xad/0x2f0 [ 154.521453][ T8796] ? filemap_get_entry+0xad/0x2f0 [ 154.521482][ T8796] ? shmem_huge_global_enabled+0x296/0x320 [ 154.521504][ T8796] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 154.521530][ T8796] ? shmem_allowable_huge_orders+0x4c6/0x4f0 [ 154.521560][ T8796] shmem_get_folio_gfp+0x59d/0x1660 [ 154.521610][ T8796] shmem_fault+0x179/0x390 [ 154.521643][ T8796] __do_fault+0x138/0x390 [ 154.521671][ T8796] __handle_mm_fault+0x1847/0x5400 [ 154.521711][ T8796] ? __pfx___handle_mm_fault+0x10/0x10 [ 154.521749][ T8796] ? follow_page_pte+0x7ef/0x13e0 [ 154.521779][ T8796] handle_mm_fault+0x40a/0x8e0 [ 154.521811][ T8796] __get_user_pages+0x165c/0x2a00 [ 154.521867][ T8796] __gup_longterm_locked+0x7f6/0x1660 [ 154.521915][ T8796] gup_fast_fallback+0x1d65/0x22d0 [ 154.521936][ T8796] ? __lock_acquire+0xab9/0xd20 [ 154.521989][ T8796] ? __pfx_gup_fast_fallback+0x10/0x10 [ 154.522012][ T8796] ? rcu_is_watching+0x15/0xb0 [ 154.522037][ T8796] ? is_valid_gup_args+0x11f/0x200 [ 154.522062][ T8796] ? pin_user_pages_fast+0x4d/0xb0 [ 154.522085][ T8796] rds_cmsg_rdma_args+0x8f4/0x1240 [ 154.522136][ T8796] rds_cmsg_send+0x33d/0x5c0 [ 154.522171][ T8796] rds_sendmsg+0x1129/0x1f00 [ 154.522210][ T8796] ? __pfx_rds_sendmsg+0x10/0x10 [ 154.522229][ T8796] ? aa_sk_perm+0x81e/0x950 [ 154.522257][ T8796] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.522277][ T8796] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 154.522309][ T8796] ? aa_sock_msg_perm+0xf1/0x1d0 [ 154.522334][ T8796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.522351][ T8796] ? __pfx_rds_sendmsg+0x10/0x10 [ 154.522373][ T8796] __sock_sendmsg+0x21c/0x270 [ 154.522398][ T8796] ____sys_sendmsg+0x505/0x830 [ 154.522421][ T8796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.522449][ T8796] ? import_iovec+0x74/0xa0 [ 154.522473][ T8796] ___sys_sendmsg+0x21f/0x2a0 [ 154.522493][ T8796] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.522548][ T8796] ? __fget_files+0x2a/0x420 [ 154.522565][ T8796] ? __fget_files+0x3a0/0x420 [ 154.522599][ T8796] __x64_sys_sendmsg+0x19b/0x260 [ 154.522621][ T8796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.522649][ T8796] ? __pfx_ksys_write+0x10/0x10 [ 154.522676][ T8796] ? do_syscall_64+0xbe/0xfa0 [ 154.522701][ T8796] do_syscall_64+0xfa/0xfa0 [ 154.522720][ T8796] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.522739][ T8796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.522757][ T8796] ? clear_bhb_loop+0x60/0xb0 [ 154.522779][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.522796][ T8796] RIP: 0033:0x7facedd8efc9 [ 154.522813][ T8796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.522828][ T8796] RSP: 002b:00007faceecb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.522848][ T8796] RAX: ffffffffffffffda RBX: 00007facedfe5fa0 RCX: 00007facedd8efc9 [ 154.522861][ T8796] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 154.522871][ T8796] RBP: 00007faceecb3090 R08: 0000000000000000 R09: 0000000000000000 [ 154.522882][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.522892][ T8796] R13: 00007facedfe6038 R14: 00007facedfe5fa0 R15: 00007ffc2bef1238 [ 154.522923][ T8796] [ 155.081402][ T8803] vxcan1 speed is unknown, defaulting to 1000 [ 155.091389][ T8800] netlink: 68 bytes leftover after parsing attributes in process `syz.0.890'. [ 155.134125][ T8800] netlink: 68 bytes leftover after parsing attributes in process `syz.0.890'. [ 155.285084][ T8808] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 155.377851][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.898'. [ 155.398691][ T8816] bond2: (slave gretap1): making interface the new active one [ 155.409686][ T8816] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 155.482833][ T8818] x_tables: duplicate underflow at hook 2 [ 156.012128][ T8831] vxcan1 speed is unknown, defaulting to 1000 [ 156.025428][ T8828] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.404500][ T8833] vxcan1 speed is unknown, defaulting to 1000 [ 156.479385][ T8856] 8021q: VLANs not supported on gre0 [ 157.224977][ T8861] nbd0: detected capacity change from 0 to 127 [ 157.232234][ T8867] __nla_validate_parse: 1 callbacks suppressed [ 157.232253][ T8867] netlink: 64 bytes leftover after parsing attributes in process `syz.0.910'. [ 157.335023][ T8837] vxcan1 speed is unknown, defaulting to 1000 [ 157.604835][ T8885] netlink: 416 bytes leftover after parsing attributes in process `syz.4.916'. [ 157.632026][ T5840] block nbd0: Receive control failed (result -32) [ 157.635157][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.916'. [ 158.741039][ T8910] tipc: Enabled bearer , priority 0 [ 158.761200][ T8911] tipc: Enabling of bearer rejected, failed to enable media [ 158.873245][ T8915] tipc: Disabling bearer [ 159.368034][ T8938] FAULT_INJECTION: forcing a failure. [ 159.368034][ T8938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.433690][ T8938] CPU: 1 UID: 0 PID: 8938 Comm: syz.0.930 Not tainted syzkaller #0 PREEMPT(full) [ 159.433716][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.433727][ T8938] Call Trace: [ 159.433734][ T8938] [ 159.433742][ T8938] dump_stack_lvl+0x189/0x250 [ 159.433771][ T8938] ? __pfx____ratelimit+0x10/0x10 [ 159.433791][ T8938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.433813][ T8938] ? __pfx__printk+0x10/0x10 [ 159.433830][ T8938] ? __might_fault+0xb0/0x130 [ 159.433864][ T8938] should_fail_ex+0x414/0x560 [ 159.433893][ T8938] _copy_from_user+0x2d/0xb0 [ 159.433915][ T8938] ___sys_sendmsg+0x158/0x2a0 [ 159.433935][ T8938] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.433986][ T8938] ? __fget_files+0x2a/0x420 [ 159.434002][ T8938] ? __fget_files+0x3a0/0x420 [ 159.434029][ T8938] __x64_sys_sendmsg+0x19b/0x260 [ 159.434050][ T8938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.434090][ T8938] ? __pfx_ksys_write+0x10/0x10 [ 159.434118][ T8938] ? do_syscall_64+0xbe/0xfa0 [ 159.434141][ T8938] do_syscall_64+0xfa/0xfa0 [ 159.434159][ T8938] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.434179][ T8938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.434197][ T8938] ? clear_bhb_loop+0x60/0xb0 [ 159.434217][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.434234][ T8938] RIP: 0033:0x7fe86cd8efc9 [ 159.434250][ T8938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.434264][ T8938] RSP: 002b:00007fe86dcba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.434284][ T8938] RAX: ffffffffffffffda RBX: 00007fe86cfe6090 RCX: 00007fe86cd8efc9 [ 159.434297][ T8938] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000003 [ 159.434310][ T8938] RBP: 00007fe86dcba090 R08: 0000000000000000 R09: 0000000000000000 [ 159.434322][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.434332][ T8938] R13: 00007fe86cfe6128 R14: 00007fe86cfe6090 R15: 00007ffc412a0268 [ 159.434363][ T8938] [ 159.761837][ T8948] netlink: 766 bytes leftover after parsing attributes in process `syz.0.933'. [ 159.931258][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 160.656350][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.938'. [ 161.013998][ T8974] vxcan1 speed is unknown, defaulting to 1000 [ 161.124426][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.940'. [ 161.449346][ T8985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.944'. [ 162.004243][ T8999] vxcan1 speed is unknown, defaulting to 1000 [ 162.917329][ T9034] FAULT_INJECTION: forcing a failure. [ 162.917329][ T9034] name failslab, interval 1, probability 0, space 0, times 0 [ 162.930270][ T9034] CPU: 1 UID: 0 PID: 9034 Comm: syz.3.957 Not tainted syzkaller #0 PREEMPT(full) [ 162.930295][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.930305][ T9034] Call Trace: [ 162.930313][ T9034] [ 162.930321][ T9034] dump_stack_lvl+0x189/0x250 [ 162.930348][ T9034] ? __pfx____ratelimit+0x10/0x10 [ 162.930368][ T9034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.930391][ T9034] ? __pfx__printk+0x10/0x10 [ 162.930424][ T9034] should_fail_ex+0x414/0x560 [ 162.930455][ T9034] should_failslab+0xa8/0x100 [ 162.930476][ T9034] __kmalloc_cache_noprof+0x6f/0x6f0 [ 162.930500][ T9034] ? __hw_addr_add_ex+0x1f4/0x770 [ 162.930516][ T9034] ? do_raw_spin_lock+0x121/0x290 [ 162.930544][ T9034] __hw_addr_add_ex+0x1f4/0x770 [ 162.930570][ T9034] dev_mc_add+0xa1/0x120 [ 162.930594][ T9034] garp_init_applicant+0x1a9/0x450 [ 162.930620][ T9034] register_vlan_dev+0x225/0x800 [ 162.930653][ T9034] vlan_newlink+0x4b2/0x610 [ 162.930672][ T9034] ? __pfx_vlan_newlink+0x10/0x10 [ 162.930692][ T9034] rtnl_newlink_create+0x310/0xb00 [ 162.930724][ T9034] ? __lock_acquire+0xab9/0xd20 [ 162.930746][ T9034] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 162.930774][ T9034] ? __pfx___mutex_lock+0x10/0x10 [ 162.930813][ T9034] ? ns_capable+0x8a/0xf0 [ 162.930835][ T9034] rtnl_newlink+0x16e4/0x1c80 [ 162.930860][ T9034] ? ____sys_sendmsg+0x505/0x830 [ 162.930890][ T9034] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.930937][ T9034] ? kasan_quarantine_put+0xdd/0x220 [ 162.930959][ T9034] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.930986][ T9034] ? nlmon_xmit+0xb0/0x100 [ 162.931004][ T9034] ? kmem_cache_free+0x19b/0x690 [ 162.931037][ T9034] ? __local_bh_enable_ip+0x12d/0x1c0 [ 162.931056][ T9034] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.931077][ T9034] ? __local_bh_enable_ip+0x12d/0x1c0 [ 162.931095][ T9034] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 162.931119][ T9034] ? __dev_queue_xmit+0x284/0x3740 [ 162.931140][ T9034] ? __dev_queue_xmit+0x284/0x3740 [ 162.931158][ T9034] ? __dev_queue_xmit+0x1bfb/0x3740 [ 162.931186][ T9034] ? __lock_acquire+0xab9/0xd20 [ 162.931231][ T9034] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.931253][ T9034] rtnetlink_rcv_msg+0x7cf/0xb70 [ 162.931280][ T9034] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 162.931302][ T9034] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.931323][ T9034] ? ref_tracker_free+0x63a/0x7d0 [ 162.931340][ T9034] ? __asan_memcpy+0x40/0x70 [ 162.931361][ T9034] ? __pfx_ref_tracker_free+0x10/0x10 [ 162.931384][ T9034] ? __skb_clone+0x63/0x7a0 [ 162.931411][ T9034] netlink_rcv_skb+0x208/0x470 [ 162.931437][ T9034] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.931462][ T9034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.931499][ T9034] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.931532][ T9034] netlink_unicast+0x82f/0x9e0 [ 162.931564][ T9034] ? __pfx_netlink_unicast+0x10/0x10 [ 162.931589][ T9034] ? netlink_sendmsg+0x642/0xb30 [ 162.931611][ T9034] ? skb_put+0x11b/0x210 [ 162.931639][ T9034] netlink_sendmsg+0x805/0xb30 [ 162.931674][ T9034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.931701][ T9034] ? aa_sock_msg_perm+0xf1/0x1d0 [ 162.931728][ T9034] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.931745][ T9034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.931770][ T9034] __sock_sendmsg+0x21c/0x270 [ 162.931801][ T9034] ____sys_sendmsg+0x505/0x830 [ 162.931825][ T9034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.931852][ T9034] ? import_iovec+0x74/0xa0 [ 162.931877][ T9034] ___sys_sendmsg+0x21f/0x2a0 [ 162.931898][ T9034] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.931955][ T9034] ? __fget_files+0x2a/0x420 [ 162.931970][ T9034] ? __fget_files+0x3a0/0x420 [ 162.931998][ T9034] __x64_sys_sendmsg+0x19b/0x260 [ 162.932018][ T9034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.932047][ T9034] ? __pfx_ksys_write+0x10/0x10 [ 162.932074][ T9034] ? do_syscall_64+0xbe/0xfa0 [ 162.932098][ T9034] do_syscall_64+0xfa/0xfa0 [ 162.932116][ T9034] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.932136][ T9034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.932153][ T9034] ? clear_bhb_loop+0x60/0xb0 [ 162.932176][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.932193][ T9034] RIP: 0033:0x7facedd8efc9 [ 162.932210][ T9034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.932225][ T9034] RSP: 002b:00007faceecb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.932244][ T9034] RAX: ffffffffffffffda RBX: 00007facedfe5fa0 RCX: 00007facedd8efc9 [ 162.932258][ T9034] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 162.932269][ T9034] RBP: 00007faceecb3090 R08: 0000000000000000 R09: 0000000000000000 [ 162.932280][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.932291][ T9034] R13: 00007facedfe6038 R14: 00007facedfe5fa0 R15: 00007ffc2bef1238 [ 162.932325][ T9034] [ 163.738830][ T9045] netlink: 2 bytes leftover after parsing attributes in process `syz.2.961'. [ 163.929377][ T9050] netlink: 72 bytes leftover after parsing attributes in process `syz.1.963'. [ 164.498740][ T9081] netlink: 56 bytes leftover after parsing attributes in process `syz.2.971'. [ 164.544136][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.972'. [ 164.953951][ T9089] netlink: 'syz.3.974': attribute type 21 has an invalid length. [ 164.974972][ T9089] netlink: 156 bytes leftover after parsing attributes in process `syz.3.974'. [ 165.075006][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.975'. [ 165.086392][ T9095] netlink: 'syz.1.976': attribute type 11 has an invalid length. [ 165.123767][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.975'. [ 165.149156][ T9096] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 165.244232][ T9096] netlink: 56 bytes leftover after parsing attributes in process `syz.4.977'. [ 165.475739][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 165.536649][ T9115] Cannot find del_set index 2 as target [ 165.681153][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 165.875150][ T9131] tipc: Enabled bearer , priority 0 [ 165.916284][ T9131] tipc: Disabling bearer [ 166.407554][ T9152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.738747][ T9167] netlink: 'syz.4.1001': attribute type 11 has an invalid length. [ 166.755556][ T9167] FAULT_INJECTION: forcing a failure. [ 166.755556][ T9167] name failslab, interval 1, probability 0, space 0, times 0 [ 166.770615][ T9167] CPU: 1 UID: 0 PID: 9167 Comm: syz.4.1001 Not tainted syzkaller #0 PREEMPT(full) [ 166.770639][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.770650][ T9167] Call Trace: [ 166.770656][ T9167] [ 166.770664][ T9167] dump_stack_lvl+0x189/0x250 [ 166.770692][ T9167] ? __pfx____ratelimit+0x10/0x10 [ 166.770712][ T9167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.770735][ T9167] ? __pfx__printk+0x10/0x10 [ 166.770759][ T9167] ? __pfx___might_resched+0x10/0x10 [ 166.770776][ T9167] ? fs_reclaim_acquire+0x7d/0x100 [ 166.770806][ T9167] should_fail_ex+0x414/0x560 [ 166.770835][ T9167] should_failslab+0xa8/0x100 [ 166.770855][ T9167] __kmalloc_cache_noprof+0x6f/0x6f0 [ 166.770876][ T9167] ? __kmalloc_noprof+0x432/0x7f0 [ 166.770897][ T9167] ? apply_wqattrs_prepare+0x12d/0xe00 [ 166.770923][ T9167] apply_wqattrs_prepare+0x12d/0xe00 [ 166.770943][ T9167] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 166.770968][ T9167] ? pcpu_memcg_post_alloc_hook+0xb8/0x520 [ 166.770997][ T9167] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 166.771030][ T9167] apply_workqueue_attrs_locked+0x65/0x240 [ 166.771059][ T9167] __alloc_workqueue+0x10ca/0x1b80 [ 166.771098][ T9167] alloc_workqueue_noprof+0xd4/0x210 [ 166.771125][ T9167] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 166.771146][ T9167] ? trace_kmalloc+0x1f/0xd0 [ 166.771160][ T9167] ? __kmalloc_noprof+0x432/0x7f0 [ 166.771188][ T9167] ieee80211_register_hw+0x2dbb/0x40d0 [ 166.771228][ T9167] ? ieee80211_register_hw+0x1401/0x40d0 [ 166.771263][ T9167] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 166.771285][ T9167] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 166.771309][ T9167] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 166.771328][ T9167] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 166.771354][ T9167] ? __hrtimer_setup+0x187/0x210 [ 166.771372][ T9167] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 166.771390][ T9167] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 166.771450][ T9167] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 166.771469][ T9167] ? __nla_validate_parse+0x2400/0x2d40 [ 166.771481][ T9167] ? __x64_sys_sendmsg+0x19b/0x260 [ 166.771504][ T9167] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 166.771536][ T9167] ? __pfx___nla_validate_parse+0x10/0x10 [ 166.771564][ T9167] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 166.771590][ T9167] ? rcu_is_watching+0x15/0xb0 [ 166.771611][ T9167] ? __nla_parse+0x40/0x60 [ 166.771631][ T9167] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 166.771658][ T9167] genl_family_rcv_msg_doit+0x215/0x300 [ 166.771683][ T9167] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 166.771715][ T9167] ? bpf_lsm_capable+0x9/0x20 [ 166.771734][ T9167] ? security_capable+0x7e/0x2e0 [ 166.771763][ T9167] genl_rcv_msg+0x60e/0x790 [ 166.771788][ T9167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.771805][ T9167] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 166.771829][ T9167] ? __asan_memcpy+0x40/0x70 [ 166.771849][ T9167] ? __pfx_ref_tracker_free+0x10/0x10 [ 166.771882][ T9167] netlink_rcv_skb+0x208/0x470 [ 166.771903][ T9167] ? __lock_acquire+0xab9/0xd20 [ 166.771919][ T9167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.771941][ T9167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.771984][ T9167] ? down_read+0x1ad/0x2e0 [ 166.772009][ T9167] genl_rcv+0x28/0x40 [ 166.772027][ T9167] netlink_unicast+0x82f/0x9e0 [ 166.772058][ T9167] ? __pfx_netlink_unicast+0x10/0x10 [ 166.772082][ T9167] ? netlink_sendmsg+0x642/0xb30 [ 166.772104][ T9167] ? skb_put+0x11b/0x210 [ 166.772132][ T9167] netlink_sendmsg+0x805/0xb30 [ 166.772165][ T9167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.772192][ T9167] ? aa_sock_msg_perm+0xf1/0x1d0 [ 166.772217][ T9167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.772233][ T9167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.772259][ T9167] __sock_sendmsg+0x21c/0x270 [ 166.772283][ T9167] ____sys_sendmsg+0x505/0x830 [ 166.772306][ T9167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.772334][ T9167] ? import_iovec+0x74/0xa0 [ 166.772359][ T9167] ___sys_sendmsg+0x21f/0x2a0 [ 166.772379][ T9167] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.772443][ T9167] ? __fget_files+0x2a/0x420 [ 166.772459][ T9167] ? __fget_files+0x3a0/0x420 [ 166.772488][ T9167] __x64_sys_sendmsg+0x19b/0x260 [ 166.772509][ T9167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.772538][ T9167] ? __pfx_ksys_write+0x10/0x10 [ 166.772565][ T9167] ? do_syscall_64+0xbe/0xfa0 [ 166.772590][ T9167] do_syscall_64+0xfa/0xfa0 [ 166.772608][ T9167] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.772627][ T9167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.772645][ T9167] ? clear_bhb_loop+0x60/0xb0 [ 166.772667][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.772684][ T9167] RIP: 0033:0x7fd34f58efc9 [ 166.772701][ T9167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.772717][ T9167] RSP: 002b:00007fd350412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.772737][ T9167] RAX: ffffffffffffffda RBX: 00007fd34f7e5fa0 RCX: 00007fd34f58efc9 [ 166.772751][ T9167] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 166.772762][ T9167] RBP: 00007fd350412090 R08: 0000000000000000 R09: 0000000000000000 [ 166.772773][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.772784][ T9167] R13: 00007fd34f7e6038 R14: 00007fd34f7e5fa0 R15: 00007ffeb14f0c48 [ 166.772818][ T9167] [ 167.300140][ T9171] FAULT_INJECTION: forcing a failure. [ 167.300140][ T9171] name failslab, interval 1, probability 0, space 0, times 0 [ 167.316388][ T9171] CPU: 0 UID: 0 PID: 9171 Comm: syz.2.1005 Not tainted syzkaller #0 PREEMPT(full) [ 167.316411][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.316422][ T9171] Call Trace: [ 167.316428][ T9171] [ 167.316436][ T9171] dump_stack_lvl+0x189/0x250 [ 167.316463][ T9171] ? __pfx____ratelimit+0x10/0x10 [ 167.316481][ T9171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.316503][ T9171] ? __pfx__printk+0x10/0x10 [ 167.316528][ T9171] ? __pfx___might_resched+0x10/0x10 [ 167.316545][ T9171] ? fs_reclaim_acquire+0x7d/0x100 [ 167.316573][ T9171] should_fail_ex+0x414/0x560 [ 167.316602][ T9171] should_failslab+0xa8/0x100 [ 167.316621][ T9171] __kmalloc_noprof+0xcb/0x7f0 [ 167.316643][ T9171] ? sock_kmalloc+0xd6/0x160 [ 167.316660][ T9171] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 167.316683][ T9171] sock_kmalloc+0xd6/0x160 [ 167.316704][ T9171] hash_recvmsg+0x1d4/0x840 [ 167.316730][ T9171] ? __pfx_hash_recvmsg+0x10/0x10 [ 167.316751][ T9171] sock_recvmsg_nosec+0x186/0x1c0 [ 167.316776][ T9171] ____sys_recvmsg+0x3aa/0x460 [ 167.316802][ T9171] ? __pfx_____sys_recvmsg+0x10/0x10 [ 167.316833][ T9171] ? import_iovec+0x74/0xa0 [ 167.316857][ T9171] ___sys_recvmsg+0x1b5/0x510 [ 167.316879][ T9171] ? __pfx____sys_recvmsg+0x10/0x10 [ 167.316925][ T9171] ? __might_fault+0xb0/0x130 [ 167.316952][ T9171] do_recvmmsg+0x307/0x770 [ 167.316979][ T9171] ? __pfx_do_recvmmsg+0x10/0x10 [ 167.317006][ T9171] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.317045][ T9171] __x64_sys_recvmmsg+0x190/0x240 [ 167.317066][ T9171] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 167.317089][ T9171] ? do_syscall_64+0xbe/0xfa0 [ 167.317121][ T9171] do_syscall_64+0xfa/0xfa0 [ 167.317139][ T9171] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.317158][ T9171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.317176][ T9171] ? clear_bhb_loop+0x60/0xb0 [ 167.317198][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.317215][ T9171] RIP: 0033:0x7ff42b98efc9 [ 167.317231][ T9171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.317246][ T9171] RSP: 002b:00007ff42c741038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 167.317265][ T9171] RAX: ffffffffffffffda RBX: 00007ff42bbe5fa0 RCX: 00007ff42b98efc9 [ 167.317278][ T9171] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 167.317289][ T9171] RBP: 00007ff42c741090 R08: 0000000000000000 R09: 0000000000000000 [ 167.317300][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.317310][ T9171] R13: 00007ff42bbe6038 R14: 00007ff42bbe5fa0 R15: 00007fffb2f30bf8 [ 167.317339][ T9171] [ 167.660308][ T9175] syzkaller0: entered promiscuous mode [ 167.665943][ T9175] syzkaller0: entered allmulticast mode [ 167.677144][ T9175] tipc: Enabled bearer , priority 0 [ 167.757310][ T9172] tipc: Resetting bearer [ 167.775551][ T9172] tipc: Disabling bearer [ 167.956600][ T9188] tipc: Enabled bearer , priority 0 [ 167.973991][ T9188] syzkaller0: entered promiscuous mode [ 167.990140][ T9188] syzkaller0: entered allmulticast mode [ 168.010842][ T9188] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 168.070252][ T9188] tipc: Resetting bearer [ 168.090410][ T9187] tipc: Resetting bearer [ 168.121630][ T9187] tipc: Disabling bearer [ 168.467499][ T3026] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.479708][ T3026] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.491721][ T9221] netlink: 'syz.1.1021': attribute type 30 has an invalid length. [ 168.502612][ T3026] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.627836][ T3026] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.642474][ T6476] IPVS: starting estimator thread 0... [ 168.718673][ T9218] vxcan1 speed is unknown, defaulting to 1000 [ 168.743714][ T9228] IPVS: using max 39 ests per chain, 93600 per kthread [ 168.889071][ T9244] __nla_validate_parse: 11 callbacks suppressed [ 168.889088][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1029'. [ 169.083155][ T9249] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1030'. [ 169.128498][ T9246] wg1: entered promiscuous mode [ 169.137842][ T9246] wg1: entered allmulticast mode [ 169.341697][ T9259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1033'. [ 169.497324][ T9261] bond1: entered promiscuous mode [ 169.503954][ T9261] bond1: entered allmulticast mode [ 169.509676][ T9261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.916775][ T9287] netlink: 'syz.2.1039': attribute type 1 has an invalid length. [ 169.955544][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'. [ 169.968990][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 170.170883][ T9293] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 170.226053][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 170.252033][ T9296] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 170.541682][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 170.616269][ T9293] bond3: (slave gretap2): making interface the new active one [ 170.651146][ T9293] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 170.953023][ T9314] tipc: Enabled bearer , priority 0 [ 171.016324][ T9314] syzkaller0: entered promiscuous mode [ 171.053797][ T9314] syzkaller0: entered allmulticast mode [ 171.080161][ T9317] tipc: Resetting bearer [ 171.146627][ T9313] tipc: Resetting bearer [ 171.171991][ T9313] tipc: Disabling bearer [ 171.283915][ T9321] netlink: 'syz.1.1050': attribute type 12 has an invalid length. [ 171.302020][ T9321] netlink: 'syz.1.1050': attribute type 29 has an invalid length. [ 171.322202][ T9321] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1050'. [ 171.352207][ T9321] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1050'. [ 171.421084][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 171.508061][ T9330] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 171.700782][ T9332] wg1 speed is unknown, defaulting to 1000 [ 171.714909][ T9332] wg1 speed is unknown, defaulting to 1000 [ 171.742906][ T9332] wg1 speed is unknown, defaulting to 1000 [ 171.781481][ T9332] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 171.813957][ T9343] netlink: 'syz.1.1057': attribute type 2 has an invalid length. [ 171.814724][ T9332] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 171.922305][ T9332] wg1 speed is unknown, defaulting to 1000 [ 171.930378][ T9332] wg1 speed is unknown, defaulting to 1000 [ 171.938385][ T9332] wg1 speed is unknown, defaulting to 1000 [ 171.946182][ T9332] wg1 speed is unknown, defaulting to 1000 [ 171.954265][ T9332] wg1 speed is unknown, defaulting to 1000 [ 172.059557][ T9348] geneve2: entered promiscuous mode [ 172.663366][ T9378] netlink: 'syz.0.1069': attribute type 13 has an invalid length. [ 172.671346][ T9378] netlink: 'syz.0.1069': attribute type 17 has an invalid length. [ 172.871310][ T9387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.386452][ T9378] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.393688][ T9378] bridge0: port 2(bridge_slave_1) entered listening state [ 173.401071][ T9378] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.408265][ T9378] bridge0: port 1(bridge_slave_0) entered listening state [ 173.474194][ T9378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.594269][ T9379] vxcan1 speed is unknown, defaulting to 1000 [ 173.601049][ T9401] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 174.009614][ T9421] __nla_validate_parse: 4 callbacks suppressed [ 174.009637][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 174.014600][ T9379] wg1 speed is unknown, defaulting to 1000 [ 174.219232][ T9426] netlink: 'syz.0.1081': attribute type 27 has an invalid length. [ 174.386355][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.393680][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.532213][ T9426] wg1: left promiscuous mode [ 174.544317][ T9426] wg1: left allmulticast mode [ 174.679194][ T9426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.942109][ T9428] erspan0: left promiscuous mode [ 175.002190][ T9428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.011598][ T9428] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.025434][ T9428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.051913][ T9444] FAULT_INJECTION: forcing a failure. [ 175.051913][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 175.077444][ T9444] CPU: 0 UID: 0 PID: 9444 Comm: syz.2.1085 Not tainted syzkaller #0 PREEMPT(full) [ 175.077468][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.077478][ T9444] Call Trace: [ 175.077486][ T9444] [ 175.077493][ T9444] dump_stack_lvl+0x189/0x250 [ 175.077523][ T9444] ? __pfx____ratelimit+0x10/0x10 [ 175.077543][ T9444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.077565][ T9444] ? __pfx__printk+0x10/0x10 [ 175.077590][ T9444] ? __pfx___might_resched+0x10/0x10 [ 175.077607][ T9444] ? fs_reclaim_acquire+0x7d/0x100 [ 175.077638][ T9444] should_fail_ex+0x414/0x560 [ 175.077668][ T9444] should_failslab+0xa8/0x100 [ 175.077687][ T9444] kmem_cache_alloc_node_noprof+0x77/0x710 [ 175.077711][ T9444] ? __alloc_skb+0x112/0x2d0 [ 175.077733][ T9444] ? netlink_autobind+0xdb/0x300 [ 175.077755][ T9444] __alloc_skb+0x112/0x2d0 [ 175.077782][ T9444] netlink_sendmsg+0x5c6/0xb30 [ 175.077817][ T9444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.077845][ T9444] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.077870][ T9444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.077887][ T9444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.077912][ T9444] __sock_sendmsg+0x21c/0x270 [ 175.077937][ T9444] ____sys_sendmsg+0x505/0x830 [ 175.077960][ T9444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.077987][ T9444] ? import_iovec+0x74/0xa0 [ 175.078011][ T9444] ___sys_sendmsg+0x21f/0x2a0 [ 175.078030][ T9444] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.078082][ T9444] ? __fget_files+0x2a/0x420 [ 175.078099][ T9444] ? __fget_files+0x3a0/0x420 [ 175.078126][ T9444] __x64_sys_sendmsg+0x19b/0x260 [ 175.078146][ T9444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.078174][ T9444] ? __pfx_ksys_write+0x10/0x10 [ 175.078201][ T9444] ? do_syscall_64+0xbe/0xfa0 [ 175.078225][ T9444] do_syscall_64+0xfa/0xfa0 [ 175.078243][ T9444] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.078264][ T9444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.078295][ T9444] ? clear_bhb_loop+0x60/0xb0 [ 175.078316][ T9444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.078333][ T9444] RIP: 0033:0x7ff42b98efc9 [ 175.078349][ T9444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.078365][ T9444] RSP: 002b:00007ff429bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.078384][ T9444] RAX: ffffffffffffffda RBX: 00007ff42bbe6090 RCX: 00007ff42b98efc9 [ 175.078398][ T9444] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000003 [ 175.078409][ T9444] RBP: 00007ff429bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 175.078421][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.078431][ T9444] R13: 00007ff42bbe6128 R14: 00007ff42bbe6090 R15: 00007fffb2f30bf8 [ 175.078463][ T9444] [ 175.083594][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.381043][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.454127][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.462528][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.609688][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'. [ 175.731898][ T9466] tipc: Enabled bearer , priority 0 [ 175.827675][ T9466] syzkaller0: entered promiscuous mode [ 175.833244][ T9466] syzkaller0: entered allmulticast mode [ 175.840268][ T9466] tipc: Resetting bearer [ 175.853000][ T9462] tipc: Resetting bearer [ 175.992776][ T9483] xt_TCPMSS: Only works on TCP SYN packets [ 177.663788][ T9462] tipc: Disabling bearer [ 177.678068][ T9484] tipc: Enabling of bearer rejected, failed to enable media [ 177.815474][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1105'. [ 177.925944][ T9510] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1107'. [ 177.937472][ T9510] tc_dump_action: action bad kind [ 177.959168][ T9510] netlink: 'syz.3.1107': attribute type 1 has an invalid length. [ 177.988937][ T9515] netlink: 'syz.0.1108': attribute type 13 has an invalid length. [ 177.999863][ T9515] netlink: 'syz.0.1108': attribute type 17 has an invalid length. [ 178.022194][ T9515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.123357][ T9512] vxcan1 speed is unknown, defaulting to 1000 [ 178.201073][ T9523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.215709][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 178.490611][ T9512] wg1 speed is unknown, defaulting to 1000 [ 178.708060][ T9534] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1113'. [ 178.969286][ T9544] vxcan1 speed is unknown, defaulting to 1000 [ 179.513239][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 179.566351][ T9559] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 179.567493][ T9559] block (null): Could not allocate knbd recv work queue. [ 179.660132][ T9559] nbd: failed to add new device [ 179.871866][ T9544] wg1 speed is unknown, defaulting to 1000 [ 180.190785][ T9578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1127'. [ 180.251331][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 180.452958][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 180.466491][ T9588] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 180.492549][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1129'. [ 180.896305][ T9593] Cannot find add_set index 4 as target [ 181.177752][ T9598] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1134'. [ 182.829427][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1140'. [ 183.392697][ T9629] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1143'. [ 183.408407][ T9629] netlink: 'syz.3.1143': attribute type 18 has an invalid length. [ 183.416897][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1143'. [ 183.503939][ T9632] macsec1: entered promiscuous mode [ 183.522879][ T9632] bridge0: port 1(macsec1) entered blocking state [ 183.533413][ T9632] bridge0: port 1(macsec1) entered disabled state [ 183.541224][ T9632] macsec1: entered allmulticast mode [ 183.548462][ T9632] bridge0: entered allmulticast mode [ 183.557482][ T9632] macsec1: left allmulticast mode [ 183.562551][ T9632] bridge0: left allmulticast mode [ 183.676155][ T9647] netlink: 'syz.1.1149': attribute type 4 has an invalid length. [ 183.705380][ T9647] netlink: 'syz.1.1149': attribute type 4 has an invalid length. [ 183.746769][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1149'. [ 183.808815][ T9652] netlink: 'syz.3.1151': attribute type 11 has an invalid length. [ 183.885626][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.893326][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.965561][ T9659] sctp: [Deprecated]: syz.2.1154 (pid 9659) Use of int in max_burst socket option. [ 183.965561][ T9659] Use struct sctp_assoc_value instead [ 184.047259][ T9661] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004 [ 184.129418][ T9650] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 184.222771][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.263010][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.287090][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.319283][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.341283][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.361564][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.381567][ T9431] vxcan1 speed is unknown, defaulting to 1000 [ 184.385369][ T9662] syzkaller0: entered promiscuous mode [ 184.388661][ T9431] syz2: Port: 1 Link DOWN [ 184.393097][ T9662] syzkaller0: entered allmulticast mode [ 184.408339][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.434424][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.456126][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.469719][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.489055][ T1211] vxcan1 speed is unknown, defaulting to 1000 [ 184.668413][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'. [ 184.701871][ T9687] IPVS: length: 61 != 24 [ 184.789445][ T9684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.808699][ T9684] bridge0: port 3(bond2) entered blocking state [ 184.815262][ T9684] bridge0: port 3(bond2) entered disabled state [ 184.821666][ T9684] bond2: entered allmulticast mode [ 184.829810][ T9684] bond2: entered promiscuous mode [ 185.195503][ T9710] FAULT_INJECTION: forcing a failure. [ 185.195503][ T9710] name failslab, interval 1, probability 0, space 0, times 0 [ 185.234218][ T9710] CPU: 0 UID: 0 PID: 9710 Comm: syz.4.1171 Not tainted syzkaller #0 PREEMPT(full) [ 185.234243][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.234254][ T9710] Call Trace: [ 185.234261][ T9710] [ 185.234269][ T9710] dump_stack_lvl+0x189/0x250 [ 185.234306][ T9710] ? __pfx____ratelimit+0x10/0x10 [ 185.234325][ T9710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.234345][ T9710] ? __pfx__printk+0x10/0x10 [ 185.234365][ T9710] ? __pfx___might_resched+0x10/0x10 [ 185.234382][ T9710] ? fs_reclaim_acquire+0x7d/0x100 [ 185.234413][ T9710] should_fail_ex+0x414/0x560 [ 185.234442][ T9710] should_failslab+0xa8/0x100 [ 185.234461][ T9710] __kmalloc_cache_noprof+0x6f/0x6f0 [ 185.234491][ T9710] ? __asan_memset+0x22/0x50 [ 185.234509][ T9710] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 185.234535][ T9710] alloc_netdev_mqs+0xbf8/0x11b0 [ 185.234563][ T9710] l2tp_eth_create+0x1bd/0xbd0 [ 185.234583][ T9710] ? l2tp_tunnel_get+0x8d/0x400 [ 185.234607][ T9710] ? l2tp_tunnel_get+0x365/0x400 [ 185.234628][ T9710] ? l2tp_tunnel_get+0x8d/0x400 [ 185.234649][ T9710] ? __pfx_l2tp_eth_create+0x10/0x10 [ 185.234678][ T9710] ? l2tp_nl_cmd_session_create+0x9be/0xc20 [ 185.234703][ T9710] l2tp_nl_cmd_session_create+0x733/0xc20 [ 185.234733][ T9710] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 185.234762][ T9710] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 185.234792][ T9710] genl_family_rcv_msg_doit+0x215/0x300 [ 185.234821][ T9710] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.234855][ T9710] ? bpf_lsm_capable+0x9/0x20 [ 185.234875][ T9710] ? security_capable+0x7e/0x2e0 [ 185.234905][ T9710] genl_rcv_msg+0x60e/0x790 [ 185.234932][ T9710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.234958][ T9710] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 185.234980][ T9710] ? __asan_memcpy+0x40/0x70 [ 185.235001][ T9710] ? __pfx_ref_tracker_free+0x10/0x10 [ 185.235035][ T9710] netlink_rcv_skb+0x208/0x470 [ 185.235058][ T9710] ? __lock_acquire+0xab9/0xd20 [ 185.235076][ T9710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.235098][ T9710] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.235142][ T9710] ? down_read+0x1ad/0x2e0 [ 185.235167][ T9710] genl_rcv+0x28/0x40 [ 185.235185][ T9710] netlink_unicast+0x82f/0x9e0 [ 185.235217][ T9710] ? __pfx_netlink_unicast+0x10/0x10 [ 185.235241][ T9710] ? netlink_sendmsg+0x642/0xb30 [ 185.235264][ T9710] ? skb_put+0x11b/0x210 [ 185.235292][ T9710] netlink_sendmsg+0x805/0xb30 [ 185.235326][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.235353][ T9710] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.235378][ T9710] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.235394][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.235419][ T9710] __sock_sendmsg+0x21c/0x270 [ 185.235444][ T9710] ____sys_sendmsg+0x505/0x830 [ 185.235474][ T9710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.235501][ T9710] ? import_iovec+0x74/0xa0 [ 185.235527][ T9710] ___sys_sendmsg+0x21f/0x2a0 [ 185.235548][ T9710] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.235605][ T9710] ? __fget_files+0x2a/0x420 [ 185.235621][ T9710] ? __fget_files+0x3a0/0x420 [ 185.235649][ T9710] __x64_sys_sendmsg+0x19b/0x260 [ 185.235670][ T9710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.235699][ T9710] ? __pfx_ksys_write+0x10/0x10 [ 185.235727][ T9710] ? do_syscall_64+0xbe/0xfa0 [ 185.235750][ T9710] do_syscall_64+0xfa/0xfa0 [ 185.235768][ T9710] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.235787][ T9710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.235805][ T9710] ? clear_bhb_loop+0x60/0xb0 [ 185.235826][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.235843][ T9710] RIP: 0033:0x7fd34f58efc9 [ 185.235869][ T9710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.235885][ T9710] RSP: 002b:00007fd350412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.235911][ T9710] RAX: ffffffffffffffda RBX: 00007fd34f7e5fa0 RCX: 00007fd34f58efc9 [ 185.235924][ T9710] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000005 [ 185.235936][ T9710] RBP: 00007fd350412090 R08: 0000000000000000 R09: 0000000000000000 [ 185.235947][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.235958][ T9710] R13: 00007fd34f7e6038 R14: 00007fd34f7e5fa0 R15: 00007ffeb14f0c48 [ 185.235991][ T9710] [ 185.237477][ T9712] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 185.619182][ T1211] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x1 [ 185.668854][ T9712] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1170'. [ 185.681628][ T1211] hid-generic 0005:0C45:1012.0001: ignoring exceeding usage max [ 185.690646][ T1211] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x4 [ 185.705068][ T5840] Bluetooth: hci4: link tx timeout [ 185.710277][ T5840] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.728049][ T1211] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x5 [ 185.736086][ T1211] hid-generic 0005:0C45:1012.0001: reserved main item tag 0xd [ 185.743735][ T1211] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 31/252 [ 185.752957][ T1211] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 186.385481][ T9739] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1178'. [ 186.418053][ T9742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1178'. [ 187.642789][ T9788] bridge_slave_0: left allmulticast mode [ 187.661571][ T9788] bridge_slave_0: left promiscuous mode [ 187.697908][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.735053][ T9788] bridge_slave_1: left allmulticast mode [ 187.757042][ T9788] bridge_slave_1: left promiscuous mode [ 187.762896][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.771601][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 187.786844][ T9788] bond0: (slave bond_slave_0): Releasing backup interface [ 187.801396][ T9788] bond0: (slave bond_slave_1): Releasing backup interface [ 187.846856][ T9788] team0: Port device team_slave_0 removed [ 187.867335][ T9788] team0: Port device team_slave_1 removed [ 187.873888][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.890192][ T9788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.931442][ T9790] team0: Mode changed to "activebackup" [ 188.280154][ T9811] netlink: 'syz.0.1194': attribute type 13 has an invalid length. [ 188.297037][ T9811] netlink: 'syz.0.1194': attribute type 17 has an invalid length. [ 188.375005][ T9811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.531998][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 188.577353][ T9811] vxcan1 speed is unknown, defaulting to 1000 [ 188.635509][ T9813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.869486][ T9811] wg1 speed is unknown, defaulting to 1000 [ 189.332616][ T9824] bpq0: entered promiscuous mode [ 189.645605][ T9831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.645605][ T9832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.511757][ T9874] syzkaller0: entered promiscuous mode [ 190.517913][ T9874] syzkaller0: entered allmulticast mode [ 190.528532][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1218'. [ 191.115987][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 191.118204][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 191.122065][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 192.091437][ T9923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1236'. [ 192.414591][ T9941] sctp: [Deprecated]: syz.3.1245 (pid 9941) Use of int in maxseg socket option. [ 192.414591][ T9941] Use struct sctp_assoc_value instead [ 192.517986][ T9949] netlink: 'syz.0.1247': attribute type 4 has an invalid length. [ 192.519273][ T9951] netlink: 'syz.2.1248': attribute type 27 has an invalid length. [ 192.563820][ T9951] bond1: left promiscuous mode [ 192.572063][ T9951] bond1: left allmulticast mode [ 192.695579][ T9954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.713353][ T9954] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.745492][ T9954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.784464][ T9952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.905882][ T9946] netlink: 'syz.3.1245': attribute type 3 has an invalid length. [ 193.022564][ T9959] siw: device registration error -23 [ 193.074677][ T9968] netlink: 'syz.3.1252': attribute type 9 has an invalid length. [ 193.088227][ T9970] netlink: 'syz.0.1253': attribute type 9 has an invalid length. [ 193.091847][ T9968] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1252'. [ 193.096393][ T9970] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1253'. [ 193.107738][ T9966] vxcan1 speed is unknown, defaulting to 1000 [ 193.374475][ T9983] FAULT_INJECTION: forcing a failure. [ 193.374475][ T9983] name failslab, interval 1, probability 0, space 0, times 0 [ 193.402132][ T9983] CPU: 0 UID: 0 PID: 9983 Comm: syz.4.1255 Not tainted syzkaller #0 PREEMPT(full) [ 193.402156][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.402166][ T9983] Call Trace: [ 193.402173][ T9983] [ 193.402181][ T9983] dump_stack_lvl+0x189/0x250 [ 193.402208][ T9983] ? __pfx____ratelimit+0x10/0x10 [ 193.402229][ T9983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.402251][ T9983] ? __pfx__printk+0x10/0x10 [ 193.402276][ T9983] ? __pfx___might_resched+0x10/0x10 [ 193.402293][ T9983] ? fs_reclaim_acquire+0x7d/0x100 [ 193.402323][ T9983] should_fail_ex+0x414/0x560 [ 193.402360][ T9983] should_failslab+0xa8/0x100 [ 193.402380][ T9983] __kmalloc_noprof+0xcb/0x7f0 [ 193.402403][ T9983] ? tomoyo_encode+0x28b/0x550 [ 193.402433][ T9983] tomoyo_encode+0x28b/0x550 [ 193.402463][ T9983] tomoyo_realpath_from_path+0x58d/0x5d0 [ 193.402490][ T9983] ? tomoyo_domain+0xd9/0x130 [ 193.402520][ T9983] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 193.402542][ T9983] tomoyo_path_number_perm+0x1e8/0x5a0 [ 193.402566][ T9983] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 193.402627][ T9983] ? __fget_files+0x2a/0x420 [ 193.402649][ T9983] ? __fget_files+0x3a0/0x420 [ 193.402664][ T9983] ? __fget_files+0x2a/0x420 [ 193.402685][ T9983] security_file_ioctl+0xcb/0x2d0 [ 193.402707][ T9983] __se_sys_ioctl+0x47/0x170 [ 193.402732][ T9983] do_syscall_64+0xfa/0xfa0 [ 193.402751][ T9983] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.402771][ T9983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.402788][ T9983] ? clear_bhb_loop+0x60/0xb0 [ 193.402810][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.402828][ T9983] RIP: 0033:0x7fd34f58efc9 [ 193.402844][ T9983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.402859][ T9983] RSP: 002b:00007fd350412038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.402878][ T9983] RAX: ffffffffffffffda RBX: 00007fd34f7e5fa0 RCX: 00007fd34f58efc9 [ 193.402892][ T9983] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 193.402902][ T9983] RBP: 00007fd350412090 R08: 0000000000000000 R09: 0000000000000000 [ 193.402917][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.402928][ T9983] R13: 00007fd34f7e6038 R14: 00007fd34f7e5fa0 R15: 00007ffeb14f0c48 [ 193.402961][ T9983] [ 193.464029][ T9983] ERROR: Out of memory at tomoyo_realpath_from_path. [ 193.529224][ T9966] wg1 speed is unknown, defaulting to 1000 [ 193.676720][ T9988] syzkaller0: entered promiscuous mode [ 193.682387][ T9988] syzkaller0: entered allmulticast mode [ 193.942007][ T9996] tipc: Enabled bearer , priority 0 [ 193.949496][ T9996] syzkaller0: entered promiscuous mode [ 193.973859][ T9996] syzkaller0: entered allmulticast mode [ 194.018215][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 194.143709][ T9995] tipc: Resetting bearer [ 194.159630][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.210361][ T9995] tipc: Disabling bearer [ 194.636937][T10026] netlink: 'syz.0.1271': attribute type 9 has an invalid length. [ 194.661567][T10026] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1271'. [ 194.676724][T10028] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 194.778404][T10028] bond3: (slave geneve2): making interface the new active one [ 194.794348][T10028] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 194.804556][ T2965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 194.834438][ T2965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 194.854305][ T2965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 194.873649][ T2965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 195.168634][T10054] FAULT_INJECTION: forcing a failure. [ 195.168634][T10054] name failslab, interval 1, probability 0, space 0, times 0 [ 195.190782][T10054] CPU: 0 UID: 0 PID: 10054 Comm: syz.4.1275 Not tainted syzkaller #0 PREEMPT(full) [ 195.190809][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.190820][T10054] Call Trace: [ 195.190828][T10054] [ 195.190836][T10054] dump_stack_lvl+0x189/0x250 [ 195.190864][T10054] ? __pfx____ratelimit+0x10/0x10 [ 195.190884][T10054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.190906][T10054] ? __pfx__printk+0x10/0x10 [ 195.190931][T10054] ? __pfx___might_resched+0x10/0x10 [ 195.190954][T10054] should_fail_ex+0x414/0x560 [ 195.190985][T10054] should_failslab+0xa8/0x100 [ 195.191005][T10054] __kmalloc_cache_noprof+0x6f/0x6f0 [ 195.191030][T10054] ? tcf_chain_create+0xb0/0x310 [ 195.191062][T10054] tcf_chain_create+0xb0/0x310 [ 195.191091][T10054] __tcf_chain_get+0x111/0x3c0 [ 195.191117][T10054] tc_new_tfilter+0x753/0x15b0 [ 195.191139][T10054] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.191188][T10054] ? __pfx_tc_new_tfilter+0x10/0x10 [ 195.191243][T10054] ? __pfx_tc_new_tfilter+0x10/0x10 [ 195.191259][T10054] rtnetlink_rcv_msg+0x7cf/0xb70 [ 195.191287][T10054] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 195.191309][T10054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.191330][T10054] ? ref_tracker_free+0x63a/0x7d0 [ 195.191348][T10054] ? __asan_memcpy+0x40/0x70 [ 195.191368][T10054] ? __pfx_ref_tracker_free+0x10/0x10 [ 195.191404][T10054] netlink_rcv_skb+0x208/0x470 [ 195.191430][T10054] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.191455][T10054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.191493][T10054] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.191526][T10054] netlink_unicast+0x82f/0x9e0 [ 195.191559][T10054] ? __pfx_netlink_unicast+0x10/0x10 [ 195.191584][T10054] ? netlink_sendmsg+0x642/0xb30 [ 195.191606][T10054] ? skb_put+0x11b/0x210 [ 195.191634][T10054] netlink_sendmsg+0x805/0xb30 [ 195.191673][T10054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.191701][T10054] ? aa_sock_msg_perm+0xf1/0x1d0 [ 195.191728][T10054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.191745][T10054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.191770][T10054] __sock_sendmsg+0x21c/0x270 [ 195.191794][T10054] ____sys_sendmsg+0x505/0x830 [ 195.191816][T10054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.191841][T10054] ? import_iovec+0x74/0xa0 [ 195.191865][T10054] ___sys_sendmsg+0x21f/0x2a0 [ 195.191885][T10054] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.191940][T10054] ? __fget_files+0x2a/0x420 [ 195.191955][T10054] ? __fget_files+0x3a0/0x420 [ 195.191982][T10054] __x64_sys_sendmsg+0x19b/0x260 [ 195.192001][T10054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.192029][T10054] ? __pfx_ksys_write+0x10/0x10 [ 195.192055][T10054] ? do_syscall_64+0xbe/0xfa0 [ 195.192079][T10054] do_syscall_64+0xfa/0xfa0 [ 195.192097][T10054] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.192117][T10054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.192133][T10054] ? clear_bhb_loop+0x60/0xb0 [ 195.192162][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.192179][T10054] RIP: 0033:0x7fd34f58efc9 [ 195.192196][T10054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.192211][T10054] RSP: 002b:00007fd350412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.192231][T10054] RAX: ffffffffffffffda RBX: 00007fd34f7e5fa0 RCX: 00007fd34f58efc9 [ 195.192244][T10054] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 195.192260][T10054] RBP: 00007fd350412090 R08: 0000000000000000 R09: 0000000000000000 [ 195.192271][T10054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.192281][T10054] R13: 00007fd34f7e6038 R14: 00007fd34f7e5fa0 R15: 00007ffeb14f0c48 [ 195.192314][T10054] [ 195.627173][T10064] tipc: Enabling of bearer rejected, failed to enable media [ 195.659455][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 195.831013][T10065] vxcan1 speed is unknown, defaulting to 1000 [ 195.878688][T10079] syzkaller1: entered promiscuous mode [ 195.899603][T10079] syzkaller1: entered allmulticast mode [ 196.002857][T10084] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1288'. [ 196.198326][T10065] wg1 speed is unknown, defaulting to 1000 [ 196.431174][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 196.640524][T10099] syzkaller0: entered promiscuous mode [ 196.658531][T10107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.666072][T10099] syzkaller0: entered allmulticast mode [ 196.856675][T10109] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 196.908200][T10117] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1297'. [ 196.977158][T10116] tipc: Enabled bearer , priority 0 [ 197.061571][T10114] tipc: Disabling bearer [ 197.077368][T10117] vxcan1 speed is unknown, defaulting to 1000 [ 197.077384][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 197.099505][T10122] FAULT_INJECTION: forcing a failure. [ 197.099505][T10122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.112957][T10122] CPU: 1 UID: 0 PID: 10122 Comm: syz.2.1300 Not tainted syzkaller #0 PREEMPT(full) [ 197.112981][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.112992][T10122] Call Trace: [ 197.113000][T10122] [ 197.113007][T10122] dump_stack_lvl+0x189/0x250 [ 197.113033][T10122] ? __pfx____ratelimit+0x10/0x10 [ 197.113052][T10122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.113075][T10122] ? __pfx__printk+0x10/0x10 [ 197.113105][T10122] should_fail_ex+0x414/0x560 [ 197.113134][T10122] _copy_to_user+0x31/0xb0 [ 197.113158][T10122] simple_read_from_buffer+0xe1/0x170 [ 197.113188][T10122] proc_fail_nth_read+0x1b3/0x220 [ 197.113213][T10122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.113237][T10122] ? rw_verify_area+0x2a6/0x4d0 [ 197.113257][T10122] ? __lock_acquire+0xab9/0xd20 [ 197.113273][T10122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.113295][T10122] vfs_read+0x200/0xa30 [ 197.113315][T10122] ? fdget_pos+0x247/0x320 [ 197.113334][T10122] ? __pfx___mutex_lock+0x10/0x10 [ 197.113356][T10122] ? __pfx_vfs_read+0x10/0x10 [ 197.113380][T10122] ? __fget_files+0x2a/0x420 [ 197.113400][T10122] ? __fget_files+0x3a0/0x420 [ 197.113414][T10122] ? __fget_files+0x2a/0x420 [ 197.113438][T10122] ksys_read+0x145/0x250 [ 197.113466][T10122] ? __pfx_ksys_read+0x10/0x10 [ 197.113491][T10122] ? do_syscall_64+0xbe/0xfa0 [ 197.113515][T10122] do_syscall_64+0xfa/0xfa0 [ 197.113532][T10122] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.113551][T10122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.113568][T10122] ? clear_bhb_loop+0x60/0xb0 [ 197.113589][T10122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.113606][T10122] RIP: 0033:0x7ff42b98d9dc [ 197.113621][T10122] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.113636][T10122] RSP: 002b:00007ff42c741030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.113655][T10122] RAX: ffffffffffffffda RBX: 00007ff42bbe5fa0 RCX: 00007ff42b98d9dc [ 197.113668][T10122] RDX: 000000000000000f RSI: 00007ff42c7410a0 RDI: 000000000000000a [ 197.113679][T10122] RBP: 00007ff42c741090 R08: 0000000000000000 R09: 0000000000000000 [ 197.113690][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.113700][T10122] R13: 00007ff42bbe6038 R14: 00007ff42bbe5fa0 R15: 00007fffb2f30bf8 [ 197.113727][T10122] [ 197.354322][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 197.482134][T10130] syzkaller1: entered promiscuous mode [ 197.515434][T10130] syzkaller1: entered allmulticast mode [ 197.567637][T10130] syzkaller1: left promiscuous mode [ 197.623566][T10130] syzkaller1: left allmulticast mode [ 197.650809][T10130] xt_recent: Unsupported userspace flags (000000b1) [ 197.923527][T10152] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.928019][T10117] wg1 speed is unknown, defaulting to 1000 [ 197.934506][T10139] vxcan1 speed is unknown, defaulting to 1000 [ 197.982873][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 198.019179][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1308'. [ 198.342744][T10139] wg1 speed is unknown, defaulting to 1000 [ 198.506296][T10163] block nbd1: server does not support multiple connections per device. [ 198.514924][T10163] block nbd1: shutting down sockets [ 199.260483][T10200] netlink: zone id is out of range [ 199.296825][T10200] netlink: zone id is out of range [ 199.302381][T10200] netlink: zone id is out of range [ 199.307648][T10200] netlink: get zone limit has 4 unknown bytes [ 199.433874][T10192] netlink: 'syz.4.1321': attribute type 11 has an invalid length. [ 199.441707][T10192] netlink: 'syz.4.1321': attribute type 11 has an invalid length. [ 199.480838][T10192] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1321'. [ 199.508110][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 199.539353][T10192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.554405][T10211] IPv6: NLM_F_REPLACE set, but no existing node found! [ 201.287010][T10273] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 201.311901][T10271] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 201.400239][T10281] tipc: Enabling of bearer rejected, failed to enable media [ 201.606605][T10290] vxcan1 speed is unknown, defaulting to 1000 [ 201.988911][T10290] wg1 speed is unknown, defaulting to 1000 [ 202.024087][T10308] __nla_validate_parse: 5 callbacks suppressed [ 202.024103][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 202.051223][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 202.097455][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 202.107578][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 202.164934][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 202.232899][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 202.506138][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 202.625103][T10331] tipc: Enabling of bearer rejected, failed to enable media [ 203.216817][T10345] vxcan1 speed is unknown, defaulting to 1000 [ 203.447235][T10345] wg1 speed is unknown, defaulting to 1000 [ 204.153199][T10373] netlink: 'syz.4.1380': attribute type 32 has an invalid length. [ 204.178051][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 204.190616][T10376] netlink: 'syz.3.1381': attribute type 11 has an invalid length. [ 204.212284][T10373] bond4: option coupled_control: invalid value (64) [ 204.221403][T10373] bond4 (unregistering): Released all slaves [ 205.070414][T10425] syzkaller0: entered promiscuous mode [ 205.079427][T10425] syzkaller0: entered allmulticast mode [ 205.091322][T10430] wg2: entered promiscuous mode [ 205.096333][T10430] wg2: entered allmulticast mode [ 206.721100][T10483] tipc: Enabling of bearer rejected, failed to enable media [ 207.252557][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 207.307186][T10514] netlink: 'syz.1.1435': attribute type 13 has an invalid length. [ 207.330227][T10514] netlink: 'syz.1.1435': attribute type 17 has an invalid length. [ 207.404590][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'. [ 207.480134][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 207.498882][T10518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.512883][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1437'. [ 207.536394][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 207.562436][T10514] erspan0: left promiscuous mode [ 207.700852][T10514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.717221][T10514] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.739574][T10514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.777095][T10513] FAULT_INJECTION: forcing a failure. [ 207.777095][T10513] name failslab, interval 1, probability 0, space 0, times 0 [ 207.796839][T10513] CPU: 1 UID: 0 PID: 10513 Comm: syz.4.1436 Not tainted syzkaller #0 PREEMPT(full) [ 207.796866][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.796877][T10513] Call Trace: [ 207.796884][T10513] [ 207.796892][T10513] dump_stack_lvl+0x189/0x250 [ 207.796921][T10513] ? __pfx____ratelimit+0x10/0x10 [ 207.796942][T10513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.796965][T10513] ? __pfx__printk+0x10/0x10 [ 207.796989][T10513] ? __pfx___might_resched+0x10/0x10 [ 207.797014][T10513] should_fail_ex+0x414/0x560 [ 207.797044][T10513] should_failslab+0xa8/0x100 [ 207.797064][T10513] __kmalloc_cache_noprof+0x6f/0x6f0 [ 207.797087][T10513] ? __asan_memset+0x22/0x50 [ 207.797106][T10513] ? alloc_netdev_mqs+0xb97/0x11b0 [ 207.797125][T10513] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 207.797147][T10513] alloc_netdev_mqs+0xb97/0x11b0 [ 207.797175][T10513] rtnl_create_link+0x31f/0xd10 [ 207.797209][T10513] rtnl_newlink_create+0x25c/0xb00 [ 207.797240][T10513] ? __mutex_lock+0x5bb/0x1350 [ 207.797267][T10513] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 207.797295][T10513] ? __pfx___mutex_lock+0x10/0x10 [ 207.797326][T10513] ? ns_capable+0x8a/0xf0 [ 207.797350][T10513] rtnl_newlink+0x16e4/0x1c80 [ 207.797374][T10513] ? ____sys_sendmsg+0x52d/0x830 [ 207.797404][T10513] ? __pfx_rtnl_newlink+0x10/0x10 [ 207.797450][T10513] ? kasan_quarantine_put+0xdd/0x220 [ 207.797472][T10513] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.797499][T10513] ? nlmon_xmit+0xb0/0x100 [ 207.797516][T10513] ? kmem_cache_free+0x19b/0x690 [ 207.797550][T10513] ? __local_bh_enable_ip+0x12d/0x1c0 [ 207.797576][T10513] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.797598][T10513] ? __local_bh_enable_ip+0x12d/0x1c0 [ 207.797617][T10513] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 207.797640][T10513] ? __dev_queue_xmit+0x284/0x3740 [ 207.797662][T10513] ? __dev_queue_xmit+0x284/0x3740 [ 207.797680][T10513] ? __dev_queue_xmit+0x1bfb/0x3740 [ 207.797707][T10513] ? __lock_acquire+0xab9/0xd20 [ 207.797750][T10513] ? __pfx_rtnl_newlink+0x10/0x10 [ 207.797777][T10513] rtnetlink_rcv_msg+0x7cf/0xb70 [ 207.797807][T10513] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 207.797835][T10513] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.797855][T10513] ? ref_tracker_free+0x63a/0x7d0 [ 207.797873][T10513] ? __asan_memcpy+0x40/0x70 [ 207.797894][T10513] ? __pfx_ref_tracker_free+0x10/0x10 [ 207.797929][T10513] netlink_rcv_skb+0x208/0x470 [ 207.797955][T10513] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.797980][T10513] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.798015][T10513] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.798048][T10513] netlink_unicast+0x82f/0x9e0 [ 207.798078][T10513] ? __pfx_netlink_unicast+0x10/0x10 [ 207.798103][T10513] ? netlink_sendmsg+0x642/0xb30 [ 207.798124][T10513] ? skb_put+0x11b/0x210 [ 207.798152][T10513] netlink_sendmsg+0x805/0xb30 [ 207.798186][T10513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.798214][T10513] ? aa_sock_msg_perm+0xf1/0x1d0 [ 207.798239][T10513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.798256][T10513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.798281][T10513] __sock_sendmsg+0x21c/0x270 [ 207.798304][T10513] ____sys_sendmsg+0x52d/0x830 [ 207.798328][T10513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.798355][T10513] ? import_iovec+0x74/0xa0 [ 207.798379][T10513] ___sys_sendmsg+0x21f/0x2a0 [ 207.798399][T10513] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.798462][T10513] ? __might_fault+0xb0/0x130 [ 207.798489][T10513] __sys_sendmmsg+0x227/0x430 [ 207.798512][T10513] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.798539][T10513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.798579][T10513] ? ksys_write+0x22a/0x250 [ 207.798604][T10513] ? __pfx_ksys_write+0x10/0x10 [ 207.798632][T10513] __x64_sys_sendmmsg+0xa0/0xc0 [ 207.798652][T10513] do_syscall_64+0xfa/0xfa0 [ 207.798671][T10513] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.798690][T10513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.798708][T10513] ? clear_bhb_loop+0x60/0xb0 [ 207.798729][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.798746][T10513] RIP: 0033:0x7fd34f58efc9 [ 207.798763][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.798778][T10513] RSP: 002b:00007fd350412038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.798798][T10513] RAX: ffffffffffffffda RBX: 00007fd34f7e5fa0 RCX: 00007fd34f58efc9 [ 207.798811][T10513] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 207.798830][T10513] RBP: 00007fd350412090 R08: 0000000000000000 R09: 0000000000000000 [ 207.798840][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.798851][T10513] R13: 00007fd34f7e6038 R14: 00007fd34f7e5fa0 R15: 00007ffeb14f0c48 [ 207.798883][T10513] [ 207.830225][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 207.838253][ T1017] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 207.857359][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'. [ 207.860700][ T1017] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 208.301912][ T1017] bond0: now running without any active interface! [ 208.332048][T10519] vxcan1 speed is unknown, defaulting to 1000 [ 208.648223][T10544] tipc: Enabling of bearer rejected, failed to enable media [ 208.682377][T10519] wg1 speed is unknown, defaulting to 1000 [ 209.142032][T10554] vxcan2: entered allmulticast mode [ 209.237088][T10551] vlan0: entered promiscuous mode [ 209.256399][T10551] batadv0: entered promiscuous mode [ 209.538119][T10564] bpq0: left promiscuous mode [ 209.841236][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 209.847305][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 209.850320][T10573] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1455'. [ 210.193377][T10582] netlink: 'syz.4.1458': attribute type 9 has an invalid length. [ 210.899899][T10611] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 210.919685][T10612] netlink: 'syz.1.1469': attribute type 13 has an invalid length. [ 210.938111][T10611] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 210.954988][T10612] netlink: 'syz.1.1469': attribute type 17 has an invalid length. [ 210.975333][T10612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.037631][T10609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.148632][T10629] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 211.261031][T10632] bond0: entered promiscuous mode [ 211.283519][T10632] bond0: left promiscuous mode [ 211.299191][T10634] netlink: 'syz.3.1476': attribute type 12 has an invalid length. [ 211.307248][T10634] netlink: 'syz.3.1476': attribute type 29 has an invalid length. [ 211.538477][T10648] vxcan1 speed is unknown, defaulting to 1000 [ 211.811903][T10656] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 211.944473][T10648] wg1 speed is unknown, defaulting to 1000 [ 211.946971][T10649] vxcan1 speed is unknown, defaulting to 1000 [ 212.022863][T10663] veth0: entered promiscuous mode [ 212.146550][T10663] veth0: left promiscuous mode [ 212.361564][T10675] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.478055][T10649] wg1 speed is unknown, defaulting to 1000 [ 213.437242][T10704] xt_hashlimit: overflow, try lower: 17592186044416/255 [ 214.387445][T10712] vxcan1 speed is unknown, defaulting to 1000 [ 215.007728][T10712] wg1 speed is unknown, defaulting to 1000 [ 216.395754][T10758] __nla_validate_parse: 6 callbacks suppressed [ 216.395771][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 217.396749][T10786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1530'. [ 217.568744][T10789] netlink: 'syz.0.1532': attribute type 12 has an invalid length. [ 225.643479][ C1] sched: DL replenish lagged too much [ 256.662120][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.968866][T10802] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 298.551588][T10802] CPU: 1 UID: 0 PID: 10802 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 298.551615][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.551625][T10802] Call Trace: [ 298.551633][T10802] [ 298.551641][T10802] dump_stack_lvl+0x189/0x250 [ 298.551672][T10802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.551696][T10802] ? __pfx__printk+0x10/0x10 [ 298.551715][T10802] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 298.551739][T10802] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 298.551764][T10802] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 298.551788][T10802] warn_alloc+0x214/0x310 [ 298.551819][T10802] ? __pfx_warn_alloc+0x10/0x10 [ 298.551852][T10802] ? __get_vm_area_node+0x28f/0x300 [ 298.551875][T10802] ? kcov_ioctl+0x55/0x640 [ 298.551896][T10802] __vmalloc_node_range_noprof+0x690/0x12d0 [ 298.551947][T10802] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.551979][T10802] ? __pfx_kcov_ioctl+0x10/0x10 [ 298.551996][T10802] vmalloc_user_noprof+0xad/0xf0 [ 298.552020][T10802] ? kcov_ioctl+0x55/0x640 [ 298.552038][T10802] kcov_ioctl+0x55/0x640 [ 298.552056][T10802] ? bpf_lsm_file_ioctl+0x9/0x20 [ 298.552075][T10802] ? __pfx_kcov_ioctl+0x10/0x10 [ 298.552092][T10802] __se_sys_ioctl+0xfc/0x170 [ 298.552116][T10802] do_syscall_64+0xfa/0xfa0 [ 298.552136][T10802] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.552156][T10802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.552172][T10802] ? clear_bhb_loop+0x60/0xb0 [ 298.552194][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.552211][T10802] RIP: 0033:0x7fdc6a18ebcb [ 298.552228][T10802] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 298.552243][T10802] RSP: 002b:00007ffdc93e98f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.552262][T10802] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fdc6a18ebcb [ 298.552275][T10802] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 298.552287][T10802] RBP: 00007fdc6a3e5f40 R08: 00000000000000da R09: 0000000000000000 [ 298.552298][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.552309][T10802] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 298.552335][T10802] [ 298.552352][T10802] Mem-Info: [ 299.791852][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.292413][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.787433][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.810915][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.827821][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.358211][T10802] active_anon:6498 inactive_anon:0 isolated_anon:0 [ 302.358211][T10802] active_file:3636 inactive_file:39963 isolated_file:0 [ 302.358211][T10802] unevictable:768 dirty:108 writeback:0 [ 302.358211][T10802] slab_reclaimable:10741 slab_unreclaimable:166480 [ 302.358211][T10802] mapped:21260 shmem:1354 pagetables:849 [ 302.358211][T10802] sec_pagetables:0 bounce:0 [ 302.358211][T10802] kernel_misc_reclaimable:0 [ 302.358211][T10802] free:1257682 free_pcp:26970 free_cma:0 [ 306.042806][T10802] Node 0 active_anon:26244kB inactive_anon:0kB active_file:14544kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:93204kB dirty:428kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12848kB pagetables:3392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 307.992791][ T5836] Bluetooth: hci4: command tx timeout [ 309.911575][T10802] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 310.210851][ T5836] Bluetooth: hci4: command tx timeout [ 310.809059][T10802] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.271776][T10802] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 311.286609][T10802] Node 0 DMA32 free:1077940kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25948kB inactive_anon:0kB active_file:14544kB inactive_file:159664kB unevictable:1536kB writepending:28kB zspages:0kB present:3129332kB managed:2565224kB mlocked:0kB bounce:0kB free_pcp:115348kB local_pcp:78596kB free_cma:0kB [ 311.954846][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.973105][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.990015][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.007191][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.041899][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.103117][T10802] lowmem_reserve[]: 0 0 0 0 0 [ 312.116853][T10802] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.301439][ T5832] Bluetooth: hci4: command tx timeout [ 312.582004][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.601066][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.620269][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.637571][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.662983][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.771484][T10802] lowmem_reserve[]: 0 0 0 0 0 [ 312.785476][T10802] Node 1 Normal free:3893552kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15268kB local_pcp:7012kB free_cma:0kB [ 313.273773][T10802] lowmem_reserve[]: 0 0 0 0 0 [ 313.278550][T10802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 313.571606][T10802] Node 0 DMA32: 9*4kB (ME) 38*8kB (ME) 122*16kB (UME) 214*32kB (ME) 117*64kB (ME) 45*128kB (ME) 21*256kB (ME) 47*512kB (UME) 16*1024kB (UM) 3*2048kB (M) 243*4096kB (M) = 1069684kB [ 313.635955][T10802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 313.779659][T10802] Node 1 Normal: 192*4kB (UME) 52*8kB (UME) 39*16kB (UME) 143*32kB (UME) 43*64kB (UME) 9*128kB (UME) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3893552kB [ 314.262827][T10802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.341602][T10802] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.430195][ T5843] Bluetooth: hci4: command tx timeout [ 314.609299][T10802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.682232][ T5843] Bluetooth: hci0: command tx timeout [ 314.786988][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.647547][ T5840] Bluetooth: hci1: command tx timeout [ 315.834112][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.898311][T10802] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.918265][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.998788][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.015409][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.621054][T10802] 44953 total pagecache pages [ 316.634956][T10802] 0 pages in swap cache [ 316.639117][T10802] Free swap = 124996kB [ 316.643264][T10802] Total swap = 124996kB [ 316.761617][T10802] 2097051 pages RAM [ 316.774337][T10802] 0 pages HighMem/MovableOnly [ 316.779021][T10802] 424103 pages reserved [ 316.820742][ T5832] Bluetooth: hci0: command tx timeout [ 316.887796][T10802] 0 pages cma reserved [ 317.176785][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.909649][ T5832] Bluetooth: hci1: command tx timeout [ 318.190481][ T5832] Bluetooth: hci2: command tx timeout [ 318.890492][ T5832] Bluetooth: hci0: command tx timeout [ 320.149124][ T5832] Bluetooth: hci1: command tx timeout [ 320.387980][ T5832] Bluetooth: hci2: command tx timeout [ 321.925013][ T5843] Bluetooth: hci0: command tx timeout [ 322.403613][ T5832] Bluetooth: hci1: command tx timeout [ 322.978649][ T5843] Bluetooth: hci2: command tx timeout [ 325.068654][ T5843] Bluetooth: hci2: command tx timeout [ 380.127934][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 431.872846][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 437.528375][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 437.556689][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 440.505398][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.597316][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 467.270161][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.306938][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.341838][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.359190][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.379437][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.951762][ T5836] Bluetooth: hci3: command tx timeout [ 473.842918][ T5843] Bluetooth: hci3: command tx timeout [ 473.873957][ T31] INFO: task syz-executor:10828 blocked for more than 143 seconds. [ 473.881898][ T31] Not tainted syzkaller #0 [ 474.511107][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.527730][ T31] task:syz-executor state:D stack:28008 pid:10828 tgid:10828 ppid:1 task_flags:0x400140 flags:0x00080002 [ 474.829874][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 475.062852][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 475.100216][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 475.358889][ T31] Call Trace: [ 475.362206][ T31] [ 475.383046][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 475.400892][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 475.417409][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 475.490524][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 475.507925][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 475.799261][ T31] __schedule+0x1798/0x4cc0 [ 475.860617][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 475.930868][ T5832] Bluetooth: hci3: command tx timeout [ 476.041358][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.097086][ T31] ? __lock_acquire+0xab9/0xd20 [ 476.101988][ T31] ? __lock_acquire+0xab9/0xd20 [ 476.363816][ T31] ? __pfx___schedule+0x10/0x10 [ 476.368731][ T31] ? schedule+0x91/0x360 [ 476.372982][ T31] schedule+0x165/0x360 [ 477.917426][ T31] schedule_preempt_disabled+0x13/0x30 [ 477.923064][ T31] __mutex_lock+0x7e6/0x1350 [ 478.110475][ T5843] Bluetooth: hci3: command tx timeout [ 478.611244][ T5843] Bluetooth: hci5: command tx timeout [ 478.942840][ T5843] Bluetooth: hci4: command tx timeout [ 479.289840][ T31] ? __mutex_lock+0x5bb/0x1350 [ 479.315519][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 479.320675][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 480.128295][ T31] ? __nla_parse+0x40/0x60 [ 480.132776][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 480.835501][ T5843] Bluetooth: hci5: command tx timeout [ 481.174730][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 481.180176][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 481.207831][ T5843] Bluetooth: hci4: command tx timeout [ 481.569773][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 481.780975][ T31] ? __lock_acquire+0xab9/0xd20 [ 481.808257][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 481.813435][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.010702][ T31] netlink_rcv_skb+0x208/0x470 [ 482.390482][ T31] ? __lock_acquire+0xab9/0xd20 [ 482.417341][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.422857][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.206713][ T5843] Bluetooth: hci5: command tx timeout [ 483.317495][ T5843] Bluetooth: hci4: command tx timeout [ 483.362566][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.376041][ T31] netlink_unicast+0x82f/0x9e0 [ 483.380855][ T31] ? __pfx_netlink_unicast+0x10/0x10