last executing test programs: 2.448784417s ago: executing program 0 (id=1355): socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.342481s ago: executing program 0 (id=1357): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000100)={0xa, 0x4e21, 0x4, @local, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)="d56469be87", 0x5}, {0x0}], 0x2}, 0x20044800) 2.193746831s ago: executing program 0 (id=1362): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0xc, 0x2, 0x3, 0x70bd2b, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102) 1.64329765s ago: executing program 3 (id=1375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0xffffffff, 0x0, {0x37}}, 0x14}}, 0x40000) 1.550678128s ago: executing program 3 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.426636565s ago: executing program 3 (id=1382): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, 0x0, &(0x7f0000000540)}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0000000000000000000000000000000000000000000000000000000000000100000009000000000a00ffffff950000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x810) 1.273171892s ago: executing program 3 (id=1386): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$packet(0x11, 0x3, 0x300) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x91, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e23, 0x7d, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e37c7125"}}}}, 0x9f) 1.224976351s ago: executing program 0 (id=1387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 970.594465ms ago: executing program 0 (id=1394): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000380)=@hci={0x1f, 0x4, 0x3}, 0x80, 0x0}, 0x24048010) 945.315045ms ago: executing program 4 (id=1396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) 867.739309ms ago: executing program 3 (id=1397): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x2, &(0x7f0000001400), 0x4) 806.527562ms ago: executing program 3 (id=1398): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, 0x0, 0x10) 666.271276ms ago: executing program 1 (id=1401): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 665.372773ms ago: executing program 4 (id=1402): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0xffffffff, 0x0, {0x37}}, 0x14}}, 0x40000) 592.013363ms ago: executing program 1 (id=1403): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700"], 0x70}}, 0x0) 589.81659ms ago: executing program 2 (id=1404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 550.172267ms ago: executing program 1 (id=1405): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f00000003c0)="311437873a", 0x5, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 531.960617ms ago: executing program 4 (id=1406): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 455.771436ms ago: executing program 2 (id=1407): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x60044884) 450.417335ms ago: executing program 4 (id=1408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 428.919245ms ago: executing program 1 (id=1409): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@get={0xe0, 0x13, 0x4ad, 0x70bd2b, 0x25dfdbfb, {{'ecb-cast6-avx\x00'}, '\x00', '\x00', 0x2400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 423.164771ms ago: executing program 2 (id=1410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d00)={0x14, 0x7, 0xa, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048080) 307.85377ms ago: executing program 1 (id=1411): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004002) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b800000019000100fdffffff00000000e000000200"/31], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd29, 0x300, {{@in=@multicast1=0xe0000002, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0xfffffffd}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 307.692524ms ago: executing program 2 (id=1412): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x40047459, 0x0) 270.00742ms ago: executing program 2 (id=1413): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x4c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x8}}, 0x2e, @val={0x8c, 0x10, {0xd4e, "c6950800f7e1", @short="f34948ea656c17be"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x20048020) 251.061084ms ago: executing program 1 (id=1414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 185.132594ms ago: executing program 4 (id=1415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 159.874066ms ago: executing program 2 (id=1416): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 113.643277ms ago: executing program 4 (id=1417): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1000d9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 0s ago: executing program 0 (id=1418): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0xfffffff7, 0x4) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): : 00000246 ORIG_RAX: 0000000000000141 [ 106.433698][ T6239] RAX: ffffffffffffffda RBX: 00007f3f957c5fa0 RCX: 00007f3f9558ebe9 [ 106.433712][ T6239] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 106.433723][ T6239] RBP: 00007f3f96408090 R08: 0000000000000000 R09: 0000000000000000 [ 106.433734][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.433744][ T6239] R13: 00007f3f957c6038 R14: 00007f3f957c5fa0 R15: 00007ffe88175568 [ 106.433774][ T6239] [ 106.708732][ T6242] warning: `syz.2.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.201408][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.67'. [ 107.302748][ T6268] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.68'. [ 107.618389][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'. [ 108.199698][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 108.264678][ T6291] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 108.984536][ T6326] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 109.015991][ T6328] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 109.028954][ T6326] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 109.127417][ T6328] dummy0: entered promiscuous mode [ 109.155139][ T6328] bridge0: port 3(dummy0) entered blocking state [ 109.185149][ T6328] bridge0: port 3(dummy0) entered disabled state [ 109.222035][ T6328] dummy0: entered allmulticast mode [ 109.263934][ T6328] bridge0: port 3(dummy0) entered blocking state [ 109.270431][ T6328] bridge0: port 3(dummy0) entered forwarding state [ 109.977861][ T6366] tipc: Started in network mode [ 109.987990][ T6366] tipc: Node identity f6f1794ba228, cluster identity 4711 [ 109.996247][ T6366] tipc: Enabled bearer , priority 0 [ 110.013451][ T6366] syzkaller0: entered promiscuous mode [ 110.020399][ T6366] syzkaller0: entered allmulticast mode [ 110.076331][ T6370] Bluetooth: MGMT ver 1.23 [ 110.087142][ T6366] tipc: Resetting bearer [ 110.150707][ T6365] tipc: Resetting bearer [ 110.169981][ T6365] tipc: Disabling bearer [ 110.187975][ T6374] tipc: Started in network mode [ 110.193312][ T6374] tipc: Node identity 667fccfddd52, cluster identity 4711 [ 110.200795][ T6374] tipc: Enabled bearer , priority 0 [ 110.209783][ T6374] syzkaller0: entered promiscuous mode [ 110.215665][ T6374] syzkaller0: entered allmulticast mode [ 110.241829][ T6374] tipc: Resetting bearer [ 110.739078][ T6398] __nla_validate_parse: 7 callbacks suppressed [ 110.748054][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 111.005424][ T6408] syz_tun: entered allmulticast mode [ 111.055049][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 111.099983][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 111.136504][ T6408] syz_tun (unregistering): left allmulticast mode [ 111.146988][ T6408] bond0: (slave syz_tun): Releasing backup interface [ 111.245027][ T9] tipc: Node number set to 3140340989 [ 111.324453][ T6421] netlink: 104 bytes leftover after parsing attributes in process `syz.1.116'. [ 111.669078][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.120'. [ 111.860924][ T6441] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.423714][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 112.481997][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 112.547590][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 112.556659][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 113.383955][ T5880] block nbd0: Receive control failed (result -32) [ 113.396324][ T6473] nbd0: detected capacity change from 0 to 128 [ 113.450684][ T6198] block nbd0: Dead connection, failed to find a fallback [ 114.632734][ T6532] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 114.993967][ T6549] netlink: 9 bytes leftover after parsing attributes in process `syz.2.143'. [ 115.091762][ T6549] gretap0: entered promiscuous mode [ 115.858480][ T6584] netlink: 200 bytes leftover after parsing attributes in process `syz.0.151'. [ 115.990081][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 116.317820][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 116.347445][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 116.531632][ T6613] netlink: 'syz.1.159': attribute type 4 has an invalid length. [ 116.968500][ T6621] vlan2: entered allmulticast mode [ 117.281786][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'. [ 117.394382][ T6642] sock: sock_set_timeout: `syz.1.168' (pid 6642) tries to set negative timeout [ 117.713810][ T6653] tipc: Enabled bearer , priority 0 [ 117.773425][ T6656] syzkaller0: entered promiscuous mode [ 117.795005][ T6656] syzkaller0: entered allmulticast mode [ 117.804939][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 117.848652][ T6653] tipc: Resetting bearer [ 117.894147][ T6653] tipc: Disabling bearer [ 117.954437][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 118.128909][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 118.185902][ T6677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.177'. [ 118.280823][ T5931] IPVS: starting estimator thread 0... [ 118.346524][ T6679] tap0: tun_chr_ioctl cmd 1074025675 [ 118.361113][ T6679] tap0: persist disabled [ 118.381274][ T6684] IPVS: using max 29 ests per chain, 69600 per kthread [ 118.549853][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.182'. [ 118.635428][ T6697] lo: entered allmulticast mode [ 118.967723][ T6707] bridge_slave_1: left allmulticast mode [ 118.981690][ T6707] bridge_slave_1: left promiscuous mode [ 119.003756][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.049706][ T6707] bridge_slave_0: left allmulticast mode [ 119.062135][ T6707] bridge_slave_0: left promiscuous mode [ 119.075471][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.320568][ T6696] lo: left allmulticast mode [ 119.351916][ T6720] bridge_slave_0: left allmulticast mode [ 119.357907][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.433011][ T6720] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 119.660785][ T6731] pim6reg1: entered promiscuous mode [ 119.681612][ T6731] pim6reg1: entered allmulticast mode [ 119.730705][ T6742] netlink: 'syz.4.193': attribute type 27 has an invalid length. [ 119.876373][ T6736] syzkaller0: left promiscuous mode [ 119.906172][ T6736] syzkaller0: left allmulticast mode [ 119.961502][ T6749] tipc: Started in network mode [ 119.981168][ T6749] tipc: Node identity 562804970949, cluster identity 4711 [ 120.004916][ T6749] tipc: Enabled bearer , priority 0 [ 120.025656][ T6760] syzkaller0: entered promiscuous mode [ 120.035706][ T6759] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 120.059913][ T6760] syzkaller0: entered allmulticast mode [ 120.069854][ T6759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.809932][ T6745] tipc: Resetting bearer [ 120.846367][ T6198] block nbd0: shutting down sockets [ 120.859155][ T6745] tipc: Disabling bearer [ 120.860023][ T6198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.900834][ T6198] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.937619][ T6198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.961175][ T6198] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.962569][ T6793] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 120.969384][ T6198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.991741][ T6198] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.999989][ T6198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.009674][ T6198] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.050678][ T6198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.115177][ T6198] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.168068][ T6793] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.177743][ T6198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.196593][ T6198] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.221401][ T6198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.230577][ T6198] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.254987][ T6198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.292738][ T6198] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.341409][ T6198] ldm_validate_partition_table(): Disk read failed. [ 121.375536][ T6198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.403353][ T6198] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.426031][ T6198] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.446262][ T6815] nbd: must specify an index to disconnect [ 121.456822][ T6198] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.477270][ T6815] __nla_validate_parse: 11 callbacks suppressed [ 121.477287][ T6815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.213'. [ 121.498602][ T6198] Dev nbd0: unable to read RDB block 0 [ 121.523742][ T6198] nbd0: unable to read partition table [ 121.618186][ T6198] ldm_validate_partition_table(): Disk read failed. [ 121.967030][ T6198] Dev nbd0: unable to read RDB block 0 [ 121.996529][ T6198] nbd0: unable to read partition table [ 122.091403][ T6827] netlink: 132 bytes leftover after parsing attributes in process `syz.3.217'. [ 122.407922][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 122.417010][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 122.569511][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 122.744868][ T6838] macvlan2: entered promiscuous mode [ 123.677842][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 123.708091][ T6903] tc_dump_action: action bad kind [ 123.744292][ T6901] tipc: Enabled bearer , priority 0 [ 123.753021][ T6901] syzkaller0: entered promiscuous mode [ 123.758861][ T6901] syzkaller0: entered allmulticast mode [ 124.045270][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 124.063294][ T6907] tipc: Resetting bearer [ 124.105646][ T6899] tipc: Resetting bearer [ 124.136000][ T6899] tipc: Disabling bearer [ 125.409249][ T6929] netlink: 'syz.3.245': attribute type 2 has an invalid length. [ 125.458606][ T6954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.252'. [ 125.533701][ T6954] FAULT_INJECTION: forcing a failure. [ 125.533701][ T6954] name failslab, interval 1, probability 0, space 0, times 0 [ 125.547756][ T6954] CPU: 1 UID: 0 PID: 6954 Comm: syz.0.252 Not tainted syzkaller #0 PREEMPT(full) [ 125.547782][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.547794][ T6954] Call Trace: [ 125.547802][ T6954] [ 125.547810][ T6954] dump_stack_lvl+0x189/0x250 [ 125.547840][ T6954] ? __pfx____ratelimit+0x10/0x10 [ 125.547861][ T6954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.547885][ T6954] ? __pfx__printk+0x10/0x10 [ 125.547919][ T6954] ? __pfx___might_resched+0x10/0x10 [ 125.547936][ T6954] ? fs_reclaim_acquire+0x7d/0x100 [ 125.547960][ T6954] should_fail_ex+0x414/0x560 [ 125.547993][ T6954] should_failslab+0xa8/0x100 [ 125.548024][ T6954] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 125.548053][ T6954] ? kobject_set_name_vargs+0x61/0x110 [ 125.548082][ T6954] kstrdup+0x42/0x100 [ 125.548105][ T6954] kobject_set_name_vargs+0x61/0x110 [ 125.548131][ T6954] dev_set_name+0xd4/0x120 [ 125.548175][ T6954] ? __pfx_dev_set_name+0x10/0x10 [ 125.548209][ T6954] ? device_initialize+0x24b/0x440 [ 125.548230][ T6954] netdev_register_kobject+0xb7/0x310 [ 125.548261][ T6954] register_netdevice+0x126c/0x1ae0 [ 125.548302][ T6954] ? __pfx_register_netdevice+0x10/0x10 [ 125.548336][ T6954] ? net_generic+0x1e/0x240 [ 125.548370][ T6954] ip6_tnl_create2+0x78/0x150 [ 125.548395][ T6954] ip6_tnl_newlink+0x311/0x620 [ 125.548419][ T6954] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 125.548447][ T6954] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 125.548469][ T6954] rtnl_newlink_create+0x310/0xb00 [ 125.548496][ T6954] ? __mutex_lock+0x5bb/0x1350 [ 125.548522][ T6954] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 125.548547][ T6954] ? __pfx___mutex_lock+0x10/0x10 [ 125.548578][ T6954] ? ns_capable+0x8a/0xf0 [ 125.548602][ T6954] rtnl_newlink+0x16d6/0x1c70 [ 125.548622][ T6954] ? netlink_sendmsg+0x805/0xb30 [ 125.548675][ T6954] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.548723][ T6954] ? kasan_quarantine_put+0xdd/0x220 [ 125.548748][ T6954] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.548777][ T6954] ? nlmon_xmit+0xb0/0x100 [ 125.548796][ T6954] ? kmem_cache_free+0x18f/0x400 [ 125.548833][ T6954] ? __local_bh_enable_ip+0x12d/0x1c0 [ 125.548854][ T6954] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.548876][ T6954] ? __local_bh_enable_ip+0x12d/0x1c0 [ 125.548896][ T6954] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 125.548921][ T6954] ? __dev_queue_xmit+0x27b/0x3b50 [ 125.548947][ T6954] ? __dev_queue_xmit+0x27b/0x3b50 [ 125.548970][ T6954] ? __dev_queue_xmit+0x27b/0x3b50 [ 125.548998][ T6954] ? __dev_queue_xmit+0x1d79/0x3b50 [ 125.549030][ T6954] ? __lock_acquire+0xab9/0xd20 [ 125.549090][ T6954] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.549110][ T6954] rtnetlink_rcv_msg+0x7cf/0xb70 [ 125.549131][ T6954] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 125.549146][ T6954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.549160][ T6954] ? ref_tracker_free+0x63a/0x7d0 [ 125.549185][ T6954] ? __asan_memcpy+0x40/0x70 [ 125.549203][ T6954] ? __pfx_ref_tracker_free+0x10/0x10 [ 125.549224][ T6954] ? __skb_clone+0x63/0x7a0 [ 125.549253][ T6954] netlink_rcv_skb+0x205/0x470 [ 125.549276][ T6954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.549298][ T6954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.549333][ T6954] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.549370][ T6954] netlink_unicast+0x82f/0x9e0 [ 125.549412][ T6954] ? __pfx_netlink_unicast+0x10/0x10 [ 125.549444][ T6954] ? netlink_sendmsg+0x642/0xb30 [ 125.549463][ T6954] ? skb_put+0x11b/0x210 [ 125.549490][ T6954] netlink_sendmsg+0x805/0xb30 [ 125.549523][ T6954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.549549][ T6954] ? aa_sock_msg_perm+0xf1/0x1d0 [ 125.549571][ T6954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.549594][ T6954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.549617][ T6954] __sock_sendmsg+0x21c/0x270 [ 125.549651][ T6954] ____sys_sendmsg+0x505/0x830 [ 125.549683][ T6954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.549719][ T6954] ? import_iovec+0x74/0xa0 [ 125.549748][ T6954] ___sys_sendmsg+0x21f/0x2a0 [ 125.549776][ T6954] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.549844][ T6954] ? __fget_files+0x2a/0x420 [ 125.549861][ T6954] ? __fget_files+0x3a0/0x420 [ 125.549901][ T6954] __x64_sys_sendmsg+0x19b/0x260 [ 125.549927][ T6954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.549960][ T6954] ? __pfx_ksys_write+0x10/0x10 [ 125.549991][ T6954] ? do_syscall_64+0xbe/0x3b0 [ 125.550016][ T6954] do_syscall_64+0xfa/0x3b0 [ 125.550038][ T6954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.550055][ T6954] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 125.550073][ T6954] ? clear_bhb_loop+0x60/0xb0 [ 125.550096][ T6954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.550114][ T6954] RIP: 0033:0x7f3f9558ebe9 [ 125.550131][ T6954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.550146][ T6954] RSP: 002b:00007f3f96408038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.550165][ T6954] RAX: ffffffffffffffda RBX: 00007f3f957c5fa0 RCX: 00007f3f9558ebe9 [ 125.550178][ T6954] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 125.550189][ T6954] RBP: 00007f3f96408090 R08: 0000000000000000 R09: 0000000000000000 [ 125.550200][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.550211][ T6954] R13: 00007f3f957c6038 R14: 00007f3f957c5fa0 R15: 00007ffe88175568 [ 125.550259][ T6954] [ 125.630167][ T6929] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 126.802456][ T6990] netlink: 'syz.3.264': attribute type 21 has an invalid length. [ 126.810238][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 126.834339][ T6982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.261'. [ 126.849750][ T6989] FAULT_INJECTION: forcing a failure. [ 126.849750][ T6989] name failslab, interval 1, probability 0, space 0, times 0 [ 126.871299][ T6989] CPU: 1 UID: 0 PID: 6989 Comm: syz.2.265 Not tainted syzkaller #0 PREEMPT(full) [ 126.871325][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.871337][ T6989] Call Trace: [ 126.871345][ T6989] [ 126.871354][ T6989] dump_stack_lvl+0x189/0x250 [ 126.871382][ T6989] ? __pfx____ratelimit+0x10/0x10 [ 126.871405][ T6989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.871428][ T6989] ? __pfx__printk+0x10/0x10 [ 126.871466][ T6989] ? __mutex_trylock_common+0x153/0x260 [ 126.871489][ T6989] ? __pfx___mutex_trylock_common+0x10/0x10 [ 126.871512][ T6989] should_fail_ex+0x414/0x560 [ 126.871541][ T6989] should_failslab+0xa8/0x100 [ 126.871571][ T6989] __kmalloc_cache_noprof+0x70/0x3d0 [ 126.871595][ T6989] ? __hw_addr_add_ex+0x1f4/0x770 [ 126.871623][ T6989] __hw_addr_add_ex+0x1f4/0x770 [ 126.871653][ T6989] dev_addr_init+0x14f/0x230 [ 126.871680][ T6989] ? __pfx_dev_addr_init+0x10/0x10 [ 126.871717][ T6989] alloc_netdev_mqs+0x2ae/0x11b0 [ 126.871740][ T6989] ? __pfx_vlan_setup+0x10/0x10 [ 126.871768][ T6989] rtnl_create_link+0x31f/0xd10 [ 126.871802][ T6989] rtnl_newlink_create+0x25c/0xb00 [ 126.871828][ T6989] ? __mutex_lock+0x5bb/0x1350 [ 126.871855][ T6989] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 126.871881][ T6989] ? __pfx___mutex_lock+0x10/0x10 [ 126.871911][ T6989] ? ns_capable+0x8a/0xf0 [ 126.871934][ T6989] rtnl_newlink+0x16d6/0x1c70 [ 126.871953][ T6989] ? netlink_sendmsg+0x805/0xb30 [ 126.872011][ T6989] ? __pfx_rtnl_newlink+0x10/0x10 [ 126.872057][ T6989] ? kasan_quarantine_put+0xdd/0x220 [ 126.872082][ T6989] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.872109][ T6989] ? nlmon_xmit+0xb0/0x100 [ 126.872128][ T6989] ? kmem_cache_free+0x18f/0x400 [ 126.872175][ T6989] ? __local_bh_enable_ip+0x12d/0x1c0 [ 126.872193][ T6989] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.872213][ T6989] ? __local_bh_enable_ip+0x12d/0x1c0 [ 126.872231][ T6989] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 126.872254][ T6989] ? __dev_queue_xmit+0x27b/0x3b50 [ 126.872278][ T6989] ? __dev_queue_xmit+0x27b/0x3b50 [ 126.872299][ T6989] ? __dev_queue_xmit+0x27b/0x3b50 [ 126.872324][ T6989] ? __dev_queue_xmit+0x1d79/0x3b50 [ 126.872357][ T6989] ? __lock_acquire+0xab9/0xd20 [ 126.872411][ T6989] ? __pfx_rtnl_newlink+0x10/0x10 [ 126.872429][ T6989] rtnetlink_rcv_msg+0x7cf/0xb70 [ 126.872451][ T6989] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 126.872469][ T6989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.872485][ T6989] ? ref_tracker_free+0x63a/0x7d0 [ 126.872512][ T6989] ? __asan_memcpy+0x40/0x70 [ 126.872531][ T6989] ? __pfx_ref_tracker_free+0x10/0x10 [ 126.872556][ T6989] ? __skb_clone+0x63/0x7a0 [ 126.872587][ T6989] netlink_rcv_skb+0x205/0x470 [ 126.872608][ T6989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.872628][ T6989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.872657][ T6989] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.872685][ T6989] netlink_unicast+0x82f/0x9e0 [ 126.872723][ T6989] ? __pfx_netlink_unicast+0x10/0x10 [ 126.872752][ T6989] ? netlink_sendmsg+0x642/0xb30 [ 126.872769][ T6989] ? skb_put+0x11b/0x210 [ 126.872793][ T6989] netlink_sendmsg+0x805/0xb30 [ 126.872822][ T6989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.872846][ T6989] ? aa_sock_msg_perm+0xf1/0x1d0 [ 126.872865][ T6989] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.872885][ T6989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.872906][ T6989] __sock_sendmsg+0x21c/0x270 [ 126.872935][ T6989] ____sys_sendmsg+0x52d/0x830 [ 126.872969][ T6989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.873002][ T6989] ? import_iovec+0x74/0xa0 [ 126.873028][ T6989] ___sys_sendmsg+0x21f/0x2a0 [ 126.873053][ T6989] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.873124][ T6989] ? __might_fault+0xb0/0x130 [ 126.873154][ T6989] __sys_sendmmsg+0x227/0x430 [ 126.873182][ T6989] ? __pfx___sys_sendmmsg+0x10/0x10 [ 126.873202][ T6989] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 126.873250][ T6989] ? ksys_write+0x22a/0x250 [ 126.873277][ T6989] ? __pfx_ksys_write+0x10/0x10 [ 126.873298][ T6989] ? rcu_is_watching+0x15/0xb0 [ 126.873324][ T6989] __x64_sys_sendmmsg+0xa0/0xc0 [ 126.873348][ T6989] do_syscall_64+0xfa/0x3b0 [ 126.873367][ T6989] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.873385][ T6989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.873403][ T6989] ? clear_bhb_loop+0x60/0xb0 [ 126.873426][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.873443][ T6989] RIP: 0033:0x7fad17f8ebe9 [ 126.873459][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.873474][ T6989] RSP: 002b:00007fad18da5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 126.873493][ T6989] RAX: ffffffffffffffda RBX: 00007fad181c5fa0 RCX: 00007fad17f8ebe9 [ 126.873507][ T6989] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 126.873519][ T6989] RBP: 00007fad18da5090 R08: 0000000000000000 R09: 0000000000000000 [ 126.873530][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.873540][ T6989] R13: 00007fad181c6038 R14: 00007fad181c5fa0 R15: 00007ffd97fe48e8 [ 126.873571][ T6989] [ 126.877207][ T6993] FAULT_INJECTION: forcing a failure. [ 126.877207][ T6993] name failslab, interval 1, probability 0, space 0, times 0 [ 126.949918][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.264'. [ 126.981208][ T6993] CPU: 1 UID: 0 PID: 6993 Comm: syz.0.266 Not tainted syzkaller #0 PREEMPT(full) [ 126.981238][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.981252][ T6993] Call Trace: [ 126.981261][ T6993] [ 126.981270][ T6993] dump_stack_lvl+0x189/0x250 [ 126.981304][ T6993] ? __pfx____ratelimit+0x10/0x10 [ 126.981329][ T6993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.981356][ T6993] ? __pfx__printk+0x10/0x10 [ 126.981394][ T6993] ? __pfx___might_resched+0x10/0x10 [ 126.981423][ T6993] should_fail_ex+0x414/0x560 [ 126.981459][ T6993] should_failslab+0xa8/0x100 [ 126.981495][ T6993] __kmalloc_cache_noprof+0x70/0x3d0 [ 126.981525][ T6993] ? igmpv3_add_delrec+0xbd/0x560 [ 126.981558][ T6993] igmpv3_add_delrec+0xbd/0x560 [ 126.981593][ T6993] __igmp_group_dropped+0x6e5/0x8f0 [ 126.981625][ T6993] ? __pfx___igmp_group_dropped+0x10/0x10 [ 126.981665][ T6993] __ip_mc_dec_group+0x3e5/0x690 [ 126.981695][ T6993] ip_mc_drop_socket+0x1d3/0x270 [ 126.981727][ T6993] inet_release+0x4b/0x190 [ 126.981761][ T6993] sock_close+0xc3/0x240 [ 126.981794][ T6993] ? __pfx_sock_close+0x10/0x10 [ 126.981824][ T6993] __fput+0x44c/0xa70 [ 126.981863][ T6993] fput_close_sync+0x119/0x200 [ 126.981891][ T6993] ? __pfx_fput_close_sync+0x10/0x10 [ 126.981930][ T6993] __x64_sys_close+0x7f/0x110 [ 126.981965][ T6993] do_syscall_64+0xfa/0x3b0 [ 126.981989][ T6993] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.982013][ T6993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.982036][ T6993] ? clear_bhb_loop+0x60/0xb0 [ 126.982065][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.982087][ T6993] RIP: 0033:0x7f3f9558ebe9 [ 126.982109][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.982126][ T6993] RSP: 002b:00007f3f96408038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 126.982148][ T6993] RAX: ffffffffffffffda RBX: 00007f3f957c5fa0 RCX: 00007f3f9558ebe9 [ 126.982165][ T6993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 126.982176][ T6993] RBP: 00007f3f96408090 R08: 0000000000000000 R09: 0000000000000000 [ 126.982190][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.982202][ T6993] R13: 00007f3f957c6038 R14: 00007f3f957c5fa0 R15: 00007ffe88175568 [ 126.982239][ T6993] [ 127.255250][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.267'. [ 127.322514][ T7002] netlink: 92 bytes leftover after parsing attributes in process `syz.1.268'. [ 127.555965][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 127.794147][ T7000] bond0: entered promiscuous mode [ 127.828862][ T7000] bond_slave_0: entered promiscuous mode [ 127.860328][ T7000] bond_slave_1: entered promiscuous mode [ 127.896395][ T7000] bond0: left promiscuous mode [ 127.918741][ T7000] bond_slave_0: left promiscuous mode [ 127.932080][ T7000] bond_slave_1: left promiscuous mode [ 128.172589][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 128.231613][ T5938] IPVS: starting estimator thread 0... [ 128.371795][ T7031] IPVS: using max 25 ests per chain, 60000 per kthread [ 128.489499][ T7026] netlink: 'syz.3.274': attribute type 10 has an invalid length. [ 128.562247][ T7026] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.689111][ T7040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.276'. [ 129.332966][ T7060] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 130.200331][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.286'. [ 130.212322][ T7085] netlink: 112 bytes leftover after parsing attributes in process `syz.3.286'. [ 131.319013][ T7136] Set syz0 is full, maxelem 0 reached [ 132.059345][ T7159] __nla_validate_parse: 4 callbacks suppressed [ 132.059366][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 132.125518][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 132.187596][ T7159] netlink: 'syz.4.301': attribute type 15 has an invalid length. [ 132.998113][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.007947][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.520628][ T7213] delete_channel: no stack [ 134.309833][ T7251] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 134.388311][ T7262] sctp: [Deprecated]: syz.2.329 (pid 7262) Use of int in max_burst socket option. [ 134.388311][ T7262] Use struct sctp_assoc_value instead [ 134.423469][ T7261] tipc: Started in network mode [ 134.443599][ T7261] tipc: Node identity f687fc0d7a0f, cluster identity 4711 [ 134.450936][ T7261] tipc: Enabled bearer , priority 0 [ 134.570725][ T7268] tipc: Resetting bearer [ 134.640422][ T7260] tipc: Disabling bearer [ 134.769065][ T7276] netlink: 4748 bytes leftover after parsing attributes in process `syz.4.332'. [ 134.989972][ T7285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.335'. [ 135.020370][ T7285] FAULT_INJECTION: forcing a failure. [ 135.020370][ T7285] name failslab, interval 1, probability 0, space 0, times 0 [ 135.044067][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.1.335 Not tainted syzkaller #0 PREEMPT(full) [ 135.044092][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.044104][ T7285] Call Trace: [ 135.044112][ T7285] [ 135.044120][ T7285] dump_stack_lvl+0x189/0x250 [ 135.044149][ T7285] ? __pfx____ratelimit+0x10/0x10 [ 135.044170][ T7285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.044194][ T7285] ? __pfx__printk+0x10/0x10 [ 135.044246][ T7285] ? __pfx___might_resched+0x10/0x10 [ 135.044266][ T7285] ? fs_reclaim_acquire+0x7d/0x100 [ 135.044296][ T7285] should_fail_ex+0x414/0x560 [ 135.044328][ T7285] should_failslab+0xa8/0x100 [ 135.044359][ T7285] __kmalloc_cache_noprof+0x70/0x3d0 [ 135.044385][ T7285] ? device_add+0xbe/0xb50 [ 135.044410][ T7285] device_add+0xbe/0xb50 [ 135.044429][ T7285] ? device_initialize+0x24b/0x440 [ 135.044452][ T7285] netdev_register_kobject+0x178/0x310 [ 135.044485][ T7285] register_netdevice+0x126c/0x1ae0 [ 135.044530][ T7285] ? __pfx_register_netdevice+0x10/0x10 [ 135.044566][ T7285] ? net_generic+0x1e/0x240 [ 135.044595][ T7285] ip6_tnl_create2+0x78/0x150 [ 135.044622][ T7285] ip6_tnl_newlink+0x311/0x620 [ 135.044648][ T7285] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 135.044676][ T7285] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 135.044700][ T7285] rtnl_newlink_create+0x310/0xb00 [ 135.044729][ T7285] ? __lock_acquire+0xab9/0xd20 [ 135.044765][ T7285] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 135.044791][ T7285] ? __pfx___mutex_lock+0x10/0x10 [ 135.044825][ T7285] ? ns_capable+0x8a/0xf0 [ 135.044849][ T7285] rtnl_newlink+0x16d6/0x1c70 [ 135.044871][ T7285] ? netlink_sendmsg+0x805/0xb30 [ 135.044906][ T7285] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.044952][ T7285] ? kasan_quarantine_put+0xdd/0x220 [ 135.044976][ T7285] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.045004][ T7285] ? nlmon_xmit+0xb0/0x100 [ 135.045022][ T7285] ? kmem_cache_free+0x18f/0x400 [ 135.045057][ T7285] ? __local_bh_enable_ip+0x12d/0x1c0 [ 135.045077][ T7285] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.045098][ T7285] ? __local_bh_enable_ip+0x12d/0x1c0 [ 135.045117][ T7285] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 135.045141][ T7285] ? __dev_queue_xmit+0x27b/0x3b50 [ 135.045167][ T7285] ? __dev_queue_xmit+0x27b/0x3b50 [ 135.045190][ T7285] ? __dev_queue_xmit+0x27b/0x3b50 [ 135.045216][ T7285] ? __dev_queue_xmit+0x1d79/0x3b50 [ 135.045248][ T7285] ? __lock_acquire+0xab9/0xd20 [ 135.045310][ T7285] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.045329][ T7285] rtnetlink_rcv_msg+0x7cf/0xb70 [ 135.045353][ T7285] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 135.045372][ T7285] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.045389][ T7285] ? ref_tracker_free+0x63a/0x7d0 [ 135.045417][ T7285] ? __asan_memcpy+0x40/0x70 [ 135.045438][ T7285] ? __pfx_ref_tracker_free+0x10/0x10 [ 135.045463][ T7285] ? __skb_clone+0x63/0x7a0 [ 135.045497][ T7285] netlink_rcv_skb+0x205/0x470 [ 135.045519][ T7285] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.045541][ T7285] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.045575][ T7285] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.045604][ T7285] netlink_unicast+0x82f/0x9e0 [ 135.045643][ T7285] ? __pfx_netlink_unicast+0x10/0x10 [ 135.045675][ T7285] ? netlink_sendmsg+0x642/0xb30 [ 135.045693][ T7285] ? skb_put+0x11b/0x210 [ 135.045718][ T7285] netlink_sendmsg+0x805/0xb30 [ 135.045753][ T7285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.045773][ T7285] ? aa_sock_msg_perm+0xf1/0x1d0 [ 135.045790][ T7285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.045807][ T7285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.045825][ T7285] __sock_sendmsg+0x21c/0x270 [ 135.045851][ T7285] ____sys_sendmsg+0x505/0x830 [ 135.045875][ T7285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.045902][ T7285] ? import_iovec+0x74/0xa0 [ 135.045924][ T7285] ___sys_sendmsg+0x21f/0x2a0 [ 135.045945][ T7285] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.045995][ T7285] ? __fget_files+0x2a/0x420 [ 135.046009][ T7285] ? __fget_files+0x3a0/0x420 [ 135.046032][ T7285] __x64_sys_sendmsg+0x19b/0x260 [ 135.046054][ T7285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.046082][ T7285] ? __pfx_ksys_write+0x10/0x10 [ 135.046101][ T7285] ? rcu_is_watching+0x15/0xb0 [ 135.046121][ T7285] ? do_syscall_64+0xbe/0x3b0 [ 135.046142][ T7285] do_syscall_64+0xfa/0x3b0 [ 135.046158][ T7285] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.046174][ T7285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.046189][ T7285] ? clear_bhb_loop+0x60/0xb0 [ 135.046209][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.046224][ T7285] RIP: 0033:0x7fc4a198ebe9 [ 135.046239][ T7285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.046252][ T7285] RSP: 002b:00007fc49fbee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.046273][ T7285] RAX: ffffffffffffffda RBX: 00007fc4a1bc5fa0 RCX: 00007fc4a198ebe9 [ 135.046285][ T7285] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 135.046295][ T7285] RBP: 00007fc49fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 135.046304][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.046313][ T7285] R13: 00007fc4a1bc6038 R14: 00007fc4a1bc5fa0 R15: 00007ffdc022c908 [ 135.046339][ T7285] [ 135.968049][ T7309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.344'. [ 136.147516][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 136.204919][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 136.287392][ T7323] gretap1: entered allmulticast mode [ 136.684663][ T43] IPVS: starting estimator thread 0... [ 136.802290][ T7341] IPVS: using max 29 ests per chain, 69600 per kthread [ 137.128151][ T7352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.358'. [ 137.227953][ T7374] lo: entered allmulticast mode [ 137.334870][ T7373] tipc: Started in network mode [ 137.340318][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 137.355994][ T7373] tipc: Node identity a6468e62017e, cluster identity 4711 [ 137.367649][ T7373] tipc: Enabled bearer , priority 0 [ 137.388684][ T7376] syzkaller0: entered promiscuous mode [ 137.424915][ T7376] syzkaller0: entered allmulticast mode [ 137.630670][ T7372] lo: left allmulticast mode [ 137.667475][ T7386] tipc: Resetting bearer [ 137.708209][ T7369] tipc: Resetting bearer [ 137.802219][ T7369] tipc: Disabling bearer [ 138.115684][ T7398] tipc: Enabled bearer , priority 0 [ 138.212961][ T7406] syzkaller0: entered promiscuous mode [ 138.218479][ T7406] syzkaller0: entered allmulticast mode [ 138.268832][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.371'. [ 138.295461][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'. [ 138.324519][ T7407] team0: No ports can be present during mode change [ 138.422470][ T7383] sch_fq: defrate 257 ignored. [ 138.433521][ T7383] tipc: Resetting bearer [ 138.710256][ T7381] tipc: Resetting bearer [ 138.735352][ T7381] tipc: Disabling bearer [ 139.124278][ T7443] netlink: 256 bytes leftover after parsing attributes in process `syz.2.379'. [ 139.151469][ T7443] netlink: 72 bytes leftover after parsing attributes in process `syz.2.379'. [ 139.404917][ T7461] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 139.430051][ T7461] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 139.470930][ T7464] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 139.484872][ T7464] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 139.574499][ T7472] tipc: Enabled bearer , priority 0 [ 139.595424][ T7472] syzkaller0: entered promiscuous mode [ 139.611439][ T7472] syzkaller0: entered allmulticast mode [ 139.700918][ T7472] tipc: Resetting bearer [ 139.728876][ T7472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.391'. [ 139.752649][ T7472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.391'. [ 139.778924][ T7471] tipc: Resetting bearer [ 139.815784][ T7471] tipc: Disabling bearer [ 140.079224][ T7492] Bluetooth: MGMT ver 1.23 [ 140.133523][ T7492] syzkaller1: entered promiscuous mode [ 140.154190][ T7492] syzkaller1: entered allmulticast mode [ 140.208128][ T7500] nbd: must specify at least one socket [ 141.265046][ T7530] tipc: Enabling of bearer rejected, failed to enable media [ 141.813908][ T7562] Bluetooth: MGMT ver 1.23 [ 142.324157][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.426'. [ 142.350346][ T7579] FAULT_INJECTION: forcing a failure. [ 142.350346][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 142.361490][ T7577] netlink: 52 bytes leftover after parsing attributes in process `syz.4.426'. [ 142.381307][ T7579] CPU: 0 UID: 0 PID: 7579 Comm: syz.3.425 Not tainted syzkaller #0 PREEMPT(full) [ 142.381349][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.381368][ T7579] Call Trace: [ 142.381380][ T7579] [ 142.381394][ T7579] dump_stack_lvl+0x189/0x250 [ 142.381439][ T7579] ? __pfx____ratelimit+0x10/0x10 [ 142.381474][ T7579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.381504][ T7579] ? __pfx__printk+0x10/0x10 [ 142.381538][ T7579] ? __pfx___might_resched+0x10/0x10 [ 142.381556][ T7579] ? fs_reclaim_acquire+0x7d/0x100 [ 142.381579][ T7579] should_fail_ex+0x414/0x560 [ 142.381610][ T7579] ? page_pool_create_percpu+0x32a/0xbe0 [ 142.381636][ T7579] should_failslab+0xa8/0x100 [ 142.381667][ T7579] __kvmalloc_node_noprof+0x161/0x5f0 [ 142.381695][ T7579] ? page_pool_create_percpu+0x32a/0xbe0 [ 142.381726][ T7579] page_pool_create_percpu+0x32a/0xbe0 [ 142.381752][ T7579] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 142.381776][ T7579] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 142.381800][ T7579] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 142.381827][ T7579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.381859][ T7579] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 142.381878][ T7579] ? 0xffffffffa0205540 [ 142.381905][ T7579] ? 0xffffffffa0205540 [ 142.381967][ T7579] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 142.382002][ T7579] ? _copy_from_user+0x94/0xb0 [ 142.382026][ T7579] ? bpf_test_init+0x133/0x170 [ 142.382042][ T7579] ? xdp_convert_md_to_buff+0x5b/0x330 [ 142.382065][ T7579] bpf_prog_test_run_xdp+0x713/0x1000 [ 142.382113][ T7579] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.382137][ T7579] ? __fget_files+0x2a/0x420 [ 142.382158][ T7579] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 142.382177][ T7579] bpf_prog_test_run+0x2c7/0x340 [ 142.382205][ T7579] __sys_bpf+0x581/0x870 [ 142.382230][ T7579] ? __pfx___sys_bpf+0x10/0x10 [ 142.382266][ T7579] ? ksys_write+0x22a/0x250 [ 142.382292][ T7579] ? __pfx_ksys_write+0x10/0x10 [ 142.382313][ T7579] ? rcu_is_watching+0x15/0xb0 [ 142.382338][ T7579] __x64_sys_bpf+0x7c/0x90 [ 142.382360][ T7579] do_syscall_64+0xfa/0x3b0 [ 142.382379][ T7579] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.382396][ T7579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.382413][ T7579] ? clear_bhb_loop+0x60/0xb0 [ 142.382435][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.382451][ T7579] RIP: 0033:0x7f48c018ebe9 [ 142.382467][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.382482][ T7579] RSP: 002b:00007f48be3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.382501][ T7579] RAX: ffffffffffffffda RBX: 00007f48c03c5fa0 RCX: 00007f48c018ebe9 [ 142.382514][ T7579] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 142.382526][ T7579] RBP: 00007f48be3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.382537][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.382547][ T7579] R13: 00007f48c03c6038 R14: 00007f48c03c5fa0 R15: 00007fff3a8d5f48 [ 142.382576][ T7579] [ 142.383452][ T7579] page_pool_create_percpu() gave up with errno -12 [ 142.423929][ T7577] netlink: 36 bytes leftover after parsing attributes in process `syz.4.426'. [ 142.634041][ T7585] tipc: Enabled bearer , priority 0 [ 142.722940][ T7577] FAULT_INJECTION: forcing a failure. [ 142.722940][ T7577] name failslab, interval 1, probability 0, space 0, times 0 [ 142.755421][ T7583] netlink: 48 bytes leftover after parsing attributes in process `syz.2.427'. [ 142.775323][ T7588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.428'. [ 142.784907][ T7577] CPU: 1 UID: 0 PID: 7577 Comm: syz.4.426 Not tainted syzkaller #0 PREEMPT(full) [ 142.784932][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.784943][ T7577] Call Trace: [ 142.784951][ T7577] [ 142.784959][ T7577] dump_stack_lvl+0x189/0x250 [ 142.784987][ T7577] ? __pfx____ratelimit+0x10/0x10 [ 142.785007][ T7577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.785031][ T7577] ? __pfx__printk+0x10/0x10 [ 142.785063][ T7577] ? __pfx___might_resched+0x10/0x10 [ 142.785081][ T7577] ? fs_reclaim_acquire+0x7d/0x100 [ 142.785104][ T7577] should_fail_ex+0x414/0x560 [ 142.785135][ T7577] should_failslab+0xa8/0x100 [ 142.785164][ T7577] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 142.785191][ T7577] ? __alloc_skb+0x112/0x2d0 [ 142.785215][ T7577] __alloc_skb+0x112/0x2d0 [ 142.785239][ T7577] netlink_ack+0x146/0xa50 [ 142.785256][ T7577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.785273][ T7577] ? ref_tracker_free+0x63a/0x7d0 [ 142.785301][ T7577] ? __asan_memcpy+0x40/0x70 [ 142.785322][ T7577] ? __pfx_ref_tracker_free+0x10/0x10 [ 142.785346][ T7577] ? __skb_clone+0x63/0x7a0 [ 142.785379][ T7577] netlink_rcv_skb+0x28c/0x470 [ 142.785399][ T7577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.785420][ T7577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.785452][ T7577] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.785480][ T7577] netlink_unicast+0x82f/0x9e0 [ 142.785517][ T7577] ? __pfx_netlink_unicast+0x10/0x10 [ 142.785548][ T7577] ? netlink_sendmsg+0x642/0xb30 [ 142.785565][ T7577] ? skb_put+0x11b/0x210 [ 142.785589][ T7577] netlink_sendmsg+0x805/0xb30 [ 142.785627][ T7577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.785651][ T7577] ? aa_sock_msg_perm+0xf1/0x1d0 [ 142.785671][ T7577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.785692][ T7577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.785713][ T7577] __sock_sendmsg+0x21c/0x270 [ 142.785744][ T7577] ____sys_sendmsg+0x52d/0x830 [ 142.785773][ T7577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.785805][ T7577] ? import_iovec+0x74/0xa0 [ 142.785832][ T7577] ___sys_sendmsg+0x21f/0x2a0 [ 142.785858][ T7577] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.785925][ T7577] ? __might_fault+0xb0/0x130 [ 142.785956][ T7577] __sys_sendmmsg+0x227/0x430 [ 142.785985][ T7577] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.786006][ T7577] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 142.786055][ T7577] ? ksys_write+0x22a/0x250 [ 142.786082][ T7577] ? __pfx_ksys_write+0x10/0x10 [ 142.786104][ T7577] ? rcu_is_watching+0x15/0xb0 [ 142.786130][ T7577] __x64_sys_sendmmsg+0xa0/0xc0 [ 142.786155][ T7577] do_syscall_64+0xfa/0x3b0 [ 142.786176][ T7577] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.786195][ T7577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.786214][ T7577] ? clear_bhb_loop+0x60/0xb0 [ 142.786237][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.786255][ T7577] RIP: 0033:0x7f0377b8ebe9 [ 142.786272][ T7577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.786287][ T7577] RSP: 002b:00007f03789a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.786307][ T7577] RAX: ffffffffffffffda RBX: 00007f0377dc5fa0 RCX: 00007f0377b8ebe9 [ 142.786320][ T7577] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 142.786333][ T7577] RBP: 00007f03789a3090 R08: 0000000000000000 R09: 0000000000000000 [ 142.786344][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.786354][ T7577] R13: 00007f0377dc6038 R14: 00007f0377dc5fa0 R15: 00007ffe6fb6bf88 [ 142.786384][ T7577] [ 143.380667][ T7587] syzkaller0: entered promiscuous mode [ 143.419704][ T7587] syzkaller0: entered allmulticast mode [ 143.458403][ T7587] tipc: Resetting bearer [ 143.530896][ T49] tipc: Resetting bearer [ 143.623063][ T7585] tipc: Resetting bearer [ 143.785412][ T43] tipc: Node number set to 1423538507 [ 144.241793][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 145.996149][ T7585] tipc: Disabling bearer [ 146.169248][ T7634] netlink: 'syz.3.439': attribute type 21 has an invalid length. [ 146.189008][ T7634] netlink: 128 bytes leftover after parsing attributes in process `syz.3.439'. [ 146.211680][ T7634] netlink: 'syz.3.439': attribute type 5 has an invalid length. [ 146.273997][ T7634] netlink: 3 bytes leftover after parsing attributes in process `syz.3.439'. [ 146.350787][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 146.443563][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.444'. [ 146.600041][ T7659] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 146.632494][ T7659] netlink: 'syz.1.446': attribute type 3 has an invalid length. [ 148.295840][ T7722] __nla_validate_parse: 4 callbacks suppressed [ 148.295860][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 148.788767][ T7732] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 148.899594][ T7732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.034315][ T7742] macvlan2: entered promiscuous mode [ 149.039670][ T7742] macvlan2: entered allmulticast mode [ 149.070164][ T7742] bond2: entered promiscuous mode [ 149.142117][ T7742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 149.194221][ T7742] bond2: left promiscuous mode [ 149.212120][ T7750] netlink: 4748 bytes leftover after parsing attributes in process `syz.1.472'. [ 149.247482][ T7752] netlink: 'syz.2.468': attribute type 15 has an invalid length. [ 149.341385][ T7752] block nbd1: server does not support multiple connections per device. [ 149.364260][ T7752] block nbd1: shutting down sockets [ 149.425473][ T7735] bond2: (slave veth3): Enslaving as an active interface with a down link [ 149.453099][ T7759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.473'. [ 149.475044][ T7738] gretap1: entered promiscuous mode [ 149.498107][ T7738] bond2: (slave gretap1): making interface the new active one [ 149.513293][ T7738] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 149.674078][ T7759] nbd: socks must be embedded in a SOCK_ITEM attr [ 149.755400][ T5882] block nbd64: NBD_DISCONNECT [ 150.244716][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 150.372961][ T7781] FAULT_INJECTION: forcing a failure. [ 150.372961][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 150.460026][ T7783] netlink: 'syz.3.477': attribute type 10 has an invalid length. [ 150.468223][ T7781] CPU: 0 UID: 0 PID: 7781 Comm: syz.4.478 Not tainted syzkaller #0 PREEMPT(full) [ 150.468249][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.468261][ T7781] Call Trace: [ 150.468269][ T7781] [ 150.468278][ T7781] dump_stack_lvl+0x189/0x250 [ 150.468306][ T7781] ? __pfx____ratelimit+0x10/0x10 [ 150.468328][ T7781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.468352][ T7781] ? __pfx__printk+0x10/0x10 [ 150.468386][ T7781] ? __pfx___might_resched+0x10/0x10 [ 150.468405][ T7781] ? fs_reclaim_acquire+0x7d/0x100 [ 150.468429][ T7781] should_fail_ex+0x414/0x560 [ 150.468462][ T7781] should_failslab+0xa8/0x100 [ 150.468493][ T7781] __kmalloc_cache_noprof+0x70/0x3d0 [ 150.468520][ T7781] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 150.468549][ T7781] __xdp_reg_mem_model+0x1d8/0x5a0 [ 150.468579][ T7781] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 150.468611][ T7781] ? page_pool_create_percpu+0x800/0xbe0 [ 150.468663][ T7781] xdp_reg_mem_model+0x22/0x40 [ 150.468688][ T7781] bpf_test_run_xdp_live+0x215/0x1b10 [ 150.468715][ T7781] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 150.468746][ T7781] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.468781][ T7781] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 150.468802][ T7781] ? 0xffffffffa0205540 [ 150.468822][ T7781] ? 0xffffffffa0205540 [ 150.468891][ T7781] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 150.468924][ T7781] ? _copy_from_user+0x94/0xb0 [ 150.468949][ T7781] ? bpf_test_init+0x133/0x170 [ 150.468966][ T7781] ? xdp_convert_md_to_buff+0x5b/0x330 [ 150.468990][ T7781] bpf_prog_test_run_xdp+0x713/0x1000 [ 150.469030][ T7781] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 150.469057][ T7781] ? __fget_files+0x2a/0x420 [ 150.469081][ T7781] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 150.469104][ T7781] bpf_prog_test_run+0x2c7/0x340 [ 150.469138][ T7781] __sys_bpf+0x581/0x870 [ 150.469174][ T7781] ? __pfx___sys_bpf+0x10/0x10 [ 150.469215][ T7781] ? ksys_write+0x22a/0x250 [ 150.469245][ T7781] ? __pfx_ksys_write+0x10/0x10 [ 150.469269][ T7781] ? rcu_is_watching+0x15/0xb0 [ 150.469298][ T7781] __x64_sys_bpf+0x7c/0x90 [ 150.469324][ T7781] do_syscall_64+0xfa/0x3b0 [ 150.469345][ T7781] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.469366][ T7781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.469386][ T7781] ? clear_bhb_loop+0x60/0xb0 [ 150.469411][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.469431][ T7781] RIP: 0033:0x7f0377b8ebe9 [ 150.469449][ T7781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.469465][ T7781] RSP: 002b:00007f03789a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.469486][ T7781] RAX: ffffffffffffffda RBX: 00007f0377dc5fa0 RCX: 00007f0377b8ebe9 [ 150.469500][ T7781] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 150.469513][ T7781] RBP: 00007f03789a3090 R08: 0000000000000000 R09: 0000000000000000 [ 150.469525][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.469536][ T7781] R13: 00007f0377dc6038 R14: 00007f0377dc5fa0 R15: 00007ffe6fb6bf88 [ 150.469569][ T7781] [ 150.926981][ T7783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.049448][ T7783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.100924][ T7783] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 151.209195][ T7795] FAULT_INJECTION: forcing a failure. [ 151.209195][ T7795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.262631][ T7795] CPU: 1 UID: 0 PID: 7795 Comm: syz.0.480 Not tainted syzkaller #0 PREEMPT(full) [ 151.262660][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.262672][ T7795] Call Trace: [ 151.262679][ T7795] [ 151.262688][ T7795] dump_stack_lvl+0x189/0x250 [ 151.262720][ T7795] ? __pfx____ratelimit+0x10/0x10 [ 151.262741][ T7795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.262764][ T7795] ? __pfx__printk+0x10/0x10 [ 151.262810][ T7795] ? __might_fault+0xb0/0x130 [ 151.262855][ T7795] should_fail_ex+0x414/0x560 [ 151.262888][ T7795] _copy_from_user+0x2d/0xb0 [ 151.262912][ T7795] generic_map_update_batch+0x51b/0x7f0 [ 151.262948][ T7795] ? __pfx_generic_map_update_batch+0x10/0x10 [ 151.262969][ T7795] ? __fget_files+0x2a/0x420 [ 151.262994][ T7795] ? __pfx_generic_map_update_batch+0x10/0x10 [ 151.263014][ T7795] bpf_map_do_batch+0x369/0x5f0 [ 151.263049][ T7795] __sys_bpf+0x6af/0x870 [ 151.263076][ T7795] ? __pfx___sys_bpf+0x10/0x10 [ 151.263115][ T7795] ? ksys_write+0x22a/0x250 [ 151.263142][ T7795] ? __pfx_ksys_write+0x10/0x10 [ 151.263165][ T7795] ? rcu_is_watching+0x15/0xb0 [ 151.263190][ T7795] __x64_sys_bpf+0x7c/0x90 [ 151.263212][ T7795] do_syscall_64+0xfa/0x3b0 [ 151.263232][ T7795] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.263251][ T7795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.263270][ T7795] ? clear_bhb_loop+0x60/0xb0 [ 151.263294][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.263312][ T7795] RIP: 0033:0x7f3f9558ebe9 [ 151.263330][ T7795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.263346][ T7795] RSP: 002b:00007f3f963e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.263367][ T7795] RAX: ffffffffffffffda RBX: 00007f3f957c6090 RCX: 00007f3f9558ebe9 [ 151.263381][ T7795] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 151.263393][ T7795] RBP: 00007f3f963e7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.263405][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.263416][ T7795] R13: 00007f3f957c6128 R14: 00007f3f957c6090 R15: 00007ffe88175568 [ 151.263448][ T7795] [ 152.444702][ T7815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.485'. [ 152.499450][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 153.237671][ T7836] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.489'. [ 153.265267][ T7839] lo: entered allmulticast mode [ 153.271933][ T7836] netlink: zone id is out of range [ 153.277121][ T7836] netlink: zone id is out of range [ 153.307268][ T7836] netlink: zone id is out of range [ 153.333350][ T7836] netlink: get zone limit has 8 unknown bytes [ 153.337282][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 153.511897][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 153.520827][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 153.600757][ T7837] lo: left allmulticast mode [ 153.628152][ T7852] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 153.720832][ T7856] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 153.820122][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.848016][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.912529][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 153.964974][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.496'. [ 154.464720][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 154.537306][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.499'. [ 155.056065][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 155.286715][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.508'. [ 155.321196][ T7921] netlink: 48 bytes leftover after parsing attributes in process `syz.4.508'. [ 155.366679][ T7921] FAULT_INJECTION: forcing a failure. [ 155.366679][ T7921] name failslab, interval 1, probability 0, space 0, times 0 [ 155.395330][ T7921] CPU: 0 UID: 0 PID: 7921 Comm: syz.4.508 Not tainted syzkaller #0 PREEMPT(full) [ 155.395355][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.395366][ T7921] Call Trace: [ 155.395373][ T7921] [ 155.395382][ T7921] dump_stack_lvl+0x189/0x250 [ 155.395410][ T7921] ? __pfx____ratelimit+0x10/0x10 [ 155.395430][ T7921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.395453][ T7921] ? __pfx__printk+0x10/0x10 [ 155.395485][ T7921] ? __pfx___might_resched+0x10/0x10 [ 155.395501][ T7921] ? fs_reclaim_acquire+0x7d/0x100 [ 155.395523][ T7921] should_fail_ex+0x414/0x560 [ 155.395552][ T7921] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 155.395575][ T7921] should_failslab+0xa8/0x100 [ 155.395604][ T7921] __kvmalloc_node_noprof+0x161/0x5f0 [ 155.395631][ T7921] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 155.395654][ T7921] ? alloc_netdev_mqs+0xbf1/0x11b0 [ 155.395689][ T7921] alloc_netdev_mqs+0xc7c/0x11b0 [ 155.395722][ T7921] rtnl_create_link+0x31f/0xd10 [ 155.395755][ T7921] rtnl_newlink_create+0x25c/0xb00 [ 155.395781][ T7921] ? __mutex_lock+0x5bb/0x1350 [ 155.395808][ T7921] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 155.395834][ T7921] ? __pfx___mutex_lock+0x10/0x10 [ 155.395865][ T7921] ? ns_capable+0x8a/0xf0 [ 155.395888][ T7921] rtnl_newlink+0x16d6/0x1c70 [ 155.395908][ T7921] ? netlink_sendmsg+0x805/0xb30 [ 155.395940][ T7921] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.395983][ T7921] ? kasan_quarantine_put+0xdd/0x220 [ 155.396006][ T7921] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.396032][ T7921] ? nlmon_xmit+0xb0/0x100 [ 155.396049][ T7921] ? kmem_cache_free+0x18f/0x400 [ 155.396082][ T7921] ? __local_bh_enable_ip+0x12d/0x1c0 [ 155.396101][ T7921] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.396121][ T7921] ? __local_bh_enable_ip+0x12d/0x1c0 [ 155.396140][ T7921] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 155.396162][ T7921] ? __dev_queue_xmit+0x27b/0x3b50 [ 155.396186][ T7921] ? __dev_queue_xmit+0x27b/0x3b50 [ 155.396207][ T7921] ? __dev_queue_xmit+0x27b/0x3b50 [ 155.396232][ T7921] ? __dev_queue_xmit+0x1d79/0x3b50 [ 155.396261][ T7921] ? __lock_acquire+0xab9/0xd20 [ 155.396316][ T7921] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.396338][ T7921] rtnetlink_rcv_msg+0x7cf/0xb70 [ 155.396361][ T7921] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 155.396378][ T7921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.396394][ T7921] ? ref_tracker_free+0x63a/0x7d0 [ 155.396421][ T7921] ? __asan_memcpy+0x40/0x70 [ 155.396442][ T7921] ? __pfx_ref_tracker_free+0x10/0x10 [ 155.396465][ T7921] ? __skb_clone+0x63/0x7a0 [ 155.396498][ T7921] netlink_rcv_skb+0x205/0x470 [ 155.396519][ T7921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.396539][ T7921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.396571][ T7921] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.396598][ T7921] netlink_unicast+0x82f/0x9e0 [ 155.396636][ T7921] ? __pfx_netlink_unicast+0x10/0x10 [ 155.396666][ T7921] ? netlink_sendmsg+0x642/0xb30 [ 155.396689][ T7921] ? skb_put+0x11b/0x210 [ 155.396713][ T7921] netlink_sendmsg+0x805/0xb30 [ 155.396742][ T7921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.396766][ T7921] ? aa_sock_msg_perm+0xf1/0x1d0 [ 155.396786][ T7921] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.396806][ T7921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.396826][ T7921] __sock_sendmsg+0x21c/0x270 [ 155.396855][ T7921] ____sys_sendmsg+0x52d/0x830 [ 155.396885][ T7921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.396917][ T7921] ? import_iovec+0x74/0xa0 [ 155.396943][ T7921] ___sys_sendmsg+0x21f/0x2a0 [ 155.396968][ T7921] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.397057][ T7921] ? __might_fault+0xb0/0x130 [ 155.397088][ T7921] __sys_sendmmsg+0x227/0x430 [ 155.397119][ T7921] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.397140][ T7921] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 155.397193][ T7921] ? ksys_write+0x22a/0x250 [ 155.397223][ T7921] ? __pfx_ksys_write+0x10/0x10 [ 155.397245][ T7921] ? rcu_is_watching+0x15/0xb0 [ 155.397273][ T7921] __x64_sys_sendmmsg+0xa0/0xc0 [ 155.397299][ T7921] do_syscall_64+0xfa/0x3b0 [ 155.397320][ T7921] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.397339][ T7921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.397358][ T7921] ? clear_bhb_loop+0x60/0xb0 [ 155.397383][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.397402][ T7921] RIP: 0033:0x7f0377b8ebe9 [ 155.397419][ T7921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.397435][ T7921] RSP: 002b:00007f03789a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.397456][ T7921] RAX: ffffffffffffffda RBX: 00007f0377dc5fa0 RCX: 00007f0377b8ebe9 [ 155.397470][ T7921] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 155.397483][ T7921] RBP: 00007f03789a3090 R08: 0000000000000000 R09: 0000000000000000 [ 155.397495][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.397506][ T7921] R13: 00007f0377dc6038 R14: 00007f0377dc5fa0 R15: 00007ffe6fb6bf88 [ 155.397538][ T7921] [ 156.099582][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 156.714590][ T7958] netlink: 'syz.4.518': attribute type 4 has an invalid length. [ 156.829938][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.871561][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.921686][ T7970] netlink: 'syz.2.522': attribute type 31 has an invalid length. [ 158.490677][ T8010] netlink: 'syz.2.533': attribute type 6 has an invalid length. [ 158.624714][ T8010] netlink: 'syz.2.533': attribute type 12 has an invalid length. [ 158.666998][ T8010] __nla_validate_parse: 54 callbacks suppressed [ 158.667018][ T8010] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.533'. [ 158.797562][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 158.810899][ T8024] vlan2: entered promiscuous mode [ 158.827870][ T8024] bridge0: entered promiscuous mode [ 158.868195][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 158.988060][ T8019] batadv0: entered promiscuous mode [ 158.998426][ T8019] macsec1: entered promiscuous mode [ 159.022313][ T8019] batadv0: left promiscuous mode [ 159.050018][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'. [ 159.070154][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 159.330459][ T8048] netlink: 'syz.2.543': attribute type 13 has an invalid length. [ 159.358216][ T8048] netlink: 'syz.2.543': attribute type 17 has an invalid length. [ 159.402944][ T8051] netlink: 100 bytes leftover after parsing attributes in process `syz.4.544'. [ 159.665196][ T8040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.805881][ T8040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.169341][ T8068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.550'. [ 160.698033][ T8083] netlink: 'syz.4.553': attribute type 3 has an invalid length. [ 160.931969][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.556'. [ 161.563085][ T8102] netlink: 'syz.0.559': attribute type 3 has an invalid length. [ 161.641417][ T8106] FAULT_INJECTION: forcing a failure. [ 161.641417][ T8106] name failslab, interval 1, probability 0, space 0, times 0 [ 161.681221][ T8106] CPU: 0 UID: 0 PID: 8106 Comm: syz.2.561 Not tainted syzkaller #0 PREEMPT(full) [ 161.681250][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.681262][ T8106] Call Trace: [ 161.681269][ T8106] [ 161.681278][ T8106] dump_stack_lvl+0x189/0x250 [ 161.681308][ T8106] ? __pfx____ratelimit+0x10/0x10 [ 161.681330][ T8106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.681355][ T8106] ? __pfx__printk+0x10/0x10 [ 161.681386][ T8106] ? __pfx___might_resched+0x10/0x10 [ 161.681405][ T8106] ? fs_reclaim_acquire+0x7d/0x100 [ 161.681430][ T8106] should_fail_ex+0x414/0x560 [ 161.681463][ T8106] should_failslab+0xa8/0x100 [ 161.681494][ T8106] __kmalloc_noprof+0xcb/0x4f0 [ 161.681520][ T8106] ? tomoyo_encode+0x28b/0x550 [ 161.681545][ T8106] tomoyo_encode+0x28b/0x550 [ 161.681572][ T8106] tomoyo_realpath_from_path+0x58d/0x5d0 [ 161.681596][ T8106] ? tomoyo_domain+0xd9/0x130 [ 161.681624][ T8106] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 161.681653][ T8106] tomoyo_path_number_perm+0x1e8/0x5a0 [ 161.681686][ T8106] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 161.681734][ T8106] ? __lock_acquire+0xab9/0xd20 [ 161.681788][ T8106] ? __fget_files+0x2a/0x420 [ 161.681810][ T8106] ? __fget_files+0x2a/0x420 [ 161.681826][ T8106] ? __fget_files+0x3a0/0x420 [ 161.681843][ T8106] ? __fget_files+0x2a/0x420 [ 161.681887][ T8106] security_file_ioctl+0xcb/0x2d0 [ 161.681930][ T8106] __se_sys_ioctl+0x47/0x170 [ 161.681958][ T8106] do_syscall_64+0xfa/0x3b0 [ 161.681979][ T8106] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.681999][ T8106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.682018][ T8106] ? clear_bhb_loop+0x60/0xb0 [ 161.682043][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.682061][ T8106] RIP: 0033:0x7fad17f8ebe9 [ 161.682079][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.682095][ T8106] RSP: 002b:00007fad18da5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.682115][ T8106] RAX: ffffffffffffffda RBX: 00007fad181c5fa0 RCX: 00007fad17f8ebe9 [ 161.682130][ T8106] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 161.682142][ T8106] RBP: 00007fad18da5090 R08: 0000000000000000 R09: 0000000000000000 [ 161.682161][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.682172][ T8106] R13: 00007fad181c6038 R14: 00007fad181c5fa0 R15: 00007ffd97fe48e8 [ 161.682204][ T8106] [ 161.682238][ T8106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.983978][ T8116] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 162.023985][ T8118] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.567'. [ 162.101252][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.568'. [ 162.389891][ T8138] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 163.116935][ T8171] ip6gretap0: entered promiscuous mode [ 163.227383][ T8172] netlink: 'syz.2.585': attribute type 26 has an invalid length. [ 163.945714][ T8200] __nla_validate_parse: 5 callbacks suppressed [ 163.945734][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 163.965968][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 164.135686][ T8207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.598'. [ 164.170415][ T8208] netlink: 200 bytes leftover after parsing attributes in process `syz.2.597'. [ 164.291962][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 164.565583][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 164.608127][ T8224] erspan0: entered promiscuous mode [ 164.617745][ T8224] erspan0: left promiscuous mode [ 165.403516][ T8232] tipc: Can't bind to reserved service type 0 [ 165.415699][ T8232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.605'. [ 165.503279][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 165.537900][ T5931] IPVS: starting estimator thread 0... [ 165.652358][ T8237] IPVS: using max 29 ests per chain, 69600 per kthread [ 165.980426][ T8247] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 165.988222][ T8247] netlink: 140 bytes leftover after parsing attributes in process `syz.1.610'. [ 166.011914][ T8247] netlink: 96 bytes leftover after parsing attributes in process `syz.1.610'. [ 166.017397][ T5974] IPVS: starting estimator thread 0... [ 166.124143][ T8256] IPVS: using max 28 ests per chain, 67200 per kthread [ 167.427483][ T8301] bond0: entered promiscuous mode [ 167.440305][ T8301] bond_slave_0: entered promiscuous mode [ 167.455925][ T8301] bond_slave_1: entered promiscuous mode [ 167.469772][ T8301] bond0: left promiscuous mode [ 167.476985][ T8301] bond_slave_0: left promiscuous mode [ 167.482901][ T8301] bond_slave_1: left promiscuous mode [ 167.735706][ T8322] FAULT_INJECTION: forcing a failure. [ 167.735706][ T8322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.754356][ T30] audit: type=1800 audit(1757071693.431:2): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.635" name="memory.events" dev="tmpfs" ino=556 res=0 errno=0 [ 167.801904][ T30] audit: type=1804 audit(1757071693.431:3): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.635" name="/newroot/105/memory.events" dev="tmpfs" ino=556 res=1 errno=0 [ 167.833564][ T8322] CPU: 1 UID: 0 PID: 8322 Comm: syz.1.636 Not tainted syzkaller #0 PREEMPT(full) [ 167.833595][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.833607][ T8322] Call Trace: [ 167.833615][ T8322] [ 167.833623][ T8322] dump_stack_lvl+0x189/0x250 [ 167.833650][ T8322] ? __pfx____ratelimit+0x10/0x10 [ 167.833670][ T8322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.833693][ T8322] ? __pfx__printk+0x10/0x10 [ 167.833719][ T8322] ? __might_fault+0xb0/0x130 [ 167.833754][ T8322] should_fail_ex+0x414/0x560 [ 167.833784][ T8322] _copy_from_user+0x2d/0xb0 [ 167.833808][ T8322] wext_handle_ioctl+0xba/0x1c0 [ 167.833833][ T8322] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 167.833852][ T8322] ? __lock_acquire+0xab9/0xd20 [ 167.833895][ T8322] sock_ioctl+0x15f/0x790 [ 167.833923][ T8322] ? __pfx_sock_ioctl+0x10/0x10 [ 167.833948][ T8322] ? __fget_files+0x2a/0x420 [ 167.833963][ T8322] ? __fget_files+0x3a0/0x420 [ 167.833978][ T8322] ? __fget_files+0x2a/0x420 [ 167.833997][ T8322] ? bpf_lsm_file_ioctl+0x9/0x20 [ 167.834020][ T8322] ? __pfx_sock_ioctl+0x10/0x10 [ 167.834045][ T8322] __se_sys_ioctl+0xfc/0x170 [ 167.834069][ T8322] do_syscall_64+0xfa/0x3b0 [ 167.834089][ T8322] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.834108][ T8322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.834126][ T8322] ? clear_bhb_loop+0x60/0xb0 [ 167.834147][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.834165][ T8322] RIP: 0033:0x7fc4a198ebe9 [ 167.834180][ T8322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.834195][ T8322] RSP: 002b:00007fc49fbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.834214][ T8322] RAX: ffffffffffffffda RBX: 00007fc4a1bc5fa0 RCX: 00007fc4a198ebe9 [ 167.834228][ T8322] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 167.834239][ T8322] RBP: 00007fc49fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 167.834250][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.834260][ T8322] R13: 00007fc4a1bc6038 R14: 00007fc4a1bc5fa0 R15: 00007ffdc022c908 [ 167.834289][ T8322] [ 168.606885][ T8342] 8021q: VLANs not supported on wg0 [ 169.299528][ T8366] vti0: entered promiscuous mode [ 169.325467][ T8366] vti0: entered allmulticast mode [ 169.762260][ T8386] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 169.969266][ T8387] bond2 (unregistering): Released all slaves [ 170.013160][ T8390] netlink: 'syz.3.654': attribute type 1 has an invalid length. [ 170.028522][ T8390] nbd: error processing sock list [ 170.034562][ T8390] block nbd1: shutting down sockets [ 170.573572][ T8424] FAULT_INJECTION: forcing a failure. [ 170.573572][ T8424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.608763][ T8424] CPU: 0 UID: 0 PID: 8424 Comm: syz.0.665 Not tainted syzkaller #0 PREEMPT(full) [ 170.608797][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.608810][ T8424] Call Trace: [ 170.608818][ T8424] [ 170.608827][ T8424] dump_stack_lvl+0x189/0x250 [ 170.608857][ T8424] ? __pfx____ratelimit+0x10/0x10 [ 170.608880][ T8424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.608904][ T8424] ? __pfx__printk+0x10/0x10 [ 170.608947][ T8424] should_fail_ex+0x414/0x560 [ 170.608980][ T8424] _copy_to_user+0x31/0xb0 [ 170.609007][ T8424] bpf_test_finish+0x24e/0x700 [ 170.609035][ T8424] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 170.609059][ T8424] ? __pfx_bpf_test_finish+0x10/0x10 [ 170.609087][ T8424] ? bpf_test_init+0x133/0x170 [ 170.609109][ T8424] bpf_prog_test_run_xdp+0x79a/0x1000 [ 170.609150][ T8424] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 170.609177][ T8424] ? __fget_files+0x2a/0x420 [ 170.609202][ T8424] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 170.609224][ T8424] bpf_prog_test_run+0x2c7/0x340 [ 170.609258][ T8424] __sys_bpf+0x581/0x870 [ 170.609288][ T8424] ? __pfx___sys_bpf+0x10/0x10 [ 170.609329][ T8424] ? ksys_write+0x22a/0x250 [ 170.609359][ T8424] ? __pfx_ksys_write+0x10/0x10 [ 170.609389][ T8424] ? rcu_is_watching+0x15/0xb0 [ 170.609419][ T8424] __x64_sys_bpf+0x7c/0x90 [ 170.609444][ T8424] do_syscall_64+0xfa/0x3b0 [ 170.609466][ T8424] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.609486][ T8424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.609507][ T8424] ? clear_bhb_loop+0x60/0xb0 [ 170.609532][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.609551][ T8424] RIP: 0033:0x7f3f9558ebe9 [ 170.609569][ T8424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.609586][ T8424] RSP: 002b:00007f3f96408038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.609607][ T8424] RAX: ffffffffffffffda RBX: 00007f3f957c5fa0 RCX: 00007f3f9558ebe9 [ 170.609621][ T8424] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 170.609633][ T8424] RBP: 00007f3f96408090 R08: 0000000000000000 R09: 0000000000000000 [ 170.609646][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.609657][ T8424] R13: 00007f3f957c6038 R14: 00007f3f957c5fa0 R15: 00007ffe88175568 [ 170.609689][ T8424] [ 170.970527][ T8436] __nla_validate_parse: 8 callbacks suppressed [ 170.970544][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 171.066645][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 171.124660][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 171.174020][ T8436] erspan0: entered promiscuous mode [ 171.195323][ T8436] erspan0: left promiscuous mode [ 171.309103][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.366734][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.429195][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 171.541522][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 171.695548][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 171.985008][ T8460] netlink: 14 bytes leftover after parsing attributes in process `syz.4.678'. [ 171.989491][ T8463] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 172.191283][ T5880] Bluetooth: hci0: command tx timeout [ 172.294038][ T8474] netlink: 128 bytes leftover after parsing attributes in process `syz.4.683'. [ 172.311560][ T8466] bond2: (slave gretap1): making interface the new active one [ 172.323714][ T8466] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 172.386234][ T49] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 172.723396][ T8489] netlink: 52 bytes leftover after parsing attributes in process `syz.2.688'. [ 172.737316][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'. [ 172.797497][ T8491] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 173.120136][ T8477] syz.4.683 (8477) used greatest stack depth: 17848 bytes left [ 173.451823][ T8513] syzkaller0: entered promiscuous mode [ 173.455362][ T8518] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 173.477159][ T8513] syzkaller0: entered allmulticast mode [ 173.627645][ T8525] raw_sendmsg: syz.3.703 forgot to set AF_INET. Fix it! [ 175.643779][ T5880] block nbd1: Receive control failed (result -107) [ 175.678333][ T8543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.704871][ T8536] nbd1: detected capacity change from 0 to 32 [ 175.762504][ T6198] block nbd1: Dead connection, failed to find a fallback [ 175.977616][ T6198] block nbd1: shutting down sockets [ 175.991058][ T6198] blk_print_req_error: 27 callbacks suppressed [ 175.991075][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.044310][ T6198] buffer_io_error: 27 callbacks suppressed [ 176.044328][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.074055][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.083768][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.096847][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.107331][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.125527][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.160914][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.181801][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.200891][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.220019][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.243167][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.257981][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.271715][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.279921][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.330007][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.338624][ T6198] ldm_validate_partition_table(): Disk read failed. [ 176.346267][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.359873][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.368618][ T6198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.409601][ T6198] Buffer I/O error on dev nbd1, logical block 0, async page read [ 176.445729][ T6198] Dev nbd1: unable to read RDB block 0 [ 176.453487][ T6198] nbd1: unable to read partition table [ 176.473628][ T6198] ldm_validate_partition_table(): Disk read failed. [ 176.480811][ T6198] Dev nbd1: unable to read RDB block 0 [ 176.510439][ T6198] nbd1: unable to read partition table [ 176.673405][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 176.732807][ T8566] bond0: (slave bond_slave_1): Releasing backup interface [ 176.844513][ T8572] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 176.902228][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 176.934170][ T8572] bond1: entered promiscuous mode [ 176.947700][ T8572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.967856][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 177.053917][ T8576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.063432][ T8576] bond1: (slave bond2): making interface the new active one [ 177.070874][ T8576] bond2: entered promiscuous mode [ 177.079429][ T8576] bond1: (slave bond2): Enslaving as an active interface with an up link [ 177.742592][ T8600] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 177.887194][ T8600] bond3: entered promiscuous mode [ 177.893211][ T8600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.057624][ T8600] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.146697][ T8600] bond3: (slave bond4): making interface the new active one [ 178.171943][ T8600] bond4: entered promiscuous mode [ 178.209404][ T8600] bond3: (slave bond4): Enslaving as an active interface with an up link [ 178.363017][ T8607] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 178.385914][ T8607] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 179.198568][ T8612] bridge0: port 4(batadv1) entered blocking state [ 179.237366][ T8612] bridge0: port 4(batadv1) entered disabled state [ 179.244250][ T8612] batadv1: entered allmulticast mode [ 179.274664][ T8612] batadv1: entered promiscuous mode [ 179.387233][ T8629] sctp: [Deprecated]: syz.4.735 (pid 8629) Use of int in maxseg socket option. [ 179.387233][ T8629] Use struct sctp_assoc_value instead [ 179.489773][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.738'. [ 179.508178][ T8635] netlink: 216 bytes leftover after parsing attributes in process `syz.2.738'. [ 179.614464][ T8646] FAULT_INJECTION: forcing a failure. [ 179.614464][ T8646] name failslab, interval 1, probability 0, space 0, times 0 [ 179.669641][ T8646] CPU: 1 UID: 0 PID: 8646 Comm: syz.4.739 Not tainted syzkaller #0 PREEMPT(full) [ 179.669668][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.669681][ T8646] Call Trace: [ 179.669689][ T8646] [ 179.669698][ T8646] dump_stack_lvl+0x189/0x250 [ 179.669728][ T8646] ? __pfx____ratelimit+0x10/0x10 [ 179.669751][ T8646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.669775][ T8646] ? __pfx__printk+0x10/0x10 [ 179.669801][ T8646] ? netlink_unicast+0x82f/0x9e0 [ 179.669834][ T8646] ? ___sys_sendmsg+0x21f/0x2a0 [ 179.669857][ T8646] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 179.669893][ T8646] should_fail_ex+0x414/0x560 [ 179.669927][ T8646] should_failslab+0xa8/0x100 [ 179.669959][ T8646] kmem_cache_alloc_noprof+0x73/0x3c0 [ 179.669986][ T8646] ? skb_clone+0x212/0x3a0 [ 179.670016][ T8646] skb_clone+0x212/0x3a0 [ 179.670046][ T8646] __netlink_deliver_tap+0x404/0x850 [ 179.670082][ T8646] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.670105][ T8646] netlink_deliver_tap+0x19c/0x1b0 [ 179.670128][ T8646] netlink_sendskb+0x68/0x140 [ 179.670162][ T8646] netlink_unicast+0x397/0x9e0 [ 179.670189][ T8646] ? __asan_memcpy+0x40/0x70 [ 179.670223][ T8646] ? __pfx_netlink_unicast+0x10/0x10 [ 179.670266][ T8646] netlink_rcv_skb+0x28c/0x470 [ 179.670296][ T8646] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.670320][ T8646] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.670355][ T8646] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.670386][ T8646] netlink_unicast+0x82f/0x9e0 [ 179.670427][ T8646] ? __pfx_netlink_unicast+0x10/0x10 [ 179.670461][ T8646] ? netlink_sendmsg+0x642/0xb30 [ 179.670480][ T8646] ? skb_put+0x11b/0x210 [ 179.670505][ T8646] netlink_sendmsg+0x805/0xb30 [ 179.670536][ T8646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.670562][ T8646] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.670584][ T8646] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.670606][ T8646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.670628][ T8646] __sock_sendmsg+0x21c/0x270 [ 179.670666][ T8646] ____sys_sendmsg+0x52d/0x830 [ 179.670697][ T8646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.670744][ T8646] ? import_iovec+0x74/0xa0 [ 179.670771][ T8646] ___sys_sendmsg+0x21f/0x2a0 [ 179.670798][ T8646] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.670870][ T8646] ? __might_fault+0xb0/0x130 [ 179.670901][ T8646] __sys_sendmmsg+0x227/0x430 [ 179.670931][ T8646] ? __pfx___sys_sendmmsg+0x10/0x10 [ 179.670952][ T8646] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 179.671004][ T8646] ? ksys_write+0x22a/0x250 [ 179.671032][ T8646] ? __pfx_ksys_write+0x10/0x10 [ 179.671055][ T8646] ? rcu_is_watching+0x15/0xb0 [ 179.671082][ T8646] __x64_sys_sendmmsg+0xa0/0xc0 [ 179.671108][ T8646] do_syscall_64+0xfa/0x3b0 [ 179.671129][ T8646] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.671148][ T8646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.671167][ T8646] ? clear_bhb_loop+0x60/0xb0 [ 179.671191][ T8646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.671210][ T8646] RIP: 0033:0x7f0377b8ebe9 [ 179.671229][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.671244][ T8646] RSP: 002b:00007f0378982038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 179.671265][ T8646] RAX: ffffffffffffffda RBX: 00007f0377dc6090 RCX: 00007f0377b8ebe9 [ 179.671280][ T8646] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 179.671299][ T8646] RBP: 00007f0378982090 R08: 0000000000000000 R09: 0000000000000000 [ 179.671311][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.671322][ T8646] R13: 00007f0377dc6128 R14: 00007f0377dc6090 R15: 00007ffe6fb6bf88 [ 179.671354][ T8646] [ 180.078805][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 180.088336][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 180.609825][ T8669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.749'. [ 180.610336][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 180.648382][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 181.011874][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.756'. [ 181.569330][ T8714] sctp: [Deprecated]: syz.3.763 (pid 8714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.569330][ T8714] Use struct sctp_sack_info instead [ 181.919051][ T8727] FAULT_INJECTION: forcing a failure. [ 181.919051][ T8727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.947487][ T8727] CPU: 1 UID: 0 PID: 8727 Comm: syz.1.766 Not tainted syzkaller #0 PREEMPT(full) [ 181.947514][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.947526][ T8727] Call Trace: [ 181.947533][ T8727] [ 181.947542][ T8727] dump_stack_lvl+0x189/0x250 [ 181.947570][ T8727] ? __pfx____ratelimit+0x10/0x10 [ 181.947592][ T8727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.947616][ T8727] ? __pfx__printk+0x10/0x10 [ 181.947643][ T8727] ? __might_fault+0xb0/0x130 [ 181.947684][ T8727] should_fail_ex+0x414/0x560 [ 181.947716][ T8727] _copy_from_user+0x2d/0xb0 [ 181.947741][ T8727] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 181.947788][ T8727] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 181.947827][ T8727] ? trace_kmalloc+0x1f/0xd0 [ 181.947855][ T8727] ip_generic_getfrag+0x12f/0x2b0 [ 181.947886][ T8727] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 181.947917][ T8727] ? skb_put+0x11b/0x210 [ 181.947952][ T8727] __ip6_append_data+0x3974/0x3f30 [ 181.948004][ T8727] ? __pfx_raw6_getfrag+0x10/0x10 [ 181.948044][ T8727] ? __pfx___ip6_append_data+0x10/0x10 [ 181.948070][ T8727] ? __pfx_ip6_mtu+0x10/0x10 [ 181.948106][ T8727] ip6_append_data+0x1c4/0x380 [ 181.948138][ T8727] ? __pfx_raw6_getfrag+0x10/0x10 [ 181.948161][ T8727] rawv6_sendmsg+0x127a/0x1820 [ 181.948200][ T8727] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 181.948227][ T8727] ? __lock_acquire+0xab9/0xd20 [ 181.948290][ T8727] ? __pfx_aa_sk_perm+0x10/0x10 [ 181.948323][ T8727] ? sock_rps_record_flow+0x19/0x410 [ 181.948363][ T8727] ? inet_sendmsg+0x2f4/0x370 [ 181.948389][ T8727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.948415][ T8727] __sock_sendmsg+0x19c/0x270 [ 181.948447][ T8727] sock_write_iter+0x258/0x330 [ 181.948477][ T8727] ? __pfx_sock_write_iter+0x10/0x10 [ 181.948529][ T8727] do_iter_readv_writev+0x619/0x8b0 [ 181.948565][ T8727] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 181.948591][ T8727] ? common_file_perm+0x1b5/0x230 [ 181.948614][ T8727] ? bpf_lsm_file_permission+0x9/0x20 [ 181.948637][ T8727] ? security_file_permission+0x75/0x290 [ 181.948683][ T8727] ? rw_verify_area+0x255/0x4d0 [ 181.948712][ T8727] vfs_writev+0x31a/0x960 [ 181.948736][ T8727] ? __lock_acquire+0xab9/0xd20 [ 181.948765][ T8727] ? __pfx_vfs_writev+0x10/0x10 [ 181.948801][ T8727] ? __fget_files+0x2a/0x420 [ 181.948823][ T8727] ? __fget_files+0x3a0/0x420 [ 181.948840][ T8727] ? __fget_files+0x2a/0x420 [ 181.948867][ T8727] do_writev+0x14d/0x2d0 [ 181.948890][ T8727] ? __pfx_do_writev+0x10/0x10 [ 181.948907][ T8727] ? rcu_is_watching+0x15/0xb0 [ 181.948934][ T8727] ? do_syscall_64+0xbe/0x3b0 [ 181.948960][ T8727] do_syscall_64+0xfa/0x3b0 [ 181.948980][ T8727] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.949000][ T8727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.949021][ T8727] ? clear_bhb_loop+0x60/0xb0 [ 181.949045][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.949064][ T8727] RIP: 0033:0x7fc4a198ebe9 [ 181.949083][ T8727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.949098][ T8727] RSP: 002b:00007fc49fbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 181.949120][ T8727] RAX: ffffffffffffffda RBX: 00007fc4a1bc5fa0 RCX: 00007fc4a198ebe9 [ 181.949134][ T8727] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 181.949146][ T8727] RBP: 00007fc49fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 181.949159][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.949170][ T8727] R13: 00007fc4a1bc6038 R14: 00007fc4a1bc5fa0 R15: 00007ffdc022c908 [ 181.949203][ T8727] [ 182.330919][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.768'. [ 182.451680][ T8731] bond0: entered promiscuous mode [ 182.492162][ T8731] bond_slave_0: entered promiscuous mode [ 182.499293][ T8731] bond_slave_1: entered promiscuous mode [ 182.581298][ T8731] bond0: left promiscuous mode [ 182.586255][ T8731] bond_slave_0: left promiscuous mode [ 182.603244][ T8731] bond_slave_1: left promiscuous mode [ 182.629610][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 182.676423][ T8747] netlink: 3 bytes leftover after parsing attributes in process `syz.4.775'. [ 182.757218][ T8747] batadv1: entered promiscuous mode [ 182.770913][ T8747] batadv1: entered allmulticast mode [ 182.834812][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 182.894399][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 182.931914][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 182.967087][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 182.996736][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 183.043697][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 183.061203][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 183.087020][ T8742] tipc: Enabling of bearer rejected, already enabled [ 183.664463][ T8776] tipc: Enabling of bearer rejected, already enabled [ 183.699344][ T8776] syzkaller0: entered promiscuous mode [ 183.705070][ T8776] syzkaller0: entered allmulticast mode [ 183.720867][ T8776] netem: change failed [ 184.687881][ T8819] veth0: entered promiscuous mode [ 185.468792][ T8836] netlink: 'syz.3.806': attribute type 2 has an invalid length. [ 185.665500][ T8846] lo speed is unknown, defaulting to 1000 [ 185.682037][ T8846] lo speed is unknown, defaulting to 1000 [ 185.721761][ T8846] lo speed is unknown, defaulting to 1000 [ 185.830978][ T8846] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 185.978426][ T8862] FAULT_INJECTION: forcing a failure. [ 185.978426][ T8862] name failslab, interval 1, probability 0, space 0, times 0 [ 186.013666][ T8846] lo speed is unknown, defaulting to 1000 [ 186.030024][ T8862] CPU: 0 UID: 0 PID: 8862 Comm: syz.1.814 Not tainted syzkaller #0 PREEMPT(full) [ 186.030053][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.030065][ T8862] Call Trace: [ 186.030074][ T8862] [ 186.030082][ T8862] dump_stack_lvl+0x189/0x250 [ 186.030111][ T8862] ? __pfx____ratelimit+0x10/0x10 [ 186.030132][ T8862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.030156][ T8862] ? __pfx__printk+0x10/0x10 [ 186.030186][ T8862] ? __pfx___might_resched+0x10/0x10 [ 186.030205][ T8862] ? fs_reclaim_acquire+0x7d/0x100 [ 186.030229][ T8862] should_fail_ex+0x414/0x560 [ 186.030260][ T8862] should_failslab+0xa8/0x100 [ 186.030291][ T8862] __kmalloc_noprof+0xcb/0x4f0 [ 186.030317][ T8862] ? ethnl_default_set_doit+0x168/0x890 [ 186.030346][ T8862] ethnl_default_set_doit+0x168/0x890 [ 186.030369][ T8862] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 186.030395][ T8862] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 186.030430][ T8862] genl_family_rcv_msg_doit+0x212/0x300 [ 186.030464][ T8862] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 186.030505][ T8862] ? bpf_lsm_capable+0x9/0x20 [ 186.030530][ T8862] ? security_capable+0x7e/0x2e0 [ 186.030567][ T8862] genl_rcv_msg+0x60e/0x790 [ 186.030599][ T8862] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.030625][ T8862] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 186.030650][ T8862] ? __asan_memcpy+0x40/0x70 [ 186.030672][ T8862] ? __pfx_ref_tracker_free+0x10/0x10 [ 186.030709][ T8862] netlink_rcv_skb+0x205/0x470 [ 186.030735][ T8862] ? __lock_acquire+0xab9/0xd20 [ 186.030764][ T8862] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.030791][ T8862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.030832][ T8862] ? down_read+0x1ad/0x2e0 [ 186.030859][ T8862] genl_rcv+0x28/0x40 [ 186.030882][ T8862] netlink_unicast+0x82f/0x9e0 [ 186.030926][ T8862] ? __pfx_netlink_unicast+0x10/0x10 [ 186.030959][ T8862] ? netlink_sendmsg+0x642/0xb30 [ 186.030977][ T8862] ? skb_put+0x11b/0x210 [ 186.031001][ T8862] netlink_sendmsg+0x805/0xb30 [ 186.031030][ T8862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.031054][ T8862] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.031075][ T8862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.031096][ T8862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.031117][ T8862] __sock_sendmsg+0x21c/0x270 [ 186.031151][ T8862] ____sys_sendmsg+0x505/0x830 [ 186.031180][ T8862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.031212][ T8862] ? import_iovec+0x74/0xa0 [ 186.031240][ T8862] ___sys_sendmsg+0x21f/0x2a0 [ 186.031264][ T8862] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.031324][ T8862] ? __fget_files+0x2a/0x420 [ 186.031340][ T8862] ? __fget_files+0x3a0/0x420 [ 186.031369][ T8862] __x64_sys_sendmsg+0x19b/0x260 [ 186.031396][ T8862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.031430][ T8862] ? __pfx_ksys_write+0x10/0x10 [ 186.031453][ T8862] ? rcu_is_watching+0x15/0xb0 [ 186.031479][ T8862] ? do_syscall_64+0xbe/0x3b0 [ 186.031505][ T8862] do_syscall_64+0xfa/0x3b0 [ 186.031525][ T8862] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.031545][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.031564][ T8862] ? clear_bhb_loop+0x60/0xb0 [ 186.031588][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.031607][ T8862] RIP: 0033:0x7fc4a198ebe9 [ 186.031624][ T8862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.031641][ T8862] RSP: 002b:00007fc49fbee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.031662][ T8862] RAX: ffffffffffffffda RBX: 00007fc4a1bc5fa0 RCX: 00007fc4a198ebe9 [ 186.031676][ T8862] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 186.031688][ T8862] RBP: 00007fc49fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 186.031700][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.031712][ T8862] R13: 00007fc4a1bc6038 R14: 00007fc4a1bc5fa0 R15: 00007ffdc022c908 [ 186.031753][ T8862] [ 186.048588][ T8846] lo speed is unknown, defaulting to 1000 [ 186.465958][ T8866] lo speed is unknown, defaulting to 1000 [ 186.496336][ T8846] lo speed is unknown, defaulting to 1000 [ 186.563656][ T8846] lo speed is unknown, defaulting to 1000 [ 186.612567][ T8846] lo speed is unknown, defaulting to 1000 [ 186.999861][ T8895] netlink: 'syz.3.826': attribute type 4 has an invalid length. [ 187.018768][ T8899] netlink: 'syz.0.825': attribute type 10 has an invalid length. [ 187.089069][ T8898] macsec1: entered allmulticast mode [ 187.101211][ T8898] ip6gretap0: entered allmulticast mode [ 187.160420][ T8898] ip6gretap0: left allmulticast mode [ 187.237025][ T8899] team0: Device geneve0 is up. Set it down before adding it as a team port [ 187.252685][ T8899] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 187.516045][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 187.640016][ T8921] __nla_validate_parse: 57 callbacks suppressed [ 187.640036][ T8921] netlink: 96 bytes leftover after parsing attributes in process `syz.2.833'. [ 187.921888][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 188.046790][ T8937] netlink: 'syz.1.835': attribute type 1 has an invalid length. [ 188.280741][ T8950] lo speed is unknown, defaulting to 1000 [ 188.456568][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'. [ 188.574878][ T8957] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 188.579206][ T8959] bond_slave_0: entered promiscuous mode [ 188.590274][ T8959] bond_slave_1: entered promiscuous mode [ 188.597188][ T8959] macvlan4: entered allmulticast mode [ 188.602926][ T8959] bond0: entered allmulticast mode [ 188.608258][ T8959] bond_slave_0: entered allmulticast mode [ 188.619244][ T8959] bond_slave_1: entered allmulticast mode [ 188.634621][ T8959] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 188.653217][ T8959] bond0: left allmulticast mode [ 188.661840][ T8959] bond_slave_0: left allmulticast mode [ 188.679533][ T8959] bond_slave_1: left allmulticast mode [ 188.721509][ T8959] bond_slave_0: left promiscuous mode [ 188.727048][ T8959] bond_slave_1: left promiscuous mode [ 188.887843][ T5231] udevd[5231]: worker [6198] terminated by signal 33 (Unknown signal 33) [ 189.206527][ T8984] netlink: 76 bytes leftover after parsing attributes in process `syz.0.854'. [ 189.276563][ T8978] tipc: Enabled bearer , priority 0 [ 189.295845][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.855'. [ 189.318573][ T8978] syzkaller0: entered promiscuous mode [ 189.331630][ T8978] syzkaller0: entered allmulticast mode [ 189.345533][ T8983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.366208][ T8984] tipc: Enabled bearer , priority 0 [ 189.412086][ T8978] tipc: Resetting bearer [ 189.426061][ T8984] syzkaller0: entered promiscuous mode [ 189.434454][ T8984] syzkaller0: entered allmulticast mode [ 189.471484][ T8976] tipc: Resetting bearer [ 189.548761][ T8976] tipc: Disabling bearer [ 189.596758][ T8989] tipc: Resetting bearer [ 189.617833][ T9000] openvswitch: netlink: Message has 1 unknown bytes. [ 189.627250][ T9000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.708519][ T8982] tipc: Resetting bearer [ 189.759475][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 189.793115][ T8982] tipc: Disabling bearer [ 189.937972][ T9016] bridge_slave_1: left allmulticast mode [ 189.958402][ T9016] bridge_slave_1: left promiscuous mode [ 189.974212][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.000253][ T9016] bond0: (slave bond_slave_0): Releasing backup interface [ 190.046257][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 190.058270][ T9016] bond0: (slave bond_slave_1): Releasing backup interface [ 190.137525][ T9016] team0: Port device team_slave_0 removed [ 190.184707][ T9016] team0: Port device team_slave_1 removed [ 190.213017][ T9016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.254977][ T9016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.307138][ T9016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.314906][ T9016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.416946][ T9] lo speed is unknown, defaulting to 1000 [ 190.416975][ T9018] FAULT_INJECTION: forcing a failure. [ 190.416975][ T9018] name failslab, interval 1, probability 0, space 0, times 0 [ 190.470576][ T9018] CPU: 1 UID: 0 PID: 9018 Comm: syz.1.869 Not tainted syzkaller #0 PREEMPT(full) [ 190.470611][ T9018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.470624][ T9018] Call Trace: [ 190.470632][ T9018] [ 190.470641][ T9018] dump_stack_lvl+0x189/0x250 [ 190.470671][ T9018] ? __pfx____ratelimit+0x10/0x10 [ 190.470694][ T9018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.470719][ T9018] ? __pfx__printk+0x10/0x10 [ 190.470754][ T9018] ? __pfx___might_resched+0x10/0x10 [ 190.470773][ T9018] ? fs_reclaim_acquire+0x7d/0x100 [ 190.470797][ T9018] should_fail_ex+0x414/0x560 [ 190.470831][ T9018] should_failslab+0xa8/0x100 [ 190.470862][ T9018] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 190.470890][ T9018] ? rcu_is_watching+0x15/0xb0 [ 190.470909][ T9018] ? ethnl_default_set_doit+0x3d6/0x890 [ 190.470940][ T9018] kmemdup_noprof+0x2b/0x70 [ 190.470968][ T9018] ethnl_default_set_doit+0x3d6/0x890 [ 190.471003][ T9018] genl_family_rcv_msg_doit+0x212/0x300 [ 190.471037][ T9018] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.471079][ T9018] ? bpf_lsm_capable+0x9/0x20 [ 190.471105][ T9018] ? security_capable+0x7e/0x2e0 [ 190.471142][ T9018] genl_rcv_msg+0x60e/0x790 [ 190.471176][ T9018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.471201][ T9018] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 190.471227][ T9018] ? __asan_memcpy+0x40/0x70 [ 190.471249][ T9018] ? __pfx_ref_tracker_free+0x10/0x10 [ 190.471287][ T9018] netlink_rcv_skb+0x205/0x470 [ 190.471305][ T9018] ? __lock_acquire+0xab9/0xd20 [ 190.471334][ T9018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.471363][ T9018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.471407][ T9018] ? down_read+0x1ad/0x2e0 [ 190.471434][ T9018] genl_rcv+0x28/0x40 [ 190.471458][ T9018] netlink_unicast+0x82f/0x9e0 [ 190.471498][ T9018] ? __pfx_netlink_unicast+0x10/0x10 [ 190.471530][ T9018] ? netlink_sendmsg+0x642/0xb30 [ 190.471548][ T9018] ? skb_put+0x11b/0x210 [ 190.471574][ T9018] netlink_sendmsg+0x805/0xb30 [ 190.471612][ T9018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.471638][ T9018] ? aa_sock_msg_perm+0xf1/0x1d0 [ 190.471659][ T9018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.471679][ T9018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.471701][ T9018] __sock_sendmsg+0x21c/0x270 [ 190.471734][ T9018] ____sys_sendmsg+0x505/0x830 [ 190.471765][ T9018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.471800][ T9018] ? import_iovec+0x74/0xa0 [ 190.471827][ T9018] ___sys_sendmsg+0x21f/0x2a0 [ 190.471854][ T9018] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.471921][ T9018] ? __fget_files+0x2a/0x420 [ 190.471938][ T9018] ? __fget_files+0x3a0/0x420 [ 190.471968][ T9018] __x64_sys_sendmsg+0x19b/0x260 [ 190.471995][ T9018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.472030][ T9018] ? __pfx_ksys_write+0x10/0x10 [ 190.472053][ T9018] ? rcu_is_watching+0x15/0xb0 [ 190.472079][ T9018] ? do_syscall_64+0xbe/0x3b0 [ 190.472105][ T9018] do_syscall_64+0xfa/0x3b0 [ 190.472125][ T9018] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.472145][ T9018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.472164][ T9018] ? clear_bhb_loop+0x60/0xb0 [ 190.472188][ T9018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.472206][ T9018] RIP: 0033:0x7fc4a198ebe9 [ 190.472224][ T9018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.472240][ T9018] RSP: 002b:00007fc49fbee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.472261][ T9018] RAX: ffffffffffffffda RBX: 00007fc4a1bc5fa0 RCX: 00007fc4a198ebe9 [ 190.472276][ T9018] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 190.472289][ T9018] RBP: 00007fc49fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 190.472301][ T9018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.472312][ T9018] R13: 00007fc4a1bc6038 R14: 00007fc4a1bc5fa0 R15: 00007ffdc022c908 [ 190.472346][ T9018] [ 190.883021][ T9025] syz.2.868 (9025) used obsolete PPPIOCDETACH ioctl [ 190.983541][ T9035] team0: Mode changed to "activebackup" [ 191.018993][ T9047] netlink: 60 bytes leftover after parsing attributes in process `syz.0.876'. [ 191.041090][ T9047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.876'. [ 191.901444][ T9073] lo speed is unknown, defaulting to 1000 [ 192.359321][ T9090] openvswitch: netlink: Message has 1 unknown bytes. [ 192.366908][ T9090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.451883][ T9091] openvswitch: netlink: IPv6 tunnel dst address is zero [ 192.633540][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.895'. [ 192.639578][ T9095] Bluetooth: MGMT ver 1.23 [ 192.879672][ T9109] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 193.345451][ T9116] netlink: 332 bytes leftover after parsing attributes in process `syz.1.900'. [ 193.360100][ T9116] netlink: 104 bytes leftover after parsing attributes in process `syz.1.900'. [ 193.380581][ T9116] netlink: 32 bytes leftover after parsing attributes in process `syz.1.900'. [ 193.416739][ T9118] tipc: Enabled bearer , priority 0 [ 193.448703][ T9118] syzkaller0: entered promiscuous mode [ 193.460632][ T9118] syzkaller0: entered allmulticast mode [ 193.528707][ T9117] tipc: Resetting bearer [ 193.594194][ T9117] tipc: Disabling bearer [ 193.603689][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 193.617248][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 193.626429][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 193.635631][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 193.645846][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 193.681156][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 193.702340][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 194.239925][ T9148] erspan0: entered promiscuous mode [ 194.272195][ T9148] erspan0: left promiscuous mode [ 194.436469][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.451062][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.505050][ T9155] lo speed is unknown, defaulting to 1000 [ 194.513355][ T9160] openvswitch: netlink: Message has 1 unknown bytes. [ 194.530457][ T9160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.877295][ T9180] FAULT_INJECTION: forcing a failure. [ 194.877295][ T9180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.896133][ T9175] netlink: 'syz.2.926': attribute type 13 has an invalid length. [ 194.906792][ T9175] netlink: 'syz.2.926': attribute type 17 has an invalid length. [ 194.919048][ T9180] CPU: 1 UID: 0 PID: 9180 Comm: syz.1.927 Not tainted syzkaller #0 PREEMPT(full) [ 194.919076][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.919089][ T9180] Call Trace: [ 194.919098][ T9180] [ 194.919106][ T9180] dump_stack_lvl+0x189/0x250 [ 194.919134][ T9180] ? __pfx____ratelimit+0x10/0x10 [ 194.919156][ T9180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.919178][ T9180] ? __pfx__printk+0x10/0x10 [ 194.919228][ T9180] should_fail_ex+0x414/0x560 [ 194.919262][ T9180] _copy_to_user+0x31/0xb0 [ 194.919289][ T9180] simple_read_from_buffer+0xe1/0x170 [ 194.919323][ T9180] proc_fail_nth_read+0x1b3/0x220 [ 194.919351][ T9180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.919377][ T9180] ? rw_verify_area+0x2a6/0x4d0 [ 194.919402][ T9180] ? __lock_acquire+0xab9/0xd20 [ 194.919430][ T9180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.919454][ T9180] vfs_read+0x200/0xa30 [ 194.919479][ T9180] ? fdget_pos+0x247/0x320 [ 194.919502][ T9180] ? __pfx___mutex_lock+0x10/0x10 [ 194.919526][ T9180] ? __pfx_vfs_read+0x10/0x10 [ 194.919553][ T9180] ? __fget_files+0x2a/0x420 [ 194.919577][ T9180] ? __fget_files+0x3a0/0x420 [ 194.919593][ T9180] ? __fget_files+0x2a/0x420 [ 194.919622][ T9180] ksys_read+0x145/0x250 [ 194.919652][ T9180] ? __pfx_ksys_read+0x10/0x10 [ 194.919676][ T9180] ? rcu_is_watching+0x15/0xb0 [ 194.919702][ T9180] ? do_syscall_64+0xbe/0x3b0 [ 194.919730][ T9180] do_syscall_64+0xfa/0x3b0 [ 194.919751][ T9180] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.919772][ T9180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.919807][ T9180] ? clear_bhb_loop+0x60/0xb0 [ 194.919831][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.919851][ T9180] RIP: 0033:0x7fc4a198d5fc [ 194.919868][ T9180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 194.919885][ T9180] RSP: 002b:00007fc49fbee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.919910][ T9180] RAX: ffffffffffffffda RBX: 00007fc4a1bc5fa0 RCX: 00007fc4a198d5fc [ 194.919925][ T9180] RDX: 000000000000000f RSI: 00007fc49fbee0a0 RDI: 0000000000000008 [ 194.919936][ T9180] RBP: 00007fc49fbee090 R08: 0000000000000000 R09: 0000000000000000 [ 194.919949][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.919960][ T9180] R13: 00007fc4a1bc6038 R14: 00007fc4a1bc5fa0 R15: 00007ffdc022c908 [ 194.919993][ T9180] [ 194.952444][ T9175] gretap0: left promiscuous mode [ 194.972371][ T9185] netlink: 'syz.4.924': attribute type 10 has an invalid length. [ 195.008196][ T9186] netlink: 'syz.0.925': attribute type 15 has an invalid length. [ 195.210927][ T9175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.270678][ T9184] lo speed is unknown, defaulting to 1000 [ 195.335338][ T9185] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.407184][ T9219] batadv_slave_1: entered promiscuous mode [ 196.426581][ T9218] batadv_slave_1: left promiscuous mode [ 196.767831][ T9233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.920048][ T9245] tipc: Trying to set illegal importance in message [ 197.480212][ T9266] IPVS: set_ctl: invalid protocol: 50 172.20.20.27:20003 [ 197.834380][ T9283] netlink: 'syz.3.958': attribute type 4 has an invalid length. [ 199.364713][ T9288] erspan0: entered promiscuous mode [ 199.373052][ T9288] erspan0: left promiscuous mode [ 199.646660][ T9320] __nla_validate_parse: 59 callbacks suppressed [ 199.646680][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.968'. [ 199.893171][ T9315] lo speed is unknown, defaulting to 1000 [ 200.320695][ T9348] netlink: 'syz.1.973': attribute type 1 has an invalid length. [ 200.482449][ T9348] bond2: entered promiscuous mode [ 200.488108][ T9348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.536661][ T9352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.546385][ T9352] bond2: (slave bond3): making interface the new active one [ 200.553920][ T9352] bond3: entered promiscuous mode [ 200.559923][ T9352] bond2: (slave bond3): Enslaving as an active interface with an up link [ 200.586872][ T9361] tipc: Enabling of bearer rejected, already enabled [ 200.623526][ T9355] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.642883][ T9355] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 200.911629][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.980'. [ 200.959823][ T9373] lo speed is unknown, defaulting to 1000 [ 201.237369][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 201.559567][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 201.591985][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 201.683688][ T9404] netlink: 48 bytes leftover after parsing attributes in process `syz.2.991'. [ 201.692993][ T9404] netlink: 48 bytes leftover after parsing attributes in process `syz.2.991'. [ 201.788798][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 201.861321][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 201.885363][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 202.412527][ T9425] erspan0: entered promiscuous mode [ 202.430225][ T9425] erspan0: left promiscuous mode [ 202.631673][ T9433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.676448][ T9429] pim6reg1: entered promiscuous mode [ 202.701578][ T9429] pim6reg1: entered allmulticast mode [ 202.982697][ T9449] bond0: entered promiscuous mode [ 202.998026][ T9449] bond_slave_0: entered promiscuous mode [ 203.015806][ T9449] bond_slave_1: entered promiscuous mode [ 203.025216][ T9451] netlink: 'syz.3.1007': attribute type 3 has an invalid length. [ 203.047119][ T9449] bond0: left promiscuous mode [ 203.052503][ T9449] bond_slave_0: left promiscuous mode [ 203.065641][ T9449] bond_slave_1: left promiscuous mode [ 203.989591][ T9494] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 204.019534][ T9494] netlink: 'syz.1.1025': attribute type 10 has an invalid length. [ 204.183763][ T9503] ip6tnl3: entered allmulticast mode [ 204.293598][ T9508] openvswitch: netlink: Message has 1 unknown bytes. [ 204.300574][ T9508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.991306][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 216.997848][ T5884] Bluetooth: hci1: command 0x0406 tx timeout [ 216.997870][ T5181] Bluetooth: hci0: command 0x0406 tx timeout [ 217.004273][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 255.875036][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.881492][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.460829][ T9526] netlink: 'syz.1.1040': attribute type 1 has an invalid length. [ 257.488884][ T9525] __nla_validate_parse: 12 callbacks suppressed [ 257.488906][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 257.506415][ T9525] openvswitch: netlink: Flow actions attr not present in new flow. [ 257.559214][ T9535] bridge0: Device is already in use. [ 257.574948][ T9537] openvswitch: netlink: IP tunnel dst address not specified [ 257.584696][ T9525] can: request_module (can-proto-0) failed. [ 257.612205][ T9530] syzkaller1: entered promiscuous mode [ 257.635256][ T9530] syzkaller1: entered allmulticast mode [ 257.681769][ T9525] openvswitch: netlink: IP tunnel dst address not specified [ 257.759258][ T9537] can: request_module (can-proto-0) failed. [ 257.769398][ T9543] syzkaller0: left promiscuous mode [ 257.782542][ T9543] syzkaller0: left allmulticast mode [ 257.944739][ T9554] netlink: 'syz.3.1050': attribute type 10 has an invalid length. [ 258.174732][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.204227][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.205658][ T9563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1053'. [ 258.228449][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1055'. [ 258.308186][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1053'. [ 258.434200][ T9567] lo speed is unknown, defaulting to 1000 [ 258.510747][ T9572] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1056'. [ 258.586161][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1056'. [ 258.637267][ T9579] netlink: 'syz.1.1059': attribute type 2 has an invalid length. [ 258.660072][ T9579] bridge_slave_0: left allmulticast mode [ 258.666600][ T9579] bridge_slave_0: left promiscuous mode [ 258.675146][ T9579] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.697067][ T9579] bridge_slave_1: left allmulticast mode [ 258.708395][ T9579] bridge_slave_1: left promiscuous mode [ 258.716026][ T9579] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.736571][ T9579] bond0: (slave bond_slave_0): Releasing backup interface [ 258.747165][ T9579] bond0: (slave bond_slave_1): Releasing backup interface [ 258.760470][ T9579] team0: Port device team_slave_0 removed [ 258.774018][ T9579] team0: Port device team_slave_1 removed [ 258.780722][ T9579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.790153][ T9579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.800170][ T9579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.808657][ T9579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.826700][ T9579] bond0: (slave wlan1): Releasing backup interface [ 258.838429][ T9579] bond2: (slave bond3): Releasing backup interface [ 258.847030][ T9579] bond3: left promiscuous mode [ 259.156177][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 259.258166][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 259.267976][ T9597] netlink: 'syz.0.1064': attribute type 4 has an invalid length. [ 259.284544][ T9597] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1064'. [ 259.316127][ T9597] wlan1: mtu less than device minimum [ 259.405463][ T9602] vxcan1: entered allmulticast mode [ 259.423088][ T9602] vxcan1: left allmulticast mode [ 259.717429][ T9608] lo speed is unknown, defaulting to 1000 [ 259.797691][ T9614] macvlan3: entered allmulticast mode [ 259.809457][ T9614] veth1_vlan: entered allmulticast mode [ 259.819225][ T9614] veth1_vlan: left allmulticast mode [ 260.236821][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 260.696469][ T9640] netlink: 'syz.2.1078': attribute type 11 has an invalid length. [ 261.119571][ C1] vcan0: j1939_tp_txtimer: 0xffff88801babe400: tx aborted with unknown reason: -2 [ 261.130404][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801babf400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 261.150740][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801babe400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 261.339989][ T9664] tipc: Enabled bearer , priority 0 [ 261.366594][ T9664] syzkaller0: entered promiscuous mode [ 261.395176][ T9664] syzkaller0: entered allmulticast mode [ 261.421872][ T9671] tipc: Resetting bearer [ 261.455992][ T9662] tipc: Resetting bearer [ 261.521771][ T9662] tipc: Disabling bearer [ 261.707341][ T9685] batadv2: entered promiscuous mode [ 261.720186][ T9685] batadv2: entered allmulticast mode [ 262.676795][ T9722] __nla_validate_parse: 5 callbacks suppressed [ 262.676818][ T9722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 262.833249][ T9734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1118'. [ 262.972362][ T9740] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 263.048773][ T9740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.113132][ T9740] vlan3: entered allmulticast mode [ 263.121156][ T9740] macvtap0: entered allmulticast mode [ 263.128540][ T9740] veth0_macvtap: entered allmulticast mode [ 263.140884][ T9740] bond3: (slave vlan3): making interface the new active one [ 263.156470][ T9740] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 263.200670][ T9740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 263.340717][ T9763] syz_tun: entered allmulticast mode [ 263.383610][ T9760] syz_tun: left allmulticast mode [ 263.752958][ T9752] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 263.931629][ T9785] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (4) [ 263.989510][ T9789] pimreg: entered allmulticast mode [ 264.863094][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1168'. [ 265.108332][ T9856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1176'. [ 265.395742][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1184'. [ 265.565336][ T9883] tipc: Enabled bearer , priority 0 [ 265.595381][ T9883] syzkaller0: entered promiscuous mode [ 265.595869][ T9885] netlink: 'syz.3.1190': attribute type 11 has an invalid length. [ 265.600902][ T9883] syzkaller0: entered allmulticast mode [ 265.723149][ T9883] tipc: Resetting bearer [ 265.773477][ T9881] tipc: Resetting bearer [ 265.798501][ T9881] tipc: Disabling bearer [ 266.441534][ T9929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1208'. [ 267.947488][ T9943] netlink: 'syz.1.1215': attribute type 1 has an invalid length. [ 267.972869][ T9943] bridge0: Device is already in use. [ 268.041953][ T9946] syzkaller0: entered promiscuous mode [ 268.063129][ T9946] syzkaller0: entered allmulticast mode [ 268.217840][ T9949] syzkaller0: entered promiscuous mode [ 268.229042][ T9949] syzkaller0: entered allmulticast mode [ 269.688852][ T9963] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.699899][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.707223][ T9966] bridge0: port 1(bridge_slave_0) entered listening state [ 269.864311][ T9986] syzkaller0: left promiscuous mode [ 269.896289][ T9986] syzkaller0: left allmulticast mode [ 270.672838][T10033] netlink: 'syz.1.1256': attribute type 11 has an invalid length. [ 271.204495][T10056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1267'. [ 271.474012][T10062] netlink: 'syz.0.1270': attribute type 1 has an invalid length. [ 271.491776][T10064] netlink: 'syz.4.1272': attribute type 29 has an invalid length. [ 271.533200][T10067] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1271'. [ 271.575624][T10062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.630600][T10064] netlink: 'syz.4.1272': attribute type 29 has an invalid length. [ 271.639092][T10069] netlink: 'syz.4.1272': attribute type 29 has an invalid length. [ 271.686684][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1270'. [ 271.777863][T10070] vlan2: entered allmulticast mode [ 271.795682][T10075] netlink: 'syz.4.1275': attribute type 1 has an invalid length. [ 271.840532][T10070] macvtap0: entered allmulticast mode [ 271.867664][T10070] veth0_macvtap: entered allmulticast mode [ 271.897936][T10070] bond3: (slave vlan2): making interface the new active one [ 271.912396][T10070] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 271.929936][T10079] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 271.949478][T10083] netlink: 'syz.2.1277': attribute type 29 has an invalid length. [ 272.379181][T10110] netlink: 'syz.0.1291': attribute type 1 has an invalid length. [ 272.454682][T10110] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.477025][T10110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1291'. [ 272.969695][T10147] Dead loop on virtual device ip6_vti0, fix it urgently! [ 273.174626][T10158] netlink: 'syz.3.1314': attribute type 2 has an invalid length. [ 273.221516][T10158] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 273.318917][ T5883] Bluetooth: hci4: command 0x0406 tx timeout [ 273.820683][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1334'. [ 274.191321][T10223] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1345'. [ 274.364912][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1349'. [ 274.419858][T10235] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1349'. [ 274.440694][T10232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1349'. [ 274.935512][T10270] netlink: 'syz.3.1365': attribute type 11 has an invalid length. [ 275.054652][T10276] rdma_rxe: rxe_newlink: failed to add wlan0 [ 275.500863][T10302] netlink: 'syz.3.1377': attribute type 11 has an invalid length. [ 275.660193][T10311] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.673048][T10311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1381'. [ 276.198167][T10350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.229936][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1396'. [ 276.376268][T10363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1403'. [ 276.619656][T10379] validate_nla: 5 callbacks suppressed [ 276.619685][T10379] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 276.684024][T10382] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1411'. [ 276.781973][T10388] tipc: Enabled bearer , priority 0 [ 276.789715][T10388] syzkaller0: entered promiscuous mode [ 276.796751][T10388] syzkaller0: entered allmulticast mode [ 276.813564][T10388] tipc: Resetting bearer [ 276.840653][T10386] tipc: Resetting bearer [ 276.888214][T10386] tipc: Disabling bearer [ 276.917149][T10395] ------------[ cut here ]------------ [ 276.922959][T10395] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0)(1) [ 276.950358][T10395] WARNING: CPU: 0 PID: 10395 at kernel/bpf/verifier.c:2733 reg_bounds_sanity_check+0x6e6/0xc20 [ 276.961959][T10395] Modules linked in: [ 276.965902][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.2.1416 Not tainted syzkaller #0 PREEMPT(full) [ 276.975837][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.987779][T10395] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 276.994453][T10395] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 ef 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 277.015405][T10395] RSP: 0018:ffffc9001bd5ef08 EFLAGS: 00010282 [ 277.022162][T10395] RAX: 4d645e43db95d600 RBX: 0000000000000000 RCX: 0000000000080000 [ 277.030181][T10395] RDX: ffffc9000c66b000 RSI: 00000000000077b0 RDI: 00000000000077b1 [ 277.038555][T10395] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 277.047257][T10395] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff888024f77348 [ 277.055596][T10395] R13: ffff888024f77368 R14: ffff888024f77380 R15: 0000000000000000 [ 277.064115][T10395] FS: 00007fad18da56c0(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 277.073678][T10395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.080301][T10395] CR2: 000000110c36a931 CR3: 0000000078c48000 CR4: 00000000003526f0 [ 277.088390][T10395] Call Trace: [ 277.091755][T10395] [ 277.094746][T10395] reg_set_min_max+0x264/0x300 [ 277.099554][T10395] check_cond_jmp_op+0x159b/0x2910 [ 277.105121][T10395] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 277.110626][T10395] ? push_jmp_history+0x1dd/0x6f0 [ 277.115765][T10395] do_check+0x6751/0xe520 [ 277.120159][T10395] ? __kasan_kmalloc+0x93/0xb0 [ 277.125033][T10395] ? do_check_common+0x209/0x24f0 [ 277.130138][T10395] ? __pfx_do_check+0x10/0x10 [ 277.135542][T10395] ? init_func_state+0x1ddf/0x2d20 [ 277.140708][T10395] do_check_common+0x1949/0x24f0 [ 277.145730][T10395] bpf_check+0x1746a/0x1d2d0 [ 277.150329][T10395] ? is_bpf_text_address+0x26/0x2b0 [ 277.155738][T10395] ? kernel_text_address+0xa5/0xe0 [ 277.160865][T10395] ? __kernel_text_address+0xd/0x40 [ 277.166367][T10395] ? __lock_acquire+0xab9/0xd20 [ 277.171404][T10395] ? __mutex_trylock_common+0x153/0x260 [ 277.177116][T10395] ? __pfx___mutex_trylock_common+0x10/0x10 [ 277.183157][T10395] ? css_rstat_updated+0x23a/0x4f0 [ 277.188299][T10395] ? __lock_acquire+0xab9/0xd20 [ 277.193478][T10395] ? __pfx_bpf_check+0x10/0x10 [ 277.198255][T10395] ? ktime_get_with_offset+0x8c/0x2a0 [ 277.203737][T10395] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 277.210011][T10395] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.215293][T10395] ? ktime_get_with_offset+0x8c/0x2a0 [ 277.220706][T10395] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 277.227343][T10395] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 277.234058][T10395] ? __asan_memset+0x22/0x50 [ 277.238698][T10395] ? bpf_obj_name_cpy+0x194/0x1e0 [ 277.243815][T10395] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 277.249248][T10395] ? security_bpf_prog_load+0x7f/0x310 [ 277.255097][T10395] bpf_prog_load+0x1318/0x1930 [ 277.259923][T10395] ? __pfx_bpf_prog_load+0x10/0x10 [ 277.265129][T10395] ? bpf_lsm_bpf+0x9/0x20 [ 277.269507][T10395] ? security_bpf+0x7e/0x300 [ 277.274191][T10395] __sys_bpf+0x528/0x870 [ 277.278584][T10395] ? __pfx___sys_bpf+0x10/0x10 [ 277.283679][T10395] ? rcu_is_watching+0x15/0xb0 [ 277.288460][T10395] __x64_sys_bpf+0x7c/0x90 [ 277.293026][T10395] do_syscall_64+0xfa/0x3b0 [ 277.297573][T10395] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.302946][T10395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.309044][T10395] ? clear_bhb_loop+0x60/0xb0 [ 277.314017][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.319921][T10395] RIP: 0033:0x7fad17f8ebe9 [ 277.324432][T10395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.344340][T10395] RSP: 002b:00007fad18da5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.352850][T10395] RAX: ffffffffffffffda RBX: 00007fad181c5fa0 RCX: 00007fad17f8ebe9 [ 277.360875][T10395] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 277.368995][T10395] RBP: 00007fad18011e19 R08: 0000000000000000 R09: 0000000000000000 [ 277.377242][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.385616][T10395] R13: 00007fad181c6038 R14: 00007fad181c5fa0 R15: 00007ffd97fe48e8 [ 277.393684][T10395] [ 277.396744][T10395] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.404042][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.2.1416 Not tainted syzkaller #0 PREEMPT(full) [ 277.413447][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.423507][T10395] Call Trace: [ 277.426798][T10395] [ 277.429732][T10395] dump_stack_lvl+0x99/0x250 [ 277.434338][T10395] ? __asan_memcpy+0x40/0x70 [ 277.438947][T10395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.444158][T10395] ? __pfx__printk+0x10/0x10 [ 277.448774][T10395] vpanic+0x281/0x750 [ 277.452767][T10395] ? __pfx__printk+0x10/0x10 [ 277.457370][T10395] ? __pfx_vpanic+0x10/0x10 [ 277.461881][T10395] ? is_bpf_text_address+0x26/0x2b0 [ 277.467108][T10395] panic+0xb9/0xc0 [ 277.470840][T10395] ? __pfx_panic+0x10/0x10 [ 277.475278][T10395] __warn+0x31b/0x4b0 [ 277.479265][T10395] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 277.484903][T10395] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 277.490538][T10395] report_bug+0x2be/0x4f0 [ 277.494874][T10395] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 277.500507][T10395] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 277.506143][T10395] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 277.511784][T10395] handle_bug+0x84/0x160 [ 277.516060][T10395] exc_invalid_op+0x1a/0x50 [ 277.520570][T10395] asm_exc_invalid_op+0x1a/0x20 [ 277.525427][T10395] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 277.531670][T10395] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 ef 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 277.551284][T10395] RSP: 0018:ffffc9001bd5ef08 EFLAGS: 00010282 [ 277.557368][T10395] RAX: 4d645e43db95d600 RBX: 0000000000000000 RCX: 0000000000080000 [ 277.565344][T10395] RDX: ffffc9000c66b000 RSI: 00000000000077b0 RDI: 00000000000077b1 [ 277.573319][T10395] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 277.581306][T10395] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff888024f77348 [ 277.589280][T10395] R13: ffff888024f77368 R14: ffff888024f77380 R15: 0000000000000000 [ 277.597294][T10395] reg_set_min_max+0x264/0x300 [ 277.602078][T10395] check_cond_jmp_op+0x159b/0x2910 [ 277.607241][T10395] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 277.612729][T10395] ? push_jmp_history+0x1dd/0x6f0 [ 277.617787][T10395] do_check+0x6751/0xe520 [ 277.622143][T10395] ? __kasan_kmalloc+0x93/0xb0 [ 277.626917][T10395] ? do_check_common+0x209/0x24f0 [ 277.631987][T10395] ? __pfx_do_check+0x10/0x10 [ 277.636674][T10395] ? init_func_state+0x1ddf/0x2d20 [ 277.641813][T10395] do_check_common+0x1949/0x24f0 [ 277.646797][T10395] bpf_check+0x1746a/0x1d2d0 [ 277.651399][T10395] ? is_bpf_text_address+0x26/0x2b0 [ 277.656651][T10395] ? kernel_text_address+0xa5/0xe0 [ 277.661799][T10395] ? __kernel_text_address+0xd/0x40 [ 277.667043][T10395] ? __lock_acquire+0xab9/0xd20 [ 277.671920][T10395] ? __mutex_trylock_common+0x153/0x260 [ 277.677478][T10395] ? __pfx___mutex_trylock_common+0x10/0x10 [ 277.683390][T10395] ? css_rstat_updated+0x23a/0x4f0 [ 277.688515][T10395] ? __lock_acquire+0xab9/0xd20 [ 277.693381][T10395] ? __pfx_bpf_check+0x10/0x10 [ 277.698166][T10395] ? ktime_get_with_offset+0x8c/0x2a0 [ 277.703550][T10395] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 277.709809][T10395] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.715033][T10395] ? ktime_get_with_offset+0x8c/0x2a0 [ 277.720427][T10395] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 277.726683][T10395] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 277.733295][T10395] ? __asan_memset+0x22/0x50 [ 277.737887][T10395] ? bpf_obj_name_cpy+0x194/0x1e0 [ 277.742912][T10395] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 277.748122][T10395] ? security_bpf_prog_load+0x7f/0x310 [ 277.753600][T10395] bpf_prog_load+0x1318/0x1930 [ 277.758402][T10395] ? __pfx_bpf_prog_load+0x10/0x10 [ 277.763543][T10395] ? bpf_lsm_bpf+0x9/0x20 [ 277.767912][T10395] ? security_bpf+0x7e/0x300 [ 277.772535][T10395] __sys_bpf+0x528/0x870 [ 277.776806][T10395] ? __pfx___sys_bpf+0x10/0x10 [ 277.781616][T10395] ? rcu_is_watching+0x15/0xb0 [ 277.786400][T10395] __x64_sys_bpf+0x7c/0x90 [ 277.790820][T10395] do_syscall_64+0xfa/0x3b0 [ 277.795330][T10395] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.800539][T10395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.806651][T10395] ? clear_bhb_loop+0x60/0xb0 [ 277.811354][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.817245][T10395] RIP: 0033:0x7fad17f8ebe9 [ 277.821665][T10395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.841373][T10395] RSP: 002b:00007fad18da5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.849818][T10395] RAX: ffffffffffffffda RBX: 00007fad181c5fa0 RCX: 00007fad17f8ebe9 [ 277.857816][T10395] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 277.865801][T10395] RBP: 00007fad18011e19 R08: 0000000000000000 R09: 0000000000000000 [ 277.873770][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.881742][T10395] R13: 00007fad181c6038 R14: 00007fad181c5fa0 R15: 00007ffd97fe48e8 [ 277.889732][T10395] [ 277.893088][T10395] Kernel Offset: disabled [ 277.897413][T10395] Rebooting in 86400 seconds..