last executing test programs: 3.47688458s ago: executing program 2 (id=1619): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) 3.280202927s ago: executing program 2 (id=1627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r3, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x0, &(0x7f0000000140), 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3, r3, r3, r3, 0xffffffffffffffff, r3], 0x0, 0x10, 0xfffffffe}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) 2.446645531s ago: executing program 1 (id=1638): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x4, "0441"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000500)=[{0x1, 0x3, {0x0, 0xf0, 0x2}, {0x2, 0xd1fb6aea71e2dac9, 0x4}, 0xfd, 0xfe}, {0x0, 0x0, {0xcf3369b4363cbf26, 0x1, 0x4}, {0x1, 0xff}, 0xfd, 0xfd}, {0x1, 0x3, {0x1, 0xf0, 0x7}, {0x2, 0xf0, 0x2}, 0xfd, 0xfd}, {0x2, 0x3, {0x2, 0xf0}, {0x2, 0xf0}, 0x0, 0xfd}, {0x3, 0x3, {0x0, 0x0, 0x3}, {0x1, 0xf0, 0x4}, 0x2, 0xfe}], 0xa0) accept4(r0, &(0x7f00000003c0)=@nl=@unspec, &(0x7f0000000200)=0x80, 0x800) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r3, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001040e0800531bf96257000005"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$netrom(r6, &(0x7f0000000180)={{0x3, @bcast, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 1.959653122s ago: executing program 1 (id=1643): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)="bd", 0x1, 0x8840, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) listen(0xffffffffffffffff, 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, 0x0, 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="f73887", 0x3, 0x20000000, 0x0, 0x0) 1.90222546s ago: executing program 2 (id=1644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c000000442b57e04d5ed4b9a652289595d86f0f1351fb00ec456d51f8dcb6d163d61c3cfd339f9ec89cfcbe2bf2c12984fb5b7ad159a2285e28fc83d44dac078efa1e5ef9d428a69e758282d20785505a4d4bcf2bf3389bf8aaee396536cef35941fe0d21073b7a7136a14d3e6597203a8c1c60ab617a1c1a572f427b0846c99eeb923528a654be4ce7d9b3759e0c5eedf960a6d7f91c82352fdaadf2c28156afdaa44e4659993d7493912ac1770ed82184dc52a7de8d1de2c65ecb4739289d2378b62d8ab7babb", @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e0000000000000000000800050000020000"], 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r6, 0xcb}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r6, 0x8}, &(0x7f0000000240)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x70}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000bc0)={0x284, r5, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1e4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2a06db2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff68}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$)^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'netem\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x75522582}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'netem\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!.*%#\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x20048088}, 0x20000050) (async) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.818152659s ago: executing program 0 (id=1645): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100003050000200000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x40}}, 0x44) 1.689074969s ago: executing program 0 (id=1648): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180900001200000000000000fe000000850000006d"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='workqueue_queue_work\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1.438280122s ago: executing program 4 (id=1651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.409465384s ago: executing program 0 (id=1652): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) unshare(0x22000600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2e, &(0x7f00000001c0), 0x4) 1.266022652s ago: executing program 0 (id=1653): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x4, "0441"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000500)=[{0x1, 0x3, {0x0, 0xf0, 0x2}, {0x2, 0xd1fb6aea71e2dac9, 0x4}, 0xfd, 0xfe}, {0x0, 0x0, {0xcf3369b4363cbf26, 0x1, 0x4}, {0x1, 0xff}, 0xfd, 0xfd}, {0x1, 0x3, {0x1, 0xf0, 0x7}, {0x2, 0xf0, 0x2}, 0xfd, 0xfd}, {0x2, 0x3, {0x2, 0xf0}, {0x2, 0xf0}, 0x0, 0xfd}, {0x3, 0x3, {0x0, 0x0, 0x3}, {0x1, 0xf0, 0x4}, 0x2, 0xfe}], 0xa0) accept4(r0, &(0x7f00000003c0)=@nl=@unspec, &(0x7f0000000200)=0x80, 0x800) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r3, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001040e0800531bf96257000005"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$netrom(r6, &(0x7f0000000180)={{0x3, @bcast, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 1.265660263s ago: executing program 2 (id=1654): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24048001) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x8c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$inet(r2, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x5, 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req={0x4, 0xfff, 0xc, 0xffff}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000480)=[@in6={0xa, 0x4e24, 0x6, @remote, 0xd}]}, &(0x7f0000000440)=0x10) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000340)) socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000100)) socket$xdp(0x2c, 0x3, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x40000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x0, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0) 1.034283884s ago: executing program 0 (id=1656): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000500)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000089287da26daf0f", 0x58}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x3, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0xa}, {0x4, 0x9, 0x8, 0x873}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$alg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) recvmmsg$unix(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12040, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00001100000800fe800000000000000000000000000000000000000000013a00000000000000fd7e907800000000fc000000000000000000000000000000fe8000"/78], 0x66) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x4090) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r9, 0x7ca8e000) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x1c}}, 0xf) 957.828734ms ago: executing program 3 (id=1657): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r1) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x28, 0x5, 0x0) getsockopt(r4, 0x28, 0x8, 0x0, &(0x7f0000000040)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}}, 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 957.002153ms ago: executing program 1 (id=1658): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@private=0xa010102, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x800}, {@multicast2}, {@dev, 0x4}]}]}}}}}}}, 0x0) 903.321351ms ago: executing program 1 (id=1659): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c0}, 0x4054) (fail_nth: 3) 863.827737ms ago: executing program 4 (id=1660): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x1c}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1830ca735b36193e, 0x1}, 0x3}}, 0x10) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x7ff, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 793.739204ms ago: executing program 1 (id=1661): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) accept$nfc_llcp(r0, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB], 0x254}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000640)) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1451c4a2525fcb3dae000000030a0104000000000000000001000000140000001100010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc029078000017fda218f1a6001ce00003000306907800fa00094570fff600650005010400030b010102ac1414aa"], 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x4}, 0x3c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) 769.726794ms ago: executing program 3 (id=1662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180900001200000000000000fe000000850000006d"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='workqueue_queue_work\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 668.216354ms ago: executing program 0 (id=1663): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000380)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x8800) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000008000000dd0100000000000063010400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0x4f, 0x7, 0x4}, 0x9c) 655.776997ms ago: executing program 3 (id=1664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 533.965687ms ago: executing program 1 (id=1665): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000000000000060000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000f92686a88f16547d41b309951354bc197b02973e80092f346b918e714fb4882d12484c3dea75053558594101152f1e63489af1a1d2bf1eda5dfdb088e1766249cc8284c0600ad994f192ecf0a65b5edc1f229fa0b0aa063b835df85a0b2a6e5ae1"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x40004) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="390000001f000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x400) sendto$inet6(r8, 0x0, 0x0, 0x400a048, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) 478.141135ms ago: executing program 4 (id=1666): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x4, "0441"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000500)=[{0x1, 0x3, {0x0, 0xf0, 0x2}, {0x2, 0xd1fb6aea71e2dac9, 0x4}, 0xfd, 0xfe}, {0x0, 0x0, {0xcf3369b4363cbf26, 0x1, 0x4}, {0x1, 0xff}, 0xfd, 0xfd}, {0x1, 0x3, {0x1, 0xf0, 0x7}, {0x2, 0xf0, 0x2}, 0xfd, 0xfd}, {0x2, 0x3, {0x2, 0xf0}, {0x2, 0xf0}, 0x0, 0xfd}, {0x3, 0x3, {0x0, 0x0, 0x3}, {0x1, 0xf0, 0x4}, 0x2, 0xfe}], 0xa0) accept4(r0, &(0x7f00000003c0)=@nl=@unspec, &(0x7f0000000200)=0x80, 0x800) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r3, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="28000000120001040e0800531bf96257000005"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$netrom(r6, &(0x7f0000000180)={{0x3, @bcast, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 372.088694ms ago: executing program 3 (id=1667): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1a852a3ac0122d5100000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x19c00}, 0x94) 262.086778ms ago: executing program 4 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043000900000000000000000003000000080002"], 0x1c}}, 0x24000044) r1 = epoll_create(0x7) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2711}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2004}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x40010020, 0x0) 261.849396ms ago: executing program 2 (id=1669): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r2], 0x50}}, 0x2) 185.28636ms ago: executing program 3 (id=1670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe80000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) 168.576344ms ago: executing program 2 (id=1671): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) (fail_nth: 3) 122.041476ms ago: executing program 4 (id=1672): syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x14, 0x3e, 0x3, 0x0, [0x0, 0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 51.971473ms ago: executing program 3 (id=1673): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r2 = accept4(r1, 0x0, 0x0, 0x80000) write(r2, &(0x7f0000000040)="cb", 0xfffffdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000800)="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", 0x160}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871b", 0x2d5}], 0x2}, 0x0) shutdown(0xffffffffffffffff, 0x1) close(0x3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x45010020}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x31}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="0201000010000000000000000000000007001900000000000a004e2100000000200100000000000700000000000000027003000002004e247f00000100000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000002001300030000000002bacb876722c34296489940b1dec5c2007a21c831fa4cda91468d99fdec10e31fed229efad30e969b5022e0950a03c704526a16d101c822d37a42af34b65bfe510819effd1216b1feef0bc2ade5f078e2592a53b6383a1bc38cd2a7d8633c3e7ab35cff0164775a7c856f05331699149f4ef1482bed260b26a73c0286bf6b2b1ac5f67e879b92eea3336b647f7aa424ab6fa0734e06e8be6a11b5ef657a36fe923cf057ed89e2dac867072e8f79fdd1c32856d2177bb7de59e86ddfaf2e3122e0c98d279a23b1475b2297d8e6cc9e39eb0b7c8d93311076a0e40ac58c736dcf0171a7e83c9fdc385560240bdcec8ca3c0eb7de176f8b0300da976243f99ee3be48bdefc5a1321956be64427a30c0000000000000081aa0ae2d8d5ed209afc71"], 0x80}}, 0x0) 0s ago: executing program 4 (id=1674): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) kernel console output (not intermixed with test programs): 1][ T7419] IPVS: lc: FWM 3 0x00000003 - no destination available [ 147.449758][ T7474] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 147.458586][ T7474] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.785005][ T7489] netlink: 'syz.1.471': attribute type 10 has an invalid length. [ 147.813225][ T7489] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 147.841839][ T7489] team0: Port device netdevsim0 removed [ 147.888953][ T7489] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 147.934660][ T7497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.474'. [ 148.119759][ T7504] netlink: 104 bytes leftover after parsing attributes in process `syz.1.476'. [ 148.497877][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 148.962844][ T7534] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 149.031859][ T7534] netlink: 244 bytes leftover after parsing attributes in process `syz.4.491'. [ 149.563164][ T7560] pim6reg: entered allmulticast mode [ 149.812881][ T7574] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 150.165155][ T7591] batadv_slave_1: entered promiscuous mode [ 150.184217][ T7590] batadv_slave_1: left promiscuous mode [ 150.764001][ T7620] tipc: Started in network mode [ 150.769062][ T7620] tipc: Node identity ac1414aa, cluster identity 4711 [ 150.779900][ T7620] tipc: Enabled bearer , priority 10 [ 151.145978][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 151.450631][ T7650] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 151.626695][ T7661] netlink: 76 bytes leftover after parsing attributes in process `syz.1.550'. [ 151.658258][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 151.698405][ T7663] IPVS: Error joining to the multicast group [ 151.784731][ T5968] tipc: Node number set to 2886997162 [ 152.598857][ T7711] IPVS: ip_vs_edit_dest(): server weight less than zero [ 153.410153][ T51] Bluetooth: hci4: link tx timeout [ 153.416228][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.425645][ T5867] Bluetooth: hci4: link tx timeout [ 153.430855][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.445411][ T5867] Bluetooth: hci4: link tx timeout [ 153.450631][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.458802][ T5867] Bluetooth: hci4: link tx timeout [ 153.464212][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.331020][ T7798] netlink: 104 bytes leftover after parsing attributes in process `syz.0.608'. [ 154.737172][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 154.777074][ T7817] netlink: 'syz.3.618': attribute type 3 has an invalid length. [ 154.988688][ T7827] netlink: 104 bytes leftover after parsing attributes in process `syz.4.622'. [ 155.424746][ T7849] netlink: 48 bytes leftover after parsing attributes in process `syz.0.634'. [ 155.472855][ T7849] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 155.483772][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 155.603164][ T7856] netlink: 104 bytes leftover after parsing attributes in process `syz.1.638'. [ 155.991004][ T7876] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 156.038732][ T7876] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 156.201905][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 156.218340][ T7889] IPVS: Error joining to the multicast group [ 156.583304][ T7902] 8021q: VLANs not supported on xfrm0 [ 156.831293][ T7914] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 156.850267][ T7914] team0: Port device dummy0 added [ 157.016150][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 157.051000][ T7923] IPVS: Error joining to the multicast group [ 157.575544][ T7948] netlink: 'syz.2.682': attribute type 12 has an invalid length. [ 157.617710][ T7948] netlink: 'syz.2.682': attribute type 29 has an invalid length. [ 157.644370][ T7948] netlink: 148 bytes leftover after parsing attributes in process `syz.2.682'. [ 157.688095][ T7948] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 157.711279][ T7948] netlink: 'syz.2.682': attribute type 2 has an invalid length. [ 157.760187][ T7948] netlink: 39 bytes leftover after parsing attributes in process `syz.2.682'. [ 158.488615][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 158.520837][ T7992] netlink: 84 bytes leftover after parsing attributes in process `syz.4.701'. [ 158.560114][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.700'. [ 158.580069][ T7992] netlink: 'syz.4.701': attribute type 21 has an invalid length. [ 158.588511][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 158.618173][ T7992] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 158.630295][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.700'. [ 158.650422][ T7992] netlink: 6 bytes leftover after parsing attributes in process `syz.4.701'. [ 158.670298][ T8002] netlink: 'syz.3.700': attribute type 10 has an invalid length. [ 158.801520][ T8002] team0: Port device netdevsim0 added [ 158.998068][ T8015] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 159.237059][ T8015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.372611][ T8027] bond2: (slave wlan0): Releasing active interface [ 159.409409][ T8027] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 159.480653][ T8020] vlan2: entered allmulticast mode [ 159.534487][ T8020] bond3: (slave vlan2): Opening slave failed [ 159.626590][ T8044] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 160.927881][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 161.387767][ T8125] __nla_validate_parse: 3 callbacks suppressed [ 161.387786][ T8125] netlink: 204 bytes leftover after parsing attributes in process `syz.2.750'. [ 161.410618][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.750'. [ 161.774591][ T8142] netlink: 876 bytes leftover after parsing attributes in process `syz.3.763'. [ 161.796978][ T8142] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.763'. [ 162.185481][ T8162] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.767'. [ 162.290434][ T8169] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 162.312440][ T8169] validate_nla: 2 callbacks suppressed [ 162.312457][ T8169] netlink: 'syz.2.772': attribute type 1 has an invalid length. [ 162.518117][ T8177] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 162.594414][ T8177] bond0: (slave netdevsim0): Releasing backup interface [ 162.626213][ T8177] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 162.658502][ T8177] team0: Failed to send options change via netlink (err -105) [ 162.680685][ T8177] team0: Port device netdevsim0 added [ 162.793424][ T8193] netlink: 204 bytes leftover after parsing attributes in process `syz.0.782'. [ 162.823789][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.782'. [ 163.642271][ T8231] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.803'. [ 163.814644][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.808'. [ 163.820169][ T8243] netlink: 204 bytes leftover after parsing attributes in process `syz.2.805'. [ 164.920162][ T8287] netlink: 'syz.0.823': attribute type 10 has an invalid length. [ 164.953272][ T8287] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 164.983426][ T8286] syzkaller0: entered promiscuous mode [ 164.989233][ T8286] syzkaller0: entered allmulticast mode [ 165.186854][ T8297] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 166.522394][ T8352] __nla_validate_parse: 36 callbacks suppressed [ 166.522411][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 166.701489][ T8359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.850'. [ 166.820592][ T8365] netlink: 104 bytes leftover after parsing attributes in process `syz.2.851'. [ 167.232248][ T8381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.860'. [ 167.275066][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 167.284120][ T8381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.860'. [ 167.293003][ T8381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.860'. [ 167.329917][ T8381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.860'. [ 167.391448][ T8381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.860'. [ 167.420768][ T8394] netlink: 104 bytes leftover after parsing attributes in process `syz.2.864'. [ 167.729155][ T8409] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 167.758541][ T8409] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 167.788118][ T8413] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 167.819863][ T8413] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.399070][ T8439] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 168.673055][ T8451] netlink: 'syz.0.885': attribute type 4 has an invalid length. [ 169.298914][ T8480] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 169.396360][ T8480] netlink: 'syz.3.898': attribute type 1 has an invalid length. [ 170.505699][ T8530] netlink: 'syz.3.920': attribute type 4 has an invalid length. [ 170.681403][ T8535] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 171.379282][ T8569] netlink: 'syz.3.936': attribute type 4 has an invalid length. [ 171.581666][ T8575] __nla_validate_parse: 39 callbacks suppressed [ 171.581685][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 171.606187][ T8575] netlink: 84 bytes leftover after parsing attributes in process `syz.4.942'. [ 171.793082][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 171.926720][ T8591] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 171.969670][ T8593] FAULT_INJECTION: forcing a failure. [ 171.969670][ T8593] name failslab, interval 1, probability 0, space 0, times 0 [ 172.007665][ T8593] CPU: 1 UID: 0 PID: 8593 Comm: syz.3.949 Not tainted syzkaller #0 PREEMPT(full) [ 172.007703][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.007721][ T8593] Call Trace: [ 172.007728][ T8593] [ 172.007741][ T8593] dump_stack_lvl+0x189/0x250 [ 172.007770][ T8593] ? __pfx____ratelimit+0x10/0x10 [ 172.007789][ T8593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.007811][ T8593] ? __pfx__printk+0x10/0x10 [ 172.007842][ T8593] ? __pfx___might_resched+0x10/0x10 [ 172.007866][ T8593] should_fail_ex+0x414/0x560 [ 172.007895][ T8593] should_failslab+0xa8/0x100 [ 172.007924][ T8593] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 172.007950][ T8593] ? __alloc_skb+0x112/0x2d0 [ 172.007974][ T8593] __alloc_skb+0x112/0x2d0 [ 172.007996][ T8593] netlink_sendmsg+0x5c6/0xb30 [ 172.008025][ T8593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.008047][ T8593] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.008067][ T8593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.008087][ T8593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.008107][ T8593] __sock_sendmsg+0x219/0x270 [ 172.008136][ T8593] ____sys_sendmsg+0x505/0x830 [ 172.008163][ T8593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.008193][ T8593] ? import_iovec+0x74/0xa0 [ 172.008219][ T8593] ___sys_sendmsg+0x21f/0x2a0 [ 172.008242][ T8593] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.008297][ T8593] ? __fget_files+0x2a/0x420 [ 172.008314][ T8593] ? __fget_files+0x3a0/0x420 [ 172.008339][ T8593] __x64_sys_sendmsg+0x19b/0x260 [ 172.008363][ T8593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.008395][ T8593] ? __pfx_ksys_write+0x10/0x10 [ 172.008417][ T8593] ? rcu_is_watching+0x15/0xb0 [ 172.008441][ T8593] ? do_syscall_64+0xbe/0x3b0 [ 172.008465][ T8593] do_syscall_64+0xfa/0x3b0 [ 172.008484][ T8593] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.008502][ T8593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.008521][ T8593] ? clear_bhb_loop+0x60/0xb0 [ 172.008543][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.008566][ T8593] RIP: 0033:0x7f3f7e98ebe9 [ 172.008583][ T8593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.008600][ T8593] RSP: 002b:00007f3f7f77d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.008619][ T8593] RAX: ffffffffffffffda RBX: 00007f3f7ebc5fa0 RCX: 00007f3f7e98ebe9 [ 172.008632][ T8593] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 172.008644][ T8593] RBP: 00007f3f7f77d090 R08: 0000000000000000 R09: 0000000000000000 [ 172.008655][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.008665][ T8593] R13: 00007f3f7ebc6038 R14: 00007f3f7ebc5fa0 R15: 00007ffdad60ac48 [ 172.008695][ T8593] [ 172.339048][ T8599] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 172.360545][ T8599] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 172.396921][ T8608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.952'. [ 172.530912][ T8608] netlink: 'syz.0.952': attribute type 4 has an invalid length. [ 172.796748][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 172.878510][ T8626] netlink: 'syz.1.962': attribute type 10 has an invalid length. [ 172.988121][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 173.003892][ T8630] netlink: 84 bytes leftover after parsing attributes in process `syz.2.966'. [ 173.182656][ T8641] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 173.208967][ T8641] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 173.240674][ T8642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.969'. [ 173.324230][ T8647] netlink: 'syz.3.969': attribute type 4 has an invalid length. [ 173.570197][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 173.642071][ T8659] netlink: 'syz.2.977': attribute type 10 has an invalid length. [ 173.754757][ T8665] netlink: 264 bytes leftover after parsing attributes in process `syz.2.981'. [ 174.562442][ T8703] FAULT_INJECTION: forcing a failure. [ 174.562442][ T8703] name failslab, interval 1, probability 0, space 0, times 0 [ 174.583986][ T8703] CPU: 1 UID: 0 PID: 8703 Comm: syz.3.996 Not tainted syzkaller #0 PREEMPT(full) [ 174.584014][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.584027][ T8703] Call Trace: [ 174.584035][ T8703] [ 174.584043][ T8703] dump_stack_lvl+0x189/0x250 [ 174.584072][ T8703] ? __pfx____ratelimit+0x10/0x10 [ 174.584100][ T8703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.584124][ T8703] ? __pfx__printk+0x10/0x10 [ 174.584157][ T8703] ? __pfx___might_resched+0x10/0x10 [ 174.584181][ T8703] should_fail_ex+0x414/0x560 [ 174.584214][ T8703] should_failslab+0xa8/0x100 [ 174.584245][ T8703] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 174.584271][ T8703] ? __alloc_skb+0x112/0x2d0 [ 174.584295][ T8703] __alloc_skb+0x112/0x2d0 [ 174.584320][ T8703] netlink_sendmsg+0x5c6/0xb30 [ 174.584349][ T8703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.584373][ T8703] ? aa_sock_msg_perm+0xf1/0x1d0 [ 174.584392][ T8703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.584409][ T8703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.584426][ T8703] __sock_sendmsg+0x219/0x270 [ 174.584451][ T8703] ____sys_sendmsg+0x505/0x830 [ 174.584474][ T8703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.584499][ T8703] ? import_iovec+0x74/0xa0 [ 174.584521][ T8703] ___sys_sendmsg+0x21f/0x2a0 [ 174.584541][ T8703] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.584588][ T8703] ? __fget_files+0x2a/0x420 [ 174.584602][ T8703] ? __fget_files+0x3a0/0x420 [ 174.584628][ T8703] __x64_sys_sendmsg+0x19b/0x260 [ 174.584650][ T8703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.584676][ T8703] ? __pfx_ksys_write+0x10/0x10 [ 174.584695][ T8703] ? rcu_is_watching+0x15/0xb0 [ 174.584715][ T8703] ? do_syscall_64+0xbe/0x3b0 [ 174.584735][ T8703] do_syscall_64+0xfa/0x3b0 [ 174.584751][ T8703] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.584767][ T8703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.584783][ T8703] ? clear_bhb_loop+0x60/0xb0 [ 174.584801][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.584817][ T8703] RIP: 0033:0x7f3f7e98ebe9 [ 174.584831][ T8703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.584845][ T8703] RSP: 002b:00007f3f7f77d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.584862][ T8703] RAX: ffffffffffffffda RBX: 00007f3f7ebc5fa0 RCX: 00007f3f7e98ebe9 [ 174.584874][ T8703] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 174.584884][ T8703] RBP: 00007f3f7f77d090 R08: 0000000000000000 R09: 0000000000000000 [ 174.584894][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.584903][ T8703] R13: 00007f3f7ebc6038 R14: 00007f3f7ebc5fa0 R15: 00007ffdad60ac48 [ 174.584928][ T8703] [ 175.111204][ T8719] raw_sendmsg: syz.3.1003 forgot to set AF_INET. Fix it! [ 176.338087][ T8774] FAULT_INJECTION: forcing a failure. [ 176.338087][ T8774] name failslab, interval 1, probability 0, space 0, times 0 [ 176.391318][ T8774] CPU: 1 UID: 0 PID: 8774 Comm: syz.0.1022 Not tainted syzkaller #0 PREEMPT(full) [ 176.391346][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.391358][ T8774] Call Trace: [ 176.391366][ T8774] [ 176.391375][ T8774] dump_stack_lvl+0x189/0x250 [ 176.391404][ T8774] ? __pfx____ratelimit+0x10/0x10 [ 176.391425][ T8774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.391449][ T8774] ? __pfx__printk+0x10/0x10 [ 176.391483][ T8774] ? __pfx___might_resched+0x10/0x10 [ 176.391508][ T8774] should_fail_ex+0x414/0x560 [ 176.391540][ T8774] should_failslab+0xa8/0x100 [ 176.391572][ T8774] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 176.391600][ T8774] ? __alloc_skb+0x112/0x2d0 [ 176.391625][ T8774] __alloc_skb+0x112/0x2d0 [ 176.391649][ T8774] netlink_sendmsg+0x5c6/0xb30 [ 176.391680][ T8774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.391705][ T8774] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.391725][ T8774] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.391748][ T8774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.391769][ T8774] __sock_sendmsg+0x219/0x270 [ 176.391800][ T8774] ____sys_sendmsg+0x505/0x830 [ 176.391830][ T8774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.391862][ T8774] ? import_iovec+0x74/0xa0 [ 176.391890][ T8774] ___sys_sendmsg+0x21f/0x2a0 [ 176.391939][ T8774] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.392006][ T8774] ? __fget_files+0x2a/0x420 [ 176.392023][ T8774] ? __fget_files+0x3a0/0x420 [ 176.392052][ T8774] __x64_sys_sendmsg+0x19b/0x260 [ 176.392079][ T8774] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.392113][ T8774] ? __pfx_ksys_write+0x10/0x10 [ 176.392137][ T8774] ? rcu_is_watching+0x15/0xb0 [ 176.392163][ T8774] ? do_syscall_64+0xbe/0x3b0 [ 176.392189][ T8774] do_syscall_64+0xfa/0x3b0 [ 176.392210][ T8774] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.392229][ T8774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.392249][ T8774] ? clear_bhb_loop+0x60/0xb0 [ 176.392272][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.392295][ T8774] RIP: 0033:0x7fe423d8ebe9 [ 176.392313][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.392329][ T8774] RSP: 002b:00007fe421ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.392349][ T8774] RAX: ffffffffffffffda RBX: 00007fe423fc5fa0 RCX: 00007fe423d8ebe9 [ 176.392363][ T8774] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 176.392375][ T8774] RBP: 00007fe421ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.392387][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.392398][ T8774] R13: 00007fe423fc6038 R14: 00007fe423fc5fa0 R15: 00007ffd4ce38028 [ 176.392429][ T8774] [ 176.809710][ T8781] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 176.809820][ T8783] FAULT_INJECTION: forcing a failure. [ 176.809820][ T8783] name failslab, interval 1, probability 0, space 0, times 0 [ 176.837882][ T8783] CPU: 1 UID: 0 PID: 8783 Comm: syz.1.1026 Not tainted syzkaller #0 PREEMPT(full) [ 176.837906][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.837917][ T8783] Call Trace: [ 176.837925][ T8783] [ 176.837932][ T8783] dump_stack_lvl+0x189/0x250 [ 176.837958][ T8783] ? __pfx____ratelimit+0x10/0x10 [ 176.837977][ T8783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.837998][ T8783] ? __pfx__printk+0x10/0x10 [ 176.838028][ T8783] ? __pfx___might_resched+0x10/0x10 [ 176.838051][ T8783] should_fail_ex+0x414/0x560 [ 176.838079][ T8783] should_failslab+0xa8/0x100 [ 176.838108][ T8783] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 176.838140][ T8783] ? __alloc_skb+0x112/0x2d0 [ 176.838163][ T8783] __alloc_skb+0x112/0x2d0 [ 176.838186][ T8783] netlink_sendmsg+0x5c6/0xb30 [ 176.838214][ T8783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.838237][ T8783] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.838256][ T8783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.838277][ T8783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.838297][ T8783] __sock_sendmsg+0x219/0x270 [ 176.838327][ T8783] ____sys_sendmsg+0x505/0x830 [ 176.838355][ T8783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.838385][ T8783] ? import_iovec+0x74/0xa0 [ 176.838412][ T8783] ___sys_sendmsg+0x21f/0x2a0 [ 176.838435][ T8783] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.838492][ T8783] ? __fget_files+0x2a/0x420 [ 176.838508][ T8783] ? __fget_files+0x3a0/0x420 [ 176.838534][ T8783] __x64_sys_sendmsg+0x19b/0x260 [ 176.838559][ T8783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.838591][ T8783] ? __pfx_ksys_write+0x10/0x10 [ 176.838613][ T8783] ? rcu_is_watching+0x15/0xb0 [ 176.838638][ T8783] ? do_syscall_64+0xbe/0x3b0 [ 176.838662][ T8783] do_syscall_64+0xfa/0x3b0 [ 176.838680][ T8783] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.838698][ T8783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.838716][ T8783] ? clear_bhb_loop+0x60/0xb0 [ 176.838739][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.838757][ T8783] RIP: 0033:0x7f151778ebe9 [ 176.838773][ T8783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.838789][ T8783] RSP: 002b:00007f15186aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.838808][ T8783] RAX: ffffffffffffffda RBX: 00007f15179c5fa0 RCX: 00007f151778ebe9 [ 176.838822][ T8783] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 176.838834][ T8783] RBP: 00007f15186aa090 R08: 0000000000000000 R09: 0000000000000000 [ 176.838846][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.838856][ T8783] R13: 00007f15179c6038 R14: 00007f15179c5fa0 R15: 00007ffe6470abc8 [ 176.838886][ T8783] [ 177.631682][ T8807] FAULT_INJECTION: forcing a failure. [ 177.631682][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 177.645033][ T8807] CPU: 1 UID: 0 PID: 8807 Comm: syz.1.1036 Not tainted syzkaller #0 PREEMPT(full) [ 177.645065][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.645077][ T8807] Call Trace: [ 177.645085][ T8807] [ 177.645093][ T8807] dump_stack_lvl+0x189/0x250 [ 177.645119][ T8807] ? __pfx____ratelimit+0x10/0x10 [ 177.645139][ T8807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.645160][ T8807] ? __pfx__printk+0x10/0x10 [ 177.645189][ T8807] ? __pfx___might_resched+0x10/0x10 [ 177.645208][ T8807] ? fs_reclaim_acquire+0x7d/0x100 [ 177.645242][ T8807] should_fail_ex+0x414/0x560 [ 177.645271][ T8807] should_failslab+0xa8/0x100 [ 177.645300][ T8807] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 177.645326][ T8807] ? __alloc_skb+0x112/0x2d0 [ 177.645349][ T8807] __alloc_skb+0x112/0x2d0 [ 177.645390][ T8807] alloc_skb_with_frags+0xca/0x890 [ 177.645428][ T8807] sock_alloc_send_pskb+0x857/0x990 [ 177.645474][ T8807] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 177.645502][ T8807] ? __lock_acquire+0xab9/0xd20 [ 177.645538][ T8807] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 177.645566][ T8807] unix_dgram_sendmsg+0x461/0x1850 [ 177.645616][ T8807] ? __lock_acquire+0xab9/0xd20 [ 177.645649][ T8807] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 177.645676][ T8807] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 177.645709][ T8807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.645730][ T8807] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 177.645761][ T8807] __sock_sendmsg+0x219/0x270 [ 177.645792][ T8807] ____sys_sendmsg+0x505/0x830 [ 177.645821][ T8807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.645855][ T8807] ? import_iovec+0x74/0xa0 [ 177.645882][ T8807] ___sys_sendmsg+0x21f/0x2a0 [ 177.645908][ T8807] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.645971][ T8807] ? __fget_files+0x2a/0x420 [ 177.645991][ T8807] ? __fget_files+0x3a0/0x420 [ 177.646020][ T8807] __x64_sys_sendmsg+0x19b/0x260 [ 177.646047][ T8807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.646086][ T8807] ? __pfx_ksys_write+0x10/0x10 [ 177.646109][ T8807] ? rcu_is_watching+0x15/0xb0 [ 177.646136][ T8807] ? do_syscall_64+0xbe/0x3b0 [ 177.646162][ T8807] do_syscall_64+0xfa/0x3b0 [ 177.646182][ T8807] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.646202][ T8807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.646221][ T8807] ? clear_bhb_loop+0x60/0xb0 [ 177.646246][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.646265][ T8807] RIP: 0033:0x7f151778ebe9 [ 177.646301][ T8807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.646318][ T8807] RSP: 002b:00007f15186aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.646340][ T8807] RAX: ffffffffffffffda RBX: 00007f15179c5fa0 RCX: 00007f151778ebe9 [ 177.646355][ T8807] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 177.646368][ T8807] RBP: 00007f15186aa090 R08: 0000000000000000 R09: 0000000000000000 [ 177.646379][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.646391][ T8807] R13: 00007f15179c6038 R14: 00007f15179c5fa0 R15: 00007ffe6470abc8 [ 177.646424][ T8807] [ 178.059146][ T8814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.038527][ T8858] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.694144][ T8884] FAULT_INJECTION: forcing a failure. [ 179.694144][ T8884] name failslab, interval 1, probability 0, space 0, times 0 [ 179.767087][ T8884] CPU: 1 UID: 0 PID: 8884 Comm: syz.2.1067 Not tainted syzkaller #0 PREEMPT(full) [ 179.767115][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.767128][ T8884] Call Trace: [ 179.767135][ T8884] [ 179.767145][ T8884] dump_stack_lvl+0x189/0x250 [ 179.767175][ T8884] ? __pfx____ratelimit+0x10/0x10 [ 179.767195][ T8884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.767219][ T8884] ? __pfx__printk+0x10/0x10 [ 179.767250][ T8884] ? __pfx___might_resched+0x10/0x10 [ 179.767270][ T8884] ? fs_reclaim_acquire+0x7d/0x100 [ 179.767306][ T8884] should_fail_ex+0x414/0x560 [ 179.767338][ T8884] should_failslab+0xa8/0x100 [ 179.767370][ T8884] __kmalloc_noprof+0xcb/0x4f0 [ 179.767396][ T8884] ? tomoyo_encode+0x28b/0x550 [ 179.767420][ T8884] tomoyo_encode+0x28b/0x550 [ 179.767448][ T8884] tomoyo_realpath_from_path+0x58d/0x5d0 [ 179.767471][ T8884] ? tomoyo_domain+0xd9/0x130 [ 179.767508][ T8884] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 179.767534][ T8884] tomoyo_path_number_perm+0x1e8/0x5a0 [ 179.767563][ T8884] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 179.767607][ T8884] ? __lock_acquire+0xab9/0xd20 [ 179.767664][ T8884] ? __fget_files+0x2a/0x420 [ 179.767684][ T8884] ? __fget_files+0x2a/0x420 [ 179.767698][ T8884] ? __fget_files+0x3a0/0x420 [ 179.767713][ T8884] ? __fget_files+0x2a/0x420 [ 179.767734][ T8884] security_file_ioctl+0xcb/0x2d0 [ 179.767762][ T8884] __se_sys_ioctl+0x47/0x170 [ 179.767788][ T8884] do_syscall_64+0xfa/0x3b0 [ 179.767807][ T8884] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.767825][ T8884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.767843][ T8884] ? clear_bhb_loop+0x60/0xb0 [ 179.767866][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.767884][ T8884] RIP: 0033:0x7f4ef8b8ebe9 [ 179.767902][ T8884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.767918][ T8884] RSP: 002b:00007f4ef99ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.767937][ T8884] RAX: ffffffffffffffda RBX: 00007f4ef8dc6090 RCX: 00007f4ef8b8ebe9 [ 179.767950][ T8884] RDX: 0000200000000040 RSI: 000000000000541b RDI: 0000000000000003 [ 179.767962][ T8884] RBP: 00007f4ef99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 179.767974][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.767984][ T8884] R13: 00007f4ef8dc6128 R14: 00007f4ef8dc6090 R15: 00007ffd5e3e6fc8 [ 179.768015][ T8884] [ 179.768034][ T8884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.170511][ T8899] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 180.182118][ T8899] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 180.278822][ T8901] FAULT_INJECTION: forcing a failure. [ 180.278822][ T8901] name failslab, interval 1, probability 0, space 0, times 0 [ 180.322353][ T8901] CPU: 1 UID: 0 PID: 8901 Comm: syz.0.1076 Not tainted syzkaller #0 PREEMPT(full) [ 180.322381][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.322394][ T8901] Call Trace: [ 180.322401][ T8901] [ 180.322409][ T8901] dump_stack_lvl+0x189/0x250 [ 180.322440][ T8901] ? __pfx____ratelimit+0x10/0x10 [ 180.322460][ T8901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.322483][ T8901] ? __pfx__printk+0x10/0x10 [ 180.322517][ T8901] ? __pfx___might_resched+0x10/0x10 [ 180.322541][ T8901] should_fail_ex+0x414/0x560 [ 180.322573][ T8901] should_failslab+0xa8/0x100 [ 180.322612][ T8901] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 180.322639][ T8901] ? __alloc_skb+0x112/0x2d0 [ 180.322664][ T8901] __alloc_skb+0x112/0x2d0 [ 180.322688][ T8901] netlink_sendmsg+0x5c6/0xb30 [ 180.322719][ T8901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.322743][ T8901] ? aa_sock_msg_perm+0xf1/0x1d0 [ 180.322765][ T8901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.322786][ T8901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.322808][ T8901] __sock_sendmsg+0x219/0x270 [ 180.322839][ T8901] ____sys_sendmsg+0x505/0x830 [ 180.322869][ T8901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.322902][ T8901] ? import_iovec+0x74/0xa0 [ 180.322930][ T8901] ___sys_sendmsg+0x21f/0x2a0 [ 180.322955][ T8901] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.323017][ T8901] ? __fget_files+0x2a/0x420 [ 180.323034][ T8901] ? __fget_files+0x3a0/0x420 [ 180.323067][ T8901] __x64_sys_sendmsg+0x19b/0x260 [ 180.323094][ T8901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.323128][ T8901] ? rcu_is_watching+0x15/0xb0 [ 180.323154][ T8901] ? do_syscall_64+0xbe/0x3b0 [ 180.323180][ T8901] do_syscall_64+0xfa/0x3b0 [ 180.323200][ T8901] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.323219][ T8901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.323239][ T8901] ? clear_bhb_loop+0x60/0xb0 [ 180.323263][ T8901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.323282][ T8901] RIP: 0033:0x7fe423d8ebe9 [ 180.323300][ T8901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.323318][ T8901] RSP: 002b:00007fe421ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.323339][ T8901] RAX: ffffffffffffffda RBX: 00007fe423fc5fa0 RCX: 00007fe423d8ebe9 [ 180.323353][ T8901] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 180.323365][ T8901] RBP: 00007fe421ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.323377][ T8901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.323389][ T8901] R13: 00007fe423fc6038 R14: 00007fe423fc5fa0 R15: 00007ffd4ce38028 [ 180.323421][ T8901] [ 180.733999][ T8909] __nla_validate_parse: 5 callbacks suppressed [ 180.734018][ T8909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1080'. [ 180.752793][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1081'. [ 180.957195][ T8925] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1083'. [ 180.973437][ T8924] ieee802154 phy1 wpan1: encryption failed: -22 [ 181.375869][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 181.432389][ T8951] FAULT_INJECTION: forcing a failure. [ 181.432389][ T8951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.451916][ T8950] FAULT_INJECTION: forcing a failure. [ 181.451916][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 181.465982][ T8951] CPU: 1 UID: 0 PID: 8951 Comm: syz.0.1095 Not tainted syzkaller #0 PREEMPT(full) [ 181.466009][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.466032][ T8951] Call Trace: [ 181.466039][ T8951] [ 181.466047][ T8951] dump_stack_lvl+0x189/0x250 [ 181.466072][ T8951] ? __pfx____ratelimit+0x10/0x10 [ 181.466090][ T8951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.466109][ T8951] ? __pfx__printk+0x10/0x10 [ 181.466145][ T8951] should_fail_ex+0x414/0x560 [ 181.466191][ T8951] _copy_from_user+0x2d/0xb0 [ 181.466212][ T8951] __copy_msghdr+0x3c5/0x5b0 [ 181.466242][ T8951] ___sys_sendmsg+0x1a5/0x2a0 [ 181.466265][ T8951] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.466338][ T8951] ? __fget_files+0x2a/0x420 [ 181.466353][ T8951] ? __fget_files+0x3a0/0x420 [ 181.466379][ T8951] __x64_sys_sendmsg+0x19b/0x260 [ 181.466403][ T8951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.466434][ T8951] ? __pfx_ksys_write+0x10/0x10 [ 181.466455][ T8951] ? rcu_is_watching+0x15/0xb0 [ 181.466479][ T8951] ? do_syscall_64+0xbe/0x3b0 [ 181.466502][ T8951] do_syscall_64+0xfa/0x3b0 [ 181.466520][ T8951] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.466544][ T8951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.466561][ T8951] ? clear_bhb_loop+0x60/0xb0 [ 181.466583][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.466600][ T8951] RIP: 0033:0x7fe423d8ebe9 [ 181.466617][ T8951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.466634][ T8951] RSP: 002b:00007fe421ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.466655][ T8951] RAX: ffffffffffffffda RBX: 00007fe423fc5fa0 RCX: 00007fe423d8ebe9 [ 181.466668][ T8951] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 181.466680][ T8951] RBP: 00007fe421ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 181.466690][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.466701][ T8951] R13: 00007fe423fc6038 R14: 00007fe423fc5fa0 R15: 00007ffd4ce38028 [ 181.466730][ T8951] [ 181.531988][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.1.1094 Not tainted syzkaller #0 PREEMPT(full) [ 181.532020][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.532035][ T8950] Call Trace: [ 181.532044][ T8950] [ 181.532053][ T8950] dump_stack_lvl+0x189/0x250 [ 181.532087][ T8950] ? __pfx____ratelimit+0x10/0x10 [ 181.532112][ T8950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.532139][ T8950] ? __pfx__printk+0x10/0x10 [ 181.532178][ T8950] ? __pfx___might_resched+0x10/0x10 [ 181.532206][ T8950] should_fail_ex+0x414/0x560 [ 181.532242][ T8950] should_failslab+0xa8/0x100 [ 181.532278][ T8950] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 181.532310][ T8950] ? __alloc_skb+0x112/0x2d0 [ 181.532337][ T8950] __alloc_skb+0x112/0x2d0 [ 181.532365][ T8950] netlink_sendmsg+0x5c6/0xb30 [ 181.532403][ T8950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.532432][ T8950] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.532457][ T8950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.532483][ T8950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.532508][ T8950] __sock_sendmsg+0x219/0x270 [ 181.532542][ T8950] ____sys_sendmsg+0x505/0x830 [ 181.532576][ T8950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.532613][ T8950] ? import_iovec+0x74/0xa0 [ 181.532645][ T8950] ___sys_sendmsg+0x21f/0x2a0 [ 181.532673][ T8950] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.532751][ T8950] ? __fget_files+0x2a/0x420 [ 181.532776][ T8950] ? __fget_files+0x3a0/0x420 [ 181.532805][ T8950] __x64_sys_sendmsg+0x19b/0x260 [ 181.532834][ T8950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.532868][ T8950] ? __pfx_ksys_write+0x10/0x10 [ 181.532894][ T8950] ? rcu_is_watching+0x15/0xb0 [ 181.532921][ T8950] ? do_syscall_64+0xbe/0x3b0 [ 181.532948][ T8950] do_syscall_64+0xfa/0x3b0 [ 181.532970][ T8950] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.532990][ T8950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.533011][ T8950] ? clear_bhb_loop+0x60/0xb0 [ 181.533055][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.533076][ T8950] RIP: 0033:0x7f151778ebe9 [ 181.533096][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.533122][ T8950] RSP: 002b:00007f1518689038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.533146][ T8950] RAX: ffffffffffffffda RBX: 00007f15179c6090 RCX: 00007f151778ebe9 [ 181.533163][ T8950] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 181.533175][ T8950] RBP: 00007f1518689090 R08: 0000000000000000 R09: 0000000000000000 [ 181.533190][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.533202][ T8950] R13: 00007f15179c6128 R14: 00007f15179c6090 R15: 00007ffe6470abc8 [ 181.533252][ T8950] [ 182.038816][ T2978] syzkaller0: tun_net_xmit 76 [ 182.064708][ T8958] syzkaller0: create flow: hash 3602441780 index 1 [ 182.079849][ T919] syzkaller0: tun_net_xmit 76 [ 182.085097][ T2978] syzkaller0: tun_net_xmit 48 [ 182.114106][ T8962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1097'. [ 182.365522][ T8952] syzkaller0: delete flow: hash 3602441780 index 1 [ 182.449812][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 183.172971][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'. [ 183.494589][ T8979] bridge_slave_1: left allmulticast mode [ 183.500490][ T8979] bridge_slave_1: left promiscuous mode [ 183.508981][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.524558][ T8979] bridge_slave_0: left allmulticast mode [ 183.540557][ T8979] bridge_slave_0: left promiscuous mode [ 183.549347][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.650097][ T8989] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20001 [ 183.687463][ T8981] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 183.729356][ T8989] bond0: (slave gretap0): Error: Device type is different from other slaves [ 183.904688][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 183.954179][ T9004] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 184.020956][ T9001] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1113'. [ 184.087037][ T9008] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 184.124310][ T9012] veth3: entered promiscuous mode [ 184.132936][ T9008] netlink: 'syz.4.1117': attribute type 1 has an invalid length. [ 184.214771][ T9016] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1119'. [ 184.399978][ T9023] FAULT_INJECTION: forcing a failure. [ 184.399978][ T9023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.440755][ T9023] CPU: 1 UID: 0 PID: 9023 Comm: syz.1.1121 Not tainted syzkaller #0 PREEMPT(full) [ 184.440781][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.440793][ T9023] Call Trace: [ 184.440801][ T9023] [ 184.440809][ T9023] dump_stack_lvl+0x189/0x250 [ 184.440837][ T9023] ? __pfx____ratelimit+0x10/0x10 [ 184.440857][ T9023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.440881][ T9023] ? __pfx__printk+0x10/0x10 [ 184.440910][ T9023] ? __might_fault+0xb0/0x130 [ 184.440950][ T9023] should_fail_ex+0x414/0x560 [ 184.440988][ T9023] _copy_from_iter+0x1de/0x1790 [ 184.441006][ T9023] ? __lock_acquire+0xab9/0xd20 [ 184.441035][ T9023] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 184.441063][ T9023] ? policy_nodemask+0x27c/0x720 [ 184.441089][ T9023] ? __pfx__copy_from_iter+0x10/0x10 [ 184.441116][ T9023] ? set_page_refcounted+0xa0/0x1e0 [ 184.441144][ T9023] ? page_copy_sane+0x4e/0x280 [ 184.441171][ T9023] copy_page_from_iter+0xdd/0x170 [ 184.441197][ T9023] tun_get_user+0x1d7b/0x3e20 [ 184.441226][ T9023] ? tun_get_user+0x6f6/0x3e20 [ 184.441267][ T9023] ? aa_file_perm+0x44d/0x1550 [ 184.441287][ T9023] ? __pfx_tun_get_user+0x10/0x10 [ 184.441306][ T9023] ? _parse_integer_limit+0x1ae/0x1f0 [ 184.441346][ T9023] ? __lock_acquire+0xab9/0xd20 [ 184.441379][ T9023] ? ref_tracker_alloc+0x318/0x460 [ 184.441405][ T9023] ? __lock_acquire+0xab9/0xd20 [ 184.441434][ T9023] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 184.441469][ T9023] ? tun_get+0x1c/0x2f0 [ 184.441494][ T9023] ? tun_get+0x1c/0x2f0 [ 184.441513][ T9023] ? tun_get+0x1c/0x2f0 [ 184.441538][ T9023] tun_chr_write_iter+0x113/0x200 [ 184.441561][ T9023] vfs_write+0x5c6/0xb30 [ 184.441592][ T9023] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 184.441613][ T9023] ? __pfx_vfs_write+0x10/0x10 [ 184.441659][ T9023] ? __fget_files+0x2a/0x420 [ 184.441685][ T9023] ksys_write+0x145/0x250 [ 184.441712][ T9023] ? __pfx_ksys_write+0x10/0x10 [ 184.441734][ T9023] ? rcu_is_watching+0x15/0xb0 [ 184.441758][ T9023] ? do_syscall_64+0xbe/0x3b0 [ 184.441781][ T9023] do_syscall_64+0xfa/0x3b0 [ 184.441799][ T9023] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.441816][ T9023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.441834][ T9023] ? clear_bhb_loop+0x60/0xb0 [ 184.441855][ T9023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.441872][ T9023] RIP: 0033:0x7f151778d69f [ 184.441889][ T9023] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 184.441905][ T9023] RSP: 002b:00007f15186aa000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 184.441925][ T9023] RAX: ffffffffffffffda RBX: 00007f15179c5fa0 RCX: 00007f151778d69f [ 184.441938][ T9023] RDX: 000000000000004a RSI: 0000200000000400 RDI: 00000000000000c8 [ 184.441950][ T9023] RBP: 00007f15186aa090 R08: 0000000000000000 R09: 0000000000000000 [ 184.441962][ T9023] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 184.441973][ T9023] R13: 00007f15179c6038 R14: 00007f15179c5fa0 R15: 00007ffe6470abc8 [ 184.442003][ T9023] [ 185.289089][ T9047] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 185.447819][ T9055] FAULT_INJECTION: forcing a failure. [ 185.447819][ T9055] name failslab, interval 1, probability 0, space 0, times 0 [ 185.497512][ T9055] CPU: 1 UID: 0 PID: 9055 Comm: syz.2.1134 Not tainted syzkaller #0 PREEMPT(full) [ 185.497552][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.497564][ T9055] Call Trace: [ 185.497571][ T9055] [ 185.497578][ T9055] dump_stack_lvl+0x189/0x250 [ 185.497621][ T9055] ? __pfx____ratelimit+0x10/0x10 [ 185.497641][ T9055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.497663][ T9055] ? __pfx__printk+0x10/0x10 [ 185.497695][ T9055] ? __pfx___might_resched+0x10/0x10 [ 185.497717][ T9055] should_fail_ex+0x414/0x560 [ 185.497748][ T9055] should_failslab+0xa8/0x100 [ 185.497777][ T9055] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 185.497804][ T9055] ? __alloc_skb+0x112/0x2d0 [ 185.497827][ T9055] __alloc_skb+0x112/0x2d0 [ 185.497849][ T9055] netlink_sendmsg+0x5c6/0xb30 [ 185.497877][ T9055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.497900][ T9055] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.497920][ T9055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.497940][ T9055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.497960][ T9055] __sock_sendmsg+0x219/0x270 [ 185.497988][ T9055] ____sys_sendmsg+0x505/0x830 [ 185.498016][ T9055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.498048][ T9055] ? import_iovec+0x74/0xa0 [ 185.498073][ T9055] ___sys_sendmsg+0x21f/0x2a0 [ 185.498097][ T9055] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.498155][ T9055] ? __fget_files+0x2a/0x420 [ 185.498173][ T9055] ? __fget_files+0x3a0/0x420 [ 185.498199][ T9055] __x64_sys_sendmsg+0x19b/0x260 [ 185.498224][ T9055] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.498256][ T9055] ? __pfx_ksys_write+0x10/0x10 [ 185.498278][ T9055] ? rcu_is_watching+0x15/0xb0 [ 185.498301][ T9055] ? do_syscall_64+0xbe/0x3b0 [ 185.498326][ T9055] do_syscall_64+0xfa/0x3b0 [ 185.498344][ T9055] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.498362][ T9055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.498380][ T9055] ? clear_bhb_loop+0x60/0xb0 [ 185.498403][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.498427][ T9055] RIP: 0033:0x7f4ef8b8ebe9 [ 185.498444][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.498459][ T9055] RSP: 002b:00007f4ef9a0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.498479][ T9055] RAX: ffffffffffffffda RBX: 00007f4ef8dc5fa0 RCX: 00007f4ef8b8ebe9 [ 185.498493][ T9055] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 185.498503][ T9055] RBP: 00007f4ef9a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 185.498514][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.498525][ T9055] R13: 00007f4ef8dc6038 R14: 00007f4ef8dc5fa0 R15: 00007ffd5e3e6fc8 [ 185.498556][ T9055] [ 186.010340][ T9071] __nla_validate_parse: 28 callbacks suppressed [ 186.010361][ T9071] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1139'. [ 186.080968][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1139'. [ 186.176951][ T9075] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 186.187617][ T9075] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 186.679693][ T9089] FAULT_INJECTION: forcing a failure. [ 186.679693][ T9089] name failslab, interval 1, probability 0, space 0, times 0 [ 186.693259][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.4.1148 Not tainted syzkaller #0 PREEMPT(full) [ 186.693286][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.693300][ T9089] Call Trace: [ 186.693307][ T9089] [ 186.693316][ T9089] dump_stack_lvl+0x189/0x250 [ 186.693345][ T9089] ? __pfx____ratelimit+0x10/0x10 [ 186.693366][ T9089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.693390][ T9089] ? __pfx__printk+0x10/0x10 [ 186.693425][ T9089] ? __pfx___might_resched+0x10/0x10 [ 186.693449][ T9089] should_fail_ex+0x414/0x560 [ 186.693483][ T9089] should_failslab+0xa8/0x100 [ 186.693518][ T9089] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 186.693547][ T9089] ? __alloc_skb+0x112/0x2d0 [ 186.693572][ T9089] __alloc_skb+0x112/0x2d0 [ 186.693597][ T9089] netlink_sendmsg+0x5c6/0xb30 [ 186.693629][ T9089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.693653][ T9089] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.693674][ T9089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.693695][ T9089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.693716][ T9089] __sock_sendmsg+0x219/0x270 [ 186.693747][ T9089] ____sys_sendmsg+0x505/0x830 [ 186.693776][ T9089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.693809][ T9089] ? import_iovec+0x74/0xa0 [ 186.693837][ T9089] ___sys_sendmsg+0x21f/0x2a0 [ 186.693862][ T9089] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.693924][ T9089] ? __fget_files+0x2a/0x420 [ 186.693940][ T9089] ? __fget_files+0x3a0/0x420 [ 186.693968][ T9089] __x64_sys_sendmsg+0x19b/0x260 [ 186.693996][ T9089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.694029][ T9089] ? __pfx_ksys_write+0x10/0x10 [ 186.694052][ T9089] ? rcu_is_watching+0x15/0xb0 [ 186.694087][ T9089] ? do_syscall_64+0xbe/0x3b0 [ 186.694113][ T9089] do_syscall_64+0xfa/0x3b0 [ 186.694132][ T9089] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.694152][ T9089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.694172][ T9089] ? clear_bhb_loop+0x60/0xb0 [ 186.694196][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.694215][ T9089] RIP: 0033:0x7f9448f8ebe9 [ 186.694233][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.694250][ T9089] RSP: 002b:00007f9449dc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.694272][ T9089] RAX: ffffffffffffffda RBX: 00007f94491c5fa0 RCX: 00007f9448f8ebe9 [ 186.694296][ T9089] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 186.694308][ T9089] RBP: 00007f9449dc5090 R08: 0000000000000000 R09: 0000000000000000 [ 186.694319][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.694330][ T9089] R13: 00007f94491c6038 R14: 00007f94491c5fa0 R15: 00007ffc53118168 [ 186.694360][ T9089] [ 187.119252][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 187.165408][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 187.200663][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 187.212825][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 187.221874][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 187.230974][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 187.240755][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 187.249940][ T9096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 187.398752][ T9110] FAULT_INJECTION: forcing a failure. [ 187.398752][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 187.422115][ T9110] CPU: 0 UID: 0 PID: 9110 Comm: syz.1.1156 Not tainted syzkaller #0 PREEMPT(full) [ 187.422143][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.422155][ T9110] Call Trace: [ 187.422163][ T9110] [ 187.422172][ T9110] dump_stack_lvl+0x189/0x250 [ 187.422202][ T9110] ? __pfx____ratelimit+0x10/0x10 [ 187.422224][ T9110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.422249][ T9110] ? __pfx__printk+0x10/0x10 [ 187.422284][ T9110] ? __pfx___might_resched+0x10/0x10 [ 187.422309][ T9110] should_fail_ex+0x414/0x560 [ 187.422350][ T9110] should_failslab+0xa8/0x100 [ 187.422382][ T9110] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 187.422410][ T9110] ? __alloc_skb+0x112/0x2d0 [ 187.422434][ T9110] __alloc_skb+0x112/0x2d0 [ 187.422459][ T9110] netlink_sendmsg+0x5c6/0xb30 [ 187.422507][ T9110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.422532][ T9110] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.422552][ T9110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.422574][ T9110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.422608][ T9110] __sock_sendmsg+0x219/0x270 [ 187.422640][ T9110] ____sys_sendmsg+0x505/0x830 [ 187.422669][ T9110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.422702][ T9110] ? import_iovec+0x74/0xa0 [ 187.422729][ T9110] ___sys_sendmsg+0x21f/0x2a0 [ 187.422755][ T9110] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.422814][ T9110] ? __fget_files+0x2a/0x420 [ 187.422830][ T9110] ? __fget_files+0x3a0/0x420 [ 187.422858][ T9110] __x64_sys_sendmsg+0x19b/0x260 [ 187.422883][ T9110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.422917][ T9110] ? __pfx_ksys_write+0x10/0x10 [ 187.422941][ T9110] ? rcu_is_watching+0x15/0xb0 [ 187.422965][ T9110] ? do_syscall_64+0xbe/0x3b0 [ 187.422991][ T9110] do_syscall_64+0xfa/0x3b0 [ 187.423010][ T9110] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.423030][ T9110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.423049][ T9110] ? clear_bhb_loop+0x60/0xb0 [ 187.423074][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.423092][ T9110] RIP: 0033:0x7f151778ebe9 [ 187.423111][ T9110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.423129][ T9110] RSP: 002b:00007f15186aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.423149][ T9110] RAX: ffffffffffffffda RBX: 00007f15179c5fa0 RCX: 00007f151778ebe9 [ 187.423163][ T9110] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 187.423183][ T9110] RBP: 00007f15186aa090 R08: 0000000000000000 R09: 0000000000000000 [ 187.423195][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.423207][ T9110] R13: 00007f15179c6038 R14: 00007f15179c5fa0 R15: 00007ffe6470abc8 [ 187.423239][ T9110] [ 187.527913][ T9117] FAULT_INJECTION: forcing a failure. [ 187.527913][ T9117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.706586][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: syz.3.1159 Not tainted syzkaller #0 PREEMPT(full) [ 187.706614][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.706627][ T9117] Call Trace: [ 187.706636][ T9117] [ 187.706644][ T9117] dump_stack_lvl+0x189/0x250 [ 187.706675][ T9117] ? __pfx____ratelimit+0x10/0x10 [ 187.706697][ T9117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.706727][ T9117] ? __pfx__printk+0x10/0x10 [ 187.706770][ T9117] should_fail_ex+0x414/0x560 [ 187.706801][ T9117] _copy_to_user+0x31/0xb0 [ 187.706829][ T9117] bpf_prog_test_run_raw_tp+0x503/0x6a0 [ 187.706870][ T9117] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 187.706904][ T9117] ? __fget_files+0x2a/0x420 [ 187.706929][ T9117] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 187.706962][ T9117] bpf_prog_test_run+0x2c7/0x340 [ 187.706997][ T9117] __sys_bpf+0x581/0x870 [ 187.707026][ T9117] ? __pfx___sys_bpf+0x10/0x10 [ 187.707074][ T9117] ? ksys_write+0x22a/0x250 [ 187.707104][ T9117] ? __pfx_ksys_write+0x10/0x10 [ 187.707129][ T9117] ? rcu_is_watching+0x15/0xb0 [ 187.707156][ T9117] __x64_sys_bpf+0x7c/0x90 [ 187.707182][ T9117] do_syscall_64+0xfa/0x3b0 [ 187.707202][ T9117] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.707221][ T9117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.707242][ T9117] ? clear_bhb_loop+0x60/0xb0 [ 187.707267][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.707286][ T9117] RIP: 0033:0x7f3f7e98ebe9 [ 187.707304][ T9117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.707323][ T9117] RSP: 002b:00007f3f7f77d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.707343][ T9117] RAX: ffffffffffffffda RBX: 00007f3f7ebc5fa0 RCX: 00007f3f7e98ebe9 [ 187.707358][ T9117] RDX: 0000000000000015 RSI: 00002000000002c0 RDI: 000000000000000a [ 187.707371][ T9117] RBP: 00007f3f7f77d090 R08: 0000000000000000 R09: 0000000000000000 [ 187.707384][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.707396][ T9117] R13: 00007f3f7ebc6038 R14: 00007f3f7ebc5fa0 R15: 00007ffdad60ac48 [ 187.707429][ T9117] [ 187.937718][ T9121] FAULT_INJECTION: forcing a failure. [ 187.937718][ T9121] name failslab, interval 1, probability 0, space 0, times 0 [ 187.950449][ T9121] CPU: 1 UID: 0 PID: 9121 Comm: syz.3.1161 Not tainted syzkaller #0 PREEMPT(full) [ 187.950472][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.950483][ T9121] Call Trace: [ 187.950490][ T9121] [ 187.950497][ T9121] dump_stack_lvl+0x189/0x250 [ 187.950524][ T9121] ? __pfx____ratelimit+0x10/0x10 [ 187.950542][ T9121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.950563][ T9121] ? __pfx__printk+0x10/0x10 [ 187.950595][ T9121] ? __pfx___might_resched+0x10/0x10 [ 187.950618][ T9121] should_fail_ex+0x414/0x560 [ 187.950648][ T9121] should_failslab+0xa8/0x100 [ 187.950677][ T9121] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 187.950704][ T9121] ? __alloc_skb+0x112/0x2d0 [ 187.950727][ T9121] __alloc_skb+0x112/0x2d0 [ 187.950749][ T9121] netlink_sendmsg+0x5c6/0xb30 [ 187.950778][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.950800][ T9121] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.950820][ T9121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.950839][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.950859][ T9121] __sock_sendmsg+0x219/0x270 [ 187.950889][ T9121] ____sys_sendmsg+0x505/0x830 [ 187.950916][ T9121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.950965][ T9121] ? import_iovec+0x74/0xa0 [ 187.951010][ T9121] ___sys_sendmsg+0x21f/0x2a0 [ 187.951036][ T9121] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.951103][ T9121] ? __fget_files+0x2a/0x420 [ 187.951120][ T9121] ? __fget_files+0x3a0/0x420 [ 187.951148][ T9121] __x64_sys_sendmsg+0x19b/0x260 [ 187.951176][ T9121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.951209][ T9121] ? __pfx_ksys_write+0x10/0x10 [ 187.951234][ T9121] ? rcu_is_watching+0x15/0xb0 [ 187.951260][ T9121] ? do_syscall_64+0xbe/0x3b0 [ 187.951286][ T9121] do_syscall_64+0xfa/0x3b0 [ 187.951306][ T9121] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.951326][ T9121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.951345][ T9121] ? clear_bhb_loop+0x60/0xb0 [ 187.951370][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.951389][ T9121] RIP: 0033:0x7f3f7e98ebe9 [ 187.951407][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.951424][ T9121] RSP: 002b:00007f3f7f77d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.951443][ T9121] RAX: ffffffffffffffda RBX: 00007f3f7ebc5fa0 RCX: 00007f3f7e98ebe9 [ 187.951456][ T9121] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 187.951469][ T9121] RBP: 00007f3f7f77d090 R08: 0000000000000000 R09: 0000000000000000 [ 187.951481][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.951493][ T9121] R13: 00007f3f7ebc6038 R14: 00007f3f7ebc5fa0 R15: 00007ffdad60ac48 [ 187.951525][ T9121] [ 188.530008][ T9132] Driver unsupported XDP return value 0 on prog (id 242) dev N/A, expect packet loss! [ 188.939913][ T9151] FAULT_INJECTION: forcing a failure. [ 188.939913][ T9151] name failslab, interval 1, probability 0, space 0, times 0 [ 188.985546][ T9151] CPU: 1 UID: 0 PID: 9151 Comm: syz.0.1171 Not tainted syzkaller #0 PREEMPT(full) [ 188.985575][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.985588][ T9151] Call Trace: [ 188.985595][ T9151] [ 188.985604][ T9151] dump_stack_lvl+0x189/0x250 [ 188.985633][ T9151] ? __pfx____ratelimit+0x10/0x10 [ 188.985653][ T9151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.985677][ T9151] ? __pfx__printk+0x10/0x10 [ 188.985711][ T9151] ? __pfx___might_resched+0x10/0x10 [ 188.985735][ T9151] should_fail_ex+0x414/0x560 [ 188.985767][ T9151] should_failslab+0xa8/0x100 [ 188.985797][ T9151] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 188.985825][ T9151] ? __alloc_skb+0x112/0x2d0 [ 188.985862][ T9151] __alloc_skb+0x112/0x2d0 [ 188.985886][ T9151] netlink_sendmsg+0x5c6/0xb30 [ 188.985917][ T9151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.985941][ T9151] ? aa_sock_msg_perm+0xf1/0x1d0 [ 188.985962][ T9151] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.985983][ T9151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.986003][ T9151] __sock_sendmsg+0x219/0x270 [ 188.986036][ T9151] ____sys_sendmsg+0x505/0x830 [ 188.986065][ T9151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.986097][ T9151] ? import_iovec+0x74/0xa0 [ 188.986131][ T9151] ___sys_sendmsg+0x21f/0x2a0 [ 188.986157][ T9151] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.986219][ T9151] ? __fget_files+0x2a/0x420 [ 188.986236][ T9151] ? __fget_files+0x3a0/0x420 [ 188.986266][ T9151] __x64_sys_sendmsg+0x19b/0x260 [ 188.986310][ T9151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.986346][ T9151] ? __pfx_ksys_write+0x10/0x10 [ 188.986371][ T9151] ? rcu_is_watching+0x15/0xb0 [ 188.986398][ T9151] ? do_syscall_64+0xbe/0x3b0 [ 188.986425][ T9151] do_syscall_64+0xfa/0x3b0 [ 188.986446][ T9151] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.986466][ T9151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.986486][ T9151] ? clear_bhb_loop+0x60/0xb0 [ 188.986512][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.986531][ T9151] RIP: 0033:0x7fe423d8ebe9 [ 188.986550][ T9151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.986567][ T9151] RSP: 002b:00007fe421ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.986589][ T9151] RAX: ffffffffffffffda RBX: 00007fe423fc5fa0 RCX: 00007fe423d8ebe9 [ 188.986604][ T9151] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 188.986616][ T9151] RBP: 00007fe421ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.986629][ T9151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.986640][ T9151] R13: 00007fe423fc6038 R14: 00007fe423fc5fa0 R15: 00007ffd4ce38028 [ 188.986674][ T9151] [ 189.624987][ T9170] FAULT_INJECTION: forcing a failure. [ 189.624987][ T9170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.702477][ T9170] CPU: 0 UID: 0 PID: 9170 Comm: syz.2.1179 Not tainted syzkaller #0 PREEMPT(full) [ 189.702501][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.702511][ T9170] Call Trace: [ 189.702518][ T9170] [ 189.702526][ T9170] dump_stack_lvl+0x189/0x250 [ 189.702552][ T9170] ? __pfx____ratelimit+0x10/0x10 [ 189.702571][ T9170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.702592][ T9170] ? __pfx__printk+0x10/0x10 [ 189.702628][ T9170] should_fail_ex+0x414/0x560 [ 189.702657][ T9170] _copy_to_user+0x31/0xb0 [ 189.702680][ T9170] simple_read_from_buffer+0xe1/0x170 [ 189.702710][ T9170] proc_fail_nth_read+0x1b3/0x220 [ 189.702733][ T9170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.702756][ T9170] ? rw_verify_area+0x2a6/0x4d0 [ 189.702778][ T9170] ? __lock_acquire+0xab9/0xd20 [ 189.702801][ T9170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.702830][ T9170] vfs_read+0x1fd/0xa30 [ 189.702851][ T9170] ? fdget_pos+0x247/0x320 [ 189.702871][ T9170] ? __pfx___mutex_lock+0x10/0x10 [ 189.702891][ T9170] ? __pfx_vfs_read+0x10/0x10 [ 189.702915][ T9170] ? __fget_files+0x2a/0x420 [ 189.702935][ T9170] ? __fget_files+0x3a0/0x420 [ 189.702967][ T9170] ? __fget_files+0x2a/0x420 [ 189.702992][ T9170] ksys_read+0x145/0x250 [ 189.703019][ T9170] ? __pfx_ksys_read+0x10/0x10 [ 189.703040][ T9170] ? rcu_is_watching+0x15/0xb0 [ 189.703062][ T9170] ? do_syscall_64+0xbe/0x3b0 [ 189.703087][ T9170] do_syscall_64+0xfa/0x3b0 [ 189.703105][ T9170] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.703123][ T9170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.703141][ T9170] ? clear_bhb_loop+0x60/0xb0 [ 189.703165][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.703182][ T9170] RIP: 0033:0x7f4ef8b8d5fc [ 189.703200][ T9170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.703216][ T9170] RSP: 002b:00007f4ef9a0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.703236][ T9170] RAX: ffffffffffffffda RBX: 00007f4ef8dc5fa0 RCX: 00007f4ef8b8d5fc [ 189.703250][ T9170] RDX: 000000000000000f RSI: 00007f4ef9a0f0a0 RDI: 0000000000000004 [ 189.703261][ T9170] RBP: 00007f4ef9a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 189.703273][ T9170] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.703284][ T9170] R13: 00007f4ef8dc6038 R14: 00007f4ef8dc5fa0 R15: 00007ffd5e3e6fc8 [ 189.703315][ T9170] [ 190.639973][ T9190] FAULT_INJECTION: forcing a failure. [ 190.639973][ T9190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.665671][ T9190] CPU: 1 UID: 0 PID: 9190 Comm: syz.1.1185 Not tainted syzkaller #0 PREEMPT(full) [ 190.665699][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.665711][ T9190] Call Trace: [ 190.665719][ T9190] [ 190.665727][ T9190] dump_stack_lvl+0x189/0x250 [ 190.665756][ T9190] ? __pfx____ratelimit+0x10/0x10 [ 190.665777][ T9190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.665801][ T9190] ? __pfx__printk+0x10/0x10 [ 190.665842][ T9190] should_fail_ex+0x414/0x560 [ 190.665894][ T9190] _copy_to_user+0x31/0xb0 [ 190.665920][ T9190] simple_read_from_buffer+0xe1/0x170 [ 190.665954][ T9190] proc_fail_nth_read+0x1b3/0x220 [ 190.665990][ T9190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.666017][ T9190] ? rw_verify_area+0x2a6/0x4d0 [ 190.666042][ T9190] ? __lock_acquire+0xab9/0xd20 [ 190.666069][ T9190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.666094][ T9190] vfs_read+0x1fd/0xa30 [ 190.666119][ T9190] ? fdget_pos+0x247/0x320 [ 190.666141][ T9190] ? __pfx___mutex_lock+0x10/0x10 [ 190.666165][ T9190] ? __pfx_vfs_read+0x10/0x10 [ 190.666193][ T9190] ? __fget_files+0x2a/0x420 [ 190.666216][ T9190] ? __fget_files+0x3a0/0x420 [ 190.666233][ T9190] ? __fget_files+0x2a/0x420 [ 190.666261][ T9190] ksys_read+0x145/0x250 [ 190.666291][ T9190] ? __pfx_ksys_read+0x10/0x10 [ 190.666319][ T9190] ? rcu_is_watching+0x15/0xb0 [ 190.666340][ T9190] ? trace_sys_enter+0x25/0x100 [ 190.666378][ T9190] do_syscall_64+0xfa/0x3b0 [ 190.666399][ T9190] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.666420][ T9190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.666441][ T9190] ? clear_bhb_loop+0x60/0xb0 [ 190.666467][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.666487][ T9190] RIP: 0033:0x7f151778d5fc [ 190.666505][ T9190] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.666522][ T9190] RSP: 002b:00007f15186aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.666544][ T9190] RAX: ffffffffffffffda RBX: 00007f15179c5fa0 RCX: 00007f151778d5fc [ 190.666560][ T9190] RDX: 000000000000000f RSI: 00007f15186aa0a0 RDI: 0000000000000007 [ 190.666572][ T9190] RBP: 00007f15186aa090 R08: 0000000000000000 R09: 0000000000000000 [ 190.666585][ T9190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.666597][ T9190] R13: 00007f15179c6038 R14: 00007f15179c5fa0 R15: 00007ffe6470abc8 [ 190.666630][ T9190] [ 191.161282][ T9200] __nla_validate_parse: 108 callbacks suppressed [ 191.161302][ T9200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1192'. [ 191.210557][ T9208] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1195'. [ 191.248332][ T9210] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 191.257633][ T9210] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 191.381879][ T9215] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1198'. [ 191.392820][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1197'. [ 191.413056][ T9215] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1198'. [ 191.429977][ T9215] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1198'. [ 191.451102][ T9215] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1198'. [ 191.476412][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1200'. [ 191.494197][ T9215] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1198'. [ 191.537762][ T9215] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1198'. [ 191.799485][ T9239] netlink: 'syz.2.1203': attribute type 4 has an invalid length. [ 192.038400][ T9248] FAULT_INJECTION: forcing a failure. [ 192.038400][ T9248] name failslab, interval 1, probability 0, space 0, times 0 [ 192.064567][ T9248] CPU: 1 UID: 0 PID: 9248 Comm: syz.2.1208 Not tainted syzkaller #0 PREEMPT(full) [ 192.064594][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.064625][ T9248] Call Trace: [ 192.064634][ T9248] [ 192.064643][ T9248] dump_stack_lvl+0x189/0x250 [ 192.064672][ T9248] ? __pfx____ratelimit+0x10/0x10 [ 192.064694][ T9248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.064719][ T9248] ? __pfx__printk+0x10/0x10 [ 192.064754][ T9248] ? __pfx___might_resched+0x10/0x10 [ 192.064779][ T9248] should_fail_ex+0x414/0x560 [ 192.064824][ T9248] should_failslab+0xa8/0x100 [ 192.064864][ T9248] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 192.064892][ T9248] ? __alloc_skb+0x112/0x2d0 [ 192.064917][ T9248] __alloc_skb+0x112/0x2d0 [ 192.064942][ T9248] netlink_sendmsg+0x5c6/0xb30 [ 192.064974][ T9248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.064998][ T9248] ? aa_sock_msg_perm+0xf1/0x1d0 [ 192.065019][ T9248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.065041][ T9248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.065063][ T9248] __sock_sendmsg+0x219/0x270 [ 192.065095][ T9248] ____sys_sendmsg+0x505/0x830 [ 192.065124][ T9248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.065158][ T9248] ? import_iovec+0x74/0xa0 [ 192.065185][ T9248] ___sys_sendmsg+0x21f/0x2a0 [ 192.065211][ T9248] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.065271][ T9248] ? __fget_files+0x2a/0x420 [ 192.065288][ T9248] ? __fget_files+0x3a0/0x420 [ 192.065317][ T9248] __x64_sys_sendmsg+0x19b/0x260 [ 192.065344][ T9248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.065378][ T9248] ? __pfx_ksys_write+0x10/0x10 [ 192.065402][ T9248] ? rcu_is_watching+0x15/0xb0 [ 192.065426][ T9248] ? do_syscall_64+0xbe/0x3b0 [ 192.065453][ T9248] do_syscall_64+0xfa/0x3b0 [ 192.065483][ T9248] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.065501][ T9248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.065520][ T9248] ? clear_bhb_loop+0x60/0xb0 [ 192.065543][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.065561][ T9248] RIP: 0033:0x7f4ef8b8ebe9 [ 192.065578][ T9248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.065594][ T9248] RSP: 002b:00007f4ef9a0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.065613][ T9248] RAX: ffffffffffffffda RBX: 00007f4ef8dc5fa0 RCX: 00007f4ef8b8ebe9 [ 192.065645][ T9248] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000003 [ 192.065658][ T9248] RBP: 00007f4ef9a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.065670][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.065681][ T9248] R13: 00007f4ef8dc6038 R14: 00007f4ef8dc5fa0 R15: 00007ffd5e3e6fc8 [ 192.065714][ T9248] [ 192.391158][ T9251] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 192.428202][ T9251] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.539697][ T9259] FAULT_INJECTION: forcing a failure. [ 192.539697][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 192.575777][ T9259] CPU: 1 UID: 0 PID: 9259 Comm: syz.0.1212 Not tainted syzkaller #0 PREEMPT(full) [ 192.575799][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.575809][ T9259] Call Trace: [ 192.575814][ T9259] [ 192.575828][ T9259] dump_stack_lvl+0x189/0x250 [ 192.575850][ T9259] ? __pfx____ratelimit+0x10/0x10 [ 192.575867][ T9259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.575883][ T9259] ? __pfx__printk+0x10/0x10 [ 192.575909][ T9259] ? __pfx___might_resched+0x10/0x10 [ 192.575926][ T9259] should_fail_ex+0x414/0x560 [ 192.575950][ T9259] should_failslab+0xa8/0x100 [ 192.575974][ T9259] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 192.575994][ T9259] ? __alloc_skb+0x112/0x2d0 [ 192.576012][ T9259] __alloc_skb+0x112/0x2d0 [ 192.576030][ T9259] netlink_sendmsg+0x5c6/0xb30 [ 192.576054][ T9259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.576071][ T9259] ? aa_sock_msg_perm+0xf1/0x1d0 [ 192.576086][ T9259] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.576103][ T9259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.576118][ T9259] __sock_sendmsg+0x219/0x270 [ 192.576141][ T9259] ____sys_sendmsg+0x505/0x830 [ 192.576163][ T9259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.576188][ T9259] ? import_iovec+0x74/0xa0 [ 192.576209][ T9259] ___sys_sendmsg+0x21f/0x2a0 [ 192.576228][ T9259] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.576273][ T9259] ? __fget_files+0x2a/0x420 [ 192.576304][ T9259] ? __fget_files+0x3a0/0x420 [ 192.576328][ T9259] __x64_sys_sendmsg+0x19b/0x260 [ 192.576349][ T9259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.576379][ T9259] ? __pfx_ksys_write+0x10/0x10 [ 192.576400][ T9259] ? rcu_is_watching+0x15/0xb0 [ 192.576422][ T9259] ? do_syscall_64+0xbe/0x3b0 [ 192.576445][ T9259] do_syscall_64+0xfa/0x3b0 [ 192.576462][ T9259] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.576480][ T9259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.576497][ T9259] ? clear_bhb_loop+0x60/0xb0 [ 192.576518][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.576536][ T9259] RIP: 0033:0x7fe423d8ebe9 [ 192.576552][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.576568][ T9259] RSP: 002b:00007fe421ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.576589][ T9259] RAX: ffffffffffffffda RBX: 00007fe423fc5fa0 RCX: 00007fe423d8ebe9 [ 192.576602][ T9259] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000004 [ 192.576613][ T9259] RBP: 00007fe421ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.576624][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.576633][ T9259] R13: 00007fe423fc6038 R14: 00007fe423fc5fa0 R15: 00007ffd4ce38028 [ 192.576662][ T9259] [ 193.413794][ T9287] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 193.524068][ T9295] FAULT_INJECTION: forcing a failure. [ 193.524068][ T9295] name failslab, interval 1, probability 0, space 0, times 0 [ 193.584573][ T9295] CPU: 0 UID: 0 PID: 9295 Comm: syz.1.1226 Not tainted syzkaller #0 PREEMPT(full) [ 193.584600][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.584610][ T9295] Call Trace: [ 193.584617][ T9295] [ 193.584624][ T9295] dump_stack_lvl+0x189/0x250 [ 193.584649][ T9295] ? __pfx____ratelimit+0x10/0x10 [ 193.584666][ T9295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.584685][ T9295] ? __pfx__printk+0x10/0x10 [ 193.584712][ T9295] ? __pfx___might_resched+0x10/0x10 [ 193.584732][ T9295] should_fail_ex+0x414/0x560 [ 193.584758][ T9295] should_failslab+0xa8/0x100 [ 193.584784][ T9295] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 193.584806][ T9295] ? __alloc_skb+0x112/0x2d0 [ 193.584826][ T9295] __alloc_skb+0x112/0x2d0 [ 193.584845][ T9295] netlink_sendmsg+0x5c6/0xb30 [ 193.584870][ T9295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.584889][ T9295] ? aa_sock_msg_perm+0xf1/0x1d0 [ 193.584906][ T9295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.584923][ T9295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.584940][ T9295] __sock_sendmsg+0x219/0x270 [ 193.584966][ T9295] ____sys_sendmsg+0x505/0x830 [ 193.584989][ T9295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.585015][ T9295] ? import_iovec+0x74/0xa0 [ 193.585037][ T9295] ___sys_sendmsg+0x21f/0x2a0 [ 193.585057][ T9295] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.585105][ T9295] ? __fget_files+0x2a/0x420 [ 193.585119][ T9295] ? __fget_files+0x3a0/0x420 [ 193.585141][ T9295] __x64_sys_sendmsg+0x19b/0x260 [ 193.585161][ T9295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.585188][ T9295] ? __pfx_ksys_write+0x10/0x10 [ 193.585207][ T9295] ? rcu_is_watching+0x15/0xb0 [ 193.585228][ T9295] ? do_syscall_64+0xbe/0x3b0 [ 193.585248][ T9295] do_syscall_64+0xfa/0x3b0 [ 193.585264][ T9295] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.585279][ T9295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.585294][ T9295] ? clear_bhb_loop+0x60/0xb0 [ 193.585314][ T9295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.585329][ T9295] RIP: 0033:0x7f151778ebe9 [ 193.585344][ T9295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.585358][ T9295] RSP: 002b:00007f15186aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.585375][ T9295] RAX: ffffffffffffffda RBX: 00007f15179c5fa0 RCX: 00007f151778ebe9 [ 193.585387][ T9295] RDX: 0000000000004000 RSI: 00002000000010c0 RDI: 0000000000000003 [ 193.585397][ T9295] RBP: 00007f15186aa090 R08: 0000000000000000 R09: 0000000000000000 [ 193.585407][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.585416][ T9295] R13: 00007f15179c6038 R14: 00007f15179c5fa0 R15: 00007ffe6470abc8 [ 193.585441][ T9295] [ 194.179663][ T9315] FAULT_INJECTION: forcing a failure. [ 194.179663][ T9315] name failslab, interval 1, probability 0, space 0, times 0 [ 194.215441][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.252495][ T9315] CPU: 0 UID: 0 PID: 9315 Comm: syz.1.1233 Not tainted syzkaller #0 PREEMPT(full) [ 194.252519][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.252529][ T9315] Call Trace: [ 194.252536][ T9315] [ 194.252544][ T9315] dump_stack_lvl+0x189/0x250 [ 194.252572][ T9315] ? __pfx____ratelimit+0x10/0x10 [ 194.252591][ T9315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.252613][ T9315] ? __pfx__printk+0x10/0x10 [ 194.252645][ T9315] ? __pfx___might_resched+0x10/0x10 [ 194.252668][ T9315] should_fail_ex+0x414/0x560 [ 194.252698][ T9315] should_failslab+0xa8/0x100 [ 194.252727][ T9315] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 194.252754][ T9315] ? __alloc_skb+0x112/0x2d0 [ 194.252777][ T9315] __alloc_skb+0x112/0x2d0 [ 194.252800][ T9315] netlink_sendmsg+0x5c6/0xb30 [ 194.252829][ T9315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.252851][ T9315] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.252872][ T9315] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.252910][ T9315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.252931][ T9315] __sock_sendmsg+0x219/0x270 [ 194.252963][ T9315] ____sys_sendmsg+0x505/0x830 [ 194.252992][ T9315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.253025][ T9315] ? import_iovec+0x74/0xa0 [ 194.253053][ T9315] ___sys_sendmsg+0x21f/0x2a0 [ 194.253079][ T9315] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.253141][ T9315] ? __fget_files+0x2a/0x420 [ 194.253158][ T9315] ? __fget_files+0x3a0/0x420 [ 194.253187][ T9315] __x64_sys_sendmsg+0x19b/0x260 [ 194.253214][ T9315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.253248][ T9315] ? __pfx_ksys_write+0x10/0x10 [ 194.253272][ T9315] ? rcu_is_watching+0x15/0xb0 [ 194.253298][ T9315] ? do_syscall_64+0xbe/0x3b0 [ 194.253324][ T9315] do_syscall_64+0xfa/0x3b0 [ 194.253344][ T9315] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.253364][ T9315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.253383][ T9315] ? clear_bhb_loop+0x60/0xb0 [ 194.253406][ T9315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.253433][ T9315] RIP: 0033:0x7f151778ebe9 [ 194.253451][ T9315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.253468][ T9315] RSP: 002b:00007f15186aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.253494][ T9315] RAX: ffffffffffffffda RBX: 00007f15179c5fa0 RCX: 00007f151778ebe9 [ 194.253508][ T9315] RDX: 0000000000008050 RSI: 0000200000007380 RDI: 0000000000000005 [ 194.253521][ T9315] RBP: 00007f15186aa090 R08: 0000000000000000 R09: 0000000000000000 [ 194.253532][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.253544][ T9315] R13: 00007f15179c6038 R14: 00007f15179c5fa0 R15: 00007ffe6470abc8 [ 194.253576][ T9315] [ 194.535749][ T9323] FAULT_INJECTION: forcing a failure. [ 194.535749][ T9323] name failslab, interval 1, probability 0, space 0, times 0 [ 194.548602][ T9323] CPU: 0 UID: 0 PID: 9323 Comm: syz.0.1238 Not tainted syzkaller #0 PREEMPT(full) [ 194.548630][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.548650][ T9323] Call Trace: [ 194.548659][ T9323] [ 194.548668][ T9323] dump_stack_lvl+0x189/0x250 [ 194.548698][ T9323] ? __pfx____ratelimit+0x10/0x10 [ 194.548720][ T9323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.548745][ T9323] ? __pfx__printk+0x10/0x10 [ 194.548780][ T9323] ? __pfx___might_resched+0x10/0x10 [ 194.548805][ T9323] should_fail_ex+0x414/0x560 [ 194.548839][ T9323] should_failslab+0xa8/0x100 [ 194.548871][ T9323] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 194.548900][ T9323] ? __alloc_skb+0x112/0x2d0 [ 194.548925][ T9323] __alloc_skb+0x112/0x2d0 [ 194.548950][ T9323] netlink_sendmsg+0x5c6/0xb30 [ 194.548982][ T9323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.549008][ T9323] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.549030][ T9323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.549052][ T9323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.549074][ T9323] __sock_sendmsg+0x219/0x270 [ 194.549107][ T9323] ____sys_sendmsg+0x505/0x830 [ 194.549137][ T9323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.549172][ T9323] ? import_iovec+0x74/0xa0 [ 194.549199][ T9323] ___sys_sendmsg+0x21f/0x2a0 [ 194.549225][ T9323] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.549289][ T9323] ? __fget_files+0x2a/0x420 [ 194.549306][ T9323] ? __fget_files+0x3a0/0x420 [ 194.549336][ T9323] __x64_sys_sendmsg+0x19b/0x260 [ 194.549363][ T9323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.549398][ T9323] ? __pfx_ksys_write+0x10/0x10 [ 194.549423][ T9323] ? rcu_is_watching+0x15/0xb0 [ 194.549449][ T9323] ? do_syscall_64+0xbe/0x3b0 [ 194.549476][ T9323] do_syscall_64+0xfa/0x3b0 [ 194.549497][ T9323] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.549517][ T9323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.549538][ T9323] ? clear_bhb_loop+0x60/0xb0 [ 194.549563][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.549583][ T9323] RIP: 0033:0x7fe423d8ebe9 [ 194.549601][ T9323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.549618][ T9323] RSP: 002b:00007fe421ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.549646][ T9323] RAX: ffffffffffffffda RBX: 00007fe423fc5fa0 RCX: 00007fe423d8ebe9 [ 194.549661][ T9323] RDX: 0000000008060040 RSI: 0000200000000040 RDI: 0000000000000003 [ 194.549675][ T9323] RBP: 00007fe421ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.549688][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.549700][ T9323] R13: 00007fe423fc6038 R14: 00007fe423fc5fa0 R15: 00007ffd4ce38028 [ 194.549733][ T9323] [ 195.666564][ T9369] FAULT_INJECTION: forcing a failure. [ 195.666564][ T9369] name failslab, interval 1, probability 0, space 0, times 0 [ 195.713158][ T9369] CPU: 0 UID: 0 PID: 9369 Comm: syz.1.1257 Not tainted syzkaller #0 PREEMPT(full) [ 195.713183][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.713194][ T9369] Call Trace: [ 195.713202][ T9369] [ 195.713211][ T9369] dump_stack_lvl+0x189/0x250 [ 195.713238][ T9369] ? __pfx____ratelimit+0x10/0x10 [ 195.713257][ T9369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.713279][ T9369] ? __pfx__printk+0x10/0x10 [ 195.713320][ T9369] ? __pfx___might_resched+0x10/0x10 [ 195.713342][ T9369] should_fail_ex+0x414/0x560 [ 195.713372][ T9369] should_failslab+0xa8/0x100 [ 195.713401][ T9369] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 195.713427][ T9369] ? __alloc_skb+0x112/0x2d0 [ 195.713450][ T9369] __alloc_skb+0x112/0x2d0 [ 195.713477][ T9369] netlink_sendmsg+0x5c6/0xb30 [ 195.713506][ T9369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.713529][ T9369] ? aa_sock_msg_perm+0xf1/0x1d0 [ 195.713549][ T9369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.713569][ T9369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.713590][ T9369] __sock_sendmsg+0x219/0x270 [ 195.713619][ T9369] ____sys_sendmsg+0x505/0x830 [ 195.713647][ T9369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.713678][ T9369] ? import_iovec+0x74/0xa0 [ 195.713704][ T9369] ___sys_sendmsg+0x21f/0x2a0 [ 195.713728][ T9369] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.713786][ T9369] ? __fget_files+0x2a/0x420 [ 195.713801][ T9369] ? __fget_files+0x3a0/0x420 [ 195.713828][ T9369] __x64_sys_sendmsg+0x19b/0x260 [ 195.713852][ T9369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.713884][ T9369] ? __pfx_ksys_write+0x10/0x10 [ 195.713906][ T9369] ? rcu_is_watching+0x15/0xb0 [ 195.713929][ T9369] ? do_syscall_64+0xbe/0x3b0 [ 195.713953][ T9369] do_syscall_64+0xfa/0x3b0 [ 195.713972][ T9369] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.713990][ T9369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.714009][ T9369] ? clear_bhb_loop+0x60/0xb0 [ 195.714032][ T9369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.714050][ T9369] RIP: 0033:0x7f151778ebe9 [ 195.714066][ T9369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.714082][ T9369] RSP: 002b:00007f15186aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.714102][ T9369] RAX: ffffffffffffffda RBX: 00007f15179c5fa0 RCX: 00007f151778ebe9 [ 195.714115][ T9369] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 195.714126][ T9369] RBP: 00007f15186aa090 R08: 0000000000000000 R09: 0000000000000000 [ 195.714137][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.714147][ T9369] R13: 00007f15179c6038 R14: 00007f15179c5fa0 R15: 00007ffe6470abc8 [ 195.714177][ T9369] [ 196.362207][ T9395] __nla_validate_parse: 133 callbacks suppressed [ 196.362228][ T9395] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1268'. [ 196.451502][ T9400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1271'. [ 196.497559][ T9400] vxcan1: entered allmulticast mode [ 196.596665][ T9407] netlink: 'syz.3.1273': attribute type 9 has an invalid length. [ 196.610639][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 196.618975][ T9407] netlink: 147436 bytes leftover after parsing attributes in process `syz.3.1273'. [ 197.334042][ T9436] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1284'. [ 197.894351][ T9454] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 197.917476][ T9453] macvtap1: entered promiscuous mode [ 197.923071][ T9453] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 197.946643][ T9453] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 198.003905][ T9454] netlink: 'syz.0.1291': attribute type 1 has an invalid length. [ 198.170000][ T9465] FAULT_INJECTION: forcing a failure. [ 198.170000][ T9465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.185507][ T9465] CPU: 1 UID: 0 PID: 9465 Comm: syz.2.1296 Not tainted syzkaller #0 PREEMPT(full) [ 198.185538][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.185551][ T9465] Call Trace: [ 198.185560][ T9465] [ 198.185568][ T9465] dump_stack_lvl+0x189/0x250 [ 198.185598][ T9465] ? __pfx____ratelimit+0x10/0x10 [ 198.185619][ T9465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.185644][ T9465] ? __pfx__printk+0x10/0x10 [ 198.185673][ T9465] ? __might_fault+0xb0/0x130 [ 198.185714][ T9465] should_fail_ex+0x414/0x560 [ 198.185747][ T9465] _copy_from_user+0x2d/0xb0 [ 198.185772][ T9465] get_timespec64+0x8e/0x1a0 [ 198.185802][ T9465] ? __pfx_get_timespec64+0x10/0x10 [ 198.185843][ T9465] __x64_sys_recvmmsg+0x143/0x240 [ 198.185872][ T9465] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 198.185895][ T9465] ? rcu_is_watching+0x15/0xb0 [ 198.185921][ T9465] ? do_syscall_64+0xbe/0x3b0 [ 198.185947][ T9465] do_syscall_64+0xfa/0x3b0 [ 198.185967][ T9465] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.185987][ T9465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.186007][ T9465] ? clear_bhb_loop+0x60/0xb0 [ 198.186032][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.186051][ T9465] RIP: 0033:0x7f4ef8b8ebe9 [ 198.186070][ T9465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.186088][ T9465] RSP: 002b:00007f4ef9a0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 198.186110][ T9465] RAX: ffffffffffffffda RBX: 00007f4ef8dc5fa0 RCX: 00007f4ef8b8ebe9 [ 198.186125][ T9465] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 198.186139][ T9465] RBP: 00007f4ef9a0f090 R08: 0000200000003700 R09: 0000000000000000 [ 198.186153][ T9465] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 198.186165][ T9465] R13: 00007f4ef8dc6038 R14: 00007f4ef8dc5fa0 R15: 00007ffd5e3e6fc8 [ 198.186198][ T9465] [ 198.510932][ T9469] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 198.555696][ T9469] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1299'. [ 198.659361][ T9469] bond0 (unregistering): Released all slaves [ 199.210501][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1307'. [ 199.272076][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1309'. [ 199.316012][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'. [ 200.230191][ T9549] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 200.260609][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1323'. [ 200.319652][ T9546] netlink: 'syz.1.1323': attribute type 7 has an invalid length. [ 200.473398][ T9546] netlink: 'syz.1.1323': attribute type 8 has an invalid length. [ 200.860963][ T9573] openvswitch: netlink: Missing key (keys=40, expected=80) [ 200.895841][ T9576] netlink: 'syz.2.1334': attribute type 3 has an invalid length. [ 200.948254][ T9579] FAULT_INJECTION: forcing a failure. [ 200.948254][ T9579] name failslab, interval 1, probability 0, space 0, times 0 [ 200.962450][ T9579] CPU: 1 UID: 0 PID: 9579 Comm: syz.1.1335 Not tainted syzkaller #0 PREEMPT(full) [ 200.962477][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.962488][ T9579] Call Trace: [ 200.962495][ T9579] [ 200.962503][ T9579] dump_stack_lvl+0x189/0x250 [ 200.962532][ T9579] ? __pfx____ratelimit+0x10/0x10 [ 200.962552][ T9579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.962572][ T9579] ? __pfx__printk+0x10/0x10 [ 200.962603][ T9579] ? __pfx___might_resched+0x10/0x10 [ 200.962628][ T9579] should_fail_ex+0x414/0x560 [ 200.962661][ T9579] should_failslab+0xa8/0x100 [ 200.962693][ T9579] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 200.962721][ T9579] ? __alloc_skb+0x112/0x2d0 [ 200.962745][ T9579] __alloc_skb+0x112/0x2d0 [ 200.962770][ T9579] netlink_sendmsg+0x5c6/0xb30 [ 200.962802][ T9579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.962828][ T9579] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.962849][ T9579] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.962871][ T9579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.962894][ T9579] __sock_sendmsg+0x219/0x270 [ 200.962926][ T9579] ____sys_sendmsg+0x505/0x830 [ 200.962955][ T9579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.962989][ T9579] ? import_iovec+0x74/0xa0 [ 200.963018][ T9579] ___sys_sendmsg+0x21f/0x2a0 [ 200.963049][ T9579] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.963112][ T9579] ? __fget_files+0x2a/0x420 [ 200.963129][ T9579] ? __fget_files+0x3a0/0x420 [ 200.963164][ T9579] __x64_sys_sendmsg+0x19b/0x260 [ 200.963188][ T9579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.963224][ T9579] ? __pfx_ksys_write+0x10/0x10 [ 200.963248][ T9579] ? rcu_is_watching+0x15/0xb0 [ 200.963275][ T9579] ? do_syscall_64+0xbe/0x3b0 [ 200.963302][ T9579] do_syscall_64+0xfa/0x3b0 [ 200.963322][ T9579] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.963342][ T9579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.963361][ T9579] ? clear_bhb_loop+0x60/0xb0 [ 200.963387][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.963406][ T9579] RIP: 0033:0x7f151778ebe9 [ 200.963424][ T9579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.963442][ T9579] RSP: 002b:00007f15186aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.963463][ T9579] RAX: ffffffffffffffda RBX: 00007f15179c5fa0 RCX: 00007f151778ebe9 [ 200.963478][ T9579] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 200.963490][ T9579] RBP: 00007f15186aa090 R08: 0000000000000000 R09: 0000000000000000 [ 200.963502][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.963514][ T9579] R13: 00007f15179c6038 R14: 00007f15179c5fa0 R15: 00007ffe6470abc8 [ 200.963547][ T9579] [ 201.364485][ T9583] __nla_validate_parse: 4 callbacks suppressed [ 201.364505][ T9583] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1337'. [ 201.454536][ T9585] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 201.546329][ T9590] netlink: 'syz.2.1339': attribute type 6 has an invalid length. [ 201.839239][ T9604] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1345'. [ 202.796467][ T9651] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1357'. [ 202.820860][ T9651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1357'. [ 202.938960][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1363'. [ 203.266193][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1366'. [ 203.277816][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1366'. [ 203.298501][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1366'. [ 203.312993][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'. [ 203.327704][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1366'. [ 203.584909][ T9687] FAULT_INJECTION: forcing a failure. [ 203.584909][ T9687] name failslab, interval 1, probability 0, space 0, times 0 [ 203.622918][ T9687] CPU: 1 UID: 0 PID: 9687 Comm: syz.1.1370 Not tainted syzkaller #0 PREEMPT(full) [ 203.622944][ T9687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.622956][ T9687] Call Trace: [ 203.622964][ T9687] [ 203.622973][ T9687] dump_stack_lvl+0x189/0x250 [ 203.623001][ T9687] ? __pfx____ratelimit+0x10/0x10 [ 203.623022][ T9687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.623043][ T9687] ? __pfx__printk+0x10/0x10 [ 203.623073][ T9687] ? __pfx___might_resched+0x10/0x10 [ 203.623095][ T9687] should_fail_ex+0x414/0x560 [ 203.623142][ T9687] should_failslab+0xa8/0x100 [ 203.623184][ T9687] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 203.623230][ T9687] ? __alloc_skb+0x112/0x2d0 [ 203.623255][ T9687] __alloc_skb+0x112/0x2d0 [ 203.623279][ T9687] netlink_sendmsg+0x5c6/0xb30 [ 203.623311][ T9687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.623346][ T9687] ? aa_sock_msg_perm+0xf1/0x1d0 [ 203.623367][ T9687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.623387][ T9687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.623407][ T9687] __sock_sendmsg+0x219/0x270 [ 203.623437][ T9687] ____sys_sendmsg+0x505/0x830 [ 203.623465][ T9687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.623497][ T9687] ? import_iovec+0x74/0xa0 [ 203.623523][ T9687] ___sys_sendmsg+0x21f/0x2a0 [ 203.623551][ T9687] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.623607][ T9687] ? __fget_files+0x2a/0x420 [ 203.623623][ T9687] ? __fget_files+0x3a0/0x420 [ 203.623647][ T9687] __x64_sys_sendmsg+0x19b/0x260 [ 203.623671][ T9687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.623703][ T9687] ? __pfx_ksys_write+0x10/0x10 [ 203.623725][ T9687] ? rcu_is_watching+0x15/0xb0 [ 203.623749][ T9687] ? do_syscall_64+0xbe/0x3b0 [ 203.623773][ T9687] do_syscall_64+0xfa/0x3b0 [ 203.623791][ T9687] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.623810][ T9687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.623827][ T9687] ? clear_bhb_loop+0x60/0xb0 [ 203.623848][ T9687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.623865][ T9687] RIP: 0033:0x7f151778ebe9 [ 203.623882][ T9687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.623903][ T9687] RSP: 002b:00007f15186aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.623923][ T9687] RAX: ffffffffffffffda RBX: 00007f15179c5fa0 RCX: 00007f151778ebe9 [ 203.623937][ T9687] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 203.623949][ T9687] RBP: 00007f15186aa090 R08: 0000000000000000 R09: 0000000000000000 [ 203.623960][ T9687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.623971][ T9687] R13: 00007f15179c6038 R14: 00007f15179c5fa0 R15: 00007ffe6470abc8 [ 203.624001][ T9687] [ 205.858583][ T9772] netlink: 'syz.4.1402': attribute type 29 has an invalid length. [ 205.958660][ T9776] netlink: 'syz.4.1402': attribute type 29 has an invalid length. [ 206.837417][ T9808] __nla_validate_parse: 53 callbacks suppressed [ 206.837437][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1417'. [ 206.881936][ T9815] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1421'. [ 206.892087][ T9815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1421'. [ 207.004534][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 207.266492][ T9829] tipc: Started in network mode [ 207.281805][ T9829] tipc: Node identity 52b6ea6ade92, cluster identity 4711 [ 207.298296][ T9829] tipc: Enabled bearer , priority 0 [ 207.322935][ T9829] syzkaller0: entered promiscuous mode [ 207.337874][ T9829] syzkaller0: entered allmulticast mode [ 207.423137][ T9829] tipc: Resetting bearer [ 207.446035][ T9841] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1432'. [ 207.469380][ T9828] tipc: Resetting bearer [ 207.504397][ T9828] tipc: Disabling bearer [ 207.508909][ T9845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1434'. [ 207.642263][ T9851] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 207.681760][ T9849] netlink: 'syz.4.1436': attribute type 4 has an invalid length. [ 207.694352][ T9849] netlink: 'syz.4.1436': attribute type 4 has an invalid length. [ 207.721195][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 207.810017][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'. [ 207.867577][ T9861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1442'. [ 207.870667][ T9863] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1439'. [ 207.950125][ T9867] netlink: 'syz.3.1442': attribute type 4 has an invalid length. [ 208.858518][ T9908] geneve2: entered promiscuous mode [ 208.881327][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.915739][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.945978][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.280171][ T9980] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 210.468431][ T9994] FAULT_INJECTION: forcing a failure. [ 210.468431][ T9994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.492179][ T9990] netlink: 'syz.2.1490': attribute type 10 has an invalid length. [ 210.518888][ T9994] CPU: 1 UID: 0 PID: 9994 Comm: syz.4.1491 Not tainted syzkaller #0 PREEMPT(full) [ 210.518914][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.518925][ T9994] Call Trace: [ 210.518933][ T9994] [ 210.518941][ T9994] dump_stack_lvl+0x189/0x250 [ 210.518969][ T9994] ? __pfx____ratelimit+0x10/0x10 [ 210.518989][ T9994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.519012][ T9994] ? __pfx__printk+0x10/0x10 [ 210.519050][ T9994] should_fail_ex+0x414/0x560 [ 210.519090][ T9994] _copy_to_user+0x31/0xb0 [ 210.519113][ T9994] simple_read_from_buffer+0xe1/0x170 [ 210.519143][ T9994] proc_fail_nth_read+0x1b3/0x220 [ 210.519166][ T9994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.519188][ T9994] ? rw_verify_area+0x2a6/0x4d0 [ 210.519209][ T9994] ? __lock_acquire+0xab9/0xd20 [ 210.519233][ T9994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.519254][ T9994] vfs_read+0x1fd/0xa30 [ 210.519275][ T9994] ? fdget_pos+0x247/0x320 [ 210.519294][ T9994] ? __pfx___mutex_lock+0x10/0x10 [ 210.519319][ T9994] ? __pfx_vfs_read+0x10/0x10 [ 210.519341][ T9994] ? __fget_files+0x2a/0x420 [ 210.519360][ T9994] ? __fget_files+0x3a0/0x420 [ 210.519374][ T9994] ? __fget_files+0x2a/0x420 [ 210.519398][ T9994] ksys_read+0x145/0x250 [ 210.519423][ T9994] ? __pfx_ksys_read+0x10/0x10 [ 210.519447][ T9994] ? rcu_is_watching+0x15/0xb0 [ 210.519469][ T9994] ? do_syscall_64+0xbe/0x3b0 [ 210.519491][ T9994] do_syscall_64+0xfa/0x3b0 [ 210.519507][ T9994] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.519524][ T9994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.519540][ T9994] ? clear_bhb_loop+0x60/0xb0 [ 210.519580][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.519597][ T9994] RIP: 0033:0x7f9448f8d5fc [ 210.519615][ T9994] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 210.519630][ T9994] RSP: 002b:00007f9449dc5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.519650][ T9994] RAX: ffffffffffffffda RBX: 00007f94491c5fa0 RCX: 00007f9448f8d5fc [ 210.519662][ T9994] RDX: 000000000000000f RSI: 00007f9449dc50a0 RDI: 0000000000000004 [ 210.519674][ T9994] RBP: 00007f9449dc5090 R08: 0000000000000000 R09: 0000000000000000 [ 210.519685][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.519696][ T9994] R13: 00007f94491c6038 R14: 00007f94491c5fa0 R15: 00007ffc53118168 [ 210.519727][ T9994] [ 210.834919][ T9980] netlink: 'syz.0.1485': attribute type 1 has an invalid length. [ 210.851053][ T9990] team0: entered promiscuous mode [ 210.856230][ T9990] team_slave_0: entered promiscuous mode [ 210.862132][ T9990] team_slave_1: entered promiscuous mode [ 210.868271][ T9990] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 210.881955][ T9990] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.889557][ T9990] bridge0: port 4(team0) entered blocking state [ 210.929830][ T9990] bridge0: port 4(team0) entered disabled state [ 210.956747][ T9990] team0: entered allmulticast mode [ 210.963021][ T9990] team_slave_0: entered allmulticast mode [ 210.970107][ T9990] team_slave_1: entered allmulticast mode [ 211.422875][T10031] tap0: tun_chr_ioctl cmd 2147767506 [ 211.647419][ T5882] Bluetooth: hci0: command 0x0406 tx timeout [ 211.653568][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 211.658454][ T5884] Bluetooth: hci1: command 0x0406 tx timeout [ 211.659588][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 211.762109][T10055] FAULT_INJECTION: forcing a failure. [ 211.762109][T10055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.775451][T10055] CPU: 0 UID: 0 PID: 10055 Comm: syz.3.1516 Not tainted syzkaller #0 PREEMPT(full) [ 211.775476][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.775489][T10055] Call Trace: [ 211.775497][T10055] [ 211.775505][T10055] dump_stack_lvl+0x189/0x250 [ 211.775534][T10055] ? __pfx____ratelimit+0x10/0x10 [ 211.775555][T10055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.775579][T10055] ? __pfx__printk+0x10/0x10 [ 211.775607][T10055] ? __might_fault+0xb0/0x130 [ 211.775646][T10055] should_fail_ex+0x414/0x560 [ 211.775679][T10055] _copy_from_user+0x2d/0xb0 [ 211.775704][T10055] __sys_bpf+0x1ed/0x870 [ 211.775733][T10055] ? __pfx___sys_bpf+0x10/0x10 [ 211.775772][T10055] ? ksys_write+0x22a/0x250 [ 211.775802][T10055] ? __pfx_ksys_write+0x10/0x10 [ 211.775825][T10055] ? rcu_is_watching+0x15/0xb0 [ 211.775853][T10055] __x64_sys_bpf+0x7c/0x90 [ 211.775877][T10055] do_syscall_64+0xfa/0x3b0 [ 211.775897][T10055] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.775917][T10055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.775936][T10055] ? clear_bhb_loop+0x60/0xb0 [ 211.775961][T10055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.775980][T10055] RIP: 0033:0x7f3f7e98ebe9 [ 211.775997][T10055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.776013][T10055] RSP: 002b:00007f3f7f77d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.776034][T10055] RAX: ffffffffffffffda RBX: 00007f3f7ebc5fa0 RCX: 00007f3f7e98ebe9 [ 211.776048][T10055] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 211.776060][T10055] RBP: 00007f3f7f77d090 R08: 0000000000000000 R09: 0000000000000000 [ 211.776072][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.776083][T10055] R13: 00007f3f7ebc6038 R14: 00007f3f7ebc5fa0 R15: 00007ffdad60ac48 [ 211.776115][T10055] [ 212.219696][T10062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.330253][T10062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.403443][T10077] __nla_validate_parse: 47 callbacks suppressed [ 212.403465][T10077] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1524'. [ 212.443933][T10077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1524'. [ 212.478139][T10062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.641122][T10062] team0: Port device netdevsim0 removed [ 212.673837][T10086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1528'. [ 212.800948][ T1147] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.846081][ T1147] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.881762][ T1109] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.926616][ T3005] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.258606][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1540'. [ 213.279304][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 213.382250][T10120] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1542'. [ 213.410889][T10121] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1541'. [ 213.454500][T10121] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 213.557076][T10121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.579808][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 213.640696][T10127] bond3: (slave gretap1): making interface the new active one [ 213.650307][T10127] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 213.684492][T10117] macsec0: entered promiscuous mode [ 213.689879][T10117] bond0: entered promiscuous mode [ 213.695229][T10117] bond_slave_0: entered promiscuous mode [ 213.701169][T10117] bond_slave_1: entered promiscuous mode [ 213.715231][T10117] bond0: left promiscuous mode [ 213.715280][T10133] FAULT_INJECTION: forcing a failure. [ 213.715280][T10133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.720050][T10117] bond_slave_0: left promiscuous mode [ 213.720267][T10117] bond_slave_1: left promiscuous mode [ 213.743008][T10133] CPU: 1 UID: 0 PID: 10133 Comm: syz.2.1546 Not tainted syzkaller #0 PREEMPT(full) [ 213.743036][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.743056][T10133] Call Trace: [ 213.743065][T10133] [ 213.743074][T10133] dump_stack_lvl+0x189/0x250 [ 213.743106][T10133] ? __pfx____ratelimit+0x10/0x10 [ 213.743132][T10133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.743157][T10133] ? __pfx__printk+0x10/0x10 [ 213.743188][T10133] ? __might_fault+0xb0/0x130 [ 213.743229][T10133] should_fail_ex+0x414/0x560 [ 213.743263][T10133] _copy_from_user+0x2d/0xb0 [ 213.743288][T10133] wext_handle_ioctl+0xba/0x1c0 [ 213.743317][T10133] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 213.743338][T10133] ? __lock_acquire+0xab9/0xd20 [ 213.743386][T10133] sock_ioctl+0x15f/0x790 [ 213.743418][T10133] ? __pfx_sock_ioctl+0x10/0x10 [ 213.743445][T10133] ? __fget_files+0x2a/0x420 [ 213.743463][T10133] ? __fget_files+0x3a0/0x420 [ 213.743480][T10133] ? __fget_files+0x2a/0x420 [ 213.743502][T10133] ? bpf_lsm_file_ioctl+0x9/0x20 [ 213.743528][T10133] ? __pfx_sock_ioctl+0x10/0x10 [ 213.743555][T10133] __se_sys_ioctl+0xf9/0x170 [ 213.743585][T10133] do_syscall_64+0xfa/0x3b0 [ 213.743605][T10133] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.743625][T10133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.743646][T10133] ? clear_bhb_loop+0x60/0xb0 [ 213.743672][T10133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.743692][T10133] RIP: 0033:0x7f4ef8b8ebe9 [ 213.743710][T10133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.743728][T10133] RSP: 002b:00007f4ef9a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.743750][T10133] RAX: ffffffffffffffda RBX: 00007f4ef8dc5fa0 RCX: 00007f4ef8b8ebe9 [ 213.743765][T10133] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 213.743779][T10133] RBP: 00007f4ef9a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.743792][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.743803][T10133] R13: 00007f4ef8dc6038 R14: 00007f4ef8dc5fa0 R15: 00007ffd5e3e6fc8 [ 213.743837][T10133] [ 213.981440][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 214.208710][T10149] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1554'. [ 214.587343][T10168] FAULT_INJECTION: forcing a failure. [ 214.587343][T10168] name failslab, interval 1, probability 0, space 0, times 0 [ 214.623707][T10168] CPU: 1 UID: 0 PID: 10168 Comm: syz.3.1562 Not tainted syzkaller #0 PREEMPT(full) [ 214.623744][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.623757][T10168] Call Trace: [ 214.623765][T10168] [ 214.623775][T10168] dump_stack_lvl+0x189/0x250 [ 214.623804][T10168] ? __pfx____ratelimit+0x10/0x10 [ 214.623825][T10168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.623848][T10168] ? __pfx__printk+0x10/0x10 [ 214.623883][T10168] ? __pfx___might_resched+0x10/0x10 [ 214.623907][T10168] should_fail_ex+0x414/0x560 [ 214.623938][T10168] should_failslab+0xa8/0x100 [ 214.623966][T10168] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 214.623990][T10168] ? __alloc_skb+0x112/0x2d0 [ 214.624011][T10168] __alloc_skb+0x112/0x2d0 [ 214.624030][T10168] netlink_sendmsg+0x5c6/0xb30 [ 214.624055][T10168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.624074][T10168] ? aa_sock_msg_perm+0xf1/0x1d0 [ 214.624091][T10168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.624109][T10168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.624126][T10168] __sock_sendmsg+0x219/0x270 [ 214.624152][T10168] ____sys_sendmsg+0x505/0x830 [ 214.624177][T10168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.624204][T10168] ? import_iovec+0x74/0xa0 [ 214.624226][T10168] ___sys_sendmsg+0x21f/0x2a0 [ 214.624247][T10168] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.624296][T10168] ? __fget_files+0x2a/0x420 [ 214.624310][T10168] ? __fget_files+0x3a0/0x420 [ 214.624333][T10168] __x64_sys_sendmsg+0x19b/0x260 [ 214.624355][T10168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.624383][T10168] ? __pfx_ksys_write+0x10/0x10 [ 214.624403][T10168] ? rcu_is_watching+0x15/0xb0 [ 214.624424][T10168] ? do_syscall_64+0xbe/0x3b0 [ 214.624446][T10168] do_syscall_64+0xfa/0x3b0 [ 214.624462][T10168] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.624479][T10168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.624495][T10168] ? clear_bhb_loop+0x60/0xb0 [ 214.624518][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.624537][T10168] RIP: 0033:0x7f3f7e98ebe9 [ 214.624555][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.624573][T10168] RSP: 002b:00007f3f7f77d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.624595][T10168] RAX: ffffffffffffffda RBX: 00007f3f7ebc5fa0 RCX: 00007f3f7e98ebe9 [ 214.624610][T10168] RDX: 0000000028008004 RSI: 0000200000003740 RDI: 0000000000000003 [ 214.624623][T10168] RBP: 00007f3f7f77d090 R08: 0000000000000000 R09: 0000000000000000 [ 214.624636][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.624648][T10168] R13: 00007f3f7ebc6038 R14: 00007f3f7ebc5fa0 R15: 00007ffdad60ac48 [ 214.624683][T10168] [ 215.087151][T10179] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 215.182256][T10184] bond1 (unregistering): Released all slaves [ 215.669986][T10209] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 215.783799][T10217] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 215.851151][T10217] bond1 (unregistering): Released all slaves [ 217.433963][T10295] __nla_validate_parse: 15 callbacks suppressed [ 217.433983][T10295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1604'. [ 217.632514][T10308] Bluetooth: MGMT ver 1.23 [ 217.639268][T10308] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 217.661593][T10305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1607'. [ 217.663357][T10308] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1608'. [ 217.689311][T10305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1607'. [ 217.716499][T10308] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 217.803794][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 218.093957][T10325] FAULT_INJECTION: forcing a failure. [ 218.093957][T10325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.114814][T10326] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1610'. [ 218.147934][T10325] CPU: 0 UID: 0 PID: 10325 Comm: syz.4.1611 Not tainted syzkaller #0 PREEMPT(full) [ 218.147962][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.147975][T10325] Call Trace: [ 218.147983][T10325] [ 218.147991][T10325] dump_stack_lvl+0x189/0x250 [ 218.148021][T10325] ? __pfx____ratelimit+0x10/0x10 [ 218.148047][T10325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.148071][T10325] ? __pfx__printk+0x10/0x10 [ 218.148099][T10325] ? __might_fault+0xb0/0x130 [ 218.148138][T10325] should_fail_ex+0x414/0x560 [ 218.148170][T10325] _copy_from_user+0x2d/0xb0 [ 218.148209][T10325] inet6_ioctl+0x180/0x280 [ 218.148231][T10325] ? __pfx_inet6_ioctl+0x10/0x10 [ 218.148250][T10325] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 218.148286][T10325] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 218.148317][T10325] sock_do_ioctl+0xd9/0x300 [ 218.148349][T10325] ? __pfx_sock_do_ioctl+0x10/0x10 [ 218.148378][T10325] ? __lock_acquire+0xab9/0xd20 [ 218.148443][T10325] sock_ioctl+0x576/0x790 [ 218.148506][T10325] ? __pfx_sock_ioctl+0x10/0x10 [ 218.148532][T10325] ? __fget_files+0x2a/0x420 [ 218.148550][T10325] ? __fget_files+0x3a0/0x420 [ 218.148566][T10325] ? __fget_files+0x2a/0x420 [ 218.148587][T10325] ? bpf_lsm_file_ioctl+0x9/0x20 [ 218.148612][T10325] ? __pfx_sock_ioctl+0x10/0x10 [ 218.148642][T10325] __se_sys_ioctl+0xf9/0x170 [ 218.148669][T10325] do_syscall_64+0xfa/0x3b0 [ 218.148693][T10325] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.148712][T10325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.148731][T10325] ? clear_bhb_loop+0x60/0xb0 [ 218.148756][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.148774][T10325] RIP: 0033:0x7f9448f8ebe9 [ 218.148792][T10325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.148810][T10325] RSP: 002b:00007f9449dc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.148830][T10325] RAX: ffffffffffffffda RBX: 00007f94491c5fa0 RCX: 00007f9448f8ebe9 [ 218.148849][T10325] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 218.148862][T10325] RBP: 00007f9449dc5090 R08: 0000000000000000 R09: 0000000000000000 [ 218.148878][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.148889][T10325] R13: 00007f94491c6038 R14: 00007f94491c5fa0 R15: 00007ffc53118168 [ 218.148922][T10325] [ 218.401822][T10328] netlink: 'syz.1.1612': attribute type 1 has an invalid length. [ 218.497039][T10328] bond0 (unregistering): Released all slaves [ 218.563826][T10339] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1614'. [ 218.657784][T10335] netlink: 'syz.4.1614': attribute type 4 has an invalid length. [ 218.787347][T10349] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1617'. [ 219.110838][T10370] sock: sock_timestamping_bind_phc: sock not bind to device [ 219.279339][T10383] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1626'. [ 219.350452][T10388] netlink: 'syz.3.1631': attribute type 1 has an invalid length. [ 219.443143][T10392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1634'. [ 219.469974][T10388] bond4 (unregistering): Released all slaves [ 219.838422][T10406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1638'. [ 219.929718][T10411] FAULT_INJECTION: forcing a failure. [ 219.929718][T10411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.010263][T10411] CPU: 0 UID: 0 PID: 10411 Comm: syz.0.1639 Not tainted syzkaller #0 PREEMPT(full) [ 220.010290][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.010301][T10411] Call Trace: [ 220.010308][T10411] [ 220.010316][T10411] dump_stack_lvl+0x189/0x250 [ 220.010342][T10411] ? __pfx____ratelimit+0x10/0x10 [ 220.010362][T10411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.010384][T10411] ? __pfx__printk+0x10/0x10 [ 220.010413][T10411] ? __might_fault+0xb0/0x130 [ 220.010447][T10411] should_fail_ex+0x414/0x560 [ 220.010478][T10411] _copy_from_user+0x2d/0xb0 [ 220.010501][T10411] copy_from_sockptr+0x5e/0xa0 [ 220.010523][T10411] do_tcp_getsockopt+0xc3b/0x2600 [ 220.010553][T10411] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 220.010578][T10411] ? sock_recv_errqueue+0x4b0/0x510 [ 220.010605][T10411] ? __might_fault+0xb0/0x130 [ 220.010630][T10411] ? _parse_integer_limit+0x1ae/0x1f0 [ 220.010659][T10411] ? aa_label_sk_perm+0x4cd/0x630 [ 220.010691][T10411] ? __lock_acquire+0xab9/0xd20 [ 220.010720][T10411] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 220.010775][T10411] ? __lock_acquire+0xab9/0xd20 [ 220.010828][T10411] tcp_getsockopt+0x83/0x130 [ 220.010848][T10411] ? sock_recv_errqueue+0x4b0/0x510 [ 220.010875][T10411] ? sock_recv_errqueue+0x4b0/0x510 [ 220.010900][T10411] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 220.010930][T10411] do_sock_getsockopt+0x372/0x450 [ 220.010955][T10411] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 220.010974][T10411] ? write_ibpb+0x30/0x40 [ 220.010993][T10411] ? __fget_files+0x3a0/0x420 [ 220.011009][T10411] ? __fget_files+0x2a/0x420 [ 220.011033][T10411] __x64_sys_getsockopt+0x1a5/0x250 [ 220.011053][T10411] ? write_ibpb+0x30/0x40 [ 220.011074][T10411] ? write_ibpb+0x30/0x40 [ 220.011097][T10411] do_syscall_64+0xfa/0x3b0 [ 220.011114][T10411] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.011132][T10411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.011151][T10411] ? clear_bhb_loop+0x60/0xb0 [ 220.011174][T10411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.011191][T10411] RIP: 0033:0x7fe423d8ebe9 [ 220.011207][T10411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.011223][T10411] RSP: 002b:00007fe421ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 220.011242][T10411] RAX: ffffffffffffffda RBX: 00007fe423fc5fa0 RCX: 00007fe423d8ebe9 [ 220.011255][T10411] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 220.011266][T10411] RBP: 00007fe421ff6090 R08: 00002000000002c0 R09: 0000000000000000 [ 220.011279][T10411] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 220.011290][T10411] R13: 00007fe423fc6038 R14: 00007fe423fc5fa0 R15: 00007ffd4ce38028 [ 220.011320][T10411] [ 220.396190][T10417] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 220.509951][T10421] tipc: Enabled bearer , priority 0 [ 220.533402][T10421] syzkaller0: entered promiscuous mode [ 220.574152][T10421] syzkaller0: entered allmulticast mode [ 220.675709][T10433] tipc: Resetting bearer [ 220.707594][T10432] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 220.736158][T10420] tipc: Resetting bearer [ 220.835290][T10420] tipc: Disabling bearer [ 221.302206][T10453] trusted_key: syz.0.1656 sent an empty control message without MSG_MORE. [ 221.531356][T10467] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 221.556959][T10462] syz_tun: entered allmulticast mode [ 221.569846][T10460] syz_tun: left allmulticast mode [ 222.209681][T10494] FAULT_INJECTION: forcing a failure. [ 222.209681][T10494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.262274][T10494] CPU: 0 UID: 0 PID: 10494 Comm: syz.2.1671 Not tainted syzkaller #0 PREEMPT(full) [ 222.262302][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.262315][T10494] Call Trace: [ 222.262323][T10494] [ 222.262349][T10494] dump_stack_lvl+0x189/0x250 [ 222.262376][T10494] ? __pfx____ratelimit+0x10/0x10 [ 222.262397][T10494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.262419][T10494] ? __pfx__printk+0x10/0x10 [ 222.262458][T10494] should_fail_ex+0x414/0x560 [ 222.262489][T10494] _copy_to_user+0x31/0xb0 [ 222.262514][T10494] simple_read_from_buffer+0xe1/0x170 [ 222.262547][T10494] proc_fail_nth_read+0x1b3/0x220 [ 222.262572][T10494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.262598][T10494] ? rw_verify_area+0x2a6/0x4d0 [ 222.262620][T10494] ? __lock_acquire+0xab9/0xd20 [ 222.262647][T10494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.262670][T10494] vfs_read+0x1fd/0xa30 [ 222.262704][T10494] ? fdget_pos+0x247/0x320 [ 222.262724][T10494] ? __pfx___mutex_lock+0x10/0x10 [ 222.262745][T10494] ? __pfx_vfs_read+0x10/0x10 [ 222.262769][T10494] ? __fget_files+0x2a/0x420 [ 222.262789][T10494] ? __fget_files+0x3a0/0x420 [ 222.262803][T10494] ? __fget_files+0x2a/0x420 [ 222.262827][T10494] ksys_read+0x145/0x250 [ 222.262852][T10494] ? __pfx_ksys_read+0x10/0x10 [ 222.262881][T10494] ? do_syscall_64+0xbe/0x3b0 [ 222.262904][T10494] do_syscall_64+0xfa/0x3b0 [ 222.262921][T10494] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.262939][T10494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.262957][T10494] ? clear_bhb_loop+0x60/0xb0 [ 222.262980][T10494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.262997][T10494] RIP: 0033:0x7f4ef8b8d5fc [ 222.263013][T10494] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.263028][T10494] RSP: 002b:00007f4ef99ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.263046][T10494] RAX: ffffffffffffffda RBX: 00007f4ef8dc6090 RCX: 00007f4ef8b8d5fc [ 222.263059][T10494] RDX: 000000000000000f RSI: 00007f4ef99ee0a0 RDI: 0000000000000004 [ 222.263070][T10494] RBP: 00007f4ef99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 222.263081][T10494] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000001 [ 222.263093][T10494] R13: 00007f4ef8dc6128 R14: 00007f4ef8dc6090 R15: 00007ffd5e3e6fc8 [ 222.263123][T10494] [ 222.463855][ C1] [ 222.498312][ C1] ================================ [ 222.503427][ C1] WARNING: inconsistent lock state [ 222.508535][ C1] syzkaller #0 Not tainted [ 222.512945][ C1] -------------------------------- [ 222.518060][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 222.524899][ C1] syz.2.1671/10492 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 222.531302][ C1] ffff8880656d64a8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 222.539751][ C1] {SOFTIRQ-ON-W} state was registered at: [ 222.545456][ C1] lock_acquire+0x120/0x360 [ 222.550048][ C1] _raw_spin_lock+0x2e/0x40 [ 222.554648][ C1] tcf_ct_init+0x7cc/0x1950 [ 222.559251][ C1] tcf_action_init_1+0x463/0x6d0 [ 222.564278][ C1] tcf_action_init+0x2cf/0xab0 [ 222.569128][ C1] tc_ctl_action+0x430/0xbd0 [ 222.573807][ C1] rtnetlink_rcv_msg+0x77c/0xb70 [ 222.578843][ C1] netlink_rcv_skb+0x205/0x470 [ 222.583686][ C1] netlink_unicast+0x82f/0x9e0 [ 222.588544][ C1] netlink_sendmsg+0x805/0xb30 [ 222.593393][ C1] __sock_sendmsg+0x219/0x270 [ 222.598155][ C1] ____sys_sendmsg+0x505/0x830 [ 222.603014][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 222.607773][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 222.612796][ C1] do_syscall_64+0xfa/0x3b0 [ 222.617404][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.623384][ C1] irq event stamp: 598 [ 222.627452][ C1] hardirqs last enabled at (598): [] _raw_spin_unlock_irq+0x23/0x50 [ 222.637105][ C1] hardirqs last disabled at (597): [] _raw_spin_lock_irq+0x7d/0xf0 [ 222.646569][ C1] softirqs last enabled at (584): [] __irq_exit_rcu+0xca/0x1f0 [ 222.655763][ C1] softirqs last disabled at (595): [] __irq_exit_rcu+0xca/0x1f0 [ 222.664955][ C1] [ 222.664955][ C1] other info that might help us debug this: [ 222.673124][ C1] Possible unsafe locking scenario: [ 222.673124][ C1] [ 222.680568][ C1] CPU0 [ 222.683877][ C1] ---- [ 222.687149][ C1] lock(&p->tcfa_lock); [ 222.691393][ C1] [ 222.694839][ C1] lock(&p->tcfa_lock); [ 222.699250][ C1] [ 222.699250][ C1] *** DEADLOCK *** [ 222.699250][ C1] [ 222.707388][ C1] 2 locks held by syz.2.1671/10492: [ 222.712576][ C1] #0: ffff88807ea437a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x12e/0xb50 [ 222.721644][ C1] #1: ffffc90000a08be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 222.730868][ C1] [ 222.730868][ C1] stack backtrace: [ 222.736759][ C1] CPU: 1 UID: 0 PID: 10492 Comm: syz.2.1671 Not tainted syzkaller #0 PREEMPT(full) [ 222.736780][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.736790][ C1] Call Trace: [ 222.736798][ C1] [ 222.736806][ C1] dump_stack_lvl+0x189/0x250 [ 222.736829][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.736849][ C1] ? __pfx__printk+0x10/0x10 [ 222.736872][ C1] ? print_lock_name+0xde/0x100 [ 222.736895][ C1] print_usage_bug+0x297/0x2e0 [ 222.736912][ C1] valid_state+0xc3/0xf0 [ 222.736927][ C1] mark_lock_irq+0x36/0x390 [ 222.736942][ C1] ? __kernel_text_address+0xd/0x40 [ 222.736964][ C1] ? unwind_get_return_address+0x4d/0x90 [ 222.736986][ C1] mark_lock+0x11b/0x190 [ 222.737001][ C1] __lock_acquire+0x680/0xd20 [ 222.737027][ C1] ? est_timer+0xd4/0x9f0 [ 222.737050][ C1] lock_acquire+0x120/0x360 [ 222.737077][ C1] ? est_timer+0xd4/0x9f0 [ 222.737103][ C1] ? lockdep_unlock+0x89/0x120 [ 222.737126][ C1] _raw_spin_lock+0x2e/0x40 [ 222.737150][ C1] ? est_timer+0xd4/0x9f0 [ 222.737172][ C1] est_timer+0xd4/0x9f0 [ 222.737197][ C1] ? call_timer_fn+0xbe/0x5f0 [ 222.737221][ C1] ? call_timer_fn+0xbe/0x5f0 [ 222.737244][ C1] ? __pfx_est_timer+0x10/0x10 [ 222.737270][ C1] call_timer_fn+0x17e/0x5f0 [ 222.737293][ C1] ? __pfx_est_timer+0x10/0x10 [ 222.737324][ C1] ? call_timer_fn+0xbe/0x5f0 [ 222.737348][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 222.737375][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.737399][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.737414][ C1] ? __pfx_est_timer+0x10/0x10 [ 222.737438][ C1] __run_timer_base+0x61a/0x860 [ 222.737458][ C1] ? ktime_get+0x3e/0x1f0 [ 222.737480][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 222.737511][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 222.737536][ C1] run_timer_softirq+0xb7/0x180 [ 222.737557][ C1] handle_softirqs+0x283/0x870 [ 222.737574][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 222.737591][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 222.737608][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 222.737629][ C1] __irq_exit_rcu+0xca/0x1f0 [ 222.737643][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 222.737673][ C1] irq_exit_rcu+0x9/0x30 [ 222.737685][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 222.737709][ C1] [ 222.737713][ C1] [ 222.737719][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.737735][ C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 222.737753][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 06 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 b1 5e 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 95 5e [ 222.737766][ C1] RSP: 0018:ffffc90003737340 EFLAGS: 00000293 [ 222.737779][ C1] RAX: ffffffff81b44cfb RBX: 1ffff110170c8341 RCX: ffff88802e939e00 [ 222.737790][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 222.737799][ C1] RBP: ffffc900037374c0 R08: ffffffff8fa38b37 R09: 1ffffffff1f47166 [ 222.737809][ C1] R10: dffffc0000000000 R11: fffffbfff1f47167 R12: ffff8880b8641a08 [ 222.737838][ C1] R13: dffffc0000000000 R14: ffff8880b873b1c0 R15: 0000000000000000 [ 222.737852][ C1] ? smp_call_function_many_cond+0xd4b/0x12d0 [ 222.737874][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 222.737899][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 222.737915][ C1] ? do_raw_spin_lock+0x121/0x290 [ 222.737950][ C1] ? rcu_is_watching+0x15/0xb0 [ 222.737965][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 222.737985][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 222.738000][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 222.738024][ C1] ? free_pgd_range+0x144b/0x14c0 [ 222.738039][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 222.738069][ C1] tlb_flush_mmu+0x1a7/0x680 [ 222.738085][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 222.738097][ C1] ? free_pgd_range+0x144b/0x14c0 [ 222.738111][ C1] free_ldt_pgtables+0x17b/0x320 [ 222.738131][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 222.738156][ C1] ? down_read+0x1ad/0x2e0 [ 222.738172][ C1] exit_mmap+0x17c/0xb50 [ 222.738192][ C1] ? uprobe_clear_state+0x20f/0x290 [ 222.738210][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 222.738228][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 222.738248][ C1] ? __pfx_exit_aio+0x10/0x10 [ 222.738274][ C1] ? uprobe_clear_state+0x274/0x290 [ 222.738292][ C1] __mmput+0x118/0x420 [ 222.738306][ C1] exit_mm+0x1da/0x2c0 [ 222.738327][ C1] ? __pfx_exit_mm+0x10/0x10 [ 222.738346][ C1] ? rcu_is_watching+0x15/0xb0 [ 222.738362][ C1] do_exit+0x648/0x2300 [ 222.738382][ C1] ? do_raw_spin_lock+0x121/0x290 [ 222.738401][ C1] ? __pfx_do_exit+0x10/0x10 [ 222.738424][ C1] do_group_exit+0x21c/0x2d0 [ 222.738443][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.738458][ C1] get_signal+0x1286/0x1340 [ 222.738479][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 222.738503][ C1] ? do_sock_getsockopt+0x372/0x450 [ 222.738521][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.738549][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 222.738571][ C1] exit_to_user_mode_loop+0x75/0x110 [ 222.738592][ C1] do_syscall_64+0x2bd/0x3b0 [ 222.738608][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.738621][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.738635][ C1] ? clear_bhb_loop+0x60/0xb0 [ 222.738652][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.738666][ C1] RIP: 0033:0x7f4ef8b8ebe9 [ 222.738678][ C1] Code: Unable to access opcode bytes at 0x7f4ef8b8ebbf. [ 222.738685][ C1] RSP: 002b:00007f4ef9a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 222.738699][ C1] RAX: fffffffffffffe00 RBX: 00007f4ef8dc5fa0 RCX: 00007f4ef8b8ebe9 [ 222.738710][ C1] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 222.738718][ C1] RBP: 00007f4ef8c11e19 R08: 0000200000000100 R09: 0000000000000000 [ 222.738728][ C1] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 222.738737][ C1] R13: 00007f4ef8dc6038 R14: 00007f4ef8dc5fa0 R15: 00007ffd5e3e6fc8 [ 222.738754][ C1] [ 223.355899][T10501] __nla_validate_parse: 15 callbacks suppressed [ 223.355919][T10501] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1673'. [ 223.416963][T10502] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?