last executing test programs: 2.060769632s ago: executing program 4 (id=1902): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="461d919701018073267879488a3e8504", 0x10, 0x0, &(0x7f0000000180)={0x11, 0x17, r2, 0x1, 0xe0}, 0x14) close(0x4) 1.870134169s ago: executing program 4 (id=1905): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 1.869984218s ago: executing program 1 (id=1906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000003e7000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 1.868578567s ago: executing program 3 (id=1907): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.708696056s ago: executing program 1 (id=1909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a010e00000000000000000200ffff0900020073797a32000000000900010073797a30000000000c000640"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.697440925s ago: executing program 4 (id=1910): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000007740)={0xe, {{0xa, 0x4e22, 0x9, @mcast1, 0x40}}}, 0x90) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xe6445995d9064ed7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r4, 0x3ec13276897ff904, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc6, 0x32}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "e132c4793e08857597355e92e2"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20040010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdff63e9eeca285222beae2cfd22dbb027525170000000a00060008021100000100000a00060008021100"], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.683527414s ago: executing program 2 (id=1911): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x20, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002e00)=""/4095, 0xfff}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000004100)=""/4116, 0x1014}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f0000000600)=""/135, 0x87}], 0x5}, 0x266e}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) 1.611268474s ago: executing program 3 (id=1913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @broadcast}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="000000001000000004001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x4a, 0x0, 0x0) 1.490189413s ago: executing program 1 (id=1914): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.46322299s ago: executing program 4 (id=1916): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x9, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x60, 0x0, 0xa, 0x2, 0x2d}, {0x3, 0x5c484ce6, 0x35f5, 0x7, 0x7, 0x8}], ['\x00']}) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x9c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e23, 0x8d, @dev={0xfe, 0x80, '\x00', 0x12}, 0xc}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x19}, 0x8}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x9, @empty, 0xb464}, @in6={0xa, 0x4e24, 0x1f, @local}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={r2, 0x1, 0x10, 0xc00000000000, 0x1}, &(0x7f0000000300)=0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = accept(r4, &(0x7f00000007c0)=@sco, &(0x7f0000000840)=0x80) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000880)={r3, 0x6}, 0x8) writev(r4, &(0x7f0000001c40)=[{&(0x7f00000008c0)="32e749949fe364c8d52d05602cc8201caafe8c72f1c1b89d382ac9667181b5d0f8bd4a60fca2a0e751fc0ece9c6e788ecc830a162bc41b15e2729f7887e0532a5e86d5fc3633ed90a1f76bac9f9d052703350e07047db747979e96f7193f148ab8d0908d8a66c55abfd3ce3d6081833598bf6f12ac1b130d92e2318bb261a6d9ddd4af538ab2e9cceb703c9980b8973a5c6a6d3135e1f9e7ceb90bbd9d6210f228ba2efd65273169cf2a0ad69d48c2e0408925b65502b60f4586c16b254d3e863a07f5e9dbf6ae973767480a9b86a0c38efbc16ad18b450221846eec3f356da544d6acdd28e7981cf10e", 0xea}, {&(0x7f00000009c0)="8a3b98f392d369852b4732d594ac6534c359c935e4a577a65464da205cf65394ca982a8a4fc97913b97e56c0fa7613483cfa6aa41429aecb8e45e7f791bb511ac0db115bf24f90478a0d6ea982cb0adf6ac738abaaa43f08846e8ff54c75724aca6a738a44f40e7b4efd659724bb43441f338d2f3e2668e17e3779", 0x7b}, {&(0x7f0000000a40)="48d44bbc0f2f03a581b25a61516015ab3f9da86a4042f3d031c007889a7b78074f03a9131c3613425bfa69c8eb5da111d3d7e8392b750495a64fccf070a9623e3e0555f54d31134cb992894e4c78699aa61664cf5e966af889ebdee5d8e850fff870a8b6a56f746a41a21e79cb1c72f9a9e93a83eef0163bd1398d47fa6c79de7c61766665ba03de2f32164be6c8cbed715c2c04154ca31ba637ecc2aec3324b6028cb1179ca093f0b81c8035aa129209c606c6a5f86328d1b6a9c9ebabad22351fb5a77d8ced4aa777511ff4b799434d4c8bd06912b", 0xd6}, {&(0x7f0000000b40)="3a48fa868600377096a2565ca15dce077362c1d5f2da13776189b59c5bd3d893f1df16d3939c84e80c653cdd8bbbb11829991b6fa4302d48ca8a1cb5cc7a63a2245342b34e6fe347ae153736c34c09fcf6dc1c6b0c1af18f2f57d472a30c0f798ee8f96ae3c84eb070dd103d61840c9a240613880e405a587d1adfad1ec1a1d62058e30d1f46a6fb27999a671e057da4a4ffec78bb1adbb15a1781937a1ec8f4f38bea643b590b7a618174e0595e4871b3327416b478377cdf72688f20e800435764801b11d2a18bb91f0c449e725970a9edfb0835859d70ae66514b80c0f31b012f603ac1ea34bb230130f95a479d5ea6b09fbf3e29bf638769", 0xfa}, {&(0x7f0000000c40)="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", 0x1000}], 0x5) splice(r4, &(0x7f0000001cc0)=0xa6, r4, &(0x7f0000001d00)=0x6, 0x100000000, 0xb) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001d40)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x3, 0x7, 0x3fb, 0x7, 0x718, 0x1}, {0x5, 0x9, 0x9, 0x1, 0x5, 0xfffffffffffffff8}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$sock_int(r7, 0x1, 0x1e, &(0x7f0000001f40)=0x3, 0x4) recvfrom$rose(r7, &(0x7f0000001f80)=""/42, 0x2a, 0x40010060, &(0x7f0000001fc0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f00000021c0)={0x3, &(0x7f0000002000)=[{@none}, {@fixed}, {}]}) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_ifreq(r9, 0x8935, &(0x7f0000002240)={'pim6reg1\x00', @ifru_settings={0x9, 0xde, @fr=&(0x7f0000002200)={0xa4c, 0x7, 0x7, 0x7ff, 0x80d, 0x2, 0x39f}}}) getsockname$inet(r7, &(0x7f0000002280)={0x2, 0x0, @private}, &(0x7f00000022c0)=0x10) recvfrom(r0, &(0x7f0000002300)=""/4096, 0x1000, 0x20c1, &(0x7f0000003300)=@un=@file={0x0, './file0\x00'}, 0x80) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003380)='ns/time_for_children\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x80049367, &(0x7f00000033c0)) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003440), r7) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x34, r11, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x80) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000003540)={r2, 0x5}, 0x8) 1.386271715s ago: executing program 2 (id=1917): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xfffffff8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}]}, 0x60}, 0x1, 0x3000000, 0x0, 0x41}, 0x20000880) 1.386049322s ago: executing program 3 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x4c, r1, 0x101, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="fe"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "436d9bb9c5e13fcd62bca7f88d"}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40080) 1.325312956s ago: executing program 1 (id=1919): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x4}]}}}]}, 0x3c}}, 0x4000000) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56747, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x11}, {0xffe0, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2a90137b}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x10000, 0xb029, {{0x2f, 0x4, 0x2, 0x9, 0xbc, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, {[@noop, @timestamp_addr={0x44, 0x2c, 0xa, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast1, 0x8}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x9}, {@multicast2, 0x1}]}, @ssrr={0x89, 0x1b, 0xa5, [@dev={0xac, 0x14, 0x14, 0x41}, @remote, @multicast1, @local, @broadcast, @broadcast]}, @rr={0x7, 0xf, 0x4d, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @empty]}, @timestamp_addr={0x44, 0x34, 0x68, 0x1, 0xc, [{@multicast2, 0x800}, {@empty, 0xa7f}, {@loopback, 0x4}, {@multicast1, 0xc41}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3a49}]}, @end, @timestamp_addr={0x44, 0x1c, 0x65, 0x1, 0x7, [{@local}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x2}, {@multicast1, 0x6}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x200, 0x9, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x8}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x150, r4, 0x600, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20046840}, 0x50) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r14, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe0d, 0x4a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4e}, @NL80211_ATTR_PMKID={0x14, 0x55, "bb549af095c70e539d349b4a35892dd7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cae70b47812dc1890f3993e9951794e6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c412af52aa9d73ee2bb51a04bad97b1f"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x800}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0xc814}, 0x50) 1.277512532s ago: executing program 0 (id=1920): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac141423000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000001040000000000100000000000000000000000400000000000000000000000001a000000000000000100800000000000feffffffffed2fb41baff1109b00000003000000000000000000000000000000ff7f00000000060100000000b16b6e0001000300000000000c0015005b07350007"], 0xc4}}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) (fail_nth: 57) 1.202303481s ago: executing program 3 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000008006e"], 0x3c}}, 0x40) 1.202071055s ago: executing program 2 (id=1922): r0 = getpid() (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000546000000000008009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="110000000400000000000000", @ANYRES32=r4, @ANYRES64=0x0], 0x20) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x78}}, 0x18}}, 0x0) (async) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') 1.126868855s ago: executing program 4 (id=1923): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@generic={0x0, 0x9a4d, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$sock_proto_private(r0, 0x89ed, &(0x7f0000000140)="86347fe9e33b4c2be6126f3a2c6e2724137c43a4cb5a40893847fd7f7f0620776ff05fec02c7f9a5cccbe4978844cd1dce6b653e6c7c") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x200000, {{0x5, 0x4, 0x0, 0x1d, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}}}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r2, @ANYBLOB="01000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000008006e"], 0x3c}}, 0x40) 723.695569ms ago: executing program 3 (id=1924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400181, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xa, 0x41, 0x6, 0x1, 0x7ff, 0x8, 0x1}}, {0x6, 0x2, [0xe41]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1ffe3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x1000}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x400000000000001, 0xfffffffd, 0x5, 0x1bb, 0x400}}]}}}]}, 0x78}}, 0x0) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000140)={r10, 0x1, 0x6, @multicast}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 654.084649ms ago: executing program 0 (id=1925): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="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"], 0x184}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0xffffffff, 0x4, 0x1, 0x1}}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000001080)={0xfee, 0x6, 0x3}) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) close(r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x800, @any, 0x0, 0x1}, 0xe) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r7 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r7, 0x2}, 0x20) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x800, 0x70bd27, 0x25dfdbfc, 0x2b94, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48084}, 0x932a4a5e260abe90) 593.612544ms ago: executing program 4 (id=1926): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@fragment={0x6, 0x0, 0x3, 0x0, 0x0, 0x3, 0x67}], {0x0, 0x0, 0x8}}}}}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES64=r0], 0x84}}, 0x0) 550.807926ms ago: executing program 2 (id=1927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb9", 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 512.207706ms ago: executing program 0 (id=1928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="3b000e001c000000ffffffffffff08021100000008021100000000000200000000007093640001002a01017206030303030303760664003c0001000004001b8008000c006400000008000d"], 0x6c}}, 0x20000014) 278.187205ms ago: executing program 0 (id=1929): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 238.194306ms ago: executing program 1 (id=1930): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 227.384032ms ago: executing program 2 (id=1931): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) clock_gettime(0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x1f00000000000000, 0x40}, 0xc4) 166.282555ms ago: executing program 0 (id=1932): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="09000000010001", 0x7) (fail_nth: 5) 107.500961ms ago: executing program 0 (id=1933): socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000740)='%ps \x00'}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x18) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000d40), &(0x7f0000000e80), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000b00)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r12, 0x11, 0x0, 0x0, @void, @value=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r2}, 0x20) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r15}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x11, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xffffffff}, @call={0x85, 0x0, 0x0, 0x8e}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x69}, @map_fd={0x18, 0x4}, @exit], &(0x7f0000000500)='syzkaller\x00', 0xffff, 0xce, &(0x7f0000000580)=""/206, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000880)=[r7, r10, r13, r14, 0x1], &(0x7f00000008c0)=[{0x3, 0x3, 0xa, 0x1}, {0x3, 0x3, 0x3, 0x9}, {0x5, 0x1, 0x10, 0x8}, {0x2, 0x3, 0xe, 0x2}, {0x0, 0x4, 0x2, 0x9}, {0x4, 0x3, 0x2, 0x6}, {0x1, 0x4, 0xc, 0xb}, {0x1, 0x3, 0x4, 0x6}], 0x10, 0xff}, 0x94) 57.429459ms ago: executing program 2 (id=1934): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0xfffffffffffffffa}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000ffffe000000000000000fe80000000000000000000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00\x00'], 0xb8}}, 0x0) 1.211541ms ago: executing program 3 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfffc, 0x1}, 0xe) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x140c, 0x652f64244006f219, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040800) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f00000028c0)=""/236, 0xec}, {&(0x7f0000002b80)=""/4100, 0x1004}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0x9}], 0x4, 0x4022, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 1 (id=1936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x1, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0x425, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x0) kernel console output (not intermixed with test programs): 193.779946][ T9640] name failslab, interval 1, probability 0, space 0, times 0 [ 193.793018][ T9640] CPU: 1 UID: 0 PID: 9640 Comm: syz.4.1267 Not tainted syzkaller #0 PREEMPT(full) [ 193.793054][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.793066][ T9640] Call Trace: [ 193.793074][ T9640] [ 193.793082][ T9640] dump_stack_lvl+0x189/0x250 [ 193.793112][ T9640] ? __pfx____ratelimit+0x10/0x10 [ 193.793141][ T9640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.793163][ T9640] ? __pfx__printk+0x10/0x10 [ 193.793206][ T9640] should_fail_ex+0x414/0x560 [ 193.793237][ T9640] should_failslab+0xa8/0x100 [ 193.793265][ T9640] __kmalloc_cache_noprof+0x70/0x3d0 [ 193.793300][ T9640] ? sctp_add_bind_addr+0x8c/0x370 [ 193.793333][ T9640] sctp_add_bind_addr+0x8c/0x370 [ 193.793365][ T9640] sctp_copy_local_addr_list+0x30b/0x4e0 [ 193.793394][ T9640] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 193.793417][ T9640] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 193.793446][ T9640] ? sctp_v6_is_any+0x64/0x80 [ 193.793465][ T9640] ? sctp_copy_one_addr+0x93/0x360 [ 193.793494][ T9640] sctp_bind_addr_copy+0xb3/0x3c0 [ 193.793520][ T9640] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 193.793548][ T9640] sctp_connect_new_asoc+0x2e0/0x690 [ 193.793573][ T9640] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 193.793590][ T9640] ? __local_bh_enable_ip+0x12d/0x1c0 [ 193.793616][ T9640] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 193.793637][ T9640] ? security_sctp_bind_connect+0x7e/0x2e0 [ 193.793663][ T9640] sctp_sendmsg+0x155c/0x2810 [ 193.793699][ T9640] ? __pfx_sctp_sendmsg+0x10/0x10 [ 193.793723][ T9640] ? aa_sk_perm+0x81e/0x950 [ 193.793755][ T9640] ? __pfx_aa_sk_perm+0x10/0x10 [ 193.793784][ T9640] ? sock_rps_record_flow+0x19/0x410 [ 193.793810][ T9640] ? inet_sendmsg+0x2f4/0x370 [ 193.793838][ T9640] __sock_sendmsg+0x19c/0x270 [ 193.793868][ T9640] __sys_sendto+0x3bd/0x520 [ 193.793888][ T9640] ? __pfx___sys_sendto+0x10/0x10 [ 193.793903][ T9640] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 193.793938][ T9640] ? __fget_files+0x3a0/0x420 [ 193.793969][ T9640] ? ksys_write+0x22a/0x250 [ 193.793998][ T9640] ? __pfx_ksys_write+0x10/0x10 [ 193.794020][ T9640] ? rcu_is_watching+0x15/0xb0 [ 193.794043][ T9640] __x64_sys_sendto+0xde/0x100 [ 193.794067][ T9640] do_syscall_64+0xfa/0x3b0 [ 193.794084][ T9640] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.794111][ T9640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.794127][ T9640] ? clear_bhb_loop+0x60/0xb0 [ 193.794149][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.794165][ T9640] RIP: 0033:0x7f23ac78eba9 [ 193.794183][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.794198][ T9640] RSP: 002b:00007f23aa9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 193.794219][ T9640] RAX: ffffffffffffffda RBX: 00007f23ac9d5fa0 RCX: 00007f23ac78eba9 [ 193.794232][ T9640] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 193.794244][ T9640] RBP: 00007f23aa9f6090 R08: 0000200000000080 R09: 000000000000001c [ 193.794256][ T9640] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 193.794266][ T9640] R13: 00007f23ac9d6038 R14: 00007f23ac9d5fa0 R15: 00007ffda8f61258 [ 193.794309][ T9640] [ 194.336463][ T9653] FAULT_INJECTION: forcing a failure. [ 194.336463][ T9653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.351902][ T9653] CPU: 1 UID: 0 PID: 9653 Comm: syz.1.1271 Not tainted syzkaller #0 PREEMPT(full) [ 194.351928][ T9653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.351939][ T9653] Call Trace: [ 194.351946][ T9653] [ 194.351954][ T9653] dump_stack_lvl+0x189/0x250 [ 194.351984][ T9653] ? __pfx____ratelimit+0x10/0x10 [ 194.352013][ T9653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.352033][ T9653] ? __pfx__printk+0x10/0x10 [ 194.352057][ T9653] ? __might_fault+0xb0/0x130 [ 194.352097][ T9653] should_fail_ex+0x414/0x560 [ 194.352129][ T9653] _copy_from_user+0x2d/0xb0 [ 194.352152][ T9653] csum_and_copy_from_iter_full+0x4a1/0x1ed0 [ 194.352199][ T9653] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 194.352235][ T9653] ? trace_kmalloc+0x1f/0xd0 [ 194.352263][ T9653] ip_generic_getfrag+0x12f/0x2b0 [ 194.352301][ T9653] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 194.352328][ T9653] ? skb_put+0x11b/0x210 [ 194.352351][ T9653] __ip6_append_data+0x3971/0x3f30 [ 194.352376][ T9653] ? __lock_acquire+0xab9/0xd20 [ 194.352429][ T9653] ? __pfx_raw6_getfrag+0x10/0x10 [ 194.352468][ T9653] ? __pfx___ip6_append_data+0x10/0x10 [ 194.352490][ T9653] ? __pfx_ip6_mtu+0x10/0x10 [ 194.352524][ T9653] ip6_append_data+0x1c4/0x380 [ 194.352554][ T9653] ? __pfx_raw6_getfrag+0x10/0x10 [ 194.352575][ T9653] rawv6_sendmsg+0x127a/0x1820 [ 194.352621][ T9653] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 194.352672][ T9653] ? __lock_acquire+0xab9/0xd20 [ 194.352695][ T9653] ? __pfx_aa_sk_perm+0x10/0x10 [ 194.352725][ T9653] ? sock_rps_record_flow+0x19/0x410 [ 194.352751][ T9653] ? inet_sendmsg+0x2f4/0x370 [ 194.352771][ T9653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.352796][ T9653] __sock_sendmsg+0x19c/0x270 [ 194.352825][ T9653] ____sys_sendmsg+0x52d/0x830 [ 194.352853][ T9653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.352888][ T9653] ? import_iovec+0x74/0xa0 [ 194.352915][ T9653] ___sys_sendmsg+0x21f/0x2a0 [ 194.352940][ T9653] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.353007][ T9653] ? __fget_files+0x2a/0x420 [ 194.353022][ T9653] ? __fget_files+0x3a0/0x420 [ 194.353049][ T9653] __sys_sendmmsg+0x227/0x430 [ 194.353076][ T9653] ? __pfx___sys_sendmmsg+0x10/0x10 [ 194.353093][ T9653] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 194.353144][ T9653] ? ksys_write+0x22a/0x250 [ 194.353172][ T9653] ? __pfx_ksys_write+0x10/0x10 [ 194.353194][ T9653] ? rcu_is_watching+0x15/0xb0 [ 194.353222][ T9653] __x64_sys_sendmmsg+0xa0/0xc0 [ 194.353246][ T9653] do_syscall_64+0xfa/0x3b0 [ 194.353263][ T9653] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.353303][ T9653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.353322][ T9653] ? clear_bhb_loop+0x60/0xb0 [ 194.353346][ T9653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.353363][ T9653] RIP: 0033:0x7fa94e58eba9 [ 194.353382][ T9653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.353398][ T9653] RSP: 002b:00007fa94f4e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 194.353419][ T9653] RAX: ffffffffffffffda RBX: 00007fa94e7d5fa0 RCX: 00007fa94e58eba9 [ 194.353433][ T9653] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003 [ 194.353446][ T9653] RBP: 00007fa94f4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.353456][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.353467][ T9653] R13: 00007fa94e7d6038 R14: 00007fa94e7d5fa0 R15: 00007ffff228f968 [ 194.353501][ T9653] [ 194.362949][ T9649] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1269'. [ 194.552585][ T9654] netlink: 'syz.3.1269': attribute type 1 has an invalid length. [ 194.731998][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.045132][ T9667] netlink: 'syz.4.1270': attribute type 1 has an invalid length. [ 195.053489][ T9667] __nla_validate_parse: 1 callbacks suppressed [ 195.053507][ T9667] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1270'. [ 195.085944][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 195.477046][ T9691] FAULT_INJECTION: forcing a failure. [ 195.477046][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 195.510375][ T9691] CPU: 1 UID: 0 PID: 9691 Comm: syz.0.1280 Not tainted syzkaller #0 PREEMPT(full) [ 195.510402][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.510413][ T9691] Call Trace: [ 195.510421][ T9691] [ 195.510429][ T9691] dump_stack_lvl+0x189/0x250 [ 195.510459][ T9691] ? __pfx____ratelimit+0x10/0x10 [ 195.510486][ T9691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.510509][ T9691] ? __pfx__printk+0x10/0x10 [ 195.510530][ T9691] ? ip_vs_conn_stats+0x1a2/0x230 [ 195.510560][ T9691] ? ip_vs_schedule+0x143e/0x1c80 [ 195.510594][ T9691] should_fail_ex+0x414/0x560 [ 195.510625][ T9691] should_failslab+0xa8/0x100 [ 195.510654][ T9691] __kmalloc_cache_noprof+0x70/0x3d0 [ 195.510679][ T9691] ? __ip_vs_get_out_rt+0x335/0x13d0 [ 195.510710][ T9691] __ip_vs_get_out_rt+0x335/0x13d0 [ 195.510747][ T9691] ? __pfx___ip_vs_get_out_rt+0x10/0x10 [ 195.510769][ T9691] ? ip_vs_conn_in_get_proto+0x363/0x4d0 [ 195.510793][ T9691] ? ip_vs_service_find+0xd44/0xf00 [ 195.510814][ T9691] ? __pfx_ip_vs_conn_in_get_proto+0x10/0x10 [ 195.510839][ T9691] ip_vs_nat_xmit+0x208/0xa20 [ 195.510876][ T9691] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 195.510907][ T9691] ? ip_vs_in_stats+0xc0/0x450 [ 195.510933][ T9691] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 195.510955][ T9691] ip_vs_in_hook+0xd31/0x1be0 [ 195.510994][ T9691] ? ip_vs_out_hook+0x9b5/0xef0 [ 195.511019][ T9691] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 195.511071][ T9691] ? nf_hook+0x9d/0x380 [ 195.511093][ T9691] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 195.511121][ T9691] nf_hook_slow+0xc2/0x220 [ 195.511146][ T9691] nf_hook+0x217/0x380 [ 195.511172][ T9691] ? nf_hook+0x9d/0x380 [ 195.511191][ T9691] ? __pfx_nf_hook+0x10/0x10 [ 195.511215][ T9691] ? __pfx_dst_output+0x10/0x10 [ 195.511244][ T9691] ? ip_fast_csum+0x1ee/0x2b0 [ 195.511267][ T9691] __ip_local_out+0x4db/0x600 [ 195.511295][ T9691] ? __pfx_dst_output+0x10/0x10 [ 195.511320][ T9691] ip_send_skb+0x4a/0x100 [ 195.511351][ T9691] udp_send_skb+0xaf1/0x14c0 [ 195.511397][ T9691] udp_sendmsg+0x195a/0x2170 [ 195.511439][ T9691] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 195.511465][ T9691] ? __pfx_udp_sendmsg+0x10/0x10 [ 195.511509][ T9691] ? get_random_u32+0x155/0x940 [ 195.511544][ T9691] ? register_lock_class+0x51/0x320 [ 195.511569][ T9691] ? get_random_u32+0x155/0x940 [ 195.511595][ T9691] ? __lock_acquire+0xab9/0xd20 [ 195.511635][ T9691] udpv6_sendmsg+0xbf0/0x24b0 [ 195.511680][ T9691] ? udp_lib_get_port+0x164b/0x1b10 [ 195.511704][ T9691] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 195.511735][ T9691] ? __lock_acquire+0xab9/0xd20 [ 195.511782][ T9691] ? __local_bh_enable_ip+0x12d/0x1c0 [ 195.511801][ T9691] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 195.511829][ T9691] ? inet_send_prepare+0x1b9/0x270 [ 195.511856][ T9691] ? inet_send_prepare+0x1b9/0x270 [ 195.511885][ T9691] ? inet6_sendmsg+0xe4/0x120 [ 195.511906][ T9691] __sock_sendmsg+0xe5/0x270 [ 195.511935][ T9691] ____sys_sendmsg+0x505/0x830 [ 195.511962][ T9691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.511994][ T9691] ? import_iovec+0x74/0xa0 [ 195.512020][ T9691] ___sys_sendmsg+0x21f/0x2a0 [ 195.512044][ T9691] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.512105][ T9691] ? __fget_files+0x2a/0x420 [ 195.512122][ T9691] ? __fget_files+0x3a0/0x420 [ 195.512151][ T9691] __x64_sys_sendmsg+0x19b/0x260 [ 195.512174][ T9691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.512208][ T9691] ? __pfx_ksys_write+0x10/0x10 [ 195.512230][ T9691] ? rcu_is_watching+0x15/0xb0 [ 195.512255][ T9691] ? do_syscall_64+0xbe/0x3b0 [ 195.512276][ T9691] do_syscall_64+0xfa/0x3b0 [ 195.512300][ T9691] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.512326][ T9691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.512345][ T9691] ? clear_bhb_loop+0x60/0xb0 [ 195.512367][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.512385][ T9691] RIP: 0033:0x7fb529d8eba9 [ 195.512403][ T9691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.512418][ T9691] RSP: 002b:00007fb52ac6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.512439][ T9691] RAX: ffffffffffffffda RBX: 00007fb529fd5fa0 RCX: 00007fb529d8eba9 [ 195.512453][ T9691] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 195.512464][ T9691] RBP: 00007fb52ac6e090 R08: 0000000000000000 R09: 0000000000000000 [ 195.512475][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.512486][ T9691] R13: 00007fb529fd6038 R14: 00007fb529fd5fa0 R15: 00007ffd5885cb68 [ 195.512519][ T9691] [ 196.741998][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 196.754849][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1285'. [ 196.908703][ T9730] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1289'. [ 197.053531][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1291'. [ 197.112677][ T9741] FAULT_INJECTION: forcing a failure. [ 197.112677][ T9741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.176883][ T9741] CPU: 0 UID: 0 PID: 9741 Comm: syz.1.1293 Not tainted syzkaller #0 PREEMPT(full) [ 197.176911][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.176924][ T9741] Call Trace: [ 197.176931][ T9741] [ 197.176940][ T9741] dump_stack_lvl+0x189/0x250 [ 197.176969][ T9741] ? __pfx____ratelimit+0x10/0x10 [ 197.176998][ T9741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.177029][ T9741] ? __pfx__printk+0x10/0x10 [ 197.177056][ T9741] ? __might_fault+0xb0/0x130 [ 197.177095][ T9741] should_fail_ex+0x414/0x560 [ 197.177127][ T9741] _copy_from_user+0x2d/0xb0 [ 197.177150][ T9741] __sys_sendto+0x25c/0x520 [ 197.177174][ T9741] ? __pfx___sys_sendto+0x10/0x10 [ 197.177190][ T9741] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 197.177224][ T9741] ? __fget_files+0x3a0/0x420 [ 197.177256][ T9741] ? ksys_write+0x22a/0x250 [ 197.177283][ T9741] ? __pfx_ksys_write+0x10/0x10 [ 197.177304][ T9741] ? rcu_is_watching+0x15/0xb0 [ 197.177331][ T9741] __x64_sys_sendto+0xde/0x100 [ 197.177353][ T9741] do_syscall_64+0xfa/0x3b0 [ 197.177371][ T9741] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.177397][ T9741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.177417][ T9741] ? clear_bhb_loop+0x60/0xb0 [ 197.177440][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.177458][ T9741] RIP: 0033:0x7fa94e58eba9 [ 197.177475][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.177492][ T9741] RSP: 002b:00007fa94f4e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 197.177515][ T9741] RAX: ffffffffffffffda RBX: 00007fa94e7d5fa0 RCX: 00007fa94e58eba9 [ 197.177529][ T9741] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 197.177541][ T9741] RBP: 00007fa94f4e6090 R08: 0000200000000100 R09: 000000000000001c [ 197.177554][ T9741] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 197.177565][ T9741] R13: 00007fa94e7d6038 R14: 00007fa94e7d5fa0 R15: 00007ffff228f968 [ 197.177598][ T9741] [ 197.603086][ T9753] FAULT_INJECTION: forcing a failure. [ 197.603086][ T9753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.630784][ T9755] FAULT_INJECTION: forcing a failure. [ 197.630784][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 197.651547][ T9755] CPU: 0 UID: 0 PID: 9755 Comm: syz.1.1296 Not tainted syzkaller #0 PREEMPT(full) [ 197.651576][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.651587][ T9755] Call Trace: [ 197.651595][ T9755] [ 197.651604][ T9755] dump_stack_lvl+0x189/0x250 [ 197.651632][ T9755] ? __pfx____ratelimit+0x10/0x10 [ 197.651661][ T9755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.651684][ T9755] ? __pfx__printk+0x10/0x10 [ 197.651728][ T9755] should_fail_ex+0x414/0x560 [ 197.651761][ T9755] should_failslab+0xa8/0x100 [ 197.651790][ T9755] __kmalloc_cache_noprof+0x70/0x3d0 [ 197.651816][ T9755] ? sctp_add_bind_addr+0x8c/0x370 [ 197.651849][ T9755] sctp_add_bind_addr+0x8c/0x370 [ 197.651881][ T9755] sctp_copy_local_addr_list+0x30b/0x4e0 [ 197.651912][ T9755] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 197.651939][ T9755] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 197.651969][ T9755] ? sctp_v6_is_any+0x64/0x80 [ 197.651988][ T9755] ? sctp_copy_one_addr+0x93/0x360 [ 197.652019][ T9755] sctp_bind_addr_copy+0xb3/0x3c0 [ 197.652046][ T9755] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 197.652073][ T9755] sctp_connect_new_asoc+0x2e0/0x690 [ 197.652097][ T9755] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 197.652115][ T9755] ? __local_bh_enable_ip+0x12d/0x1c0 [ 197.652144][ T9755] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 197.652166][ T9755] ? security_sctp_bind_connect+0x7e/0x2e0 [ 197.652196][ T9755] sctp_sendmsg+0x155c/0x2810 [ 197.652231][ T9755] ? __pfx_sctp_sendmsg+0x10/0x10 [ 197.652256][ T9755] ? aa_sk_perm+0x81e/0x950 [ 197.652290][ T9755] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.652323][ T9755] ? sock_rps_record_flow+0x19/0x410 [ 197.652360][ T9755] ? inet_sendmsg+0x2f4/0x370 [ 197.652390][ T9755] __sock_sendmsg+0x19c/0x270 [ 197.652420][ T9755] __sys_sendto+0x3bd/0x520 [ 197.652443][ T9755] ? __pfx___sys_sendto+0x10/0x10 [ 197.652459][ T9755] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 197.652494][ T9755] ? __fget_files+0x3a0/0x420 [ 197.652524][ T9755] ? ksys_write+0x22a/0x250 [ 197.652551][ T9755] ? __pfx_ksys_write+0x10/0x10 [ 197.652572][ T9755] ? rcu_is_watching+0x15/0xb0 [ 197.652598][ T9755] __x64_sys_sendto+0xde/0x100 [ 197.652621][ T9755] do_syscall_64+0xfa/0x3b0 [ 197.652636][ T9755] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.652660][ T9755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.652677][ T9755] ? clear_bhb_loop+0x60/0xb0 [ 197.652700][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.652716][ T9755] RIP: 0033:0x7fa94e58eba9 [ 197.652732][ T9755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.652748][ T9755] RSP: 002b:00007fa94f4e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 197.652770][ T9755] RAX: ffffffffffffffda RBX: 00007fa94e7d5fa0 RCX: 00007fa94e58eba9 [ 197.652784][ T9755] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 197.652796][ T9755] RBP: 00007fa94f4e6090 R08: 0000200000000080 R09: 000000000000001c [ 197.652809][ T9755] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 197.652820][ T9755] R13: 00007fa94e7d6038 R14: 00007fa94e7d5fa0 R15: 00007ffff228f968 [ 197.652853][ T9755] [ 197.977303][ T9753] CPU: 1 UID: 0 PID: 9753 Comm: syz.4.1297 Not tainted syzkaller #0 PREEMPT(full) [ 197.977333][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.977345][ T9753] Call Trace: [ 197.977353][ T9753] [ 197.977362][ T9753] dump_stack_lvl+0x189/0x250 [ 197.977391][ T9753] ? __pfx____ratelimit+0x10/0x10 [ 197.977420][ T9753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.977443][ T9753] ? __pfx__printk+0x10/0x10 [ 197.977470][ T9753] ? __might_fault+0xb0/0x130 [ 197.977512][ T9753] should_fail_ex+0x414/0x560 [ 197.977545][ T9753] _copy_from_user+0x2d/0xb0 [ 197.977568][ T9753] csum_and_copy_from_iter_full+0x694/0x1ed0 [ 197.977617][ T9753] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 197.977654][ T9753] ? trace_kmalloc+0x1f/0xd0 [ 197.977681][ T9753] ip_generic_getfrag+0x12f/0x2b0 [ 197.977710][ T9753] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 197.977737][ T9753] ? skb_put+0x11b/0x210 [ 197.977762][ T9753] __ip6_append_data+0x3971/0x3f30 [ 197.977788][ T9753] ? __lock_acquire+0xab9/0xd20 [ 197.977842][ T9753] ? __pfx_raw6_getfrag+0x10/0x10 [ 197.977884][ T9753] ? __pfx___ip6_append_data+0x10/0x10 [ 197.977907][ T9753] ? __pfx_ip6_mtu+0x10/0x10 [ 197.977945][ T9753] ip6_append_data+0x1c4/0x380 [ 197.977976][ T9753] ? __pfx_raw6_getfrag+0x10/0x10 [ 197.978005][ T9753] rawv6_sendmsg+0x127a/0x1820 [ 197.978055][ T9753] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 197.978111][ T9753] ? __lock_acquire+0xab9/0xd20 [ 197.978136][ T9753] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.978169][ T9753] ? sock_rps_record_flow+0x19/0x410 [ 197.978196][ T9753] ? inet_sendmsg+0x2f4/0x370 [ 197.978223][ T9753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.978248][ T9753] __sock_sendmsg+0x19c/0x270 [ 197.978279][ T9753] ____sys_sendmsg+0x52d/0x830 [ 197.978308][ T9753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.978342][ T9753] ? import_iovec+0x74/0xa0 [ 197.978369][ T9753] ___sys_sendmsg+0x21f/0x2a0 [ 197.978393][ T9753] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.978460][ T9753] ? __fget_files+0x2a/0x420 [ 197.978477][ T9753] ? __fget_files+0x3a0/0x420 [ 197.978507][ T9753] __sys_sendmmsg+0x227/0x430 [ 197.978537][ T9753] ? __pfx___sys_sendmmsg+0x10/0x10 [ 197.978555][ T9753] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 197.978607][ T9753] ? ksys_write+0x22a/0x250 [ 197.978635][ T9753] ? __pfx_ksys_write+0x10/0x10 [ 197.978657][ T9753] ? rcu_is_watching+0x15/0xb0 [ 197.978685][ T9753] __x64_sys_sendmmsg+0xa0/0xc0 [ 197.978709][ T9753] do_syscall_64+0xfa/0x3b0 [ 197.978726][ T9753] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.978753][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.978771][ T9753] ? clear_bhb_loop+0x60/0xb0 [ 197.978796][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.978814][ T9753] RIP: 0033:0x7f23ac78eba9 [ 197.978831][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.978846][ T9753] RSP: 002b:00007f23aa9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.978868][ T9753] RAX: ffffffffffffffda RBX: 00007f23ac9d5fa0 RCX: 00007f23ac78eba9 [ 197.978882][ T9753] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003 [ 197.978894][ T9753] RBP: 00007f23aa9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 197.978906][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.978917][ T9753] R13: 00007f23ac9d6038 R14: 00007f23ac9d5fa0 R15: 00007ffda8f61258 [ 197.978951][ T9753] [ 198.707001][ T9770] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1302'. [ 199.061606][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.069961][ T9783] netlink: 'syz.1.1306': attribute type 2 has an invalid length. [ 199.240060][ T9797] FAULT_INJECTION: forcing a failure. [ 199.240060][ T9797] name failslab, interval 1, probability 0, space 0, times 0 [ 199.271478][ T9797] CPU: 1 UID: 0 PID: 9797 Comm: syz.3.1314 Not tainted syzkaller #0 PREEMPT(full) [ 199.271508][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.271520][ T9797] Call Trace: [ 199.271527][ T9797] [ 199.271536][ T9797] dump_stack_lvl+0x189/0x250 [ 199.271567][ T9797] ? __pfx____ratelimit+0x10/0x10 [ 199.271594][ T9797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.271618][ T9797] ? __pfx__printk+0x10/0x10 [ 199.271658][ T9797] should_fail_ex+0x414/0x560 [ 199.271692][ T9797] should_failslab+0xa8/0x100 [ 199.271722][ T9797] kmem_cache_alloc_noprof+0x73/0x3c0 [ 199.271748][ T9797] ? ip_vs_conn_new+0x9a/0x12a0 [ 199.271779][ T9797] ip_vs_conn_new+0x9a/0x12a0 [ 199.271808][ T9797] ? ip_vs_schedule+0xb08/0x1c80 [ 199.271843][ T9797] ip_vs_schedule+0x1260/0x1c80 [ 199.271893][ T9797] ? __pfx_ip_vs_schedule+0x10/0x10 [ 199.271927][ T9797] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 199.271965][ T9797] ? ip_vs_conn_in_get_proto+0x363/0x4d0 [ 199.271990][ T9797] ? ip_vs_service_find+0xd44/0xf00 [ 199.272012][ T9797] ? __pfx_ip_vs_conn_in_get_proto+0x10/0x10 [ 199.272043][ T9797] ? ip_vs_fill_iph_skb_off+0x30a/0x7b0 [ 199.272075][ T9797] udp_conn_schedule+0x332/0x710 [ 199.272108][ T9797] ? __pfx_udp_conn_schedule+0x10/0x10 [ 199.272136][ T9797] ? nf_conntrack_in+0x133a/0x15c0 [ 199.272167][ T9797] ip_vs_in_hook+0xc06/0x1be0 [ 199.272208][ T9797] ? ip_vs_out_hook+0x9b5/0xef0 [ 199.272236][ T9797] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 199.272289][ T9797] ? nf_hook+0x9d/0x380 [ 199.272309][ T9797] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 199.272333][ T9797] ? ipv4_conntrack_local+0x126/0x210 [ 199.272351][ T9797] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 199.272380][ T9797] nf_hook_slow+0xc2/0x220 [ 199.272406][ T9797] nf_hook+0x217/0x380 [ 199.272430][ T9797] ? nf_hook+0x9d/0x380 [ 199.272450][ T9797] ? __pfx_nf_hook+0x10/0x10 [ 199.272474][ T9797] ? __pfx_dst_output+0x10/0x10 [ 199.272503][ T9797] ? ip_fast_csum+0x1ee/0x2b0 [ 199.272527][ T9797] __ip_local_out+0x4db/0x600 [ 199.272546][ T9797] ? __pfx_dst_output+0x10/0x10 [ 199.272571][ T9797] ip_send_skb+0x4a/0x100 [ 199.272597][ T9797] udp_send_skb+0xaf1/0x14c0 [ 199.272645][ T9797] udp_sendmsg+0x195a/0x2170 [ 199.272688][ T9797] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 199.272715][ T9797] ? __pfx_udp_sendmsg+0x10/0x10 [ 199.272761][ T9797] ? get_random_u32+0x155/0x940 [ 199.272797][ T9797] ? register_lock_class+0x51/0x320 [ 199.272822][ T9797] ? get_random_u32+0x155/0x940 [ 199.272849][ T9797] ? __lock_acquire+0xab9/0xd20 [ 199.272889][ T9797] udpv6_sendmsg+0xbf0/0x24b0 [ 199.272933][ T9797] ? udp_lib_get_port+0x164b/0x1b10 [ 199.272957][ T9797] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 199.272988][ T9797] ? __lock_acquire+0xab9/0xd20 [ 199.273044][ T9797] ? __local_bh_enable_ip+0x12d/0x1c0 [ 199.273065][ T9797] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 199.273094][ T9797] ? inet_send_prepare+0x1b9/0x270 [ 199.273121][ T9797] ? inet_send_prepare+0x1b9/0x270 [ 199.273150][ T9797] ? inet6_sendmsg+0xe4/0x120 [ 199.273173][ T9797] __sock_sendmsg+0xe5/0x270 [ 199.273204][ T9797] ____sys_sendmsg+0x505/0x830 [ 199.273234][ T9797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.273267][ T9797] ? import_iovec+0x74/0xa0 [ 199.273294][ T9797] ___sys_sendmsg+0x21f/0x2a0 [ 199.273319][ T9797] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.273384][ T9797] ? __fget_files+0x2a/0x420 [ 199.273401][ T9797] ? __fget_files+0x3a0/0x420 [ 199.273436][ T9797] __x64_sys_sendmsg+0x19b/0x260 [ 199.273462][ T9797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.273496][ T9797] ? __pfx_ksys_write+0x10/0x10 [ 199.273519][ T9797] ? rcu_is_watching+0x15/0xb0 [ 199.273545][ T9797] ? do_syscall_64+0xbe/0x3b0 [ 199.273568][ T9797] do_syscall_64+0xfa/0x3b0 [ 199.273584][ T9797] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.273611][ T9797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.273630][ T9797] ? clear_bhb_loop+0x60/0xb0 [ 199.273654][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.273672][ T9797] RIP: 0033:0x7f992098eba9 [ 199.273691][ T9797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.273708][ T9797] RSP: 002b:00007f99218e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.273730][ T9797] RAX: ffffffffffffffda RBX: 00007f9920bd5fa0 RCX: 00007f992098eba9 [ 199.273744][ T9797] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 199.273757][ T9797] RBP: 00007f99218e5090 R08: 0000000000000000 R09: 0000000000000000 [ 199.273768][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.273780][ T9797] R13: 00007f9920bd6038 R14: 00007f9920bd5fa0 R15: 00007ffe82113448 [ 199.273814][ T9797] [ 199.744248][ T9797] IPVS: ip_vs_conn_new(): no memory [ 200.316103][ T9826] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 200.386578][ T9834] FAULT_INJECTION: forcing a failure. [ 200.386578][ T9834] name failslab, interval 1, probability 0, space 0, times 0 [ 200.401760][ T9834] CPU: 1 UID: 0 PID: 9834 Comm: syz.4.1324 Not tainted syzkaller #0 PREEMPT(full) [ 200.401786][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.401797][ T9834] Call Trace: [ 200.401805][ T9834] [ 200.401813][ T9834] dump_stack_lvl+0x189/0x250 [ 200.401841][ T9834] ? __pfx____ratelimit+0x10/0x10 [ 200.401869][ T9834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.401891][ T9834] ? __pfx__printk+0x10/0x10 [ 200.401919][ T9834] ? __pfx___might_resched+0x10/0x10 [ 200.401938][ T9834] ? fs_reclaim_acquire+0x7d/0x100 [ 200.401970][ T9834] should_fail_ex+0x414/0x560 [ 200.402000][ T9834] should_failslab+0xa8/0x100 [ 200.402024][ T9834] __kmalloc_noprof+0xcb/0x4f0 [ 200.402048][ T9834] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 200.402079][ T9834] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 200.402109][ T9834] genl_family_rcv_msg_doit+0xb8/0x300 [ 200.402139][ T9834] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 200.402170][ T9834] ? apparmor_capable+0x137/0x1b0 [ 200.402194][ T9834] ? bpf_lsm_capable+0x9/0x20 [ 200.402215][ T9834] ? security_capable+0x7e/0x2e0 [ 200.402256][ T9834] genl_rcv_msg+0x60e/0x790 [ 200.402288][ T9834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.402309][ T9834] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 200.402329][ T9834] ? __pfx_nl80211_new_key+0x10/0x10 [ 200.402350][ T9834] ? __pfx_nl80211_post_doit+0x10/0x10 [ 200.402373][ T9834] ? __asan_memcpy+0x40/0x70 [ 200.402394][ T9834] ? __pfx_ref_tracker_free+0x10/0x10 [ 200.402430][ T9834] netlink_rcv_skb+0x208/0x470 [ 200.402453][ T9834] ? __lock_acquire+0xab9/0xd20 [ 200.402480][ T9834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.402503][ T9834] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.402553][ T9834] ? down_read+0x1ad/0x2e0 [ 200.402573][ T9834] genl_rcv+0x28/0x40 [ 200.402592][ T9834] netlink_unicast+0x82f/0x9e0 [ 200.402627][ T9834] ? __pfx_netlink_unicast+0x10/0x10 [ 200.402654][ T9834] ? netlink_sendmsg+0x642/0xb30 [ 200.402669][ T9834] ? skb_put+0x11b/0x210 [ 200.402693][ T9834] netlink_sendmsg+0x805/0xb30 [ 200.402723][ T9834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.402746][ T9834] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.402765][ T9834] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.402785][ T9834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.402805][ T9834] __sock_sendmsg+0x219/0x270 [ 200.402836][ T9834] ____sys_sendmsg+0x505/0x830 [ 200.402864][ T9834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.402897][ T9834] ? import_iovec+0x74/0xa0 [ 200.402925][ T9834] ___sys_sendmsg+0x21f/0x2a0 [ 200.402950][ T9834] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.403014][ T9834] ? __fget_files+0x2a/0x420 [ 200.403031][ T9834] ? __fget_files+0x3a0/0x420 [ 200.403061][ T9834] __x64_sys_sendmsg+0x19b/0x260 [ 200.403086][ T9834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.403117][ T9834] ? __pfx_ksys_write+0x10/0x10 [ 200.403139][ T9834] ? rcu_is_watching+0x15/0xb0 [ 200.403165][ T9834] ? do_syscall_64+0xbe/0x3b0 [ 200.403186][ T9834] do_syscall_64+0xfa/0x3b0 [ 200.403201][ T9834] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.403225][ T9834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.403253][ T9834] ? clear_bhb_loop+0x60/0xb0 [ 200.403277][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.403294][ T9834] RIP: 0033:0x7f23ac78eba9 [ 200.403311][ T9834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.403326][ T9834] RSP: 002b:00007f23aa9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.403346][ T9834] RAX: ffffffffffffffda RBX: 00007f23ac9d5fa0 RCX: 00007f23ac78eba9 [ 200.403360][ T9834] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 200.403371][ T9834] RBP: 00007f23aa9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.403383][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.403393][ T9834] R13: 00007f23ac9d6038 R14: 00007f23ac9d5fa0 R15: 00007ffda8f61258 [ 200.403427][ T9834] [ 200.823030][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 200.869710][ T9839] tipc: Enabling of bearer rejected, already enabled [ 200.924864][ T9832] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 200.927020][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 201.122509][ T9846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1330'. [ 201.165512][ T9849] FAULT_INJECTION: forcing a failure. [ 201.165512][ T9849] name failslab, interval 1, probability 0, space 0, times 0 [ 201.250901][ T9849] CPU: 1 UID: 0 PID: 9849 Comm: syz.3.1329 Not tainted syzkaller #0 PREEMPT(full) [ 201.250931][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.250942][ T9849] Call Trace: [ 201.250950][ T9849] [ 201.250959][ T9849] dump_stack_lvl+0x189/0x250 [ 201.250988][ T9849] ? __pfx____ratelimit+0x10/0x10 [ 201.251016][ T9849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.251038][ T9849] ? __pfx__printk+0x10/0x10 [ 201.251083][ T9849] should_fail_ex+0x414/0x560 [ 201.251116][ T9849] should_failslab+0xa8/0x100 [ 201.251146][ T9849] __kmalloc_cache_noprof+0x70/0x3d0 [ 201.251171][ T9849] ? sctp_add_bind_addr+0x8c/0x370 [ 201.251205][ T9849] sctp_add_bind_addr+0x8c/0x370 [ 201.251236][ T9849] sctp_copy_local_addr_list+0x30b/0x4e0 [ 201.251278][ T9849] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 201.251305][ T9849] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 201.251333][ T9849] ? sctp_v6_is_any+0x64/0x80 [ 201.251357][ T9849] ? sctp_copy_one_addr+0x93/0x360 [ 201.251385][ T9849] sctp_bind_addr_copy+0xb3/0x3c0 [ 201.251412][ T9849] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 201.251440][ T9849] sctp_connect_new_asoc+0x2e0/0x690 [ 201.251465][ T9849] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 201.251483][ T9849] ? __local_bh_enable_ip+0x12d/0x1c0 [ 201.251512][ T9849] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 201.251534][ T9849] ? security_sctp_bind_connect+0x7e/0x2e0 [ 201.251564][ T9849] sctp_sendmsg+0x155c/0x2810 [ 201.251599][ T9849] ? __pfx_sctp_sendmsg+0x10/0x10 [ 201.251624][ T9849] ? aa_sk_perm+0x81e/0x950 [ 201.251654][ T9849] ? __pfx_aa_sk_perm+0x10/0x10 [ 201.251684][ T9849] ? sock_rps_record_flow+0x19/0x410 [ 201.251711][ T9849] ? inet_sendmsg+0x2f4/0x370 [ 201.251739][ T9849] __sock_sendmsg+0x19c/0x270 [ 201.251765][ T9849] __sys_sendto+0x3bd/0x520 [ 201.251786][ T9849] ? __pfx___sys_sendto+0x10/0x10 [ 201.251801][ T9849] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 201.251834][ T9849] ? __fget_files+0x3a0/0x420 [ 201.251866][ T9849] ? ksys_write+0x22a/0x250 [ 201.251895][ T9849] ? __pfx_ksys_write+0x10/0x10 [ 201.251915][ T9849] ? rcu_is_watching+0x15/0xb0 [ 201.251939][ T9849] __x64_sys_sendto+0xde/0x100 [ 201.251961][ T9849] do_syscall_64+0xfa/0x3b0 [ 201.251977][ T9849] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.252003][ T9849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.252021][ T9849] ? clear_bhb_loop+0x60/0xb0 [ 201.252045][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.252063][ T9849] RIP: 0033:0x7f992098eba9 [ 201.252081][ T9849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.252097][ T9849] RSP: 002b:00007f99218e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 201.252117][ T9849] RAX: ffffffffffffffda RBX: 00007f9920bd5fa0 RCX: 00007f992098eba9 [ 201.252130][ T9849] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 201.252142][ T9849] RBP: 00007f99218e5090 R08: 0000200000000080 R09: 000000000000001c [ 201.252154][ T9849] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 201.252164][ T9849] R13: 00007f9920bd6038 R14: 00007f9920bd5fa0 R15: 00007ffe82113448 [ 201.252197][ T9849] [ 201.907463][ T9871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1339'. [ 202.189691][ T9878] vxlan1: entered promiscuous mode [ 202.193196][ T9886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1345'. [ 202.209475][ T9878] vxlan1: entered allmulticast mode [ 202.223437][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 202.732981][ T9906] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1354'. [ 203.108564][ T9922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1359'. [ 203.505143][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 203.625331][ T9938] gtp0: entered promiscuous mode [ 203.663762][ T9938] gtp0: entered allmulticast mode [ 204.297381][ T9970] netlink: 'syz.1.1374': attribute type 6 has an invalid length. [ 204.414860][ T9974] FAULT_INJECTION: forcing a failure. [ 204.414860][ T9974] name failslab, interval 1, probability 0, space 0, times 0 [ 204.439788][ T9974] CPU: 0 UID: 0 PID: 9974 Comm: syz.3.1375 Not tainted syzkaller #0 PREEMPT(full) [ 204.439817][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.439829][ T9974] Call Trace: [ 204.439836][ T9974] [ 204.439846][ T9974] dump_stack_lvl+0x189/0x250 [ 204.439874][ T9974] ? __pfx____ratelimit+0x10/0x10 [ 204.439901][ T9974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.439922][ T9974] ? __pfx__printk+0x10/0x10 [ 204.439956][ T9974] ? __pfx___might_resched+0x10/0x10 [ 204.439990][ T9974] should_fail_ex+0x414/0x560 [ 204.440022][ T9974] should_failslab+0xa8/0x100 [ 204.440052][ T9974] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 204.440080][ T9974] ? __alloc_skb+0x112/0x2d0 [ 204.440104][ T9974] __alloc_skb+0x112/0x2d0 [ 204.440127][ T9974] netlink_sendmsg+0x5c6/0xb30 [ 204.440159][ T9974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.440182][ T9974] ? aa_sock_msg_perm+0xf1/0x1d0 [ 204.440203][ T9974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.440222][ T9974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.440242][ T9974] __sock_sendmsg+0x219/0x270 [ 204.440273][ T9974] ____sys_sendmsg+0x505/0x830 [ 204.440302][ T9974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.440336][ T9974] ? import_iovec+0x74/0xa0 [ 204.440363][ T9974] ___sys_sendmsg+0x21f/0x2a0 [ 204.440388][ T9974] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.440452][ T9974] ? __fget_files+0x2a/0x420 [ 204.440469][ T9974] ? __fget_files+0x3a0/0x420 [ 204.440498][ T9974] __x64_sys_sendmsg+0x19b/0x260 [ 204.440523][ T9974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.440557][ T9974] ? __pfx_ksys_write+0x10/0x10 [ 204.440579][ T9974] ? rcu_is_watching+0x15/0xb0 [ 204.440605][ T9974] ? do_syscall_64+0xbe/0x3b0 [ 204.440629][ T9974] do_syscall_64+0xfa/0x3b0 [ 204.440645][ T9974] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.440672][ T9974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.440691][ T9974] ? clear_bhb_loop+0x60/0xb0 [ 204.440715][ T9974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.440734][ T9974] RIP: 0033:0x7f992098eba9 [ 204.440752][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.440768][ T9974] RSP: 002b:00007f99218e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.440790][ T9974] RAX: ffffffffffffffda RBX: 00007f9920bd5fa0 RCX: 00007f992098eba9 [ 204.440804][ T9974] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000012 [ 204.440816][ T9974] RBP: 00007f99218e5090 R08: 0000000000000000 R09: 0000000000000000 [ 204.440829][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.440840][ T9974] R13: 00007f9920bd6038 R14: 00007f9920bd5fa0 R15: 00007ffe82113448 [ 204.440874][ T9974] [ 204.918367][ T9980] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 205.035851][ T9991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1378'. [ 205.293043][ T9980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.345522][ T9999] vlan2: entered allmulticast mode [ 205.380001][ T9999] veth1: entered allmulticast mode [ 205.407441][ T9999] bond3: (slave vlan2): making interface the new active one [ 205.464109][ T9999] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 205.512182][T10013] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 205.843464][T10023] __nla_validate_parse: 2 callbacks suppressed [ 205.843486][T10023] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1385'. [ 205.989609][T10029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1387'. [ 206.131831][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 206.425824][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 206.434832][T10053] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 206.485298][T10053] 8021q: adding VLAN 0 to HW filter on device bond6 [ 206.583523][T10052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.888872][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'. [ 207.032269][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 207.052492][T10082] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1403'. [ 207.105678][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 207.349706][T10097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1409'. [ 207.360018][T10099] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 207.459208][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1411'. [ 207.463794][T10099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.524324][T10103] vlan2: entered allmulticast mode [ 207.530899][T10103] bond6: (slave vlan2): Opening slave failed [ 207.579530][T10109] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 208.416258][T10142] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 209.450958][T10180] netlink: 'syz.2.1438': attribute type 1 has an invalid length. [ 209.619515][T10189] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 209.696807][T10189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.735248][T10189] vlan2: entered allmulticast mode [ 209.740447][T10189] veth1: entered allmulticast mode [ 209.752813][T10189] bond3: (slave vlan2): making interface the new active one [ 209.762421][T10189] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 209.779308][T10191] tipc: Enabled bearer , priority 0 [ 209.794180][T10191] syzkaller0: entered promiscuous mode [ 209.803556][T10191] syzkaller0: entered allmulticast mode [ 209.858120][T10190] tipc: Resetting bearer [ 209.911105][T10190] tipc: Disabling bearer [ 210.567209][T10224] netlink: 'syz.1.1456': attribute type 1 has an invalid length. [ 210.746427][T10224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.891331][T10236] netlink: 'syz.3.1458': attribute type 21 has an invalid length. [ 210.919212][T10236] netlink: 'syz.3.1458': attribute type 22 has an invalid length. [ 210.935204][T10239] FAULT_INJECTION: forcing a failure. [ 210.935204][T10239] name failslab, interval 1, probability 0, space 0, times 0 [ 210.957487][T10236] netlink: 'syz.3.1458': attribute type 23 has an invalid length. [ 210.975000][T10236] netlink: 'syz.3.1458': attribute type 25 has an invalid length. [ 210.992843][T10236] __nla_validate_parse: 26 callbacks suppressed [ 210.992963][T10236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1458'. [ 211.004957][T10239] CPU: 1 UID: 0 PID: 10239 Comm: syz.2.1461 Not tainted syzkaller #0 PREEMPT(full) [ 211.004980][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.004991][T10239] Call Trace: [ 211.004998][T10239] [ 211.005006][T10239] dump_stack_lvl+0x189/0x250 [ 211.005032][T10239] ? __pfx____ratelimit+0x10/0x10 [ 211.005057][T10239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.005077][T10239] ? __pfx__printk+0x10/0x10 [ 211.005115][T10239] should_fail_ex+0x414/0x560 [ 211.005144][T10239] should_failslab+0xa8/0x100 [ 211.005169][T10239] __kmalloc_cache_noprof+0x70/0x3d0 [ 211.005199][T10239] ? sctp_add_bind_addr+0x8c/0x370 [ 211.005227][T10239] sctp_add_bind_addr+0x8c/0x370 [ 211.005255][T10239] sctp_copy_local_addr_list+0x30b/0x4e0 [ 211.005283][T10239] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 211.005305][T10239] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 211.005330][T10239] ? sctp_v6_is_any+0x64/0x80 [ 211.005347][T10239] ? sctp_copy_one_addr+0x93/0x360 [ 211.005374][T10239] sctp_bind_addr_copy+0xb3/0x3c0 [ 211.005398][T10239] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 211.005423][T10239] sctp_connect_new_asoc+0x2e0/0x690 [ 211.005445][T10239] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 211.005461][T10239] ? __local_bh_enable_ip+0x12d/0x1c0 [ 211.005486][T10239] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 211.005506][T10239] ? security_sctp_bind_connect+0x7e/0x2e0 [ 211.005531][T10239] sctp_sendmsg+0x155c/0x2810 [ 211.005563][T10239] ? __pfx_sctp_sendmsg+0x10/0x10 [ 211.005584][T10239] ? aa_sk_perm+0x81e/0x950 [ 211.005614][T10239] ? __pfx_aa_sk_perm+0x10/0x10 [ 211.005641][T10239] ? sock_rps_record_flow+0x19/0x410 [ 211.005666][T10239] ? inet_sendmsg+0x2f4/0x370 [ 211.005691][T10239] __sock_sendmsg+0x19c/0x270 [ 211.005719][T10239] __sys_sendto+0x3bd/0x520 [ 211.005739][T10239] ? __pfx___sys_sendto+0x10/0x10 [ 211.005753][T10239] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 211.005784][T10239] ? __fget_files+0x3a0/0x420 [ 211.005812][T10239] ? ksys_write+0x22a/0x250 [ 211.005837][T10239] ? __pfx_ksys_write+0x10/0x10 [ 211.005856][T10239] ? rcu_is_watching+0x15/0xb0 [ 211.005878][T10239] __x64_sys_sendto+0xde/0x100 [ 211.005899][T10239] do_syscall_64+0xfa/0x3b0 [ 211.005914][T10239] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.005938][T10239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.005954][T10239] ? clear_bhb_loop+0x60/0xb0 [ 211.005976][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.005991][T10239] RIP: 0033:0x7f829898eba9 [ 211.006007][T10239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.006021][T10239] RSP: 002b:00007f82997ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 211.006041][T10239] RAX: ffffffffffffffda RBX: 00007f8298bd5fa0 RCX: 00007f829898eba9 [ 211.006054][T10239] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 211.006064][T10239] RBP: 00007f82997ab090 R08: 0000200000000080 R09: 000000000000001c [ 211.006075][T10239] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 211.006085][T10239] R13: 00007f8298bd6038 R14: 00007f8298bd5fa0 R15: 00007ffd05f1f638 [ 211.006116][T10239] [ 211.649147][T10260] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1469'. [ 212.064898][T10278] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1477'. [ 212.116849][T10281] tipc: Enabled bearer , priority 0 [ 212.127609][T10278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.139646][T10281] syzkaller0: entered promiscuous mode [ 212.145460][T10281] syzkaller0: entered allmulticast mode [ 212.177047][T10281] FAULT_INJECTION: forcing a failure. [ 212.177047][T10281] name failslab, interval 1, probability 0, space 0, times 0 [ 212.212457][T10281] CPU: 0 UID: 0 PID: 10281 Comm: syz.4.1478 Not tainted syzkaller #0 PREEMPT(full) [ 212.212487][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.212499][T10281] Call Trace: [ 212.212507][T10281] [ 212.212516][T10281] dump_stack_lvl+0x189/0x250 [ 212.212545][T10281] ? __pfx____ratelimit+0x10/0x10 [ 212.212574][T10281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.212598][T10281] ? __pfx__printk+0x10/0x10 [ 212.212632][T10281] ? __pfx___might_resched+0x10/0x10 [ 212.212650][T10281] ? fs_reclaim_acquire+0x7d/0x100 [ 212.212685][T10281] should_fail_ex+0x414/0x560 [ 212.212717][T10281] should_failslab+0xa8/0x100 [ 212.212745][T10281] __kmalloc_noprof+0xcb/0x4f0 [ 212.212767][T10281] ? kfree+0x4d/0x440 [ 212.212785][T10281] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.212810][T10281] tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.212831][T10281] ? tomoyo_domain+0xd9/0x130 [ 212.212858][T10281] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 212.212885][T10281] tomoyo_path_number_perm+0x1e8/0x5a0 [ 212.212914][T10281] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.212959][T10281] ? __lock_acquire+0xab9/0xd20 [ 212.213011][T10281] ? __fget_files+0x2a/0x420 [ 212.213032][T10281] ? __fget_files+0x2a/0x420 [ 212.213047][T10281] ? __fget_files+0x3a0/0x420 [ 212.213062][T10281] ? __fget_files+0x2a/0x420 [ 212.213085][T10281] security_file_ioctl+0xcb/0x2d0 [ 212.213113][T10281] __se_sys_ioctl+0x47/0x170 [ 212.213140][T10281] do_syscall_64+0xfa/0x3b0 [ 212.213157][T10281] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.213192][T10281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.213211][T10281] ? clear_bhb_loop+0x60/0xb0 [ 212.213235][T10281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.213253][T10281] RIP: 0033:0x7f23ac78eba9 [ 212.213272][T10281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.213288][T10281] RSP: 002b:00007f23aa9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.213310][T10281] RAX: ffffffffffffffda RBX: 00007f23ac9d5fa0 RCX: 00007f23ac78eba9 [ 212.213324][T10281] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 212.213336][T10281] RBP: 00007f23aa9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.213348][T10281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.213359][T10281] R13: 00007f23ac9d6038 R14: 00007f23ac9d5fa0 R15: 00007ffda8f61258 [ 212.213395][T10281] [ 212.213404][T10281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.369815][T10286] tipc: Enabling of bearer rejected, failed to enable media [ 212.486731][T10281] tipc: Resetting bearer [ 212.501574][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 212.555047][T10280] tipc: Resetting bearer [ 212.606420][T10280] tipc: Disabling bearer [ 212.985591][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 213.294472][T10319] wg1 speed is unknown, defaulting to 1000 [ 213.464947][T10329] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1493'. [ 213.547013][T10333] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1492'. [ 213.604546][T10330] validate_nla: 1 callbacks suppressed [ 213.604566][T10330] netlink: 'syz.1.1492': attribute type 1 has an invalid length. [ 213.618258][T10330] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1492'. [ 213.631889][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 213.893324][T10346] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1497'. [ 214.304060][T10365] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1505'. [ 214.760078][T10376] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 215.351236][T10406] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 215.493722][T10408] syz.0.1524: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 215.511438][T10408] CPU: 1 UID: 0 PID: 10408 Comm: syz.0.1524 Not tainted syzkaller #0 PREEMPT(full) [ 215.511466][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.511478][T10408] Call Trace: [ 215.511487][T10408] [ 215.511496][T10408] dump_stack_lvl+0x189/0x250 [ 215.511529][T10408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.511553][T10408] ? __pfx__printk+0x10/0x10 [ 215.511580][T10408] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 215.511604][T10408] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 215.511630][T10408] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 215.511658][T10408] warn_alloc+0x214/0x310 [ 215.511690][T10408] ? stack_depot_save_flags+0x40/0x860 [ 215.511720][T10408] ? __pfx_warn_alloc+0x10/0x10 [ 215.511752][T10408] ? kasan_save_track+0x4f/0x80 [ 215.511777][T10408] ? xskq_create+0x56/0x170 [ 215.511803][T10408] ? xsk_init_queue+0xb0/0x110 [ 215.511826][T10408] ? xsk_setsockopt+0x4dc/0x8d0 [ 215.511849][T10408] ? do_sock_setsockopt+0x179/0x1b0 [ 215.511868][T10408] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 215.511886][T10408] ? do_syscall_64+0xfa/0x3b0 [ 215.511901][T10408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.511931][T10408] __vmalloc_node_range_noprof+0x125/0x12f0 [ 215.511995][T10408] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.512029][T10408] ? __kasan_kmalloc+0x93/0xb0 [ 215.512058][T10408] vmalloc_user_noprof+0xad/0xf0 [ 215.512086][T10408] ? xskq_create+0xbf/0x170 [ 215.512115][T10408] xskq_create+0xbf/0x170 [ 215.512146][T10408] xsk_init_queue+0xb0/0x110 [ 215.512187][T10408] xsk_setsockopt+0x4dc/0x8d0 [ 215.512217][T10408] ? __pfx_xsk_setsockopt+0x10/0x10 [ 215.512242][T10408] ? __pfx_aa_sk_perm+0x10/0x10 [ 215.512275][T10408] ? aa_sock_opt_perm+0xff/0x1b0 [ 215.512299][T10408] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 215.512320][T10408] ? __pfx_xsk_setsockopt+0x10/0x10 [ 215.512347][T10408] do_sock_setsockopt+0x179/0x1b0 [ 215.512373][T10408] __x64_sys_setsockopt+0x13f/0x1b0 [ 215.512401][T10408] do_syscall_64+0xfa/0x3b0 [ 215.512417][T10408] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.512445][T10408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.512465][T10408] ? clear_bhb_loop+0x60/0xb0 [ 215.512490][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.512508][T10408] RIP: 0033:0x7fb529d8eba9 [ 215.512527][T10408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.512543][T10408] RSP: 002b:00007fb52ac6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.512566][T10408] RAX: ffffffffffffffda RBX: 00007fb529fd5fa0 RCX: 00007fb529d8eba9 [ 215.512581][T10408] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 215.512593][T10408] RBP: 00007fb529e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 215.512605][T10408] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.512617][T10408] R13: 00007fb529fd6038 R14: 00007fb529fd5fa0 R15: 00007ffd5885cb68 [ 215.512651][T10408] [ 215.517988][T10408] Mem-Info: [ 215.837231][T10408] active_anon:6055 inactive_anon:0 isolated_anon:0 [ 215.837231][T10408] active_file:3696 inactive_file:39912 isolated_file:0 [ 215.837231][T10408] unevictable:768 dirty:138 writeback:0 [ 215.837231][T10408] slab_reclaimable:10921 slab_unreclaimable:99428 [ 215.837231][T10408] mapped:29907 shmem:1354 pagetables:1230 [ 215.837231][T10408] sec_pagetables:0 bounce:0 [ 215.837231][T10408] kernel_misc_reclaimable:0 [ 215.837231][T10408] free:1329860 free_pcp:13862 free_cma:0 [ 215.924217][T10408] Node 0 active_anon:24020kB inactive_anon:0kB active_file:14784kB inactive_file:159444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119528kB dirty:552kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13080kB pagetables:4564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 215.992495][ T1341] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.032359][ T6023] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.061589][T10408] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.092210][ T1341] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.129119][ T1341] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.145767][T10408] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.175682][T10408] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 216.182456][T10408] Node 0 DMA32 free:1403516kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24056kB inactive_anon:0kB active_file:14784kB inactive_file:157868kB unevictable:1536kB writepending:556kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:40352kB local_pcp:21060kB free_cma:0kB [ 216.220476][T10408] lowmem_reserve[]: 0 0 1 1 1 [ 216.226965][T10408] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 216.257713][T10408] lowmem_reserve[]: 0 0 0 0 0 [ 216.263752][T10408] Node 1 Normal free:3891880kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16100kB local_pcp:9764kB free_cma:0kB [ 216.295156][T10408] lowmem_reserve[]: 0 0 0 0 0 [ 216.299992][T10408] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.324169][T10408] Node 0 DMA32: 1843*4kB (UME) 426*8kB (UM) 144*16kB (UME) 37*32kB (ME) 27*64kB (UM) 32*128kB (UM) 20*256kB (UME) 8*512kB (UME) 10*1024kB (UME) 4*2048kB (ME) 333*4096kB (UM) = 1411708kB [ 216.365638][T10408] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 216.421470][T10408] Node 1 Normal: 170*4kB (UME) 44*8kB (UME) 32*16kB (UME) 63*32kB (UME) 27*64kB (UME) 8*128kB (UME) 4*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891880kB [ 216.485685][T10438] __nla_validate_parse: 16 callbacks suppressed [ 216.485706][T10438] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1535'. [ 216.506682][T10408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.528449][T10438] netlink: 'syz.2.1535': attribute type 1 has an invalid length. [ 216.540279][T10438] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1535'. [ 216.548343][T10408] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.555322][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 216.579785][T10408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.648614][T10408] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.680108][T10408] 44958 total pagecache pages [ 216.712360][T10408] 0 pages in swap cache [ 216.716582][T10408] Free swap = 124996kB [ 216.726454][T10449] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1539'. [ 216.738116][T10408] Total swap = 124996kB [ 216.755210][T10408] 2097051 pages RAM [ 216.767052][T10408] 0 pages HighMem/MovableOnly [ 216.794748][T10408] 425667 pages reserved [ 216.818016][T10408] 0 pages cma reserved [ 216.924568][T10455] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1542'. [ 216.981908][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.069198][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 217.301726][T10459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.590798][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 217.625275][T10477] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1551'. [ 217.650851][T10478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1552'. [ 217.679814][T10477] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 217.680739][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 218.090038][T10495] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 218.214134][T10495] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.568042][T10516] bond5: entered allmulticast mode [ 218.588325][T10516] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.597803][T10516] bridge0: port 1(bond5) entered blocking state [ 218.605299][T10516] bridge0: port 1(bond5) entered disabled state [ 218.616574][T10516] bond5: entered promiscuous mode [ 218.623787][T10516] bridge0: port 1(bond5) entered blocking state [ 218.631189][T10516] bridge0: port 1(bond5) entered forwarding state [ 218.668100][ T13] bridge0: port 1(bond5) entered disabled state [ 218.890801][T10536] netlink: 'syz.3.1575': attribute type 1 has an invalid length. [ 218.939577][T10539] FAULT_INJECTION: forcing a failure. [ 218.939577][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 218.950822][T10536] 8021q: adding VLAN 0 to HW filter on device bond8 [ 218.960571][T10539] CPU: 0 UID: 0 PID: 10539 Comm: syz.0.1576 Not tainted syzkaller #0 PREEMPT(full) [ 218.960600][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.960612][T10539] Call Trace: [ 218.960620][T10539] [ 218.960629][T10539] dump_stack_lvl+0x189/0x250 [ 218.960658][T10539] ? __pfx____ratelimit+0x10/0x10 [ 218.960684][T10539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.960706][T10539] ? __pfx__printk+0x10/0x10 [ 218.960753][T10539] should_fail_ex+0x414/0x560 [ 218.960783][T10539] should_failslab+0xa8/0x100 [ 218.960814][T10539] __kmalloc_cache_noprof+0x70/0x3d0 [ 218.960840][T10539] ? sctp_add_bind_addr+0x8c/0x370 [ 218.960895][T10539] sctp_add_bind_addr+0x8c/0x370 [ 218.960934][T10539] sctp_copy_local_addr_list+0x30b/0x4e0 [ 218.960966][T10539] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 218.960994][T10539] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 218.961020][T10539] ? sctp_v6_is_any+0x64/0x80 [ 218.961040][T10539] ? sctp_copy_one_addr+0x93/0x360 [ 218.961073][T10539] sctp_bind_addr_copy+0xb3/0x3c0 [ 218.961099][T10539] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 218.961128][T10539] sctp_connect_new_asoc+0x2e0/0x690 [ 218.961154][T10539] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 218.961174][T10539] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 218.961193][T10539] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 218.961211][T10539] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 218.961233][T10539] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 218.961256][T10539] ? security_sctp_bind_connect+0x7e/0x2e0 [ 218.961282][T10539] sctp_sendmsg+0x155c/0x2810 [ 218.961317][T10539] ? __pfx_sctp_sendmsg+0x10/0x10 [ 218.961340][T10539] ? aa_sk_perm+0x81e/0x950 [ 218.961372][T10539] ? __pfx_aa_sk_perm+0x10/0x10 [ 218.961401][T10539] ? sock_rps_record_flow+0x19/0x410 [ 218.961428][T10539] ? inet_sendmsg+0x2f4/0x370 [ 218.961449][T10539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.961472][T10539] __sock_sendmsg+0x19c/0x270 [ 218.961502][T10539] __sys_sendto+0x3bd/0x520 [ 218.961525][T10539] ? __pfx___sys_sendto+0x10/0x10 [ 218.961541][T10539] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 218.961577][T10539] ? __fget_files+0x3a0/0x420 [ 218.961609][T10539] ? ksys_write+0x22a/0x250 [ 218.961638][T10539] ? __pfx_ksys_write+0x10/0x10 [ 218.961658][T10539] ? rcu_is_watching+0x15/0xb0 [ 218.961683][T10539] __x64_sys_sendto+0xde/0x100 [ 218.961706][T10539] do_syscall_64+0xfa/0x3b0 [ 218.961722][T10539] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.961748][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.961766][T10539] ? clear_bhb_loop+0x60/0xb0 [ 218.961788][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.961806][T10539] RIP: 0033:0x7fb529d8eba9 [ 218.961823][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.961838][T10539] RSP: 002b:00007fb52ac6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 218.961858][T10539] RAX: ffffffffffffffda RBX: 00007fb529fd5fa0 RCX: 00007fb529d8eba9 [ 218.961871][T10539] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 218.961882][T10539] RBP: 00007fb52ac6e090 R08: 0000200000000100 R09: 000000000000001c [ 218.961895][T10539] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 218.961915][T10539] R13: 00007fb529fd6038 R14: 00007fb529fd5fa0 R15: 00007ffd5885cb68 [ 218.961948][T10539] [ 218.977172][T10536] vlan2: entered allmulticast mode [ 219.341666][T10536] veth1: entered allmulticast mode [ 219.353775][T10536] bond8: (slave vlan2): making interface the new active one [ 219.362960][T10536] bond8: (slave vlan2): Enslaving as an active interface with an up link [ 219.685001][T10559] netlink: 'syz.0.1582': attribute type 1 has an invalid length. [ 219.698566][T10552] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.007269][T10577] tipc: Enabled bearer , priority 0 [ 220.025161][T10577] syzkaller0: entered promiscuous mode [ 220.038172][T10577] syzkaller0: entered allmulticast mode [ 220.150202][T10587] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 220.173947][T10577] tipc: Resetting bearer [ 220.231149][T10576] tipc: Resetting bearer [ 220.255374][T10576] tipc: Disabling bearer [ 220.303984][T10587] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.844517][T10623] netlink: 'syz.1.1602': attribute type 10 has an invalid length. [ 220.870662][T10625] FAULT_INJECTION: forcing a failure. [ 220.870662][T10625] name failslab, interval 1, probability 0, space 0, times 0 [ 220.915152][T10623] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.935081][T10625] CPU: 0 UID: 0 PID: 10625 Comm: syz.0.1604 Not tainted syzkaller #0 PREEMPT(full) [ 220.935109][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.935121][T10625] Call Trace: [ 220.935130][T10625] [ 220.935137][T10625] dump_stack_lvl+0x189/0x250 [ 220.935168][T10625] ? __pfx____ratelimit+0x10/0x10 [ 220.935197][T10625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.935221][T10625] ? __pfx__printk+0x10/0x10 [ 220.935266][T10625] should_fail_ex+0x414/0x560 [ 220.935299][T10625] should_failslab+0xa8/0x100 [ 220.935329][T10625] __kmalloc_cache_noprof+0x70/0x3d0 [ 220.935355][T10625] ? sctp_add_bind_addr+0x8c/0x370 [ 220.935388][T10625] sctp_add_bind_addr+0x8c/0x370 [ 220.935421][T10625] sctp_copy_local_addr_list+0x30b/0x4e0 [ 220.935452][T10625] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 220.935480][T10625] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 220.935510][T10625] ? sctp_v6_is_any+0x64/0x80 [ 220.935535][T10625] ? sctp_copy_one_addr+0x93/0x360 [ 220.935566][T10625] sctp_bind_addr_copy+0xb3/0x3c0 [ 220.935595][T10625] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 220.935621][T10625] sctp_connect_new_asoc+0x2e0/0x690 [ 220.935645][T10625] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 220.935666][T10625] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 220.935685][T10625] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 220.935702][T10625] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 220.935723][T10625] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 220.935744][T10625] ? security_sctp_bind_connect+0x7e/0x2e0 [ 220.935771][T10625] sctp_sendmsg+0x155c/0x2810 [ 220.935805][T10625] ? __pfx_sctp_sendmsg+0x10/0x10 [ 220.935827][T10625] ? aa_sk_perm+0x81e/0x950 [ 220.935861][T10625] ? __pfx_aa_sk_perm+0x10/0x10 [ 220.935899][T10625] ? sock_rps_record_flow+0x19/0x410 [ 220.935926][T10625] ? inet_sendmsg+0x2f4/0x370 [ 220.935948][T10625] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.935972][T10625] __sock_sendmsg+0x19c/0x270 [ 220.936001][T10625] __sys_sendto+0x3bd/0x520 [ 220.936023][T10625] ? __pfx___sys_sendto+0x10/0x10 [ 220.936037][T10625] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 220.936071][T10625] ? __fget_files+0x3a0/0x420 [ 220.936101][T10625] ? ksys_write+0x22a/0x250 [ 220.936128][T10625] ? __pfx_ksys_write+0x10/0x10 [ 220.936148][T10625] ? rcu_is_watching+0x15/0xb0 [ 220.936172][T10625] __x64_sys_sendto+0xde/0x100 [ 220.936195][T10625] do_syscall_64+0xfa/0x3b0 [ 220.936214][T10625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.936231][T10625] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.936249][T10625] ? clear_bhb_loop+0x60/0xb0 [ 220.936271][T10625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.936288][T10625] RIP: 0033:0x7fb529d8eba9 [ 220.936305][T10625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.936320][T10625] RSP: 002b:00007fb52ac6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 220.936341][T10625] RAX: ffffffffffffffda RBX: 00007fb529fd5fa0 RCX: 00007fb529d8eba9 [ 220.936354][T10625] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 220.936365][T10625] RBP: 00007fb52ac6e090 R08: 0000200000000100 R09: 000000000000001c [ 220.936378][T10625] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000002 [ 220.936388][T10625] R13: 00007fb529fd6038 R14: 00007fb529fd5fa0 R15: 00007ffd5885cb68 [ 220.936422][T10625] [ 220.946648][T10623] bond0: (slave team0): Enslaving as an active interface with an up link [ 221.378462][T10639] sctp: [Deprecated]: syz.1.1609 (pid 10639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.378462][T10639] Use struct sctp_sack_info instead [ 221.574584][T10647] __nla_validate_parse: 21 callbacks suppressed [ 221.574607][T10647] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1613'. [ 221.622078][T10647] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 221.699582][T10652] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1614'. [ 221.787218][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1616'. [ 221.856103][T10658] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.080401][T10669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1620'. [ 222.540688][T10685] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1628'. [ 222.654070][T10691] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1630'. [ 222.754203][T10693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1631'. [ 222.820824][T10697] FAULT_INJECTION: forcing a failure. [ 222.820824][T10697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.837933][T10697] CPU: 1 UID: 0 PID: 10697 Comm: syz.1.1633 Not tainted syzkaller #0 PREEMPT(full) [ 222.837961][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.837973][T10697] Call Trace: [ 222.837981][T10697] [ 222.837990][T10697] dump_stack_lvl+0x189/0x250 [ 222.838019][T10697] ? __pfx____ratelimit+0x10/0x10 [ 222.838047][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.838070][T10697] ? __pfx__printk+0x10/0x10 [ 222.838112][T10697] should_fail_ex+0x414/0x560 [ 222.838143][T10697] _copy_to_user+0x31/0xb0 [ 222.838168][T10697] simple_read_from_buffer+0xe1/0x170 [ 222.838202][T10697] proc_fail_nth_read+0x1b3/0x220 [ 222.838228][T10697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.838253][T10697] ? rw_verify_area+0x2a6/0x4d0 [ 222.838276][T10697] ? __lock_acquire+0xab9/0xd20 [ 222.838301][T10697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.838324][T10697] vfs_read+0x200/0xa30 [ 222.838347][T10697] ? fdget_pos+0x247/0x320 [ 222.838370][T10697] ? __pfx___mutex_lock+0x10/0x10 [ 222.838389][T10697] ? __pfx_vfs_read+0x10/0x10 [ 222.838416][T10697] ? __fget_files+0x2a/0x420 [ 222.838439][T10697] ? __fget_files+0x3a0/0x420 [ 222.838455][T10697] ? __fget_files+0x2a/0x420 [ 222.838483][T10697] ksys_read+0x145/0x250 [ 222.838510][T10697] ? __pfx_ksys_read+0x10/0x10 [ 222.838531][T10697] ? rcu_is_watching+0x15/0xb0 [ 222.838555][T10697] ? do_syscall_64+0xbe/0x3b0 [ 222.838577][T10697] do_syscall_64+0xfa/0x3b0 [ 222.838593][T10697] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.838620][T10697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.838638][T10697] ? clear_bhb_loop+0x60/0xb0 [ 222.838660][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.838679][T10697] RIP: 0033:0x7fa94e58d5bc [ 222.838697][T10697] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.838712][T10697] RSP: 002b:00007fa94f4e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.838733][T10697] RAX: ffffffffffffffda RBX: 00007fa94e7d5fa0 RCX: 00007fa94e58d5bc [ 222.838747][T10697] RDX: 000000000000000f RSI: 00007fa94f4e60a0 RDI: 0000000000000013 [ 222.838758][T10697] RBP: 00007fa94f4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.838771][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.838781][T10697] R13: 00007fa94e7d6038 R14: 00007fa94e7d5fa0 R15: 00007ffff228f968 [ 222.838811][T10697] [ 223.234678][T10701] tipc: Enabled bearer , priority 0 [ 223.282181][T10701] syzkaller0: entered promiscuous mode [ 223.287714][T10701] syzkaller0: entered allmulticast mode [ 223.341521][T10710] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1639'. [ 223.396660][T10715] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 223.426263][T10700] tipc: Resetting bearer [ 223.505323][T10700] tipc: Disabling bearer [ 223.567693][T10714] veth5: entered promiscuous mode [ 223.646452][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1643'. [ 223.737522][T10726] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1645'. [ 223.803569][T10728] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 223.823926][T10730] FAULT_INJECTION: forcing a failure. [ 223.823926][T10730] name failslab, interval 1, probability 0, space 0, times 0 [ 223.839585][T10730] CPU: 1 UID: 0 PID: 10730 Comm: syz.4.1647 Not tainted syzkaller #0 PREEMPT(full) [ 223.839612][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.839624][T10730] Call Trace: [ 223.839631][T10730] [ 223.839639][T10730] dump_stack_lvl+0x189/0x250 [ 223.839668][T10730] ? __pfx____ratelimit+0x10/0x10 [ 223.839697][T10730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.839720][T10730] ? __pfx__printk+0x10/0x10 [ 223.839752][T10730] ? __pfx___might_resched+0x10/0x10 [ 223.839775][T10730] should_fail_ex+0x414/0x560 [ 223.839804][T10730] should_failslab+0xa8/0x100 [ 223.839831][T10730] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 223.839865][T10730] ? __alloc_skb+0x112/0x2d0 [ 223.839889][T10730] __alloc_skb+0x112/0x2d0 [ 223.839911][T10730] netlink_sendmsg+0x5c6/0xb30 [ 223.839940][T10730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.839963][T10730] ? aa_sock_msg_perm+0xf1/0x1d0 [ 223.839983][T10730] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.840002][T10730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.840020][T10730] __sock_sendmsg+0x219/0x270 [ 223.840049][T10730] ____sys_sendmsg+0x505/0x830 [ 223.840078][T10730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.840109][T10730] ? import_iovec+0x74/0xa0 [ 223.840135][T10730] ___sys_sendmsg+0x21f/0x2a0 [ 223.840157][T10730] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.840218][T10730] ? __fget_files+0x2a/0x420 [ 223.840233][T10730] ? __fget_files+0x3a0/0x420 [ 223.840263][T10730] __x64_sys_sendmsg+0x19b/0x260 [ 223.840288][T10730] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.840320][T10730] ? __pfx_ksys_write+0x10/0x10 [ 223.840342][T10730] ? rcu_is_watching+0x15/0xb0 [ 223.840366][T10730] ? do_syscall_64+0xbe/0x3b0 [ 223.840388][T10730] do_syscall_64+0xfa/0x3b0 [ 223.840404][T10730] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.840430][T10730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.840449][T10730] ? clear_bhb_loop+0x60/0xb0 [ 223.840470][T10730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.840487][T10730] RIP: 0033:0x7f23ac78eba9 [ 223.840505][T10730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.840520][T10730] RSP: 002b:00007f23aa9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.840541][T10730] RAX: ffffffffffffffda RBX: 00007f23ac9d5fa0 RCX: 00007f23ac78eba9 [ 223.840555][T10730] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 223.840567][T10730] RBP: 00007f23aa9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.840579][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.840589][T10730] R13: 00007f23ac9d6038 R14: 00007f23ac9d5fa0 R15: 00007ffda8f61258 [ 223.840622][T10730] [ 224.311787][T10747] FAULT_INJECTION: forcing a failure. [ 224.311787][T10747] name failslab, interval 1, probability 0, space 0, times 0 [ 224.326312][T10747] CPU: 1 UID: 0 PID: 10747 Comm: syz.4.1653 Not tainted syzkaller #0 PREEMPT(full) [ 224.326339][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.326351][T10747] Call Trace: [ 224.326358][T10747] [ 224.326367][T10747] dump_stack_lvl+0x189/0x250 [ 224.326395][T10747] ? __pfx____ratelimit+0x10/0x10 [ 224.326422][T10747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.326443][T10747] ? __pfx__printk+0x10/0x10 [ 224.326474][T10747] ? __pfx___might_resched+0x10/0x10 [ 224.326493][T10747] ? fs_reclaim_acquire+0x7d/0x100 [ 224.326527][T10747] should_fail_ex+0x414/0x560 [ 224.326555][T10747] should_failslab+0xa8/0x100 [ 224.326584][T10747] __kmalloc_noprof+0xcb/0x4f0 [ 224.326608][T10747] ? kfree+0x4d/0x440 [ 224.326628][T10747] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 224.326654][T10747] tomoyo_realpath_from_path+0xe3/0x5d0 [ 224.326677][T10747] ? tomoyo_domain+0xd9/0x130 [ 224.326705][T10747] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 224.326729][T10747] tomoyo_path_number_perm+0x1e8/0x5a0 [ 224.326755][T10747] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.326800][T10747] ? __lock_acquire+0xab9/0xd20 [ 224.326853][T10747] ? __fget_files+0x2a/0x420 [ 224.326874][T10747] ? __fget_files+0x2a/0x420 [ 224.326890][T10747] ? __fget_files+0x3a0/0x420 [ 224.326906][T10747] ? __fget_files+0x2a/0x420 [ 224.326928][T10747] security_file_ioctl+0xcb/0x2d0 [ 224.326957][T10747] __se_sys_ioctl+0x47/0x170 [ 224.326984][T10747] do_syscall_64+0xfa/0x3b0 [ 224.327001][T10747] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.327028][T10747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.327047][T10747] ? clear_bhb_loop+0x60/0xb0 [ 224.327072][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.327099][T10747] RIP: 0033:0x7f23ac78eba9 [ 224.327117][T10747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.327133][T10747] RSP: 002b:00007f23aa9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.327155][T10747] RAX: ffffffffffffffda RBX: 00007f23ac9d5fa0 RCX: 00007f23ac78eba9 [ 224.327169][T10747] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 224.327182][T10747] RBP: 00007f23aa9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.327194][T10747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.327205][T10747] R13: 00007f23ac9d6038 R14: 00007f23ac9d5fa0 R15: 00007ffda8f61258 [ 224.327241][T10747] [ 224.327249][T10747] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.935105][T10768] FAULT_INJECTION: forcing a failure. [ 224.935105][T10768] name failslab, interval 1, probability 0, space 0, times 0 [ 224.951622][T10768] CPU: 1 UID: 0 PID: 10768 Comm: syz.0.1663 Not tainted syzkaller #0 PREEMPT(full) [ 224.951651][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.951662][T10768] Call Trace: [ 224.951670][T10768] [ 224.951679][T10768] dump_stack_lvl+0x189/0x250 [ 224.951707][T10768] ? __pfx____ratelimit+0x10/0x10 [ 224.951734][T10768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.951756][T10768] ? __pfx__printk+0x10/0x10 [ 224.951797][T10768] should_fail_ex+0x414/0x560 [ 224.951828][T10768] should_failslab+0xa8/0x100 [ 224.951872][T10768] __kmalloc_cache_noprof+0x70/0x3d0 [ 224.951897][T10768] ? sctp_add_bind_addr+0x8c/0x370 [ 224.951928][T10768] sctp_add_bind_addr+0x8c/0x370 [ 224.951958][T10768] sctp_copy_local_addr_list+0x30b/0x4e0 [ 224.951988][T10768] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 224.952014][T10768] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 224.952044][T10768] ? sctp_v6_is_any+0x64/0x80 [ 224.952064][T10768] ? sctp_copy_one_addr+0x93/0x360 [ 224.952094][T10768] sctp_bind_addr_copy+0xb3/0x3c0 [ 224.952121][T10768] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 224.952149][T10768] sctp_connect_new_asoc+0x2e0/0x690 [ 224.952175][T10768] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 224.952197][T10768] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 224.952217][T10768] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 224.952235][T10768] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 224.952256][T10768] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 224.952278][T10768] ? security_sctp_bind_connect+0x7e/0x2e0 [ 224.952307][T10768] sctp_sendmsg+0x155c/0x2810 [ 224.952343][T10768] ? __pfx_sctp_sendmsg+0x10/0x10 [ 224.952367][T10768] ? aa_sk_perm+0x81e/0x950 [ 224.952402][T10768] ? __pfx_aa_sk_perm+0x10/0x10 [ 224.952434][T10768] ? sock_rps_record_flow+0x19/0x410 [ 224.952463][T10768] ? inet_sendmsg+0x2f4/0x370 [ 224.952486][T10768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.952510][T10768] __sock_sendmsg+0x19c/0x270 [ 224.952542][T10768] __sys_sendto+0x3bd/0x520 [ 224.952565][T10768] ? __pfx___sys_sendto+0x10/0x10 [ 224.952587][T10768] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 224.952622][T10768] ? __fget_files+0x3a0/0x420 [ 224.952653][T10768] ? ksys_write+0x22a/0x250 [ 224.952682][T10768] ? __pfx_ksys_write+0x10/0x10 [ 224.952703][T10768] ? rcu_is_watching+0x15/0xb0 [ 224.952730][T10768] __x64_sys_sendto+0xde/0x100 [ 224.952754][T10768] do_syscall_64+0xfa/0x3b0 [ 224.952771][T10768] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.952795][T10768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.952814][T10768] ? clear_bhb_loop+0x60/0xb0 [ 224.952838][T10768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.952864][T10768] RIP: 0033:0x7fb529d8eba9 [ 224.952882][T10768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.952899][T10768] RSP: 002b:00007fb52ac6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 224.952920][T10768] RAX: ffffffffffffffda RBX: 00007fb529fd5fa0 RCX: 00007fb529d8eba9 [ 224.952935][T10768] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 224.952948][T10768] RBP: 00007fb52ac6e090 R08: 0000200000000100 R09: 000000000000001c [ 224.952959][T10768] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000002 [ 224.952971][T10768] R13: 00007fb529fd6038 R14: 00007fb529fd5fa0 R15: 00007ffd5885cb68 [ 224.953005][T10768] [ 225.640670][T10788] bond0: entered promiscuous mode [ 225.654630][T10788] bond_slave_0: entered promiscuous mode [ 225.683407][T10788] bond_slave_1: entered promiscuous mode [ 226.673669][T10839] __nla_validate_parse: 11 callbacks suppressed [ 226.673691][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1686'. [ 226.798517][T10839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.852113][T10850] tipc: Enabled bearer , priority 0 [ 226.887573][T10850] syzkaller0: entered promiscuous mode [ 226.913101][T10850] syzkaller0: entered allmulticast mode [ 226.943880][T10850] tipc: Resetting bearer [ 226.971259][T10849] tipc: Resetting bearer [ 227.032602][T10849] tipc: Disabling bearer [ 227.218802][T10863] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1699'. [ 227.247983][T10866] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1698'. [ 227.273383][T10866] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1698'. [ 227.479410][T10877] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1700'. [ 227.500434][T10879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1703'. [ 227.551300][T10880] netlink: 'syz.1.1700': attribute type 1 has an invalid length. [ 227.571234][T10880] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1700'. [ 227.598594][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 228.026908][T10899] FAULT_INJECTION: forcing a failure. [ 228.026908][T10899] name failslab, interval 1, probability 0, space 0, times 0 [ 228.046644][T10902] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 228.060586][T10899] CPU: 1 UID: 0 PID: 10899 Comm: syz.2.1711 Not tainted syzkaller #0 PREEMPT(full) [ 228.060614][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.060626][T10899] Call Trace: [ 228.060634][T10899] [ 228.060643][T10899] dump_stack_lvl+0x189/0x250 [ 228.060673][T10899] ? __pfx____ratelimit+0x10/0x10 [ 228.060702][T10899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.060725][T10899] ? __pfx__printk+0x10/0x10 [ 228.060759][T10899] ? __pfx___might_resched+0x10/0x10 [ 228.060785][T10899] should_fail_ex+0x414/0x560 [ 228.060842][T10899] should_failslab+0xa8/0x100 [ 228.060872][T10899] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 228.060900][T10899] ? __alloc_skb+0x112/0x2d0 [ 228.060925][T10899] __alloc_skb+0x112/0x2d0 [ 228.060948][T10899] netlink_sendmsg+0x5c6/0xb30 [ 228.060979][T10899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.061002][T10899] ? aa_sock_msg_perm+0xf1/0x1d0 [ 228.061024][T10899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.061044][T10899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.061072][T10899] __sock_sendmsg+0x219/0x270 [ 228.061103][T10899] ____sys_sendmsg+0x505/0x830 [ 228.061132][T10899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.061165][T10899] ? import_iovec+0x74/0xa0 [ 228.061192][T10899] ___sys_sendmsg+0x21f/0x2a0 [ 228.061216][T10899] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.061281][T10899] ? __fget_files+0x2a/0x420 [ 228.061298][T10899] ? __fget_files+0x3a0/0x420 [ 228.061328][T10899] __x64_sys_sendmsg+0x19b/0x260 [ 228.061355][T10899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.061386][T10899] ? __pfx_ksys_write+0x10/0x10 [ 228.061408][T10899] ? rcu_is_watching+0x15/0xb0 [ 228.061433][T10899] ? do_syscall_64+0xbe/0x3b0 [ 228.061454][T10899] do_syscall_64+0xfa/0x3b0 [ 228.061470][T10899] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.061496][T10899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.061514][T10899] ? clear_bhb_loop+0x60/0xb0 [ 228.061536][T10899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.061554][T10899] RIP: 0033:0x7f829898eba9 [ 228.061571][T10899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.061586][T10899] RSP: 002b:00007f82997ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.061607][T10899] RAX: ffffffffffffffda RBX: 00007f8298bd5fa0 RCX: 00007f829898eba9 [ 228.061620][T10899] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 228.061631][T10899] RBP: 00007f82997ab090 R08: 0000000000000000 R09: 0000000000000000 [ 228.061642][T10899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.061654][T10899] R13: 00007f8298bd6038 R14: 00007f8298bd5fa0 R15: 00007ffd05f1f638 [ 228.061687][T10899] [ 228.532349][T10916] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1718'. [ 228.598990][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 228.640005][T10920] netlink: 'syz.2.1718': attribute type 1 has an invalid length. [ 228.693678][T10925] FAULT_INJECTION: forcing a failure. [ 228.693678][T10925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.769432][T10925] CPU: 0 UID: 0 PID: 10925 Comm: syz.1.1721 Not tainted syzkaller #0 PREEMPT(full) [ 228.769460][T10925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.769471][T10925] Call Trace: [ 228.769479][T10925] [ 228.769488][T10925] dump_stack_lvl+0x189/0x250 [ 228.769518][T10925] ? __pfx____ratelimit+0x10/0x10 [ 228.769547][T10925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.769569][T10925] ? __pfx__printk+0x10/0x10 [ 228.769596][T10925] ? __might_fault+0xb0/0x130 [ 228.769635][T10925] should_fail_ex+0x414/0x560 [ 228.769666][T10925] _copy_from_iter+0x1de/0x1790 [ 228.769695][T10925] ? rcu_is_watching+0x15/0xb0 [ 228.769716][T10925] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 228.769742][T10925] ? __pfx__copy_from_iter+0x10/0x10 [ 228.769765][T10925] ? __build_skb_around+0x257/0x3e0 [ 228.769787][T10925] ? netlink_sendmsg+0x642/0xb30 [ 228.769803][T10925] ? skb_put+0x11b/0x210 [ 228.769835][T10925] netlink_sendmsg+0x6b2/0xb30 [ 228.769864][T10925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.769887][T10925] ? aa_sock_msg_perm+0xf1/0x1d0 [ 228.769909][T10925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.769929][T10925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.769948][T10925] __sock_sendmsg+0x219/0x270 [ 228.769979][T10925] ____sys_sendmsg+0x505/0x830 [ 228.770008][T10925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.770040][T10925] ? import_iovec+0x74/0xa0 [ 228.770065][T10925] ___sys_sendmsg+0x21f/0x2a0 [ 228.770090][T10925] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.770154][T10925] ? __fget_files+0x2a/0x420 [ 228.770170][T10925] ? __fget_files+0x3a0/0x420 [ 228.770200][T10925] __x64_sys_sendmsg+0x19b/0x260 [ 228.770225][T10925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.770258][T10925] ? __pfx_ksys_write+0x10/0x10 [ 228.770280][T10925] ? rcu_is_watching+0x15/0xb0 [ 228.770305][T10925] ? do_syscall_64+0xbe/0x3b0 [ 228.770328][T10925] do_syscall_64+0xfa/0x3b0 [ 228.770344][T10925] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.770372][T10925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.770391][T10925] ? clear_bhb_loop+0x60/0xb0 [ 228.770421][T10925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.770439][T10925] RIP: 0033:0x7fa94e58eba9 [ 228.770457][T10925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.770474][T10925] RSP: 002b:00007fa94f4e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.770495][T10925] RAX: ffffffffffffffda RBX: 00007fa94e7d5fa0 RCX: 00007fa94e58eba9 [ 228.770510][T10925] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 228.770522][T10925] RBP: 00007fa94f4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 228.770534][T10925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.770545][T10925] R13: 00007fa94e7d6038 R14: 00007fa94e7d5fa0 R15: 00007ffff228f968 [ 228.770579][T10925] [ 229.466845][T10955] FAULT_INJECTION: forcing a failure. [ 229.466845][T10955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.471259][T10939] 8021q: adding VLAN 0 to HW filter on device bond7 [ 229.480142][T10955] CPU: 1 UID: 0 PID: 10955 Comm: syz.0.1732 Not tainted syzkaller #0 PREEMPT(full) [ 229.480167][T10955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.480177][T10955] Call Trace: [ 229.480185][T10955] [ 229.480193][T10955] dump_stack_lvl+0x189/0x250 [ 229.480219][T10955] ? __pfx____ratelimit+0x10/0x10 [ 229.480245][T10955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.480265][T10955] ? __pfx__printk+0x10/0x10 [ 229.480288][T10955] ? __might_fault+0xb0/0x130 [ 229.480322][T10955] should_fail_ex+0x414/0x560 [ 229.480349][T10955] _copy_from_user+0x2d/0xb0 [ 229.480370][T10955] sock_do_ioctl+0x182/0x300 [ 229.480395][T10955] ? __pfx_sock_do_ioctl+0x10/0x10 [ 229.480414][T10955] ? __lock_acquire+0xab9/0xd20 [ 229.480454][T10955] sock_ioctl+0x576/0x790 [ 229.480478][T10955] ? __pfx_sock_ioctl+0x10/0x10 [ 229.480499][T10955] ? __fget_files+0x2a/0x420 [ 229.480514][T10955] ? __fget_files+0x3a0/0x420 [ 229.480527][T10955] ? __fget_files+0x2a/0x420 [ 229.480545][T10955] ? bpf_lsm_file_ioctl+0x9/0x20 [ 229.480566][T10955] ? __pfx_sock_ioctl+0x10/0x10 [ 229.480586][T10955] __se_sys_ioctl+0xfc/0x170 [ 229.480610][T10955] do_syscall_64+0xfa/0x3b0 [ 229.480624][T10955] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.480648][T10955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.480665][T10955] ? clear_bhb_loop+0x60/0xb0 [ 229.480685][T10955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.480701][T10955] RIP: 0033:0x7fb529d8eba9 [ 229.480717][T10955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.480731][T10955] RSP: 002b:00007fb52ac6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.480750][T10955] RAX: ffffffffffffffda RBX: 00007fb529fd5fa0 RCX: 00007fb529d8eba9 [ 229.480762][T10955] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 229.480773][T10955] RBP: 00007fb52ac6e090 R08: 0000000000000000 R09: 0000000000000000 [ 229.480784][T10955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.480811][T10955] R13: 00007fb529fd6038 R14: 00007fb529fd5fa0 R15: 00007ffd5885cb68 [ 229.480841][T10955] [ 229.963064][T10961] syzkaller0: entered promiscuous mode [ 229.969241][T10961] syzkaller0: entered allmulticast mode [ 230.049837][T10964] wg1 speed is unknown, defaulting to 1000 [ 230.083339][T10973] netlink: 'syz.2.1736': attribute type 1 has an invalid length. [ 230.283421][T10984] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 230.388020][T10989] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20002 [ 230.547784][T10984] 8021q: adding VLAN 0 to HW filter on device bond8 [ 230.597586][T10982] netem: change failed [ 230.738823][T10988] veth3: entered promiscuous mode [ 230.770780][T10988] bond8: (slave veth3): Enslaving as an active interface with a down link [ 231.157985][T11022] netlink: 'syz.1.1752': attribute type 1 has an invalid length. [ 231.262613][T11026] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 231.362657][T11034] netlink: 'syz.3.1757': attribute type 24 has an invalid length. [ 231.699119][T11045] tipc: Enabled bearer , priority 0 [ 231.707848][T11045] syzkaller0: entered promiscuous mode [ 231.722715][T11045] syzkaller0: entered allmulticast mode [ 231.751199][T11047] __nla_validate_parse: 18 callbacks suppressed [ 231.751221][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 231.756284][T11045] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1759'. [ 231.822773][T11047] netlink: 'syz.0.1761': attribute type 1 has an invalid length. [ 231.839029][T11047] netlink: 'syz.0.1761': attribute type 2 has an invalid length. [ 231.935109][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'. [ 231.973689][T11045] tipc: Resetting bearer [ 232.038306][T11063] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1766'. [ 232.078614][T11063] netlink: 'syz.1.1766': attribute type 1 has an invalid length. [ 232.101958][T11063] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1766'. [ 232.132731][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'. [ 232.161972][T11044] tipc: Resetting bearer [ 232.234891][T11044] tipc: Disabling bearer [ 232.267818][T11074] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1770'. [ 232.277677][T11074] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 232.395632][T11080] FAULT_INJECTION: forcing a failure. [ 232.395632][T11080] name failslab, interval 1, probability 0, space 0, times 0 [ 232.444995][T11080] CPU: 0 UID: 0 PID: 11080 Comm: syz.0.1772 Not tainted syzkaller #0 PREEMPT(full) [ 232.445029][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.445041][T11080] Call Trace: [ 232.445049][T11080] [ 232.445058][T11080] dump_stack_lvl+0x189/0x250 [ 232.445088][T11080] ? __pfx____ratelimit+0x10/0x10 [ 232.445118][T11080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.445141][T11080] ? __pfx__printk+0x10/0x10 [ 232.445185][T11080] should_fail_ex+0x414/0x560 [ 232.445219][T11080] should_failslab+0xa8/0x100 [ 232.445249][T11080] __kmalloc_cache_noprof+0x70/0x3d0 [ 232.445276][T11080] ? sctp_add_bind_addr+0x8c/0x370 [ 232.445309][T11080] sctp_add_bind_addr+0x8c/0x370 [ 232.445342][T11080] sctp_copy_local_addr_list+0x30b/0x4e0 [ 232.445373][T11080] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 232.445400][T11080] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 232.445430][T11080] ? sctp_v6_is_any+0x64/0x80 [ 232.445449][T11080] ? sctp_copy_one_addr+0x93/0x360 [ 232.445481][T11080] sctp_bind_addr_copy+0xb3/0x3c0 [ 232.445509][T11080] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 232.445538][T11080] sctp_connect_new_asoc+0x2e0/0x690 [ 232.445563][T11080] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 232.445585][T11080] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 232.445606][T11080] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 232.445624][T11080] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 232.445646][T11080] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 232.445668][T11080] ? security_sctp_bind_connect+0x7e/0x2e0 [ 232.445698][T11080] sctp_sendmsg+0x155c/0x2810 [ 232.445734][T11080] ? __pfx_sctp_sendmsg+0x10/0x10 [ 232.445758][T11080] ? aa_sk_perm+0x81e/0x950 [ 232.445794][T11080] ? __pfx_aa_sk_perm+0x10/0x10 [ 232.445835][T11080] ? sock_rps_record_flow+0x19/0x410 [ 232.445864][T11080] ? inet_sendmsg+0x2f4/0x370 [ 232.445887][T11080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.445912][T11080] __sock_sendmsg+0x19c/0x270 [ 232.445943][T11080] __sys_sendto+0x3bd/0x520 [ 232.445967][T11080] ? __pfx___sys_sendto+0x10/0x10 [ 232.445983][T11080] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 232.446018][T11080] ? __fget_files+0x3a0/0x420 [ 232.446050][T11080] ? ksys_write+0x22a/0x250 [ 232.446077][T11080] ? __pfx_ksys_write+0x10/0x10 [ 232.446098][T11080] ? rcu_is_watching+0x15/0xb0 [ 232.446124][T11080] __x64_sys_sendto+0xde/0x100 [ 232.446148][T11080] do_syscall_64+0xfa/0x3b0 [ 232.446166][T11080] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.446193][T11080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.446212][T11080] ? clear_bhb_loop+0x60/0xb0 [ 232.446236][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.446255][T11080] RIP: 0033:0x7fb529d8eba9 [ 232.446273][T11080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.446289][T11080] RSP: 002b:00007fb52ac6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 232.446311][T11080] RAX: ffffffffffffffda RBX: 00007fb529fd5fa0 RCX: 00007fb529d8eba9 [ 232.446325][T11080] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 232.446337][T11080] RBP: 00007fb52ac6e090 R08: 0000200000000100 R09: 000000000000001c [ 232.446349][T11080] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000002 [ 232.446361][T11080] R13: 00007fb529fd6038 R14: 00007fb529fd5fa0 R15: 00007ffd5885cb68 [ 232.446397][T11080] [ 232.792148][T11084] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 232.850989][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 232.885375][T11090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1777'. [ 232.916834][T11085] bond7: (slave geneve2): making interface the new active one [ 232.933531][T11085] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 232.966589][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 232.975523][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 233.069176][T11097] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.1779'. [ 233.114451][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 233.166940][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 233.747312][T11131] FAULT_INJECTION: forcing a failure. [ 233.747312][T11131] name failslab, interval 1, probability 0, space 0, times 0 [ 233.801636][T11131] CPU: 0 UID: 0 PID: 11131 Comm: syz.1.1791 Not tainted syzkaller #0 PREEMPT(full) [ 233.801665][T11131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.801676][T11131] Call Trace: [ 233.801684][T11131] [ 233.801693][T11131] dump_stack_lvl+0x189/0x250 [ 233.801723][T11131] ? __pfx____ratelimit+0x10/0x10 [ 233.801751][T11131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.801775][T11131] ? __pfx__printk+0x10/0x10 [ 233.801805][T11131] ? __pfx___might_resched+0x10/0x10 [ 233.801823][T11131] ? fs_reclaim_acquire+0x7d/0x100 [ 233.801856][T11131] should_fail_ex+0x414/0x560 [ 233.801888][T11131] should_failslab+0xa8/0x100 [ 233.801917][T11131] __kmalloc_noprof+0xcb/0x4f0 [ 233.801942][T11131] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 233.801974][T11131] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 233.802005][T11131] genl_family_rcv_msg_doit+0xb8/0x300 [ 233.802035][T11131] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.802068][T11131] ? apparmor_capable+0x137/0x1b0 [ 233.802094][T11131] ? bpf_lsm_capable+0x9/0x20 [ 233.802131][T11131] ? security_capable+0x7e/0x2e0 [ 233.802165][T11131] genl_rcv_msg+0x60e/0x790 [ 233.802197][T11131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.802218][T11131] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 233.802239][T11131] ? __pfx_nl80211_connect+0x10/0x10 [ 233.802261][T11131] ? __pfx_nl80211_post_doit+0x10/0x10 [ 233.802284][T11131] ? __asan_memcpy+0x40/0x70 [ 233.802304][T11131] ? __pfx_ref_tracker_free+0x10/0x10 [ 233.802340][T11131] netlink_rcv_skb+0x208/0x470 [ 233.802366][T11131] ? __lock_acquire+0xab9/0xd20 [ 233.802394][T11131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.802419][T11131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.802472][T11131] ? down_read+0x1ad/0x2e0 [ 233.802496][T11131] genl_rcv+0x28/0x40 [ 233.802516][T11131] netlink_unicast+0x82f/0x9e0 [ 233.802554][T11131] ? __pfx_netlink_unicast+0x10/0x10 [ 233.802583][T11131] ? netlink_sendmsg+0x642/0xb30 [ 233.802599][T11131] ? skb_put+0x11b/0x210 [ 233.802624][T11131] netlink_sendmsg+0x805/0xb30 [ 233.802659][T11131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.802682][T11131] ? aa_sock_msg_perm+0xf1/0x1d0 [ 233.802703][T11131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.802722][T11131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.802742][T11131] __sock_sendmsg+0x219/0x270 [ 233.802772][T11131] ____sys_sendmsg+0x505/0x830 [ 233.802800][T11131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.802833][T11131] ? import_iovec+0x74/0xa0 [ 233.802859][T11131] ___sys_sendmsg+0x21f/0x2a0 [ 233.802884][T11131] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.802952][T11131] ? __fget_files+0x2a/0x420 [ 233.802968][T11131] ? __fget_files+0x3a0/0x420 [ 233.802998][T11131] __x64_sys_sendmsg+0x19b/0x260 [ 233.803024][T11131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.803058][T11131] ? __pfx_ksys_write+0x10/0x10 [ 233.803081][T11131] ? rcu_is_watching+0x15/0xb0 [ 233.803114][T11131] ? do_syscall_64+0xbe/0x3b0 [ 233.803138][T11131] do_syscall_64+0xfa/0x3b0 [ 233.803153][T11131] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.803181][T11131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.803199][T11131] ? clear_bhb_loop+0x60/0xb0 [ 233.803224][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.803242][T11131] RIP: 0033:0x7fa94e58eba9 [ 233.803259][T11131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.803275][T11131] RSP: 002b:00007fa94f4e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.803296][T11131] RAX: ffffffffffffffda RBX: 00007fa94e7d5fa0 RCX: 00007fa94e58eba9 [ 233.803310][T11131] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 233.803322][T11131] RBP: 00007fa94f4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.803334][T11131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.803345][T11131] R13: 00007fa94e7d6038 R14: 00007fa94e7d5fa0 R15: 00007ffff228f968 [ 233.803380][T11131] [ 234.321081][T11144] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 234.396546][T11147] netlink: 'syz.1.1798': attribute type 9 has an invalid length. [ 234.630876][T11158] tipc: Enabled bearer , priority 0 [ 234.687142][T11158] syzkaller0: entered promiscuous mode [ 234.711909][T11158] syzkaller0: entered allmulticast mode [ 234.790273][T11158] tipc: Resetting bearer [ 234.844386][T11172] FAULT_INJECTION: forcing a failure. [ 234.844386][T11172] name failslab, interval 1, probability 0, space 0, times 0 [ 234.903806][T11172] CPU: 0 UID: 0 PID: 11172 Comm: syz.4.1802 Not tainted syzkaller #0 PREEMPT(full) [ 234.903834][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.903846][T11172] Call Trace: [ 234.903854][T11172] [ 234.903862][T11172] dump_stack_lvl+0x189/0x250 [ 234.903891][T11172] ? __pfx____ratelimit+0x10/0x10 [ 234.903920][T11172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.903943][T11172] ? __pfx__printk+0x10/0x10 [ 234.903987][T11172] should_fail_ex+0x414/0x560 [ 234.904019][T11172] should_failslab+0xa8/0x100 [ 234.904057][T11172] __kmalloc_cache_noprof+0x70/0x3d0 [ 234.904082][T11172] ? sctp_add_bind_addr+0x8c/0x370 [ 234.904114][T11172] sctp_add_bind_addr+0x8c/0x370 [ 234.904146][T11172] sctp_copy_local_addr_list+0x30b/0x4e0 [ 234.904178][T11172] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 234.904204][T11172] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 234.904234][T11172] ? sctp_v6_is_any+0x64/0x80 [ 234.904253][T11172] ? sctp_copy_one_addr+0x93/0x360 [ 234.904284][T11172] sctp_bind_addr_copy+0xb3/0x3c0 [ 234.904312][T11172] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 234.904340][T11172] sctp_connect_new_asoc+0x2e0/0x690 [ 234.904364][T11172] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 234.904385][T11172] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 234.904405][T11172] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 234.904423][T11172] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 234.904444][T11172] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 234.904465][T11172] ? security_sctp_bind_connect+0x7e/0x2e0 [ 234.904495][T11172] sctp_sendmsg+0x155c/0x2810 [ 234.904530][T11172] ? __pfx_sctp_sendmsg+0x10/0x10 [ 234.904555][T11172] ? aa_sk_perm+0x81e/0x950 [ 234.904590][T11172] ? __pfx_aa_sk_perm+0x10/0x10 [ 234.904621][T11172] ? sock_rps_record_flow+0x19/0x410 [ 234.904650][T11172] ? inet_sendmsg+0x2f4/0x370 [ 234.904673][T11172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.904697][T11172] __sock_sendmsg+0x19c/0x270 [ 234.904728][T11172] __sys_sendto+0x3bd/0x520 [ 234.904751][T11172] ? __pfx___sys_sendto+0x10/0x10 [ 234.904766][T11172] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 234.904800][T11172] ? __fget_files+0x3a0/0x420 [ 234.904831][T11172] ? ksys_write+0x22a/0x250 [ 234.904860][T11172] ? __pfx_ksys_write+0x10/0x10 [ 234.904881][T11172] ? rcu_is_watching+0x15/0xb0 [ 234.904909][T11172] __x64_sys_sendto+0xde/0x100 [ 234.904932][T11172] do_syscall_64+0xfa/0x3b0 [ 234.904949][T11172] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.904976][T11172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.904995][T11172] ? clear_bhb_loop+0x60/0xb0 [ 234.905020][T11172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.905046][T11172] RIP: 0033:0x7f23ac78eba9 [ 234.905063][T11172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.905080][T11172] RSP: 002b:00007f23aa9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 234.905102][T11172] RAX: ffffffffffffffda RBX: 00007f23ac9d5fa0 RCX: 00007f23ac78eba9 [ 234.905115][T11172] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 234.905127][T11172] RBP: 00007f23aa9f6090 R08: 0000200000000100 R09: 000000000000001c [ 234.905140][T11172] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000002 [ 234.905151][T11172] R13: 00007f23ac9d6038 R14: 00007f23ac9d5fa0 R15: 00007ffda8f61258 [ 234.905186][T11172] [ 234.905503][T11157] tipc: Resetting bearer [ 235.282524][T11157] tipc: Disabling bearer [ 235.300873][T11178] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 235.311162][T11184] tipc: Enabling of bearer rejected, failed to enable media [ 235.558279][T11200] netlink: 'syz.3.1806': attribute type 11 has an invalid length. [ 235.579614][T11200] netlink: 'syz.3.1806': attribute type 11 has an invalid length. [ 235.642601][T11197] gtp0: entered promiscuous mode [ 235.647852][T11197] gtp0: entered allmulticast mode [ 236.337406][T11227] FAULT_INJECTION: forcing a failure. [ 236.337406][T11227] name failslab, interval 1, probability 0, space 0, times 0 [ 236.406944][T11227] CPU: 1 UID: 0 PID: 11227 Comm: syz.4.1819 Not tainted syzkaller #0 PREEMPT(full) [ 236.406972][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.406984][T11227] Call Trace: [ 236.406992][T11227] [ 236.407001][T11227] dump_stack_lvl+0x189/0x250 [ 236.407030][T11227] ? __pfx____ratelimit+0x10/0x10 [ 236.407058][T11227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.407081][T11227] ? __pfx__printk+0x10/0x10 [ 236.407115][T11227] ? __pfx___might_resched+0x10/0x10 [ 236.407133][T11227] ? fs_reclaim_acquire+0x7d/0x100 [ 236.407168][T11227] should_fail_ex+0x414/0x560 [ 236.407201][T11227] should_failslab+0xa8/0x100 [ 236.407231][T11227] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 236.407257][T11227] ? __alloc_skb+0x112/0x2d0 [ 236.407281][T11227] __alloc_skb+0x112/0x2d0 [ 236.407306][T11227] netlink_ack+0x146/0xa50 [ 236.407331][T11227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.407350][T11227] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 236.407373][T11227] ? __pfx_nl80211_post_doit+0x10/0x10 [ 236.407397][T11227] ? __asan_memcpy+0x40/0x70 [ 236.407418][T11227] ? __pfx_ref_tracker_free+0x10/0x10 [ 236.407455][T11227] netlink_rcv_skb+0x28c/0x470 [ 236.407481][T11227] ? __lock_acquire+0xab9/0xd20 [ 236.407509][T11227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.407534][T11227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.407587][T11227] ? down_read+0x1ad/0x2e0 [ 236.407610][T11227] genl_rcv+0x28/0x40 [ 236.407630][T11227] netlink_unicast+0x82f/0x9e0 [ 236.407669][T11227] ? __pfx_netlink_unicast+0x10/0x10 [ 236.407704][T11227] ? netlink_sendmsg+0x642/0xb30 [ 236.407719][T11227] ? skb_put+0x11b/0x210 [ 236.407743][T11227] netlink_sendmsg+0x805/0xb30 [ 236.407774][T11227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.407797][T11227] ? aa_sock_msg_perm+0xf1/0x1d0 [ 236.407819][T11227] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.407839][T11227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.407867][T11227] __sock_sendmsg+0x219/0x270 [ 236.407898][T11227] ____sys_sendmsg+0x505/0x830 [ 236.407928][T11227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.407962][T11227] ? import_iovec+0x74/0xa0 [ 236.407991][T11227] ___sys_sendmsg+0x21f/0x2a0 [ 236.408016][T11227] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.408084][T11227] ? __fget_files+0x2a/0x420 [ 236.408100][T11227] ? __fget_files+0x3a0/0x420 [ 236.408130][T11227] __x64_sys_sendmsg+0x19b/0x260 [ 236.408155][T11227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.408189][T11227] ? __pfx_ksys_write+0x10/0x10 [ 236.408211][T11227] ? rcu_is_watching+0x15/0xb0 [ 236.408238][T11227] ? do_syscall_64+0xbe/0x3b0 [ 236.408262][T11227] do_syscall_64+0xfa/0x3b0 [ 236.408278][T11227] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.408305][T11227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.408323][T11227] ? clear_bhb_loop+0x60/0xb0 [ 236.408348][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.408366][T11227] RIP: 0033:0x7f23ac78eba9 [ 236.408384][T11227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.408399][T11227] RSP: 002b:00007f23aa9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.408421][T11227] RAX: ffffffffffffffda RBX: 00007f23ac9d5fa0 RCX: 00007f23ac78eba9 [ 236.408434][T11227] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 236.408447][T11227] RBP: 00007f23aa9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.408459][T11227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.408470][T11227] R13: 00007f23ac9d6038 R14: 00007f23ac9d5fa0 R15: 00007ffda8f61258 [ 236.408503][T11227] [ 236.946607][T11243] __nla_validate_parse: 7 callbacks suppressed [ 236.946629][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 237.262043][T11256] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1834'. [ 237.311966][T11268] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1836'. [ 238.021840][T11301] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1843'. [ 238.346223][T11318] wg1 speed is unknown, defaulting to 1000 [ 238.446296][T11316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.608330][T11372] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1864'. [ 239.845066][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1868'. [ 239.870411][T11389] syzkaller1: entered promiscuous mode [ 239.880395][T11389] syzkaller1: entered allmulticast mode [ 240.015466][T11396] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1870'. [ 240.107429][T11402] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1873'. [ 240.159831][T11404] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1873'. [ 240.294196][T11410] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1876'. [ 240.596176][T11417] can: request_module (can-proto-0) failed. [ 240.919415][T11444] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 240.946575][T11446] FAULT_INJECTION: forcing a failure. [ 240.946575][T11446] name failslab, interval 1, probability 0, space 0, times 0 [ 240.963773][T11446] CPU: 0 UID: 0 PID: 11446 Comm: syz.0.1888 Not tainted syzkaller #0 PREEMPT(full) [ 240.963800][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.963820][T11446] Call Trace: [ 240.963828][T11446] [ 240.963838][T11446] dump_stack_lvl+0x189/0x250 [ 240.963867][T11446] ? __pfx____ratelimit+0x10/0x10 [ 240.963897][T11446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.963920][T11446] ? __pfx__printk+0x10/0x10 [ 240.963966][T11446] should_fail_ex+0x414/0x560 [ 240.963998][T11446] should_failslab+0xa8/0x100 [ 240.964028][T11446] __kmalloc_cache_noprof+0x70/0x3d0 [ 240.964053][T11446] ? sctp_add_bind_addr+0x8c/0x370 [ 240.964085][T11446] sctp_add_bind_addr+0x8c/0x370 [ 240.964117][T11446] sctp_copy_local_addr_list+0x30b/0x4e0 [ 240.964149][T11446] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 240.964176][T11446] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 240.964205][T11446] ? sctp_v6_is_any+0x64/0x80 [ 240.964226][T11446] ? sctp_copy_one_addr+0x93/0x360 [ 240.964258][T11446] sctp_bind_addr_copy+0xb3/0x3c0 [ 240.964287][T11446] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 240.964315][T11446] sctp_connect_new_asoc+0x2e0/0x690 [ 240.964340][T11446] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 240.964358][T11446] ? __local_bh_enable_ip+0x12d/0x1c0 [ 240.964386][T11446] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 240.964408][T11446] ? security_sctp_bind_connect+0x7e/0x2e0 [ 240.964437][T11446] sctp_sendmsg+0x155c/0x2810 [ 240.964474][T11446] ? __pfx_sctp_sendmsg+0x10/0x10 [ 240.964498][T11446] ? aa_sk_perm+0x81e/0x950 [ 240.964534][T11446] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.964566][T11446] ? sock_rps_record_flow+0x19/0x410 [ 240.964596][T11446] ? inet_sendmsg+0x2f4/0x370 [ 240.964626][T11446] __sock_sendmsg+0x19c/0x270 [ 240.964658][T11446] __sys_sendto+0x3bd/0x520 [ 240.964681][T11446] ? __pfx___sys_sendto+0x10/0x10 [ 240.964697][T11446] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 240.964732][T11446] ? __fget_files+0x3a0/0x420 [ 240.964764][T11446] ? ksys_write+0x22a/0x250 [ 240.964793][T11446] ? __pfx_ksys_write+0x10/0x10 [ 240.964822][T11446] ? rcu_is_watching+0x15/0xb0 [ 240.964849][T11446] __x64_sys_sendto+0xde/0x100 [ 240.964873][T11446] do_syscall_64+0xfa/0x3b0 [ 240.964890][T11446] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.964918][T11446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.964937][T11446] ? clear_bhb_loop+0x60/0xb0 [ 240.964961][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.964979][T11446] RIP: 0033:0x7fb529d8eba9 [ 240.964997][T11446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.965013][T11446] RSP: 002b:00007fb52ac6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 240.965036][T11446] RAX: ffffffffffffffda RBX: 00007fb529fd5fa0 RCX: 00007fb529d8eba9 [ 240.965050][T11446] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 240.965062][T11446] RBP: 00007fb52ac6e090 R08: 0000200000000080 R09: 000000000000001c [ 240.965075][T11446] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 240.965087][T11446] R13: 00007fb529fd6038 R14: 00007fb529fd5fa0 R15: 00007ffd5885cb68 [ 240.965123][T11446] [ 240.980007][T11444] FAULT_INJECTION: forcing a failure. [ 240.980007][T11444] name failslab, interval 1, probability 0, space 0, times 0 [ 241.302030][T11444] CPU: 0 UID: 0 PID: 11444 Comm: syz.2.1887 Not tainted syzkaller #0 PREEMPT(full) [ 241.302059][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.302070][T11444] Call Trace: [ 241.302079][T11444] [ 241.302087][T11444] dump_stack_lvl+0x189/0x250 [ 241.302117][T11444] ? __pfx____ratelimit+0x10/0x10 [ 241.302147][T11444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.302170][T11444] ? __pfx__printk+0x10/0x10 [ 241.302206][T11444] ? rcu_is_watching+0x15/0xb0 [ 241.302232][T11444] should_fail_ex+0x414/0x560 [ 241.302265][T11444] should_failslab+0xa8/0x100 [ 241.302295][T11444] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 241.302321][T11444] ? __alloc_skb+0x112/0x2d0 [ 241.302346][T11444] __alloc_skb+0x112/0x2d0 [ 241.302370][T11444] hci_mgmt_cmd+0x1ca/0xef0 [ 241.302392][T11444] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 241.302426][T11444] hci_sock_sendmsg+0x6ca/0xef0 [ 241.302455][T11444] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 241.302476][T11444] ? aa_sock_msg_perm+0xf1/0x1d0 [ 241.302497][T11444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.302518][T11444] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 241.302541][T11444] __sock_sendmsg+0x219/0x270 [ 241.302578][T11444] sock_write_iter+0x258/0x330 [ 241.302607][T11444] ? __pfx_sock_write_iter+0x10/0x10 [ 241.302647][T11444] ? bpf_lsm_file_permission+0x9/0x20 [ 241.302669][T11444] ? security_file_permission+0x75/0x290 [ 241.302705][T11444] vfs_write+0x5c6/0xb30 [ 241.302738][T11444] ? __pfx_sock_write_iter+0x10/0x10 [ 241.302764][T11444] ? __pfx_vfs_write+0x10/0x10 [ 241.302803][T11444] ? __fget_files+0x2a/0x420 [ 241.302840][T11444] ksys_write+0x145/0x250 [ 241.302870][T11444] ? __pfx_ksys_write+0x10/0x10 [ 241.302891][T11444] ? rcu_is_watching+0x15/0xb0 [ 241.302917][T11444] ? do_syscall_64+0xbe/0x3b0 [ 241.302941][T11444] do_syscall_64+0xfa/0x3b0 [ 241.302957][T11444] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.302985][T11444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.303004][T11444] ? clear_bhb_loop+0x60/0xb0 [ 241.303029][T11444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.303047][T11444] RIP: 0033:0x7f829898eba9 [ 241.303065][T11444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.303081][T11444] RSP: 002b:00007f82997ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.303104][T11444] RAX: ffffffffffffffda RBX: 00007f8298bd5fa0 RCX: 00007f829898eba9 [ 241.303118][T11444] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000005 [ 241.303130][T11444] RBP: 00007f82997ab090 R08: 0000000000000000 R09: 0000000000000000 [ 241.303142][T11444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.303153][T11444] R13: 00007f8298bd6038 R14: 00007f8298bd5fa0 R15: 00007ffd05f1f638 [ 241.303190][T11444] [ 242.091916][T11479] __nla_validate_parse: 7 callbacks suppressed [ 242.091937][T11479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1904'. [ 242.159899][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1908'. [ 242.738319][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 242.786587][T11515] FAULT_INJECTION: forcing a failure. [ 242.786587][T11515] name failslab, interval 1, probability 0, space 0, times 0 [ 242.844650][T11515] CPU: 1 UID: 0 PID: 11515 Comm: syz.0.1920 Not tainted syzkaller #0 PREEMPT(full) [ 242.844678][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.844690][T11515] Call Trace: [ 242.844697][T11515] [ 242.844713][T11515] dump_stack_lvl+0x189/0x250 [ 242.844750][T11515] ? __pfx____ratelimit+0x10/0x10 [ 242.844777][T11515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.844797][T11515] ? __pfx__printk+0x10/0x10 [ 242.844836][T11515] should_fail_ex+0x414/0x560 [ 242.844865][T11515] should_failslab+0xa8/0x100 [ 242.844891][T11515] __kmalloc_cache_noprof+0x70/0x3d0 [ 242.844914][T11515] ? sctp_add_bind_addr+0x8c/0x370 [ 242.844946][T11515] sctp_add_bind_addr+0x8c/0x370 [ 242.844977][T11515] sctp_copy_local_addr_list+0x30b/0x4e0 [ 242.845007][T11515] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 242.845033][T11515] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 242.845061][T11515] ? sctp_v6_is_any+0x64/0x80 [ 242.845081][T11515] ? sctp_copy_one_addr+0x93/0x360 [ 242.845110][T11515] sctp_bind_addr_copy+0xb3/0x3c0 [ 242.845138][T11515] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 242.845165][T11515] sctp_connect_new_asoc+0x2e0/0x690 [ 242.845187][T11515] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 242.845204][T11515] ? __local_bh_enable_ip+0x12d/0x1c0 [ 242.845231][T11515] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 242.845252][T11515] ? security_sctp_bind_connect+0x7e/0x2e0 [ 242.845280][T11515] sctp_sendmsg+0x155c/0x2810 [ 242.845315][T11515] ? __pfx_sctp_sendmsg+0x10/0x10 [ 242.845339][T11515] ? aa_sk_perm+0x81e/0x950 [ 242.845373][T11515] ? __pfx_aa_sk_perm+0x10/0x10 [ 242.845402][T11515] ? sock_rps_record_flow+0x19/0x410 [ 242.845431][T11515] ? inet_sendmsg+0x2f4/0x370 [ 242.845460][T11515] __sock_sendmsg+0x19c/0x270 [ 242.845490][T11515] __sys_sendto+0x3bd/0x520 [ 242.845513][T11515] ? __pfx___sys_sendto+0x10/0x10 [ 242.845529][T11515] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 242.845564][T11515] ? __fget_files+0x3a0/0x420 [ 242.845595][T11515] ? ksys_write+0x22a/0x250 [ 242.845624][T11515] ? __pfx_ksys_write+0x10/0x10 [ 242.845645][T11515] ? rcu_is_watching+0x15/0xb0 [ 242.845671][T11515] __x64_sys_sendto+0xde/0x100 [ 242.845695][T11515] do_syscall_64+0xfa/0x3b0 [ 242.845712][T11515] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.845749][T11515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.845769][T11515] ? clear_bhb_loop+0x60/0xb0 [ 242.845791][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.845810][T11515] RIP: 0033:0x7fb529d8eba9 [ 242.845828][T11515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.845844][T11515] RSP: 002b:00007fb52ac6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 242.845866][T11515] RAX: ffffffffffffffda RBX: 00007fb529fd5fa0 RCX: 00007fb529d8eba9 [ 242.845880][T11515] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 242.845893][T11515] RBP: 00007fb52ac6e090 R08: 0000200000000080 R09: 000000000000001c [ 242.845905][T11515] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 242.845917][T11515] R13: 00007fb529fd6038 R14: 00007fb529fd5fa0 R15: 00007ffd5885cb68 [ 242.845952][T11515] [ 243.411312][T11534] tipc: Enabled bearer , priority 0 [ 243.423876][T11534] syzkaller0: entered promiscuous mode [ 243.429463][T11534] syzkaller0: entered allmulticast mode [ 243.546129][T11536] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1926'. [ 243.571647][T11533] tipc: Resetting bearer [ 243.652633][T11533] tipc: Disabling bearer [ 243.749202][T11551] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1932'. [ 243.760958][T11536] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 243.760961][T11551] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 243.760987][T11536] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 243.902347][T11555] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 243.914290][T11555] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 243.923571][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.0.1933 Not tainted syzkaller #0 PREEMPT(full) [ 243.932940][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.942992][T11555] RIP: 0010:smc_diag_dump_proto+0x4c8/0x1ff0 [ 243.948980][T11555] Code: 80 3c 2f 00 74 08 48 89 df e8 b4 4b fa f6 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 89 4b fa f6 4d 8b 2c 24 49 83 c5 [ 243.968580][T11555] RSP: 0018:ffffc9001995ef40 EFLAGS: 00010a06 [ 243.974651][T11555] RAX: 1bd5a9d5a0000003 RBX: ffff88806cc03a40 RCX: ffff888033ef0000 [ 243.982622][T11555] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 243.990589][T11555] RBP: ffffc9001995f2b0 R08: ffff88806cc0345f R09: 1ffff1100d98068b [ 243.998555][T11555] R10: dffffc0000000000 R11: ffffed100d98068c R12: dead4ead00000018 [ 244.006521][T11555] R13: dffffc0000000000 R14: ffff88806cc03400 R15: 1ffff1100d980748 [ 244.014492][T11555] FS: 00007fb52ac4d6c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 244.023419][T11555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.029996][T11555] CR2: 000020000000e000 CR3: 000000007588c000 CR4: 00000000003526f0 [ 244.037971][T11555] Call Trace: [ 244.041247][T11555] [ 244.044186][T11555] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 244.049820][T11555] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 244.055365][T11555] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 244.060907][T11555] ? __phys_addr+0xd3/0x180 [ 244.065409][T11555] ? __kasan_kmalloc_large+0x85/0xa0 [ 244.070696][T11555] ? rcu_is_watching+0x15/0xb0 [ 244.075462][T11555] ? rcu_is_watching+0x15/0xb0 [ 244.080217][T11555] ? trace_kmalloc+0x1f/0xd0 [ 244.084806][T11555] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 244.091395][T11555] ? __build_skb_around+0x257/0x3e0 [ 244.096592][T11555] smc_diag_dump+0x59/0xa0 [ 244.101007][T11555] netlink_dump+0x6e1/0xe90 [ 244.105515][T11555] ? __pfx_netlink_dump+0x10/0x10 [ 244.110539][T11555] ? __netlink_lookup+0x752/0x810 [ 244.115561][T11555] ? netlink_lookup+0x30/0x200 [ 244.120325][T11555] ? netlink_lookup+0x30/0x200 [ 244.125089][T11555] ? netlink_lookup+0x30/0x200 [ 244.129856][T11555] __netlink_dump_start+0x5cb/0x7e0 [ 244.135057][T11555] smc_diag_handler_dump+0x178/0x210 [ 244.140341][T11555] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 244.146155][T11555] ? __pfx_smc_diag_dump+0x10/0x10 [ 244.151264][T11555] ? sock_diag_lock_handler+0x19/0x290 [ 244.156727][T11555] ? sock_diag_lock_handler+0x19/0x290 [ 244.162188][T11555] sock_diag_rcv_msg+0x4c9/0x600 [ 244.167129][T11555] netlink_rcv_skb+0x208/0x470 [ 244.171896][T11555] ? __lock_acquire+0xab9/0xd20 [ 244.176746][T11555] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 244.182204][T11555] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.187494][T11555] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.192694][T11555] netlink_unicast+0x82f/0x9e0 [ 244.197568][T11555] ? __pfx_netlink_unicast+0x10/0x10 [ 244.202851][T11555] ? netlink_sendmsg+0x642/0xb30 [ 244.207784][T11555] ? skb_put+0x11b/0x210 [ 244.212023][T11555] netlink_sendmsg+0x805/0xb30 [ 244.216786][T11555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.222091][T11555] ? aa_sock_msg_perm+0xf1/0x1d0 [ 244.227027][T11555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.232311][T11555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.237591][T11555] __sock_sendmsg+0x219/0x270 [ 244.242270][T11555] ____sys_sendmsg+0x505/0x830 [ 244.247053][T11555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.252338][T11555] ? import_iovec+0x74/0xa0 [ 244.256839][T11555] ___sys_sendmsg+0x21f/0x2a0 [ 244.261510][T11555] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.266723][T11555] ? __fget_files+0x2a/0x420 [ 244.271308][T11555] ? __fget_files+0x3a0/0x420 [ 244.275983][T11555] __x64_sys_sendmsg+0x19b/0x260 [ 244.280922][T11555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.286379][T11555] ? rcu_is_watching+0x15/0xb0 [ 244.291137][T11555] ? do_syscall_64+0xbe/0x3b0 [ 244.295806][T11555] do_syscall_64+0xfa/0x3b0 [ 244.300301][T11555] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.305501][T11555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.311598][T11555] ? clear_bhb_loop+0x60/0xb0 [ 244.316272][T11555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.322247][T11555] RIP: 0033:0x7fb529d8eba9 [ 244.326661][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.346355][T11555] RSP: 002b:00007fb52ac4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.354767][T11555] RAX: ffffffffffffffda RBX: 00007fb529fd6090 RCX: 00007fb529d8eba9 [ 244.362739][T11555] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000003 [ 244.370705][T11555] RBP: 00007fb529e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 244.378677][T11555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.386651][T11555] R13: 00007fb529fd6128 R14: 00007fb529fd6090 R15: 00007ffd5885cb68 [ 244.394622][T11555] [ 244.397636][T11555] Modules linked in: [ 244.402769][T11555] ---[ end trace 0000000000000000 ]--- [ 244.408230][T11555] RIP: 0010:smc_diag_dump_proto+0x4c8/0x1ff0 [ 244.414353][T11555] Code: 80 3c 2f 00 74 08 48 89 df e8 b4 4b fa f6 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 89 4b fa f6 4d 8b 2c 24 49 83 c5 [ 244.434157][T11555] RSP: 0018:ffffc9001995ef40 EFLAGS: 00010a06 [ 244.440226][T11555] RAX: 1bd5a9d5a0000003 RBX: ffff88806cc03a40 RCX: ffff888033ef0000 [ 244.448211][T11555] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 244.456201][T11555] RBP: ffffc9001995f2b0 R08: ffff88806cc0345f R09: 1ffff1100d98068b [ 244.464351][T11555] R10: dffffc0000000000 R11: ffffed100d98068c R12: dead4ead00000018 [ 244.472346][T11555] R13: dffffc0000000000 R14: ffff88806cc03400 R15: 1ffff1100d980748 [ 244.480337][T11555] FS: 00007fb52ac4d6c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 244.489283][T11555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.496048][T11555] CR2: 000020000000e000 CR3: 000000007588c000 CR4: 00000000003526f0 [ 244.504071][T11555] Kernel panic - not syncing: Fatal exception [ 244.510401][T11555] Kernel Offset: disabled [ 244.514744][T11555] Rebooting in 86400 seconds..