last executing test programs: 2.130303673s ago: executing program 4 (id=4296): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) (fail_nth: 4) 1.847521878s ago: executing program 2 (id=4298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=0x1000) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}], 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001640)={r11, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x6, 0x2, 0x614, 0x1, 0x15, 0x7, 0x4}, 0x9c) r12 = socket(0x2a, 0x6, 0x3c) setsockopt$MRT6_ADD_MFC(r12, 0x29, 0xd4, 0x0, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x1, 0x8, 0xffffe23b, 0x0, 0x9c, 0x0, 0x4, r11}, 0x20) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) sendmsg$TIPC_NL_MON_SET(r13, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="00022abd7000fedbdf2511000000100005800c0002800800020003000000895d55769feae092991f8b413edbf1da6e72e26aaee4cc75e5de405e36472d043db1588e1782e2901b5849e1a2f94dad6bdd27bfcb61b0c45188752b6e1298135c3e8fec8fdcd415e07d27fe00000000000000067fac86c2656eaa9b75a43dd311c187c52da5fe25cd7ae85631687da36b38471a70f4963a2076fc33c465c2dd2a29962d5eb6112cdc4bccc2498ff6e71b6421db8ed90380474f2d82c26f26000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20000001) 1.836409595s ago: executing program 0 (id=4299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x4}, 0x1c) sendto$inet6(r2, &(0x7f0000000480)="32780f64398323c37e7b311fcbc8d6756224d03ac5cb3838e854", 0xfffffffffffffe78, 0x20000800, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0xfffffff9}, 0x1c) shutdown(r2, 0x1) r3 = accept4(r2, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x0, 0xd2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x94, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0xb816, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, @in6={0xa, 0x4e24, 0x7, @private1, 0x6}, @in6={0xa, 0x4e20, 0x8f800000, @rand_addr=' \x01\x00', 0x2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000300)=0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) listen(r5, 0xea) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r7], 0xb) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000000)=0xbcc3, 0x4) 1.734093564s ago: executing program 4 (id=4300): socket$inet6(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) 1.667987382s ago: executing program 4 (id=4302): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffffc, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="87", 0xfed9, 0x0, 0x0, 0x0) shutdown(r0, 0x1) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4) 1.504770984s ago: executing program 4 (id=4304): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c00000052000100000000000000edcaf49900"/28], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001640)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x6, 0x2, 0x614, 0x1, 0x15, 0x7, 0x4}, 0x9c) 1.493032303s ago: executing program 3 (id=4305): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x40084) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.487521461s ago: executing program 1 (id=4306): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffd703000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.381249041s ago: executing program 3 (id=4307): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) (async) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4) (async) sendto$inet6(r5, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @mcast2}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) (async) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xbd2}, 0x1c) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e6ffffffffffffff00faa09eac98465d477d7b1a1b3f4123e662a2ee71ebf31bbe115a098bbb1e40576a8d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@delqdisc={0xe8, 0x25, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5, 0x8}, {0xfff2, 0x5}, {0x1, 0xd}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xf}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x295}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x54, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7c09}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48884}, 0x4000000) (async) recvmmsg$unix(r9, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) (async) close(0x4) 1.336805463s ago: executing program 1 (id=4308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) (fail_nth: 9) 812.828604ms ago: executing program 2 (id=4309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x40084) 755.535792ms ago: executing program 1 (id=4310): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 648.882084ms ago: executing program 0 (id=4311): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x33e}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x4000, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/189, 0xbd}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000a00)=""/229, 0xe5}], 0x4}, 0x100101}], 0x4, 0x40010020, 0x0) 606.7543ms ago: executing program 0 (id=4312): socket$inet6(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) 605.659635ms ago: executing program 2 (id=4313): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000710001000000", @ANYRES32=r5, @ANYBLOB], 0x30}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0xc, 0x13}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e20}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x2}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xff00}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x723}, @filter_kind_options=@f_route={{0xa}, {0x34, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc}, @TCA_ROUTE4_TO={0x8, 0x2, 0x4a}, @TCA_ROUTE4_TO={0x8, 0x2, 0x62}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1e}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa2}]}}]}, 0xa4}}, 0x40084) socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x32, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf4e) writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f0000050000000400000040000000030000000a0000000300000081000000dde61b3b7304000001000000060000000000000e"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, 0x0}, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x4, 0x4}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e24}}]}, 0x38}}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 562.054871ms ago: executing program 3 (id=4314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x4000000000004, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@private, 0x4d6, 0x33}, 0x0, @in6=@private1, 0x81, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) (fail_nth: 18) 496.699756ms ago: executing program 4 (id=4315): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}}, 0x84) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff11", 0xf, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001042dbd70000300000000000000", @ANYRES32=r4, @ANYBLOB="00800000551c0000380012800e00010069703665727370616e0000002400028004001200068e3600030000001400070000000000000000000000ffffac1e01017cc1458b717d59b4207cd0c53867a33291b9ab0172aef59d139621d81ea98ff17b210ae13a0a991506439baa59f2fc3008675888e1e9de7014da8c89483ef352e789827a25ec94df15f2f25b31fb4b3487285fbd7c58130900000000000000eecab1b65c6f3d6e018870aa9b03a7bee05b3010e2925e2ca0d7b6092248241ed4a90c570f6d8ffb0a61ea9d688166b095cbb0bbf122bbc902c00b6b96a92a5656f4cfd0736cfdf2171f0b6edcb3e3c610d322db6b0e0432b446b9888bd067fabe0e1b3a9ff4cfd8e5f527d7efe58aef"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x12) 393.954353ms ago: executing program 2 (id=4316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r1, 0x0, 0x0, 0x80000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r2, 0x0) 393.730016ms ago: executing program 3 (id=4317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x40084) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 360.676742ms ago: executing program 0 (id=4318): r0 = socket$inet(0x10, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 261.29506ms ago: executing program 2 (id=4319): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) unshare(0x22020400) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="c5b54a8196864be75b9005d231fc962e9bcbd4b10a7a6f9a65db7435870890642a8b8a6f81e1598c7e264e634366b6eeee63a5d0b6858e9bd2", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800010000000000"], 0x1c}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900000400050000000008000100ac1e000188000100ffffffff"], 0x2c}}, 0x0) sendfile(r4, r1, 0x0, 0x400000000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="282cd84b918e5f0b41375a49ff13", @ANYRES16=r7, @ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x4841}, 0x40040) r8 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000280005000100070000000900020073797a31000000000c00078005001400750000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x1, 0x1, {0xa, 0x4e23, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}}}, 0x3a) r10 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x2}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x2}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0x0) 260.604191ms ago: executing program 0 (id=4320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=ANY=[@ANYBLOB="79a2af47a058c3cb2fb5e67d2f8939", @ANYRES16=r1, @ANYBLOB="050327bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000000)=""/57, &(0x7f0000000100)=0x39) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fddbdf250100000008000100", @ANYRESHEX=r3, @ANYBLOB="4400028040"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x460d4) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x10001, @mcast2, 0xffff0216}, {0xa, 0x4e22, 0x7, @local, 0x90}, 0x0, {[0xb91, 0x3, 0xbf8, 0x0, 0x8, 0x7f, 0xb2fc, 0x80000000]}}, 0x5c) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x8, 0x1b1, @vifc_lcl_ifindex, @local}, 0x10) 258.838989ms ago: executing program 1 (id=4321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x3000000}, 0x0) 229.904613ms ago: executing program 3 (id=4322): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="32780f64398323c37e7b311fcbc8d6756224d03ac5cb3838e854", 0xfffffffffffffe78, 0x20000800, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback={0x241}, 0xfffffff9}, 0x1c) shutdown(r0, 0x1) 152.698902ms ago: executing program 4 (id=4323): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000080)=0x7, 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/181, 0xd1}], 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r7, @ANYRES64=r3, @ANYBLOB="c66d9b453daa41012e6197c0b53ecec4d6bcc88602c9b906ae4453e11e8267", @ANYRESDEC=r6, @ANYRES64, @ANYRES64=r4], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0xffffffffffffff20, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f00000000c0)=0x2000, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) 134.46987ms ago: executing program 2 (id=4324): pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) pipe(&(0x7f0000000400)) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40011}], 0x1, 0x2404c880) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) sendmsg$alg(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)="500f2ac90368480676883254cd1a0da8c6f69f49713e632fb5911f3dae110a98be1161b8daacfef30c09c7971006a62b7b2b6ec1d2dd5d14d00da0caa86298c3c435d9e21fd44013a73da386f650894e0851321ba29504a83044aebaa2932d7ba3e0b3db027c81da5b4144b0fa79dc3894e16dc0fd17af0525276e82e1c9f18a5e59206804264fdad83b3330699b9d3041c7b06b8ce7b4965794ffa8b72fcafc686004fb1d0cce6de95fbaea91d9ca230e9d25c59a969cf4ffeb0918b0a27b646a9e65da2c2fa6beb90afb90f55bf75f04a6713065f7fbdc0d", 0xd9}, {&(0x7f0000000500)="bff224045ddea9fe143a0c04f3b7f4a113311360c50ac1d282442c567bf950466e83d27fd64f40d8655c59a7e7aeb19749bf2f3008f0cd815509eacdecc7e8250403bcc3efc4fc604610f2a338fe59a7c3738e13e009188259bd22eb2197e84bddba73908a6f9282", 0x68}], 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f0, 0x44}, 0x4040080) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r4, 0x2) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OKEY={0x8, 0x18}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) close(r7) accept4(r4, 0x0, 0x0, 0x80800) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8001}]}, @dstopts={0x62}], @echo_reply}}}}}, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x0, 0x0, 0x20001001}, 0x40081) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 96.224515ms ago: executing program 1 (id=4325): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="38000000010003", 0x7) 24.871736ms ago: executing program 0 (id=4326): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4004}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000008c0)=""/260, 0x104}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000001e00)=""/4130, 0x1022}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000040)=""/146, 0x92}, {&(0x7f0000001040)=""/243, 0xf3}, {&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000b00)=""/75, 0x4b}], 0x8}, 0x9b3}, {{0x0, 0x0, 0x0}, 0x6130e429}], 0x4, 0x0, 0x0) 23.831888ms ago: executing program 3 (id=4327): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000710001000000", @ANYRES32=r5, @ANYBLOB], 0x30}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {}, {0xc, 0x13}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e20}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x2}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xff00}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x723}, @filter_kind_options=@f_route={{0xa}, {0x34, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc}, @TCA_ROUTE4_TO={0x8, 0x2, 0x4a}, @TCA_ROUTE4_TO={0x8, 0x2, 0x62}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1e}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa2}]}}]}, 0xa4}}, 0x40084) socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x32, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf4e) writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f0000050000000400000040000000030000000a0000000300000081000000dde61b3b7304000001000000060000000000000e"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, 0x0}, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x4, 0x4}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e24}}]}, 0x38}}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 0s ago: executing program 1 (id=4328): socket$inet6(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000", 0x17}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 476.323744][T16959] [ 476.781776][T16966] FAULT_INJECTION: forcing a failure. [ 476.781776][T16966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.837606][T16966] CPU: 0 UID: 0 PID: 16966 Comm: syz.1.3806 Not tainted syzkaller #0 PREEMPT(full) [ 476.837634][T16966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 476.837645][T16966] Call Trace: [ 476.837653][T16966] [ 476.837662][T16966] dump_stack_lvl+0x189/0x250 [ 476.837690][T16966] ? __pfx____ratelimit+0x10/0x10 [ 476.837711][T16966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.837734][T16966] ? __pfx__printk+0x10/0x10 [ 476.837761][T16966] ? __might_fault+0xb0/0x130 [ 476.837809][T16966] should_fail_ex+0x414/0x560 [ 476.837843][T16966] _copy_from_iter+0x1de/0x1790 [ 476.837874][T16966] ? rcu_is_watching+0x15/0xb0 [ 476.837894][T16966] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 476.837922][T16966] ? __pfx__copy_from_iter+0x10/0x10 [ 476.837947][T16966] ? __build_skb_around+0x257/0x3e0 [ 476.837974][T16966] ? skb_put+0x11b/0x210 [ 476.838000][T16966] pfkey_sendmsg+0x230/0x1090 [ 476.838029][T16966] ? __pfx___might_resched+0x10/0x10 [ 476.838046][T16966] ? __lock_acquire+0xab9/0xd20 [ 476.838081][T16966] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 476.838110][T16966] ? aa_sk_perm+0x81e/0x950 [ 476.838146][T16966] ? __pfx_aa_sk_perm+0x10/0x10 [ 476.838171][T16966] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 476.838197][T16966] ? aa_sock_msg_perm+0xf1/0x1d0 [ 476.838218][T16966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.838239][T16966] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 476.838263][T16966] __sock_sendmsg+0x21c/0x270 [ 476.838295][T16966] ____sys_sendmsg+0x505/0x830 [ 476.838325][T16966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.838359][T16966] ? import_iovec+0x74/0xa0 [ 476.838388][T16966] ___sys_sendmsg+0x21f/0x2a0 [ 476.838415][T16966] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.838478][T16966] ? __fget_files+0x2a/0x420 [ 476.838494][T16966] ? __fget_files+0x3a0/0x420 [ 476.838523][T16966] __x64_sys_sendmsg+0x19b/0x260 [ 476.838552][T16966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.838586][T16966] ? __pfx_ksys_write+0x10/0x10 [ 476.838610][T16966] ? rcu_is_watching+0x15/0xb0 [ 476.838634][T16966] ? do_syscall_64+0xbe/0x3b0 [ 476.838660][T16966] do_syscall_64+0xfa/0x3b0 [ 476.838680][T16966] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.838700][T16966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.838719][T16966] ? clear_bhb_loop+0x60/0xb0 [ 476.838743][T16966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.838761][T16966] RIP: 0033:0x7fcbd8f8eba9 [ 476.838786][T16966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.838803][T16966] RSP: 002b:00007fcbd9d95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.838825][T16966] RAX: ffffffffffffffda RBX: 00007fcbd91d6090 RCX: 00007fcbd8f8eba9 [ 476.838840][T16966] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000008 [ 476.838853][T16966] RBP: 00007fcbd9d95090 R08: 0000000000000000 R09: 0000000000000000 [ 476.838865][T16966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.838877][T16966] R13: 00007fcbd91d6128 R14: 00007fcbd91d6090 R15: 00007ffd16603ff8 [ 476.838909][T16966] [ 477.203411][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3811'. [ 477.212306][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3811'. [ 477.259889][T16975] FAULT_INJECTION: forcing a failure. [ 477.259889][T16975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.274128][T16975] CPU: 0 UID: 0 PID: 16975 Comm: syz.2.3813 Not tainted syzkaller #0 PREEMPT(full) [ 477.274154][T16975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.274166][T16975] Call Trace: [ 477.274174][T16975] [ 477.274182][T16975] dump_stack_lvl+0x189/0x250 [ 477.274210][T16975] ? __pfx____ratelimit+0x10/0x10 [ 477.274231][T16975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.274254][T16975] ? __pfx__printk+0x10/0x10 [ 477.274281][T16975] ? __might_fault+0xb0/0x130 [ 477.274320][T16975] should_fail_ex+0x414/0x560 [ 477.274354][T16975] _copy_from_iter+0x404/0x1790 [ 477.274374][T16975] ? trace_mm_page_alloc+0x3e/0x150 [ 477.274396][T16975] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 477.274425][T16975] ? __pfx__copy_from_iter+0x10/0x10 [ 477.274450][T16975] ? policy_nodemask+0x27c/0x720 [ 477.274489][T16975] ip_generic_getfrag+0xeb/0x2b0 [ 477.274523][T16975] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 477.274549][T16975] ? skb_page_frag_refill+0x199/0x320 [ 477.274586][T16975] __ip_append_data+0x213b/0x40c0 [ 477.274633][T16975] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 477.274699][T16975] ? __pfx___ip_append_data+0x10/0x10 [ 477.274723][T16975] ? ipv4_mtu+0x4b2/0x5c0 [ 477.274751][T16975] ? ip_setup_cork+0x577/0x9a0 [ 477.274780][T16975] ip_make_skb+0x1de/0x3f0 [ 477.274812][T16975] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 477.274838][T16975] ? __pfx_ip_make_skb+0x10/0x10 [ 477.274885][T16975] udp_sendmsg+0x1925/0x2170 [ 477.274932][T16975] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 477.274967][T16975] ? __pfx_udp_sendmsg+0x10/0x10 [ 477.274992][T16975] ? tomoyo_write_log2+0x250/0x910 [ 477.275021][T16975] ? tomoyo_supervisor+0x4b2/0x1480 [ 477.275088][T16975] udpv6_sendmsg+0xbf0/0x24b0 [ 477.275136][T16975] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 477.275170][T16975] ? __pfx___might_resched+0x10/0x10 [ 477.275208][T16975] ? aa_sk_perm+0x81e/0x950 [ 477.275251][T16975] ? inet_send_prepare+0x5c/0x270 [ 477.275282][T16975] ? inet6_sendmsg+0xe4/0x120 [ 477.275309][T16975] __sock_sendmsg+0xe5/0x270 [ 477.275341][T16975] ____sys_sendmsg+0x52d/0x830 [ 477.275372][T16975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.275406][T16975] ? import_iovec+0x74/0xa0 [ 477.275439][T16975] ___sys_sendmsg+0x21f/0x2a0 [ 477.275465][T16975] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.275529][T16975] ? __fget_files+0x2a/0x420 [ 477.275545][T16975] ? __fget_files+0x3a0/0x420 [ 477.275572][T16975] __sys_sendmmsg+0x227/0x430 [ 477.275602][T16975] ? __pfx___sys_sendmmsg+0x10/0x10 [ 477.275623][T16975] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 477.275672][T16975] ? ksys_write+0x22a/0x250 [ 477.275699][T16975] ? __pfx_ksys_write+0x10/0x10 [ 477.275721][T16975] ? rcu_is_watching+0x15/0xb0 [ 477.275748][T16975] __x64_sys_sendmmsg+0xa0/0xc0 [ 477.275774][T16975] do_syscall_64+0xfa/0x3b0 [ 477.275794][T16975] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.275813][T16975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.275832][T16975] ? clear_bhb_loop+0x60/0xb0 [ 477.275855][T16975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.275874][T16975] RIP: 0033:0x7f732738eba9 [ 477.275891][T16975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.275908][T16975] RSP: 002b:00007f73281c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 477.275929][T16975] RAX: ffffffffffffffda RBX: 00007f73275d5fa0 RCX: 00007f732738eba9 [ 477.275944][T16975] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: 0000000000000003 [ 477.275956][T16975] RBP: 00007f73281c1090 R08: 0000000000000000 R09: 0000000000000000 [ 477.275974][T16975] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 477.275987][T16975] R13: 00007f73275d6038 R14: 00007f73275d5fa0 R15: 00007fff304afc98 [ 477.276019][T16975] [ 477.709127][T16973] FAULT_INJECTION: forcing a failure. [ 477.709127][T16973] name failslab, interval 1, probability 0, space 0, times 0 [ 477.710037][T16980] lo: Caught tx_queue_len zero misconfig [ 477.722620][T16973] CPU: 0 UID: 0 PID: 16973 Comm: syz.4.3809 Not tainted syzkaller #0 PREEMPT(full) [ 477.722646][T16973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.722658][T16973] Call Trace: [ 477.722665][T16973] [ 477.722673][T16973] dump_stack_lvl+0x189/0x250 [ 477.722700][T16973] ? __pfx____ratelimit+0x10/0x10 [ 477.722720][T16973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.722747][T16973] ? __pfx__printk+0x10/0x10 [ 477.722773][T16973] ? skb_set_owner_w+0x25b/0x3a0 [ 477.722803][T16973] ? __lock_acquire+0xab9/0xd20 [ 477.722834][T16973] should_fail_ex+0x414/0x560 [ 477.722867][T16973] should_failslab+0xa8/0x100 [ 477.722896][T16973] __kmalloc_noprof+0xcb/0x4f0 [ 477.722926][T16973] ? ___neigh_create+0x6d5/0x2260 [ 477.722959][T16973] ___neigh_create+0x6d5/0x2260 [ 477.723013][T16973] ip_neigh_gw4+0x289/0x3b0 [ 477.723044][T16973] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 477.723069][T16973] ? __lock_acquire+0xab9/0xd20 [ 477.723105][T16973] ip_finish_output2+0x57a/0x1160 [ 477.723139][T16973] ? ip_finish_output2+0x452/0x1160 [ 477.723165][T16973] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 477.723190][T16973] ? __pfx_ip_finish_output2+0x10/0x10 [ 477.723217][T16973] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 477.723240][T16973] ? ip_skb_dst_mtu+0x866/0xab0 [ 477.723267][T16973] ? ip_finish_output+0x33a/0x3f0 [ 477.723295][T16973] ip_output+0x2a1/0x3c0 [ 477.723320][T16973] ? ip_output+0x60/0x3c0 [ 477.723345][T16973] ip_send_skb+0x74/0x100 [ 477.723372][T16973] udp_send_skb+0xaf1/0x14c0 [ 477.723421][T16973] udp_sendmsg+0x195a/0x2170 [ 477.723463][T16973] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 477.723491][T16973] ? __pfx_udp_sendmsg+0x10/0x10 [ 477.723551][T16973] ? __local_bh_enable_ip+0x12d/0x1c0 [ 477.723579][T16973] ? inet_sendmsg+0x14f/0x370 [ 477.723607][T16973] ? inet_sendmsg+0x29c/0x370 [ 477.723638][T16973] __sock_sendmsg+0x19c/0x270 [ 477.723669][T16973] ____sys_sendmsg+0x505/0x830 [ 477.723698][T16973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.723733][T16973] ? import_iovec+0x74/0xa0 [ 477.723761][T16973] ___sys_sendmsg+0x21f/0x2a0 [ 477.723787][T16973] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.723850][T16973] ? __fget_files+0x2a/0x420 [ 477.723865][T16973] ? __fget_files+0x3a0/0x420 [ 477.723893][T16973] __x64_sys_sendmsg+0x19b/0x260 [ 477.723925][T16973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.723960][T16973] ? __pfx_ksys_write+0x10/0x10 [ 477.723982][T16973] ? rcu_is_watching+0x15/0xb0 [ 477.724007][T16973] ? do_syscall_64+0xbe/0x3b0 [ 477.724032][T16973] do_syscall_64+0xfa/0x3b0 [ 477.724050][T16973] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.724069][T16973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.724088][T16973] ? clear_bhb_loop+0x60/0xb0 [ 477.724111][T16973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.724129][T16973] RIP: 0033:0x7f1d1438eba9 [ 477.724145][T16973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.724162][T16973] RSP: 002b:00007f1d152fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.724181][T16973] RAX: ffffffffffffffda RBX: 00007f1d145d5fa0 RCX: 00007f1d1438eba9 [ 477.724195][T16973] RDX: 0000000020000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 477.724207][T16973] RBP: 00007f1d152fc090 R08: 0000000000000000 R09: 0000000000000000 [ 477.724219][T16973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.724230][T16973] R13: 00007f1d145d6038 R14: 00007f1d145d5fa0 R15: 00007ffffc168a08 [ 477.724262][T16973] [ 477.927054][T16988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3818'. [ 478.109233][T16987] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3816'. [ 478.225281][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3821'. [ 478.234874][T16998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.303776][T17000] openvswitch: netlink: Tunnel attr 16369 out of range max 16 [ 478.314032][T17002] FAULT_INJECTION: forcing a failure. [ 478.314032][T17002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.337271][T17002] CPU: 1 UID: 0 PID: 17002 Comm: syz.3.3823 Not tainted syzkaller #0 PREEMPT(full) [ 478.337298][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.337310][T17002] Call Trace: [ 478.337317][T17002] [ 478.337325][T17002] dump_stack_lvl+0x189/0x250 [ 478.337352][T17002] ? __pfx____ratelimit+0x10/0x10 [ 478.337373][T17002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.337394][T17002] ? __pfx__printk+0x10/0x10 [ 478.337433][T17002] should_fail_ex+0x414/0x560 [ 478.337465][T17002] _copy_to_user+0x31/0xb0 [ 478.337492][T17002] simple_read_from_buffer+0xe1/0x170 [ 478.337523][T17002] proc_fail_nth_read+0x1b3/0x220 [ 478.337548][T17002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.337572][T17002] ? rw_verify_area+0x2a6/0x4d0 [ 478.337594][T17002] ? __lock_acquire+0xab9/0xd20 [ 478.337618][T17002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.337650][T17002] vfs_read+0x200/0xa30 [ 478.337673][T17002] ? fdget_pos+0x247/0x320 [ 478.337694][T17002] ? __pfx___mutex_lock+0x10/0x10 [ 478.337715][T17002] ? __pfx_vfs_read+0x10/0x10 [ 478.337741][T17002] ? __fget_files+0x2a/0x420 [ 478.337761][T17002] ? __fget_files+0x3a0/0x420 [ 478.337775][T17002] ? __fget_files+0x2a/0x420 [ 478.337801][T17002] ksys_read+0x145/0x250 [ 478.337827][T17002] ? __pfx_ksys_read+0x10/0x10 [ 478.337845][T17002] ? rcu_is_watching+0x15/0xb0 [ 478.337867][T17002] ? do_syscall_64+0xbe/0x3b0 [ 478.337890][T17002] do_syscall_64+0xfa/0x3b0 [ 478.337907][T17002] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.337924][T17002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.337942][T17002] ? clear_bhb_loop+0x60/0xb0 [ 478.337963][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.337981][T17002] RIP: 0033:0x7f30dd58d5bc [ 478.337999][T17002] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 478.338015][T17002] RSP: 002b:00007f30de4f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.338036][T17002] RAX: ffffffffffffffda RBX: 00007f30dd7d5fa0 RCX: 00007f30dd58d5bc [ 478.338050][T17002] RDX: 000000000000000f RSI: 00007f30de4f70a0 RDI: 0000000000000004 [ 478.338063][T17002] RBP: 00007f30de4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 478.338075][T17002] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 478.338087][T17002] R13: 00007f30dd7d6038 R14: 00007f30dd7d5fa0 R15: 00007ffcc98f51a8 [ 478.338120][T17002] [ 478.378480][T17008] FAULT_INJECTION: forcing a failure. [ 478.378480][T17008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.437363][T17011] FAULT_INJECTION: forcing a failure. [ 478.437363][T17011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.449940][T17008] CPU: 0 UID: 0 PID: 17008 Comm: syz.4.3825 Not tainted syzkaller #0 PREEMPT(full) [ 478.449965][T17008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.449977][T17008] Call Trace: [ 478.449985][T17008] [ 478.449993][T17008] dump_stack_lvl+0x189/0x250 [ 478.450020][T17008] ? __pfx____ratelimit+0x10/0x10 [ 478.450041][T17008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.450064][T17008] ? __pfx__printk+0x10/0x10 [ 478.450089][T17008] ? __might_fault+0xb0/0x130 [ 478.450128][T17008] should_fail_ex+0x414/0x560 [ 478.450161][T17008] _copy_from_user+0x2d/0xb0 [ 478.450191][T17008] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 478.450237][T17008] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 478.450273][T17008] ? trace_kmalloc+0x1f/0xd0 [ 478.450300][T17008] ip_generic_getfrag+0x12f/0x2b0 [ 478.450330][T17008] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 478.450360][T17008] ? skb_put+0x11b/0x210 [ 478.450384][T17008] __ip_append_data+0x3260/0x40c0 [ 478.450431][T17008] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 478.450478][T17008] ? __pfx___ip_append_data+0x10/0x10 [ 478.450502][T17008] ? ipv4_mtu+0x4b2/0x5c0 [ 478.450529][T17008] ? ip_setup_cork+0x577/0x9a0 [ 478.450557][T17008] ip_make_skb+0x1de/0x3f0 [ 478.450588][T17008] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 478.450614][T17008] ? __pfx_ip_make_skb+0x10/0x10 [ 478.450659][T17008] udp_sendmsg+0x1925/0x2170 [ 478.450688][T17008] ? process_measurement+0x72d/0x1a40 [ 478.450725][T17008] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 478.450753][T17008] ? __pfx_udp_sendmsg+0x10/0x10 [ 478.450809][T17008] ? __lock_acquire+0xab9/0xd20 [ 478.450859][T17008] udpv6_sendmsg+0xbf0/0x24b0 [ 478.450912][T17008] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 478.450946][T17008] ? __pfx___might_resched+0x10/0x10 [ 478.450986][T17008] ? aa_sk_perm+0x81e/0x950 [ 478.451028][T17008] ? inet_send_prepare+0x5c/0x270 [ 478.451059][T17008] ? inet6_sendmsg+0xe4/0x120 [ 478.451083][T17008] __sock_sendmsg+0xe5/0x270 [ 478.451115][T17008] sock_write_iter+0x258/0x330 [ 478.451144][T17008] ? __pfx_sock_write_iter+0x10/0x10 [ 478.451181][T17008] ? bpf_lsm_file_permission+0x9/0x20 [ 478.451204][T17008] ? security_file_permission+0x75/0x290 [ 478.451238][T17008] vfs_write+0x5c6/0xb30 [ 478.451267][T17008] ? __pfx_sock_write_iter+0x10/0x10 [ 478.451295][T17008] ? __pfx_vfs_write+0x10/0x10 [ 478.451330][T17008] ? __fget_files+0x2a/0x420 [ 478.451356][T17008] ksys_write+0x145/0x250 [ 478.451383][T17008] ? __pfx_ksys_write+0x10/0x10 [ 478.451405][T17008] ? rcu_is_watching+0x15/0xb0 [ 478.451429][T17008] ? do_syscall_64+0xbe/0x3b0 [ 478.451453][T17008] do_syscall_64+0xfa/0x3b0 [ 478.451472][T17008] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.451491][T17008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.451510][T17008] ? clear_bhb_loop+0x60/0xb0 [ 478.451533][T17008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.451550][T17008] RIP: 0033:0x7f1d1438eba9 [ 478.451567][T17008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.451583][T17008] RSP: 002b:00007f1d152fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 478.451603][T17008] RAX: ffffffffffffffda RBX: 00007f1d145d5fa0 RCX: 00007f1d1438eba9 [ 478.451616][T17008] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000003 [ 478.451628][T17008] RBP: 00007f1d152fc090 R08: 0000000000000000 R09: 0000000000000000 [ 478.451639][T17008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.451650][T17008] R13: 00007f1d145d6038 R14: 00007f1d145d5fa0 R15: 00007ffffc168a08 [ 478.451681][T17008] [ 478.486099][T16998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.493649][T17011] CPU: 1 UID: 0 PID: 17011 Comm: syz.2.3824 Not tainted syzkaller #0 PREEMPT(full) [ 478.493674][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.493686][T17011] Call Trace: [ 478.493695][T17011] [ 478.493703][T17011] dump_stack_lvl+0x189/0x250 [ 478.493730][T17011] ? __pfx____ratelimit+0x10/0x10 [ 478.493751][T17011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.493773][T17011] ? __pfx__printk+0x10/0x10 [ 478.493799][T17011] ? __might_fault+0xb0/0x130 [ 478.493837][T17011] should_fail_ex+0x414/0x560 [ 478.493870][T17011] _copy_from_user+0x2d/0xb0 [ 478.493896][T17011] kstrtouint_from_user+0xc4/0x170 [ 478.493919][T17011] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 478.493959][T17011] proc_fail_nth_write+0x88/0x200 [ 478.493980][T17011] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 478.494008][T17011] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 478.494031][T17011] vfs_write+0x27b/0xb30 [ 478.494066][T17011] ? __pfx_vfs_write+0x10/0x10 [ 478.494092][T17011] ? __fget_files+0x2a/0x420 [ 478.494114][T17011] ? __fget_files+0x3a0/0x420 [ 478.494129][T17011] ? __fget_files+0x2a/0x420 [ 478.494154][T17011] ksys_write+0x145/0x250 [ 478.494181][T17011] ? __pfx_ksys_write+0x10/0x10 [ 478.494201][T17011] ? rcu_is_watching+0x15/0xb0 [ 478.494225][T17011] ? do_syscall_64+0xbe/0x3b0 [ 478.494248][T17011] do_syscall_64+0xfa/0x3b0 [ 478.494267][T17011] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.494284][T17011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.494302][T17011] ? clear_bhb_loop+0x60/0xb0 [ 478.494325][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.494342][T17011] RIP: 0033:0x7f732738d65f [ 478.494359][T17011] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 478.494375][T17011] RSP: 002b:00007f73281a0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 478.494395][T17011] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f732738d65f [ 478.494408][T17011] RDX: 0000000000000001 RSI: 00007f73281a00a0 RDI: 0000000000000003 [ 478.494419][T17011] RBP: 00007f73281a0090 R08: 0000000000000000 R09: 0000000000000000 [ 478.494430][T17011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 478.494441][T17011] R13: 00007f73275d6128 R14: 00007f73275d6090 R15: 00007fff304afc98 [ 478.494474][T17011] [ 478.530646][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3822'. [ 478.707990][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 479.291981][T17019] vlan2: entered allmulticast mode [ 479.316129][T17019] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 479.400494][T17023] macvlan2: entered allmulticast mode [ 479.425442][T17023] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 479.439343][T17027] FAULT_INJECTION: forcing a failure. [ 479.439343][T17027] name failslab, interval 1, probability 0, space 0, times 0 [ 479.457747][T17027] CPU: 1 UID: 0 PID: 17027 Comm: syz.2.3832 Not tainted syzkaller #0 PREEMPT(full) [ 479.457774][T17027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.457787][T17027] Call Trace: [ 479.457794][T17027] [ 479.457802][T17027] dump_stack_lvl+0x189/0x250 [ 479.457830][T17027] ? __pfx____ratelimit+0x10/0x10 [ 479.457851][T17027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.457874][T17027] ? __pfx__printk+0x10/0x10 [ 479.457903][T17027] ? __lock_acquire+0xab9/0xd20 [ 479.457941][T17027] should_fail_ex+0x414/0x560 [ 479.457975][T17027] should_failslab+0xa8/0x100 [ 479.458005][T17027] kmem_cache_alloc_noprof+0x73/0x3c0 [ 479.458031][T17027] ? skb_clone+0x212/0x3a0 [ 479.458062][T17027] skb_clone+0x212/0x3a0 [ 479.458092][T17027] __netlink_deliver_tap+0x404/0x850 [ 479.458127][T17027] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.458151][T17027] netlink_deliver_tap+0x19c/0x1b0 [ 479.458174][T17027] netlink_unicast+0x7fa/0x9e0 [ 479.458213][T17027] ? __pfx_netlink_unicast+0x10/0x10 [ 479.458245][T17027] ? netlink_sendmsg+0x642/0xb30 [ 479.458264][T17027] ? skb_put+0x11b/0x210 [ 479.458290][T17027] netlink_sendmsg+0x805/0xb30 [ 479.458323][T17027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.458349][T17027] ? aa_sock_msg_perm+0xf1/0x1d0 [ 479.458373][T17027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.458394][T17027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.458417][T17027] __sock_sendmsg+0x21c/0x270 [ 479.458448][T17027] ____sys_sendmsg+0x505/0x830 [ 479.458488][T17027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.458522][T17027] ? import_iovec+0x74/0xa0 [ 479.458552][T17027] ___sys_sendmsg+0x21f/0x2a0 [ 479.458579][T17027] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.458639][T17027] ? __fget_files+0x2a/0x420 [ 479.458654][T17027] ? __fget_files+0x3a0/0x420 [ 479.458682][T17027] __x64_sys_sendmsg+0x19b/0x260 [ 479.458710][T17027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.458746][T17027] ? __pfx_ksys_write+0x10/0x10 [ 479.458770][T17027] ? rcu_is_watching+0x15/0xb0 [ 479.458797][T17027] ? do_syscall_64+0xbe/0x3b0 [ 479.458824][T17027] do_syscall_64+0xfa/0x3b0 [ 479.458845][T17027] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.458865][T17027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.458885][T17027] ? clear_bhb_loop+0x60/0xb0 [ 479.458910][T17027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.458929][T17027] RIP: 0033:0x7f732738eba9 [ 479.458948][T17027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.458967][T17027] RSP: 002b:00007f73281c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.458989][T17027] RAX: ffffffffffffffda RBX: 00007f73275d5fa0 RCX: 00007f732738eba9 [ 479.459005][T17027] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 479.459018][T17027] RBP: 00007f73281c1090 R08: 0000000000000000 R09: 0000000000000000 [ 479.459032][T17027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.459045][T17027] R13: 00007f73275d6038 R14: 00007f73275d5fa0 R15: 00007fff304afc98 [ 479.459079][T17027] [ 479.462119][T17028] FAULT_INJECTION: forcing a failure. [ 479.462119][T17028] name failslab, interval 1, probability 0, space 0, times 0 [ 479.780424][T17028] CPU: 0 UID: 0 PID: 17028 Comm: syz.3.3829 Not tainted syzkaller #0 PREEMPT(full) [ 479.780451][T17028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.780464][T17028] Call Trace: [ 479.780472][T17028] [ 479.780481][T17028] dump_stack_lvl+0x189/0x250 [ 479.780509][T17028] ? __pfx____ratelimit+0x10/0x10 [ 479.780531][T17028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.780554][T17028] ? __pfx__printk+0x10/0x10 [ 479.780585][T17028] ? __pfx___might_resched+0x10/0x10 [ 479.780605][T17028] ? fs_reclaim_acquire+0x7d/0x100 [ 479.780629][T17028] should_fail_ex+0x414/0x560 [ 479.780663][T17028] should_failslab+0xa8/0x100 [ 479.780693][T17028] kmem_cache_alloc_noprof+0x73/0x3c0 [ 479.780725][T17028] ? security_file_alloc+0x34/0x330 [ 479.780757][T17028] security_file_alloc+0x34/0x330 [ 479.780785][T17028] init_file+0x93/0x2f0 [ 479.780810][T17028] alloc_empty_file+0x6e/0x1d0 [ 479.780833][T17028] alloc_file_pseudo+0x13d/0x210 [ 479.780858][T17028] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 479.780877][T17028] ? evm_inode_alloc_security+0x40/0xb0 [ 479.780902][T17028] ? security_inode_alloc+0xd5/0x330 [ 479.780935][T17028] sock_alloc_file+0xb8/0x2e0 [ 479.780968][T17028] do_accept+0x34b/0x680 [ 479.780995][T17028] ? __pfx_do_accept+0x10/0x10 [ 479.781041][T17028] __sys_accept4+0x11c/0x1c0 [ 479.781065][T17028] ? __pfx___sys_accept4+0x10/0x10 [ 479.781086][T17028] ? __pfx_ksys_write+0x10/0x10 [ 479.781121][T17028] __x64_sys_accept+0x7d/0x90 [ 479.781144][T17028] do_syscall_64+0xfa/0x3b0 [ 479.781163][T17028] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.781183][T17028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.781202][T17028] ? clear_bhb_loop+0x60/0xb0 [ 479.781225][T17028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.781243][T17028] RIP: 0033:0x7f30dd58eba9 [ 479.781260][T17028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.781277][T17028] RSP: 002b:00007f30de4d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 479.781297][T17028] RAX: ffffffffffffffda RBX: 00007f30dd7d6090 RCX: 00007f30dd58eba9 [ 479.781312][T17028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 479.781324][T17028] RBP: 00007f30de4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 479.781336][T17028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.781347][T17028] R13: 00007f30dd7d6128 R14: 00007f30dd7d6090 R15: 00007ffcc98f51a8 [ 479.781380][T17028] [ 480.066900][T17037] tipc: Started in network mode [ 480.072622][T17037] tipc: Node identity 080211000001, cluster identity 4711 [ 480.090165][T17037] tipc: Enabled bearer , priority 0 [ 480.100208][T17042] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 480.113055][T17042] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 480.147425][T17030] tipc: Resetting bearer [ 480.386917][T17061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3839'. [ 480.418415][T17067] FAULT_INJECTION: forcing a failure. [ 480.418415][T17067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.450232][T17061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3839'. [ 480.464559][T17067] CPU: 1 UID: 0 PID: 17067 Comm: syz.3.3842 Not tainted syzkaller #0 PREEMPT(full) [ 480.464586][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 480.464599][T17067] Call Trace: [ 480.464607][T17067] [ 480.464616][T17067] dump_stack_lvl+0x189/0x250 [ 480.464645][T17067] ? __pfx____ratelimit+0x10/0x10 [ 480.464666][T17067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.464696][T17067] ? __pfx__printk+0x10/0x10 [ 480.464723][T17067] ? __might_fault+0xb0/0x130 [ 480.464763][T17067] should_fail_ex+0x414/0x560 [ 480.464797][T17067] _copy_from_iter+0x1de/0x1790 [ 480.464828][T17067] ? rcu_is_watching+0x15/0xb0 [ 480.464849][T17067] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 480.464877][T17067] ? __pfx__copy_from_iter+0x10/0x10 [ 480.464903][T17067] ? __build_skb_around+0x257/0x3e0 [ 480.464929][T17067] ? netlink_sendmsg+0x642/0xb30 [ 480.464949][T17067] ? skb_put+0x11b/0x210 [ 480.464975][T17067] netlink_sendmsg+0x6b2/0xb30 [ 480.465008][T17067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.465033][T17067] ? aa_sock_msg_perm+0xf1/0x1d0 [ 480.465056][T17067] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.465077][T17067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.465100][T17067] __sock_sendmsg+0x21c/0x270 [ 480.465133][T17067] ____sys_sendmsg+0x505/0x830 [ 480.465164][T17067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.465199][T17067] ? import_iovec+0x74/0xa0 [ 480.465228][T17067] ___sys_sendmsg+0x21f/0x2a0 [ 480.465256][T17067] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.465320][T17067] ? __fget_files+0x2a/0x420 [ 480.465337][T17067] ? __fget_files+0x3a0/0x420 [ 480.465366][T17067] __x64_sys_sendmsg+0x19b/0x260 [ 480.465394][T17067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.465430][T17067] ? __pfx_ksys_write+0x10/0x10 [ 480.465462][T17067] ? do_syscall_64+0xbe/0x3b0 [ 480.465488][T17067] do_syscall_64+0xfa/0x3b0 [ 480.465509][T17067] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.465528][T17067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.465548][T17067] ? clear_bhb_loop+0x60/0xb0 [ 480.465576][T17067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.465595][T17067] RIP: 0033:0x7f30dd58eba9 [ 480.465613][T17067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.465630][T17067] RSP: 002b:00007f30de4d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.465652][T17067] RAX: ffffffffffffffda RBX: 00007f30dd7d6090 RCX: 00007f30dd58eba9 [ 480.465667][T17067] RDX: 000000000004a810 RSI: 00002000000003c0 RDI: 0000000000000004 [ 480.465681][T17067] RBP: 00007f30de4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 480.465698][T17067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.465711][T17067] R13: 00007f30dd7d6128 R14: 00007f30dd7d6090 R15: 00007ffcc98f51a8 [ 480.465743][T17067] [ 480.470708][T17066] FAULT_INJECTION: forcing a failure. [ 480.470708][T17066] name failslab, interval 1, probability 0, space 0, times 0 [ 480.610758][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3839'. [ 480.618499][T17066] CPU: 1 UID: 0 PID: 17066 Comm: syz.4.3840 Not tainted syzkaller #0 PREEMPT(full) [ 480.618526][T17066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 480.618539][T17066] Call Trace: [ 480.618547][T17066] [ 480.618556][T17066] dump_stack_lvl+0x189/0x250 [ 480.618584][T17066] ? __pfx____ratelimit+0x10/0x10 [ 480.618605][T17066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.618628][T17066] ? __pfx__printk+0x10/0x10 [ 480.618651][T17066] ? genl_rcv+0x28/0x40 [ 480.618682][T17066] ? ____sys_sendmsg+0x505/0x830 [ 480.618706][T17066] ? __x64_sys_sendmsg+0x19b/0x260 [ 480.618741][T17066] should_fail_ex+0x414/0x560 [ 480.618774][T17066] should_failslab+0xa8/0x100 [ 480.618805][T17066] kmem_cache_alloc_noprof+0x73/0x3c0 [ 480.618830][T17066] ? skb_clone+0x212/0x3a0 [ 480.618860][T17066] skb_clone+0x212/0x3a0 [ 480.618889][T17066] __netlink_deliver_tap+0x404/0x850 [ 480.618923][T17066] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.618946][T17066] netlink_deliver_tap+0x19c/0x1b0 [ 480.618968][T17066] netlink_sendskb+0x68/0x140 [ 480.618999][T17066] netlink_unicast+0x397/0x9e0 [ 480.619026][T17066] ? __asan_memcpy+0x40/0x70 [ 480.619057][T17066] ? __pfx_netlink_unicast+0x10/0x10 [ 480.619096][T17066] netlink_rcv_skb+0x28c/0x470 [ 480.619115][T17066] ? __lock_acquire+0xab9/0xd20 [ 480.619143][T17066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 480.619170][T17066] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 480.619212][T17066] ? down_read+0x1ad/0x2e0 [ 480.619238][T17066] genl_rcv+0x28/0x40 [ 480.619260][T17066] netlink_unicast+0x82f/0x9e0 [ 480.619299][T17066] ? __pfx_netlink_unicast+0x10/0x10 [ 480.619331][T17066] ? netlink_sendmsg+0x642/0xb30 [ 480.619349][T17066] ? skb_put+0x11b/0x210 [ 480.619375][T17066] netlink_sendmsg+0x805/0xb30 [ 480.619406][T17066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.619431][T17066] ? aa_sock_msg_perm+0xf1/0x1d0 [ 480.619453][T17066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.619474][T17066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.619496][T17066] __sock_sendmsg+0x21c/0x270 [ 480.619529][T17066] ____sys_sendmsg+0x505/0x830 [ 480.619559][T17066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.619594][T17066] ? import_iovec+0x74/0xa0 [ 480.619624][T17066] ___sys_sendmsg+0x21f/0x2a0 [ 480.619651][T17066] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.619722][T17066] ? __fget_files+0x2a/0x420 [ 480.619739][T17066] ? __fget_files+0x3a0/0x420 [ 480.619767][T17066] __x64_sys_sendmsg+0x19b/0x260 [ 480.619795][T17066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.619830][T17066] ? __pfx_ksys_write+0x10/0x10 [ 480.619853][T17066] ? rcu_is_watching+0x15/0xb0 [ 480.619878][T17066] ? do_syscall_64+0xbe/0x3b0 [ 480.619904][T17066] do_syscall_64+0xfa/0x3b0 [ 480.619924][T17066] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.619943][T17066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.619963][T17066] ? clear_bhb_loop+0x60/0xb0 [ 480.619988][T17066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.620006][T17066] RIP: 0033:0x7f1d1438eba9 [ 480.620023][T17066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.620040][T17066] RSP: 002b:00007f1d152fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.620060][T17066] RAX: ffffffffffffffda RBX: 00007f1d145d5fa0 RCX: 00007f1d1438eba9 [ 480.620075][T17066] RDX: 0000000000048852 RSI: 0000200000001080 RDI: 0000000000000003 [ 480.620089][T17066] RBP: 00007f1d152fc090 R08: 0000000000000000 R09: 0000000000000000 [ 480.620101][T17066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.620113][T17066] R13: 00007f1d145d6038 R14: 00007f1d145d5fa0 R15: 00007ffffc168a08 [ 480.620146][T17066] [ 481.153415][T11275] tipc: Node number set to 134418688 [ 481.162898][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3839'. [ 481.427391][T17099] FAULT_INJECTION: forcing a failure. [ 481.427391][T17099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.473549][T17099] CPU: 1 UID: 0 PID: 17099 Comm: syz.2.3856 Not tainted syzkaller #0 PREEMPT(full) [ 481.473585][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 481.473598][T17099] Call Trace: [ 481.473606][T17099] [ 481.473616][T17099] dump_stack_lvl+0x189/0x250 [ 481.473644][T17099] ? __pfx____ratelimit+0x10/0x10 [ 481.473665][T17099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.473688][T17099] ? __pfx__printk+0x10/0x10 [ 481.473716][T17099] ? __might_fault+0xb0/0x130 [ 481.473755][T17099] should_fail_ex+0x414/0x560 [ 481.473790][T17099] _copy_from_user+0x2d/0xb0 [ 481.473817][T17099] ___sys_sendmsg+0x158/0x2a0 [ 481.473846][T17099] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.473917][T17099] ? __fget_files+0x2a/0x420 [ 481.473934][T17099] ? __fget_files+0x3a0/0x420 [ 481.473964][T17099] __x64_sys_sendmsg+0x19b/0x260 [ 481.473996][T17099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.474032][T17099] ? __pfx_ksys_write+0x10/0x10 [ 481.474056][T17099] ? rcu_is_watching+0x15/0xb0 [ 481.474082][T17099] ? do_syscall_64+0xbe/0x3b0 [ 481.474108][T17099] do_syscall_64+0xfa/0x3b0 [ 481.474128][T17099] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.474149][T17099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.474169][T17099] ? clear_bhb_loop+0x60/0xb0 [ 481.474193][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.474213][T17099] RIP: 0033:0x7f732738eba9 [ 481.474230][T17099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.474247][T17099] RSP: 002b:00007f73281c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.474268][T17099] RAX: ffffffffffffffda RBX: 00007f73275d5fa0 RCX: 00007f732738eba9 [ 481.474298][T17099] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000004 [ 481.474311][T17099] RBP: 00007f73281c1090 R08: 0000000000000000 R09: 0000000000000000 [ 481.474323][T17099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.474336][T17099] R13: 00007f73275d6038 R14: 00007f73275d5fa0 R15: 00007fff304afc98 [ 481.474385][T17099] [ 481.830438][T17111] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3859'. [ 482.585069][T17140] FAULT_INJECTION: forcing a failure. [ 482.585069][T17140] name failslab, interval 1, probability 0, space 0, times 0 [ 482.602113][T17140] CPU: 0 UID: 0 PID: 17140 Comm: syz.4.3866 Not tainted syzkaller #0 PREEMPT(full) [ 482.602140][T17140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.602153][T17140] Call Trace: [ 482.602161][T17140] [ 482.602170][T17140] dump_stack_lvl+0x189/0x250 [ 482.602197][T17140] ? __pfx____ratelimit+0x10/0x10 [ 482.602218][T17140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.602240][T17140] ? __pfx__printk+0x10/0x10 [ 482.602273][T17140] ? __pfx___might_resched+0x10/0x10 [ 482.602297][T17140] should_fail_ex+0x414/0x560 [ 482.602331][T17140] should_failslab+0xa8/0x100 [ 482.602366][T17140] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 482.602392][T17140] ? __alloc_skb+0x112/0x2d0 [ 482.602412][T17140] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 482.602441][T17140] __alloc_skb+0x112/0x2d0 [ 482.602479][T17140] __ip_append_data+0x2dae/0x40c0 [ 482.602526][T17140] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 482.602573][T17140] ? __pfx___ip_append_data+0x10/0x10 [ 482.602596][T17140] ? ipv4_mtu+0x4b2/0x5c0 [ 482.602621][T17140] ? ip_setup_cork+0x577/0x9a0 [ 482.602648][T17140] ip_make_skb+0x1de/0x3f0 [ 482.602678][T17140] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 482.602703][T17140] ? __pfx_ip_make_skb+0x10/0x10 [ 482.602748][T17140] udp_sendmsg+0x1925/0x2170 [ 482.602777][T17140] ? process_measurement+0x72d/0x1a40 [ 482.602813][T17140] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 482.602841][T17140] ? __pfx_udp_sendmsg+0x10/0x10 [ 482.602897][T17140] ? __lock_acquire+0xab9/0xd20 [ 482.602948][T17140] udpv6_sendmsg+0xbf0/0x24b0 [ 482.602995][T17140] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 482.603029][T17140] ? __pfx___might_resched+0x10/0x10 [ 482.603067][T17140] ? aa_sk_perm+0x81e/0x950 [ 482.603108][T17140] ? inet_send_prepare+0x5c/0x270 [ 482.603141][T17140] ? inet6_sendmsg+0xe4/0x120 [ 482.603167][T17140] __sock_sendmsg+0xe5/0x270 [ 482.603199][T17140] sock_write_iter+0x258/0x330 [ 482.603285][T17140] ? __pfx_sock_write_iter+0x10/0x10 [ 482.603321][T17140] ? bpf_lsm_file_permission+0x9/0x20 [ 482.603342][T17140] ? security_file_permission+0x75/0x290 [ 482.603375][T17140] vfs_write+0x5c6/0xb30 [ 482.603405][T17140] ? __pfx_sock_write_iter+0x10/0x10 [ 482.603432][T17140] ? __pfx_vfs_write+0x10/0x10 [ 482.603485][T17140] ? __fget_files+0x2a/0x420 [ 482.603513][T17140] ksys_write+0x145/0x250 [ 482.603542][T17140] ? __pfx_ksys_write+0x10/0x10 [ 482.603566][T17140] ? rcu_is_watching+0x15/0xb0 [ 482.603593][T17140] ? do_syscall_64+0xbe/0x3b0 [ 482.603620][T17140] do_syscall_64+0xfa/0x3b0 [ 482.603640][T17140] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.603660][T17140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.603681][T17140] ? clear_bhb_loop+0x60/0xb0 [ 482.603705][T17140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.603725][T17140] RIP: 0033:0x7f1d1438eba9 [ 482.603744][T17140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.603762][T17140] RSP: 002b:00007f1d152fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 482.603784][T17140] RAX: ffffffffffffffda RBX: 00007f1d145d5fa0 RCX: 00007f1d1438eba9 [ 482.603800][T17140] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000003 [ 482.603814][T17140] RBP: 00007f1d152fc090 R08: 0000000000000000 R09: 0000000000000000 [ 482.603828][T17140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.603841][T17140] R13: 00007f1d145d6038 R14: 00007f1d145d5fa0 R15: 00007ffffc168a08 [ 482.603874][T17140] [ 483.289750][T17162] FAULT_INJECTION: forcing a failure. [ 483.289750][T17162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.359112][T17162] CPU: 1 UID: 0 PID: 17162 Comm: syz.0.3873 Not tainted syzkaller #0 PREEMPT(full) [ 483.359142][T17162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 483.359154][T17162] Call Trace: [ 483.359162][T17162] [ 483.359171][T17162] dump_stack_lvl+0x189/0x250 [ 483.359199][T17162] ? __pfx____ratelimit+0x10/0x10 [ 483.359220][T17162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.359243][T17162] ? __pfx__printk+0x10/0x10 [ 483.359269][T17162] ? __might_fault+0xb0/0x130 [ 483.359308][T17162] should_fail_ex+0x414/0x560 [ 483.359343][T17162] _copy_from_user+0x2d/0xb0 [ 483.359370][T17162] get_timespec64+0x8e/0x1a0 [ 483.359405][T17162] ? __pfx_get_timespec64+0x10/0x10 [ 483.359444][T17162] __x64_sys_recvmmsg+0x143/0x240 [ 483.359475][T17162] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 483.359500][T17162] ? rcu_is_watching+0x15/0xb0 [ 483.359526][T17162] ? do_syscall_64+0xbe/0x3b0 [ 483.359553][T17162] do_syscall_64+0xfa/0x3b0 [ 483.359573][T17162] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.359593][T17162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.359612][T17162] ? clear_bhb_loop+0x60/0xb0 [ 483.359636][T17162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.359655][T17162] RIP: 0033:0x7f3ca9d8eba9 [ 483.359673][T17162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.359691][T17162] RSP: 002b:00007f3caab59038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 483.359712][T17162] RAX: ffffffffffffffda RBX: 00007f3ca9fd5fa0 RCX: 00007f3ca9d8eba9 [ 483.359728][T17162] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 483.359742][T17162] RBP: 00007f3caab59090 R08: 0000200000003700 R09: 0000000000000000 [ 483.359755][T17162] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 483.359768][T17162] R13: 00007f3ca9fd6038 R14: 00007f3ca9fd5fa0 R15: 00007ffec6919df8 [ 483.359801][T17162] [ 483.816810][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3879'. [ 483.835356][T17175] tc_dump_action: action bad kind [ 483.903869][T17181] FAULT_INJECTION: forcing a failure. [ 483.903869][T17181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.943821][T17181] CPU: 0 UID: 0 PID: 17181 Comm: syz.0.3881 Not tainted syzkaller #0 PREEMPT(full) [ 483.943850][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 483.943862][T17181] Call Trace: [ 483.943871][T17181] [ 483.943879][T17181] dump_stack_lvl+0x189/0x250 [ 483.943907][T17181] ? __pfx____ratelimit+0x10/0x10 [ 483.943929][T17181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.943952][T17181] ? __pfx__printk+0x10/0x10 [ 483.943979][T17181] ? __might_fault+0xb0/0x130 [ 483.944018][T17181] should_fail_ex+0x414/0x560 [ 483.944053][T17181] _copy_to_iter+0x589/0x1790 [ 483.944092][T17181] ? __pfx__copy_to_iter+0x10/0x10 [ 483.944112][T17181] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 483.944152][T17181] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 483.944185][T17181] __skb_datagram_iter+0xf8/0x990 [ 483.944213][T17181] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 483.944246][T17181] skb_copy_datagram_iter+0xc5/0x230 [ 483.944274][T17181] netlink_recvmsg+0x2ab/0xa30 [ 483.944305][T17181] ? __pfx_netlink_recvmsg+0x10/0x10 [ 483.944330][T17181] ? aa_sock_msg_perm+0xf1/0x1d0 [ 483.944352][T17181] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 483.944372][T17181] ? security_socket_recvmsg+0x7e/0x2e0 [ 483.944395][T17181] ? __pfx_netlink_recvmsg+0x10/0x10 [ 483.944416][T17181] sock_recvmsg+0x22c/0x270 [ 483.944448][T17181] ____sys_recvmsg+0x1c9/0x460 [ 483.944480][T17181] ? __pfx_____sys_recvmsg+0x10/0x10 [ 483.944517][T17181] ? import_iovec+0x74/0xa0 [ 483.944544][T17181] ___sys_recvmsg+0x1b5/0x510 [ 483.944574][T17181] ? __pfx____sys_recvmsg+0x10/0x10 [ 483.944622][T17181] ? __fget_files+0x3a0/0x420 [ 483.944649][T17181] do_recvmmsg+0x307/0x770 [ 483.944682][T17181] ? __pfx_do_recvmmsg+0x10/0x10 [ 483.944721][T17181] ? _copy_from_user+0x94/0xb0 [ 483.944763][T17181] __x64_sys_recvmmsg+0x1af/0x240 [ 483.944789][T17181] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 483.944813][T17181] ? rcu_is_watching+0x15/0xb0 [ 483.944836][T17181] ? do_syscall_64+0xbe/0x3b0 [ 483.944864][T17181] do_syscall_64+0xfa/0x3b0 [ 483.944883][T17181] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.944902][T17181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.944921][T17181] ? clear_bhb_loop+0x60/0xb0 [ 483.944942][T17181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.944960][T17181] RIP: 0033:0x7f3ca9d8eba9 [ 483.944978][T17181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.944994][T17181] RSP: 002b:00007f3caab59038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 483.945014][T17181] RAX: ffffffffffffffda RBX: 00007f3ca9fd5fa0 RCX: 00007f3ca9d8eba9 [ 483.945028][T17181] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 483.945041][T17181] RBP: 00007f3caab59090 R08: 0000200000003700 R09: 0000000000000000 [ 483.945055][T17181] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 483.945068][T17181] R13: 00007f3ca9fd6038 R14: 00007f3ca9fd5fa0 R15: 00007ffec6919df8 [ 483.945096][T17181] [ 484.625284][T17216] tipc: Enabling of bearer rejected, already enabled [ 484.658515][T17216] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 484.768325][T17222] FAULT_INJECTION: forcing a failure. [ 484.768325][T17222] name failslab, interval 1, probability 0, space 0, times 0 [ 484.822937][T17222] CPU: 0 UID: 0 PID: 17222 Comm: syz.0.3896 Not tainted syzkaller #0 PREEMPT(full) [ 484.822964][T17222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.822976][T17222] Call Trace: [ 484.822985][T17222] [ 484.822993][T17222] dump_stack_lvl+0x189/0x250 [ 484.823028][T17222] ? __pfx____ratelimit+0x10/0x10 [ 484.823050][T17222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.823072][T17222] ? __pfx__printk+0x10/0x10 [ 484.823103][T17222] ? __pfx___might_resched+0x10/0x10 [ 484.823127][T17222] should_fail_ex+0x414/0x560 [ 484.823158][T17222] should_failslab+0xa8/0x100 [ 484.823189][T17222] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 484.823216][T17222] ? __alloc_skb+0x112/0x2d0 [ 484.823242][T17222] __alloc_skb+0x112/0x2d0 [ 484.823264][T17222] netlink_sendmsg+0x5c6/0xb30 [ 484.823295][T17222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.823318][T17222] ? aa_sock_msg_perm+0xf1/0x1d0 [ 484.823341][T17222] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.823361][T17222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.823384][T17222] __sock_sendmsg+0x21c/0x270 [ 484.823416][T17222] ____sys_sendmsg+0x505/0x830 [ 484.823445][T17222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.823480][T17222] ? import_iovec+0x74/0xa0 [ 484.823507][T17222] ___sys_sendmsg+0x21f/0x2a0 [ 484.823534][T17222] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.823594][T17222] ? __fget_files+0x2a/0x420 [ 484.823611][T17222] ? __fget_files+0x3a0/0x420 [ 484.823636][T17222] __x64_sys_sendmsg+0x19b/0x260 [ 484.823662][T17222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.823693][T17222] ? __pfx_ksys_write+0x10/0x10 [ 484.823716][T17222] ? rcu_is_watching+0x15/0xb0 [ 484.823738][T17222] ? do_syscall_64+0xbe/0x3b0 [ 484.823760][T17222] do_syscall_64+0xfa/0x3b0 [ 484.823777][T17222] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.823794][T17222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.823811][T17222] ? clear_bhb_loop+0x60/0xb0 [ 484.823831][T17222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.823848][T17222] RIP: 0033:0x7f3ca9d8eba9 [ 484.823863][T17222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.823878][T17222] RSP: 002b:00007f3caab59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.823897][T17222] RAX: ffffffffffffffda RBX: 00007f3ca9fd5fa0 RCX: 00007f3ca9d8eba9 [ 484.823910][T17222] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000004 [ 484.823921][T17222] RBP: 00007f3caab59090 R08: 0000000000000000 R09: 0000000000000000 [ 484.823933][T17222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.823943][T17222] R13: 00007f3ca9fd6038 R14: 00007f3ca9fd5fa0 R15: 00007ffec6919df8 [ 484.823974][T17222] [ 485.149833][T17226] FAULT_INJECTION: forcing a failure. [ 485.149833][T17226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.168521][T17226] CPU: 0 UID: 0 PID: 17226 Comm: syz.4.3899 Not tainted syzkaller #0 PREEMPT(full) [ 485.168548][T17226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.168560][T17226] Call Trace: [ 485.168568][T17226] [ 485.168576][T17226] dump_stack_lvl+0x189/0x250 [ 485.168602][T17226] ? __pfx____ratelimit+0x10/0x10 [ 485.168621][T17226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.168644][T17226] ? __pfx__printk+0x10/0x10 [ 485.168683][T17226] should_fail_ex+0x414/0x560 [ 485.168717][T17226] _copy_to_user+0x31/0xb0 [ 485.168745][T17226] simple_read_from_buffer+0xe1/0x170 [ 485.168779][T17226] proc_fail_nth_read+0x1b3/0x220 [ 485.168804][T17226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.168828][T17226] ? rw_verify_area+0x2a6/0x4d0 [ 485.168852][T17226] ? __lock_acquire+0xab9/0xd20 [ 485.168878][T17226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.168902][T17226] vfs_read+0x200/0xa30 [ 485.168925][T17226] ? fdget_pos+0x247/0x320 [ 485.168945][T17226] ? __pfx___mutex_lock+0x10/0x10 [ 485.168968][T17226] ? __pfx_vfs_read+0x10/0x10 [ 485.169002][T17226] ? __fget_files+0x2a/0x420 [ 485.169023][T17226] ? __fget_files+0x3a0/0x420 [ 485.169039][T17226] ? __fget_files+0x2a/0x420 [ 485.169065][T17226] ksys_read+0x145/0x250 [ 485.169092][T17226] ? __pfx_ksys_read+0x10/0x10 [ 485.169113][T17226] ? rcu_is_watching+0x15/0xb0 [ 485.169139][T17226] ? do_syscall_64+0xbe/0x3b0 [ 485.169164][T17226] do_syscall_64+0xfa/0x3b0 [ 485.169184][T17226] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.169204][T17226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.169224][T17226] ? clear_bhb_loop+0x60/0xb0 [ 485.169249][T17226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.169268][T17226] RIP: 0033:0x7f1d1438d5bc [ 485.169285][T17226] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 485.169302][T17226] RSP: 002b:00007f1d152fc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.169323][T17226] RAX: ffffffffffffffda RBX: 00007f1d145d5fa0 RCX: 00007f1d1438d5bc [ 485.169339][T17226] RDX: 000000000000000f RSI: 00007f1d152fc0a0 RDI: 0000000000000004 [ 485.169352][T17226] RBP: 00007f1d152fc090 R08: 0000000000000000 R09: 0000000000000000 [ 485.169365][T17226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.169378][T17226] R13: 00007f1d145d6038 R14: 00007f1d145d5fa0 R15: 00007ffffc168a08 [ 485.169409][T17226] [ 485.208172][T17234] netlink: 'syz.0.3901': attribute type 11 has an invalid length. [ 485.321240][T17235] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 485.344499][T17234] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3901'. [ 485.502160][T17238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.517414][T17241] dvmrp0: entered allmulticast mode [ 485.527852][T17238] netlink: 'syz.4.3902': attribute type 2 has an invalid length. [ 485.536205][T17238] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3902'. [ 485.584781][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3905'. [ 486.030725][T17279] netlink: 'syz.3.3915': attribute type 1 has an invalid length. [ 486.082016][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3915'. [ 486.117755][T17279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.216592][T17291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3918'. [ 486.250574][T17280] bond1 (unregistering): Released all slaves [ 486.362113][T17245] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 486.422218][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3920'. [ 486.452584][T17300] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3922'. [ 486.507534][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3923'. [ 486.570844][T17307] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 486.591603][T17310] FAULT_INJECTION: forcing a failure. [ 486.591603][T17310] name failslab, interval 1, probability 0, space 0, times 0 [ 486.613742][T17310] CPU: 0 UID: 0 PID: 17310 Comm: syz.1.3926 Not tainted syzkaller #0 PREEMPT(full) [ 486.613770][T17310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.613784][T17310] Call Trace: [ 486.613792][T17310] [ 486.613818][T17310] dump_stack_lvl+0x189/0x250 [ 486.613845][T17310] ? __pfx____ratelimit+0x10/0x10 [ 486.613867][T17310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.613892][T17310] ? __pfx__printk+0x10/0x10 [ 486.613926][T17310] ? __pfx___might_resched+0x10/0x10 [ 486.613952][T17310] should_fail_ex+0x414/0x560 [ 486.613988][T17310] should_failslab+0xa8/0x100 [ 486.614019][T17310] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 486.614047][T17310] ? __alloc_skb+0x112/0x2d0 [ 486.614081][T17310] __alloc_skb+0x112/0x2d0 [ 486.614108][T17310] __ip6_append_data+0x2c16/0x3f30 [ 486.614166][T17310] ? __pfx_raw6_getfrag+0x10/0x10 [ 486.614210][T17310] ? __pfx___ip6_append_data+0x10/0x10 [ 486.614237][T17310] ? __pfx_ip6_mtu+0x10/0x10 [ 486.614276][T17310] ip6_append_data+0x1c4/0x380 [ 486.614310][T17310] ? __pfx_raw6_getfrag+0x10/0x10 [ 486.614334][T17310] rawv6_sendmsg+0x127a/0x1820 [ 486.614372][T17310] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 486.614415][T17310] ? __lock_acquire+0xab9/0xd20 [ 486.614442][T17310] ? __pfx_aa_sk_perm+0x10/0x10 [ 486.614476][T17310] ? sock_rps_record_flow+0x19/0x410 [ 486.614507][T17310] ? inet_sendmsg+0x2f4/0x370 [ 486.614534][T17310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.614561][T17310] __sock_sendmsg+0x19c/0x270 [ 486.614593][T17310] ____sys_sendmsg+0x52d/0x830 [ 486.614623][T17310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.614658][T17310] ? import_iovec+0x74/0xa0 [ 486.614688][T17310] ___sys_sendmsg+0x21f/0x2a0 [ 486.614716][T17310] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.614782][T17310] ? __fget_files+0x2a/0x420 [ 486.614797][T17310] ? __fget_files+0x3a0/0x420 [ 486.614823][T17310] __sys_sendmmsg+0x227/0x430 [ 486.614852][T17310] ? __pfx___sys_sendmmsg+0x10/0x10 [ 486.614874][T17310] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 486.614921][T17310] ? ksys_write+0x22a/0x250 [ 486.614946][T17310] ? __pfx_ksys_write+0x10/0x10 [ 486.614968][T17310] ? rcu_is_watching+0x15/0xb0 [ 486.614997][T17310] __x64_sys_sendmmsg+0xa0/0xc0 [ 486.615022][T17310] do_syscall_64+0xfa/0x3b0 [ 486.615042][T17310] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.615068][T17310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.615088][T17310] ? clear_bhb_loop+0x60/0xb0 [ 486.615112][T17310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.615131][T17310] RIP: 0033:0x7fcbd8f8eba9 [ 486.615149][T17310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.615166][T17310] RSP: 002b:00007fcbd9db6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 486.615187][T17310] RAX: ffffffffffffffda RBX: 00007fcbd91d5fa0 RCX: 00007fcbd8f8eba9 [ 486.615203][T17310] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000006 [ 486.615216][T17310] RBP: 00007fcbd9db6090 R08: 0000000000000000 R09: 0000000000000000 [ 486.615230][T17310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.615243][T17310] R13: 00007fcbd91d6038 R14: 00007fcbd91d5fa0 R15: 00007ffd16603ff8 [ 486.615278][T17310] [ 486.620271][T17302] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 486.959659][T17316] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20000 [ 486.991720][T17302] bond1: (slave vcan1): Error -95 calling set_mac_address [ 487.140316][T17331] netlink: 'syz.1.3931': attribute type 1 has an invalid length. [ 487.181333][T17331] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3931'. [ 487.283505][T17336] FAULT_INJECTION: forcing a failure. [ 487.283505][T17336] name failslab, interval 1, probability 0, space 0, times 0 [ 487.329308][T17336] CPU: 1 UID: 0 PID: 17336 Comm: syz.1.3935 Not tainted syzkaller #0 PREEMPT(full) [ 487.329334][T17336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.329344][T17336] Call Trace: [ 487.329352][T17336] [ 487.329360][T17336] dump_stack_lvl+0x189/0x250 [ 487.329387][T17336] ? __pfx____ratelimit+0x10/0x10 [ 487.329409][T17336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.329432][T17336] ? __pfx__printk+0x10/0x10 [ 487.329462][T17336] ? __pfx___might_resched+0x10/0x10 [ 487.329479][T17336] ? fs_reclaim_acquire+0x7d/0x100 [ 487.329502][T17336] should_fail_ex+0x414/0x560 [ 487.329536][T17336] should_failslab+0xa8/0x100 [ 487.329565][T17336] __kmalloc_noprof+0xcb/0x4f0 [ 487.329589][T17336] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 487.329623][T17336] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 487.329656][T17336] genl_family_rcv_msg_doit+0xb8/0x300 [ 487.329691][T17336] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 487.329728][T17336] ? apparmor_capable+0x137/0x1b0 [ 487.329754][T17336] ? bpf_lsm_capable+0x9/0x20 [ 487.329780][T17336] ? security_capable+0x7e/0x2e0 [ 487.329825][T17336] genl_rcv_msg+0x60e/0x790 [ 487.329859][T17336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.329883][T17336] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 487.329901][T17336] ? __pfx_nl802154_del_llsec_key+0x10/0x10 [ 487.329921][T17336] ? __pfx_nl802154_post_doit+0x10/0x10 [ 487.329956][T17336] netlink_rcv_skb+0x208/0x470 [ 487.329973][T17336] ? __lock_acquire+0xab9/0xd20 [ 487.329999][T17336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.330024][T17336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.330062][T17336] ? down_read+0x1ad/0x2e0 [ 487.330087][T17336] genl_rcv+0x28/0x40 [ 487.330109][T17336] netlink_unicast+0x82f/0x9e0 [ 487.330149][T17336] ? __pfx_netlink_unicast+0x10/0x10 [ 487.330187][T17336] ? netlink_sendmsg+0x642/0xb30 [ 487.330207][T17336] ? skb_put+0x11b/0x210 [ 487.330235][T17336] netlink_sendmsg+0x805/0xb30 [ 487.330268][T17336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.330295][T17336] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.330321][T17336] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.330343][T17336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.330367][T17336] __sock_sendmsg+0x21c/0x270 [ 487.330401][T17336] ____sys_sendmsg+0x505/0x830 [ 487.330433][T17336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.330469][T17336] ? import_iovec+0x74/0xa0 [ 487.330501][T17336] ___sys_sendmsg+0x21f/0x2a0 [ 487.330529][T17336] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.330594][T17336] ? __fget_files+0x2a/0x420 [ 487.330611][T17336] ? __fget_files+0x3a0/0x420 [ 487.330641][T17336] __x64_sys_sendmsg+0x19b/0x260 [ 487.330670][T17336] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.330707][T17336] ? __pfx_ksys_write+0x10/0x10 [ 487.330731][T17336] ? rcu_is_watching+0x15/0xb0 [ 487.330758][T17336] ? do_syscall_64+0xbe/0x3b0 [ 487.330786][T17336] do_syscall_64+0xfa/0x3b0 [ 487.330813][T17336] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.330833][T17336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.330853][T17336] ? clear_bhb_loop+0x60/0xb0 [ 487.330879][T17336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.330899][T17336] RIP: 0033:0x7fcbd8f8eba9 [ 487.330918][T17336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.330937][T17336] RSP: 002b:00007fcbd9db6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.330959][T17336] RAX: ffffffffffffffda RBX: 00007fcbd91d5fa0 RCX: 00007fcbd8f8eba9 [ 487.330976][T17336] RDX: 0000000000040084 RSI: 0000200000000480 RDI: 0000000000000004 [ 487.330990][T17336] RBP: 00007fcbd9db6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.331003][T17336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.331015][T17336] R13: 00007fcbd91d6038 R14: 00007fcbd91d5fa0 R15: 00007ffd16603ff8 [ 487.331050][T17336] [ 487.715154][ T5868] Bluetooth: hci0: command 0x0c1a tx timeout [ 487.772606][T17343] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3937'. [ 487.885068][T17348] FAULT_INJECTION: forcing a failure. [ 487.885068][T17348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.913734][T17348] CPU: 0 UID: 0 PID: 17348 Comm: syz.1.3939 Not tainted syzkaller #0 PREEMPT(full) [ 487.913762][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.913775][T17348] Call Trace: [ 487.913783][T17348] [ 487.913792][T17348] dump_stack_lvl+0x189/0x250 [ 487.913820][T17348] ? __pfx____ratelimit+0x10/0x10 [ 487.913842][T17348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.913866][T17348] ? __pfx__printk+0x10/0x10 [ 487.913893][T17348] ? __might_fault+0xb0/0x130 [ 487.913938][T17348] should_fail_ex+0x414/0x560 [ 487.913972][T17348] _copy_from_user+0x2d/0xb0 [ 487.913999][T17348] ___sys_sendmsg+0x158/0x2a0 [ 487.914028][T17348] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.914092][T17348] ? __fget_files+0x2a/0x420 [ 487.914109][T17348] ? __fget_files+0x3a0/0x420 [ 487.914138][T17348] __sys_sendmmsg+0x227/0x430 [ 487.914169][T17348] ? __pfx___sys_sendmmsg+0x10/0x10 [ 487.914191][T17348] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 487.914240][T17348] ? ksys_write+0x22a/0x250 [ 487.914269][T17348] ? __pfx_ksys_write+0x10/0x10 [ 487.914290][T17348] ? rcu_is_watching+0x15/0xb0 [ 487.914317][T17348] __x64_sys_sendmmsg+0xa0/0xc0 [ 487.914343][T17348] do_syscall_64+0xfa/0x3b0 [ 487.914364][T17348] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.914384][T17348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.914404][T17348] ? clear_bhb_loop+0x60/0xb0 [ 487.914429][T17348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.914447][T17348] RIP: 0033:0x7fcbd8f8eba9 [ 487.914465][T17348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.914482][T17348] RSP: 002b:00007fcbd9db6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.914503][T17348] RAX: ffffffffffffffda RBX: 00007fcbd91d5fa0 RCX: 00007fcbd8f8eba9 [ 487.914519][T17348] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: 0000000000000003 [ 487.914532][T17348] RBP: 00007fcbd9db6090 R08: 0000000000000000 R09: 0000000000000000 [ 487.914545][T17348] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 487.914558][T17348] R13: 00007fcbd91d6038 R14: 00007fcbd91d5fa0 R15: 00007ffd16603ff8 [ 487.914591][T17348] [ 488.614960][T17374] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3949'. [ 490.367694][T17439] veth3: entered allmulticast mode [ 490.748082][T17469] FAULT_INJECTION: forcing a failure. [ 490.748082][T17469] name failslab, interval 1, probability 0, space 0, times 0 [ 490.794765][T17469] CPU: 1 UID: 0 PID: 17469 Comm: syz.4.3984 Not tainted syzkaller #0 PREEMPT(full) [ 490.794795][T17469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.794809][T17469] Call Trace: [ 490.794817][T17469] [ 490.794827][T17469] dump_stack_lvl+0x189/0x250 [ 490.794857][T17469] ? __pfx____ratelimit+0x10/0x10 [ 490.794878][T17469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.794902][T17469] ? __pfx__printk+0x10/0x10 [ 490.794933][T17469] ? __pfx___might_resched+0x10/0x10 [ 490.794953][T17469] ? fs_reclaim_acquire+0x7d/0x100 [ 490.794977][T17469] should_fail_ex+0x414/0x560 [ 490.795012][T17469] should_failslab+0xa8/0x100 [ 490.795043][T17469] __kmalloc_noprof+0xcb/0x4f0 [ 490.795068][T17469] ? iovec_from_user+0x87/0x250 [ 490.795099][T17469] iovec_from_user+0x87/0x250 [ 490.795130][T17469] __import_iovec+0x163/0x7f0 [ 490.795168][T17469] import_iovec+0x74/0xa0 [ 490.795198][T17469] ___sys_recvmsg+0x43a/0x510 [ 490.795229][T17469] ? __pfx____sys_recvmsg+0x10/0x10 [ 490.795279][T17469] ? __fget_files+0x3a0/0x420 [ 490.795309][T17469] do_recvmmsg+0x307/0x770 [ 490.795344][T17469] ? __pfx_do_recvmmsg+0x10/0x10 [ 490.795385][T17469] ? _copy_from_user+0x94/0xb0 [ 490.795429][T17469] __x64_sys_recvmmsg+0x1af/0x240 [ 490.795541][T17469] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 490.795567][T17469] ? rcu_is_watching+0x15/0xb0 [ 490.795593][T17469] ? do_syscall_64+0xbe/0x3b0 [ 490.795620][T17469] do_syscall_64+0xfa/0x3b0 [ 490.795640][T17469] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.795661][T17469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.795681][T17469] ? clear_bhb_loop+0x60/0xb0 [ 490.795717][T17469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.795740][T17469] RIP: 0033:0x7f1d1438eba9 [ 490.795758][T17469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.795776][T17469] RSP: 002b:00007f1d152fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 490.795798][T17469] RAX: ffffffffffffffda RBX: 00007f1d145d5fa0 RCX: 00007f1d1438eba9 [ 490.795813][T17469] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 490.795827][T17469] RBP: 00007f1d152fc090 R08: 0000200000003700 R09: 0000000000000000 [ 490.795841][T17469] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 490.795854][T17469] R13: 00007f1d145d6038 R14: 00007f1d145d5fa0 R15: 00007ffffc168a08 [ 490.795887][T17469] [ 491.723517][T17485] netlink: 'syz.4.3989': attribute type 10 has an invalid length. [ 491.751076][T17485] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 492.512297][T17517] FAULT_INJECTION: forcing a failure. [ 492.512297][T17517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.587702][T17517] CPU: 1 UID: 0 PID: 17517 Comm: syz.3.4001 Not tainted syzkaller #0 PREEMPT(full) [ 492.587730][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.587744][T17517] Call Trace: [ 492.587752][T17517] [ 492.587761][T17517] dump_stack_lvl+0x189/0x250 [ 492.587791][T17517] ? __pfx____ratelimit+0x10/0x10 [ 492.587812][T17517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.587836][T17517] ? __pfx__printk+0x10/0x10 [ 492.587864][T17517] ? __might_fault+0xb0/0x130 [ 492.587903][T17517] should_fail_ex+0x414/0x560 [ 492.587937][T17517] _copy_from_user+0x2d/0xb0 [ 492.587965][T17517] ___sys_sendmsg+0x158/0x2a0 [ 492.587993][T17517] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.588065][T17517] ? __might_fault+0xb0/0x130 [ 492.588095][T17517] __sys_sendmmsg+0x227/0x430 [ 492.588127][T17517] ? __pfx___sys_sendmmsg+0x10/0x10 [ 492.588149][T17517] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 492.588201][T17517] ? ksys_write+0x22a/0x250 [ 492.588229][T17517] ? __pfx_ksys_write+0x10/0x10 [ 492.588252][T17517] ? rcu_is_watching+0x15/0xb0 [ 492.588280][T17517] __x64_sys_sendmmsg+0xa0/0xc0 [ 492.588313][T17517] do_syscall_64+0xfa/0x3b0 [ 492.588334][T17517] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.588355][T17517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.588375][T17517] ? clear_bhb_loop+0x60/0xb0 [ 492.588399][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.588419][T17517] RIP: 0033:0x7f30dd58eba9 [ 492.588437][T17517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.588455][T17517] RSP: 002b:00007f30de4f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 492.588477][T17517] RAX: ffffffffffffffda RBX: 00007f30dd7d5fa0 RCX: 00007f30dd58eba9 [ 492.588492][T17517] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000004 [ 492.588506][T17517] RBP: 00007f30de4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 492.588519][T17517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.588532][T17517] R13: 00007f30dd7d6038 R14: 00007f30dd7d5fa0 R15: 00007ffcc98f51a8 [ 492.588564][T17517] [ 493.118357][T17531] FAULT_INJECTION: forcing a failure. [ 493.118357][T17531] name failslab, interval 1, probability 0, space 0, times 0 [ 493.151543][T17531] CPU: 1 UID: 0 PID: 17531 Comm: syz.0.4006 Not tainted syzkaller #0 PREEMPT(full) [ 493.151573][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.151586][T17531] Call Trace: [ 493.151595][T17531] [ 493.151604][T17531] dump_stack_lvl+0x189/0x250 [ 493.151632][T17531] ? __pfx____ratelimit+0x10/0x10 [ 493.151654][T17531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.151679][T17531] ? __pfx__printk+0x10/0x10 [ 493.151723][T17531] should_fail_ex+0x414/0x560 [ 493.151761][T17531] should_failslab+0xa8/0x100 [ 493.151793][T17531] __kmalloc_cache_noprof+0x70/0x3d0 [ 493.151820][T17531] ? sctp_add_bind_addr+0x8c/0x370 [ 493.151845][T17531] sctp_add_bind_addr+0x8c/0x370 [ 493.151870][T17531] sctp_copy_local_addr_list+0x30b/0x4e0 [ 493.151906][T17531] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 493.151937][T17531] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 493.151973][T17531] ? sctp_v4_is_any+0x35/0x60 [ 493.151992][T17531] ? sctp_copy_one_addr+0x93/0x360 [ 493.152027][T17531] sctp_bind_addr_copy+0xb3/0x3c0 [ 493.152059][T17531] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 493.152091][T17531] sctp_connect_new_asoc+0x2e0/0x690 [ 493.152120][T17531] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 493.152143][T17531] ? __local_bh_enable_ip+0x12d/0x1c0 [ 493.152173][T17531] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 493.152197][T17531] ? security_sctp_bind_connect+0x7e/0x2e0 [ 493.152228][T17531] sctp_sendmsg+0x155c/0x2810 [ 493.152264][T17531] ? __pfx_sctp_sendmsg+0x10/0x10 [ 493.152290][T17531] ? aa_sk_perm+0x81e/0x950 [ 493.152326][T17531] ? __pfx_aa_sk_perm+0x10/0x10 [ 493.152359][T17531] ? sock_rps_record_flow+0x19/0x410 [ 493.152392][T17531] ? inet_sendmsg+0x2f4/0x370 [ 493.152425][T17531] __sock_sendmsg+0x19c/0x270 [ 493.152458][T17531] ____sys_sendmsg+0x505/0x830 [ 493.152496][T17531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.152532][T17531] ? import_iovec+0x74/0xa0 [ 493.152563][T17531] ___sys_sendmsg+0x21f/0x2a0 [ 493.152591][T17531] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.152658][T17531] ? __fget_files+0x2a/0x420 [ 493.152675][T17531] ? __fget_files+0x3a0/0x420 [ 493.152705][T17531] __x64_sys_sendmsg+0x19b/0x260 [ 493.152736][T17531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.152768][T17531] ? __pfx_ksys_write+0x10/0x10 [ 493.152791][T17531] ? rcu_is_watching+0x15/0xb0 [ 493.152816][T17531] ? do_syscall_64+0xbe/0x3b0 [ 493.152841][T17531] do_syscall_64+0xfa/0x3b0 [ 493.152860][T17531] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.152879][T17531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.152899][T17531] ? clear_bhb_loop+0x60/0xb0 [ 493.152923][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.152941][T17531] RIP: 0033:0x7f3ca9d8eba9 [ 493.152958][T17531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.152976][T17531] RSP: 002b:00007f3caab59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.152995][T17531] RAX: ffffffffffffffda RBX: 00007f3ca9fd5fa0 RCX: 00007f3ca9d8eba9 [ 493.153009][T17531] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000003 [ 493.153021][T17531] RBP: 00007f3caab59090 R08: 0000000000000000 R09: 0000000000000000 [ 493.153032][T17531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.153043][T17531] R13: 00007f3ca9fd6038 R14: 00007f3ca9fd5fa0 R15: 00007ffec6919df8 [ 493.153076][T17531] [ 493.488068][T17534] FAULT_INJECTION: forcing a failure. [ 493.488068][T17534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.559830][T17534] CPU: 0 UID: 0 PID: 17534 Comm: syz.3.4007 Not tainted syzkaller #0 PREEMPT(full) [ 493.559859][T17534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.559871][T17534] Call Trace: [ 493.559879][T17534] [ 493.559887][T17534] dump_stack_lvl+0x189/0x250 [ 493.559917][T17534] ? __pfx____ratelimit+0x10/0x10 [ 493.559938][T17534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.559962][T17534] ? __pfx__printk+0x10/0x10 [ 493.559989][T17534] ? __might_fault+0xb0/0x130 [ 493.560028][T17534] should_fail_ex+0x414/0x560 [ 493.560062][T17534] _copy_from_iter+0x1de/0x1790 [ 493.560093][T17534] ? rcu_is_watching+0x15/0xb0 [ 493.560114][T17534] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 493.560143][T17534] ? __pfx__copy_from_iter+0x10/0x10 [ 493.560175][T17534] ? __build_skb_around+0x257/0x3e0 [ 493.560202][T17534] ? netlink_sendmsg+0x642/0xb30 [ 493.560221][T17534] ? skb_put+0x11b/0x210 [ 493.560248][T17534] netlink_sendmsg+0x6b2/0xb30 [ 493.560279][T17534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.560304][T17534] ? aa_sock_msg_perm+0xf1/0x1d0 [ 493.560326][T17534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.560346][T17534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.560367][T17534] __sock_sendmsg+0x21c/0x270 [ 493.560399][T17534] ____sys_sendmsg+0x505/0x830 [ 493.560430][T17534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.560465][T17534] ? import_iovec+0x74/0xa0 [ 493.560493][T17534] ___sys_sendmsg+0x21f/0x2a0 [ 493.560520][T17534] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.560583][T17534] ? __fget_files+0x2a/0x420 [ 493.560600][T17534] ? __fget_files+0x3a0/0x420 [ 493.560629][T17534] __x64_sys_sendmsg+0x19b/0x260 [ 493.560657][T17534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.560692][T17534] ? __pfx_ksys_write+0x10/0x10 [ 493.560725][T17534] ? do_syscall_64+0xbe/0x3b0 [ 493.560755][T17534] do_syscall_64+0xfa/0x3b0 [ 493.560775][T17534] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.560794][T17534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.560814][T17534] ? clear_bhb_loop+0x60/0xb0 [ 493.560838][T17534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.560856][T17534] RIP: 0033:0x7f30dd58eba9 [ 493.560873][T17534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.560891][T17534] RSP: 002b:00007f30de4d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.560912][T17534] RAX: ffffffffffffffda RBX: 00007f30dd7d6090 RCX: 00007f30dd58eba9 [ 493.560927][T17534] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000004 [ 493.560940][T17534] RBP: 00007f30de4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 493.560953][T17534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.560965][T17534] R13: 00007f30dd7d6128 R14: 00007f30dd7d6090 R15: 00007ffcc98f51a8 [ 493.560997][T17534] [ 493.977839][T17538] __nla_validate_parse: 6 callbacks suppressed [ 493.977858][T17538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4010'. [ 494.124668][T17541] FAULT_INJECTION: forcing a failure. [ 494.124668][T17541] name failslab, interval 1, probability 0, space 0, times 0 [ 494.137555][T17541] CPU: 1 UID: 0 PID: 17541 Comm: syz.4.4011 Not tainted syzkaller #0 PREEMPT(full) [ 494.137583][T17541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.137596][T17541] Call Trace: [ 494.137605][T17541] [ 494.137614][T17541] dump_stack_lvl+0x189/0x250 [ 494.137643][T17541] ? __pfx____ratelimit+0x10/0x10 [ 494.137665][T17541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.137690][T17541] ? __pfx__printk+0x10/0x10 [ 494.137718][T17541] ? rcu_is_watching+0x15/0xb0 [ 494.137739][T17541] ? trace_fib_table_lookup+0x85/0x200 [ 494.137774][T17541] should_fail_ex+0x414/0x560 [ 494.137810][T17541] should_failslab+0xa8/0x100 [ 494.137842][T17541] kmem_cache_alloc_noprof+0x73/0x3c0 [ 494.137868][T17541] ? dst_alloc+0x105/0x170 [ 494.137892][T17541] ? fib_lookup+0x76/0x440 [ 494.137921][T17541] dst_alloc+0x105/0x170 [ 494.137953][T17541] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 494.137992][T17541] ? ip_route_output_key_hash+0xde/0x2e0 [ 494.138022][T17541] ip_route_output_key_hash+0x1b9/0x2e0 [ 494.138053][T17541] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 494.138085][T17541] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 494.138114][T17541] ? __asan_memset+0x22/0x50 [ 494.138142][T17541] ip_route_output_flow+0x2a/0x150 [ 494.138171][T17541] ip_tunnel_xmit+0x96b/0x2390 [ 494.138205][T17541] ? ip_tunnel_xmit+0x150/0x2390 [ 494.138250][T17541] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 494.138275][T17541] ? netif_skb_features+0xb04/0x1540 [ 494.138302][T17541] ? validate_xmit_xfrm+0xbf/0x1160 [ 494.138333][T17541] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 494.138355][T17541] ? __pfx_skb_csum_hwoffload_help+0x10/0x10 [ 494.138399][T17541] ipip_tunnel_xmit+0x328/0x4b0 [ 494.138426][T17541] dev_hard_start_xmit+0x2d4/0x830 [ 494.138472][T17541] __dev_queue_xmit+0x1b8d/0x3b50 [ 494.138500][T17541] ? register_lock_class+0x51/0x320 [ 494.138539][T17541] ? __dev_queue_xmit+0x27b/0x3b50 [ 494.138585][T17541] ? __pfx___dev_queue_xmit+0x10/0x10 [ 494.138613][T17541] ? read_seqbegin+0x122/0x250 [ 494.138631][T17541] ? neigh_connected_output+0x1ea/0x460 [ 494.138651][T17541] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.138673][T17541] ? read_seqbegin+0x1ac/0x250 [ 494.138692][T17541] ? __pfx_read_seqbegin+0x10/0x10 [ 494.138751][T17541] ip_finish_output2+0xd3d/0x1160 [ 494.138787][T17541] ? skb_gso_transport_seglen+0x33d/0x520 [ 494.138813][T17541] ? ip_finish_output2+0x452/0x1160 [ 494.138841][T17541] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 494.138868][T17541] ? __pfx_ip_finish_output2+0x10/0x10 [ 494.138897][T17541] ? skb_gso_validate_network_len+0x12f/0x2a0 [ 494.138928][T17541] ? ip_finish_output+0x1aa/0x3f0 [ 494.138958][T17541] ip_output+0x2a1/0x3c0 [ 494.138985][T17541] ? ip_output+0x60/0x3c0 [ 494.139013][T17541] ip_send_skb+0x74/0x100 [ 494.139042][T17541] udp_send_skb+0xaf1/0x14c0 [ 494.139094][T17541] udp_sendmsg+0x195a/0x2170 [ 494.139138][T17541] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 494.139168][T17541] ? __pfx_udp_sendmsg+0x10/0x10 [ 494.139194][T17541] ? tomoyo_write_log2+0x250/0x910 [ 494.139225][T17541] ? tomoyo_supervisor+0x4b2/0x1480 [ 494.139297][T17541] udpv6_sendmsg+0xbf0/0x24b0 [ 494.139348][T17541] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 494.139384][T17541] ? __pfx___might_resched+0x10/0x10 [ 494.139436][T17541] ? aa_sk_perm+0x81e/0x950 [ 494.139481][T17541] ? inet_send_prepare+0x5c/0x270 [ 494.139513][T17541] ? inet6_sendmsg+0xe4/0x120 [ 494.139540][T17541] __sock_sendmsg+0xe5/0x270 [ 494.139573][T17541] ____sys_sendmsg+0x52d/0x830 [ 494.139605][T17541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.139642][T17541] ? import_iovec+0x74/0xa0 [ 494.139673][T17541] ___sys_sendmsg+0x21f/0x2a0 [ 494.139701][T17541] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.139770][T17541] ? __fget_files+0x2a/0x420 [ 494.139787][T17541] ? __fget_files+0x3a0/0x420 [ 494.139817][T17541] __sys_sendmmsg+0x227/0x430 [ 494.139849][T17541] ? __pfx___sys_sendmmsg+0x10/0x10 [ 494.139872][T17541] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 494.139923][T17541] ? ksys_write+0x22a/0x250 [ 494.139949][T17541] ? __pfx_ksys_write+0x10/0x10 [ 494.139970][T17541] ? rcu_is_watching+0x15/0xb0 [ 494.139993][T17541] __x64_sys_sendmmsg+0xa0/0xc0 [ 494.140017][T17541] do_syscall_64+0xfa/0x3b0 [ 494.140035][T17541] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.140054][T17541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.140073][T17541] ? clear_bhb_loop+0x60/0xb0 [ 494.140098][T17541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.140117][T17541] RIP: 0033:0x7f1d1438eba9 [ 494.140133][T17541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.140150][T17541] RSP: 002b:00007f1d152fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 494.140169][T17541] RAX: ffffffffffffffda RBX: 00007f1d145d5fa0 RCX: 00007f1d1438eba9 [ 494.140182][T17541] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: 0000000000000003 [ 494.140192][T17541] RBP: 00007f1d152fc090 R08: 0000000000000000 R09: 0000000000000000 [ 494.140203][T17541] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000002 [ 494.140215][T17541] R13: 00007f1d145d6038 R14: 00007f1d145d5fa0 R15: 00007ffffc168a08 [ 494.140244][T17541] [ 495.159700][T17555] FAULT_INJECTION: forcing a failure. [ 495.159700][T17555] name failslab, interval 1, probability 0, space 0, times 0 [ 495.218744][T17555] CPU: 0 UID: 0 PID: 17555 Comm: syz.4.4018 Not tainted syzkaller #0 PREEMPT(full) [ 495.218773][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 495.218786][T17555] Call Trace: [ 495.218795][T17555] [ 495.218805][T17555] dump_stack_lvl+0x189/0x250 [ 495.218833][T17555] ? __pfx____ratelimit+0x10/0x10 [ 495.218855][T17555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.218878][T17555] ? __pfx__printk+0x10/0x10 [ 495.218912][T17555] ? __pfx___might_resched+0x10/0x10 [ 495.218936][T17555] should_fail_ex+0x414/0x560 [ 495.218971][T17555] should_failslab+0xa8/0x100 [ 495.219001][T17555] __kmalloc_cache_noprof+0x70/0x3d0 [ 495.219027][T17555] ? call_usermodehelper_setup+0x8e/0x270 [ 495.219056][T17555] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 495.219088][T17555] call_usermodehelper_setup+0x8e/0x270 [ 495.219122][T17555] ? __pfx_free_modprobe_argv+0x10/0x10 [ 495.219156][T17555] __request_module+0x39f/0x5e0 [ 495.219191][T17555] ? rtnl_link_ops_get+0x23/0x250 [ 495.219213][T17555] ? __pfx___request_module+0x10/0x10 [ 495.219256][T17555] ? rtnl_link_ops_get+0x23/0x250 [ 495.219277][T17555] ? rtnl_link_ops_get+0x23/0x250 [ 495.219300][T17555] ? rtnl_link_ops_get+0x215/0x250 [ 495.219327][T17555] rtnl_newlink+0x64f/0x1c70 [ 495.219345][T17555] ? netlink_sendmsg+0x805/0xb30 [ 495.219368][T17555] ? __x64_sys_sendmsg+0x19b/0x260 [ 495.219391][T17555] ? do_syscall_64+0xfa/0x3b0 [ 495.219411][T17555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.219439][T17555] ? __pfx_rtnl_newlink+0x10/0x10 [ 495.219485][T17555] ? kasan_quarantine_put+0xdd/0x220 [ 495.219509][T17555] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.219536][T17555] ? nlmon_xmit+0xb0/0x100 [ 495.219558][T17555] ? kmem_cache_free+0x18f/0x400 [ 495.219592][T17555] ? __local_bh_enable_ip+0x12d/0x1c0 [ 495.219612][T17555] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.219634][T17555] ? __local_bh_enable_ip+0x12d/0x1c0 [ 495.219654][T17555] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 495.219678][T17555] ? __dev_queue_xmit+0x27b/0x3b50 [ 495.219705][T17555] ? __dev_queue_xmit+0x27b/0x3b50 [ 495.219733][T17555] ? __dev_queue_xmit+0x27b/0x3b50 [ 495.219760][T17555] ? __dev_queue_xmit+0x1d79/0x3b50 [ 495.219791][T17555] ? __lock_acquire+0xab9/0xd20 [ 495.219846][T17555] ? __pfx_rtnl_newlink+0x10/0x10 [ 495.219866][T17555] rtnetlink_rcv_msg+0x7cc/0xb70 [ 495.219892][T17555] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 495.219911][T17555] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.219930][T17555] ? ref_tracker_free+0x63a/0x7d0 [ 495.219950][T17555] ? __asan_memcpy+0x40/0x70 [ 495.219971][T17555] ? __pfx_ref_tracker_free+0x10/0x10 [ 495.220002][T17555] netlink_rcv_skb+0x208/0x470 [ 495.220024][T17555] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 495.220048][T17555] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.220082][T17555] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.220117][T17555] netlink_unicast+0x82f/0x9e0 [ 495.220156][T17555] ? __pfx_netlink_unicast+0x10/0x10 [ 495.220188][T17555] ? netlink_sendmsg+0x642/0xb30 [ 495.220207][T17555] ? skb_put+0x11b/0x210 [ 495.220234][T17555] netlink_sendmsg+0x805/0xb30 [ 495.220265][T17555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.220291][T17555] ? aa_sock_msg_perm+0xf1/0x1d0 [ 495.220314][T17555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.220336][T17555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.220359][T17555] __sock_sendmsg+0x21c/0x270 [ 495.220391][T17555] ____sys_sendmsg+0x505/0x830 [ 495.220422][T17555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.220457][T17555] ? import_iovec+0x74/0xa0 [ 495.220487][T17555] ___sys_sendmsg+0x21f/0x2a0 [ 495.220515][T17555] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.220577][T17555] ? __fget_files+0x2a/0x420 [ 495.220595][T17555] ? __fget_files+0x3a0/0x420 [ 495.220624][T17555] __x64_sys_sendmsg+0x19b/0x260 [ 495.220652][T17555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.220687][T17555] ? __pfx_ksys_write+0x10/0x10 [ 495.220710][T17555] ? rcu_is_watching+0x15/0xb0 [ 495.220736][T17555] ? do_syscall_64+0xbe/0x3b0 [ 495.220762][T17555] do_syscall_64+0xfa/0x3b0 [ 495.220782][T17555] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.220802][T17555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.220821][T17555] ? clear_bhb_loop+0x60/0xb0 [ 495.220845][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.220864][T17555] RIP: 0033:0x7f1d1438eba9 [ 495.220882][T17555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.220899][T17555] RSP: 002b:00007f1d152fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.220920][T17555] RAX: ffffffffffffffda RBX: 00007f1d145d5fa0 RCX: 00007f1d1438eba9 [ 495.220935][T17555] RDX: 00000000040040d4 RSI: 0000200000000200 RDI: 0000000000000003 [ 495.220949][T17555] RBP: 00007f1d152fc090 R08: 0000000000000000 R09: 0000000000000000 [ 495.220962][T17555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.220974][T17555] R13: 00007f1d145d6038 R14: 00007f1d145d5fa0 R15: 00007ffffc168a08 [ 495.221007][T17555] [ 496.058593][T17364] Set syz1 is full, maxelem 65536 reached [ 496.189646][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4025'. [ 496.290976][T17572] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 496.399735][T17587] netlink: 'syz.2.4027': attribute type 23 has an invalid length. [ 496.549487][T17599] netlink: 'syz.3.4032': attribute type 10 has an invalid length. [ 496.557663][T17599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4032'. [ 496.611344][T17599] dummy0: entered promiscuous mode [ 496.620427][T17599] bridge0: port 3(dummy0) entered blocking state [ 496.631732][T17599] bridge0: port 3(dummy0) entered disabled state [ 496.639951][T17599] dummy0: entered allmulticast mode [ 496.648501][T17599] bridge0: port 3(dummy0) entered blocking state [ 496.655101][T17599] bridge0: port 3(dummy0) entered forwarding state [ 497.071364][T17629] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4041'. [ 497.086912][T17622] vcan0: entered allmulticast mode [ 497.100365][T17631] Bluetooth: MGMT ver 1.23 [ 497.151967][T17633] pimreg: entered allmulticast mode [ 497.169743][T17635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4044'. [ 497.172311][T17632] pimreg: left allmulticast mode [ 497.626383][T17658] tipc: Enabled bearer , priority 0 [ 497.634309][T17658] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 497.641873][T17658] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 497.666315][T17658] tipc: Resetting bearer [ 497.709272][T17660] tunl0: entered promiscuous mode [ 497.722342][T17660] netlink: 'syz.2.4053': attribute type 3 has an invalid length. [ 497.731781][T17660] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4053'. [ 497.809921][T17665] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4054'. [ 497.892498][T17669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4055'. [ 497.908127][T17667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4056'. [ 497.919285][T17667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4056'. [ 498.391450][T17699] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 498.402377][T17699] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 498.663094][T11275] tipc: Node number set to 1142377799 [ 499.109879][T17744] netlink: 'syz.1.4081': attribute type 2 has an invalid length. [ 499.121009][T17744] __nla_validate_parse: 4 callbacks suppressed [ 499.121027][T17744] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4081'. [ 499.198658][T17750] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4083'. [ 499.222700][T11273] IPv4: Oversized IP packet from 127.0.0.1 [ 499.230457][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 499.236742][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 499.320828][T17759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4086'. [ 499.458044][T17765] netlink: 'syz.3.4089': attribute type 72 has an invalid length. [ 499.470695][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'. [ 499.529694][T17769] vlan2: entered allmulticast mode [ 499.624671][T17774] FAULT_INJECTION: forcing a failure. [ 499.624671][T17774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.675456][T17774] CPU: 1 UID: 0 PID: 17774 Comm: syz.3.4092 Not tainted syzkaller #0 PREEMPT(full) [ 499.675486][T17774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.675499][T17774] Call Trace: [ 499.675507][T17774] [ 499.675516][T17774] dump_stack_lvl+0x189/0x250 [ 499.675545][T17774] ? __pfx____ratelimit+0x10/0x10 [ 499.675566][T17774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.675589][T17774] ? __pfx__printk+0x10/0x10 [ 499.675636][T17774] should_fail_ex+0x414/0x560 [ 499.675671][T17774] _copy_to_iter+0x589/0x1790 [ 499.675709][T17774] ? __pfx__copy_to_iter+0x10/0x10 [ 499.675730][T17774] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 499.675763][T17774] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 499.675795][T17774] __skb_datagram_iter+0xf8/0x990 [ 499.675823][T17774] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 499.675859][T17774] skb_copy_datagram_iter+0xc5/0x230 [ 499.675890][T17774] netlink_recvmsg+0x2ab/0xa30 [ 499.675923][T17774] ? __pfx_netlink_recvmsg+0x10/0x10 [ 499.675950][T17774] ? aa_sock_msg_perm+0xf1/0x1d0 [ 499.675973][T17774] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 499.675994][T17774] ? security_socket_recvmsg+0x7e/0x2e0 [ 499.676019][T17774] ? __pfx_netlink_recvmsg+0x10/0x10 [ 499.676041][T17774] sock_recvmsg+0x22c/0x270 [ 499.676077][T17774] ____sys_recvmsg+0x1c9/0x460 [ 499.676112][T17774] ? __pfx_____sys_recvmsg+0x10/0x10 [ 499.676154][T17774] ? import_iovec+0x74/0xa0 [ 499.676184][T17774] ___sys_recvmsg+0x1b5/0x510 [ 499.676216][T17774] ? __pfx____sys_recvmsg+0x10/0x10 [ 499.676268][T17774] ? __fget_files+0x3a0/0x420 [ 499.676299][T17774] do_recvmmsg+0x307/0x770 [ 499.676334][T17774] ? __pfx_do_recvmmsg+0x10/0x10 [ 499.676374][T17774] ? _copy_from_user+0x94/0xb0 [ 499.676416][T17774] __x64_sys_recvmmsg+0x1af/0x240 [ 499.676449][T17774] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 499.676473][T17774] ? rcu_is_watching+0x15/0xb0 [ 499.676499][T17774] ? do_syscall_64+0xbe/0x3b0 [ 499.676525][T17774] do_syscall_64+0xfa/0x3b0 [ 499.676546][T17774] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.676566][T17774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.676585][T17774] ? clear_bhb_loop+0x60/0xb0 [ 499.676616][T17774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.676635][T17774] RIP: 0033:0x7f30dd58eba9 [ 499.676652][T17774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.676670][T17774] RSP: 002b:00007f30de4f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 499.676692][T17774] RAX: ffffffffffffffda RBX: 00007f30dd7d5fa0 RCX: 00007f30dd58eba9 [ 499.676707][T17774] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 499.676721][T17774] RBP: 00007f30de4f7090 R08: 0000200000003700 R09: 0000000000000000 [ 499.676735][T17774] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 499.676747][T17774] R13: 00007f30dd7d6038 R14: 00007f30dd7d5fa0 R15: 00007ffcc98f51a8 [ 499.676779][T17774] [ 500.104919][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4095'. [ 500.191585][T17786] netlink: 'syz.3.4098': attribute type 10 has an invalid length. [ 500.218623][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4099'. [ 500.221345][T17786] bridge0: port 4(team0) entered blocking state [ 500.228366][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4099'. [ 500.243941][T17786] bridge0: port 4(team0) entered disabled state [ 500.250385][T17786] team0: entered allmulticast mode [ 500.256173][T17786] team_slave_0: entered allmulticast mode [ 500.261913][T17786] team_slave_1: entered allmulticast mode [ 500.270225][T17786] team0: entered promiscuous mode [ 500.275324][T17786] team_slave_0: entered promiscuous mode [ 500.282296][T17786] team_slave_1: entered promiscuous mode [ 500.283564][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4099'. [ 500.293953][T17786] bridge0: port 4(team0) entered blocking state [ 500.303202][T17786] bridge0: port 4(team0) entered forwarding state [ 500.577646][T17804] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4106'. [ 500.589911][T17804] openvswitch: netlink: Actions may not be safe on all matching packets [ 500.818550][T17818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4109'. [ 501.020747][T17835] FAULT_INJECTION: forcing a failure. [ 501.020747][T17835] name failslab, interval 1, probability 0, space 0, times 0 [ 501.040214][T17835] CPU: 1 UID: 0 PID: 17835 Comm: syz.0.4116 Not tainted syzkaller #0 PREEMPT(full) [ 501.040241][T17835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.040253][T17835] Call Trace: [ 501.040260][T17835] [ 501.040269][T17835] dump_stack_lvl+0x189/0x250 [ 501.040295][T17835] ? __pfx____ratelimit+0x10/0x10 [ 501.040314][T17835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.040335][T17835] ? __pfx__printk+0x10/0x10 [ 501.040369][T17835] ? __pfx___might_resched+0x10/0x10 [ 501.040395][T17835] should_fail_ex+0x414/0x560 [ 501.040430][T17835] should_failslab+0xa8/0x100 [ 501.040459][T17835] __kmalloc_node_noprof+0xd1/0x4e0 [ 501.040485][T17835] ? crypto_create_tfm_node+0x83/0x3f0 [ 501.040518][T17835] crypto_create_tfm_node+0x83/0x3f0 [ 501.040557][T17835] crypto_alloc_tfm_node+0x172/0x3f0 [ 501.040594][T17835] esp_init_state+0x36b/0x1140 [ 501.040616][T17835] ? __sock_sendmsg+0x21c/0x270 [ 501.040640][T17835] ? ____sys_sendmsg+0x505/0x830 [ 501.040660][T17835] ? ___sys_sendmsg+0x21f/0x2a0 [ 501.040683][T17835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.040712][T17835] ? __pfx_esp_init_state+0x10/0x10 [ 501.040745][T17835] ? __lock_acquire+0xab9/0xd20 [ 501.040792][T17835] ? __xfrm_init_state+0x7ef/0x13f0 [ 501.040824][T17835] __xfrm_init_state+0xa73/0x13f0 [ 501.040851][T17835] ? __xfrm_init_state+0x7ef/0x13f0 [ 501.040884][T17835] xfrm_add_sa+0x2f5b/0x4070 [ 501.040922][T17835] ? __pfx_xfrm_add_sa+0x10/0x10 [ 501.040946][T17835] ? apparmor_capable+0x137/0x1b0 [ 501.040976][T17835] ? __nla_parse+0x40/0x60 [ 501.041003][T17835] xfrm_user_rcv_msg+0x7a0/0xab0 [ 501.041037][T17835] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 501.041105][T17835] ? __pfx___mutex_trylock_common+0x10/0x10 [ 501.041129][T17835] ? rcu_is_watching+0x15/0xb0 [ 501.041149][T17835] ? trace_contention_end+0x39/0x120 [ 501.041171][T17835] ? __mutex_lock+0x335/0x1350 [ 501.041199][T17835] netlink_rcv_skb+0x208/0x470 [ 501.041223][T17835] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 501.041251][T17835] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.041288][T17835] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.041309][T17835] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.041333][T17835] xfrm_netlink_rcv+0x79/0x90 [ 501.041362][T17835] netlink_unicast+0x82f/0x9e0 [ 501.041402][T17835] ? __pfx_netlink_unicast+0x10/0x10 [ 501.041434][T17835] ? netlink_sendmsg+0x642/0xb30 [ 501.041453][T17835] ? skb_put+0x11b/0x210 [ 501.041481][T17835] netlink_sendmsg+0x805/0xb30 [ 501.041513][T17835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.041545][T17835] ? aa_sock_msg_perm+0xf1/0x1d0 [ 501.041567][T17835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.041590][T17835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.041612][T17835] __sock_sendmsg+0x21c/0x270 [ 501.041645][T17835] ____sys_sendmsg+0x505/0x830 [ 501.041676][T17835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.041712][T17835] ? import_iovec+0x74/0xa0 [ 501.041742][T17835] ___sys_sendmsg+0x21f/0x2a0 [ 501.041770][T17835] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.041836][T17835] ? __fget_files+0x2a/0x420 [ 501.041852][T17835] ? __fget_files+0x3a0/0x420 [ 501.041881][T17835] __x64_sys_sendmsg+0x19b/0x260 [ 501.041908][T17835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.041943][T17835] ? __pfx_ksys_write+0x10/0x10 [ 501.041975][T17835] ? do_syscall_64+0xbe/0x3b0 [ 501.042001][T17835] do_syscall_64+0xfa/0x3b0 [ 501.042020][T17835] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.042040][T17835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.042060][T17835] ? clear_bhb_loop+0x60/0xb0 [ 501.042083][T17835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.042100][T17835] RIP: 0033:0x7f3ca9d8eba9 [ 501.042118][T17835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.042135][T17835] RSP: 002b:00007f3caab59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.042155][T17835] RAX: ffffffffffffffda RBX: 00007f3ca9fd5fa0 RCX: 00007f3ca9d8eba9 [ 501.042171][T17835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 501.042185][T17835] RBP: 00007f3caab59090 R08: 0000000000000000 R09: 0000000000000000 [ 501.042197][T17835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.042208][T17835] R13: 00007f3ca9fd6038 R14: 00007f3ca9fd5fa0 R15: 00007ffec6919df8 [ 501.042241][T17835] [ 501.490232][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.801233][T17852] netlink: 'syz.4.4125': attribute type 1 has an invalid length. [ 501.946639][T17861] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 501.979651][T17852] veth3: entered promiscuous mode [ 501.989033][T17852] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 501.997899][T17866] netlink: 'syz.0.4127': attribute type 5 has an invalid length. [ 502.277792][T17881] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 502.294121][T17881] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 502.489045][T17894] FAULT_INJECTION: forcing a failure. [ 502.489045][T17894] name failslab, interval 1, probability 0, space 0, times 0 [ 502.501994][T17894] CPU: 0 UID: 0 PID: 17894 Comm: syz.4.4139 Not tainted syzkaller #0 PREEMPT(full) [ 502.502022][T17894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.502035][T17894] Call Trace: [ 502.502044][T17894] [ 502.502053][T17894] dump_stack_lvl+0x189/0x250 [ 502.502081][T17894] ? __pfx____ratelimit+0x10/0x10 [ 502.502103][T17894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.502127][T17894] ? __pfx__printk+0x10/0x10 [ 502.502160][T17894] ? __pfx___might_resched+0x10/0x10 [ 502.502185][T17894] should_fail_ex+0x414/0x560 [ 502.502219][T17894] should_failslab+0xa8/0x100 [ 502.502249][T17894] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 502.502276][T17894] ? __alloc_skb+0x112/0x2d0 [ 502.502302][T17894] __alloc_skb+0x112/0x2d0 [ 502.502328][T17894] netlink_sendmsg+0x5c6/0xb30 [ 502.502361][T17894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.502385][T17894] ? aa_sock_msg_perm+0xf1/0x1d0 [ 502.502408][T17894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.502429][T17894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.502452][T17894] __sock_sendmsg+0x21c/0x270 [ 502.502485][T17894] ____sys_sendmsg+0x505/0x830 [ 502.502516][T17894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.502550][T17894] ? import_iovec+0x74/0xa0 [ 502.502580][T17894] ___sys_sendmsg+0x21f/0x2a0 [ 502.502608][T17894] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.502677][T17894] ? __fget_files+0x2a/0x420 [ 502.502694][T17894] ? __fget_files+0x3a0/0x420 [ 502.502724][T17894] __x64_sys_sendmsg+0x19b/0x260 [ 502.502753][T17894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.502787][T17894] ? __pfx_ksys_write+0x10/0x10 [ 502.502809][T17894] ? rcu_is_watching+0x15/0xb0 [ 502.502835][T17894] ? do_syscall_64+0xbe/0x3b0 [ 502.502860][T17894] do_syscall_64+0xfa/0x3b0 [ 502.502880][T17894] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.502900][T17894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.502920][T17894] ? clear_bhb_loop+0x60/0xb0 [ 502.502943][T17894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.502961][T17894] RIP: 0033:0x7f1d1438eba9 [ 502.502978][T17894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.502995][T17894] RSP: 002b:00007f1d152fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.503016][T17894] RAX: ffffffffffffffda RBX: 00007f1d145d5fa0 RCX: 00007f1d1438eba9 [ 502.503031][T17894] RDX: 0000000000020000 RSI: 0000200000001100 RDI: 0000000000000004 [ 502.503045][T17894] RBP: 00007f1d152fc090 R08: 0000000000000000 R09: 0000000000000000 [ 502.503058][T17894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.503070][T17894] R13: 00007f1d145d6038 R14: 00007f1d145d5fa0 R15: 00007ffffc168a08 [ 502.503103][T17894] [ 503.155928][T17921] netlink: 'syz.2.4149': attribute type 1 has an invalid length. [ 503.172983][T17921] netlink: 'syz.2.4149': attribute type 1 has an invalid length. [ 503.317535][T17927] netlink: 'syz.0.4153': attribute type 2 has an invalid length. [ 503.571318][T17941] FAULT_INJECTION: forcing a failure. [ 503.571318][T17941] name failslab, interval 1, probability 0, space 0, times 0 [ 503.584470][T17941] CPU: 1 UID: 0 PID: 17941 Comm: syz.0.4160 Not tainted syzkaller #0 PREEMPT(full) [ 503.584502][T17941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.584515][T17941] Call Trace: [ 503.584524][T17941] [ 503.584533][T17941] dump_stack_lvl+0x189/0x250 [ 503.584560][T17941] ? __pfx____ratelimit+0x10/0x10 [ 503.584581][T17941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.584605][T17941] ? __pfx__printk+0x10/0x10 [ 503.584638][T17941] ? __pfx___might_resched+0x10/0x10 [ 503.584662][T17941] should_fail_ex+0x414/0x560 [ 503.584696][T17941] should_failslab+0xa8/0x100 [ 503.584727][T17941] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 503.584755][T17941] ? __alloc_skb+0x112/0x2d0 [ 503.584776][T17941] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 503.584806][T17941] __alloc_skb+0x112/0x2d0 [ 503.584833][T17941] __ip_append_data+0x2dae/0x40c0 [ 503.584881][T17941] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 503.584930][T17941] ? __pfx___ip_append_data+0x10/0x10 [ 503.584955][T17941] ? ipv4_mtu+0x4b2/0x5c0 [ 503.584982][T17941] ? ip_setup_cork+0x577/0x9a0 [ 503.585015][T17941] ip_make_skb+0x1de/0x3f0 [ 503.585048][T17941] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 503.585075][T17941] ? __pfx_ip_make_skb+0x10/0x10 [ 503.585124][T17941] udp_sendmsg+0x1925/0x2170 [ 503.585154][T17941] ? process_measurement+0x72d/0x1a40 [ 503.585193][T17941] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 503.585223][T17941] ? __pfx_udp_sendmsg+0x10/0x10 [ 503.585279][T17941] ? __lock_acquire+0xab9/0xd20 [ 503.585329][T17941] udpv6_sendmsg+0xbf0/0x24b0 [ 503.585375][T17941] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 503.585408][T17941] ? __pfx___might_resched+0x10/0x10 [ 503.585444][T17941] ? aa_sk_perm+0x81e/0x950 [ 503.585491][T17941] ? inet_send_prepare+0x5c/0x270 [ 503.585522][T17941] ? inet6_sendmsg+0xe4/0x120 [ 503.585548][T17941] __sock_sendmsg+0xe5/0x270 [ 503.585580][T17941] sock_write_iter+0x258/0x330 [ 503.585610][T17941] ? __pfx_sock_write_iter+0x10/0x10 [ 503.585650][T17941] ? bpf_lsm_file_permission+0x9/0x20 [ 503.585674][T17941] ? security_file_permission+0x75/0x290 [ 503.585710][T17941] vfs_write+0x5c6/0xb30 [ 503.585741][T17941] ? __pfx_sock_write_iter+0x10/0x10 [ 503.585769][T17941] ? __pfx_vfs_write+0x10/0x10 [ 503.585804][T17941] ? __fget_files+0x2a/0x420 [ 503.585832][T17941] ksys_write+0x145/0x250 [ 503.585861][T17941] ? __pfx_ksys_write+0x10/0x10 [ 503.585884][T17941] ? rcu_is_watching+0x15/0xb0 [ 503.585910][T17941] ? do_syscall_64+0xbe/0x3b0 [ 503.585936][T17941] do_syscall_64+0xfa/0x3b0 [ 503.585956][T17941] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.585976][T17941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.585995][T17941] ? clear_bhb_loop+0x60/0xb0 [ 503.586019][T17941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.586038][T17941] RIP: 0033:0x7f3ca9d8eba9 [ 503.586055][T17941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.586072][T17941] RSP: 002b:00007f3caab59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 503.586093][T17941] RAX: ffffffffffffffda RBX: 00007f3ca9fd5fa0 RCX: 00007f3ca9d8eba9 [ 503.586109][T17941] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000003 [ 503.586122][T17941] RBP: 00007f3caab59090 R08: 0000000000000000 R09: 0000000000000000 [ 503.586135][T17941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.586147][T17941] R13: 00007f3ca9fd6038 R14: 00007f3ca9fd5fa0 R15: 00007ffec6919df8 [ 503.586179][T17941] [ 504.570824][T17981] __nla_validate_parse: 8 callbacks suppressed [ 504.570844][T17981] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4170'. [ 504.803783][T17982] syzkaller1: entered allmulticast mode [ 504.850214][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4175'. [ 504.885138][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4175'. [ 505.452087][T18028] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4191'. [ 505.612722][T18039] FAULT_INJECTION: forcing a failure. [ 505.612722][T18039] name failslab, interval 1, probability 0, space 0, times 0 [ 505.656235][T18041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4195'. [ 505.664263][T18039] CPU: 0 UID: 0 PID: 18039 Comm: syz.4.4194 Not tainted syzkaller #0 PREEMPT(full) [ 505.664291][T18039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.664303][T18039] Call Trace: [ 505.664312][T18039] [ 505.664320][T18039] dump_stack_lvl+0x189/0x250 [ 505.664349][T18039] ? __pfx____ratelimit+0x10/0x10 [ 505.664371][T18039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.664394][T18039] ? __pfx__printk+0x10/0x10 [ 505.664427][T18039] ? __pfx___might_resched+0x10/0x10 [ 505.664445][T18039] ? fs_reclaim_acquire+0x7d/0x100 [ 505.664468][T18039] should_fail_ex+0x414/0x560 [ 505.664502][T18039] should_failslab+0xa8/0x100 [ 505.664532][T18039] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 505.664562][T18039] ? __alloc_skb+0x112/0x2d0 [ 505.664588][T18039] __alloc_skb+0x112/0x2d0 [ 505.664614][T18039] netlink_ack+0x146/0xa50 [ 505.664631][T18039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.664655][T18039] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 505.664680][T18039] ? __pfx_nl80211_post_doit+0x10/0x10 [ 505.664708][T18039] ? __asan_memcpy+0x40/0x70 [ 505.664729][T18039] ? __pfx_ref_tracker_free+0x10/0x10 [ 505.664756][T18039] netlink_rcv_skb+0x28c/0x470 [ 505.664774][T18039] ? __lock_acquire+0xab9/0xd20 [ 505.664803][T18039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.664829][T18039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.664870][T18039] ? down_read+0x1ad/0x2e0 [ 505.664896][T18039] genl_rcv+0x28/0x40 [ 505.664919][T18039] netlink_unicast+0x82f/0x9e0 [ 505.664957][T18039] ? __pfx_netlink_unicast+0x10/0x10 [ 505.664989][T18039] ? netlink_sendmsg+0x642/0xb30 [ 505.665008][T18039] ? skb_put+0x11b/0x210 [ 505.665034][T18039] netlink_sendmsg+0x805/0xb30 [ 505.665070][T18039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.665096][T18039] ? aa_sock_msg_perm+0xf1/0x1d0 [ 505.665118][T18039] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.665139][T18039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.665162][T18039] __sock_sendmsg+0x21c/0x270 [ 505.665194][T18039] ____sys_sendmsg+0x505/0x830 [ 505.665221][T18039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.665252][T18039] ? import_iovec+0x74/0xa0 [ 505.665279][T18039] ___sys_sendmsg+0x21f/0x2a0 [ 505.665306][T18039] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.665369][T18039] ? __fget_files+0x2a/0x420 [ 505.665386][T18039] ? __fget_files+0x3a0/0x420 [ 505.665416][T18039] __x64_sys_sendmsg+0x19b/0x260 [ 505.665444][T18039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.665479][T18039] ? __pfx_ksys_write+0x10/0x10 [ 505.665510][T18039] ? do_syscall_64+0xbe/0x3b0 [ 505.665537][T18039] do_syscall_64+0xfa/0x3b0 [ 505.665554][T18039] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.665573][T18039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.665593][T18039] ? clear_bhb_loop+0x60/0xb0 [ 505.665617][T18039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.665636][T18039] RIP: 0033:0x7f1d1438eba9 [ 505.665654][T18039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.665672][T18039] RSP: 002b:00007f1d152db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.665694][T18039] RAX: ffffffffffffffda RBX: 00007f1d145d6090 RCX: 00007f1d1438eba9 [ 505.665708][T18039] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000004 [ 505.665721][T18039] RBP: 00007f1d152db090 R08: 0000000000000000 R09: 0000000000000000 [ 505.665734][T18039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.665746][T18039] R13: 00007f1d145d6128 R14: 00007f1d145d6090 R15: 00007ffffc168a08 [ 505.665778][T18039] [ 505.756189][T18045] netlink: 'syz.1.4199': attribute type 2 has an invalid length. [ 505.820450][T18041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4195'. [ 506.104295][T18052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4195'. [ 506.143652][T18052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4195'. [ 506.331039][T18068] pimreg3: entered allmulticast mode [ 506.398875][T18074] dvmrp0: entered allmulticast mode [ 506.616342][T18083] syzkaller1: entered promiscuous mode [ 506.631427][T18083] syzkaller1: entered allmulticast mode [ 506.734529][T18089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4215'. [ 506.883918][T18097] netlink: 'syz.3.4218': attribute type 1 has an invalid length. [ 507.016470][T18106] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 507.091429][T18099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 507.119057][T18099] bond2: (slave bond3): making interface the new active one [ 507.141722][T18099] bond2: (slave bond3): Enslaving as an active interface with an up link [ 507.180594][T18097] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 507.203729][T18097] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 507.349769][T18119] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4225'. [ 508.112883][T18162] netlink: 'syz.2.4243': attribute type 13 has an invalid length. [ 508.132699][T18162] netlink: 'syz.2.4243': attribute type 13 has an invalid length. [ 508.132947][ T3440] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.161093][ T3440] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.187260][ T3440] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.210394][ T3440] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.557895][T18184] FAULT_INJECTION: forcing a failure. [ 508.557895][T18184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.571246][T18184] CPU: 0 UID: 0 PID: 18184 Comm: syz.0.4252 Not tainted syzkaller #0 PREEMPT(full) [ 508.571274][T18184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.571287][T18184] Call Trace: [ 508.571295][T18184] [ 508.571304][T18184] dump_stack_lvl+0x189/0x250 [ 508.571334][T18184] ? __pfx____ratelimit+0x10/0x10 [ 508.571356][T18184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.571380][T18184] ? __pfx__printk+0x10/0x10 [ 508.571408][T18184] ? __might_fault+0xb0/0x130 [ 508.571449][T18184] should_fail_ex+0x414/0x560 [ 508.571484][T18184] _copy_from_iter+0x1de/0x1790 [ 508.571517][T18184] ? rcu_is_watching+0x15/0xb0 [ 508.571539][T18184] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 508.571569][T18184] ? __pfx__copy_from_iter+0x10/0x10 [ 508.571595][T18184] ? __build_skb_around+0x257/0x3e0 [ 508.571621][T18184] ? netlink_sendmsg+0x642/0xb30 [ 508.571642][T18184] ? skb_put+0x11b/0x210 [ 508.571669][T18184] netlink_sendmsg+0x6b2/0xb30 [ 508.571701][T18184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.571726][T18184] ? aa_sock_msg_perm+0xf1/0x1d0 [ 508.571759][T18184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 508.571780][T18184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.571803][T18184] __sock_sendmsg+0x21c/0x270 [ 508.571836][T18184] ____sys_sendmsg+0x505/0x830 [ 508.571868][T18184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.571903][T18184] ? import_iovec+0x74/0xa0 [ 508.571931][T18184] ___sys_sendmsg+0x21f/0x2a0 [ 508.571959][T18184] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.571999][T18184] ? __fget_files+0x2a/0x420 [ 508.572009][T18184] ? __fget_files+0x3a0/0x420 [ 508.572032][T18184] __x64_sys_sendmsg+0x19b/0x260 [ 508.572047][T18184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.572066][T18184] ? __pfx_ksys_write+0x10/0x10 [ 508.572079][T18184] ? rcu_is_watching+0x15/0xb0 [ 508.572092][T18184] ? do_syscall_64+0xbe/0x3b0 [ 508.572106][T18184] do_syscall_64+0xfa/0x3b0 [ 508.572117][T18184] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.572128][T18184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.572139][T18184] ? clear_bhb_loop+0x60/0xb0 [ 508.572152][T18184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.572162][T18184] RIP: 0033:0x7f3ca9d8eba9 [ 508.572173][T18184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.572183][T18184] RSP: 002b:00007f3caab59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.572195][T18184] RAX: ffffffffffffffda RBX: 00007f3ca9fd5fa0 RCX: 00007f3ca9d8eba9 [ 508.572204][T18184] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 508.572211][T18184] RBP: 00007f3caab59090 R08: 0000000000000000 R09: 0000000000000000 [ 508.572217][T18184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.572223][T18184] R13: 00007f3ca9fd6038 R14: 00007f3ca9fd5fa0 R15: 00007ffec6919df8 [ 508.572241][T18184] [ 509.041401][T18193] syzkaller0: entered promiscuous mode [ 509.073392][T18193] syzkaller0: entered allmulticast mode [ 509.080467][T18192] tipc: Started in network mode [ 509.085430][T18192] tipc: Node identity 2ae8c23cdd8b, cluster identity 4711 [ 509.092694][T18192] tipc: Enabled bearer , priority 0 [ 509.438172][T18214] xt_HMARK: spi-set and port-set can't be combined [ 509.455027][T18191] tipc: Resetting bearer [ 509.521747][T18191] tipc: Disabling bearer [ 509.719118][T18232] __nla_validate_parse: 14 callbacks suppressed [ 509.719136][T18232] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4270'. [ 510.037233][T18251] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.4277'. [ 510.290275][T18263] sctp: [Deprecated]: syz.0.4283 (pid 18263) Use of int in max_burst socket option deprecated. [ 510.290275][T18263] Use struct sctp_assoc_value instead [ 510.645196][T18275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4288'. [ 510.667081][T18277] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.4289'. [ 511.060377][T18295] FAULT_INJECTION: forcing a failure. [ 511.060377][T18295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.080218][T18295] CPU: 1 UID: 0 PID: 18295 Comm: syz.4.4296 Not tainted syzkaller #0 PREEMPT(full) [ 511.080247][T18295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.080260][T18295] Call Trace: [ 511.080269][T18295] [ 511.080278][T18295] dump_stack_lvl+0x189/0x250 [ 511.080308][T18295] ? __pfx____ratelimit+0x10/0x10 [ 511.080330][T18295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.080353][T18295] ? __pfx__printk+0x10/0x10 [ 511.080381][T18295] ? __might_fault+0xb0/0x130 [ 511.080420][T18295] should_fail_ex+0x414/0x560 [ 511.080456][T18295] _copy_from_iter+0x1de/0x1790 [ 511.080488][T18295] ? rcu_is_watching+0x15/0xb0 [ 511.080510][T18295] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 511.080539][T18295] ? __pfx__copy_from_iter+0x10/0x10 [ 511.080565][T18295] ? __build_skb_around+0x257/0x3e0 [ 511.080597][T18295] ? netlink_sendmsg+0x642/0xb30 [ 511.080618][T18295] ? skb_put+0x11b/0x210 [ 511.080645][T18295] netlink_sendmsg+0x6b2/0xb30 [ 511.080677][T18295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.080702][T18295] ? aa_sock_msg_perm+0xf1/0x1d0 [ 511.080725][T18295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.080747][T18295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.080770][T18295] __sock_sendmsg+0x21c/0x270 [ 511.080807][T18295] ____sys_sendmsg+0x505/0x830 [ 511.080838][T18295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.080873][T18295] ? import_iovec+0x74/0xa0 [ 511.080903][T18295] ___sys_sendmsg+0x21f/0x2a0 [ 511.080930][T18295] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.080994][T18295] ? __fget_files+0x2a/0x420 [ 511.081012][T18295] ? __fget_files+0x3a0/0x420 [ 511.081042][T18295] __x64_sys_sendmsg+0x19b/0x260 [ 511.081070][T18295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.081103][T18295] ? __pfx_ksys_write+0x10/0x10 [ 511.081127][T18295] ? rcu_is_watching+0x15/0xb0 [ 511.081152][T18295] ? do_syscall_64+0xbe/0x3b0 [ 511.081178][T18295] do_syscall_64+0xfa/0x3b0 [ 511.081199][T18295] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.081219][T18295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.081238][T18295] ? clear_bhb_loop+0x60/0xb0 [ 511.081262][T18295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.081281][T18295] RIP: 0033:0x7f1d1438eba9 [ 511.081300][T18295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.081318][T18295] RSP: 002b:00007f1d152fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.081340][T18295] RAX: ffffffffffffffda RBX: 00007f1d145d5fa0 RCX: 00007f1d1438eba9 [ 511.081356][T18295] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 511.081370][T18295] RBP: 00007f1d152fc090 R08: 0000000000000000 R09: 0000000000000000 [ 511.081383][T18295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.081395][T18295] R13: 00007f1d145d6038 R14: 00007f1d145d5fa0 R15: 00007ffffc168a08 [ 511.081429][T18295] [ 511.572622][T18315] netlink: 'syz.1.4303': attribute type 8 has an invalid length. [ 511.851850][T18329] FAULT_INJECTION: forcing a failure. [ 511.851850][T18329] name failslab, interval 1, probability 0, space 0, times 0 [ 511.887531][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4307'. [ 511.914776][T18329] CPU: 1 UID: 0 PID: 18329 Comm: syz.1.4308 Not tainted syzkaller #0 PREEMPT(full) [ 511.914805][T18329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.914818][T18329] Call Trace: [ 511.914827][T18329] [ 511.914836][T18329] dump_stack_lvl+0x189/0x250 [ 511.914866][T18329] ? __pfx____ratelimit+0x10/0x10 [ 511.914888][T18329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.914912][T18329] ? __pfx__printk+0x10/0x10 [ 511.914935][T18329] ? genl_rcv+0x28/0x40 [ 511.914961][T18329] ? ____sys_sendmsg+0x505/0x830 [ 511.914985][T18329] ? __x64_sys_sendmsg+0x19b/0x260 [ 511.915022][T18329] should_fail_ex+0x414/0x560 [ 511.915057][T18329] should_failslab+0xa8/0x100 [ 511.915089][T18329] kmem_cache_alloc_noprof+0x73/0x3c0 [ 511.915115][T18329] ? skb_clone+0x212/0x3a0 [ 511.915146][T18329] skb_clone+0x212/0x3a0 [ 511.915173][T18329] __netlink_deliver_tap+0x404/0x850 [ 511.915208][T18329] ? netlink_deliver_tap+0x2e/0x1b0 [ 511.915232][T18329] netlink_deliver_tap+0x19c/0x1b0 [ 511.915255][T18329] netlink_sendskb+0x68/0x140 [ 511.915288][T18329] netlink_unicast+0x397/0x9e0 [ 511.915315][T18329] ? __asan_memcpy+0x40/0x70 [ 511.915347][T18329] ? __pfx_netlink_unicast+0x10/0x10 [ 511.915388][T18329] netlink_rcv_skb+0x28c/0x470 [ 511.915407][T18329] ? __lock_acquire+0xab9/0xd20 [ 511.915437][T18329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.915465][T18329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.915507][T18329] ? down_read+0x1ad/0x2e0 [ 511.915533][T18329] genl_rcv+0x28/0x40 [ 511.915557][T18329] netlink_unicast+0x82f/0x9e0 [ 511.915597][T18329] ? __pfx_netlink_unicast+0x10/0x10 [ 511.915629][T18329] ? netlink_sendmsg+0x642/0xb30 [ 511.915649][T18329] ? skb_put+0x11b/0x210 [ 511.915675][T18329] netlink_sendmsg+0x805/0xb30 [ 511.915707][T18329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.915733][T18329] ? aa_sock_msg_perm+0xf1/0x1d0 [ 511.915760][T18329] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.915782][T18329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.915808][T18329] __sock_sendmsg+0x21c/0x270 [ 511.915841][T18329] ____sys_sendmsg+0x505/0x830 [ 511.915873][T18329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.915909][T18329] ? import_iovec+0x74/0xa0 [ 511.915939][T18329] ___sys_sendmsg+0x21f/0x2a0 [ 511.915967][T18329] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.916033][T18329] ? __fget_files+0x2a/0x420 [ 511.916050][T18329] ? __fget_files+0x3a0/0x420 [ 511.916081][T18329] __x64_sys_sendmsg+0x19b/0x260 [ 511.916108][T18329] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.916145][T18329] ? __pfx_ksys_write+0x10/0x10 [ 511.916178][T18329] ? do_syscall_64+0xbe/0x3b0 [ 511.916206][T18329] do_syscall_64+0xfa/0x3b0 [ 511.916225][T18329] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.916246][T18329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.916266][T18329] ? clear_bhb_loop+0x60/0xb0 [ 511.916291][T18329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.916310][T18329] RIP: 0033:0x7fcbd8f8eba9 [ 511.916328][T18329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.916346][T18329] RSP: 002b:00007fcbd9d95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.916368][T18329] RAX: ffffffffffffffda RBX: 00007fcbd91d6090 RCX: 00007fcbd8f8eba9 [ 511.916383][T18329] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000004 [ 511.916396][T18329] RBP: 00007fcbd9d95090 R08: 0000000000000000 R09: 0000000000000000 [ 511.916409][T18329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.916422][T18329] R13: 00007fcbd91d6128 R14: 00007fcbd91d6090 R15: 00007ffd16603ff8 [ 511.916456][T18329] [ 512.664922][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4315'. [ 512.743924][T18345] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4315'. [ 512.797738][T18345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4315'. [ 512.946398][T18356] netlink: 'syz.0.4320': attribute type 1 has an invalid length. [ 513.011605][T18356] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4320'. [ 513.078618][T14655] tipc: Subscription rejected, illegal request [ 513.169938][T18373] netlink: 'syz.2.4324': attribute type 24 has an invalid length. [ 513.175140][T18376] ------------[ cut here ]------------ [ 513.183515][T18376] WARNING: CPU: 1 PID: 18376 at net/mac80211/tx.c:6202 ieee80211_tx_skb_tid+0x380/0x420 [ 513.193286][T18376] Modules linked in: [ 513.197369][T18376] CPU: 1 UID: 0 PID: 18376 Comm: syz.1.4328 Not tainted syzkaller #0 PREEMPT(full) [ 513.206748][T18376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.216811][T18376] RIP: 0010:ieee80211_tx_skb_tid+0x380/0x420 [ 513.222847][T18376] Code: cd a3 f6 e9 b1 fe ff ff e8 cd f3 c5 f6 90 0f 0b 90 e9 1f fe ff ff e8 bf f3 c5 f6 90 0f 0b 90 e9 2a fe ff ff e8 b1 f3 c5 f6 90 <0f> 0b 90 e8 58 e2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 513.242503][T18376] RSP: 0000:ffffc90012c6f478 EFLAGS: 00010287 [ 513.248623][T18376] RAX: ffffffff8af9cb4f RBX: ffffffff8af9c7ff RCX: 0000000000080000 [ 513.256684][T18376] RDX: ffffc90005014000 RSI: 0000000000002ce7 RDI: 0000000000002ce8 [ 513.264716][T18376] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8af9c7ff [ 513.272699][T18376] R10: dffffc0000000000 R11: ffffed100b166e8e R12: ffff888036234d80 [ 513.280714][T18376] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 513.288723][T18376] FS: 00007fcbd9db66c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 513.297693][T18376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.304317][T18376] CR2: 0000200000000180 CR3: 00000000650ae000 CR4: 00000000003526f0 [ 513.312309][T18376] Call Trace: [ 513.315637][T18376] [ 513.318584][T18376] mesh_plink_frame_tx+0x734/0xc10 [ 513.323756][T18376] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 513.329410][T18376] ? ieee80211_mps_set_sta_local_pm+0xb1/0x310 [ 513.335626][T18376] mesh_plink_deactivate+0x18e/0x2f0 [ 513.340936][T18376] mesh_sta_cleanup+0x42/0x150 [ 513.345712][T18376] cleanup_single_sta+0x40f/0x660 [ 513.350728][T18376] __sta_info_flush+0x5e4/0x710 [ 513.355607][T18376] ? __pfx___sta_info_flush+0x10/0x10 [ 513.360999][T18376] ieee80211_do_stop+0x399/0x1fb0 [ 513.366033][T18376] ? __lock_acquire+0xab9/0xd20 [ 513.370881][T18376] ? do_raw_spin_lock+0x121/0x290 [ 513.375913][T18376] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 513.381281][T18376] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 513.386776][T18376] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 513.392664][T18376] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.397888][T18376] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 513.404252][T18376] ? wiphy_work_cancel+0x1eb/0x3c0 [ 513.409364][T18376] ieee80211_stop+0x1b1/0x240 [ 513.414046][T18376] ? __pfx_ieee80211_stop+0x10/0x10 [ 513.419230][T18376] __dev_close_many+0x364/0x6f0 [ 513.424095][T18376] ? __pfx___dev_close_many+0x10/0x10 [ 513.429459][T18376] __dev_change_flags+0x2c7/0x6d0 [ 513.434497][T18376] ? __pfx___dev_change_flags+0x10/0x10 [ 513.440033][T18376] ? full_name_hash+0x92/0xe0 [ 513.444720][T18376] netif_change_flags+0x88/0x1a0 [ 513.449647][T18376] dev_change_flags+0x130/0x260 [ 513.454507][T18376] dev_ioctl+0x7b4/0x1150 [ 513.458828][T18376] sock_do_ioctl+0x22c/0x300 [ 513.463425][T18376] ? __pfx_sock_do_ioctl+0x10/0x10 [ 513.468530][T18376] ? __lock_acquire+0xab9/0xd20 [ 513.473411][T18376] sock_ioctl+0x576/0x790 [ 513.477729][T18376] ? __pfx_sock_ioctl+0x10/0x10 [ 513.482574][T18376] ? __fget_files+0x2a/0x420 [ 513.487193][T18376] ? __fget_files+0x3a0/0x420 [ 513.491856][T18376] ? __fget_files+0x2a/0x420 [ 513.496455][T18376] ? bpf_lsm_file_ioctl+0x9/0x20 [ 513.501394][T18376] ? __pfx_sock_ioctl+0x10/0x10 [ 513.506252][T18376] __se_sys_ioctl+0xfc/0x170 [ 513.510832][T18376] do_syscall_64+0xfa/0x3b0 [ 513.515362][T18376] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.520569][T18376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.526643][T18376] ? clear_bhb_loop+0x60/0xb0 [ 513.531309][T18376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.537211][T18376] RIP: 0033:0x7fcbd8f8eba9 [ 513.541609][T18376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.561225][T18376] RSP: 002b:00007fcbd9db6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.569659][T18376] RAX: ffffffffffffffda RBX: 00007fcbd91d5fa0 RCX: 00007fcbd8f8eba9 [ 513.577662][T18376] RDX: 0000200000000380 RSI: 0000000000008914 RDI: 0000000000000005 [ 513.585642][T18376] RBP: 00007fcbd9011e19 R08: 0000000000000000 R09: 0000000000000000 [ 513.593632][T18376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.601608][T18376] R13: 00007fcbd91d6038 R14: 00007fcbd91d5fa0 R15: 00007ffd16603ff8 [ 513.609609][T18376] [ 513.612631][T18376] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 513.619908][T18376] CPU: 1 UID: 0 PID: 18376 Comm: syz.1.4328 Not tainted syzkaller #0 PREEMPT(full) [ 513.629293][T18376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.639333][T18376] Call Trace: [ 513.642599][T18376] [ 513.645515][T18376] dump_stack_lvl+0x99/0x250 [ 513.650093][T18376] ? __asan_memcpy+0x40/0x70 [ 513.654668][T18376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.659851][T18376] ? __pfx__printk+0x10/0x10 [ 513.664439][T18376] vpanic+0x281/0x750 [ 513.668406][T18376] ? __pfx__printk+0x10/0x10 [ 513.672995][T18376] ? __pfx_vpanic+0x10/0x10 [ 513.677510][T18376] ? is_bpf_text_address+0x292/0x2b0 [ 513.682825][T18376] panic+0xb9/0xc0 [ 513.686549][T18376] ? __pfx_panic+0x10/0x10 [ 513.690966][T18376] __warn+0x31b/0x4b0 [ 513.694934][T18376] ? ieee80211_tx_skb_tid+0x380/0x420 [ 513.700297][T18376] ? ieee80211_tx_skb_tid+0x380/0x420 [ 513.705663][T18376] report_bug+0x2be/0x4f0 [ 513.709990][T18376] ? ieee80211_tx_skb_tid+0x380/0x420 [ 513.715371][T18376] ? ieee80211_tx_skb_tid+0x380/0x420 [ 513.720756][T18376] ? ieee80211_tx_skb_tid+0x382/0x420 [ 513.726127][T18376] handle_bug+0x84/0x160 [ 513.730363][T18376] exc_invalid_op+0x1a/0x50 [ 513.734857][T18376] asm_exc_invalid_op+0x1a/0x20 [ 513.739711][T18376] RIP: 0010:ieee80211_tx_skb_tid+0x380/0x420 [ 513.745693][T18376] Code: cd a3 f6 e9 b1 fe ff ff e8 cd f3 c5 f6 90 0f 0b 90 e9 1f fe ff ff e8 bf f3 c5 f6 90 0f 0b 90 e9 2a fe ff ff e8 b1 f3 c5 f6 90 <0f> 0b 90 e8 58 e2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 513.765291][T18376] RSP: 0000:ffffc90012c6f478 EFLAGS: 00010287 [ 513.771354][T18376] RAX: ffffffff8af9cb4f RBX: ffffffff8af9c7ff RCX: 0000000000080000 [ 513.779318][T18376] RDX: ffffc90005014000 RSI: 0000000000002ce7 RDI: 0000000000002ce8 [ 513.787301][T18376] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8af9c7ff [ 513.795277][T18376] R10: dffffc0000000000 R11: ffffed100b166e8e R12: ffff888036234d80 [ 513.803258][T18376] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 513.811219][T18376] ? ieee80211_tx_skb_tid+0x2f/0x420 [ 513.816508][T18376] ? ieee80211_tx_skb_tid+0x2f/0x420 [ 513.821788][T18376] ? ieee80211_tx_skb_tid+0x37f/0x420 [ 513.827162][T18376] ? ieee80211_tx_skb_tid+0x37f/0x420 [ 513.832546][T18376] mesh_plink_frame_tx+0x734/0xc10 [ 513.837666][T18376] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 513.843290][T18376] ? ieee80211_mps_set_sta_local_pm+0xb1/0x310 [ 513.849458][T18376] mesh_plink_deactivate+0x18e/0x2f0 [ 513.854747][T18376] mesh_sta_cleanup+0x42/0x150 [ 513.859517][T18376] cleanup_single_sta+0x40f/0x660 [ 513.864544][T18376] __sta_info_flush+0x5e4/0x710 [ 513.869396][T18376] ? __pfx___sta_info_flush+0x10/0x10 [ 513.874767][T18376] ieee80211_do_stop+0x399/0x1fb0 [ 513.879780][T18376] ? __lock_acquire+0xab9/0xd20 [ 513.884634][T18376] ? do_raw_spin_lock+0x121/0x290 [ 513.889656][T18376] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 513.895023][T18376] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 513.900475][T18376] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 513.906365][T18376] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.911559][T18376] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 513.917890][T18376] ? wiphy_work_cancel+0x1eb/0x3c0 [ 513.923006][T18376] ieee80211_stop+0x1b1/0x240 [ 513.927671][T18376] ? __pfx_ieee80211_stop+0x10/0x10 [ 513.932857][T18376] __dev_close_many+0x364/0x6f0 [ 513.937703][T18376] ? __pfx___dev_close_many+0x10/0x10 [ 513.943073][T18376] __dev_change_flags+0x2c7/0x6d0 [ 513.948094][T18376] ? __pfx___dev_change_flags+0x10/0x10 [ 513.953633][T18376] ? full_name_hash+0x92/0xe0 [ 513.958318][T18376] netif_change_flags+0x88/0x1a0 [ 513.963254][T18376] dev_change_flags+0x130/0x260 [ 513.968105][T18376] dev_ioctl+0x7b4/0x1150 [ 513.972427][T18376] sock_do_ioctl+0x22c/0x300 [ 513.977017][T18376] ? __pfx_sock_do_ioctl+0x10/0x10 [ 513.982124][T18376] ? __lock_acquire+0xab9/0xd20 [ 513.986990][T18376] sock_ioctl+0x576/0x790 [ 513.991317][T18376] ? __pfx_sock_ioctl+0x10/0x10 [ 513.996163][T18376] ? __fget_files+0x2a/0x420 [ 514.000741][T18376] ? __fget_files+0x3a0/0x420 [ 514.005409][T18376] ? __fget_files+0x2a/0x420 [ 514.009988][T18376] ? bpf_lsm_file_ioctl+0x9/0x20 [ 514.014919][T18376] ? __pfx_sock_ioctl+0x10/0x10 [ 514.019765][T18376] __se_sys_ioctl+0xfc/0x170 [ 514.024350][T18376] do_syscall_64+0xfa/0x3b0 [ 514.028844][T18376] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.034029][T18376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.040083][T18376] ? clear_bhb_loop+0x60/0xb0 [ 514.044751][T18376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.050637][T18376] RIP: 0033:0x7fcbd8f8eba9 [ 514.055043][T18376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.074639][T18376] RSP: 002b:00007fcbd9db6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.083042][T18376] RAX: ffffffffffffffda RBX: 00007fcbd91d5fa0 RCX: 00007fcbd8f8eba9 [ 514.091005][T18376] RDX: 0000200000000380 RSI: 0000000000008914 RDI: 0000000000000005 [ 514.098965][T18376] RBP: 00007fcbd9011e19 R08: 0000000000000000 R09: 0000000000000000 [ 514.106926][T18376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.114884][T18376] R13: 00007fcbd91d6038 R14: 00007fcbd91d5fa0 R15: 00007ffd16603ff8 [ 514.122863][T18376] [ 514.126120][T18376] Kernel Offset: disabled [ 514.130430][T18376] Rebooting in 86400 seconds..