last executing test programs: 3.692190072s ago: executing program 3 (id=7670): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) 3.654414537s ago: executing program 4 (id=7671): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r1, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) (fail_nth: 9) 3.094414498s ago: executing program 4 (id=7680): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004100)={0x28, 0x3e, 0x107, 0x70bd2c, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xf9}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x8}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (fail_nth: 9) 2.937176758s ago: executing program 0 (id=7682): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000340)="47c9ca1f33e578e3f240d0805ecc6eb6a7d04418a15d352cf8c56814afeb6bb3fbc03f9e8f6de4835f8f6b78fa462f5d61da1387dc8a0a2cd0a1aca073b423cc46e78ce6feb49f0fa4efd55562fee736d8e9b28d0609f0a0c54909e6621be9abd67500bc6f1686c49652fc96e33621f885cbef812d2bf053445aa825dfb970a51dc92b26aee8f8da31f447e1e00cc2f2c3679d8c6bc5b8147dfc749b418dd3dfc3208e0810d9a75ae5", &(0x7f0000000400)}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@enum64={0xd, 0x4, 0x0, 0x13, 0x0, 0x4, [{0x2, 0xb135, 0x6}, {0xd, 0x9, 0x10001}, {0xb, 0x401, 0x7}, {0x10, 0xfffffffb, 0x391}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x27}}, @typedef={0xb}]}, {0x0, [0x61, 0x2e, 0x0, 0x0, 0x30]}}, &(0x7f0000000280)=""/80, 0x7f, 0x50, 0x1, 0xffff8000, 0x10000, @value=r3}, 0x28) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2.767826397s ago: executing program 0 (id=7683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="542341d3eafa5be4b000000000000000000000000c00078008000840000000a00500050000000000050001000700000005000400000000000900020073797a31000000000d000300686173683a6d616300000000"], 0x54}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xa, [@func={0xf, 0x0, 0x0, 0xc, 0x4}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x9}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x5}]}, {0x0, [0x30, 0x2e, 0x2e, 0x0, 0x5f, 0x2e, 0x61, 0x0]}}, &(0x7f0000000940)=""/47, 0x4e, 0x2f, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x2, 0x7, 0x200, r2, 0x136, '\x00', r3, r4, 0x3, 0x0, 0x1, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000240)='GPL\x00'}, 0x90) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xfffffffb}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0xfffffe34}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x0, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "db"}]}], {0x14}}, 0x7c}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000180)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = socket(0x10, 0x2, 0x0) sendto$inet6(r10, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000003080)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x220, 0x1170, 0x1170, 0x0, 0x1170, 0x330, 0x1398, 0x1398, 0x330, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x220, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xff, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0x807fffff, 0x0, 0xff, 0xff000000], 0x4d4, 0x0, 0x2f, 0x0, 0x10, 0x3}, {@ipv6=@private0, [0xffffffff, 0xff, 0xff, 0xffffffff], @ipv4=@empty, [0xff000000, 0xffffffff, 0xff, 0xffffff00], 0x4d5, 0x3503, 0x67, 0x0, 0x1, 0x18}, {@ipv4=@multicast1, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], @ipv6=@remote, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0x4d2, 0x3509, 0x6, 0x1, 0x10, 0x1}, {@ipv4=@rand_addr=0x64010101, [0x0, 0xff000000, 0xff, 0xffffff00], @ipv6=@remote, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d3, 0x34ff, 0x29, 0x0, 0x0, 0x1}], 0x6, 0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0xff000000, 0xffffff00], 'syzkaller1\x00', 'veth0_to_hsr\x00', {}, {}, 0x5e, 0xc, 0x2, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xd8, 0x9, 0x7, 'snmp\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 2.320239268s ago: executing program 3 (id=7685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x270, 0x0, 0xfeffffff, 0x270, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x3, 0xa}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8a1c"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 2.244274863s ago: executing program 4 (id=7686): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x8000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (fail_nth: 6) 1.796860619s ago: executing program 1 (id=7687): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.704262762s ago: executing program 4 (id=7689): sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)={0x34, 0x0, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000207c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc040) 1.703576314s ago: executing program 0 (id=7690): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x86, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a725643f7b3ab502617b472091a730e36aabb2f2426a24a29edbed9463081eef61aa7fab052ffcc89b4bac5bae255a31da7c7b87aca6e0a240ce57daf09b305e2cd418404d54cdca435ab392d48aa01019845", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x4000000) 1.651868237s ago: executing program 3 (id=7691): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async, rerun: 64) pipe(&(0x7f0000000600)) (rerun: 64) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400260000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044804) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 1.596675016s ago: executing program 1 (id=7692): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e10500070088a8000088", 0x1b}], 0x1}, 0x0) 1.503607834s ago: executing program 0 (id=7693): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000f80)={{}, "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"}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x60}}, 0x0) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYRES64=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r8, {0x10}, {0xffff}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8003, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) sendto$inet(r1, &(0x7f0000000180)="ab", 0x1, 0x40448c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x37) r11 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r11, 0x1) ppoll(&(0x7f0000000000)=[{r11}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b000100746172676574000058000280400003009b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f03000000000000000000000001000000000000000a000100484d41524b0000000800024000000000090001007379683000000000140000001100010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.471711976s ago: executing program 4 (id=7694): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x0) (fail_nth: 8) 1.288893974s ago: executing program 1 (id=7695): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000340), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=0x0) syz_open_procfs$namespace(r3, &(0x7f00000002c0)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x1) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) accept$phonet_pipe(r6, &(0x7f0000000200), &(0x7f0000000240)=0x10) 1.288001063s ago: executing program 2 (id=7696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x60, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x4040854) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0xa, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x591}}, 0x0, 0x0, 0x40, 0x0, "387a0ffc862d169b0da9eedbf5a062305d1c6a1b88ec828339671a81f103b0bf64e4928cb671cac5427fb824d03df544781dc451a2bee79627aea4ab4e0297720b2497f7d784afab82a5d44c9951aa46"}, 0xd8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 1.105415956s ago: executing program 4 (id=7697): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 947.128855ms ago: executing program 2 (id=7698): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 839.66823ms ago: executing program 1 (id=7699): socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x24783, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xd, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x16}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 668.209476ms ago: executing program 0 (id=7700): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000280)=""/146, &(0x7f0000000100)=0x92) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ee, &(0x7f0000000200)=0x5) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r5 = accept4(r3, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x0, 0x1c0000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x40) sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) close(r3) close(0x4) 641.152274ms ago: executing program 2 (id=7701): socket$inet(0x2, 0x2, 0x0) 491.319098ms ago: executing program 3 (id=7702): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 426.436561ms ago: executing program 1 (id=7703): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 426.156853ms ago: executing program 2 (id=7704): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x30, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0xb9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (fail_nth: 10) 276.322363ms ago: executing program 0 (id=7705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000000300000000001900007a0000006a9257554d0ceb6063419325d90f05ee0929682fb1538d34876ded27c8e069e74df28627e35bb01225decec4730536deeb38e1c167b58c1345d45f85f0546421bd37bd87f58904868165424721cbbb8525486c1d8232e9a1c34437759e3edb155e2fd0d62e32b81e7b787b617c12e60b69a33986d3d97ce6e8e3db2f514ad42c8c1edb27b4476fa67ff9ae0746bc6c5127a215fa17fedae0975ace5ed72b1747d473cc0d07718aca64bb3638c539d486ade99f7a42d7b740f03288d896d521a2a4c83c5c8be5c95ff1d05cab8bf48185948279af8bc03396dfe882a88df2", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021007d00000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x4, 'syz1\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180020090000000000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) close(r7) 275.990079ms ago: executing program 1 (id=7706): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0xc000}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x11c, 0x2b, 0x1, 0x2, 0x25dfdbfd, "", [@nested={0x109, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x11c}], 0x1}, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@loopback, 0x1800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004800}, 0x40800) shutdown(r0, 0x1) 207.5645ms ago: executing program 3 (id=7707): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00002f44000701fcffffff00000000017c000038000480312d", @ANYRESDEC=r0, @ANYBLOB=':'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 32.395723ms ago: executing program 2 (id=7708): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000223e000709fefffffffcffffff01fc0000040042801c000180100004800c000f0090000000000000000600060088a80000040002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) 31.469025ms ago: executing program 3 (id=7709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @rand_addr, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r2, 0x2f, 0xfa, 0x4, 0x2, 0x4, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x1, 0x28b, 0x5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='hrtimer_expire_entry\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 0s ago: executing program 2 (id=7710): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x30, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0xb9}]}]}, 0x30}, 0x1, 0x300, 0x0, 0xc000}, 0xc010) kernel console output (not intermixed with test programs): 0x82f/0x9e0 [ 667.494232][T28311] ? __pfx_netlink_unicast+0x10/0x10 [ 667.494260][T28311] ? netlink_sendmsg+0x642/0xb30 [ 667.494283][T28311] ? skb_put+0x11b/0x210 [ 667.494313][T28311] netlink_sendmsg+0x805/0xb30 [ 667.494352][T28311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.494384][T28311] ? aa_sock_msg_perm+0xf1/0x1d0 [ 667.494413][T28311] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.494440][T28311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.494468][T28311] __sock_sendmsg+0x21c/0x270 [ 667.494496][T28311] ____sys_sendmsg+0x505/0x830 [ 667.494534][T28311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.494585][T28311] ? import_iovec+0x74/0xa0 [ 667.494619][T28311] ___sys_sendmsg+0x21f/0x2a0 [ 667.494651][T28311] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.494730][T28311] ? __fget_files+0x2a/0x420 [ 667.494754][T28311] ? __fget_files+0x3a0/0x420 [ 667.494792][T28311] __x64_sys_sendmsg+0x19b/0x260 [ 667.494825][T28311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.494868][T28311] ? __pfx_ksys_write+0x10/0x10 [ 667.494895][T28311] ? do_syscall_64+0xbe/0xfa0 [ 667.494931][T28311] do_syscall_64+0xfa/0xfa0 [ 667.494958][T28311] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.494988][T28311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.495009][T28311] ? clear_bhb_loop+0x60/0xb0 [ 667.495035][T28311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.495055][T28311] RIP: 0033:0x7fc054d8eec9 [ 667.495074][T28311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.495092][T28311] RSP: 002b:00007fc055c56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.495115][T28311] RAX: ffffffffffffffda RBX: 00007fc054fe5fa0 RCX: 00007fc054d8eec9 [ 667.495130][T28311] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 667.495144][T28311] RBP: 00007fc055c56090 R08: 0000000000000000 R09: 0000000000000000 [ 667.495156][T28311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.495169][T28311] R13: 00007fc054fe6038 R14: 00007fc054fe5fa0 R15: 00007ffc79ed73c8 [ 667.495208][T28311] [ 667.873526][T28316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7454'. [ 668.025778][T28318] netlink: 'syz.2.7458': attribute type 1 has an invalid length. [ 668.087473][T28327] netlink: 'syz.4.7457': attribute type 1 has an invalid length. [ 668.095830][T28327] netlink: 'syz.4.7457': attribute type 3 has an invalid length. [ 668.104458][T28327] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7457'. [ 668.204603][T28326] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 668.228458][T28326] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 668.279315][T28331] tipc: New replicast peer: 0.0.0.0 [ 668.304150][T28331] tipc: Enabled bearer , priority 10 [ 668.489819][T28331] tipc: New replicast peer: 255.255.255.255 [ 669.427995][ T5890] tipc: Node number set to 2618746892 [ 670.880472][T28388] FAULT_INJECTION: forcing a failure. [ 670.880472][T28388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.899476][T28388] CPU: 1 UID: 0 PID: 28388 Comm: syz.2.7479 Not tainted syzkaller #0 PREEMPT(full) [ 670.899507][T28388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 670.899519][T28388] Call Trace: [ 670.899528][T28388] [ 670.899536][T28388] dump_stack_lvl+0x189/0x250 [ 670.899563][T28388] ? __pfx____ratelimit+0x10/0x10 [ 670.899601][T28388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.899623][T28388] ? __pfx__printk+0x10/0x10 [ 670.899659][T28388] should_fail_ex+0x414/0x560 [ 670.899686][T28388] _copy_to_user+0x31/0xb0 [ 670.899716][T28388] simple_read_from_buffer+0xe1/0x170 [ 670.899746][T28388] proc_fail_nth_read+0x1b3/0x220 [ 670.899780][T28388] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 670.899812][T28388] ? rw_verify_area+0x2a6/0x4d0 [ 670.899831][T28388] ? __lock_acquire+0xab9/0xd20 [ 670.899853][T28388] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 670.899884][T28388] vfs_read+0x1fd/0xa30 [ 670.899904][T28388] ? fdget_pos+0x247/0x320 [ 670.899932][T28388] ? __pfx___mutex_lock+0x10/0x10 [ 670.899952][T28388] ? __pfx_vfs_read+0x10/0x10 [ 670.899975][T28388] ? __fget_files+0x2a/0x420 [ 670.900004][T28388] ? __fget_files+0x3a0/0x420 [ 670.900026][T28388] ? __fget_files+0x2a/0x420 [ 670.900063][T28388] ksys_read+0x145/0x250 [ 670.900087][T28388] ? __pfx_ksys_read+0x10/0x10 [ 670.900113][T28388] ? do_syscall_64+0xbe/0xfa0 [ 670.900147][T28388] do_syscall_64+0xfa/0xfa0 [ 670.900173][T28388] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.900202][T28388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.900222][T28388] ? clear_bhb_loop+0x60/0xb0 [ 670.900246][T28388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.900265][T28388] RIP: 0033:0x7fc054d8d8dc [ 670.900283][T28388] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 670.900301][T28388] RSP: 002b:00007fc055c56030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 670.900324][T28388] RAX: ffffffffffffffda RBX: 00007fc054fe5fa0 RCX: 00007fc054d8d8dc [ 670.900339][T28388] RDX: 000000000000000f RSI: 00007fc055c560a0 RDI: 0000000000000004 [ 670.900351][T28388] RBP: 00007fc055c56090 R08: 0000000000000000 R09: 0000000000000000 [ 670.900363][T28388] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 670.900375][T28388] R13: 00007fc054fe6038 R14: 00007fc054fe5fa0 R15: 00007ffc79ed73c8 [ 670.900411][T28388] [ 670.900812][T28391] xt_l2tp: missing protocol rule (udp|l2tpip) [ 670.901601][T28389] FAULT_INJECTION: forcing a failure. [ 670.901601][T28389] name failslab, interval 1, probability 0, space 0, times 0 [ 670.953970][T28393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7478'. [ 670.987249][T28389] CPU: 1 UID: 0 PID: 28389 Comm: syz.1.7477 Not tainted syzkaller #0 PREEMPT(full) [ 670.987277][T28389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 670.987288][T28389] Call Trace: [ 670.987296][T28389] [ 670.987304][T28389] dump_stack_lvl+0x189/0x250 [ 670.987329][T28389] ? __pfx____ratelimit+0x10/0x10 [ 670.987356][T28389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.987376][T28389] ? __pfx__printk+0x10/0x10 [ 670.987398][T28389] ? __pfx___might_resched+0x10/0x10 [ 670.987426][T28389] ? fs_reclaim_acquire+0x7d/0x100 [ 670.987454][T28389] should_fail_ex+0x414/0x560 [ 670.987478][T28389] should_failslab+0xa8/0x100 [ 670.987502][T28389] __kmalloc_noprof+0xcb/0x4f0 [ 670.987520][T28389] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 670.987546][T28389] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 670.987573][T28389] genl_family_rcv_msg_doit+0xb8/0x300 [ 670.987607][T28389] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 670.987631][T28389] ? __pfx_genl_get_cmd+0x10/0x10 [ 670.987657][T28389] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 670.987682][T28389] ? __pfx_ovs_flow_cmd_dump+0x10/0x10 [ 670.987723][T28389] genl_rcv_msg+0x60e/0x790 [ 670.987750][T28389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.987767][T28389] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 670.987794][T28389] ? __asan_memcpy+0x40/0x70 [ 670.987819][T28389] ? __pfx_ref_tracker_free+0x10/0x10 [ 670.987848][T28389] netlink_rcv_skb+0x205/0x470 [ 670.987869][T28389] ? __lock_acquire+0xab9/0xd20 [ 670.987895][T28389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.987915][T28389] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.987960][T28389] ? down_read+0x1ad/0x2e0 [ 670.987982][T28389] genl_rcv+0x28/0x40 [ 670.987998][T28389] netlink_unicast+0x82f/0x9e0 [ 670.988029][T28389] ? __pfx_netlink_unicast+0x10/0x10 [ 670.988053][T28389] ? netlink_sendmsg+0x642/0xb30 [ 670.988074][T28389] ? skb_put+0x11b/0x210 [ 670.988102][T28389] netlink_sendmsg+0x805/0xb30 [ 670.988136][T28389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.988163][T28389] ? aa_sock_msg_perm+0xf1/0x1d0 [ 670.988189][T28389] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.988213][T28389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.988239][T28389] __sock_sendmsg+0x21c/0x270 [ 670.988263][T28389] ____sys_sendmsg+0x505/0x830 [ 670.988297][T28389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.988333][T28389] ? import_iovec+0x74/0xa0 [ 670.988363][T28389] ___sys_sendmsg+0x21f/0x2a0 [ 670.988391][T28389] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.988458][T28389] ? __fget_files+0x2a/0x420 [ 670.988478][T28389] ? __fget_files+0x3a0/0x420 [ 670.988512][T28389] __x64_sys_sendmsg+0x19b/0x260 [ 670.988541][T28389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.988578][T28389] ? __pfx_ksys_write+0x10/0x10 [ 670.988609][T28389] ? do_syscall_64+0xbe/0xfa0 [ 670.988639][T28389] do_syscall_64+0xfa/0xfa0 [ 670.988664][T28389] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.988689][T28389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.988707][T28389] ? clear_bhb_loop+0x60/0xb0 [ 670.988730][T28389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.988749][T28389] RIP: 0033:0x7fddbe58eec9 [ 670.988768][T28389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.988784][T28389] RSP: 002b:00007fddbf43f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.988805][T28389] RAX: ffffffffffffffda RBX: 00007fddbe7e5fa0 RCX: 00007fddbe58eec9 [ 670.988819][T28389] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 670.988830][T28389] RBP: 00007fddbf43f090 R08: 0000000000000000 R09: 0000000000000000 [ 670.988842][T28389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.988853][T28389] R13: 00007fddbe7e6038 R14: 00007fddbe7e5fa0 R15: 00007ffc7d231eb8 [ 670.988886][T28389] [ 671.004503][T28392] FAULT_INJECTION: forcing a failure. [ 671.004503][T28392] name failslab, interval 1, probability 0, space 0, times 0 [ 671.012282][T28393] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7478'. [ 671.047887][T28396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7481'. [ 671.083623][T28398] Cannot find del_set index 1 as target [ 671.090016][T28392] CPU: 0 UID: 0 PID: 28392 Comm: syz.4.7480 Not tainted syzkaller #0 PREEMPT(full) [ 671.090044][T28392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 671.090055][T28392] Call Trace: [ 671.090063][T28392] [ 671.090072][T28392] dump_stack_lvl+0x189/0x250 [ 671.090097][T28392] ? __pfx____ratelimit+0x10/0x10 [ 671.090123][T28392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.090142][T28392] ? __pfx__printk+0x10/0x10 [ 671.090165][T28392] ? __pfx___might_resched+0x10/0x10 [ 671.090191][T28392] ? fs_reclaim_acquire+0x7d/0x100 [ 671.090221][T28392] should_fail_ex+0x414/0x560 [ 671.090246][T28392] should_failslab+0xa8/0x100 [ 671.090269][T28392] __kmalloc_noprof+0xcb/0x4f0 [ 671.090289][T28392] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 671.090315][T28392] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 671.090342][T28392] genl_family_rcv_msg_doit+0xb8/0x300 [ 671.090368][T28392] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 671.090396][T28392] ? apparmor_capable+0x137/0x1b0 [ 671.090426][T28392] ? bpf_lsm_capable+0x9/0x20 [ 671.090444][T28392] ? security_capable+0x7e/0x2e0 [ 671.090473][T28392] genl_rcv_msg+0x60e/0x790 [ 671.090499][T28392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 671.090515][T28392] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 671.090544][T28392] ? __pfx_nl80211_set_interface+0x10/0x10 [ 671.090566][T28392] ? __pfx_nl80211_post_doit+0x10/0x10 [ 671.090590][T28392] ? __asan_memcpy+0x40/0x70 [ 671.090616][T28392] ? __pfx_ref_tracker_free+0x10/0x10 [ 671.090645][T28392] netlink_rcv_skb+0x205/0x470 [ 671.090667][T28392] ? __lock_acquire+0xab9/0xd20 [ 671.090692][T28392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 671.090712][T28392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 671.090758][T28392] ? down_read+0x1ad/0x2e0 [ 671.090780][T28392] genl_rcv+0x28/0x40 [ 671.090796][T28392] netlink_unicast+0x82f/0x9e0 [ 671.090828][T28392] ? __pfx_netlink_unicast+0x10/0x10 [ 671.090852][T28392] ? netlink_sendmsg+0x642/0xb30 [ 671.090873][T28392] ? skb_put+0x11b/0x210 [ 671.090901][T28392] netlink_sendmsg+0x805/0xb30 [ 671.090935][T28392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.090962][T28392] ? aa_sock_msg_perm+0xf1/0x1d0 [ 671.090988][T28392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.091012][T28392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.091036][T28392] __sock_sendmsg+0x21c/0x270 [ 671.091067][T28392] ____sys_sendmsg+0x505/0x830 [ 671.091101][T28392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.091137][T28392] ? import_iovec+0x74/0xa0 [ 671.091167][T28392] ___sys_sendmsg+0x21f/0x2a0 [ 671.091196][T28392] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.091263][T28392] ? __fget_files+0x2a/0x420 [ 671.091283][T28392] ? __fget_files+0x3a0/0x420 [ 671.091317][T28392] __x64_sys_sendmsg+0x19b/0x260 [ 671.091346][T28392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.091383][T28392] ? __pfx_ksys_write+0x10/0x10 [ 671.091407][T28392] ? do_syscall_64+0xbe/0xfa0 [ 671.091438][T28392] do_syscall_64+0xfa/0xfa0 [ 671.091461][T28392] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.091486][T28392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.091505][T28392] ? clear_bhb_loop+0x60/0xb0 [ 671.091528][T28392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.091552][T28392] RIP: 0033:0x7fc76818eec9 [ 671.091569][T28392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.091585][T28392] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.091606][T28392] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 671.091620][T28392] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 671.091633][T28392] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 671.091644][T28392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.091655][T28392] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 671.091689][T28392] [ 671.205791][T28399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7482'. [ 671.327552][T28398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7482'. [ 671.511406][T28408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7487'. [ 671.643923][T28415] FAULT_INJECTION: forcing a failure. [ 671.643923][T28415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.027096][T28415] CPU: 1 UID: 0 PID: 28415 Comm: syz.0.7486 Not tainted syzkaller #0 PREEMPT(full) [ 672.027126][T28415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 672.027139][T28415] Call Trace: [ 672.027147][T28415] [ 672.027156][T28415] dump_stack_lvl+0x189/0x250 [ 672.027183][T28415] ? __pfx____ratelimit+0x10/0x10 [ 672.027213][T28415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 672.027234][T28415] ? __pfx__printk+0x10/0x10 [ 672.027271][T28415] should_fail_ex+0x414/0x560 [ 672.027300][T28415] _copy_to_user+0x31/0xb0 [ 672.027330][T28415] simple_read_from_buffer+0xe1/0x170 [ 672.027360][T28415] proc_fail_nth_read+0x1b3/0x220 [ 672.027395][T28415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 672.027429][T28415] ? rw_verify_area+0x2a6/0x4d0 [ 672.027448][T28415] ? __lock_acquire+0xab9/0xd20 [ 672.027474][T28415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 672.027506][T28415] vfs_read+0x1fd/0xa30 [ 672.027526][T28415] ? fdget_pos+0x247/0x320 [ 672.027557][T28415] ? __pfx___mutex_lock+0x10/0x10 [ 672.027578][T28415] ? __pfx_vfs_read+0x10/0x10 [ 672.027611][T28415] ? __fget_files+0x2a/0x420 [ 672.027642][T28415] ? __fget_files+0x3a0/0x420 [ 672.027665][T28415] ? __fget_files+0x2a/0x420 [ 672.027700][T28415] ksys_read+0x145/0x250 [ 672.027724][T28415] ? __pfx_ksys_read+0x10/0x10 [ 672.027750][T28415] ? do_syscall_64+0xbe/0xfa0 [ 672.027782][T28415] do_syscall_64+0xfa/0xfa0 [ 672.027808][T28415] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.027834][T28415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.027852][T28415] ? clear_bhb_loop+0x60/0xb0 [ 672.027874][T28415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.027892][T28415] RIP: 0033:0x7fbbfc18d8dc [ 672.027909][T28415] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 672.027926][T28415] RSP: 002b:00007fbbfa3d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 672.027946][T28415] RAX: ffffffffffffffda RBX: 00007fbbfc3e6180 RCX: 00007fbbfc18d8dc [ 672.027960][T28415] RDX: 000000000000000f RSI: 00007fbbfa3d50a0 RDI: 0000000000000004 [ 672.027972][T28415] RBP: 00007fbbfa3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 672.027985][T28415] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 672.027998][T28415] R13: 00007fbbfc3e6218 R14: 00007fbbfc3e6180 R15: 00007ffc16ae4f08 [ 672.028031][T28415] [ 672.546901][T28440] netlink: 'syz.2.7493': attribute type 9 has an invalid length. [ 672.594328][T28445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7495'. [ 672.817062][T28451] netlink: 'syz.1.7498': attribute type 17 has an invalid length. [ 672.825770][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7498'. [ 672.886173][T28456] __nla_validate_parse: 1 callbacks suppressed [ 672.886194][T28456] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7499'. [ 672.913452][T28462] netlink: 'syz.3.7501': attribute type 1 has an invalid length. [ 672.967630][T28463] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7499'. [ 672.979617][T28456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7499'. [ 672.994993][T28461] tipc: Started in network mode [ 673.000963][T28461] tipc: Node identity 4e05b34722ab, cluster identity 4711 [ 673.008882][T28461] tipc: Enabled bearer , priority 0 [ 673.071867][T28460] tipc: Disabling bearer [ 673.571715][T28483] FAULT_INJECTION: forcing a failure. [ 673.571715][T28483] name failslab, interval 1, probability 0, space 0, times 0 [ 673.591831][T28484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7508'. [ 673.601055][T28483] CPU: 0 UID: 0 PID: 28483 Comm: syz.1.7506 Not tainted syzkaller #0 PREEMPT(full) [ 673.601085][T28483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 673.601099][T28483] Call Trace: [ 673.601108][T28483] [ 673.601117][T28483] dump_stack_lvl+0x189/0x250 [ 673.601145][T28483] ? __pfx____ratelimit+0x10/0x10 [ 673.601175][T28483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.601197][T28483] ? __pfx__printk+0x10/0x10 [ 673.601230][T28483] ? __pfx___might_resched+0x10/0x10 [ 673.601261][T28483] ? fs_reclaim_acquire+0x7d/0x100 [ 673.601292][T28483] should_fail_ex+0x414/0x560 [ 673.601322][T28483] should_failslab+0xa8/0x100 [ 673.601349][T28483] kmem_cache_alloc_noprof+0x73/0x3c0 [ 673.601370][T28483] ? ovs_flow_alloc+0x24/0x1f0 [ 673.601401][T28483] ovs_flow_alloc+0x24/0x1f0 [ 673.601429][T28483] ovs_flow_cmd_new+0x1ee/0xd80 [ 673.601456][T28483] ? stack_depot_save_flags+0x40/0x860 [ 673.601477][T28483] ? netlink_unicast+0x721/0x9e0 [ 673.601510][T28483] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 673.601657][T28483] ? __nla_parse+0x40/0x60 [ 673.601686][T28483] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 673.601718][T28483] genl_family_rcv_msg_doit+0x215/0x300 [ 673.601749][T28483] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 673.601787][T28483] ? bpf_lsm_capable+0x9/0x20 [ 673.601807][T28483] ? security_capable+0x7e/0x2e0 [ 673.601838][T28483] genl_rcv_msg+0x60e/0x790 [ 673.601865][T28483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.601885][T28483] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 673.601915][T28483] ? __asan_memcpy+0x40/0x70 [ 673.601944][T28483] ? __pfx_ref_tracker_free+0x10/0x10 [ 673.601983][T28483] netlink_rcv_skb+0x205/0x470 [ 673.602006][T28483] ? __lock_acquire+0xab9/0xd20 [ 673.602033][T28483] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.602055][T28483] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.602105][T28483] ? down_read+0x1ad/0x2e0 [ 673.602130][T28483] genl_rcv+0x28/0x40 [ 673.602147][T28483] netlink_unicast+0x82f/0x9e0 [ 673.602180][T28483] ? __pfx_netlink_unicast+0x10/0x10 [ 673.602207][T28483] ? netlink_sendmsg+0x642/0xb30 [ 673.602231][T28483] ? skb_put+0x11b/0x210 [ 673.602263][T28483] netlink_sendmsg+0x805/0xb30 [ 673.602301][T28483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.602339][T28483] ? aa_sock_msg_perm+0xf1/0x1d0 [ 673.602368][T28483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.602396][T28483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.602423][T28483] __sock_sendmsg+0x21c/0x270 [ 673.602451][T28483] ____sys_sendmsg+0x505/0x830 [ 673.602488][T28483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.602538][T28483] ? import_iovec+0x74/0xa0 [ 673.602571][T28483] ___sys_sendmsg+0x21f/0x2a0 [ 673.602604][T28483] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.602681][T28483] ? __fget_files+0x2a/0x420 [ 673.602705][T28483] ? __fget_files+0x3a0/0x420 [ 673.602744][T28483] __x64_sys_sendmsg+0x19b/0x260 [ 673.602782][T28483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.602825][T28483] ? __pfx_ksys_write+0x10/0x10 [ 673.602853][T28483] ? do_syscall_64+0xbe/0xfa0 [ 673.602887][T28483] do_syscall_64+0xfa/0xfa0 [ 673.602915][T28483] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.602943][T28483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.602970][T28483] ? clear_bhb_loop+0x60/0xb0 [ 673.602995][T28483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.603015][T28483] RIP: 0033:0x7fddbe58eec9 [ 673.603034][T28483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.603053][T28483] RSP: 002b:00007fddbf43f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.603076][T28483] RAX: ffffffffffffffda RBX: 00007fddbe7e5fa0 RCX: 00007fddbe58eec9 [ 673.603091][T28483] RDX: 000000000400c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 673.603105][T28483] RBP: 00007fddbf43f090 R08: 0000000000000000 R09: 0000000000000000 [ 673.603118][T28483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.603131][T28483] R13: 00007fddbe7e6038 R14: 00007fddbe7e5fa0 R15: 00007ffc7d231eb8 [ 673.603177][T28483] [ 674.042152][T28486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7507'. [ 674.253654][T28504] FAULT_INJECTION: forcing a failure. [ 674.253654][T28504] name failslab, interval 1, probability 0, space 0, times 0 [ 674.267058][T28504] CPU: 0 UID: 0 PID: 28504 Comm: syz.3.7512 Not tainted syzkaller #0 PREEMPT(full) [ 674.267085][T28504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 674.267097][T28504] Call Trace: [ 674.267106][T28504] [ 674.267114][T28504] dump_stack_lvl+0x189/0x250 [ 674.267140][T28504] ? __pfx____ratelimit+0x10/0x10 [ 674.267166][T28504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.267185][T28504] ? __pfx__printk+0x10/0x10 [ 674.267208][T28504] ? __pfx___might_resched+0x10/0x10 [ 674.267234][T28504] ? fs_reclaim_acquire+0x7d/0x100 [ 674.267263][T28504] should_fail_ex+0x414/0x560 [ 674.267289][T28504] should_failslab+0xa8/0x100 [ 674.267314][T28504] kmem_cache_alloc_noprof+0x73/0x3c0 [ 674.267332][T28504] ? ovs_flow_alloc+0x24/0x1f0 [ 674.267360][T28504] ovs_flow_alloc+0x24/0x1f0 [ 674.267384][T28504] ovs_flow_cmd_new+0x1ee/0xd80 [ 674.267409][T28504] ? stack_depot_save_flags+0x40/0x860 [ 674.267428][T28504] ? netlink_unicast+0x721/0x9e0 [ 674.267457][T28504] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 674.267564][T28504] ? __nla_parse+0x40/0x60 [ 674.267591][T28504] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 674.267620][T28504] genl_family_rcv_msg_doit+0x215/0x300 [ 674.267649][T28504] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 674.267683][T28504] ? bpf_lsm_capable+0x9/0x20 [ 674.267701][T28504] ? security_capable+0x7e/0x2e0 [ 674.267731][T28504] genl_rcv_msg+0x60e/0x790 [ 674.267759][T28504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.267776][T28504] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 674.267805][T28504] ? __asan_memcpy+0x40/0x70 [ 674.267830][T28504] ? __pfx_ref_tracker_free+0x10/0x10 [ 674.267861][T28504] netlink_rcv_skb+0x205/0x470 [ 674.267883][T28504] ? __lock_acquire+0xab9/0xd20 [ 674.267910][T28504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.267930][T28504] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.267977][T28504] ? down_read+0x1ad/0x2e0 [ 674.268000][T28504] genl_rcv+0x28/0x40 [ 674.268016][T28504] netlink_unicast+0x82f/0x9e0 [ 674.268050][T28504] ? __pfx_netlink_unicast+0x10/0x10 [ 674.268074][T28504] ? netlink_sendmsg+0x642/0xb30 [ 674.268096][T28504] ? skb_put+0x11b/0x210 [ 674.268125][T28504] netlink_sendmsg+0x805/0xb30 [ 674.268161][T28504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.268189][T28504] ? aa_sock_msg_perm+0xf1/0x1d0 [ 674.268216][T28504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.268240][T28504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.268265][T28504] __sock_sendmsg+0x21c/0x270 [ 674.268291][T28504] ____sys_sendmsg+0x505/0x830 [ 674.268324][T28504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.268363][T28504] ? import_iovec+0x74/0xa0 [ 674.268394][T28504] ___sys_sendmsg+0x21f/0x2a0 [ 674.268424][T28504] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.268496][T28504] ? __fget_files+0x2a/0x420 [ 674.268527][T28504] ? __fget_files+0x3a0/0x420 [ 674.268562][T28504] __x64_sys_sendmsg+0x19b/0x260 [ 674.268593][T28504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.268633][T28504] ? __pfx_ksys_write+0x10/0x10 [ 674.268658][T28504] ? do_syscall_64+0xbe/0xfa0 [ 674.268689][T28504] do_syscall_64+0xfa/0xfa0 [ 674.268715][T28504] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.268740][T28504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.268759][T28504] ? clear_bhb_loop+0x60/0xb0 [ 674.268783][T28504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.268801][T28504] RIP: 0033:0x7fe963b8eec9 [ 674.268820][T28504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.268837][T28504] RSP: 002b:00007fe964a23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.268859][T28504] RAX: ffffffffffffffda RBX: 00007fe963de5fa0 RCX: 00007fe963b8eec9 [ 674.268874][T28504] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 674.268886][T28504] RBP: 00007fe964a23090 R08: 0000000000000000 R09: 0000000000000000 [ 674.268899][T28504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.268911][T28504] R13: 00007fe963de6038 R14: 00007fe963de5fa0 R15: 00007ffc809e0088 [ 674.268948][T28504] [ 674.784495][T28508] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7516'. [ 674.805907][T28512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7518'. [ 674.857003][T28512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7518'. [ 674.955874][T28512] tipc: Enabled bearer , priority 0 [ 675.094612][T28512] syzkaller0: entered promiscuous mode [ 675.100264][T28512] syzkaller0: entered allmulticast mode [ 675.108957][T28512] tipc: Resetting bearer [ 675.135799][T28511] tipc: Resetting bearer [ 675.184740][T28531] FAULT_INJECTION: forcing a failure. [ 675.184740][T28531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.202083][T28531] CPU: 1 UID: 0 PID: 28531 Comm: syz.4.7523 Not tainted syzkaller #0 PREEMPT(full) [ 675.202112][T28531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 675.202124][T28531] Call Trace: [ 675.202132][T28531] [ 675.202141][T28531] dump_stack_lvl+0x189/0x250 [ 675.202168][T28531] ? __pfx____ratelimit+0x10/0x10 [ 675.202195][T28531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.202216][T28531] ? __pfx__printk+0x10/0x10 [ 675.202236][T28531] ? __might_fault+0xb0/0x130 [ 675.202270][T28531] should_fail_ex+0x414/0x560 [ 675.202297][T28531] _copy_from_iter+0x1de/0x1790 [ 675.202340][T28531] ? __pfx__copy_from_iter+0x10/0x10 [ 675.202364][T28531] ? ip_route_output_key_hash+0xc1/0x280 [ 675.202396][T28531] ? skb_put+0x11b/0x210 [ 675.202428][T28531] raw_send_hdrinc+0x917/0x14b0 [ 675.202471][T28531] ? __pfx_raw_send_hdrinc+0x10/0x10 [ 675.202505][T28531] raw_sendmsg+0x1357/0x18b0 [ 675.202547][T28531] ? __pfx_raw_sendmsg+0x10/0x10 [ 675.202600][T28531] ? aa_sk_perm+0x81e/0x950 [ 675.202630][T28531] ? __pfx_aa_sk_perm+0x10/0x10 [ 675.202652][T28531] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 675.202684][T28531] ? sock_rps_record_flow+0x19/0x410 [ 675.202713][T28531] ? inet_sendmsg+0x2f4/0x370 [ 675.202735][T28531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.202767][T28531] __sock_sendmsg+0x19c/0x270 [ 675.202794][T28531] ____sys_sendmsg+0x505/0x830 [ 675.202830][T28531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.202870][T28531] ? import_iovec+0x74/0xa0 [ 675.202902][T28531] ___sys_sendmsg+0x21f/0x2a0 [ 675.202934][T28531] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.203009][T28531] ? __fget_files+0x2a/0x420 [ 675.203032][T28531] ? __fget_files+0x3a0/0x420 [ 675.203069][T28531] __x64_sys_sendmsg+0x19b/0x260 [ 675.203101][T28531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.203142][T28531] ? __pfx_ksys_write+0x10/0x10 [ 675.203169][T28531] ? do_syscall_64+0xbe/0xfa0 [ 675.203203][T28531] do_syscall_64+0xfa/0xfa0 [ 675.203230][T28531] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.203258][T28531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.203279][T28531] ? clear_bhb_loop+0x60/0xb0 [ 675.203303][T28531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.203322][T28531] RIP: 0033:0x7fc76818eec9 [ 675.203341][T28531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.203359][T28531] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.203379][T28531] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 675.203392][T28531] RDX: 0000000000048004 RSI: 0000200000003a80 RDI: 0000000000000003 [ 675.203405][T28531] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 675.203417][T28531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.203435][T28531] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 675.203472][T28531] [ 675.530516][T28537] Cannot find add_set index 0 as target [ 675.593644][T28540] FAULT_INJECTION: forcing a failure. [ 675.593644][T28540] name failslab, interval 1, probability 0, space 0, times 0 [ 675.606969][T28540] CPU: 0 UID: 0 PID: 28540 Comm: syz.3.7525 Not tainted syzkaller #0 PREEMPT(full) [ 675.606998][T28540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 675.607009][T28540] Call Trace: [ 675.607017][T28540] [ 675.607025][T28540] dump_stack_lvl+0x189/0x250 [ 675.607051][T28540] ? __pfx____ratelimit+0x10/0x10 [ 675.607077][T28540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.607096][T28540] ? __pfx__printk+0x10/0x10 [ 675.607121][T28540] ? __pfx___might_resched+0x10/0x10 [ 675.607147][T28540] ? fs_reclaim_acquire+0x7d/0x100 [ 675.607175][T28540] should_fail_ex+0x414/0x560 [ 675.607200][T28540] should_failslab+0xa8/0x100 [ 675.607223][T28540] __kmalloc_cache_noprof+0x70/0x3d0 [ 675.607244][T28540] ? rtnl_newlink+0xfb/0x1c80 [ 675.607273][T28540] rtnl_newlink+0xfb/0x1c80 [ 675.607295][T28540] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 675.607311][T28540] ? __netlink_deliver_tap+0x5ad/0x850 [ 675.607335][T28540] ? netlink_deliver_tap+0x19c/0x1b0 [ 675.607357][T28540] ? netlink_unicast+0x7fa/0x9e0 [ 675.607374][T28540] ? netlink_sendmsg+0x805/0xb30 [ 675.607395][T28540] ? __sock_sendmsg+0x21c/0x270 [ 675.607412][T28540] ? ____sys_sendmsg+0x505/0x830 [ 675.607436][T28540] ? ___sys_sendmsg+0x21f/0x2a0 [ 675.607460][T28540] ? __x64_sys_sendmsg+0x19b/0x260 [ 675.607484][T28540] ? do_syscall_64+0xfa/0xfa0 [ 675.607510][T28540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.607535][T28540] ? __pfx_rtnl_newlink+0x10/0x10 [ 675.607599][T28540] ? kasan_quarantine_put+0xdd/0x220 [ 675.607618][T28540] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.607652][T28540] ? nlmon_xmit+0xb0/0x100 [ 675.607674][T28540] ? kmem_cache_free+0x18f/0x400 [ 675.607703][T28540] ? __local_bh_enable_ip+0x12d/0x1c0 [ 675.607732][T28540] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.607760][T28540] ? __local_bh_enable_ip+0x12d/0x1c0 [ 675.607788][T28540] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 675.607821][T28540] ? __dev_queue_xmit+0x27b/0x3b50 [ 675.607837][T28540] ? __dev_queue_xmit+0x27b/0x3b50 [ 675.607851][T28540] ? __dev_queue_xmit+0x27b/0x3b50 [ 675.607867][T28540] ? __dev_queue_xmit+0x1d79/0x3b50 [ 675.607889][T28540] ? __lock_acquire+0xab9/0xd20 [ 675.607939][T28540] ? __pfx_rtnl_newlink+0x10/0x10 [ 675.607961][T28540] rtnetlink_rcv_msg+0x7cc/0xb70 [ 675.607987][T28540] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 675.608008][T28540] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 675.608027][T28540] ? ref_tracker_free+0x63a/0x7d0 [ 675.608047][T28540] ? __asan_memcpy+0x40/0x70 [ 675.608072][T28540] ? __pfx_ref_tracker_free+0x10/0x10 [ 675.608103][T28540] netlink_rcv_skb+0x205/0x470 [ 675.608127][T28540] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 675.608151][T28540] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.608187][T28540] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.608218][T28540] netlink_unicast+0x82f/0x9e0 [ 675.608248][T28540] ? __pfx_netlink_unicast+0x10/0x10 [ 675.608271][T28540] ? netlink_sendmsg+0x642/0xb30 [ 675.608292][T28540] ? skb_put+0x11b/0x210 [ 675.608320][T28540] netlink_sendmsg+0x805/0xb30 [ 675.608353][T28540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.608381][T28540] ? aa_sock_msg_perm+0xf1/0x1d0 [ 675.608407][T28540] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.608430][T28540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.608454][T28540] __sock_sendmsg+0x21c/0x270 [ 675.608478][T28540] ____sys_sendmsg+0x505/0x830 [ 675.608509][T28540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.608544][T28540] ? import_iovec+0x74/0xa0 [ 675.608573][T28540] ___sys_sendmsg+0x21f/0x2a0 [ 675.608609][T28540] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.608674][T28540] ? __fget_files+0x2a/0x420 [ 675.608695][T28540] ? __fget_files+0x3a0/0x420 [ 675.608728][T28540] __x64_sys_sendmsg+0x19b/0x260 [ 675.608756][T28540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.608792][T28540] ? __pfx_ksys_write+0x10/0x10 [ 675.608817][T28540] ? do_syscall_64+0xbe/0xfa0 [ 675.608846][T28540] do_syscall_64+0xfa/0xfa0 [ 675.608871][T28540] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.608895][T28540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.608913][T28540] ? clear_bhb_loop+0x60/0xb0 [ 675.608935][T28540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.608951][T28540] RIP: 0033:0x7fe963b8eec9 [ 675.608970][T28540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.608987][T28540] RSP: 002b:00007fe9649e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.609008][T28540] RAX: ffffffffffffffda RBX: 00007fe963de6180 RCX: 00007fe963b8eec9 [ 675.609022][T28540] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000008 [ 675.609034][T28540] RBP: 00007fe9649e1090 R08: 0000000000000000 R09: 0000000000000000 [ 675.609045][T28540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.609057][T28540] R13: 00007fe963de6218 R14: 00007fe963de6180 R15: 00007ffc809e0088 [ 675.609091][T28540] [ 676.086140][ T5890] tipc: Node number set to 4018116915 [ 678.044193][T28511] tipc: Disabling bearer [ 678.057668][T28535] tipc: Enabled bearer , priority 0 [ 678.067186][T28538] tipc: Disabling bearer [ 678.469931][T28578] FAULT_INJECTION: forcing a failure. [ 678.469931][T28578] name failslab, interval 1, probability 0, space 0, times 0 [ 678.506491][T28578] CPU: 1 UID: 0 PID: 28578 Comm: syz.0.7536 Not tainted syzkaller #0 PREEMPT(full) [ 678.506521][T28578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 678.506534][T28578] Call Trace: [ 678.506544][T28578] [ 678.506553][T28578] dump_stack_lvl+0x189/0x250 [ 678.506582][T28578] ? __pfx____ratelimit+0x10/0x10 [ 678.506612][T28578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.506634][T28578] ? __pfx__printk+0x10/0x10 [ 678.506659][T28578] ? __pfx___might_resched+0x10/0x10 [ 678.506689][T28578] ? fs_reclaim_acquire+0x7d/0x100 [ 678.506720][T28578] should_fail_ex+0x414/0x560 [ 678.506749][T28578] should_failslab+0xa8/0x100 [ 678.506775][T28578] kmem_cache_alloc_noprof+0x73/0x3c0 [ 678.506796][T28578] ? ovs_flow_alloc+0x24/0x1f0 [ 678.506825][T28578] ovs_flow_alloc+0x24/0x1f0 [ 678.506852][T28578] ovs_flow_cmd_new+0x1ee/0xd80 [ 678.506879][T28578] ? stack_depot_save_flags+0x40/0x860 [ 678.506901][T28578] ? netlink_unicast+0x721/0x9e0 [ 678.506932][T28578] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 678.507034][T28578] ? __nla_parse+0x40/0x60 [ 678.507064][T28578] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 678.507101][T28578] genl_family_rcv_msg_doit+0x215/0x300 [ 678.507132][T28578] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 678.507170][T28578] ? bpf_lsm_capable+0x9/0x20 [ 678.507190][T28578] ? security_capable+0x7e/0x2e0 [ 678.507223][T28578] genl_rcv_msg+0x60e/0x790 [ 678.507262][T28578] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.507282][T28578] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 678.507313][T28578] ? __asan_memcpy+0x40/0x70 [ 678.507341][T28578] ? __pfx_ref_tracker_free+0x10/0x10 [ 678.507375][T28578] netlink_rcv_skb+0x205/0x470 [ 678.507398][T28578] ? __lock_acquire+0xab9/0xd20 [ 678.507426][T28578] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.507448][T28578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.507496][T28578] ? down_read+0x1ad/0x2e0 [ 678.507520][T28578] genl_rcv+0x28/0x40 [ 678.507538][T28578] netlink_unicast+0x82f/0x9e0 [ 678.507574][T28578] ? __pfx_netlink_unicast+0x10/0x10 [ 678.507600][T28578] ? netlink_sendmsg+0x642/0xb30 [ 678.507624][T28578] ? skb_put+0x11b/0x210 [ 678.507655][T28578] netlink_sendmsg+0x805/0xb30 [ 678.507693][T28578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.507724][T28578] ? aa_sock_msg_perm+0xf1/0x1d0 [ 678.507754][T28578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 678.507782][T28578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.507809][T28578] __sock_sendmsg+0x21c/0x270 [ 678.507836][T28578] ____sys_sendmsg+0x505/0x830 [ 678.507873][T28578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.507913][T28578] ? import_iovec+0x74/0xa0 [ 678.507947][T28578] ___sys_sendmsg+0x21f/0x2a0 [ 678.507979][T28578] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.508054][T28578] ? __fget_files+0x2a/0x420 [ 678.508079][T28578] ? __fget_files+0x3a0/0x420 [ 678.508116][T28578] __x64_sys_sendmsg+0x19b/0x260 [ 678.508149][T28578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.508191][T28578] ? __pfx_ksys_write+0x10/0x10 [ 678.508219][T28578] ? do_syscall_64+0xbe/0xfa0 [ 678.508262][T28578] do_syscall_64+0xfa/0xfa0 [ 678.508289][T28578] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.508319][T28578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.508340][T28578] ? clear_bhb_loop+0x60/0xb0 [ 678.508366][T28578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.508385][T28578] RIP: 0033:0x7fbbfc18eec9 [ 678.508405][T28578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.508422][T28578] RSP: 002b:00007fbbfcf4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.508446][T28578] RAX: ffffffffffffffda RBX: 00007fbbfc3e5fa0 RCX: 00007fbbfc18eec9 [ 678.508461][T28578] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 678.508475][T28578] RBP: 00007fbbfcf4f090 R08: 0000000000000000 R09: 0000000000000000 [ 678.508487][T28578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.508499][T28578] R13: 00007fbbfc3e6038 R14: 00007fbbfc3e5fa0 R15: 00007ffc16ae4f08 [ 678.508538][T28578] [ 679.109421][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7540'. [ 679.137742][T28591] xt_TCPMSS: Only works on TCP SYN packets [ 679.148127][T28589] netlink: 'syz.1.7542': attribute type 10 has an invalid length. [ 679.159642][T28589] bond0: (slave wlan1): Opening slave failed [ 679.298141][T28601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7544'. [ 679.332165][T28601] FAULT_INJECTION: forcing a failure. [ 679.332165][T28601] name failslab, interval 1, probability 0, space 0, times 0 [ 679.346451][T28601] CPU: 1 UID: 0 PID: 28601 Comm: syz.2.7544 Not tainted syzkaller #0 PREEMPT(full) [ 679.346481][T28601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 679.346494][T28601] Call Trace: [ 679.346503][T28601] [ 679.346513][T28601] dump_stack_lvl+0x189/0x250 [ 679.346541][T28601] ? __pfx____ratelimit+0x10/0x10 [ 679.346581][T28601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.346603][T28601] ? __pfx__printk+0x10/0x10 [ 679.346633][T28601] ? __pfx___might_resched+0x10/0x10 [ 679.346662][T28601] ? fs_reclaim_acquire+0x7d/0x100 [ 679.346695][T28601] should_fail_ex+0x414/0x560 [ 679.346724][T28601] should_failslab+0xa8/0x100 [ 679.346751][T28601] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 679.346774][T28601] ? __alloc_skb+0x112/0x2d0 [ 679.346806][T28601] __alloc_skb+0x112/0x2d0 [ 679.346838][T28601] netlink_ack+0x146/0xa50 [ 679.346861][T28601] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.346887][T28601] ? __asan_memcpy+0x40/0x70 [ 679.346916][T28601] ? __pfx_ref_tracker_free+0x10/0x10 [ 679.346949][T28601] netlink_rcv_skb+0x28c/0x470 [ 679.346973][T28601] ? __lock_acquire+0xab9/0xd20 [ 679.347001][T28601] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.347024][T28601] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 679.347074][T28601] ? down_read+0x1ad/0x2e0 [ 679.347098][T28601] genl_rcv+0x28/0x40 [ 679.347116][T28601] netlink_unicast+0x82f/0x9e0 [ 679.347152][T28601] ? __pfx_netlink_unicast+0x10/0x10 [ 679.347179][T28601] ? netlink_sendmsg+0x642/0xb30 [ 679.347204][T28601] ? skb_put+0x11b/0x210 [ 679.347236][T28601] netlink_sendmsg+0x805/0xb30 [ 679.347275][T28601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.347307][T28601] ? aa_sock_msg_perm+0xf1/0x1d0 [ 679.347336][T28601] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.347364][T28601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.347393][T28601] __sock_sendmsg+0x21c/0x270 [ 679.347420][T28601] ____sys_sendmsg+0x505/0x830 [ 679.347458][T28601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.347496][T28601] ? import_iovec+0x74/0xa0 [ 679.347530][T28601] ___sys_sendmsg+0x21f/0x2a0 [ 679.347570][T28601] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.347646][T28601] ? __fget_files+0x2a/0x420 [ 679.347671][T28601] ? __fget_files+0x3a0/0x420 [ 679.347710][T28601] __x64_sys_sendmsg+0x19b/0x260 [ 679.347743][T28601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.347785][T28601] ? __pfx_ksys_write+0x10/0x10 [ 679.347813][T28601] ? do_syscall_64+0xbe/0xfa0 [ 679.347847][T28601] do_syscall_64+0xfa/0xfa0 [ 679.347874][T28601] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.347904][T28601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.347926][T28601] ? clear_bhb_loop+0x60/0xb0 [ 679.347952][T28601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.347972][T28601] RIP: 0033:0x7fc054d8eec9 [ 679.347992][T28601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.348011][T28601] RSP: 002b:00007fc055c56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.348035][T28601] RAX: ffffffffffffffda RBX: 00007fc054fe5fa0 RCX: 00007fc054d8eec9 [ 679.348050][T28601] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 679.348064][T28601] RBP: 00007fc055c56090 R08: 0000000000000000 R09: 0000000000000000 [ 679.348078][T28601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.348090][T28601] R13: 00007fc054fe6038 R14: 00007fc054fe5fa0 R15: 00007ffc79ed73c8 [ 679.348130][T28601] [ 680.184168][T28630] Bluetooth: MGMT ver 1.23 [ 680.191653][T28631] netlink: 'syz.3.7556': attribute type 10 has an invalid length. [ 680.290260][T28635] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 680.304951][T28635] FAULT_INJECTION: forcing a failure. [ 680.304951][T28635] name failslab, interval 1, probability 0, space 0, times 0 [ 680.319376][T28635] CPU: 0 UID: 0 PID: 28635 Comm: syz.0.7557 Not tainted syzkaller #0 PREEMPT(full) [ 680.319411][T28635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 680.319424][T28635] Call Trace: [ 680.319433][T28635] [ 680.319443][T28635] dump_stack_lvl+0x189/0x250 [ 680.319469][T28635] ? __pfx____ratelimit+0x10/0x10 [ 680.319499][T28635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.319521][T28635] ? __pfx__printk+0x10/0x10 [ 680.319550][T28635] ? __pfx___might_resched+0x10/0x10 [ 680.319579][T28635] ? fs_reclaim_acquire+0x7d/0x100 [ 680.319611][T28635] should_fail_ex+0x414/0x560 [ 680.319639][T28635] should_failslab+0xa8/0x100 [ 680.319666][T28635] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 680.319689][T28635] ? __alloc_skb+0x112/0x2d0 [ 680.319721][T28635] __alloc_skb+0x112/0x2d0 [ 680.319752][T28635] netlink_ack+0x146/0xa50 [ 680.319775][T28635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.319800][T28635] ? __asan_memcpy+0x40/0x70 [ 680.319829][T28635] ? __pfx_ref_tracker_free+0x10/0x10 [ 680.319863][T28635] netlink_rcv_skb+0x28c/0x470 [ 680.319886][T28635] ? __lock_acquire+0xab9/0xd20 [ 680.319915][T28635] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.319938][T28635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 680.319989][T28635] ? down_read+0x1ad/0x2e0 [ 680.320013][T28635] genl_rcv+0x28/0x40 [ 680.320031][T28635] netlink_unicast+0x82f/0x9e0 [ 680.320067][T28635] ? __pfx_netlink_unicast+0x10/0x10 [ 680.320094][T28635] ? netlink_sendmsg+0x642/0xb30 [ 680.320118][T28635] ? skb_put+0x11b/0x210 [ 680.320150][T28635] netlink_sendmsg+0x805/0xb30 [ 680.320189][T28635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.320229][T28635] ? aa_sock_msg_perm+0xf1/0x1d0 [ 680.320258][T28635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 680.320286][T28635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.320314][T28635] __sock_sendmsg+0x21c/0x270 [ 680.320341][T28635] ____sys_sendmsg+0x505/0x830 [ 680.320378][T28635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.320419][T28635] ? import_iovec+0x74/0xa0 [ 680.320452][T28635] ___sys_sendmsg+0x21f/0x2a0 [ 680.320484][T28635] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.320560][T28635] ? __fget_files+0x2a/0x420 [ 680.320583][T28635] ? __fget_files+0x3a0/0x420 [ 680.320621][T28635] __x64_sys_sendmsg+0x19b/0x260 [ 680.320654][T28635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 680.320696][T28635] ? __pfx_ksys_write+0x10/0x10 [ 680.320723][T28635] ? do_syscall_64+0xbe/0xfa0 [ 680.320757][T28635] do_syscall_64+0xfa/0xfa0 [ 680.320784][T28635] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.320813][T28635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.320833][T28635] ? clear_bhb_loop+0x60/0xb0 [ 680.320860][T28635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.320880][T28635] RIP: 0033:0x7fbbfc18eec9 [ 680.320899][T28635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.320917][T28635] RSP: 002b:00007fbbfcf4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.320940][T28635] RAX: ffffffffffffffda RBX: 00007fbbfc3e5fa0 RCX: 00007fbbfc18eec9 [ 680.320956][T28635] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 680.320969][T28635] RBP: 00007fbbfcf4f090 R08: 0000000000000000 R09: 0000000000000000 [ 680.320982][T28635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.320994][T28635] R13: 00007fbbfc3e6038 R14: 00007fbbfc3e5fa0 R15: 00007ffc16ae4f08 [ 680.321032][T28635] [ 680.346428][T28638] FAULT_INJECTION: forcing a failure. [ 680.346428][T28638] name failslab, interval 1, probability 0, space 0, times 0 [ 680.507073][T28644] bond0: entered promiscuous mode [ 680.507548][T28638] CPU: 1 UID: 0 PID: 28638 Comm: syz.4.7558 Not tainted syzkaller #0 PREEMPT(full) [ 680.507572][T28638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 680.507584][T28638] Call Trace: [ 680.507592][T28638] [ 680.507600][T28638] dump_stack_lvl+0x189/0x250 [ 680.507625][T28638] ? __pfx____ratelimit+0x10/0x10 [ 680.507652][T28638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.507671][T28638] ? __pfx__printk+0x10/0x10 [ 680.507696][T28638] ? __pfx___might_resched+0x10/0x10 [ 680.507722][T28638] ? fs_reclaim_acquire+0x7d/0x100 [ 680.507751][T28638] should_fail_ex+0x414/0x560 [ 680.507776][T28638] should_failslab+0xa8/0x100 [ 680.507799][T28638] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 680.507820][T28638] ? __alloc_skb+0x112/0x2d0 [ 680.507848][T28638] __alloc_skb+0x112/0x2d0 [ 680.507876][T28638] netlink_ack+0x146/0xa50 [ 680.507897][T28638] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.507914][T28638] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 680.507936][T28638] ? __pfx_nl80211_post_doit+0x10/0x10 [ 680.507960][T28638] ? __asan_memcpy+0x40/0x70 [ 680.507985][T28638] ? __pfx_ref_tracker_free+0x10/0x10 [ 680.508014][T28638] netlink_rcv_skb+0x28c/0x470 [ 680.508035][T28638] ? __lock_acquire+0xab9/0xd20 [ 680.508060][T28638] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.508080][T28638] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 680.508124][T28638] ? down_read+0x1ad/0x2e0 [ 680.508146][T28638] genl_rcv+0x28/0x40 [ 680.508162][T28638] netlink_unicast+0x82f/0x9e0 [ 680.508193][T28638] ? __pfx_netlink_unicast+0x10/0x10 [ 680.508216][T28638] ? netlink_sendmsg+0x642/0xb30 [ 680.508237][T28638] ? skb_put+0x11b/0x210 [ 680.508265][T28638] netlink_sendmsg+0x805/0xb30 [ 680.508299][T28638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.508327][T28638] ? aa_sock_msg_perm+0xf1/0x1d0 [ 680.508352][T28638] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 680.508376][T28638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.508401][T28638] __sock_sendmsg+0x21c/0x270 [ 680.508425][T28638] ____sys_sendmsg+0x505/0x830 [ 680.508457][T28638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.508501][T28638] ? import_iovec+0x74/0xa0 [ 680.508530][T28638] ___sys_sendmsg+0x21f/0x2a0 [ 680.508559][T28638] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.508626][T28638] ? __fget_files+0x2a/0x420 [ 680.508646][T28638] ? __fget_files+0x3a0/0x420 [ 680.508681][T28638] __x64_sys_sendmsg+0x19b/0x260 [ 680.508710][T28638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 680.508747][T28638] ? __pfx_ksys_write+0x10/0x10 [ 680.508771][T28638] ? do_syscall_64+0xbe/0xfa0 [ 680.508801][T28638] do_syscall_64+0xfa/0xfa0 [ 680.508825][T28638] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.508850][T28638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.508868][T28638] ? clear_bhb_loop+0x60/0xb0 [ 680.508891][T28638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.508908][T28638] RIP: 0033:0x7fc76818eec9 [ 680.508926][T28638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.508942][T28638] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.508963][T28638] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 680.508976][T28638] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 680.508988][T28638] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 680.508999][T28638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.509010][T28638] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 680.509043][T28638] [ 680.586469][T28646] FAULT_INJECTION: forcing a failure. [ 680.586469][T28646] name failslab, interval 1, probability 0, space 0, times 0 [ 680.610892][T28644] bond_slave_0: entered promiscuous mode [ 680.718566][T28646] CPU: 1 UID: 0 PID: 28646 Comm: syz.4.7561 Not tainted syzkaller #0 PREEMPT(full) [ 680.718594][T28646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 680.718606][T28646] Call Trace: [ 680.718614][T28646] [ 680.718623][T28646] dump_stack_lvl+0x189/0x250 [ 680.718649][T28646] ? __pfx____ratelimit+0x10/0x10 [ 680.718675][T28646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.718694][T28646] ? __pfx__printk+0x10/0x10 [ 680.718717][T28646] ? __pfx___might_resched+0x10/0x10 [ 680.718744][T28646] ? fs_reclaim_acquire+0x7d/0x100 [ 680.718773][T28646] should_fail_ex+0x414/0x560 [ 680.718798][T28646] should_failslab+0xa8/0x100 [ 680.718822][T28646] kmem_cache_alloc_noprof+0x73/0x3c0 [ 680.718841][T28646] ? ovs_flow_alloc+0x24/0x1f0 [ 680.718867][T28646] ovs_flow_alloc+0x24/0x1f0 [ 680.718897][T28646] ovs_flow_cmd_new+0x1ee/0xd80 [ 680.718921][T28646] ? stack_depot_save_flags+0x40/0x860 [ 680.718941][T28646] ? netlink_unicast+0x721/0x9e0 [ 680.718969][T28646] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 680.719059][T28646] ? __nla_parse+0x40/0x60 [ 680.719086][T28646] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 680.719114][T28646] genl_family_rcv_msg_doit+0x215/0x300 [ 680.719141][T28646] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 680.719175][T28646] ? bpf_lsm_capable+0x9/0x20 [ 680.719192][T28646] ? security_capable+0x7e/0x2e0 [ 680.719221][T28646] genl_rcv_msg+0x60e/0x790 [ 680.719246][T28646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.719263][T28646] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 680.719290][T28646] ? __asan_memcpy+0x40/0x70 [ 680.719316][T28646] ? __pfx_ref_tracker_free+0x10/0x10 [ 680.719345][T28646] netlink_rcv_skb+0x205/0x470 [ 680.719366][T28646] ? __lock_acquire+0xab9/0xd20 [ 680.719391][T28646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 680.719410][T28646] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 680.719454][T28646] ? down_read+0x1ad/0x2e0 [ 680.719483][T28646] genl_rcv+0x28/0x40 [ 680.719499][T28646] netlink_unicast+0x82f/0x9e0 [ 680.719530][T28646] ? __pfx_netlink_unicast+0x10/0x10 [ 680.719553][T28646] ? netlink_sendmsg+0x642/0xb30 [ 680.719575][T28646] ? skb_put+0x11b/0x210 [ 680.719603][T28646] netlink_sendmsg+0x805/0xb30 [ 680.719637][T28646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.719665][T28646] ? aa_sock_msg_perm+0xf1/0x1d0 [ 680.719690][T28646] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 680.719714][T28646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.719738][T28646] __sock_sendmsg+0x21c/0x270 [ 680.719762][T28646] ____sys_sendmsg+0x505/0x830 [ 680.719795][T28646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.719832][T28646] ? import_iovec+0x74/0xa0 [ 680.719863][T28646] ___sys_sendmsg+0x21f/0x2a0 [ 680.719891][T28646] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.719957][T28646] ? __fget_files+0x2a/0x420 [ 680.719978][T28646] ? __fget_files+0x3a0/0x420 [ 680.720012][T28646] __x64_sys_sendmsg+0x19b/0x260 [ 680.720041][T28646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 680.720077][T28646] ? __pfx_ksys_write+0x10/0x10 [ 680.720102][T28646] ? do_syscall_64+0xbe/0xfa0 [ 680.720132][T28646] do_syscall_64+0xfa/0xfa0 [ 680.720156][T28646] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.720181][T28646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.720199][T28646] ? clear_bhb_loop+0x60/0xb0 [ 680.720223][T28646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.720240][T28646] RIP: 0033:0x7fc76818eec9 [ 680.720258][T28646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.720275][T28646] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.720297][T28646] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 680.720311][T28646] RDX: 000000000000c040 RSI: 0000200000000000 RDI: 0000000000000003 [ 680.720324][T28646] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 680.720335][T28646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.720347][T28646] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 680.720381][T28646] [ 680.842742][T28655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7563'. [ 680.847075][T28644] bond_slave_1: entered promiscuous mode [ 680.885032][T28653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7562'. [ 680.894780][T28644] mac80211_hwsim hwsim58 wlan1: entered promiscuous mode [ 680.953511][T28662] netlink: 'syz.0.7562': attribute type 5 has an invalid length. [ 681.534903][T28658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7564'. [ 681.783816][T28674] netlink: 'syz.0.7569': attribute type 10 has an invalid length. [ 681.813085][T28674] bond0: (slave wlan1): Opening slave failed [ 682.051254][T28692] FAULT_INJECTION: forcing a failure. [ 682.051254][T28692] name failslab, interval 1, probability 0, space 0, times 0 [ 682.102286][T28692] CPU: 1 UID: 0 PID: 28692 Comm: syz.3.7575 Not tainted syzkaller #0 PREEMPT(full) [ 682.102316][T28692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 682.102329][T28692] Call Trace: [ 682.102339][T28692] [ 682.102349][T28692] dump_stack_lvl+0x189/0x250 [ 682.102376][T28692] ? __pfx____ratelimit+0x10/0x10 [ 682.102406][T28692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.102427][T28692] ? __pfx__printk+0x10/0x10 [ 682.102452][T28692] ? __pfx___might_resched+0x10/0x10 [ 682.102482][T28692] ? fs_reclaim_acquire+0x7d/0x100 [ 682.102519][T28692] should_fail_ex+0x414/0x560 [ 682.102548][T28692] should_failslab+0xa8/0x100 [ 682.102575][T28692] __kmalloc_noprof+0xcb/0x4f0 [ 682.102597][T28692] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 682.102627][T28692] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 682.102658][T28692] genl_family_rcv_msg_doit+0xb8/0x300 [ 682.102687][T28692] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 682.102719][T28692] ? apparmor_capable+0x137/0x1b0 [ 682.102754][T28692] ? bpf_lsm_capable+0x9/0x20 [ 682.102776][T28692] ? security_capable+0x7e/0x2e0 [ 682.102809][T28692] genl_rcv_msg+0x60e/0x790 [ 682.102838][T28692] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.102858][T28692] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 682.102892][T28692] ? __asan_memcpy+0x40/0x70 [ 682.102921][T28692] ? __pfx_ref_tracker_free+0x10/0x10 [ 682.102954][T28692] netlink_rcv_skb+0x205/0x470 [ 682.102978][T28692] ? __lock_acquire+0xab9/0xd20 [ 682.103007][T28692] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.103031][T28692] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.103083][T28692] ? down_read+0x1ad/0x2e0 [ 682.103108][T28692] genl_rcv+0x28/0x40 [ 682.103126][T28692] netlink_unicast+0x82f/0x9e0 [ 682.103161][T28692] ? __pfx_netlink_unicast+0x10/0x10 [ 682.103188][T28692] ? netlink_sendmsg+0x642/0xb30 [ 682.103220][T28692] ? skb_put+0x11b/0x210 [ 682.103253][T28692] netlink_sendmsg+0x805/0xb30 [ 682.103293][T28692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.103325][T28692] ? aa_sock_msg_perm+0xf1/0x1d0 [ 682.103352][T28692] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.103380][T28692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.103408][T28692] __sock_sendmsg+0x21c/0x270 [ 682.103443][T28692] ____sys_sendmsg+0x505/0x830 [ 682.103479][T28692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.103518][T28692] ? import_iovec+0x74/0xa0 [ 682.103551][T28692] ___sys_sendmsg+0x21f/0x2a0 [ 682.103583][T28692] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.103659][T28692] ? __fget_files+0x2a/0x420 [ 682.103683][T28692] ? __fget_files+0x3a0/0x420 [ 682.103721][T28692] __x64_sys_sendmsg+0x19b/0x260 [ 682.103754][T28692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.103796][T28692] ? __pfx_ksys_write+0x10/0x10 [ 682.103824][T28692] ? do_syscall_64+0xbe/0xfa0 [ 682.103858][T28692] do_syscall_64+0xfa/0xfa0 [ 682.103885][T28692] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.103914][T28692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.103934][T28692] ? clear_bhb_loop+0x60/0xb0 [ 682.103961][T28692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.103980][T28692] RIP: 0033:0x7fe963b8eec9 [ 682.104000][T28692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.104017][T28692] RSP: 002b:00007fe964a23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.104041][T28692] RAX: ffffffffffffffda RBX: 00007fe963de5fa0 RCX: 00007fe963b8eec9 [ 682.104056][T28692] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 682.104070][T28692] RBP: 00007fe964a23090 R08: 0000000000000000 R09: 0000000000000000 [ 682.104083][T28692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.104095][T28692] R13: 00007fe963de6038 R14: 00007fe963de5fa0 R15: 00007ffc809e0088 [ 682.104135][T28692] [ 682.173898][T28698] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7576'. [ 682.441407][T28706] netlink: 'syz.2.7578': attribute type 1 has an invalid length. [ 682.487928][T28709] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7579'. [ 682.498080][T28706] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7578'. [ 682.526569][T28706] netlink: 'syz.2.7578': attribute type 2 has an invalid length. [ 682.536518][T28706] netlink: 'syz.2.7578': attribute type 1 has an invalid length. [ 682.545451][T28706] FAULT_INJECTION: forcing a failure. [ 682.545451][T28706] name failslab, interval 1, probability 0, space 0, times 0 [ 682.559260][T28706] CPU: 0 UID: 0 PID: 28706 Comm: syz.2.7578 Not tainted syzkaller #0 PREEMPT(full) [ 682.559288][T28706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 682.559300][T28706] Call Trace: [ 682.559308][T28706] [ 682.559317][T28706] dump_stack_lvl+0x189/0x250 [ 682.559343][T28706] ? __pfx____ratelimit+0x10/0x10 [ 682.559372][T28706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.559392][T28706] ? __pfx__printk+0x10/0x10 [ 682.559419][T28706] ? __pfx___might_resched+0x10/0x10 [ 682.559446][T28706] ? fs_reclaim_acquire+0x7d/0x100 [ 682.559475][T28706] should_fail_ex+0x414/0x560 [ 682.559502][T28706] should_failslab+0xa8/0x100 [ 682.559526][T28706] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 682.559548][T28706] ? __alloc_skb+0x112/0x2d0 [ 682.559579][T28706] __alloc_skb+0x112/0x2d0 [ 682.559608][T28706] netlink_ack+0x146/0xa50 [ 682.559630][T28706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.559668][T28706] netlink_rcv_skb+0x28c/0x470 [ 682.559690][T28706] ? __lock_acquire+0xab9/0xd20 [ 682.559717][T28706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.559738][T28706] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.559784][T28706] ? down_read+0x1ad/0x2e0 [ 682.559808][T28706] genl_rcv+0x28/0x40 [ 682.559824][T28706] netlink_unicast+0x82f/0x9e0 [ 682.559857][T28706] ? __pfx_netlink_unicast+0x10/0x10 [ 682.559881][T28706] ? netlink_sendmsg+0x642/0xb30 [ 682.559904][T28706] ? skb_put+0x11b/0x210 [ 682.559934][T28706] netlink_sendmsg+0x805/0xb30 [ 682.559970][T28706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.559999][T28706] ? aa_sock_msg_perm+0xf1/0x1d0 [ 682.560026][T28706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.560051][T28706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.560078][T28706] __sock_sendmsg+0x21c/0x270 [ 682.560103][T28706] ____sys_sendmsg+0x505/0x830 [ 682.560137][T28706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.560175][T28706] ? import_iovec+0x74/0xa0 [ 682.560214][T28706] ___sys_sendmsg+0x21f/0x2a0 [ 682.560250][T28706] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.560321][T28706] ? __fget_files+0x2a/0x420 [ 682.560342][T28706] ? __fget_files+0x3a0/0x420 [ 682.560378][T28706] __x64_sys_sendmsg+0x19b/0x260 [ 682.560408][T28706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.560448][T28706] ? __pfx_ksys_write+0x10/0x10 [ 682.560472][T28706] ? do_syscall_64+0xbe/0xfa0 [ 682.560505][T28706] do_syscall_64+0xfa/0xfa0 [ 682.560531][T28706] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.560559][T28706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.560578][T28706] ? clear_bhb_loop+0x60/0xb0 [ 682.560602][T28706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.560620][T28706] RIP: 0033:0x7fc054d8eec9 [ 682.560638][T28706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.560656][T28706] RSP: 002b:00007fc055c35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.560678][T28706] RAX: ffffffffffffffda RBX: 00007fc054fe6090 RCX: 00007fc054d8eec9 [ 682.560693][T28706] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 682.560706][T28706] RBP: 00007fc055c35090 R08: 0000000000000000 R09: 0000000000000000 [ 682.560718][T28706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.560730][T28706] R13: 00007fc054fe6128 R14: 00007fc054fe6090 R15: 00007ffc79ed73c8 [ 682.560765][T28706] [ 683.008415][T28714] ipt_REJECT: TCP_RESET invalid for non-tcp [ 683.025830][T28711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7581'. [ 683.375816][T28717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.286550][T28750] FAULT_INJECTION: forcing a failure. [ 685.286550][T28750] name failslab, interval 1, probability 0, space 0, times 0 [ 685.322262][T28750] CPU: 1 UID: 0 PID: 28750 Comm: syz.4.7591 Not tainted syzkaller #0 PREEMPT(full) [ 685.322292][T28750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 685.322303][T28750] Call Trace: [ 685.322312][T28750] [ 685.322320][T28750] dump_stack_lvl+0x189/0x250 [ 685.322347][T28750] ? __pfx____ratelimit+0x10/0x10 [ 685.322377][T28750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.322398][T28750] ? __pfx__printk+0x10/0x10 [ 685.322425][T28750] ? __pfx___might_resched+0x10/0x10 [ 685.322461][T28750] should_fail_ex+0x414/0x560 [ 685.322498][T28750] should_failslab+0xa8/0x100 [ 685.322521][T28750] ? __pfx_nfsd+0x10/0x10 [ 685.322548][T28750] __kmalloc_cache_noprof+0x70/0x3d0 [ 685.322570][T28750] ? __svc_create+0x63/0x980 [ 685.322593][T28750] ? __pfx_nfsd+0x10/0x10 [ 685.322622][T28750] __svc_create+0x63/0x980 [ 685.322644][T28750] ? __kasan_kmalloc+0x93/0xb0 [ 685.322672][T28750] ? __pfx_nfsd+0x10/0x10 [ 685.322700][T28750] svc_create_pooled+0x59a/0x760 [ 685.322721][T28750] ? __init_swait_queue_head+0xa9/0x150 [ 685.322750][T28750] nfsd_create_serv+0x525/0x840 [ 685.322770][T28750] ? __pfx_stack_trace_save+0x10/0x10 [ 685.322803][T28750] ? __pfx_nfsd_create_serv+0x10/0x10 [ 685.322828][T28750] ? __pfx___mutex_lock+0x10/0x10 [ 685.322849][T28750] ? __asan_memset+0x22/0x50 [ 685.322881][T28750] ? ____sys_sendmsg+0x505/0x830 [ 685.322907][T28750] ? ___sys_sendmsg+0x21f/0x2a0 [ 685.322933][T28750] ? __x64_sys_sendmsg+0x19b/0x260 [ 685.322976][T28750] nfsd_nl_listener_set_doit+0x13f/0x1690 [ 685.323004][T28750] ? __pfx___nla_validate_parse+0x10/0x10 [ 685.323057][T28750] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 685.323089][T28750] ? __nla_parse+0x40/0x60 [ 685.323120][T28750] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 685.323151][T28750] genl_family_rcv_msg_doit+0x215/0x300 [ 685.323181][T28750] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 685.323218][T28750] ? bpf_lsm_capable+0x9/0x20 [ 685.323239][T28750] ? security_capable+0x7e/0x2e0 [ 685.323273][T28750] genl_rcv_msg+0x60e/0x790 [ 685.323304][T28750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 685.323324][T28750] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 685.323366][T28750] netlink_rcv_skb+0x205/0x470 [ 685.323391][T28750] ? __lock_acquire+0xab9/0xd20 [ 685.323418][T28750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 685.323440][T28750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 685.323498][T28750] ? down_read+0x1ad/0x2e0 [ 685.323524][T28750] genl_rcv+0x28/0x40 [ 685.323542][T28750] netlink_unicast+0x82f/0x9e0 [ 685.323578][T28750] ? __pfx_netlink_unicast+0x10/0x10 [ 685.323605][T28750] ? netlink_sendmsg+0x642/0xb30 [ 685.323629][T28750] ? skb_put+0x11b/0x210 [ 685.323660][T28750] netlink_sendmsg+0x805/0xb30 [ 685.323701][T28750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.323733][T28750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 685.323762][T28750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 685.323789][T28750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.323818][T28750] __sock_sendmsg+0x21c/0x270 [ 685.323845][T28750] ____sys_sendmsg+0x505/0x830 [ 685.323882][T28750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.323924][T28750] ? import_iovec+0x74/0xa0 [ 685.323957][T28750] ___sys_sendmsg+0x21f/0x2a0 [ 685.323990][T28750] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.324069][T28750] ? __fget_files+0x2a/0x420 [ 685.324091][T28750] ? __fget_files+0x3a0/0x420 [ 685.324131][T28750] __x64_sys_sendmsg+0x19b/0x260 [ 685.324164][T28750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.324206][T28750] ? __pfx_ksys_write+0x10/0x10 [ 685.324233][T28750] ? do_syscall_64+0xbe/0xfa0 [ 685.324268][T28750] do_syscall_64+0xfa/0xfa0 [ 685.324299][T28750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.324318][T28750] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.324339][T28750] ? clear_bhb_loop+0x60/0xb0 [ 685.324365][T28750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.324384][T28750] RIP: 0033:0x7fc76818eec9 [ 685.324404][T28750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.324422][T28750] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.324443][T28750] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 685.324459][T28750] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 685.324482][T28750] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 685.324495][T28750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.324508][T28750] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 685.324547][T28750] [ 685.342245][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 685.761204][T28758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7594'. [ 685.860411][T28762] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7595'. [ 685.889521][T28762] erspan0: entered promiscuous mode [ 686.071228][T28770] netlink: 'syz.4.7600': attribute type 3 has an invalid length. [ 686.144457][T28773] openvswitch: netlink: Message has 8 unknown bytes. [ 686.247320][T28777] netlink: 'syz.1.7602': attribute type 10 has an invalid length. [ 686.406424][T28784] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 686.959904][T28795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7608'. [ 687.465923][T28807] netlink: 'syz.4.7609': attribute type 1 has an invalid length. [ 688.767264][T28777] bond0: (slave wlan1): Opening slave failed [ 688.823648][T28807] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 688.930883][T28809] gretap1: entered promiscuous mode [ 688.946058][T28809] gretap1: entered allmulticast mode [ 689.037640][T28816] syzkaller0: entered promiscuous mode [ 689.054702][T28816] syzkaller0: entered allmulticast mode [ 689.154082][T28821] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7614'. [ 689.196413][T28829] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7617'. [ 689.207511][T28829] ip6gretap0: entered promiscuous mode [ 689.215956][T28829] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7617'. [ 689.385114][T28834] geneve2: entered promiscuous mode [ 689.413863][T28836] netlink: 'syz.0.7619': attribute type 1 has an invalid length. [ 689.439933][T28839] xt_hashlimit: invalid rate [ 689.459639][T28843] FAULT_INJECTION: forcing a failure. [ 689.459639][T28843] name failslab, interval 1, probability 0, space 0, times 0 [ 689.481590][T28836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.492207][T28843] CPU: 0 UID: 0 PID: 28843 Comm: syz.2.7623 Not tainted syzkaller #0 PREEMPT(full) [ 689.492239][T28843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 689.492252][T28843] Call Trace: [ 689.492262][T28843] [ 689.492271][T28843] dump_stack_lvl+0x189/0x250 [ 689.492300][T28843] ? __pfx____ratelimit+0x10/0x10 [ 689.492329][T28843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.492350][T28843] ? __pfx__printk+0x10/0x10 [ 689.492375][T28843] ? __lock_acquire+0xab9/0xd20 [ 689.492415][T28843] should_fail_ex+0x414/0x560 [ 689.492483][T28843] should_failslab+0xa8/0x100 [ 689.492510][T28843] kmem_cache_alloc_noprof+0x73/0x3c0 [ 689.492532][T28843] ? skb_clone+0x212/0x3a0 [ 689.492568][T28843] skb_clone+0x212/0x3a0 [ 689.492603][T28843] __netlink_deliver_tap+0x404/0x850 [ 689.492647][T28843] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.492677][T28843] netlink_deliver_tap+0x19c/0x1b0 [ 689.492705][T28843] netlink_unicast+0x7fa/0x9e0 [ 689.492741][T28843] ? __pfx_netlink_unicast+0x10/0x10 [ 689.492768][T28843] ? netlink_sendmsg+0x642/0xb30 [ 689.492791][T28843] ? skb_put+0x11b/0x210 [ 689.492823][T28843] netlink_sendmsg+0x805/0xb30 [ 689.492862][T28843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.492893][T28843] ? aa_sock_msg_perm+0xf1/0x1d0 [ 689.492921][T28843] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 689.492948][T28843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.492977][T28843] __sock_sendmsg+0x21c/0x270 [ 689.493004][T28843] ____sys_sendmsg+0x505/0x830 [ 689.493040][T28843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.493083][T28843] ? import_iovec+0x74/0xa0 [ 689.493117][T28843] ___sys_sendmsg+0x21f/0x2a0 [ 689.493149][T28843] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.493219][T28843] ? __fget_files+0x2a/0x420 [ 689.493239][T28843] ? __fget_files+0x3a0/0x420 [ 689.493274][T28843] __x64_sys_sendmsg+0x19b/0x260 [ 689.493308][T28843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 689.493349][T28843] ? __pfx_ksys_write+0x10/0x10 [ 689.493376][T28843] ? do_syscall_64+0xbe/0xfa0 [ 689.493411][T28843] do_syscall_64+0xfa/0xfa0 [ 689.493446][T28843] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.493475][T28843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.493496][T28843] ? clear_bhb_loop+0x60/0xb0 [ 689.493521][T28843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.493541][T28843] RIP: 0033:0x7fc054d8eec9 [ 689.493561][T28843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.493580][T28843] RSP: 002b:00007fc055c56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.493604][T28843] RAX: ffffffffffffffda RBX: 00007fc054fe5fa0 RCX: 00007fc054d8eec9 [ 689.493619][T28843] RDX: 0000000000008050 RSI: 0000200000007380 RDI: 0000000000000005 [ 689.493634][T28843] RBP: 00007fc055c56090 R08: 0000000000000000 R09: 0000000000000000 [ 689.493647][T28843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.493659][T28843] R13: 00007fc054fe6038 R14: 00007fc054fe5fa0 R15: 00007ffc79ed73c8 [ 689.493697][T28843] [ 689.805180][T28846] bond1: (slave veth3): Enslaving as an active interface with a down link [ 689.909771][T28836] veth5: entered promiscuous mode [ 689.922035][T28836] bond1: (slave veth5): Enslaving as an active interface with a down link [ 690.005135][T28856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7627'. [ 691.738554][T28854] FAULT_INJECTION: forcing a failure. [ 691.738554][T28854] name failslab, interval 1, probability 0, space 0, times 0 [ 691.752492][T28854] CPU: 1 UID: 0 PID: 28854 Comm: syz.2.7626 Not tainted syzkaller #0 PREEMPT(full) [ 691.752524][T28854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 691.752537][T28854] Call Trace: [ 691.752546][T28854] [ 691.752555][T28854] dump_stack_lvl+0x189/0x250 [ 691.752583][T28854] ? __pfx____ratelimit+0x10/0x10 [ 691.752613][T28854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.752633][T28854] ? __pfx__printk+0x10/0x10 [ 691.752650][T28854] ? netlink_unicast+0x82f/0x9e0 [ 691.752675][T28854] ? ___sys_sendmsg+0x21f/0x2a0 [ 691.752699][T28854] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 691.752723][T28854] should_fail_ex+0x414/0x560 [ 691.752739][T28854] should_failslab+0xa8/0x100 [ 691.752755][T28854] kmem_cache_alloc_noprof+0x73/0x3c0 [ 691.752767][T28854] ? skb_clone+0x212/0x3a0 [ 691.752788][T28854] skb_clone+0x212/0x3a0 [ 691.752808][T28854] __netlink_deliver_tap+0x404/0x850 [ 691.752832][T28854] ? netlink_deliver_tap+0x2e/0x1b0 [ 691.752849][T28854] netlink_deliver_tap+0x19c/0x1b0 [ 691.752865][T28854] netlink_sendskb+0x68/0x140 [ 691.752881][T28854] netlink_unicast+0x397/0x9e0 [ 691.752893][T28854] ? __asan_memcpy+0x40/0x70 [ 691.752916][T28854] ? __pfx_netlink_unicast+0x10/0x10 [ 691.752936][T28854] netlink_rcv_skb+0x28c/0x470 [ 691.752953][T28854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 691.752969][T28854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 691.752993][T28854] ? netlink_deliver_tap+0x2e/0x1b0 [ 691.753013][T28854] netlink_unicast+0x82f/0x9e0 [ 691.753033][T28854] ? __pfx_netlink_unicast+0x10/0x10 [ 691.753048][T28854] ? netlink_sendmsg+0x642/0xb30 [ 691.753062][T28854] ? skb_put+0x11b/0x210 [ 691.753081][T28854] netlink_sendmsg+0x805/0xb30 [ 691.753103][T28854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.753122][T28854] ? aa_sock_msg_perm+0xf1/0x1d0 [ 691.753140][T28854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 691.753164][T28854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.753180][T28854] __sock_sendmsg+0x21c/0x270 [ 691.753196][T28854] ____sys_sendmsg+0x52d/0x830 [ 691.753217][T28854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 691.753241][T28854] ? import_iovec+0x74/0xa0 [ 691.753260][T28854] ___sys_sendmsg+0x21f/0x2a0 [ 691.753279][T28854] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.753320][T28854] ? __fget_files+0x2a/0x420 [ 691.753334][T28854] ? __fget_files+0x3a0/0x420 [ 691.753355][T28854] __sys_sendmmsg+0x227/0x430 [ 691.753376][T28854] ? __pfx___sys_sendmmsg+0x10/0x10 [ 691.753404][T28854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 691.753431][T28854] ? ksys_write+0x22a/0x250 [ 691.753446][T28854] ? __pfx_ksys_write+0x10/0x10 [ 691.753462][T28854] __x64_sys_sendmmsg+0xa0/0xc0 [ 691.753481][T28854] do_syscall_64+0xfa/0xfa0 [ 691.753498][T28854] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.753515][T28854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.753527][T28854] ? clear_bhb_loop+0x60/0xb0 [ 691.753541][T28854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.753553][T28854] RIP: 0033:0x7fc054d8eec9 [ 691.753565][T28854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.753576][T28854] RSP: 002b:00007fc055c56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 691.753592][T28854] RAX: ffffffffffffffda RBX: 00007fc054fe5fa0 RCX: 00007fc054d8eec9 [ 691.753601][T28854] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 691.753609][T28854] RBP: 00007fc055c56090 R08: 0000000000000000 R09: 0000000000000000 [ 691.753617][T28854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.753625][T28854] R13: 00007fc054fe6038 R14: 00007fc054fe5fa0 R15: 00007ffc79ed73c8 [ 691.753646][T28854] [ 692.536615][T28883] netlink: 'syz.4.7635': attribute type 1 has an invalid length. [ 692.555537][T28883] netlink: 'syz.4.7635': attribute type 2 has an invalid length. [ 692.768163][T28899] FAULT_INJECTION: forcing a failure. [ 692.768163][T28899] name failslab, interval 1, probability 0, space 0, times 0 [ 692.825263][T28899] CPU: 0 UID: 0 PID: 28899 Comm: syz.0.7640 Not tainted syzkaller #0 PREEMPT(full) [ 692.825294][T28899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 692.825307][T28899] Call Trace: [ 692.825316][T28899] [ 692.825325][T28899] dump_stack_lvl+0x189/0x250 [ 692.825354][T28899] ? __pfx____ratelimit+0x10/0x10 [ 692.825384][T28899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.825406][T28899] ? __pfx__printk+0x10/0x10 [ 692.825435][T28899] ? __pfx___might_resched+0x10/0x10 [ 692.825464][T28899] ? fs_reclaim_acquire+0x7d/0x100 [ 692.825505][T28899] should_fail_ex+0x414/0x560 [ 692.825534][T28899] should_failslab+0xa8/0x100 [ 692.825561][T28899] __kmalloc_cache_noprof+0x70/0x3d0 [ 692.825584][T28899] ? ovs_flow_cmd_new+0x294/0xd80 [ 692.825619][T28899] ovs_flow_cmd_new+0x294/0xd80 [ 692.825646][T28899] ? stack_depot_save_flags+0x40/0x860 [ 692.825679][T28899] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 692.825783][T28899] ? __nla_parse+0x40/0x60 [ 692.825812][T28899] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 692.825843][T28899] genl_family_rcv_msg_doit+0x215/0x300 [ 692.825873][T28899] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 692.825908][T28899] ? bpf_lsm_capable+0x9/0x20 [ 692.825928][T28899] ? security_capable+0x7e/0x2e0 [ 692.825958][T28899] genl_rcv_msg+0x60e/0x790 [ 692.825985][T28899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 692.826004][T28899] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 692.826034][T28899] ? __asan_memcpy+0x40/0x70 [ 692.826061][T28899] ? __pfx_ref_tracker_free+0x10/0x10 [ 692.826090][T28899] netlink_rcv_skb+0x205/0x470 [ 692.826114][T28899] ? __lock_acquire+0xab9/0xd20 [ 692.826141][T28899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 692.826164][T28899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 692.826214][T28899] ? down_read+0x1ad/0x2e0 [ 692.826238][T28899] genl_rcv+0x28/0x40 [ 692.826254][T28899] netlink_unicast+0x82f/0x9e0 [ 692.826295][T28899] ? __pfx_netlink_unicast+0x10/0x10 [ 692.826322][T28899] ? netlink_sendmsg+0x642/0xb30 [ 692.826343][T28899] ? skb_put+0x11b/0x210 [ 692.826374][T28899] netlink_sendmsg+0x805/0xb30 [ 692.826412][T28899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.826443][T28899] ? aa_sock_msg_perm+0xf1/0x1d0 [ 692.826471][T28899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 692.826508][T28899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.826536][T28899] __sock_sendmsg+0x21c/0x270 [ 692.826563][T28899] ____sys_sendmsg+0x505/0x830 [ 692.826599][T28899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.826641][T28899] ? import_iovec+0x74/0xa0 [ 692.826674][T28899] ___sys_sendmsg+0x21f/0x2a0 [ 692.826707][T28899] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.826782][T28899] ? __fget_files+0x2a/0x420 [ 692.826806][T28899] ? __fget_files+0x3a0/0x420 [ 692.826844][T28899] __x64_sys_sendmsg+0x19b/0x260 [ 692.826877][T28899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 692.826918][T28899] ? __pfx_ksys_write+0x10/0x10 [ 692.826943][T28899] ? do_syscall_64+0xbe/0xfa0 [ 692.826977][T28899] do_syscall_64+0xfa/0xfa0 [ 692.827003][T28899] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.827028][T28899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.827044][T28899] ? clear_bhb_loop+0x60/0xb0 [ 692.827066][T28899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.827083][T28899] RIP: 0033:0x7fbbfc18eec9 [ 692.827103][T28899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.827122][T28899] RSP: 002b:00007fbbfcf4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.827144][T28899] RAX: ffffffffffffffda RBX: 00007fbbfc3e5fa0 RCX: 00007fbbfc18eec9 [ 692.827160][T28899] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 692.827174][T28899] RBP: 00007fbbfcf4f090 R08: 0000000000000000 R09: 0000000000000000 [ 692.827187][T28899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.827200][T28899] R13: 00007fbbfc3e6038 R14: 00007fbbfc3e5fa0 R15: 00007ffc16ae4f08 [ 692.827237][T28899] [ 692.827475][T28889] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.858775][T28887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7637'. [ 693.010817][T28906] FAULT_INJECTION: forcing a failure. [ 693.010817][T28906] name failslab, interval 1, probability 0, space 0, times 0 [ 693.284041][T28906] CPU: 1 UID: 0 PID: 28906 Comm: syz.4.7641 Not tainted syzkaller #0 PREEMPT(full) [ 693.284070][T28906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 693.284081][T28906] Call Trace: [ 693.284088][T28906] [ 693.284097][T28906] dump_stack_lvl+0x189/0x250 [ 693.284121][T28906] ? __pfx____ratelimit+0x10/0x10 [ 693.284160][T28906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.284194][T28906] ? __pfx__printk+0x10/0x10 [ 693.284222][T28906] ? __pfx___might_resched+0x10/0x10 [ 693.284256][T28906] should_fail_ex+0x414/0x560 [ 693.284284][T28906] should_failslab+0xa8/0x100 [ 693.284312][T28906] __kmalloc_noprof+0xcb/0x4f0 [ 693.284332][T28906] ? __svc_create+0x659/0x980 [ 693.284359][T28906] __svc_create+0x659/0x980 [ 693.284392][T28906] ? __pfx_nfsd+0x10/0x10 [ 693.284422][T28906] svc_create_pooled+0x59a/0x760 [ 693.284444][T28906] ? __init_swait_queue_head+0xa9/0x150 [ 693.284472][T28906] nfsd_create_serv+0x525/0x840 [ 693.284492][T28906] ? __pfx_stack_trace_save+0x10/0x10 [ 693.284525][T28906] ? __pfx_nfsd_create_serv+0x10/0x10 [ 693.284548][T28906] ? __pfx___mutex_lock+0x10/0x10 [ 693.284570][T28906] ? __asan_memset+0x22/0x50 [ 693.284601][T28906] ? ____sys_sendmsg+0x505/0x830 [ 693.284626][T28906] ? ___sys_sendmsg+0x21f/0x2a0 [ 693.284651][T28906] ? __x64_sys_sendmsg+0x19b/0x260 [ 693.284690][T28906] nfsd_nl_listener_set_doit+0x13f/0x1690 [ 693.284716][T28906] ? __pfx___nla_validate_parse+0x10/0x10 [ 693.284763][T28906] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 693.284794][T28906] ? __nla_parse+0x40/0x60 [ 693.284821][T28906] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 693.284851][T28906] genl_family_rcv_msg_doit+0x215/0x300 [ 693.284882][T28906] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 693.284919][T28906] ? bpf_lsm_capable+0x9/0x20 [ 693.284939][T28906] ? security_capable+0x7e/0x2e0 [ 693.284972][T28906] genl_rcv_msg+0x60e/0x790 [ 693.285001][T28906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.285020][T28906] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 693.285061][T28906] netlink_rcv_skb+0x205/0x470 [ 693.285085][T28906] ? __lock_acquire+0xab9/0xd20 [ 693.285113][T28906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.285134][T28906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 693.285191][T28906] ? down_read+0x1ad/0x2e0 [ 693.285217][T28906] genl_rcv+0x28/0x40 [ 693.285234][T28906] netlink_unicast+0x82f/0x9e0 [ 693.285270][T28906] ? __pfx_netlink_unicast+0x10/0x10 [ 693.285295][T28906] ? netlink_sendmsg+0x642/0xb30 [ 693.285319][T28906] ? skb_put+0x11b/0x210 [ 693.285351][T28906] netlink_sendmsg+0x805/0xb30 [ 693.285389][T28906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.285421][T28906] ? aa_sock_msg_perm+0xf1/0x1d0 [ 693.285450][T28906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 693.285476][T28906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.285504][T28906] __sock_sendmsg+0x21c/0x270 [ 693.285530][T28906] ____sys_sendmsg+0x505/0x830 [ 693.285566][T28906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.285608][T28906] ? import_iovec+0x74/0xa0 [ 693.285641][T28906] ___sys_sendmsg+0x21f/0x2a0 [ 693.285673][T28906] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.285750][T28906] ? __fget_files+0x2a/0x420 [ 693.285772][T28906] ? __fget_files+0x3a0/0x420 [ 693.285810][T28906] __x64_sys_sendmsg+0x19b/0x260 [ 693.285844][T28906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.285887][T28906] ? __pfx_ksys_write+0x10/0x10 [ 693.285914][T28906] ? do_syscall_64+0xbe/0xfa0 [ 693.285949][T28906] do_syscall_64+0xfa/0xfa0 [ 693.285975][T28906] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.286004][T28906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.286025][T28906] ? clear_bhb_loop+0x60/0xb0 [ 693.286052][T28906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.286072][T28906] RIP: 0033:0x7fc76818eec9 [ 693.286091][T28906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.286110][T28906] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.286134][T28906] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 693.286159][T28906] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 693.286172][T28906] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 693.286185][T28906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.286198][T28906] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 693.286237][T28906] [ 693.735647][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7643'. [ 693.939199][T28923] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7646'. [ 693.973027][T28889] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.038522][T28924] netlink: 'syz.0.7647': attribute type 10 has an invalid length. [ 694.188665][T28889] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.283868][T28924] bond0: (slave wlan1): Opening slave failed [ 694.538236][T28942] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 694.764904][T28889] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.805393][T28944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7654'. [ 694.967016][T28953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.080663][ T8320] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.127112][T28960] FAULT_INJECTION: forcing a failure. [ 695.127112][T28960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.173415][T10142] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.181753][T28960] CPU: 0 UID: 0 PID: 28960 Comm: syz.2.7659 Not tainted syzkaller #0 PREEMPT(full) [ 695.181780][T28960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 695.181792][T28960] Call Trace: [ 695.181801][T28960] [ 695.181809][T28960] dump_stack_lvl+0x189/0x250 [ 695.181836][T28960] ? __pfx____ratelimit+0x10/0x10 [ 695.181865][T28960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.181886][T28960] ? __pfx__printk+0x10/0x10 [ 695.181924][T28960] should_fail_ex+0x414/0x560 [ 695.181959][T28960] _copy_to_user+0x31/0xb0 [ 695.181989][T28960] simple_read_from_buffer+0xe1/0x170 [ 695.182019][T28960] proc_fail_nth_read+0x1b3/0x220 [ 695.182054][T28960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.182089][T28960] ? rw_verify_area+0x2a6/0x4d0 [ 695.182109][T28960] ? __lock_acquire+0xab9/0xd20 [ 695.182143][T28960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.182175][T28960] vfs_read+0x1fd/0xa30 [ 695.182196][T28960] ? fdget_pos+0x247/0x320 [ 695.182226][T28960] ? __pfx___mutex_lock+0x10/0x10 [ 695.182247][T28960] ? __pfx_vfs_read+0x10/0x10 [ 695.182272][T28960] ? __fget_files+0x2a/0x420 [ 695.182302][T28960] ? __fget_files+0x3a0/0x420 [ 695.182325][T28960] ? __fget_files+0x2a/0x420 [ 695.182362][T28960] ksys_read+0x145/0x250 [ 695.182386][T28960] ? __pfx_ksys_read+0x10/0x10 [ 695.182408][T28960] ? do_syscall_64+0xbe/0xfa0 [ 695.182441][T28960] do_syscall_64+0xfa/0xfa0 [ 695.182469][T28960] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.182497][T28960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.182517][T28960] ? clear_bhb_loop+0x60/0xb0 [ 695.182544][T28960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.182563][T28960] RIP: 0033:0x7fc054d8d8dc [ 695.182583][T28960] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 695.182602][T28960] RSP: 002b:00007fc055c56030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 695.182625][T28960] RAX: ffffffffffffffda RBX: 00007fc054fe5fa0 RCX: 00007fc054d8d8dc [ 695.182640][T28960] RDX: 000000000000000f RSI: 00007fc055c560a0 RDI: 0000000000000004 [ 695.182653][T28960] RBP: 00007fc055c56090 R08: 0000000000000000 R09: 0000000000000000 [ 695.182666][T28960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.182679][T28960] R13: 00007fc054fe6038 R14: 00007fc054fe5fa0 R15: 00007ffc79ed73c8 [ 695.182718][T28960] [ 695.185980][T28963] FAULT_INJECTION: forcing a failure. [ 695.185980][T28963] name failslab, interval 1, probability 0, space 0, times 0 [ 695.197180][T10142] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.246528][T28963] CPU: 1 UID: 0 PID: 28963 Comm: syz.4.7660 Not tainted syzkaller #0 PREEMPT(full) [ 695.246555][T28963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 695.246567][T28963] Call Trace: [ 695.246575][T28963] [ 695.246583][T28963] dump_stack_lvl+0x189/0x250 [ 695.246608][T28963] ? __pfx____ratelimit+0x10/0x10 [ 695.246634][T28963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.246653][T28963] ? __pfx__printk+0x10/0x10 [ 695.246679][T28963] ? __pfx___might_resched+0x10/0x10 [ 695.246705][T28963] ? fs_reclaim_acquire+0x7d/0x100 [ 695.246733][T28963] should_fail_ex+0x414/0x560 [ 695.246758][T28963] should_failslab+0xa8/0x100 [ 695.246782][T28963] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 695.246803][T28963] ? __alloc_skb+0x112/0x2d0 [ 695.246832][T28963] __alloc_skb+0x112/0x2d0 [ 695.246859][T28963] netlink_ack+0x146/0xa50 [ 695.246935][T28963] netlink_rcv_skb+0x28c/0x470 [ 695.246965][T28963] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 695.246988][T28963] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 695.247024][T28963] ? bpf_lsm_capable+0x9/0x20 [ 695.247042][T28963] ? security_capable+0x7e/0x2e0 [ 695.247072][T28963] nfnetlink_rcv+0x282/0x2590 [ 695.247096][T28963] ? __dev_queue_xmit+0x27b/0x3b50 [ 695.247115][T28963] ? __dev_queue_xmit+0x1d79/0x3b50 [ 695.247143][T28963] ? __dev_queue_xmit+0x27b/0x3b50 [ 695.247174][T28963] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 695.247194][T28963] ? __pfx___dev_queue_xmit+0x10/0x10 [ 695.247227][T28963] ? ref_tracker_free+0x63a/0x7d0 [ 695.247248][T28963] ? __asan_memcpy+0x40/0x70 [ 695.247273][T28963] ? __pfx_ref_tracker_free+0x10/0x10 [ 695.247311][T28963] ? skb_clone+0x246/0x3a0 [ 695.247341][T28963] ? __netlink_deliver_tap+0x807/0x850 [ 695.247363][T28963] ? netlink_deliver_tap+0x2e/0x1b0 [ 695.247400][T28963] ? netlink_deliver_tap+0x2e/0x1b0 [ 695.247432][T28963] netlink_unicast+0x82f/0x9e0 [ 695.247462][T28963] ? __pfx_netlink_unicast+0x10/0x10 [ 695.247485][T28963] ? netlink_sendmsg+0x642/0xb30 [ 695.247511][T28963] ? skb_put+0x11b/0x210 [ 695.247539][T28963] netlink_sendmsg+0x805/0xb30 [ 695.247572][T28963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.247599][T28963] ? aa_sock_msg_perm+0xf1/0x1d0 [ 695.247624][T28963] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.247648][T28963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.247673][T28963] __sock_sendmsg+0x21c/0x270 [ 695.247697][T28963] ____sys_sendmsg+0x505/0x830 [ 695.247729][T28963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.247765][T28963] ? import_iovec+0x74/0xa0 [ 695.247794][T28963] ___sys_sendmsg+0x21f/0x2a0 [ 695.247822][T28963] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.247887][T28963] ? __fget_files+0x2a/0x420 [ 695.247908][T28963] ? __fget_files+0x3a0/0x420 [ 695.247940][T28963] __x64_sys_sendmsg+0x19b/0x260 [ 695.247969][T28963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.248005][T28963] ? __pfx_ksys_write+0x10/0x10 [ 695.248029][T28963] ? do_syscall_64+0xbe/0xfa0 [ 695.248059][T28963] do_syscall_64+0xfa/0xfa0 [ 695.248083][T28963] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.248108][T28963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.248126][T28963] ? clear_bhb_loop+0x60/0xb0 [ 695.248149][T28963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.248167][T28963] RIP: 0033:0x7fc76818eec9 [ 695.248184][T28963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.248200][T28963] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.248222][T28963] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 695.248236][T28963] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000005 [ 695.248248][T28963] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 695.248260][T28963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.248272][T28963] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 695.248306][T28963] [ 695.731482][T28978] netlink: 'syz.2.7663': attribute type 10 has an invalid length. [ 695.794798][T28977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7666'. [ 695.794879][T28977] bridge_slave_1: left allmulticast mode [ 695.794900][T28977] bridge_slave_1: left promiscuous mode [ 695.795144][T28977] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.875583][T28984] Cannot find add_set index 0 as target [ 695.888747][T28977] bridge_slave_0: left allmulticast mode [ 695.895695][T28977] bridge_slave_0: left promiscuous mode [ 695.902588][T28977] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.919506][T28985] netlink: 'syz.0.7667': attribute type 5 has an invalid length. [ 695.924180][T28986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7666'. [ 695.994139][T28989] Cannot find add_set index 0 as target [ 696.035176][T10142] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.177132][T28995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7672'. [ 696.186989][T28995] FAULT_INJECTION: forcing a failure. [ 696.186989][T28995] name failslab, interval 1, probability 0, space 0, times 0 [ 696.214338][T28995] CPU: 0 UID: 0 PID: 28995 Comm: syz.0.7672 Not tainted syzkaller #0 PREEMPT(full) [ 696.214369][T28995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 696.214381][T28995] Call Trace: [ 696.214398][T28995] [ 696.214407][T28995] dump_stack_lvl+0x189/0x250 [ 696.214436][T28995] ? __pfx____ratelimit+0x10/0x10 [ 696.214465][T28995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.214486][T28995] ? __pfx__printk+0x10/0x10 [ 696.214504][T28995] ? genl_rcv+0x28/0x40 [ 696.214524][T28995] ? ____sys_sendmsg+0x505/0x830 [ 696.214551][T28995] ? __x64_sys_sendmsg+0x19b/0x260 [ 696.214594][T28995] should_fail_ex+0x414/0x560 [ 696.214623][T28995] should_failslab+0xa8/0x100 [ 696.214647][T28995] kmem_cache_alloc_noprof+0x73/0x3c0 [ 696.214669][T28995] ? skb_clone+0x212/0x3a0 [ 696.214703][T28995] skb_clone+0x212/0x3a0 [ 696.214736][T28995] __netlink_deliver_tap+0x404/0x850 [ 696.214800][T28995] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.214829][T28995] netlink_deliver_tap+0x19c/0x1b0 [ 696.214858][T28995] netlink_sendskb+0x68/0x140 [ 696.214885][T28995] netlink_unicast+0x397/0x9e0 [ 696.214906][T28995] ? __asan_memcpy+0x40/0x70 [ 696.214957][T28995] ? __pfx_netlink_unicast+0x10/0x10 [ 696.214995][T28995] netlink_rcv_skb+0x28c/0x470 [ 696.215018][T28995] ? __lock_acquire+0xab9/0xd20 [ 696.215047][T28995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.215070][T28995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.215121][T28995] ? down_read+0x1ad/0x2e0 [ 696.215145][T28995] genl_rcv+0x28/0x40 [ 696.215164][T28995] netlink_unicast+0x82f/0x9e0 [ 696.215199][T28995] ? __pfx_netlink_unicast+0x10/0x10 [ 696.215224][T28995] ? netlink_sendmsg+0x642/0xb30 [ 696.215246][T28995] ? skb_put+0x11b/0x210 [ 696.215276][T28995] netlink_sendmsg+0x805/0xb30 [ 696.215313][T28995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.215342][T28995] ? aa_sock_msg_perm+0xf1/0x1d0 [ 696.215376][T28995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.215410][T28995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.215435][T28995] __sock_sendmsg+0x21c/0x270 [ 696.215461][T28995] ____sys_sendmsg+0x505/0x830 [ 696.215495][T28995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.215532][T28995] ? import_iovec+0x74/0xa0 [ 696.215564][T28995] ___sys_sendmsg+0x21f/0x2a0 [ 696.215597][T28995] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.215673][T28995] ? __fget_files+0x2a/0x420 [ 696.215696][T28995] ? __fget_files+0x3a0/0x420 [ 696.215733][T28995] __x64_sys_sendmsg+0x19b/0x260 [ 696.215765][T28995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.215807][T28995] ? __pfx_ksys_write+0x10/0x10 [ 696.215834][T28995] ? do_syscall_64+0xbe/0xfa0 [ 696.215869][T28995] do_syscall_64+0xfa/0xfa0 [ 696.215896][T28995] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.215924][T28995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.215945][T28995] ? clear_bhb_loop+0x60/0xb0 [ 696.215969][T28995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.216007][T28995] RIP: 0033:0x7fbbfc18eec9 [ 696.216027][T28995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.216044][T28995] RSP: 002b:00007fbbfcf4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.216067][T28995] RAX: ffffffffffffffda RBX: 00007fbbfc3e5fa0 RCX: 00007fbbfc18eec9 [ 696.216082][T28995] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 696.216095][T28995] RBP: 00007fbbfcf4f090 R08: 0000000000000000 R09: 0000000000000000 [ 696.216108][T28995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.216121][T28995] R13: 00007fbbfc3e6038 R14: 00007fbbfc3e5fa0 R15: 00007ffc16ae4f08 [ 696.216159][T28995] [ 696.216649][T28993] FAULT_INJECTION: forcing a failure. [ 696.216649][T28993] name failslab, interval 1, probability 0, space 0, times 0 [ 696.360891][T29004] netlink: 'syz.2.7675': attribute type 10 has an invalid length. [ 696.369173][T28993] CPU: 0 UID: 0 PID: 28993 Comm: syz.4.7671 Not tainted syzkaller #0 PREEMPT(full) [ 696.369200][T28993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 696.369212][T28993] Call Trace: [ 696.369220][T28993] [ 696.369228][T28993] dump_stack_lvl+0x189/0x250 [ 696.369253][T28993] ? __pfx____ratelimit+0x10/0x10 [ 696.369280][T28993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.369300][T28993] ? __pfx__printk+0x10/0x10 [ 696.369316][T28993] ? genl_rcv+0x28/0x40 [ 696.369334][T28993] ? ____sys_sendmsg+0x505/0x830 [ 696.369358][T28993] ? __x64_sys_sendmsg+0x19b/0x260 [ 696.369404][T28993] should_fail_ex+0x414/0x560 [ 696.369429][T28993] should_failslab+0xa8/0x100 [ 696.369453][T28993] kmem_cache_alloc_noprof+0x73/0x3c0 [ 696.369472][T28993] ? skb_clone+0x212/0x3a0 [ 696.369503][T28993] skb_clone+0x212/0x3a0 [ 696.369533][T28993] __netlink_deliver_tap+0x404/0x850 [ 696.369570][T28993] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.369595][T28993] netlink_deliver_tap+0x19c/0x1b0 [ 696.369620][T28993] netlink_sendskb+0x68/0x140 [ 696.369644][T28993] netlink_unicast+0x397/0x9e0 [ 696.369662][T28993] ? __asan_memcpy+0x40/0x70 [ 696.369698][T28993] ? __pfx_netlink_unicast+0x10/0x10 [ 696.369730][T28993] netlink_rcv_skb+0x28c/0x470 [ 696.369751][T28993] ? __lock_acquire+0xab9/0xd20 [ 696.369776][T28993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.369797][T28993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.369842][T28993] ? down_read+0x1ad/0x2e0 [ 696.369864][T28993] genl_rcv+0x28/0x40 [ 696.369879][T28993] netlink_unicast+0x82f/0x9e0 [ 696.369911][T28993] ? __pfx_netlink_unicast+0x10/0x10 [ 696.369934][T28993] ? netlink_sendmsg+0x642/0xb30 [ 696.369955][T28993] ? skb_put+0x11b/0x210 [ 696.369983][T28993] netlink_sendmsg+0x805/0xb30 [ 696.370017][T28993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.370045][T28993] ? aa_sock_msg_perm+0xf1/0x1d0 [ 696.370070][T28993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.370095][T28993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.370119][T28993] __sock_sendmsg+0x21c/0x270 [ 696.370143][T28993] ____sys_sendmsg+0x505/0x830 [ 696.370176][T28993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.370213][T28993] ? import_iovec+0x74/0xa0 [ 696.370242][T28993] ___sys_sendmsg+0x21f/0x2a0 [ 696.370272][T28993] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.370340][T28993] ? __fget_files+0x2a/0x420 [ 696.370361][T28993] ? __fget_files+0x3a0/0x420 [ 696.370402][T28993] __x64_sys_sendmsg+0x19b/0x260 [ 696.370432][T28993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.370469][T28993] ? __pfx_ksys_write+0x10/0x10 [ 696.370494][T28993] ? do_syscall_64+0xbe/0xfa0 [ 696.370525][T28993] do_syscall_64+0xfa/0xfa0 [ 696.370549][T28993] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.370575][T28993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.370593][T28993] ? clear_bhb_loop+0x60/0xb0 [ 696.370616][T28993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.370633][T28993] RIP: 0033:0x7fc76818eec9 [ 696.370650][T28993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.370667][T28993] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.370689][T28993] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 696.370703][T28993] RDX: 0000000000008050 RSI: 0000200000007380 RDI: 0000000000000005 [ 696.370715][T28993] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 696.370726][T28993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.370737][T28993] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 696.370772][T28993] [ 696.648108][T29012] xt_TCPMSS: Only works on TCP SYN packets [ 696.675964][T29014] FAULT_INJECTION: forcing a failure. [ 696.675964][T29014] name failslab, interval 1, probability 0, space 0, times 0 [ 696.998407][T29014] CPU: 1 UID: 0 PID: 29014 Comm: syz.4.7680 Not tainted syzkaller #0 PREEMPT(full) [ 696.998437][T29014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 696.998450][T29014] Call Trace: [ 696.998459][T29014] [ 696.998468][T29014] dump_stack_lvl+0x189/0x250 [ 696.998495][T29014] ? __pfx____ratelimit+0x10/0x10 [ 696.998524][T29014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.998545][T29014] ? __pfx__printk+0x10/0x10 [ 696.998572][T29014] ? __pfx___might_resched+0x10/0x10 [ 696.998602][T29014] ? fs_reclaim_acquire+0x7d/0x100 [ 696.998632][T29014] should_fail_ex+0x414/0x560 [ 696.998660][T29014] should_failslab+0xa8/0x100 [ 696.998686][T29014] __kmalloc_cache_noprof+0x70/0x3d0 [ 696.998707][T29014] ? ovs_flow_cmd_new+0x294/0xd80 [ 696.998740][T29014] ovs_flow_cmd_new+0x294/0xd80 [ 696.998762][T29014] ? stack_depot_save_flags+0x40/0x860 [ 696.998790][T29014] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 696.998878][T29014] ? __nla_parse+0x40/0x60 [ 696.998907][T29014] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 696.998940][T29014] genl_family_rcv_msg_doit+0x215/0x300 [ 696.998969][T29014] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 696.999004][T29014] ? bpf_lsm_capable+0x9/0x20 [ 696.999023][T29014] ? security_capable+0x7e/0x2e0 [ 696.999055][T29014] genl_rcv_msg+0x60e/0x790 [ 696.999085][T29014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.999105][T29014] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 696.999136][T29014] ? __asan_memcpy+0x40/0x70 [ 696.999162][T29014] ? __pfx_ref_tracker_free+0x10/0x10 [ 696.999190][T29014] netlink_rcv_skb+0x205/0x470 [ 696.999209][T29014] ? __lock_acquire+0xab9/0xd20 [ 696.999234][T29014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.999256][T29014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.999303][T29014] ? down_read+0x1ad/0x2e0 [ 696.999327][T29014] genl_rcv+0x28/0x40 [ 696.999344][T29014] netlink_unicast+0x82f/0x9e0 [ 696.999379][T29014] ? __pfx_netlink_unicast+0x10/0x10 [ 696.999414][T29014] ? netlink_sendmsg+0x642/0xb30 [ 696.999437][T29014] ? skb_put+0x11b/0x210 [ 696.999469][T29014] netlink_sendmsg+0x805/0xb30 [ 696.999508][T29014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.999540][T29014] ? aa_sock_msg_perm+0xf1/0x1d0 [ 696.999568][T29014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.999594][T29014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.999621][T29014] __sock_sendmsg+0x21c/0x270 [ 696.999648][T29014] ____sys_sendmsg+0x505/0x830 [ 696.999684][T29014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.999723][T29014] ? import_iovec+0x74/0xa0 [ 696.999755][T29014] ___sys_sendmsg+0x21f/0x2a0 [ 696.999787][T29014] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.999862][T29014] ? __fget_files+0x2a/0x420 [ 696.999887][T29014] ? __fget_files+0x3a0/0x420 [ 696.999924][T29014] __x64_sys_sendmsg+0x19b/0x260 [ 696.999957][T29014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.000000][T29014] ? __pfx_ksys_write+0x10/0x10 [ 697.000026][T29014] ? do_syscall_64+0xbe/0xfa0 [ 697.000060][T29014] do_syscall_64+0xfa/0xfa0 [ 697.000086][T29014] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.000115][T29014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.000134][T29014] ? clear_bhb_loop+0x60/0xb0 [ 697.000160][T29014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.000179][T29014] RIP: 0033:0x7fc76818eec9 [ 697.000199][T29014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.000217][T29014] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.000241][T29014] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 697.000256][T29014] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 697.000269][T29014] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 697.000281][T29014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.000293][T29014] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 697.000329][T29014] [ 697.474400][T29022] netlink: 'syz.1.7684': attribute type 10 has an invalid length. [ 697.489959][T29022] bond0: (slave wlan1): Opening slave failed [ 697.511380][T29025] FAULT_INJECTION: forcing a failure. [ 697.511380][T29025] name failslab, interval 1, probability 0, space 0, times 0 [ 697.540269][T29025] CPU: 0 UID: 0 PID: 29025 Comm: syz.4.7686 Not tainted syzkaller #0 PREEMPT(full) [ 697.540300][T29025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 697.540312][T29025] Call Trace: [ 697.540321][T29025] [ 697.540331][T29025] dump_stack_lvl+0x189/0x250 [ 697.540357][T29025] ? __pfx____ratelimit+0x10/0x10 [ 697.540385][T29025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 697.540405][T29025] ? __pfx__printk+0x10/0x10 [ 697.540434][T29025] ? __pfx___might_resched+0x10/0x10 [ 697.540462][T29025] ? fs_reclaim_acquire+0x7d/0x100 [ 697.540494][T29025] should_fail_ex+0x414/0x560 [ 697.540522][T29025] should_failslab+0xa8/0x100 [ 697.540548][T29025] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 697.540572][T29025] ? __alloc_skb+0x112/0x2d0 [ 697.540602][T29025] __alloc_skb+0x112/0x2d0 [ 697.540633][T29025] netlink_ack+0x146/0xa50 [ 697.540678][T29025] netlink_rcv_skb+0x28c/0x470 [ 697.540704][T29025] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 697.540731][T29025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.540770][T29025] ? bpf_lsm_capable+0x9/0x20 [ 697.540789][T29025] ? security_capable+0x7e/0x2e0 [ 697.540817][T29025] nfnetlink_rcv+0x282/0x2590 [ 697.540843][T29025] ? __dev_queue_xmit+0x27b/0x3b50 [ 697.540865][T29025] ? __dev_queue_xmit+0x1d79/0x3b50 [ 697.540896][T29025] ? __dev_queue_xmit+0x27b/0x3b50 [ 697.540930][T29025] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 697.540953][T29025] ? __pfx___dev_queue_xmit+0x10/0x10 [ 697.540989][T29025] ? ref_tracker_free+0x63a/0x7d0 [ 697.541013][T29025] ? __asan_memcpy+0x40/0x70 [ 697.541042][T29025] ? __pfx_ref_tracker_free+0x10/0x10 [ 697.541083][T29025] ? skb_clone+0x246/0x3a0 [ 697.541117][T29025] ? __netlink_deliver_tap+0x807/0x850 [ 697.541159][T29025] ? netlink_deliver_tap+0x2e/0x1b0 [ 697.541195][T29025] ? netlink_deliver_tap+0x2e/0x1b0 [ 697.541230][T29025] netlink_unicast+0x82f/0x9e0 [ 697.541266][T29025] ? __pfx_netlink_unicast+0x10/0x10 [ 697.541292][T29025] ? netlink_sendmsg+0x642/0xb30 [ 697.541316][T29025] ? skb_put+0x11b/0x210 [ 697.541346][T29025] netlink_sendmsg+0x805/0xb30 [ 697.541384][T29025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.541414][T29025] ? aa_sock_msg_perm+0xf1/0x1d0 [ 697.541443][T29025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.541471][T29025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.541499][T29025] __sock_sendmsg+0x21c/0x270 [ 697.541526][T29025] ____sys_sendmsg+0x505/0x830 [ 697.541562][T29025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.541602][T29025] ? import_iovec+0x74/0xa0 [ 697.541635][T29025] ___sys_sendmsg+0x21f/0x2a0 [ 697.541667][T29025] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.541738][T29025] ? __fget_files+0x2a/0x420 [ 697.541761][T29025] ? __fget_files+0x3a0/0x420 [ 697.541797][T29025] __x64_sys_sendmsg+0x19b/0x260 [ 697.541830][T29025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.541872][T29025] ? __pfx_ksys_write+0x10/0x10 [ 697.541898][T29025] ? do_syscall_64+0xbe/0xfa0 [ 697.541932][T29025] do_syscall_64+0xfa/0xfa0 [ 697.541958][T29025] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.541985][T29025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.542005][T29025] ? clear_bhb_loop+0x60/0xb0 [ 697.542029][T29025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.542049][T29025] RIP: 0033:0x7fc76818eec9 [ 697.542069][T29025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.542087][T29025] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.542111][T29025] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 697.542125][T29025] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 697.542138][T29025] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 697.542161][T29025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.542173][T29025] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 697.542210][T29025] [ 697.935329][T29023] xt_CT: No such helper "snmp" [ 698.013073][T29028] xt_TCPMSS: Only works on TCP SYN packets [ 698.065318][T29031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7687'. [ 698.157881][T29041] netlink: 'syz.3.7691': attribute type 12 has an invalid length. [ 698.196629][T29044] FAULT_INJECTION: forcing a failure. [ 698.196629][T29044] name failslab, interval 1, probability 0, space 0, times 0 [ 698.203968][T29041] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7691'. [ 698.209809][T29044] CPU: 0 UID: 0 PID: 29044 Comm: syz.2.7688 Not tainted syzkaller #0 PREEMPT(full) [ 698.209832][T29044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 698.209843][T29044] Call Trace: [ 698.209852][T29044] [ 698.209860][T29044] dump_stack_lvl+0x189/0x250 [ 698.209885][T29044] ? __pfx____ratelimit+0x10/0x10 [ 698.209913][T29044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.209932][T29044] ? __pfx__printk+0x10/0x10 [ 698.209959][T29044] ? __pfx___might_resched+0x10/0x10 [ 698.209985][T29044] ? fs_reclaim_acquire+0x7d/0x100 [ 698.210013][T29044] should_fail_ex+0x414/0x560 [ 698.210038][T29044] should_failslab+0xa8/0x100 [ 698.210062][T29044] __kmalloc_cache_noprof+0x70/0x3d0 [ 698.210082][T29044] ? kobject_uevent_env+0x27c/0x8c0 [ 698.210100][T29044] ? devres_release_all+0x1ca/0x230 [ 698.210129][T29044] ? __pfx_dev_uevent_name+0x10/0x10 [ 698.210147][T29044] kobject_uevent_env+0x27c/0x8c0 [ 698.210186][T29044] device_del+0x73a/0x8e0 [ 698.210219][T29044] ? __pfx_device_del+0x10/0x10 [ 698.210254][T29044] rfkill_unregister+0xba/0x220 [ 698.210276][T29044] nfc_unregister_device+0x96/0x2a0 [ 698.210296][T29044] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 698.210322][T29044] virtual_ncidev_close+0x56/0x90 [ 698.210348][T29044] __fput+0x44c/0xa70 [ 698.210386][T29044] fput_close_sync+0x119/0x200 [ 698.210412][T29044] ? dnotify_flush+0x1db/0x5e0 [ 698.210437][T29044] ? __pfx_fput_close_sync+0x10/0x10 [ 698.210463][T29044] ? do_raw_spin_unlock+0x122/0x240 [ 698.210492][T29044] __x64_sys_close+0x7f/0x110 [ 698.210519][T29044] do_syscall_64+0xfa/0xfa0 [ 698.210544][T29044] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.210569][T29044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.210587][T29044] ? clear_bhb_loop+0x60/0xb0 [ 698.210610][T29044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.210627][T29044] RIP: 0033:0x7fc054d8eec9 [ 698.210644][T29044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.210660][T29044] RSP: 002b:00007fc055c35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 698.210681][T29044] RAX: ffffffffffffffda RBX: 00007fc054fe6090 RCX: 00007fc054d8eec9 [ 698.210695][T29044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 698.210706][T29044] RBP: 00007fc055c35090 R08: 0000000000000000 R09: 0000000000000000 [ 698.210717][T29044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.210729][T29044] R13: 00007fc054fe6128 R14: 00007fc054fe6090 R15: 00007ffc79ed73c8 [ 698.210762][T29044] [ 698.234143][T29033] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 698.353487][T29050] FAULT_INJECTION: forcing a failure. [ 698.353487][T29050] name failslab, interval 1, probability 0, space 0, times 0 [ 698.366797][T29049] netlink: 'syz.3.7691': attribute type 4 has an invalid length. [ 698.514704][T29050] CPU: 0 UID: 0 PID: 29050 Comm: syz.4.7694 Not tainted syzkaller #0 PREEMPT(full) [ 698.514732][T29050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 698.514744][T29050] Call Trace: [ 698.514752][T29050] [ 698.514761][T29050] dump_stack_lvl+0x189/0x250 [ 698.514787][T29050] ? __pfx____ratelimit+0x10/0x10 [ 698.514814][T29050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.514833][T29050] ? __pfx__printk+0x10/0x10 [ 698.514860][T29050] ? __pfx___might_resched+0x10/0x10 [ 698.514888][T29050] ? fs_reclaim_acquire+0x7d/0x100 [ 698.514918][T29050] should_fail_ex+0x414/0x560 [ 698.514944][T29050] should_failslab+0xa8/0x100 [ 698.514969][T29050] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 698.514991][T29050] ? __alloc_skb+0x112/0x2d0 [ 698.515021][T29050] __alloc_skb+0x112/0x2d0 [ 698.515051][T29050] netlink_ack+0x146/0xa50 [ 698.515073][T29050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.515097][T29050] ? __asan_memcpy+0x40/0x70 [ 698.515124][T29050] ? __pfx_ref_tracker_free+0x10/0x10 [ 698.515155][T29050] netlink_rcv_skb+0x28c/0x470 [ 698.515176][T29050] ? __lock_acquire+0xab9/0xd20 [ 698.515202][T29050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.515223][T29050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.515270][T29050] ? down_read+0x1ad/0x2e0 [ 698.515293][T29050] genl_rcv+0x28/0x40 [ 698.515309][T29050] netlink_unicast+0x82f/0x9e0 [ 698.515343][T29050] ? __pfx_netlink_unicast+0x10/0x10 [ 698.515368][T29050] ? netlink_sendmsg+0x642/0xb30 [ 698.515403][T29050] ? skb_put+0x11b/0x210 [ 698.515432][T29050] netlink_sendmsg+0x805/0xb30 [ 698.515469][T29050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.515497][T29050] ? aa_sock_msg_perm+0xf1/0x1d0 [ 698.515522][T29050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.515545][T29050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.515568][T29050] __sock_sendmsg+0x21c/0x270 [ 698.515592][T29050] ____sys_sendmsg+0x505/0x830 [ 698.515623][T29050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.515658][T29050] ? import_iovec+0x74/0xa0 [ 698.515687][T29050] ___sys_sendmsg+0x21f/0x2a0 [ 698.515714][T29050] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.515780][T29050] ? __fget_files+0x2a/0x420 [ 698.515801][T29050] ? __fget_files+0x3a0/0x420 [ 698.515833][T29050] __x64_sys_sendmsg+0x19b/0x260 [ 698.515862][T29050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 698.515899][T29050] ? __pfx_ksys_write+0x10/0x10 [ 698.515922][T29050] ? do_syscall_64+0xbe/0xfa0 [ 698.515952][T29050] do_syscall_64+0xfa/0xfa0 [ 698.516000][T29050] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.516025][T29050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.516042][T29050] ? clear_bhb_loop+0x60/0xb0 [ 698.516064][T29050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.516082][T29050] RIP: 0033:0x7fc76818eec9 [ 698.516099][T29050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.516116][T29050] RSP: 002b:00007fc7690a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.516138][T29050] RAX: ffffffffffffffda RBX: 00007fc7683e5fa0 RCX: 00007fc76818eec9 [ 698.516152][T29050] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 698.516164][T29050] RBP: 00007fc7690a3090 R08: 0000000000000000 R09: 0000000000000000 [ 698.516176][T29050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.516186][T29050] R13: 00007fc7683e6038 R14: 00007fc7683e5fa0 R15: 00007ffefee34238 [ 698.516222][T29050] [ 698.516566][T29049] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7691'. [ 698.945858][T29065] netlink: 'syz.2.7698': attribute type 10 has an invalid length. [ 699.070811][T29049] wlan1: mtu less than device minimum [ 699.351424][T29080] FAULT_INJECTION: forcing a failure. [ 699.351424][T29080] name failslab, interval 1, probability 0, space 0, times 0 [ 699.391538][T29080] CPU: 0 UID: 0 PID: 29080 Comm: syz.2.7704 Not tainted syzkaller #0 PREEMPT(full) [ 699.391569][T29080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 699.391581][T29080] Call Trace: [ 699.391590][T29080] [ 699.391600][T29080] dump_stack_lvl+0x189/0x250 [ 699.391629][T29080] ? __pfx____ratelimit+0x10/0x10 [ 699.391658][T29080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.391680][T29080] ? __pfx__printk+0x10/0x10 [ 699.391709][T29080] ? __pfx___might_resched+0x10/0x10 [ 699.391745][T29080] should_fail_ex+0x414/0x560 [ 699.391773][T29080] should_failslab+0xa8/0x100 [ 699.391800][T29080] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 699.391824][T29080] ? ovs_nla_get_match+0x3b5/0x18c0 [ 699.391843][T29080] ? __parse_vlan_from_nlattrs+0x1dc/0x12e0 [ 699.391873][T29080] kmemdup_noprof+0x2b/0x70 [ 699.391904][T29080] ovs_nla_get_match+0x3b5/0x18c0 [ 699.391923][T29080] ? ___sys_sendmsg+0x21f/0x2a0 [ 699.391956][T29080] ? __x64_sys_sendmsg+0x19b/0x260 [ 699.391995][T29080] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 699.392055][T29080] ? __asan_memset+0x22/0x50 [ 699.392090][T29080] ovs_flow_cmd_new+0x324/0xd80 [ 699.392118][T29080] ? stack_depot_save_flags+0x40/0x860 [ 699.392149][T29080] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 699.392247][T29080] ? __nla_parse+0x40/0x60 [ 699.392278][T29080] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 699.392310][T29080] genl_family_rcv_msg_doit+0x215/0x300 [ 699.392341][T29080] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 699.392378][T29080] ? bpf_lsm_capable+0x9/0x20 [ 699.392398][T29080] ? security_capable+0x7e/0x2e0 [ 699.392440][T29080] genl_rcv_msg+0x60e/0x790 [ 699.392469][T29080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.392489][T29080] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 699.392519][T29080] ? __asan_memcpy+0x40/0x70 [ 699.392547][T29080] ? __pfx_ref_tracker_free+0x10/0x10 [ 699.392578][T29080] netlink_rcv_skb+0x205/0x470 [ 699.392602][T29080] ? __lock_acquire+0xab9/0xd20 [ 699.392630][T29080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.392652][T29080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.392701][T29080] ? down_read+0x1ad/0x2e0 [ 699.392726][T29080] genl_rcv+0x28/0x40 [ 699.392743][T29080] netlink_unicast+0x82f/0x9e0 [ 699.392778][T29080] ? __pfx_netlink_unicast+0x10/0x10 [ 699.392806][T29080] ? netlink_sendmsg+0x642/0xb30 [ 699.392830][T29080] ? skb_put+0x11b/0x210 [ 699.392861][T29080] netlink_sendmsg+0x805/0xb30 [ 699.392899][T29080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.392930][T29080] ? aa_sock_msg_perm+0xf1/0x1d0 [ 699.392960][T29080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 699.392986][T29080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.393015][T29080] __sock_sendmsg+0x21c/0x270 [ 699.393042][T29080] ____sys_sendmsg+0x505/0x830 [ 699.393079][T29080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.393121][T29080] ? import_iovec+0x74/0xa0 [ 699.393154][T29080] ___sys_sendmsg+0x21f/0x2a0 [ 699.393187][T29080] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.393262][T29080] ? __fget_files+0x2a/0x420 [ 699.393286][T29080] ? __fget_files+0x3a0/0x420 [ 699.393322][T29080] __x64_sys_sendmsg+0x19b/0x260 [ 699.393353][T29080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 699.393391][T29080] ? __pfx_ksys_write+0x10/0x10 [ 699.393423][T29080] ? do_syscall_64+0xbe/0xfa0 [ 699.393455][T29080] do_syscall_64+0xfa/0xfa0 [ 699.393482][T29080] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.393511][T29080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.393531][T29080] ? clear_bhb_loop+0x60/0xb0 [ 699.393558][T29080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.393578][T29080] RIP: 0033:0x7fc054d8eec9 [ 699.393597][T29080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.393615][T29080] RSP: 002b:00007fc055c56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.393639][T29080] RAX: ffffffffffffffda RBX: 00007fc054fe5fa0 RCX: 00007fc054d8eec9 [ 699.393655][T29080] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 699.393667][T29080] RBP: 00007fc055c56090 R08: 0000000000000000 R09: 0000000000000000 [ 699.393680][T29080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.393692][T29080] R13: 00007fc054fe6038 R14: 00007fc054fe5fa0 R15: 00007ffc79ed73c8 [ 699.393727][T29080] [ 699.471932][T29086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7705'. [ 699.495823][T29088] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7706'. [ 699.572517][T29086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7705'. [ 699.820391][T29098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.152827][ C0] [ 700.155320][ C0] ============================= [ 700.160205][ C0] [ BUG: Invalid wait context ] [ 700.165071][ C0] syzkaller #0 Not tainted [ 700.169508][ C0] ----------------------------- [ 700.174391][ C0] syz.3.7709/29103 is trying to lock: [ 700.179798][ C0] ffffffff8e276d58 (stack_list_lock){-.-.}-{3:3}, at: __set_page_owner+0x2c3/0x4a0 [ 700.189151][ C0] other info that might help us debug this: [ 700.195071][ C0] context-{2:2} [ 700.198555][ C0] 6 locks held by syz.3.7709/29103: [ 700.203882][ C0] #0: ffffffff8e190068 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register_prio_may_exist+0x43/0xa0 [ 700.215753][ C0] #1: ffffffff8dfd2a70 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 700.225537][ C0] #2: ffffffff8e1f5748 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x250 [ 700.236362][ C0] #3: ffffffff8dfe5e68 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 700.246939][ C0] #4: ffffffff8e13a960 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 700.256381][ C0] #5: ffff8880b8632780 ((stream_local_lock).llock){....}-{3:3}, at: __bpf_stream_push_str+0x1db/0xc90 [ 700.267479][ C0] stack backtrace: [ 700.271224][ C0] CPU: 0 UID: 0 PID: 29103 Comm: syz.3.7709 Not tainted syzkaller #0 PREEMPT(full) [ 700.271247][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 700.271259][ C0] Call Trace: [ 700.271268][ C0] [ 700.271276][ C0] dump_stack_lvl+0x189/0x250 [ 700.271298][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.271316][ C0] ? __pfx__printk+0x10/0x10 [ 700.271332][ C0] ? bpf_stream_page_replace+0x17/0x1e0 [ 700.271352][ C0] ? print_lock_name+0xde/0x100 [ 700.271370][ C0] __lock_acquire+0xbcb/0xd20 [ 700.271397][ C0] ? __set_page_owner+0x2c3/0x4a0 [ 700.271423][ C0] lock_acquire+0x120/0x360 [ 700.271445][ C0] ? __set_page_owner+0x2c3/0x4a0 [ 700.271468][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 700.271492][ C0] ? __set_page_owner+0x2c3/0x4a0 [ 700.271508][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 700.271530][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 700.271549][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 700.271567][ C0] ? __set_page_owner+0x25c/0x4a0 [ 700.271586][ C0] __set_page_owner+0x2c3/0x4a0 [ 700.271604][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 700.271626][ C0] post_alloc_hook+0x240/0x2a0 [ 700.271648][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 700.271692][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 700.271716][ C0] ? prepare_alloc_pages+0x153/0x610 [ 700.271753][ C0] alloc_pages_nolock_noprof+0x94/0x120 [ 700.271782][ C0] bpf_stream_page_replace+0x17/0x1e0 [ 700.271801][ C0] __bpf_stream_push_str+0x3db/0xc90 [ 700.271817][ C0] ? __pfx_pointer+0x10/0x10 [ 700.271838][ C0] ? __bpf_stream_push_str+0x1db/0xc90 [ 700.271856][ C0] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 700.271873][ C0] ? vsnprintf+0x386/0xf00 [ 700.271892][ C0] ? __asan_memcpy+0x40/0x70 [ 700.271917][ C0] ? vsnprintf+0xe11/0xf00 [ 700.271941][ C0] bpf_stream_stage_printk+0x14e/0x1c0 [ 700.271960][ C0] ? on_each_cpu_cond_mask+0x3f/0x80 [ 700.271977][ C0] ? dump_stack_cb+0xa7/0x350 [ 700.271993][ C0] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 700.272016][ C0] ? dump_stack_cb+0xa7/0x350 [ 700.272033][ C0] ? on_each_cpu_cond_mask+0x3f/0x80 [ 700.272050][ C0] dump_stack_cb+0x2b6/0x350 [ 700.272068][ C0] ? __pfx_dump_stack_cb+0x10/0x10 [ 700.272087][ C0] ? unwind_next_frame+0xa5/0x2390 [ 700.272105][ C0] ? smp_call_function_many_cond+0xd33/0x12d0 [ 700.272123][ C0] ? on_each_cpu_cond_mask+0x3f/0x80 [ 700.272141][ C0] ? on_each_cpu_cond_mask+0x3f/0x80 [ 700.272157][ C0] ? __pfx_dump_stack_cb+0x10/0x10 [ 700.272173][ C0] arch_bpf_stack_walk+0xe2/0x170 [ 700.272195][ C0] ? __pfx_arch_bpf_stack_walk+0x10/0x10 [ 700.272219][ C0] ? on_each_cpu_cond_mask+0x3f/0x80 [ 700.272237][ C0] ? bpf_put_buffers+0x23/0x50 [ 700.272259][ C0] ? bpf_stream_stage_printk+0x155/0x1c0 [ 700.272277][ C0] ? arch_bpf_stack_walk+0x112/0x170 [ 700.272299][ C0] bpf_stream_stage_dump_stack+0x167/0x220 [ 700.272319][ C0] ? __pfx_bpf_stream_stage_dump_stack+0x10/0x10 [ 700.272337][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 700.272362][ C0] ? irq_exit_rcu+0x9/0x30 [ 700.272388][ C0] bpf_prog_report_may_goto_violation+0xcc/0x190 [ 700.272418][ C0] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 700.272442][ C0] ? read_tsc+0x9/0x20 [ 700.272465][ C0] bpf_check_timed_may_goto+0xaa/0xb0 [ 700.272487][ C0] arch_bpf_timed_may_goto+0x21/0x40 [ 700.272512][ C0] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 700.272527][ C0] bpf_trace_run2+0x281/0x4b0 [ 700.272549][ C0] ? bpf_trace_run2+0x186/0x4b0 [ 700.272571][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 700.272595][ C0] ? __bpf_trace_hrtimer_expire_entry+0xed/0x160 [ 700.272617][ C0] __bpf_trace_hrtimer_expire_entry+0x102/0x160 [ 700.272636][ C0] ? smp_text_poke_int3_handler+0x134/0x260 [ 700.272659][ C0] ? __pfx___bpf_trace_hrtimer_expire_entry+0x10/0x10 [ 700.272679][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 700.272703][ C0] ? __hrtimer_run_queues+0x929/0xc60 [ 700.272730][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 700.272749][ C0] __hrtimer_run_queues+0xa03/0xc60 [ 700.272773][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 700.272804][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 700.272828][ C0] ? read_tsc+0x9/0x20 [ 700.272854][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 700.272891][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 700.272911][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 700.272935][ C0] [ 700.272942][ C0] [ 700.272949][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 700.272967][ C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 700.272988][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 a6 73 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 51 6f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 35 6f [ 700.273004][ C0] RSP: 0018:ffffc90010c17760 EFLAGS: 00000287 [ 700.273021][ C0] RAX: ffffffff81b3ac3b RBX: 1ffff110170e7f69 RCX: 0000000000080000 [ 700.273036][ C0] RDX: ffffc9001b9a2000 RSI: 00000000000060c8 RDI: 00000000000060c9 [ 700.273048][ C0] RBP: ffffc90010c178e0 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 700.273062][ C0] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffff8880b873fb48 [ 700.273076][ C0] R13: dffffc0000000000 R14: ffff8880b863b200 R15: 0000000000000001 [ 700.273093][ C0] ? smp_call_function_many_cond+0xd4b/0x12d0 [ 700.273117][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 700.273141][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 700.273158][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 700.273178][ C0] ? __hrtimer_run_queues+0x408/0xc60 [ 700.273203][ C0] ? __pfx___text_poke+0x10/0x10 [ 700.273221][ C0] ? rcu_is_watching+0x15/0xb0 [ 700.273237][ C0] ? trace_contention_end+0x39/0x120 [ 700.273258][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 700.273277][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 700.273296][ C0] smp_text_poke_batch_finish+0x5f9/0x1130 [ 700.273318][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 700.273344][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 700.273360][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 700.273384][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 700.273424][ C0] ? __jump_label_update+0x37e/0x3a0 [ 700.273449][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 700.273472][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 700.273494][ C0] static_key_enable+0x1a/0x20 [ 700.273513][ C0] tracepoint_add_func+0x994/0xa10 [ 700.273541][ C0] ? __pfx___bpf_trace_hrtimer_expire_entry+0x10/0x10 [ 700.273560][ C0] tracepoint_probe_register_prio_may_exist+0x5f/0xa0 [ 700.273585][ C0] ? __pfx___bpf_trace_hrtimer_expire_entry+0x10/0x10 [ 700.273606][ C0] bpf_raw_tp_link_attach+0x4f0/0x6c0 [ 700.273627][ C0] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 700.273649][ C0] ? __fget_files+0x2a/0x420 [ 700.273674][ C0] bpf_raw_tracepoint_open+0x1b2/0x220 [ 700.273701][ C0] __sys_bpf+0x73e/0x860 [ 700.273724][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 700.273744][ C0] ? count_memcg_event_mm+0x21/0x260 [ 700.273768][ C0] ? exc_page_fault+0x82/0x100 [ 700.273793][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 700.273821][ C0] __x64_sys_bpf+0x7c/0x90 [ 700.273841][ C0] do_syscall_64+0xfa/0xfa0 [ 700.273865][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.273889][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.273906][ C0] ? clear_bhb_loop+0x60/0xb0 [ 700.273926][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.273942][ C0] RIP: 0033:0x7fe963b8eec9 [ 700.273958][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.273974][ C0] RSP: 002b:00007fe964a02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.273992][ C0] RAX: ffffffffffffffda RBX: 00007fe963de6090 RCX: 00007fe963b8eec9 [ 700.274005][ C0] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000011 [ 700.274017][ C0] RBP: 00007fe963c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 700.274030][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.274041][ C0] R13: 00007fe963de6128 R14: 00007fe963de6090 R15: 00007ffc809e0088 [ 700.274063][ C0] [ 702.407762][ C1] hrtimer: interrupt took 2507523253 ns