last executing test programs: 6.208343038s ago: executing program 0 (id=13573): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'sed\x00', 0x1, 0x6, 0x3d}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010106, 0x4e21, 0x3, 'lc\x00', 0x8, 0x29b, 0x78}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x34}], 0x1, 0x0, 0x0, 0x40000}, 0x20000810) 6.003433568s ago: executing program 0 (id=13574): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x845}, 0x4000) 5.904590535s ago: executing program 0 (id=13575): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.287050006s ago: executing program 4 (id=13577): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x7, 0x4a3, 0xdb4, 0x40000004, 0x3ff]}, &(0x7f0000000240)=0x54) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) close(0xffffffffffffffff) 4.161677368s ago: executing program 0 (id=13581): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000480000004800000004000000030000000000000901000000000000000000000300000000030000000100000008000000050000000100001306000000070000000300000003000000080000000000000c01000000005f2e"], 0x0, 0x64, 0x0, 0x1, 0xfffffffa, 0x10000}, 0x28) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0xfdef) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff00000000000000050000000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x7f7aa7c5}, 0x48) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="c53b99130016b54fa7a70b01843377a7c6a7b414d9a36b3c4b46aac576445ba4718ac72b259f", @ANYRESDEC=r6, @ANYRES16=r6, @ANYRESDEC=0x0, @ANYRES64=r6], 0xe4}}, 0x20050840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r6) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @mcast1, 0xd2f04f8}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x87fd}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44011}, 0x4000) 3.615780007s ago: executing program 0 (id=13589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfffffffc}) ioctl(r1, 0x8b22, &(0x7f0000000040)) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003000000000000190789f1e0001ac14140490781200183f2500000000000000000100007f000001"], 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x87, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x155, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x33}, @in6=@private0, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) 3.471269373s ago: executing program 2 (id=13590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000048c0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="67795414d25ffc702e25bc22cd2a3d6855c0395581cefeea78c70412d13da9554c6bb487aab593a8cd3a15be65122ad977b0", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2503000000060001004e230000050002000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x2000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x15, 0x0, &(0x7f00000006c0)="5c71f91b05c413550230b4c817a62875483efe176d", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 3.273352378s ago: executing program 2 (id=13591): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.150185365s ago: executing program 4 (id=13592): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000019c0)='}+{#],$}:\x00', 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100ba5e589f816529500a000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 3.026941882s ago: executing program 4 (id=13594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xe4, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.829564384s ago: executing program 3 (id=13597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x4000000, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x20}}, 0x44) 2.643891902s ago: executing program 3 (id=13599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x3, 0x1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x100006, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.62360284s ago: executing program 1 (id=13600): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 2.560205438s ago: executing program 1 (id=13601): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) 817.630409ms ago: executing program 0 (id=13602): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x7, 0x4a3, 0xdb4, 0x40000004, 0x3ff]}, &(0x7f0000000240)=0x54) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) close(0xffffffffffffffff) 817.271326ms ago: executing program 4 (id=13603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000301010100000000000000000a000003300001"], 0x50}, 0x1, 0x0, 0x0, 0x2400009c}, 0x40010) 813.508548ms ago: executing program 3 (id=13604): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xb, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x10, 0x3ff}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x16, 0x1f, 0x1b, 0x3, 0x2, {0x6, 0x19c, 0xa9, 0x8, 0x7743, 0xfc1}}}}]}, 0x78}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="00bc49eb", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x60) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000d40)={{0x84, @multicast1, 0x4e1f, 0x3, 'sh\x00', 0x0, 0x0, 0xc}, {@rand_addr=0x64010102, 0x4629, 0x0, 0x3, 0x8001, 0x1}}, 0x44) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x7, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r6 = socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3, 0x0}, 0x40000801) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000008640)=[{{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000000740)=[{&(0x7f0000000400)=""/144, 0x90}, {&(0x7f0000000640)=""/251, 0xfb}], 0x2, &(0x7f0000000780)=""/65, 0x41}, 0x7}, {{&(0x7f0000000800)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/1, 0x1}, {&(0x7f0000000900)=""/30, 0x1e}, {&(0x7f0000000940)=""/179, 0xb3}, {&(0x7f0000000a00)=""/39, 0x27}, {&(0x7f0000000a40)=""/169, 0xa9}, {&(0x7f0000000b00)=""/204, 0xcc}], 0x6, &(0x7f0000001040)=""/147, 0x93}, 0x1000}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001100)=""/92, 0x5c}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/13, 0xd}, {&(0x7f0000002540)=""/156, 0x9c}], 0x4}, 0x80}, {{&(0x7f0000002640)=@hci, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000002700)=""/37, 0x25}, 0x7f}, {{&(0x7f0000002740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000027c0)=""/35, 0x23}, {&(0x7f0000002800)=""/200, 0xc8}, {&(0x7f0000002900)=""/11, 0xb}, {&(0x7f0000002940)=""/46, 0x2e}, {&(0x7f0000002980)=""/64, 0x40}, {&(0x7f00000029c0)=""/39, 0x27}], 0x6, &(0x7f0000002a80)=""/78, 0x4e}, 0x6}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000002b00)=""/218, 0xda}, {&(0x7f0000002c00)=""/238, 0xee}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/7, 0x7}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/4096, 0x1000}], 0x6, &(0x7f0000004ec0)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005ec0)=""/120, 0x78}], 0x1, &(0x7f0000005f80)=""/53, 0x35}, 0xed}, {{&(0x7f0000005fc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000006280)=[{&(0x7f0000006040)}, {&(0x7f0000006080)=""/223, 0xdf}, {&(0x7f0000006180)=""/251, 0xfb}], 0x3}, 0x6}, {{0x0, 0x0, &(0x7f00000075c0)=[{&(0x7f00000062c0)=""/165, 0xa5}, {&(0x7f0000006380)=""/106, 0x6a}, {&(0x7f0000006400)=""/127, 0x7f}, {&(0x7f0000006480)=""/79, 0x4f}, {&(0x7f0000006500)=""/167, 0xa7}, {&(0x7f00000065c0)=""/4096, 0x1000}], 0x6, &(0x7f0000007640)=""/4096, 0x1000}, 0x81}], 0x9, 0x40000000, 0x0) 760.572988ms ago: executing program 1 (id=13605): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="24ffef001a000100ba5e589f816529500a000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 760.35674ms ago: executing program 2 (id=13606): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) 594.066507ms ago: executing program 2 (id=13607): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0x100, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x31}], 0x2}, 0x101}], 0x1, 0x60, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 577.119799ms ago: executing program 1 (id=13608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 495.792929ms ago: executing program 3 (id=13609): r0 = socket$inet6(0xa, 0x80000, 0x3) r1 = socket$inet(0xa, 0x800, 0x85) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005200010000000000000000000203000008000900"], 0x1c}}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES16=r5, @ANYBLOB="010028bd7000000000003103000000", @ANYRES32=r6, @ANYRESOCT=r5], 0x38}}, 0x400c801) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56c51, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xe, 0x3, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 426.310703ms ago: executing program 4 (id=13610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="a70104420000000000000000100000c8bce7"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) close(0x3) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000007c0)={0x1, 0x0, 0x1000, 0x4, &(0x7f0000000280)="8f9780ee", 0x4f, 0x0, &(0x7f00000004c0)="e1201652497fff1941f71481ae5adf9e3bdf7aa515afd4b5ca0f2387103e2d2ca592910bb608822413dc0879fe63d121cdea4684355411ff3e44f87d1e2613280cd671a43674f6b5a8269c69658c4b"}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cde701004002000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r10, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x801) r12 = accept4(r8, 0x0, 0x0, 0x80000) sendmmsg$alg(r12, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="7bb4d5eeb23ad3e9", 0x8}, {&(0x7f0000000300)="783ba07e415c1edc5726", 0xa}], 0x2, 0x0, 0x0, 0x8001}], 0x1, 0x20048000) sendto$packet(r4, &(0x7f00000000c0)="c4fd685f74bf5dd6b901580113a934b412b56f637948e6a556aabe6b07c45fd01ab42f5b367477b1b877522ebfbb0abe0eb431d93186d3a22b81bcd0452380d74da6e645ed0083a0510f4561b2a9c89e558f33586e5d20651c7b1c2d6de0acdc651399c862aa5e933511e5dde6d13a46ab91a8", 0x73, 0x404c050, &(0x7f0000000140)={0x11, 0x1, r7, 0x1, 0xdd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) 417.428351ms ago: executing program 1 (id=13611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1400000006000100000000000000000004000080fe1e5d13fdeb9564e75b46babbbf924de5176fd1e34260bb3fd1f5bfa91ca3ecefedc7e5a1e646417b522cd3819712ccfb4d722758d4c6ae3752313fd5d9729866fece75cbdabbba5e885fc0a8b52faa366d4dfdc25b93b05b73666445d65b1db7c39d52a53c94f1c15e8fa08eca78e6f3a6926ecef8e163fa3d9bb40d9458099af5552bd7dbca0e86f1bfb8a13445456e0ff52adde6ad15860df2159ccae5e7137b986f6f469ccab7f8"], 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008", @ANYRES16=0x0, @ANYRES16], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1400000006000100000000000000000004000080fe1e5d13fdeb9564e75b46babbbf924de5176fd1e34260bb3fd1f5bfa91ca3ecefedc7e5a1e646417b522cd3819712ccfb4d722758d4c6ae3752313fd5d9729866fece75cbdabbba5e885fc0a8b52faa366d4dfdc25b93b05b73666445d65b1db7c39d52a53c94f1c15e8fa08eca78e6f3a6926ecef8e163fa3d9bb40d9458099af5552bd7dbca0e86f1bfb8a13445456e0ff52adde6ad15860df2159ccae5e7137b986f6f469ccab7f8"], 0x14}], 0x1}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008", @ANYRES16=0x0, @ANYRES16], 0x0) (async) 363.840333ms ago: executing program 2 (id=13612): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) syz_emit_ethernet(0x11c6, &(0x7f0000000bc0)={@multicast, @remote, @void, {@ipv4={0x800, @gre={{0x20, 0x4, 0x3, 0xc, 0x11b8, 0x65, 0x0, 0x43, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp={0x44, 0x14, 0x3a, 0x0, 0xd, [0x1, 0xba, 0x7fff, 0x1f3a]}, @ssrr={0x89, 0x13, 0xb6, [@local, @private=0xa010101, @rand_addr=0x64010100, @local]}, @generic={0x44, 0x7, "0a25fffd3f"}, @lsrr={0x83, 0xf, 0xad, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010102]}, @cipso={0x86, 0x16, 0x3, [{0x2, 0xe, "228a5c6439f0a4f26927fe11"}, {0x6, 0x2}]}, @generic={0x3a4cdf0fd81031f8, 0x12, "9e1683e61f69e57ed11068d13219af3b"}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x6d, 0x3, [0x2, 0x9b8], "11326c7c2ee08708d75e04139a1da2d11abed9f67c24b96af6090697c6019fb012268fa13cf63620170124db88ea10595d2625f6e4ee789ea3ab4d1491a1fddd2e4f37e8fd4413ff603a8ad476f54db2358e3db50ac27fc725870b493e80fedbb40a7def9dc598f29c06b9f7f1"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x6, 0x5], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7, 0x8], "86255d705b9ebf7ab8629bd6490f3cebfd2ff84bbb37ca558ac185a74288059f9d061de9bb90827f74f1b3522e367564ba9d89c5d1c971e85653ab2d7e6c3b53318b210f5f4f06491fe7cdf4ccdef5b025edb829c21c201a809ce82219eff7ffe1f7947d57d62242f9b1e315e268ab4a0ff3a89cb39802422a63584bafd7cb5dd990e3254bce139690eafeb702ebd6efeb57d70a0b9ea7af0c29cdf9e81d418fc1b971c931a8bedf84bc28"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x7, 0x1, 0x0, 0x2, 0x5, 0x5}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x8, 0x3, 0x0, 0x3, 0x6, 0x2}, 0x2, {0x3, 0x2, 0x1, 0x0, 0x1, 0x0, 0x2}}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 254.723844ms ago: executing program 1 (id=13613): socket$inet(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x4, 0x3, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x1}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x4, 0x3, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0x0, 0x1}, 0xe) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e22, 0x3, @loopback, 0x31}}, [0x9, 0x7fffffff, 0x800, 0x2, 0x0, 0x40000000, 0x8, 0xc27, 0x6, 0x3, 0x6, 0x0, 0x0, 0x7ff, 0x88]}, &(0x7f0000000200)=0x100) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x81, 0x6, 0x0, 0x7a}, {0x4, 0x0, 0x9, 0xfff2, 0xd66e, 0x4}, 0x1, 0x8, 0x1a77}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4000004, 0x8, 0x0, 0x6, 0x4, 0x6, 0x6, 0x4, 0x7, 0xfffffff9, 0x81, 0x8001, 0x8000, 0x8, 0x5b, 0x7, 0xbaf, 0x4, 0x800, 0x5, 0xff8, 0x500000, 0x5a5, 0x3, 0x3ff, 0x2, 0xd4, 0xa0, 0x101, 0xed, 0x9, 0xfffffffd, 0x1, 0x57, 0xfffff000, 0x2, 0x0, 0x2, 0x3, 0x144c1fa0, 0x7, 0x200000, 0x57e68c20, 0x3ff, 0x1, 0x8e, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x842, 0x9, 0x6, 0x6, 0x7, 0x426, 0x7fffffff, 0x8000, 0x7, 0x3, 0x9, 0xb, 0x800, 0x8, 0xfffffffa, 0x5, 0x7, 0x3, 0xb2d8, 0xfffffffd, 0x5, 0x0, 0x4, 0x4, 0x1, 0xc, 0x4, 0x65bcf2b4, 0x6, 0x0, 0x7fffffff, 0x0, 0xb, 0x6, 0x0, 0x66, 0x5, 0x2, 0x2, 0xffffffff, 0x5, 0x2, 0x1ff, 0x10000, 0x1000, 0x7, 0x1, 0xfffffff8, 0x400, 0x4, 0x7fffffff, 0x26a6, 0x0, 0x1ff, 0x5, 0x2, 0x2, 0x80, 0x4, 0x8001, 0xfff, 0xffff0000, 0x4, 0x3, 0x5, 0x8, 0x7, 0x6, 0x8000, 0xf, 0xb3, 0x9a, 0x1, 0x4, 0x9, 0xc, 0x40, 0x47c097e1, 0x1, 0x1, 0x2, 0x5, 0x6, 0x8, 0x7fff, 0x1, 0x7fff, 0x5, 0xb0000000, 0x8, 0x10000, 0x3, 0x30, 0x6, 0xa1, 0x8, 0xe, 0x7, 0xfffffffb, 0x8, 0x5, 0x7, 0x80000001, 0x0, 0x8, 0x2, 0xa90, 0x5, 0x8516, 0x4, 0x8, 0x9, 0xc, 0x7dc52d1e, 0x1, 0x5, 0x5, 0x5, 0x93ab, 0x4, 0x200, 0x7398, 0x8, 0x8, 0x0, 0x2, 0x3, 0x400, 0x0, 0xc3, 0x6, 0x1, 0x5, 0x7, 0x2, 0x8000, 0x9, 0x2, 0xab, 0x5, 0xcfe, 0xb00, 0x2, 0x3, 0x2, 0xb5, 0x3c, 0x3, 0x80000003, 0x5, 0x1, 0x3b9, 0xfffffffe, 0xb976, 0x81b, 0x0, 0x5, 0x1, 0x2, 0x7, 0x0, 0x1ff, 0x7, 0x40, 0x1, 0x0, 0x62a25683, 0x2, 0x6, 0x6, 0xb, 0xfffffffa, 0x8, 0xfffffff8, 0x1, 0x800, 0xffffffc0, 0x10000, 0x3, 0xfffffffd, 0x7ff, 0x5, 0x10000, 0x8, 0xd3, 0x0, 0x4, 0x5, 0x8, 0x62, 0x6, 0x9e, 0xff, 0x4, 0xf, 0xaa, 0x6, 0x7f, 0x452, 0xfffffc00, 0x8, 0x0, 0x9, 0x81]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4004) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001980)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, &(0x7f00000019c0)=0x20) socket$nl_rdma(0x10, 0x3, 0x14) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a0009000180c2000003000008000500", @ANYRESOCT], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a0009000180c2000003000008000500", @ANYRESOCT], 0x48}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x20, 0x29, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}}, 0x20}}, 0x20004000) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000001ec0)={&(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000100)="69620a3b5fc31a3af2ebaf055ec0d62379d89ce8e32046194dbd7fed2af590aba7ac944f34edf86bbad20b0ab99baee87fc6a8b1c43b3f", 0x37}, {&(0x7f00000001c0)="bc7b4d51519624dcba1340b3e5ce7781b1c1dd068681be5f4e6c98ca38d3da8aa181d4b52f332581d3fe1ac4e6b26ee12362751947518e43f8871f8e45debbf912b4fa088de30d113488d5b6ac1800"/90, 0x5a}, {&(0x7f00000003c0)="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", 0xfc}, {&(0x7f00000004c0)="07763037b44a63f6fce95858ec8a693ec65faf2f806d01b7743e255cdc9cda191574cd969e2088b97806af390779a1c6fd81c447b110da8454a577f43e80371e6738a4231f9b11ca585726e31feb03ba92000887ea2a0952f1aa42ba812d1c0a1ec7ca5ad75ed8addfe3d48b744feeaa6c53f5717c277cd1071d3c3efba92ecbbb84829f3eb9406c32654408392f3c650ed3e39eb2412c142cfb4a17d3904c1daf151ec32f1335409a6630b6ef44c6f7a849822ed4d14c03c6c91b9353283c4f910115b3b66324d770e863aec8db0295886e5417219f5378d124e71c", 0xdc}, {&(0x7f00000005c0)="1a1e5bcab7b2581320939563fc525e59302d8eae74527ea12a3e7cbf41a48bf56387a587fa4e7d1c62b1df3f315564b019ab7ef7e1f99150e978ba48a6c58554a112a0ea50b1552231ea9abff95bf661c1cb8456f0f8143ad00b0649a7c02708e7a5f3edaf459930dc4e5f95b1a6fa794ad3614132072dad46522d0dd2fb12bb004901d3edab0257606dd6ab45950501757338ae92f730d7da06f0be7541084db74c077adef5fbd10ed50d9511c1f865913fb8172692731c8b6a0d180e1a3fa857ac67eb06fc06a6b6d25957b99b1f0ba3cc0b2514932d4733fe792de9b9e5", 0xdf}, {&(0x7f0000001f00)="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", 0x15e}, {&(0x7f00000007c0)="d9e7b729296b9766fc736cda2617d205a238a7", 0x13}, {&(0x7f0000000800)="ed1c8d8e45816fb9311aeb049f0fcde2fffd0b8a4ff6706db0e544e8072fb6aa7afc8319cc3dd09eb018a91fe89ac622e2953554bce8cbe0e45002313ca2b090315130b21d20680ce1fec0a3873357d9bb9f3adcde332784c703359772663b9bd62abcd7c8131021", 0x68}, {&(0x7f0000000880)="d844b3a7bd7901", 0x7}, {&(0x7f00000008c0)="62d1a64b4fef47bdc4e6c54ba71d9a979ea8b389e59d9c584670709cde159a96b864cb7ff6f71e5ef482feb8e59387cd549d6478514b7fb10662234949e2a97ddda4665e8c8f7e4331ea9b4131c762ed50f4562b5deaedf6ca743e26c095c61fadce8549fea9ce0b42eb2e0c16e3646feb90a3f063eb4ab51d433c2ba299d88965", 0x81}], 0xa, &(0x7f0000004d00)=ANY=[@ANYBLOB="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"], 0x1458}, 0x20000000) 219.322672ms ago: executing program 2 (id=13614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x3, 0x1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x100006, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 73.982702ms ago: executing program 3 (id=13615): r0 = bpf$MAP_CREATE(0xb003, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r0, 0x100000000000000}, 0x38) 73.722756ms ago: executing program 4 (id=13616): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) recvmsg(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=13617): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) kernel console output (not intermixed with test programs): valid length. [ 675.594044][T31733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11898'. [ 675.975735][T31746] netlink: 'syz.3.11903': attribute type 1 has an invalid length. [ 676.035526][T31746] 8021q: adding VLAN 0 to HW filter on device bond6 [ 676.224720][T31746] vlan3: entered allmulticast mode [ 676.237728][T31746] bond6: entered allmulticast mode [ 676.315914][T31749] bond6: (slave geneve3): making interface the new active one [ 676.329007][T31749] geneve3: entered allmulticast mode [ 676.344442][T31749] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 676.762373][T31757] syzkaller0: entered promiscuous mode [ 676.776844][T31757] syzkaller0: entered allmulticast mode [ 677.516807][T31789] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1492542889/1492542891 [ 677.554560][T31789] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1492542889/1492542890 [ 677.586185][T31789] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1492542889/1492542891 [ 677.622880][T31789] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1492542889/1492542890 [ 678.402071][T31817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11921'. [ 680.431692][T31826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11923'. [ 680.445967][T31827] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 680.501710][T31824] syzkaller0: entered promiscuous mode [ 680.529597][T31824] syzkaller0: entered allmulticast mode [ 680.585567][T31826] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 680.597658][T31826] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 680.836732][T31831] macvlan0: entered promiscuous mode [ 680.868218][T31831] macvlan0: entered allmulticast mode [ 680.886820][T31831] bond6: (slave macvlan0): Error -98 calling set_mac_address [ 681.042187][T31838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11928'. [ 681.147523][T31845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11927'. [ 681.214314][T31838] 8021q: adding VLAN 0 to HW filter on device bond8 [ 681.276059][T31838] bond8 (unregistering): Released all slaves [ 681.431211][T31852] syzkaller0: entered promiscuous mode [ 681.466760][T31852] syzkaller0: entered allmulticast mode [ 681.712125][T31864] netlink: 576 bytes leftover after parsing attributes in process `syz.1.11933'. [ 682.530853][T31897] netlink: 'syz.4.11941': attribute type 1 has an invalid length. [ 682.784872][T31897] 8021q: adding VLAN 0 to HW filter on device bond7 [ 682.850729][T31898] bond7: (slave veth5): Enslaving as an active interface with a down link [ 682.895834][T31892] bond6: (slave veth0_to_bond): Releasing backup interface [ 682.927944][T31892] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 683.018841][T31901] bond7: (slave veth7): Enslaving as an active interface with a down link [ 683.047632][T31901] netlink: 'syz.4.11941': attribute type 1 has an invalid length. [ 683.063719][T31901] netlink: 'syz.4.11941': attribute type 2 has an invalid length. [ 683.157993][T31905] syzkaller0: entered promiscuous mode [ 683.177887][T31905] syzkaller0: entered allmulticast mode [ 683.698623][T31926] netlink: 'syz.3.11952': attribute type 1 has an invalid length. [ 683.998319][T31937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11957'. [ 684.033393][T31937] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 684.225185][T31937] team2: entered promiscuous mode [ 684.246901][T31937] team2: entered allmulticast mode [ 685.375454][T31979] syzkaller0: entered promiscuous mode [ 685.399068][T31979] syzkaller0: entered allmulticast mode [ 685.823930][T31989] netlink: 'syz.2.11973': attribute type 1 has an invalid length. [ 685.861344][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.893285][T31989] 8021q: adding VLAN 0 to HW filter on device bond7 [ 685.897694][T31991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11972'. [ 685.928638][T31994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11973'. [ 685.945021][T31994] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 685.992829][T31994] bond7: entered allmulticast mode [ 686.090276][T31999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11975'. [ 686.113388][T32000] lo: entered allmulticast mode [ 686.205305][T31989] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 686.251376][T31996] pimreg: entered allmulticast mode [ 686.270569][T32001] vlan1: left allmulticast mode [ 686.290380][T32001] pimreg: left allmulticast mode [ 686.389370][T32001] lo: left allmulticast mode [ 686.765787][T32021] syzkaller0: entered promiscuous mode [ 686.771688][T32021] syzkaller0: entered allmulticast mode [ 687.136762][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 687.172682][T32029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11985'. [ 687.248430][T32037] syzkaller0: entered promiscuous mode [ 687.254278][T32037] syzkaller0: entered allmulticast mode [ 687.474632][T32043] syzkaller0: entered promiscuous mode [ 687.487502][T32043] syzkaller0: entered allmulticast mode [ 687.923716][T32058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11996'. [ 687.970282][T32056] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 687.979357][T32056] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 687.988769][T32056] tipc: Resetting bearer [ 688.019601][T32031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.180439][T32066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11997'. [ 688.422287][T32072] syzkaller1: entered promiscuous mode [ 688.445819][T32072] syzkaller1: entered allmulticast mode [ 688.466279][T32074] netlink: 'syz.3.12001': attribute type 1 has an invalid length. [ 688.587707][T32074] 8021q: adding VLAN 0 to HW filter on device bond9 [ 688.769751][T32077] 8021q: adding VLAN 0 to HW filter on device bond10 [ 688.890684][T32077] bond9: (slave bond10): Enslaving as an active interface with a down link [ 689.040551][T32084] syzkaller0: entered promiscuous mode [ 689.047168][T32084] syzkaller0: entered allmulticast mode [ 689.303488][T32092] syzkaller0: entered promiscuous mode [ 689.338886][T32092] syzkaller0: entered allmulticast mode [ 689.374135][T32091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12006'. [ 689.554998][T32094] tipc: Enabled bearer , priority 0 [ 689.604991][T32087] tipc: Resetting bearer [ 689.657920][T32087] tipc: Disabling bearer [ 689.891138][T32101] syzkaller0: entered promiscuous mode [ 689.902730][T32101] syzkaller0: entered allmulticast mode [ 689.911286][T32105] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 689.920821][T32105] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 689.929702][T32105] tipc: Resetting bearer [ 690.205651][T32109] syzkaller0: entered allmulticast mode [ 690.451016][T32127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12018'. [ 690.993991][T32148] syzkaller0: entered promiscuous mode [ 691.000727][T32148] syzkaller0: entered allmulticast mode [ 693.075882][T32115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.581157][T32184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.695345][T32190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12036'. [ 693.727938][T32190] netlink: 'syz.1.12036': attribute type 1 has an invalid length. [ 693.736164][T32190] netlink: 228 bytes leftover after parsing attributes in process `syz.1.12036'. [ 693.745884][T32190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12036'. [ 694.550229][T32196] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 694.578935][T32196] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 694.591796][T32196] tipc: Resetting bearer [ 694.675341][T32199] netlink: 'syz.4.12039': attribute type 1 has an invalid length. [ 694.873105][T32210] macvlan4: entered promiscuous mode [ 694.878785][T32210] macvlan4: entered allmulticast mode [ 694.885572][T32210] bond8: entered promiscuous mode [ 694.892667][T32210] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 694.927889][T32210] bond8: left promiscuous mode [ 695.058184][T32222] block nbd2: NBD_DISCONNECT [ 695.063132][T32222] block nbd2: Send disconnect failed -32 [ 695.152792][T32204] bond8: (slave bridge11): Enslaving as a backup interface with a down link [ 695.233359][T32225] syzkaller0: entered promiscuous mode [ 695.250187][T32225] syzkaller0: entered allmulticast mode [ 695.449053][T32227] syzkaller0: entered promiscuous mode [ 695.465336][T32227] syzkaller0: entered allmulticast mode [ 695.488882][T32231] syzkaller0: entered promiscuous mode [ 695.511768][T32231] syzkaller0: entered allmulticast mode [ 695.945243][T32236] syzkaller0: entered promiscuous mode [ 695.989194][T32236] syzkaller0: entered allmulticast mode [ 696.203456][T32262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12055'. [ 698.637160][T32262] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 698.638900][T32264] syzkaller0: entered promiscuous mode [ 698.653082][T32264] syzkaller0: entered allmulticast mode [ 698.867483][T32282] tipc: Failed to remove unknown binding: 66,1,1/1:3754544041/3754544043 [ 698.877332][T32282] tipc: Failed to remove unknown binding: 66,1,1/1:3754544041/3754544043 [ 698.954441][T32281] syzkaller0: entered promiscuous mode [ 698.960607][T32282] netlink: 'syz.2.12059': attribute type 142 has an invalid length. [ 698.979879][T32281] syzkaller0: entered allmulticast mode [ 699.172832][T32292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12062'. [ 699.195392][T32295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12064'. [ 699.340560][T32292] bridge12: port 1(veth13) entered blocking state [ 699.358735][T32292] bridge12: port 1(veth13) entered disabled state [ 699.369501][T32292] veth13: entered allmulticast mode [ 699.378811][T32292] veth13: entered promiscuous mode [ 699.390443][T32299] bridge12: port 2(veth0_to_bond) entered blocking state [ 699.402428][T32299] bridge12: port 2(veth0_to_bond) entered disabled state [ 699.410810][T32299] veth0_to_bond: entered allmulticast mode [ 699.422051][T32299] veth0_to_bond: entered promiscuous mode [ 699.429885][T32299] bridge12: port 2(veth0_to_bond) entered blocking state [ 699.437145][T32299] bridge12: port 2(veth0_to_bond) entered forwarding state [ 699.454315][T32295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12064'. [ 699.563378][T32304] syzkaller0: entered promiscuous mode [ 699.569322][T32304] syzkaller0: entered allmulticast mode [ 699.597835][T32306] syzkaller0: entered promiscuous mode [ 699.603413][T32306] syzkaller0: entered allmulticast mode [ 699.789695][T32311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12069'. [ 699.941486][T32319] bond8: entered promiscuous mode [ 699.948161][T32319] bond8: entered allmulticast mode [ 700.004377][T32323] syzkaller0: entered promiscuous mode [ 700.010564][T32323] syzkaller0: entered allmulticast mode [ 700.157058][T32321] syzkaller0: entered promiscuous mode [ 700.171258][T32321] syzkaller0: entered allmulticast mode [ 700.399161][T32327] syzkaller0: entered promiscuous mode [ 700.417096][T32327] syzkaller0: entered allmulticast mode [ 700.451854][T32334] syzkaller0: entered promiscuous mode [ 700.471787][T32334] syzkaller0: entered allmulticast mode [ 700.579660][T32339] netem: change failed [ 700.798898][T32343] syzkaller0: entered promiscuous mode [ 700.811027][T32343] syzkaller0: entered allmulticast mode [ 700.872694][T32347] netlink: 'syz.0.12084': attribute type 1 has an invalid length. [ 701.012535][T32352] bond4: (slave geneve3): Opening slave failed [ 701.059558][T32347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12084'. [ 701.166051][T32347] 8021q: adding VLAN 0 to HW filter on device bond4 [ 701.576289][T32368] syzkaller0: entered promiscuous mode [ 701.599595][T32368] syzkaller0: entered allmulticast mode [ 701.671797][T32371] syzkaller0: entered promiscuous mode [ 701.688267][T32371] syzkaller0: entered allmulticast mode [ 701.818714][T32378] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12092'. [ 701.970511][T32386] netem: change failed [ 702.136400][T32388] syzkaller0: entered promiscuous mode [ 702.159850][T32388] syzkaller0: entered allmulticast mode [ 702.213971][T32392] netem: change failed [ 702.304097][T32397] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 702.484984][T32403] netlink: 'syz.4.12101': attribute type 1 has an invalid length. [ 702.552253][T32407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12101'. [ 702.626440][T32408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12101'. [ 702.659903][T32401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12099'. [ 702.702236][T32407] bond9: (slave bridge12): making interface the new active one [ 702.713223][T32407] bond9: (slave bridge12): Enslaving as an active interface with an up link [ 702.736198][T32408] 8021q: adding VLAN 0 to HW filter on device bond9 [ 703.135054][T32401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12099'. [ 703.219591][T32421] syzkaller0: entered promiscuous mode [ 703.225248][T32421] syzkaller0: entered allmulticast mode [ 703.573280][T32430] bridge0: port 1(gretap0) entered blocking state [ 703.580397][T32430] bridge0: port 1(gretap0) entered disabled state [ 703.587700][T32430] gretap0: entered allmulticast mode [ 703.595094][T32430] gretap0: entered promiscuous mode [ 703.728108][ T30] audit: type=1804 audit(1779543003.935:6): pid=32438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12114" name="/newroot/2453/cgroup.controllers" dev="tmpfs" ino=12340 res=1 errno=0 [ 703.772638][ T30] audit: type=1800 audit(1779543003.965:7): pid=32438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12114" name="cgroup.controllers" dev="tmpfs" ino=12340 res=0 errno=0 [ 704.718654][T32376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.767961][T32474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12127'. [ 705.031772][T32479] syzkaller0: entered promiscuous mode [ 705.051992][T32479] syzkaller0: entered allmulticast mode [ 705.097807][T32485] 0: reclassify loop, rule prio 0, protocol 800 [ 705.248461][T32481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.619699][T32499] syzkaller0: entered promiscuous mode [ 705.639583][T32499] syzkaller0: entered allmulticast mode [ 705.664589][T32496] syzkaller0: entered promiscuous mode [ 705.683726][T32496] syzkaller0: entered allmulticast mode [ 706.386050][T32509] syzkaller0: entered promiscuous mode [ 706.406359][T32509] syzkaller0: entered allmulticast mode [ 706.789778][T32530] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 706.823657][T32530] batman_adv: batadv0: Removing interface: ipvlan2 [ 706.835782][T32534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12145'. [ 706.949666][T32538] syzkaller0: entered promiscuous mode [ 706.963132][T32538] syzkaller0: entered allmulticast mode [ 707.477532][T32550] bond11: entered allmulticast mode [ 707.655679][T32559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12150'. [ 710.437169][T32550] veth9: entered allmulticast mode [ 710.464656][T32550] bond11: (slave veth9): Enslaving as an active interface with an up link [ 710.488444][T32554] bond11 (unregistering): (slave veth9): Releasing backup interface [ 710.520427][T32554] bond11 (unregistering): Released all slaves [ 710.833813][T32581] tipc: Enabled bearer , priority 0 [ 711.029731][ T30] audit: type=1804 audit(1779543011.235:8): pid=32586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.12158" name="/newroot/2451/cgroup.controllers" dev="tmpfs" ino=12353 res=1 errno=0 [ 711.096863][ T30] audit: type=1800 audit(1779543011.235:9): pid=32586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12158" name="cgroup.controllers" dev="tmpfs" ino=12353 res=0 errno=0 [ 711.210015][T32581] syzkaller0: entered promiscuous mode [ 711.242684][T32581] syzkaller0: entered allmulticast mode [ 711.270503][T32581] tipc: Resetting bearer [ 711.522399][T32579] tipc: Resetting bearer [ 714.330218][T32579] tipc: Disabling bearer [ 714.343790][T32590] syzkaller0: entered promiscuous mode [ 714.349714][T32590] syzkaller0: entered allmulticast mode [ 714.456302][T32604] syzkaller0: entered promiscuous mode [ 714.463841][T32604] syzkaller0: entered allmulticast mode [ 717.882531][T32664] syzkaller0: entered promiscuous mode [ 717.900743][T32664] syzkaller0: entered allmulticast mode [ 718.235751][T32677] tipc: Enabled bearer , priority 0 [ 718.260407][T32677] syzkaller0: entered promiscuous mode [ 718.280553][T32677] syzkaller0: entered allmulticast mode [ 718.359943][ T30] audit: type=1804 audit(1779543018.555:10): pid=32681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12173" name="/newroot/2367/cgroup.controllers" dev="tmpfs" ino=11927 res=1 errno=0 [ 718.404806][ T30] audit: type=1800 audit(1779543018.565:11): pid=32681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12173" name="cgroup.controllers" dev="tmpfs" ino=11927 res=0 errno=0 [ 718.421394][T32686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12175'. [ 718.442525][T32683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 718.464131][T32689] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 718.515151][T32684] tipc: Resetting bearer [ 718.597292][T32680] syzkaller0: entered promiscuous mode [ 718.612095][T32680] syzkaller0: entered allmulticast mode [ 718.621642][T32676] tipc: Resetting bearer [ 718.672604][T32676] tipc: Disabling bearer [ 719.538227][T10277] IPVS: ip_vs_send_async error -101 [ 721.761383][T32715] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 721.768966][T32715] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 721.779195][T32715] tipc: Resetting bearer [ 721.785351][T32704] syzkaller0: entered promiscuous mode [ 721.792739][T32704] syzkaller0: entered allmulticast mode [ 722.384268][T32744] syzkaller0: entered promiscuous mode [ 722.409720][T32744] syzkaller0: entered allmulticast mode [ 722.555246][T32751] tipc: Enabled bearer , priority 0 [ 722.563964][T32751] syzkaller0: entered promiscuous mode [ 722.572868][T32751] syzkaller0: entered allmulticast mode [ 722.598211][T32751] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 722.712515][T32751] tipc: Resetting bearer [ 722.754795][T32749] tipc: Resetting bearer [ 723.050037][T32749] tipc: Disabling bearer [ 723.187738][ T300] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 723.232850][ T300] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 723.282646][ T300] tipc: Resetting bearer [ 723.769781][ T315] syzkaller0: entered promiscuous mode [ 723.789573][ T315] syzkaller0: entered allmulticast mode [ 723.902556][ T315] tipc: Enabled bearer , priority 0 [ 723.991682][ T314] tipc: Resetting bearer [ 724.045812][ T314] tipc: Disabling bearer [ 724.584875][ T344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12211'. [ 724.658335][ T342] syzkaller0: entered promiscuous mode [ 724.664667][ T342] syzkaller0: entered allmulticast mode [ 725.125704][ T358] syzkaller0: entered promiscuous mode [ 725.152913][ T358] syzkaller0: entered allmulticast mode [ 725.299421][ T361] syzkaller0: entered promiscuous mode [ 725.322428][ T361] syzkaller0: entered allmulticast mode [ 725.652818][ T375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12224'. [ 725.676713][ T375] openvswitch: netlink: Message has 8 unknown bytes. [ 726.107115][ T391] syzkaller0: entered promiscuous mode [ 726.127539][ T391] syzkaller0: entered allmulticast mode [ 726.833594][ T425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12246'. [ 727.307892][ T432] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 727.416065][ T421] tipc: Resetting bearer [ 727.645693][ T440] syzkaller0: entered promiscuous mode [ 727.655150][ T440] syzkaller0: entered allmulticast mode [ 728.791497][ T480] syzkaller0: entered promiscuous mode [ 728.829959][ T480] syzkaller0: entered allmulticast mode [ 728.858928][ T488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12272'. [ 732.333295][ T524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12285'. [ 732.697215][ T540] tipc: New replicast peer: 255.255.255.255 [ 732.757383][ T540] tipc: Enabled bearer , priority 10 [ 732.882499][ T547] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 732.980193][ T551] xt_hashlimit: size too large, truncated to 1048576 [ 733.069470][ T556] –: renamed from vxcan1 (while UP) [ 733.913314][ T581] team0: Mode changed to "loadbalance" [ 734.242246][ T593] syzkaller0: entered promiscuous mode [ 734.260476][ T593] syzkaller0: entered allmulticast mode [ 738.177408][ T626] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 738.451561][ T653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12325'. [ 738.980230][ T674] tipc: Enabling of bearer rejected, failed to enable media [ 739.134291][ T678] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 739.172180][ T680] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 739.177706][T24733] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 739.185800][ T680] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 739.198605][T24733] syz2: Port: 1 Link ACTIVE [ 739.218811][T24733] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 739.531332][ T696] netlink: 180 bytes leftover after parsing attributes in process `syz.0.12342'. [ 740.035666][ T714] TC_ACT_REPEAT abuse ? [ 740.909536][ T740] xt_hashlimit: size too large, truncated to 1048576 [ 741.425057][ T759] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12366'. [ 741.762702][ T769] TC_ACT_REPEAT abuse ? [ 742.443624][ T783] netlink: 'syz.1.12377': attribute type 1 has an invalid length. [ 742.528414][ T783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 742.676299][ T791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12378'. [ 742.713398][ T791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12378'. [ 743.122635][ T814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12388'. [ 743.310562][ T821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12391'. [ 743.764033][ T828] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 743.940601][ T835] syzkaller1: entered promiscuous mode [ 743.957560][ T835] syzkaller1: entered allmulticast mode [ 744.732902][ T857] veth0: entered promiscuous mode [ 744.794255][ T862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12406'. [ 744.815980][ T857] veth0: left promiscuous mode [ 745.669584][ T892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12418'. [ 745.994467][ T903] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 746.002663][ T903] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 746.202474][ T885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 746.393583][ T913] syzkaller0: entered promiscuous mode [ 746.412839][ T913] syzkaller0: entered allmulticast mode [ 746.444173][ T913] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 747.305851][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.359774][ T965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12441'. [ 747.567538][ T972] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.12442'. [ 747.753532][ T977] netlink: 'syz.0.12446': attribute type 1 has an invalid length. [ 747.856164][ T977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 747.918167][ T983] bond5: (slave batadv1): Opening slave failed [ 748.089287][ T982] bond5: (slave veth5): Enslaving as an active interface with a down link [ 748.175400][ T987] batadv_slave_1: entered promiscuous mode [ 748.702531][ T1000] netlink: 'syz.0.12453': attribute type 1 has an invalid length. [ 748.854364][ T1010] bond6: (slave vxcan4): The slave device specified does not support setting the MAC address [ 748.872722][ T1010] bond6: (slave vxcan4): Error -95 calling set_mac_address [ 749.222140][ T1000] bond6: (slave gretap1): making interface the new active one [ 749.257047][ T1000] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 749.924436][ T1050] lo: Caught tx_queue_len zero misconfig [ 750.036112][ T1053] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12464'. [ 750.050448][ T1053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12464'. [ 751.723512][ T1110] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 751.977616][ T1117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12483'. [ 752.135309][ T1129] lo: entered allmulticast mode [ 752.197524][ T1124] lo: left allmulticast mode [ 752.745600][ T1142] netlink: 'syz.2.12489': attribute type 4 has an invalid length. [ 752.819883][ T1142] netlink: 'syz.2.12489': attribute type 4 has an invalid length. [ 753.098487][ T1153] tipc: Enabled bearer , priority 0 [ 753.130551][ T1153] syzkaller0: MTU too low for tipc bearer [ 753.155048][ T1153] tipc: Disabling bearer [ 753.180602][ T1156] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.12495'. [ 753.207669][ T1156] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 753.548526][ T1168] veth1_macvtap: entered allmulticast mode [ 753.570613][ T1168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12500'. [ 753.726966][ T1175] netlink: 'syz.2.12501': attribute type 4 has an invalid length. [ 753.797971][ T1176] netlink: 'syz.2.12501': attribute type 4 has an invalid length. [ 755.602831][ T1214] tipc: Enabled bearer , priority 0 [ 755.623133][ T1214] syzkaller0: entered promiscuous mode [ 755.642300][ T1214] syzkaller0: entered allmulticast mode [ 756.462786][ T1201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12509'. [ 756.473877][ T1201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12509'. [ 756.484866][ T1212] tipc: Resetting bearer [ 756.633463][ T1212] tipc: Disabling bearer [ 756.912052][ T1240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12518'. [ 756.945001][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.093067][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.197993][ T1257] tipc: Enabled bearer , priority 0 [ 757.400012][ T1253] syzkaller0: entered promiscuous mode [ 757.413065][ T1253] syzkaller0: entered allmulticast mode [ 757.428089][ T1253] tipc: Resetting bearer [ 757.469954][ T1252] tipc: Resetting bearer [ 757.547005][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 757.573921][ T1261] scsi_nl_rcv_msg: discarding partial skb [ 757.790632][ T1276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12522'. [ 758.301109][ T1292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12526'. [ 760.810507][ T1252] tipc: Disabling bearer [ 761.568762][ T1324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12531'. [ 761.819610][ T1344] syzkaller0: entered promiscuous mode [ 761.840219][ T1344] syzkaller0: entered allmulticast mode [ 762.024559][ T1349] syzkaller0: entered promiscuous mode [ 762.038045][ T1349] syzkaller0: entered allmulticast mode [ 762.753173][ T1373] tipc: Enabled bearer , priority 0 [ 763.189176][ T1373] syzkaller0: entered promiscuous mode [ 763.213361][ T1373] syzkaller0: entered allmulticast mode [ 763.238902][ T1373] tipc: Resetting bearer [ 764.278214][T15855] tipc: Resetting bearer [ 764.301139][ T1391] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 764.308679][ T1391] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 764.319178][ T1371] tipc: Resetting bearer [ 764.622513][ T1429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12551'. [ 766.578566][ T1371] tipc: Disabling bearer [ 766.592057][ T1398] tipc: Resetting bearer [ 766.614240][ T1412] tipc: Resetting bearer [ 766.935487][ T1434] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12552'. [ 767.110957][ T1440] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 767.130554][ T1440] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 767.201499][ T1444] netlink: 'syz.4.12556': attribute type 1 has an invalid length. [ 767.305213][ T1444] 8021q: adding VLAN 0 to HW filter on device bond10 [ 767.504122][ T1454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12559'. [ 767.756189][ T1463] syzkaller0: entered promiscuous mode [ 767.769626][ T1463] syzkaller0: entered allmulticast mode [ 768.051490][ T1465] syzkaller0: entered promiscuous mode [ 768.064273][ T1465] syzkaller0: entered allmulticast mode [ 768.110406][ T1469] syzkaller0: entered promiscuous mode [ 768.117395][ T1469] syzkaller0: entered allmulticast mode [ 768.201272][ T1472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12565'. [ 768.503799][ T1474] netlink: 'syz.1.12566': attribute type 13 has an invalid length. [ 769.047890][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 769.059333][ T1491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12570'. [ 769.075669][ T10] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 769.275228][ T1491] 8021q: adding VLAN 0 to HW filter on device bond11 [ 769.306937][T27429] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 769.398740][ T1498] 8021q: adding VLAN 0 to HW filter on device bond12 [ 769.410400][ T1498] bond11: (slave bond12): Enslaving as an active interface with an up link [ 769.575843][ T1509] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12573'. [ 769.776874][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 769.931046][ T1517] erspan0: entered promiscuous mode [ 770.093597][ T1526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12579'. [ 770.284667][ T1523] syzkaller0: entered promiscuous mode [ 770.325023][ T1523] syzkaller0: entered allmulticast mode [ 770.363987][ T1537] syzkaller0: entered promiscuous mode [ 770.378388][ T1537] syzkaller0: entered allmulticast mode [ 770.841386][ T1542] syzkaller0: entered promiscuous mode [ 770.855258][ T1542] syzkaller0: entered allmulticast mode [ 770.910657][ T1557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12584'. [ 771.538175][ T1570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.479059][ T1583] gretap0: left allmulticast mode [ 777.497374][ T1583] gretap0: left promiscuous mode [ 777.505660][ T1583] bridge0: port 1(gretap0) entered disabled state [ 777.585096][ T1583] bond7: (slave veth0_to_bond): Releasing active interface [ 777.640888][ T1583] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 778.451010][ T1620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12605'. [ 778.473813][ T1620] openvswitch: netlink: Message has 8 unknown bytes. [ 778.620690][ T1625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12607'. [ 778.882874][ T1639] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 779.231578][ T1653] syzkaller0: entered promiscuous mode [ 779.249202][ T1653] syzkaller0: entered allmulticast mode [ 779.469664][ T1664] netlink: 'syz.3.12619': attribute type 1 has an invalid length. [ 779.740354][ T1668] bond11: (slave bridge6): making interface the new active one [ 779.806124][ T1668] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 779.853601][ T1670] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 779.930912][ T1674] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 780.134412][ T1691] syzkaller0: entered promiscuous mode [ 780.149442][ T1691] syzkaller0: entered allmulticast mode [ 780.907095][T10277] IPVS: ip_vs_send_async error -101 [ 782.441019][ T1722] sctp: [Deprecated]: syz.4.12629 (pid 1722) Use of int in maxseg socket option. [ 782.441019][ T1722] Use struct sctp_assoc_value instead [ 782.728458][ T1735] syzkaller0: entered promiscuous mode [ 782.750990][ T1735] syzkaller0: entered allmulticast mode [ 782.918604][ T1747] lo: Caught tx_queue_len zero misconfig [ 782.994501][ T1752] syzkaller0: entered promiscuous mode [ 783.016694][ T1752] syzkaller0: entered allmulticast mode [ 783.120228][ T1757] netem: change failed [ 783.793309][ T1799] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 784.117821][ T1812] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12661'. [ 784.341183][ T1829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12663'. [ 784.519807][ T1835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12665'. [ 784.626391][ T1841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12669'. [ 786.228099][ T1926] netlink: 'syz.0.12699': attribute type 22 has an invalid length. [ 786.246738][ T1926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12699'. [ 786.266828][ T1926] netlink: 'syz.0.12699': attribute type 22 has an invalid length. [ 786.285868][ T1926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12699'. [ 786.483473][ T1934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12704'. [ 786.513206][ T1934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12704'. [ 786.690852][ T1947] xt_hashlimit: size too large, truncated to 1048576 [ 786.734956][ T1944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12709'. [ 789.599226][ T2008] xt_hashlimit: size too large, truncated to 1048576 [ 789.708272][T15855] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 791.905547][ T2034] team0: left allmulticast mode [ 791.910912][ T2034] bridge0: port 1(team0) entered disabled state [ 791.924009][ T2034] veth0_to_bond: left allmulticast mode [ 791.929870][ T2034] veth0_to_bond: left promiscuous mode [ 791.935629][ T2034] bridge12: port 2(veth0_to_bond) entered disabled state [ 791.965977][ T2034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 792.230839][ T2052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12746'. [ 792.241556][ T2057] netlink: 180 bytes leftover after parsing attributes in process `syz.3.12749'. [ 792.262717][ T2052] netlink: 'syz.0.12746': attribute type 1 has an invalid length. [ 792.276801][ T2052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12746'. [ 792.554782][ T2071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12755'. [ 792.564092][ T2071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12755'. [ 792.575889][ T2071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12755'. [ 792.588157][ T2071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12755'. [ 793.607469][ T2099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12762'. [ 793.875092][ T2093] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 794.806825][ T2119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12769'. [ 797.059672][ T2132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12774'. [ 797.398958][ T2155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.622318][ T2164] __nla_validate_parse: 1 callbacks suppressed [ 797.622339][ T2164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12786'. [ 797.640881][ T2164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12786'. [ 797.703461][ T2166] syzkaller0: entered promiscuous mode [ 797.709539][ T2166] syzkaller0: entered allmulticast mode [ 798.235139][ T2182] netlink: 'syz.0.12792': attribute type 13 has an invalid length. [ 800.418647][ T2183] syzkaller0: entered promiscuous mode [ 800.424740][ T2183] syzkaller0: entered allmulticast mode [ 802.413737][ T2219] tipc: Enabled bearer , priority 0 [ 802.519720][ T2224] syzkaller0: entered promiscuous mode [ 802.525297][ T2224] syzkaller0: entered allmulticast mode [ 802.532168][ T2224] tipc: Resetting bearer [ 802.550084][ T2215] tipc: Resetting bearer [ 802.629263][ T2241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12799'. [ 802.654214][ T2243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12798'. [ 804.487819][ T2215] tipc: Disabling bearer [ 804.622803][ T2257] netlink: 'syz.1.12802': attribute type 1 has an invalid length. [ 804.671061][ T2257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.772492][ T2257] bond3: (slave geneve2): making interface the new active one [ 804.788953][ T2257] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 804.831995][ T2262] syzkaller0: entered promiscuous mode [ 804.842409][ T2262] syzkaller0: entered allmulticast mode [ 804.851174][ T2268] syzkaller0: entered promiscuous mode [ 804.857730][ T2268] syzkaller0: entered allmulticast mode [ 804.955924][ T2270] syzkaller0: entered promiscuous mode [ 804.963413][ T2270] syzkaller0: entered allmulticast mode [ 805.102379][ T2279] tipc: Enabling of bearer rejected, failed to enable media [ 805.488652][ T2303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12822'. [ 805.515668][ T2303] openvswitch: netlink: Message has 8 unknown bytes. [ 805.665490][ T2310] bridge0: port 1(gretap0) entered blocking state [ 805.682037][ T2310] bridge0: port 1(gretap0) entered disabled state [ 805.706373][ T2310] gretap0: entered promiscuous mode [ 805.714061][ T2310] bridge0: port 1(gretap0) entered blocking state [ 805.720691][ T2310] bridge0: port 1(gretap0) entered forwarding state [ 806.532218][ T2358] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12844'. [ 806.671289][ T2368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12850'. [ 806.804167][ T2377] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12852'. [ 808.753457][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.935721][ T2400] syzkaller0: entered promiscuous mode [ 808.953182][ T2400] syzkaller0: entered allmulticast mode [ 808.978710][ T2402] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 809.061102][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12862'. [ 809.231789][ T2422] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12868'. [ 809.251258][ T2420] syzkaller0: entered promiscuous mode [ 809.263102][ T2420] syzkaller0: entered allmulticast mode [ 809.447493][ T2431] TC_ACT_REPEAT abuse ? [ 809.482830][ T2438] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12874'. [ 809.865405][ T2454] syzkaller0: entered promiscuous mode [ 809.872261][ T2454] syzkaller0: entered allmulticast mode [ 810.141815][ T2467] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12883'. [ 810.237488][ T2472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12884'. [ 810.534795][ T2479] veth0_macvtap: Caught tx_queue_len zero misconfig [ 811.402074][ T2551] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 811.720318][ T2573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12916'. [ 811.933431][ T2591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12921'. [ 811.976938][ T2591] veth1_to_team: entered promiscuous mode [ 811.993366][ T2591] gretap0: entered promiscuous mode [ 812.011499][ T2591] hsr0: entered promiscuous mode [ 812.369229][ T2617] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12929'. [ 812.483905][ T2623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12932'. [ 812.508816][ T2623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.641645][ T2634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.681773][ T2634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.472100][ T2694] netlink: 312 bytes leftover after parsing attributes in process `syz.2.12955'. [ 813.851210][ T2723] xt_hashlimit: size too large, truncated to 1048576 [ 814.460287][ T2744] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 814.484931][ T2744] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 814.795159][ T2776] __nla_validate_parse: 4 callbacks suppressed [ 814.795262][ T2776] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.12976'. [ 814.811382][ T2776] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 816.009378][ T2850] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 816.113447][ T2858] syzkaller0: entered promiscuous mode [ 816.124680][ T2858] syzkaller0: entered allmulticast mode [ 816.179399][ T2865] syzkaller0: entered promiscuous mode [ 816.185106][ T2865] syzkaller0: entered allmulticast mode [ 816.221561][ T2870] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12997'. [ 816.231552][ T2870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12997'. [ 816.242214][ T2870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12997'. [ 816.393468][ T2876] syzkaller0: entered promiscuous mode [ 816.400648][ T2876] syzkaller0: entered allmulticast mode [ 816.486210][ T2882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13003'. [ 816.527157][ T2887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13004'. [ 816.848730][ T2896] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13008'. [ 816.876122][ T2900] syzkaller0: entered promiscuous mode [ 816.898285][ T2900] syzkaller0: entered allmulticast mode [ 817.029327][ T2909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.078431][ T30] audit: type=1804 audit(1779543117.285:12): pid=2911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.13013" name="/newroot/2528/cgroup.controllers" dev="tmpfs" ino=12746 res=1 errno=0 [ 817.126586][ T30] audit: type=1800 audit(1779543117.285:13): pid=2911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13013" name="cgroup.controllers" dev="tmpfs" ino=12746 res=0 errno=0 [ 817.316872][ T2923] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13015'. [ 817.836073][ T30] audit: type=1804 audit(1779543118.035:14): pid=2939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.13019" name="/newroot/2647/cgroup.controllers" dev="tmpfs" ino=13350 res=1 errno=0 [ 817.892196][ T30] audit: type=1800 audit(1779543118.075:15): pid=2939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13019" name="cgroup.controllers" dev="tmpfs" ino=13350 res=0 errno=0 [ 818.094801][ T2943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13020'. [ 820.233622][ T2997] syzkaller0: entered promiscuous mode [ 820.244634][ T2997] syzkaller0: entered allmulticast mode [ 820.608168][ T3014] tipc: Enabling of bearer rejected, already enabled [ 820.641537][ T3014] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 820.660637][ T3014] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 820.680038][ T3016] syzkaller0: entered promiscuous mode [ 820.692798][ T3016] syzkaller0: entered allmulticast mode [ 821.044660][ T3024] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 821.071121][ T3024] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 821.343150][ T3035] syzkaller0: entered promiscuous mode [ 821.357566][ T3035] syzkaller0: entered allmulticast mode [ 821.429589][ T3044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13040'. [ 821.452304][ T3046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13045'. [ 821.524677][ T3045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13043'. [ 821.696037][ T3054] syzkaller0: entered promiscuous mode [ 821.710994][ T3054] syzkaller0: entered allmulticast mode [ 822.079279][ T3078] FAULT_INJECTION: forcing a failure. [ 822.079279][ T3078] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 822.109891][ T3078] CPU: 1 UID: 0 PID: 3078 Comm: syz.3.13053 Not tainted syzkaller #0 PREEMPT(full) [ 822.109919][ T3078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.109933][ T3078] Call Trace: [ 822.109942][ T3078] [ 822.109951][ T3078] dump_stack_lvl+0xe8/0x150 [ 822.109980][ T3078] should_fail_ex+0x412/0x560 [ 822.110016][ T3078] _copy_from_user+0x2d/0xb0 [ 822.110048][ T3078] __sys_bpf+0x229/0x950 [ 822.110088][ T3078] ? __pfx___sys_bpf+0x10/0x10 [ 822.110136][ T3078] ? ksys_write+0x242/0x270 [ 822.110170][ T3078] ? __pfx_ksys_write+0x10/0x10 [ 822.110206][ T3078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.110229][ T3078] __x64_sys_bpf+0x7c/0x90 [ 822.110259][ T3078] do_syscall_64+0x15f/0xf80 [ 822.110291][ T3078] ? trace_irq_disable+0x3b/0x140 [ 822.110321][ T3078] ? clear_bhb_loop+0x40/0x90 [ 822.110347][ T3078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.110368][ T3078] RIP: 0033:0x7f2fcd99ce59 [ 822.110388][ T3078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.110407][ T3078] RSP: 002b:00007f2fce781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 822.110429][ T3078] RAX: ffffffffffffffda RBX: 00007f2fcdc15fa0 RCX: 00007f2fcd99ce59 [ 822.110445][ T3078] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 822.110458][ T3078] RBP: 00007f2fce781090 R08: 0000000000000000 R09: 0000000000000000 [ 822.110471][ T3078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.110490][ T3078] R13: 00007f2fcdc16038 R14: 00007f2fcdc15fa0 R15: 00007ffd10bc8f88 [ 822.110525][ T3078] [ 822.353029][ T3080] syzkaller0: entered promiscuous mode [ 822.360539][ T3080] syzkaller0: entered allmulticast mode [ 822.444938][ T3084] syzkaller0: entered promiscuous mode [ 822.450772][ T3084] syzkaller0: entered allmulticast mode [ 822.606197][ T3092] FAULT_INJECTION: forcing a failure. [ 822.606197][ T3092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.649057][ T3092] CPU: 1 UID: 0 PID: 3092 Comm: syz.0.13060 Not tainted syzkaller #0 PREEMPT(full) [ 822.649087][ T3092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.649100][ T3092] Call Trace: [ 822.649110][ T3092] [ 822.649119][ T3092] dump_stack_lvl+0xe8/0x150 [ 822.649148][ T3092] should_fail_ex+0x412/0x560 [ 822.649182][ T3092] _copy_from_user+0x2d/0xb0 [ 822.649235][ T3092] ___sys_sendmsg+0x1c6/0x360 [ 822.649267][ T3092] ? __lock_acquire+0x6b5/0x2cf0 [ 822.649296][ T3092] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.649367][ T3092] ? __fget_files+0x2a/0x420 [ 822.649402][ T3092] ? __fget_files+0x3a0/0x420 [ 822.649439][ T3092] __x64_sys_sendmsg+0x1bd/0x2a0 [ 822.649475][ T3092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.649522][ T3092] ? __pfx_ksys_write+0x10/0x10 [ 822.649563][ T3092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.649587][ T3092] do_syscall_64+0x15f/0xf80 [ 822.649619][ T3092] ? trace_irq_disable+0x3b/0x140 [ 822.649652][ T3092] ? clear_bhb_loop+0x40/0x90 [ 822.649679][ T3092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.649700][ T3092] RIP: 0033:0x7f39b299ce59 [ 822.649719][ T3092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.649738][ T3092] RSP: 002b:00007f39b38a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.649767][ T3092] RAX: ffffffffffffffda RBX: 00007f39b2c15fa0 RCX: 00007f39b299ce59 [ 822.649782][ T3092] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 822.649796][ T3092] RBP: 00007f39b38a2090 R08: 0000000000000000 R09: 0000000000000000 [ 822.649810][ T3092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.649822][ T3092] R13: 00007f39b2c16038 R14: 00007f39b2c15fa0 R15: 00007ffe637336f8 [ 822.649857][ T3092] [ 822.941694][ T3097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.195568][ T3107] FAULT_INJECTION: forcing a failure. [ 823.195568][ T3107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.212266][ T3107] CPU: 1 UID: 0 PID: 3107 Comm: syz.1.13066 Not tainted syzkaller #0 PREEMPT(full) [ 823.212296][ T3107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.212310][ T3107] Call Trace: [ 823.212319][ T3107] [ 823.212328][ T3107] dump_stack_lvl+0xe8/0x150 [ 823.212359][ T3107] should_fail_ex+0x412/0x560 [ 823.212395][ T3107] _copy_from_user+0x2d/0xb0 [ 823.212429][ T3107] ___sys_sendmsg+0x1c6/0x360 [ 823.212461][ T3107] ? __lock_acquire+0x6b5/0x2cf0 [ 823.212491][ T3107] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.212564][ T3107] ? __fget_files+0x2a/0x420 [ 823.212591][ T3107] ? __fget_files+0x3a0/0x420 [ 823.212636][ T3107] __x64_sys_sendmsg+0x1bd/0x2a0 [ 823.212672][ T3107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.212716][ T3107] ? __pfx_ksys_write+0x10/0x10 [ 823.212757][ T3107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.212782][ T3107] do_syscall_64+0x15f/0xf80 [ 823.212815][ T3107] ? trace_irq_disable+0x3b/0x140 [ 823.212848][ T3107] ? clear_bhb_loop+0x40/0x90 [ 823.212875][ T3107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.212897][ T3107] RIP: 0033:0x7f80e879ce59 [ 823.212918][ T3107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.212936][ T3107] RSP: 002b:00007f80e9685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.212959][ T3107] RAX: ffffffffffffffda RBX: 00007f80e8a15fa0 RCX: 00007f80e879ce59 [ 823.212975][ T3107] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 823.212994][ T3107] RBP: 00007f80e9685090 R08: 0000000000000000 R09: 0000000000000000 [ 823.213007][ T3107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.213020][ T3107] R13: 00007f80e8a16038 R14: 00007f80e8a15fa0 R15: 00007ffd32c7a3b8 [ 823.213056][ T3107] [ 823.408553][ T3108] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 823.436565][ T3108] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 823.505998][ T3113] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13068'. [ 823.536306][ T3113] syzkaller0: entered promiscuous mode [ 823.553406][ T3113] syzkaller0: entered allmulticast mode [ 823.658147][ T3117] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 823.665512][ T3117] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 823.755092][ T3121] netlink: 'syz.3.13073': attribute type 1 has an invalid length. [ 823.800389][ T3125] FAULT_INJECTION: forcing a failure. [ 823.800389][ T3125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.842114][ T3125] CPU: 1 UID: 0 PID: 3125 Comm: syz.4.13072 Not tainted syzkaller #0 PREEMPT(full) [ 823.842143][ T3125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.842157][ T3125] Call Trace: [ 823.842166][ T3125] [ 823.842175][ T3125] dump_stack_lvl+0xe8/0x150 [ 823.842206][ T3125] should_fail_ex+0x412/0x560 [ 823.842241][ T3125] _copy_from_user+0x2d/0xb0 [ 823.842275][ T3125] __sys_bpf+0x229/0x950 [ 823.842310][ T3125] ? __pfx___sys_bpf+0x10/0x10 [ 823.842361][ T3125] ? ksys_write+0x242/0x270 [ 823.842396][ T3125] ? __pfx_ksys_write+0x10/0x10 [ 823.842431][ T3125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.842454][ T3125] __x64_sys_bpf+0x7c/0x90 [ 823.842485][ T3125] do_syscall_64+0x15f/0xf80 [ 823.842517][ T3125] ? trace_irq_disable+0x3b/0x140 [ 823.842550][ T3125] ? clear_bhb_loop+0x40/0x90 [ 823.842585][ T3125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.842606][ T3125] RIP: 0033:0x7fb40739ce59 [ 823.842626][ T3125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.842643][ T3125] RSP: 002b:00007fb408239028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 823.842665][ T3125] RAX: ffffffffffffffda RBX: 00007fb407615fa0 RCX: 00007fb40739ce59 [ 823.842682][ T3125] RDX: 0000000000000048 RSI: 0000200000000980 RDI: 0000000000000000 [ 823.842695][ T3125] RBP: 00007fb408239090 R08: 0000000000000000 R09: 0000000000000000 [ 823.842709][ T3125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.842722][ T3125] R13: 00007fb407616038 R14: 00007fb407615fa0 R15: 00007ffd2b5e92c8 [ 823.842762][ T3125] [ 824.317273][ T3139] FAULT_INJECTION: forcing a failure. [ 824.317273][ T3139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.349205][ T3139] CPU: 1 UID: 0 PID: 3139 Comm: syz.2.13079 Not tainted syzkaller #0 PREEMPT(full) [ 824.349234][ T3139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 824.349247][ T3139] Call Trace: [ 824.349255][ T3139] [ 824.349264][ T3139] dump_stack_lvl+0xe8/0x150 [ 824.349294][ T3139] should_fail_ex+0x412/0x560 [ 824.349327][ T3139] _copy_from_user+0x2d/0xb0 [ 824.349360][ T3139] __sys_bpf+0x229/0x950 [ 824.349395][ T3139] ? __pfx___sys_bpf+0x10/0x10 [ 824.349442][ T3139] ? ksys_write+0x242/0x270 [ 824.349480][ T3139] ? __pfx_ksys_write+0x10/0x10 [ 824.349546][ T3139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.349570][ T3139] __x64_sys_bpf+0x7c/0x90 [ 824.349601][ T3139] do_syscall_64+0x15f/0xf80 [ 824.349634][ T3139] ? trace_irq_disable+0x3b/0x140 [ 824.349666][ T3139] ? clear_bhb_loop+0x40/0x90 [ 824.349693][ T3139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.349714][ T3139] RIP: 0033:0x7f45a959ce59 [ 824.349734][ T3139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.349752][ T3139] RSP: 002b:00007f45a77f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 824.349774][ T3139] RAX: ffffffffffffffda RBX: 00007f45a9815fa0 RCX: 00007f45a959ce59 [ 824.349789][ T3139] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 824.349804][ T3139] RBP: 00007f45a77f6090 R08: 0000000000000000 R09: 0000000000000000 [ 824.349816][ T3139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.349828][ T3139] R13: 00007f45a9816038 R14: 00007f45a9815fa0 R15: 00007ffdcb6bee48 [ 824.349865][ T3139] [ 824.918829][ T3161] netlink: 'syz.3.13085': attribute type 1 has an invalid length. [ 825.454406][ T3168] syzkaller0: entered promiscuous mode [ 825.477933][ T3168] syzkaller0: entered allmulticast mode [ 825.501765][ T3186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13089'. [ 825.584783][ T3190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13092'. [ 826.714004][ T3215] FAULT_INJECTION: forcing a failure. [ 826.714004][ T3215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.732339][ T3215] CPU: 1 UID: 0 PID: 3215 Comm: syz.4.13099 Not tainted syzkaller #0 PREEMPT(full) [ 826.732374][ T3215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 826.732385][ T3215] Call Trace: [ 826.732392][ T3215] [ 826.732400][ T3215] dump_stack_lvl+0xe8/0x150 [ 826.732426][ T3215] should_fail_ex+0x412/0x560 [ 826.732455][ T3215] _copy_from_user+0x2d/0xb0 [ 826.732484][ T3215] ___sys_sendmsg+0x1c6/0x360 [ 826.732512][ T3215] ? __lock_acquire+0x6b5/0x2cf0 [ 826.732536][ T3215] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.732596][ T3215] ? __fget_files+0x2a/0x420 [ 826.732617][ T3215] ? __fget_files+0x3a0/0x420 [ 826.732648][ T3215] __x64_sys_sendmsg+0x1bd/0x2a0 [ 826.732678][ T3215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 826.732719][ T3215] ? __pfx_ksys_write+0x10/0x10 [ 826.732765][ T3215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.732783][ T3215] do_syscall_64+0x15f/0xf80 [ 826.732810][ T3215] ? trace_irq_disable+0x3b/0x140 [ 826.732837][ T3215] ? clear_bhb_loop+0x40/0x90 [ 826.732858][ T3215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.732874][ T3215] RIP: 0033:0x7fb40739ce59 [ 826.732891][ T3215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.732905][ T3215] RSP: 002b:00007fb408239028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.732924][ T3215] RAX: ffffffffffffffda RBX: 00007fb407615fa0 RCX: 00007fb40739ce59 [ 826.732936][ T3215] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 826.732946][ T3215] RBP: 00007fb408239090 R08: 0000000000000000 R09: 0000000000000000 [ 826.732956][ T3215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.732965][ T3215] R13: 00007fb407616038 R14: 00007fb407615fa0 R15: 00007ffd2b5e92c8 [ 826.732994][ T3215] [ 828.062861][ T3245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13104'. [ 828.272568][ T3255] FAULT_INJECTION: forcing a failure. [ 828.272568][ T3255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.327842][ T3255] CPU: 1 UID: 0 PID: 3255 Comm: syz.0.13109 Not tainted syzkaller #0 PREEMPT(full) [ 828.327870][ T3255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 828.327883][ T3255] Call Trace: [ 828.327892][ T3255] [ 828.327900][ T3255] dump_stack_lvl+0xe8/0x150 [ 828.327929][ T3255] should_fail_ex+0x412/0x560 [ 828.327964][ T3255] _copy_from_user+0x2d/0xb0 [ 828.327997][ T3255] ___sys_sendmsg+0x1c6/0x360 [ 828.328028][ T3255] ? __lock_acquire+0x6b5/0x2cf0 [ 828.328056][ T3255] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.328124][ T3255] ? __fget_files+0x2a/0x420 [ 828.328149][ T3255] ? __fget_files+0x3a0/0x420 [ 828.328193][ T3255] __x64_sys_sendmsg+0x1bd/0x2a0 [ 828.328228][ T3255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.328270][ T3255] ? __pfx_ksys_write+0x10/0x10 [ 828.328309][ T3255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.328333][ T3255] do_syscall_64+0x15f/0xf80 [ 828.328364][ T3255] ? trace_irq_disable+0x3b/0x140 [ 828.328395][ T3255] ? clear_bhb_loop+0x40/0x90 [ 828.328421][ T3255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.328441][ T3255] RIP: 0033:0x7f39b299ce59 [ 828.328459][ T3255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.328476][ T3255] RSP: 002b:00007f39b38a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.328499][ T3255] RAX: ffffffffffffffda RBX: 00007f39b2c15fa0 RCX: 00007f39b299ce59 [ 828.328515][ T3255] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 828.328528][ T3255] RBP: 00007f39b38a2090 R08: 0000000000000000 R09: 0000000000000000 [ 828.328540][ T3255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.328553][ T3255] R13: 00007f39b2c16038 R14: 00007f39b2c15fa0 R15: 00007ffe637336f8 [ 828.328587][ T3255] [ 828.572332][ T3252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13108'. [ 828.618966][ T3250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13107'. [ 828.699955][ T3268] FAULT_INJECTION: forcing a failure. [ 828.699955][ T3268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.717594][ T3268] CPU: 0 UID: 0 PID: 3268 Comm: syz.0.13111 Not tainted syzkaller #0 PREEMPT(full) [ 828.717624][ T3268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 828.717637][ T3268] Call Trace: [ 828.717645][ T3268] [ 828.717655][ T3268] dump_stack_lvl+0xe8/0x150 [ 828.717685][ T3268] should_fail_ex+0x412/0x560 [ 828.717719][ T3268] _copy_from_user+0x2d/0xb0 [ 828.717752][ T3268] ___sys_sendmsg+0x1c6/0x360 [ 828.717783][ T3268] ? __lock_acquire+0x6b5/0x2cf0 [ 828.717810][ T3268] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.717886][ T3268] ? __fget_files+0x2a/0x420 [ 828.717921][ T3268] ? __fget_files+0x3a0/0x420 [ 828.717958][ T3268] __x64_sys_sendmsg+0x1bd/0x2a0 [ 828.717993][ T3268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.718035][ T3268] ? __pfx_ksys_write+0x10/0x10 [ 828.718075][ T3268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.718099][ T3268] do_syscall_64+0x15f/0xf80 [ 828.718129][ T3268] ? trace_irq_disable+0x3b/0x140 [ 828.718160][ T3268] ? clear_bhb_loop+0x40/0x90 [ 828.718186][ T3268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.718207][ T3268] RIP: 0033:0x7f39b299ce59 [ 828.718226][ T3268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.718244][ T3268] RSP: 002b:00007f39b38a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.718265][ T3268] RAX: ffffffffffffffda RBX: 00007f39b2c15fa0 RCX: 00007f39b299ce59 [ 828.718280][ T3268] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 828.718292][ T3268] RBP: 00007f39b38a2090 R08: 0000000000000000 R09: 0000000000000000 [ 828.718305][ T3268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.718317][ T3268] R13: 00007f39b2c16038 R14: 00007f39b2c15fa0 R15: 00007ffe637336f8 [ 828.718351][ T3268] [ 829.110062][ T3279] FAULT_INJECTION: forcing a failure. [ 829.110062][ T3279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.135328][ T3281] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.13116'. [ 829.157326][ T3272] tc action pedit offset must be on 32 bit boundaries [ 829.171744][ T3279] CPU: 0 UID: 0 PID: 3279 Comm: syz.3.13115 Not tainted syzkaller #0 PREEMPT(full) [ 829.171775][ T3279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 829.171788][ T3279] Call Trace: [ 829.171797][ T3279] [ 829.171806][ T3279] dump_stack_lvl+0xe8/0x150 [ 829.171838][ T3279] should_fail_ex+0x412/0x560 [ 829.171874][ T3279] _copy_from_user+0x2d/0xb0 [ 829.171916][ T3279] ___sys_sendmsg+0x1c6/0x360 [ 829.171949][ T3279] ? __lock_acquire+0x6b5/0x2cf0 [ 829.171978][ T3279] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.172052][ T3279] ? __fget_files+0x2a/0x420 [ 829.172077][ T3279] ? __fget_files+0x3a0/0x420 [ 829.172115][ T3279] __x64_sys_sendmsg+0x1bd/0x2a0 [ 829.172151][ T3279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 829.172195][ T3279] ? __pfx_ksys_write+0x10/0x10 [ 829.172237][ T3279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.172261][ T3279] do_syscall_64+0x15f/0xf80 [ 829.172294][ T3279] ? trace_irq_disable+0x3b/0x140 [ 829.172327][ T3279] ? clear_bhb_loop+0x40/0x90 [ 829.172353][ T3279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.172375][ T3279] RIP: 0033:0x7f2fcd99ce59 [ 829.172396][ T3279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.172414][ T3279] RSP: 002b:00007f2fce781028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.172437][ T3279] RAX: ffffffffffffffda RBX: 00007f2fcdc15fa0 RCX: 00007f2fcd99ce59 [ 829.172453][ T3279] RDX: 0000000020000810 RSI: 0000200000000200 RDI: 0000000000000003 [ 829.172467][ T3279] RBP: 00007f2fce781090 R08: 0000000000000000 R09: 0000000000000000 [ 829.172481][ T3279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.172494][ T3279] R13: 00007f2fcdc16038 R14: 00007f2fcdc15fa0 R15: 00007ffd10bc8f88 [ 829.172529][ T3279] [ 829.512158][ T3286] bridge0: port 1(ipvlan0) entered blocking state [ 829.521771][ T3286] bridge0: port 1(ipvlan0) entered disabled state [ 829.528832][ T3286] ipvlan0: entered allmulticast mode [ 829.534331][ T3286] bridge0: entered allmulticast mode [ 829.546160][ T3286] ipvlan0: left allmulticast mode [ 829.552758][ T3286] bridge0: left allmulticast mode [ 829.574968][ T3297] FAULT_INJECTION: forcing a failure. [ 829.574968][ T3297] name failslab, interval 1, probability 0, space 0, times 1 [ 829.588774][ T3297] CPU: 0 UID: 0 PID: 3297 Comm: syz.4.13121 Not tainted syzkaller #0 PREEMPT(full) [ 829.588800][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 829.588812][ T3297] Call Trace: [ 829.588820][ T3297] [ 829.588846][ T3297] dump_stack_lvl+0xe8/0x150 [ 829.588875][ T3297] should_fail_ex+0x412/0x560 [ 829.588914][ T3297] should_failslab+0xa8/0x100 [ 829.588949][ T3297] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 829.588981][ T3297] ? __get_vm_area_node+0x13f/0x300 [ 829.589013][ T3297] __get_vm_area_node+0x13f/0x300 [ 829.589046][ T3297] __vmalloc_node_range_noprof+0x36a/0x1750 [ 829.589076][ T3297] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 829.589101][ T3297] ? __lock_acquire+0x6b5/0x2cf0 [ 829.589161][ T3297] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 829.589192][ T3297] ? __lock_acquire+0x6b5/0x2cf0 [ 829.589219][ T3297] ? _parse_integer_limit+0x1ae/0x1f0 [ 829.589251][ T3297] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 829.589270][ T3297] __vmalloc_noprof+0xd2/0x120 [ 829.589299][ T3297] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 829.589323][ T3297] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 829.589349][ T3297] bpf_prog_alloc+0x3c/0x1a0 [ 829.589372][ T3297] bpf_prog_load+0x779/0x1a10 [ 829.589405][ T3297] ? __pfx_bpf_prog_load+0x10/0x10 [ 829.589426][ T3297] ? __might_fault+0xaf/0x130 [ 829.589470][ T3297] ? bpf_lsm_bpf+0x9/0x20 [ 829.589489][ T3297] ? security_bpf+0x7e/0x2d0 [ 829.589516][ T3297] __sys_bpf+0x618/0x950 [ 829.589550][ T3297] ? __pfx___sys_bpf+0x10/0x10 [ 829.589599][ T3297] ? ksys_write+0x242/0x270 [ 829.589651][ T3297] ? __pfx_ksys_write+0x10/0x10 [ 829.589687][ T3297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.589710][ T3297] __x64_sys_bpf+0x7c/0x90 [ 829.589740][ T3297] do_syscall_64+0x15f/0xf80 [ 829.589771][ T3297] ? trace_irq_disable+0x3b/0x140 [ 829.589802][ T3297] ? clear_bhb_loop+0x40/0x90 [ 829.589828][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.589849][ T3297] RIP: 0033:0x7fb40739ce59 [ 829.589869][ T3297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.589886][ T3297] RSP: 002b:00007fb408239028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 829.589907][ T3297] RAX: ffffffffffffffda RBX: 00007fb407615fa0 RCX: 00007fb40739ce59 [ 829.589922][ T3297] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 829.589935][ T3297] RBP: 00007fb408239090 R08: 0000000000000000 R09: 0000000000000000 [ 829.589948][ T3297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.589960][ T3297] R13: 00007fb407616038 R14: 00007fb407615fa0 R15: 00007ffd2b5e92c8 [ 829.589994][ T3297] [ 829.594720][ T3297] syz.4.13121: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 829.864552][ T3298] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 829.887522][ T3297] ,cpuset=/,mems_allowed=0-1 [ 829.892340][ T3297] CPU: 0 UID: 0 PID: 3297 Comm: syz.4.13121 Not tainted syzkaller #0 PREEMPT(full) [ 829.892368][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 829.892382][ T3297] Call Trace: [ 829.892391][ T3297] [ 829.892400][ T3297] dump_stack_lvl+0xe8/0x150 [ 829.892431][ T3297] warn_alloc+0x249/0x340 [ 829.892469][ T3297] ? __pfx_warn_alloc+0x10/0x10 [ 829.892501][ T3297] ? __get_vm_area_node+0x13f/0x300 [ 829.892534][ T3297] ? __get_vm_area_node+0x2b5/0x300 [ 829.892569][ T3297] __vmalloc_node_range_noprof+0x38f/0x1750 [ 829.892603][ T3297] ? __lock_acquire+0x6b5/0x2cf0 [ 829.892654][ T3297] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 829.892683][ T3297] ? __lock_acquire+0x6b5/0x2cf0 [ 829.892710][ T3297] ? _parse_integer_limit+0x1ae/0x1f0 [ 829.892743][ T3297] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 829.892763][ T3297] __vmalloc_noprof+0xd2/0x120 [ 829.892805][ T3297] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 829.892829][ T3297] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 829.892855][ T3297] bpf_prog_alloc+0x3c/0x1a0 [ 829.892879][ T3297] bpf_prog_load+0x779/0x1a10 [ 829.892912][ T3297] ? __pfx_bpf_prog_load+0x10/0x10 [ 829.892933][ T3297] ? __might_fault+0xaf/0x130 [ 829.892976][ T3297] ? bpf_lsm_bpf+0x9/0x20 [ 829.892994][ T3297] ? security_bpf+0x7e/0x2d0 [ 829.893021][ T3297] __sys_bpf+0x618/0x950 [ 829.893072][ T3297] ? __pfx___sys_bpf+0x10/0x10 [ 829.893120][ T3297] ? ksys_write+0x242/0x270 [ 829.893153][ T3297] ? __pfx_ksys_write+0x10/0x10 [ 829.893187][ T3297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.893210][ T3297] __x64_sys_bpf+0x7c/0x90 [ 829.893240][ T3297] do_syscall_64+0x15f/0xf80 [ 829.893270][ T3297] ? trace_irq_disable+0x3b/0x140 [ 829.893301][ T3297] ? clear_bhb_loop+0x40/0x90 [ 829.893327][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.893347][ T3297] RIP: 0033:0x7fb40739ce59 [ 829.893367][ T3297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.893385][ T3297] RSP: 002b:00007fb408239028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 829.893407][ T3297] RAX: ffffffffffffffda RBX: 00007fb407615fa0 RCX: 00007fb40739ce59 [ 829.893422][ T3297] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 829.893435][ T3297] RBP: 00007fb408239090 R08: 0000000000000000 R09: 0000000000000000 [ 829.893448][ T3297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.893460][ T3297] R13: 00007fb407616038 R14: 00007fb407615fa0 R15: 00007ffd2b5e92c8 [ 829.893495][ T3297] [ 829.893503][ T3297] Mem-Info: [ 829.923102][ T3298] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 829.939172][ T3297] active_anon:5763 inactive_anon:5 isolated_anon:0 [ 829.939172][ T3297] active_file:3037 inactive_file:40587 isolated_file:0 [ 829.939172][ T3297] unevictable:768 dirty:279 writeback:0 [ 829.939172][ T3297] slab_reclaimable:11780 slab_unreclaimable:110315 [ 829.939172][ T3297] mapped:32389 shmem:1297 pagetables:3405 [ 829.939172][ T3297] sec_pagetables:0 bounce:0 [ 829.939172][ T3297] kernel_misc_reclaimable:0 [ 829.939172][ T3297] free:1309849 free_pcp:9564 free_cma:0 [ 829.939234][ T3297] Node 0 active_anon:23052kB inactive_anon:20kB active_file:12148kB inactive_file:162148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129556kB dirty:1116kB writeback:0kB shmem:3652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13920kB pagetables:13492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 829.939293][ T3297] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 829.939349][ T3297] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 829.939417][ T3297] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 829.939467][ T3297] Node 0 DMA32 free:1294092kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23052kB inactive_anon:20kB active_file:12148kB inactive_file:162148kB unevictable:1536kB writepending:1116kB zspages:0kB present:3129332kB managed:2552548kB mlocked:0kB bounce:0kB free_pcp:38252kB local_pcp:21364kB free_cma:0kB [ 829.939533][ T3297] lowmem_reserve[]: 0 0 0 0 0 [ 829.939580][ T3297] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 829.939640][ T3297] lowmem_reserve[]: 0 0 0 0 0 [ 829.939688][ T3297] Node 1 Normal free:3929944kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 829.939761][ T3297] lowmem_reserve[]: 0 0 0 0 0 [ 830.430778][ T3297] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 830.431648][ T3304] FAULT_INJECTION: forcing a failure. [ 830.431648][ T3304] name failslab, interval 1, probability 0, space 0, times 0 [ 830.456732][ T3297] Node 0 DMA32: 6359*4kB (UM) 5614*8kB (UM) 3442*16kB (UM) 559*32kB (UM) 1275*64kB (UME) 1234*128kB (UM) 836*256kB (UME) 438*512kB (UME) 198*1024kB (UM) 110*2048kB (UM) 11*4096kB (UM) = 1294220kB [ 830.476770][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz.0.13122 Not tainted syzkaller #0 PREEMPT(full) [ 830.476797][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 830.476826][ T3304] Call Trace: [ 830.476835][ T3304] [ 830.476848][ T3304] dump_stack_lvl+0xe8/0x150 [ 830.476877][ T3304] should_fail_ex+0x412/0x560 [ 830.476910][ T3304] should_failslab+0xa8/0x100 [ 830.476945][ T3304] __kmalloc_noprof+0xe8/0x760 [ 830.476976][ T3304] ? bpf_ctx_init+0xbd/0x1c0 [ 830.477002][ T3304] ? __lock_acquire+0x6b5/0x2cf0 [ 830.477036][ T3304] bpf_ctx_init+0xbd/0x1c0 [ 830.477068][ T3304] bpf_prog_test_run_skb+0x2e6/0x2260 [ 830.477107][ T3304] ? __fget_files+0x2a/0x420 [ 830.477132][ T3304] ? __fget_files+0x3a0/0x420 [ 830.477152][ T3304] ? __fget_files+0x2a/0x420 [ 830.477177][ T3304] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 830.477203][ T3304] bpf_prog_test_run+0x2c7/0x340 [ 830.477224][ T3304] __sys_bpf+0x643/0x950 [ 830.477252][ T3304] ? __pfx___sys_bpf+0x10/0x10 [ 830.477292][ T3304] ? ksys_write+0x242/0x270 [ 830.477320][ T3304] ? __pfx_ksys_write+0x10/0x10 [ 830.477349][ T3304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.477369][ T3304] __x64_sys_bpf+0x7c/0x90 [ 830.477394][ T3304] do_syscall_64+0x15f/0xf80 [ 830.477421][ T3304] ? trace_irq_disable+0x3b/0x140 [ 830.477448][ T3304] ? clear_bhb_loop+0x40/0x90 [ 830.477469][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.477486][ T3304] RIP: 0033:0x7f39b299ce59 [ 830.477503][ T3304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.477518][ T3304] RSP: 002b:00007f39b38a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 830.477536][ T3304] RAX: ffffffffffffffda RBX: 00007f39b2c15fa0 RCX: 00007f39b299ce59 [ 830.477549][ T3304] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 830.477560][ T3304] RBP: 00007f39b38a2090 R08: 0000000000000000 R09: 0000000000000000 [ 830.477570][ T3304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.477581][ T3304] R13: 00007f39b2c16038 R14: 00007f39b2c15fa0 R15: 00007ffe637336f8 [ 830.477609][ T3304] [ 830.730209][ T3297] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 830.749156][ T3297] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 7*16kB (UM) 10*32kB (UM) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 958*4096kB (UM) = 3929944kB [ 830.768652][ T3297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 830.779207][ T3297] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 830.789030][ T3297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 830.799478][ T3297] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 830.812590][ T3297] 44917 total pagecache pages [ 830.828936][ T3297] 0 pages in swap cache [ 830.833169][ T3297] Free swap = 124996kB [ 830.837559][ T3297] Total swap = 124996kB [ 830.841905][ T3297] 2097051 pages RAM [ 830.845748][ T3297] 0 pages HighMem/MovableOnly [ 830.850513][ T3297] 427132 pages reserved [ 830.854850][ T3297] 0 pages cma reserved [ 830.956824][ T3314] openvswitch: netlink: VXLAN extension message has 175 unknown bytes. [ 831.007849][ T3317] FAULT_INJECTION: forcing a failure. [ 831.007849][ T3317] name failslab, interval 1, probability 0, space 0, times 0 [ 831.026747][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz.4.13127 Not tainted syzkaller #0 PREEMPT(full) [ 831.026777][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 831.026790][ T3317] Call Trace: [ 831.026798][ T3317] [ 831.026807][ T3317] dump_stack_lvl+0xe8/0x150 [ 831.026837][ T3317] should_fail_ex+0x412/0x560 [ 831.026872][ T3317] should_failslab+0xa8/0x100 [ 831.026906][ T3317] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 831.026937][ T3317] ? __alloc_skb+0x186/0x7d0 [ 831.026964][ T3317] ? __alloc_skb+0x1d0/0x7d0 [ 831.026989][ T3317] ? __local_bh_enable_ip+0xd0/0x130 [ 831.027016][ T3317] __alloc_skb+0x1d0/0x7d0 [ 831.027050][ T3317] netlink_sendmsg+0x5d4/0xb40 [ 831.027091][ T3317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.027127][ T3317] ? aa_sock_msg_perm+0xf1/0x1b0 [ 831.027158][ T3317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.027191][ T3317] ____sys_sendmsg+0x972/0x9f0 [ 831.027223][ T3317] ? __might_fault+0xaf/0x130 [ 831.027257][ T3317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.027298][ T3317] ? import_iovec+0x73/0xa0 [ 831.027335][ T3317] ___sys_sendmsg+0x2a5/0x360 [ 831.027365][ T3317] ? __lock_acquire+0x6b5/0x2cf0 [ 831.027393][ T3317] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.027465][ T3317] ? __fget_files+0x2a/0x420 [ 831.027490][ T3317] ? __fget_files+0x3a0/0x420 [ 831.027527][ T3317] __x64_sys_sendmsg+0x1bd/0x2a0 [ 831.027563][ T3317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.027606][ T3317] ? __pfx_ksys_write+0x10/0x10 [ 831.027647][ T3317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.027671][ T3317] do_syscall_64+0x15f/0xf80 [ 831.027703][ T3317] ? trace_irq_disable+0x3b/0x140 [ 831.027736][ T3317] ? clear_bhb_loop+0x40/0x90 [ 831.027778][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.027799][ T3317] RIP: 0033:0x7fb40739ce59 [ 831.027819][ T3317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.027837][ T3317] RSP: 002b:00007fb408239028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.027859][ T3317] RAX: ffffffffffffffda RBX: 00007fb407615fa0 RCX: 00007fb40739ce59 [ 831.027875][ T3317] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 831.027888][ T3317] RBP: 00007fb408239090 R08: 0000000000000000 R09: 0000000000000000 [ 831.027902][ T3317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.027914][ T3317] R13: 00007fb407616038 R14: 00007fb407615fa0 R15: 00007ffd2b5e92c8 [ 831.027949][ T3317] [ 831.465163][ T3325] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13131'. [ 831.500209][ T3321] syzkaller0: entered promiscuous mode [ 831.509007][ T3321] syzkaller0: entered allmulticast mode [ 831.795054][ T3346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13139'. [ 831.838418][ T3353] FAULT_INJECTION: forcing a failure. [ 831.838418][ T3353] name failslab, interval 1, probability 0, space 0, times 0 [ 831.851996][ T3353] CPU: 1 UID: 0 PID: 3353 Comm: syz.2.13141 Not tainted syzkaller #0 PREEMPT(full) [ 831.852025][ T3353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 831.852039][ T3353] Call Trace: [ 831.852048][ T3353] [ 831.852057][ T3353] dump_stack_lvl+0xe8/0x150 [ 831.852088][ T3353] should_fail_ex+0x412/0x560 [ 831.852124][ T3353] should_failslab+0xa8/0x100 [ 831.852159][ T3353] __kmalloc_noprof+0xe8/0x760 [ 831.852188][ T3353] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 831.852218][ T3353] ? sock_kmalloc+0xd6/0x160 [ 831.852244][ T3353] sock_kmalloc+0xd6/0x160 [ 831.852268][ T3353] af_alg_alloc_areq+0x99/0x200 [ 831.852299][ T3353] aead_recvmsg+0x496/0x1160 [ 831.852346][ T3353] ? __pfx_aa_sk_perm+0x10/0x10 [ 831.852376][ T3353] ? __pfx_aead_recvmsg+0x10/0x10 [ 831.852405][ T3353] ? __lock_acquire+0x6b5/0x2cf0 [ 831.852427][ T3353] ? aa_sock_msg_perm+0xf1/0x1b0 [ 831.852456][ T3353] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 831.852484][ T3353] ? security_socket_recvmsg+0x7e/0x2c0 [ 831.852505][ T3353] ? __pfx_aead_recvmsg+0x10/0x10 [ 831.852537][ T3353] sock_recvmsg+0x172/0x1b0 [ 831.852565][ T3353] ____sys_recvmsg+0x1e6/0x4a0 [ 831.852608][ T3353] ? __pfx_____sys_recvmsg+0x10/0x10 [ 831.852672][ T3353] ? import_iovec+0x73/0xa0 [ 831.852709][ T3353] ___sys_recvmsg+0x215/0x590 [ 831.852748][ T3353] ? __pfx____sys_recvmsg+0x10/0x10 [ 831.852786][ T3353] ? __fget_files+0x2a/0x420 [ 831.852833][ T3353] ? __fget_files+0x3a0/0x420 [ 831.852881][ T3353] do_recvmmsg+0x334/0x800 [ 831.852911][ T3353] ? __pfx_do_recvmmsg+0x10/0x10 [ 831.852959][ T3353] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 831.853032][ T3353] __x64_sys_recvmmsg+0x198/0x250 [ 831.853056][ T3353] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 831.853086][ T3353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.853109][ T3353] do_syscall_64+0x15f/0xf80 [ 831.853140][ T3353] ? trace_irq_disable+0x3b/0x140 [ 831.853171][ T3353] ? clear_bhb_loop+0x40/0x90 [ 831.853199][ T3353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.853219][ T3353] RIP: 0033:0x7f45a959ce59 [ 831.853239][ T3353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.853256][ T3353] RSP: 002b:00007f45a77f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 831.853278][ T3353] RAX: ffffffffffffffda RBX: 00007f45a9815fa0 RCX: 00007f45a959ce59 [ 831.853293][ T3353] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 831.853306][ T3353] RBP: 00007f45a77f6090 R08: 0000000000000000 R09: 0000000000000000 [ 831.853319][ T3353] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 831.853331][ T3353] R13: 00007f45a9816038 R14: 00007f45a9815fa0 R15: 00007ffdcb6bee48 [ 831.853363][ T3353] [ 831.853687][ T3353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13141'. [ 832.265119][ T3359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13145'. [ 832.300909][ T3359] syzkaller0: entered promiscuous mode [ 832.312203][ T3359] syzkaller0: entered allmulticast mode [ 832.373420][ T3369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13149'. [ 832.409699][ T3369] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13149'. [ 832.559495][ T3369] bond7 (unregistering): Released all slaves [ 833.268061][ T3411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13158'. [ 833.301298][ T3411] syzkaller0: entered promiscuous mode [ 833.317395][ T3411] syzkaller0: entered allmulticast mode [ 833.440730][ T3427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13164'. [ 833.456381][ T3424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13163'. [ 833.570452][ T3424] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 833.968090][ T3453] FAULT_INJECTION: forcing a failure. [ 833.968090][ T3453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.001077][ T3453] CPU: 1 UID: 0 PID: 3453 Comm: syz.0.13174 Not tainted syzkaller #0 PREEMPT(full) [ 834.001106][ T3453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 834.001119][ T3453] Call Trace: [ 834.001128][ T3453] [ 834.001137][ T3453] dump_stack_lvl+0xe8/0x150 [ 834.001167][ T3453] should_fail_ex+0x412/0x560 [ 834.001202][ T3453] _copy_from_iter+0x1d3/0x1670 [ 834.001236][ T3453] ? rcu_is_watching+0x15/0xb0 [ 834.001271][ T3453] ? __pfx__copy_from_iter+0x10/0x10 [ 834.001310][ T3453] ? netlink_sendmsg+0x650/0xb40 [ 834.001341][ T3453] ? skb_put+0x11b/0x210 [ 834.001374][ T3453] netlink_sendmsg+0x6c0/0xb40 [ 834.001416][ T3453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.001453][ T3453] ? aa_sock_msg_perm+0xf1/0x1b0 [ 834.001494][ T3453] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 834.001527][ T3453] ____sys_sendmsg+0x972/0x9f0 [ 834.001564][ T3453] ? __might_fault+0xaf/0x130 [ 834.001599][ T3453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.001642][ T3453] ? import_iovec+0x73/0xa0 [ 834.001678][ T3453] ___sys_sendmsg+0x2a5/0x360 [ 834.001708][ T3453] ? __lock_acquire+0x6b5/0x2cf0 [ 834.001737][ T3453] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.001809][ T3453] ? __fget_files+0x2a/0x420 [ 834.001834][ T3453] ? __fget_files+0x3a0/0x420 [ 834.001871][ T3453] __x64_sys_sendmsg+0x1bd/0x2a0 [ 834.001906][ T3453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 834.001949][ T3453] ? __pfx_ksys_write+0x10/0x10 [ 834.001990][ T3453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.002013][ T3453] do_syscall_64+0x15f/0xf80 [ 834.002045][ T3453] ? trace_irq_disable+0x3b/0x140 [ 834.002077][ T3453] ? clear_bhb_loop+0x40/0x90 [ 834.002104][ T3453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.002125][ T3453] RIP: 0033:0x7f39b299ce59 [ 834.002145][ T3453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.002163][ T3453] RSP: 002b:00007f39b38a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.002186][ T3453] RAX: ffffffffffffffda RBX: 00007f39b2c15fa0 RCX: 00007f39b299ce59 [ 834.002202][ T3453] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 834.002215][ T3453] RBP: 00007f39b38a2090 R08: 0000000000000000 R09: 0000000000000000 [ 834.002228][ T3453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.002241][ T3453] R13: 00007f39b2c16038 R14: 00007f39b2c15fa0 R15: 00007ffe637336f8 [ 834.002277][ T3453] [ 834.003954][ T3454] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 834.277390][ T3454] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 834.583910][ T3473] FAULT_INJECTION: forcing a failure. [ 834.583910][ T3473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.609529][ T3473] CPU: 1 UID: 0 PID: 3473 Comm: syz.0.13180 Not tainted syzkaller #0 PREEMPT(full) [ 834.609558][ T3473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 834.609571][ T3473] Call Trace: [ 834.609579][ T3473] [ 834.609588][ T3473] dump_stack_lvl+0xe8/0x150 [ 834.609617][ T3473] should_fail_ex+0x412/0x560 [ 834.609650][ T3473] _copy_to_user+0x31/0xb0 [ 834.609685][ T3473] simple_read_from_buffer+0xe1/0x170 [ 834.609743][ T3473] proc_fail_nth_read+0x1bb/0x230 [ 834.609790][ T3473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.609821][ T3473] ? rw_verify_area+0x2a6/0x4d0 [ 834.609850][ T3473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.609879][ T3473] vfs_read+0x20c/0xa70 [ 834.609914][ T3473] ? __pfx___mutex_lock+0x10/0x10 [ 834.609940][ T3473] ? __pfx_vfs_read+0x10/0x10 [ 834.609971][ T3473] ? __fget_files+0x2a/0x420 [ 834.610003][ T3473] ? __fget_files+0x3a0/0x420 [ 834.610026][ T3473] ? __fget_files+0x2a/0x420 [ 834.610062][ T3473] ksys_read+0x150/0x270 [ 834.610094][ T3473] ? __pfx_ksys_read+0x10/0x10 [ 834.610133][ T3473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.610156][ T3473] do_syscall_64+0x15f/0xf80 [ 834.610187][ T3473] ? trace_irq_disable+0x3b/0x140 [ 834.610218][ T3473] ? clear_bhb_loop+0x40/0x90 [ 834.610244][ T3473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.610265][ T3473] RIP: 0033:0x7f39b295d68e [ 834.610284][ T3473] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 834.610302][ T3473] RSP: 002b:00007f39b38a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 834.610323][ T3473] RAX: ffffffffffffffda RBX: 00007f39b38a26c0 RCX: 00007f39b295d68e [ 834.610339][ T3473] RDX: 000000000000000f RSI: 00007f39b38a20a0 RDI: 0000000000000004 [ 834.610370][ T3473] RBP: 00007f39b38a2090 R08: 0000000000000000 R09: 0000000000000000 [ 834.610383][ T3473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.610396][ T3473] R13: 00007f39b2c16038 R14: 00007f39b2c15fa0 R15: 00007ffe637336f8 [ 834.610432][ T3473] [ 835.158560][ T3490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13187'. [ 835.178843][ T3492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13188'. [ 835.242597][ T3494] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13189'. [ 835.441891][ T3499] smc: net device team0 applied user defined pnetid SYZ2 [ 835.460919][ T3503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13191'. [ 835.482159][ T3503] sctp: [Deprecated]: syz.1.13191 (pid 3503) Use of int in maxseg socket option. [ 835.482159][ T3503] Use struct sctp_assoc_value instead [ 835.604053][ T3508] FAULT_INJECTION: forcing a failure. [ 835.604053][ T3508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.620988][ T3508] CPU: 1 UID: 0 PID: 3508 Comm: syz.2.13193 Not tainted syzkaller #0 PREEMPT(full) [ 835.621017][ T3508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 835.621031][ T3508] Call Trace: [ 835.621039][ T3508] [ 835.621047][ T3508] dump_stack_lvl+0xe8/0x150 [ 835.621077][ T3508] should_fail_ex+0x412/0x560 [ 835.621111][ T3508] _copy_to_user+0x31/0xb0 [ 835.621147][ T3508] simple_read_from_buffer+0xe1/0x170 [ 835.621184][ T3508] proc_fail_nth_read+0x1bb/0x230 [ 835.621216][ T3508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.621247][ T3508] ? rw_verify_area+0x2a6/0x4d0 [ 835.621276][ T3508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.621305][ T3508] vfs_read+0x20c/0xa70 [ 835.621341][ T3508] ? __pfx___mutex_lock+0x10/0x10 [ 835.621370][ T3508] ? __pfx_vfs_read+0x10/0x10 [ 835.621402][ T3508] ? __fget_files+0x2a/0x420 [ 835.621432][ T3508] ? __fget_files+0x3a0/0x420 [ 835.621456][ T3508] ? __fget_files+0x2a/0x420 [ 835.621491][ T3508] ksys_read+0x150/0x270 [ 835.621523][ T3508] ? __pfx_ksys_read+0x10/0x10 [ 835.621562][ T3508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.621585][ T3508] do_syscall_64+0x15f/0xf80 [ 835.621636][ T3508] ? trace_irq_disable+0x3b/0x140 [ 835.621669][ T3508] ? clear_bhb_loop+0x40/0x90 [ 835.621697][ T3508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.621718][ T3508] RIP: 0033:0x7f45a955d68e [ 835.621739][ T3508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 835.621756][ T3508] RSP: 002b:00007f45a77f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 835.621778][ T3508] RAX: ffffffffffffffda RBX: 00007f45a77f66c0 RCX: 00007f45a955d68e [ 835.621794][ T3508] RDX: 000000000000000f RSI: 00007f45a77f60a0 RDI: 0000000000000004 [ 835.621807][ T3508] RBP: 00007f45a77f6090 R08: 0000000000000000 R09: 0000000000000000 [ 835.621819][ T3508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.621831][ T3508] R13: 00007f45a9816038 R14: 00007f45a9815fa0 R15: 00007ffdcb6bee48 [ 835.621868][ T3508] [ 836.415645][ T3543] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 836.720705][ T3556] bridge0: port 1(gretap0) entered disabled state [ 836.766104][ T3556] tipc: Resetting bearer [ 836.772386][ T3558] netlink: 'syz.3.13210': attribute type 16 has an invalid length. [ 836.782255][ T3556] tipc: Resetting bearer [ 836.788817][ T3558] netlink: 'syz.3.13210': attribute type 17 has an invalid length. [ 836.933116][ T3558] bridge0: port 1(gretap0) entered blocking state [ 836.939913][ T3558] bridge0: port 1(gretap0) entered forwarding state [ 837.010057][ T3566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13213'. [ 837.070349][ T3558] tipc: Resetting bearer [ 837.102529][ T3558] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 837.383730][ T3573] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 837.399318][ T3573] bond7 (unregistering): Released all slaves [ 837.888384][ T3603] netlink: 'syz.2.13222': attribute type 1 has an invalid length. [ 837.990728][ T3609] netlink: 'syz.3.13226': attribute type 1 has an invalid length. [ 838.141175][ T3610] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 838.701371][ T3646] openvswitch: netlink: Message has 1 unknown bytes. [ 838.719576][ T3646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.823035][ T3651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.004114][ T3657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13240'. [ 839.148098][ T3655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13238'. [ 839.245797][ T3659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.375281][ T3671] syzkaller0: entered promiscuous mode [ 839.387876][ T3671] syzkaller0: entered allmulticast mode [ 839.947404][ T3700] netlink: 'syz.4.13251': attribute type 1 has an invalid length. [ 840.134578][ T3706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13252'. [ 841.658213][ T3691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13251'. [ 841.718093][ T3694] xfrm1: entered allmulticast mode [ 841.828852][ T3709] syzkaller0: entered promiscuous mode [ 841.847746][ T3709] syzkaller0: entered allmulticast mode [ 842.170762][ T3731] FAULT_INJECTION: forcing a failure. [ 842.170762][ T3731] name failslab, interval 1, probability 0, space 0, times 0 [ 842.200039][ T3731] CPU: 0 UID: 0 PID: 3731 Comm: syz.3.13264 Not tainted syzkaller #0 PREEMPT(full) [ 842.200077][ T3731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 842.200090][ T3731] Call Trace: [ 842.200099][ T3731] [ 842.200108][ T3731] dump_stack_lvl+0xe8/0x150 [ 842.200138][ T3731] should_fail_ex+0x412/0x560 [ 842.200172][ T3731] should_failslab+0xa8/0x100 [ 842.200206][ T3731] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 842.200236][ T3731] ? __alloc_skb+0x186/0x7d0 [ 842.200262][ T3731] ? __alloc_skb+0x1d0/0x7d0 [ 842.200287][ T3731] ? __local_bh_enable_ip+0xd0/0x130 [ 842.200314][ T3731] __alloc_skb+0x1d0/0x7d0 [ 842.200342][ T3731] ? netlink_ack_tlv_len+0x6c/0x210 [ 842.200376][ T3731] netlink_ack+0x146/0xa50 [ 842.200423][ T3731] netlink_rcv_skb+0x2b6/0x4b0 [ 842.200453][ T3731] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 842.200484][ T3731] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 842.200527][ T3731] ? bpf_lsm_capable+0x9/0x20 [ 842.200547][ T3731] ? security_capable+0x7e/0x2c0 [ 842.200581][ T3731] nfnetlink_rcv+0x2c0/0x27b0 [ 842.200619][ T3731] ? __local_bh_enable_ip+0xd0/0x130 [ 842.200641][ T3731] ? lockdep_hardirqs_on+0x7a/0x110 [ 842.200672][ T3731] ? __dev_queue_xmit+0x2b6/0x3950 [ 842.200691][ T3731] ? __local_bh_enable_ip+0xd0/0x130 [ 842.200710][ T3731] ? __dev_queue_xmit+0x2b6/0x3950 [ 842.200729][ T3731] ? __dev_queue_xmit+0x1fe5/0x3950 [ 842.200748][ T3731] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 842.200786][ T3731] ? __dev_queue_xmit+0x2b6/0x3950 [ 842.200813][ T3731] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 842.200847][ T3731] ? __pfx___dev_queue_xmit+0x10/0x10 [ 842.200876][ T3731] ? ref_tracker_free+0x693/0x840 [ 842.200909][ T3731] ? __pfx_ref_tracker_free+0x10/0x10 [ 842.200957][ T3731] ? skb_clone+0x246/0x3a0 [ 842.200980][ T3731] ? __netlink_deliver_tap+0x807/0x850 [ 842.201010][ T3731] ? netlink_deliver_tap+0x2e/0x1b0 [ 842.201046][ T3731] ? netlink_deliver_tap+0x2e/0x1b0 [ 842.201082][ T3731] ? netlink_deliver_tap+0x2e/0x1b0 [ 842.201118][ T3731] netlink_unicast+0x75c/0x8e0 [ 842.201157][ T3731] netlink_sendmsg+0x813/0xb40 [ 842.201198][ T3731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.201232][ T3731] ? aa_sock_msg_perm+0xf1/0x1b0 [ 842.201263][ T3731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 842.201294][ T3731] ____sys_sendmsg+0x972/0x9f0 [ 842.201325][ T3731] ? __might_fault+0xaf/0x130 [ 842.201358][ T3731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.201400][ T3731] ? import_iovec+0x73/0xa0 [ 842.201435][ T3731] ___sys_sendmsg+0x2a5/0x360 [ 842.201465][ T3731] ? __lock_acquire+0x6b5/0x2cf0 [ 842.201493][ T3731] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.201568][ T3731] ? __fget_files+0x2a/0x420 [ 842.201591][ T3731] ? __fget_files+0x3a0/0x420 [ 842.201647][ T3731] __x64_sys_sendmsg+0x1bd/0x2a0 [ 842.201682][ T3731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 842.201725][ T3731] ? __pfx_ksys_write+0x10/0x10 [ 842.201765][ T3731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.201789][ T3731] do_syscall_64+0x15f/0xf80 [ 842.201819][ T3731] ? trace_irq_disable+0x3b/0x140 [ 842.201852][ T3731] ? clear_bhb_loop+0x40/0x90 [ 842.201878][ T3731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.201900][ T3731] RIP: 0033:0x7f2fcd99ce59 [ 842.201920][ T3731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.201938][ T3731] RSP: 002b:00007f2fce781028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.201960][ T3731] RAX: ffffffffffffffda RBX: 00007f2fcdc15fa0 RCX: 00007f2fcd99ce59 [ 842.201976][ T3731] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 842.201989][ T3731] RBP: 00007f2fce781090 R08: 0000000000000000 R09: 0000000000000000 [ 842.202003][ T3731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.202015][ T3731] R13: 00007f2fcdc16038 R14: 00007f2fcdc15fa0 R15: 00007ffd10bc8f88 [ 842.202056][ T3731] [ 842.623549][ T3735] FAULT_INJECTION: forcing a failure. [ 842.623549][ T3735] name failslab, interval 1, probability 0, space 0, times 0 [ 842.640063][ T3735] CPU: 1 UID: 0 PID: 3735 Comm: syz.1.13267 Not tainted syzkaller #0 PREEMPT(full) [ 842.640092][ T3735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 842.640105][ T3735] Call Trace: [ 842.640114][ T3735] [ 842.640123][ T3735] dump_stack_lvl+0xe8/0x150 [ 842.640153][ T3735] should_fail_ex+0x412/0x560 [ 842.640184][ T3735] ? __d_alloc+0x37/0x6f0 [ 842.640214][ T3735] should_failslab+0xa8/0x100 [ 842.640249][ T3735] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 842.640276][ T3735] ? __lock_acquire+0x6b5/0x2cf0 [ 842.640309][ T3735] __d_alloc+0x37/0x6f0 [ 842.640344][ T3735] d_alloc_pseudo+0x21/0xc0 [ 842.640368][ T3735] alloc_file_pseudo+0xdd/0x240 [ 842.640392][ T3735] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 842.640413][ T3735] ? alloc_fd+0x64b/0x6c0 [ 842.640442][ T3735] anon_inode_getfd+0xc8/0x1f0 [ 842.640474][ T3735] map_create+0x1247/0x16a0 [ 842.640504][ T3735] ? security_bpf+0x7e/0x2d0 [ 842.640527][ T3735] __sys_bpf+0x6e1/0x950 [ 842.640555][ T3735] ? __pfx___sys_bpf+0x10/0x10 [ 842.640596][ T3735] ? ksys_write+0x242/0x270 [ 842.640623][ T3735] ? __pfx_ksys_write+0x10/0x10 [ 842.640652][ T3735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.640671][ T3735] __x64_sys_bpf+0x7c/0x90 [ 842.640697][ T3735] do_syscall_64+0x15f/0xf80 [ 842.640724][ T3735] ? trace_irq_disable+0x3b/0x140 [ 842.640751][ T3735] ? clear_bhb_loop+0x40/0x90 [ 842.640773][ T3735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.640796][ T3735] RIP: 0033:0x7f80e879ce59 [ 842.640813][ T3735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.640827][ T3735] RSP: 002b:00007f80e9685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 842.640845][ T3735] RAX: ffffffffffffffda RBX: 00007f80e8a15fa0 RCX: 00007f80e879ce59 [ 842.640858][ T3735] RDX: 0000000000000048 RSI: 0000200000000980 RDI: 0000000000000000 [ 842.640869][ T3735] RBP: 00007f80e9685090 R08: 0000000000000000 R09: 0000000000000000 [ 842.640880][ T3735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.640890][ T3735] R13: 00007f80e8a16038 R14: 00007f80e8a15fa0 R15: 00007ffd32c7a3b8 [ 842.640917][ T3735] [ 843.059029][ T3748] syzkaller0: entered promiscuous mode [ 843.064585][ T3748] syzkaller0: entered allmulticast mode [ 843.554271][ T3785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13283'. [ 843.613604][ T3785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13283'. [ 843.735180][ T3794] syzkaller0: entered promiscuous mode [ 843.750414][ T3794] syzkaller0: entered allmulticast mode [ 843.824686][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13290'. [ 843.837397][ T3799] syzkaller0: entered promiscuous mode [ 843.842930][ T3799] syzkaller0: entered allmulticast mode [ 843.912952][ T3807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.961080][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13292'. [ 844.025734][ T3810] syzkaller0: entered promiscuous mode [ 844.041134][ T3810] syzkaller0: entered allmulticast mode [ 844.231910][ T3816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13295'. [ 844.449150][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13300'. [ 844.685997][ T3841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13303'. [ 844.723902][ T3843] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 844.732199][ T3843] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 844.895475][ T3853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13305'. [ 844.954143][ T3855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13307'. [ 845.120586][ T3867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13308'. [ 845.341084][ T3877] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 845.358405][ T3877] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 845.395254][ T3880] : entered promiscuous mode [ 845.523961][ T3881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.587288][ T3887] IPv6: NLM_F_CREATE should be specified when creating new route [ 845.669908][ T3892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13319'. [ 845.779646][ T3894] netlink: 'syz.3.13320': attribute type 2 has an invalid length. [ 845.892282][ T3898] FAULT_INJECTION: forcing a failure. [ 845.892282][ T3898] name failslab, interval 1, probability 0, space 0, times 0 [ 845.906310][ T3898] CPU: 0 UID: 0 PID: 3898 Comm: syz.3.13322 Not tainted syzkaller #0 PREEMPT(full) [ 845.906338][ T3898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 845.906352][ T3898] Call Trace: [ 845.906359][ T3898] [ 845.906369][ T3898] dump_stack_lvl+0xe8/0x150 [ 845.906402][ T3898] should_fail_ex+0x412/0x560 [ 845.906437][ T3898] should_failslab+0xa8/0x100 [ 845.906469][ T3898] ? skb_clone+0x212/0x3a0 [ 845.906488][ T3898] kmem_cache_alloc_noprof+0x87/0x650 [ 845.906525][ T3898] skb_clone+0x212/0x3a0 [ 845.906548][ T3898] __netlink_deliver_tap+0x404/0x850 [ 845.906592][ T3898] ? netlink_deliver_tap+0x2e/0x1b0 [ 845.906623][ T3898] netlink_deliver_tap+0x19c/0x1b0 [ 845.906654][ T3898] netlink_sendskb+0x68/0x140 [ 845.906682][ T3898] netlink_rcv_skb+0x2b6/0x4b0 [ 845.906711][ T3898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 845.906741][ T3898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 845.906784][ T3898] ? netlink_deliver_tap+0x2e/0x1b0 [ 845.906826][ T3898] ? netlink_deliver_tap+0x2e/0x1b0 [ 845.906862][ T3898] netlink_unicast+0x75c/0x8e0 [ 845.906901][ T3898] netlink_sendmsg+0x813/0xb40 [ 845.906941][ T3898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.906975][ T3898] ? aa_sock_msg_perm+0xf1/0x1b0 [ 845.907005][ T3898] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 845.907037][ T3898] ____sys_sendmsg+0x972/0x9f0 [ 845.907069][ T3898] ? __might_fault+0xaf/0x130 [ 845.907102][ T3898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 845.907144][ T3898] ? import_iovec+0x73/0xa0 [ 845.907179][ T3898] ___sys_sendmsg+0x2a5/0x360 [ 845.907209][ T3898] ? __lock_acquire+0x6b5/0x2cf0 [ 845.907238][ T3898] ? __pfx____sys_sendmsg+0x10/0x10 [ 845.907308][ T3898] ? __fget_files+0x2a/0x420 [ 845.907333][ T3898] ? __fget_files+0x3a0/0x420 [ 845.907370][ T3898] __x64_sys_sendmsg+0x1bd/0x2a0 [ 845.907405][ T3898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 845.907448][ T3898] ? __pfx_ksys_write+0x10/0x10 [ 845.907488][ T3898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.907511][ T3898] do_syscall_64+0x15f/0xf80 [ 845.907542][ T3898] ? trace_irq_disable+0x3b/0x140 [ 845.907575][ T3898] ? clear_bhb_loop+0x40/0x90 [ 845.907601][ T3898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.907622][ T3898] RIP: 0033:0x7f2fcd99ce59 [ 845.907641][ T3898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.907659][ T3898] RSP: 002b:00007f2fce781028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.907682][ T3898] RAX: ffffffffffffffda RBX: 00007f2fcdc15fa0 RCX: 00007f2fcd99ce59 [ 845.907698][ T3898] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 845.907711][ T3898] RBP: 00007f2fce781090 R08: 0000000000000000 R09: 0000000000000000 [ 845.907724][ T3898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.907736][ T3898] R13: 00007f2fcdc16038 R14: 00007f2fcdc15fa0 R15: 00007ffd10bc8f88 [ 845.907771][ T3898] [ 846.941625][ T3933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13327'. [ 847.086770][ T3947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13332'. [ 847.110293][ T3948] macvlan0: entered promiscuous mode [ 847.332025][ T3953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13335'. [ 847.527292][ T3965] FAULT_INJECTION: forcing a failure. [ 847.527292][ T3965] name failslab, interval 1, probability 0, space 0, times 0 [ 847.566773][ T3965] CPU: 1 UID: 0 PID: 3965 Comm: syz.0.13341 Not tainted syzkaller #0 PREEMPT(full) [ 847.566801][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 847.566814][ T3965] Call Trace: [ 847.566822][ T3965] [ 847.566831][ T3965] dump_stack_lvl+0xe8/0x150 [ 847.566861][ T3965] should_fail_ex+0x412/0x560 [ 847.566896][ T3965] should_failslab+0xa8/0x100 [ 847.566929][ T3965] __kmalloc_noprof+0xe8/0x760 [ 847.566959][ T3965] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 847.566992][ T3965] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 847.567026][ T3965] genl_family_rcv_msg_doit+0xd9/0x330 [ 847.567058][ T3965] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 847.567091][ T3965] ? apparmor_capable+0x126/0x170 [ 847.567114][ T3965] ? bpf_lsm_capable+0x9/0x20 [ 847.567134][ T3965] ? security_capable+0x7e/0x2c0 [ 847.567168][ T3965] genl_rcv_msg+0x61c/0x7a0 [ 847.567199][ T3965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 847.567221][ T3965] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 847.567247][ T3965] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 847.567268][ T3965] ? __pfx_nl80211_post_doit+0x10/0x10 [ 847.567296][ T3965] ? __pfx_ref_tracker_free+0x10/0x10 [ 847.567382][ T3965] netlink_rcv_skb+0x232/0x4b0 [ 847.567415][ T3965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 847.567441][ T3965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 847.567490][ T3965] ? down_read+0x270/0x2e0 [ 847.567510][ T3965] ? genl_rcv+0xd/0x40 [ 847.567535][ T3965] genl_rcv+0x28/0x40 [ 847.567556][ T3965] netlink_unicast+0x75c/0x8e0 [ 847.567597][ T3965] netlink_sendmsg+0x813/0xb40 [ 847.567640][ T3965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.567675][ T3965] ? aa_sock_msg_perm+0xf1/0x1b0 [ 847.567706][ T3965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 847.567738][ T3965] ____sys_sendmsg+0x972/0x9f0 [ 847.567770][ T3965] ? __might_fault+0xaf/0x130 [ 847.567804][ T3965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.567847][ T3965] ? import_iovec+0x73/0xa0 [ 847.567883][ T3965] ___sys_sendmsg+0x2a5/0x360 [ 847.567914][ T3965] ? __lock_acquire+0x6b5/0x2cf0 [ 847.567942][ T3965] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.568016][ T3965] ? __fget_files+0x2a/0x420 [ 847.568041][ T3965] ? __fget_files+0x3a0/0x420 [ 847.568079][ T3965] __x64_sys_sendmsg+0x1bd/0x2a0 [ 847.568114][ T3965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 847.568158][ T3965] ? __pfx_ksys_write+0x10/0x10 [ 847.568198][ T3965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.568222][ T3965] do_syscall_64+0x15f/0xf80 [ 847.568254][ T3965] ? trace_irq_disable+0x3b/0x140 [ 847.568286][ T3965] ? clear_bhb_loop+0x40/0x90 [ 847.568314][ T3965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.568341][ T3965] RIP: 0033:0x7f39b299ce59 [ 847.568361][ T3965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.568379][ T3965] RSP: 002b:00007f39b38a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.568402][ T3965] RAX: ffffffffffffffda RBX: 00007f39b2c15fa0 RCX: 00007f39b299ce59 [ 847.568418][ T3965] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 847.568431][ T3965] RBP: 00007f39b38a2090 R08: 0000000000000000 R09: 0000000000000000 [ 847.568444][ T3965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.568456][ T3965] R13: 00007f39b2c16038 R14: 00007f39b2c15fa0 R15: 00007ffe637336f8 [ 847.568493][ T3965] [ 847.569563][ T3970] FAULT_INJECTION: forcing a failure. [ 847.569563][ T3970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.931942][ T3970] CPU: 1 UID: 0 PID: 3970 Comm: syz.2.13343 Not tainted syzkaller #0 PREEMPT(full) [ 847.931969][ T3970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 847.931980][ T3970] Call Trace: [ 847.931988][ T3970] [ 847.931995][ T3970] dump_stack_lvl+0xe8/0x150 [ 847.932022][ T3970] should_fail_ex+0x412/0x560 [ 847.932052][ T3970] _copy_from_user+0x2d/0xb0 [ 847.932081][ T3970] kstrtouint_from_user+0xd6/0x180 [ 847.932106][ T3970] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 847.932143][ T3970] proc_fail_nth_write+0x8e/0x210 [ 847.932167][ T3970] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 847.932195][ T3970] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 847.932219][ T3970] vfs_write+0x29a/0xb90 [ 847.932257][ T3970] ? __pfx_vfs_write+0x10/0x10 [ 847.932284][ T3970] ? __fget_files+0x2a/0x420 [ 847.932310][ T3970] ? __fget_files+0x3a0/0x420 [ 847.932330][ T3970] ? __fget_files+0x2a/0x420 [ 847.932366][ T3970] ksys_write+0x150/0x270 [ 847.932394][ T3970] ? __pfx_ksys_write+0x10/0x10 [ 847.932428][ T3970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.932447][ T3970] do_syscall_64+0x15f/0xf80 [ 847.932474][ T3970] ? trace_irq_disable+0x3b/0x140 [ 847.932501][ T3970] ? clear_bhb_loop+0x40/0x90 [ 847.932523][ T3970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.932540][ T3970] RIP: 0033:0x7f45a955d68e [ 847.932556][ T3970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 847.932571][ T3970] RSP: 002b:00007f45a77f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 847.932589][ T3970] RAX: ffffffffffffffda RBX: 00007f45a77f66c0 RCX: 00007f45a955d68e [ 847.932602][ T3970] RDX: 0000000000000001 RSI: 00007f45a77f60a0 RDI: 0000000000000004 [ 847.932615][ T3970] RBP: 00007f45a77f6090 R08: 0000000000000000 R09: 0000000000000000 [ 847.932626][ T3970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.932636][ T3970] R13: 00007f45a9816038 R14: 00007f45a9815fa0 R15: 00007ffdcb6bee48 [ 847.932664][ T3970] [ 849.048926][ T4027] FAULT_INJECTION: forcing a failure. [ 849.048926][ T4027] name failslab, interval 1, probability 0, space 0, times 0 [ 849.062503][ T4020] syzkaller0: entered promiscuous mode [ 849.068881][ T4020] syzkaller0: entered allmulticast mode [ 849.077864][ T4027] CPU: 1 UID: 0 PID: 4027 Comm: syz.1.13358 Not tainted syzkaller #0 PREEMPT(full) [ 849.077891][ T4027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 849.077904][ T4027] Call Trace: [ 849.077912][ T4027] [ 849.077921][ T4027] dump_stack_lvl+0xe8/0x150 [ 849.077950][ T4027] should_fail_ex+0x412/0x560 [ 849.077985][ T4027] should_failslab+0xa8/0x100 [ 849.078018][ T4027] ? skb_clone+0x212/0x3a0 [ 849.078043][ T4027] kmem_cache_alloc_noprof+0x87/0x650 [ 849.078082][ T4027] skb_clone+0x212/0x3a0 [ 849.078106][ T4027] __netlink_deliver_tap+0x404/0x850 [ 849.078149][ T4027] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.078181][ T4027] netlink_deliver_tap+0x19c/0x1b0 [ 849.078213][ T4027] netlink_sendskb+0x68/0x140 [ 849.078252][ T4027] netlink_rcv_skb+0x2b6/0x4b0 [ 849.078278][ T4027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 849.078302][ T4027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 849.078336][ T4027] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.078360][ T4027] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.078388][ T4027] netlink_unicast+0x75c/0x8e0 [ 849.078418][ T4027] netlink_sendmsg+0x813/0xb40 [ 849.078451][ T4027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.078479][ T4027] ? aa_sock_msg_perm+0xf1/0x1b0 [ 849.078504][ T4027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 849.078531][ T4027] ____sys_sendmsg+0x972/0x9f0 [ 849.078556][ T4027] ? __might_fault+0xaf/0x130 [ 849.078583][ T4027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.078616][ T4027] ? import_iovec+0x73/0xa0 [ 849.078644][ T4027] ___sys_sendmsg+0x2a5/0x360 [ 849.078669][ T4027] ? __lock_acquire+0x6b5/0x2cf0 [ 849.078690][ T4027] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.078747][ T4027] ? __fget_files+0x2a/0x420 [ 849.078766][ T4027] ? __fget_files+0x3a0/0x420 [ 849.078796][ T4027] __x64_sys_sendmsg+0x1bd/0x2a0 [ 849.078825][ T4027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.078861][ T4027] ? __pfx_ksys_write+0x10/0x10 [ 849.078895][ T4027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.078915][ T4027] do_syscall_64+0x15f/0xf80 [ 849.078941][ T4027] ? trace_irq_disable+0x3b/0x140 [ 849.078969][ T4027] ? clear_bhb_loop+0x40/0x90 [ 849.078992][ T4027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.079010][ T4027] RIP: 0033:0x7f80e879ce59 [ 849.079028][ T4027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.079044][ T4027] RSP: 002b:00007f80e9685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.079061][ T4027] RAX: ffffffffffffffda RBX: 00007f80e8a15fa0 RCX: 00007f80e879ce59 [ 849.079073][ T4027] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 849.079083][ T4027] RBP: 00007f80e9685090 R08: 0000000000000000 R09: 0000000000000000 [ 849.079093][ T4027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.079102][ T4027] R13: 00007f80e8a16038 R14: 00007f80e8a15fa0 R15: 00007ffd32c7a3b8 [ 849.079129][ T4027] [ 849.778201][ T4040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.658128][ T4066] netlink: 'syz.4.13368': attribute type 3 has an invalid length. [ 851.775269][ T4035] ±ÿ: entered allmulticast mode [ 851.782388][ T4066] netlink: 'syz.4.13368': attribute type 3 has an invalid length. [ 851.825167][ T4067] : entered promiscuous mode [ 851.921150][ T4073] __nla_validate_parse: 4 callbacks suppressed [ 851.921171][ T4073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13370'. [ 852.418057][ T4098] ip_vti0: entered promiscuous mode [ 852.615581][ T4112] syzkaller1: entered promiscuous mode [ 852.633257][ T4112] syzkaller1: entered allmulticast mode [ 852.832494][ T4122] bond0: (slave gre0): refused to change device type [ 852.924838][ T4126] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20000 [ 853.765350][ T4167] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13403'. [ 854.043307][ T4183] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13409'. [ 854.076121][ T4183] syzkaller0: entered promiscuous mode [ 854.080277][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13410'. [ 854.094338][ T4183] syzkaller0: entered allmulticast mode [ 854.341148][ T4198] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13416'. [ 855.066374][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13432'. [ 855.133590][ T4246] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13433'. [ 855.158847][ T4245] sctp: [Deprecated]: syz.2.13431 (pid 4245) Use of int in maxseg socket option. [ 855.158847][ T4245] Use struct sctp_assoc_value instead [ 855.360019][ T4257] ±ÿª¨úrBº“: renamed from lo [ 855.535200][ T4265] 8021q: VLANs not supported on ip6gre0 [ 855.735062][ T4279] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13446'. [ 855.811834][ T4282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13447'. [ 855.950734][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13449'. [ 856.081221][ T4297] ip6tnl0: Caught tx_queue_len zero misconfig [ 856.179453][ T4302] netlink: 'syz.0.13455': attribute type 1 has an invalid length. [ 856.192485][ T4299] 8021q: VLANs not supported on ip6gre0 [ 856.310578][ T4302] 8021q: adding VLAN 0 to HW filter on device bond7 [ 856.382012][ T4310] bond7: (slave veth0_to_bond): making interface the new active one [ 856.408845][ T4310] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 856.641270][ T4302] 8021q: adding VLAN 0 to HW filter on device bond8 [ 856.651168][ T4302] bond7: (slave bond8): Enslaving as an active interface with a down link [ 856.661216][ T4310] bond7: entered promiscuous mode [ 856.672341][ T4310] veth0_to_bond: entered promiscuous mode [ 856.855219][ T4336] netlink: 'syz.4.13465': attribute type 1 has an invalid length. [ 857.058699][ T4348] __nla_validate_parse: 2 callbacks suppressed [ 857.058720][ T4348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13468'. [ 857.088749][ T4351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13467'. [ 857.103927][ T4348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13468'. [ 857.113631][ T4348] netlink: 'syz.2.13468': attribute type 6 has an invalid length. [ 857.155117][ T4355] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13470'. [ 857.267506][ T4359] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13472'. [ 857.344236][ T4363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13474'. [ 857.805933][ T4390] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13486'. [ 858.003739][ T4396] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13489'. [ 858.239092][ T4412] pimreg: entered allmulticast mode [ 858.263602][ T4413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13496'. [ 858.282438][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13498'. [ 858.645688][ T4436] xt_recent: Unsupported userspace flags (000000b1) [ 858.980695][ T4459] IPVS: Error joining to the multicast group [ 859.150020][ T4465] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1806) ! [ 859.181984][ T4465] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 859.201412][ T4465] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 859.749298][ T4496] syzkaller0: entered promiscuous mode [ 859.756110][ T4496] syzkaller0: entered allmulticast mode [ 859.807890][ T4503] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 859.881349][ T4503] syzkaller0: entered promiscuous mode [ 859.897651][ T4503] syzkaller0: entered allmulticast mode [ 860.058454][ T4514] syzkaller0: entered promiscuous mode [ 860.064129][ T4514] syzkaller0: entered allmulticast mode [ 860.293949][ T4520] netlink: 'syz.1.13535': attribute type 1 has an invalid length. [ 860.471047][ T4529] bond0: (slave team0): Releasing backup interface [ 860.527655][ T4529] bond7: (slave veth0_to_bond): Releasing active interface [ 860.536063][ T4529] bond7: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 860.558613][ T4529] veth0_to_bond: left promiscuous mode [ 860.599571][ T4529] bond0: (slave bond_slave_0): Releasing backup interface [ 860.656751][ T4529] bond0: (slave bond_slave_1): Releasing backup interface [ 860.669254][ T4542] sctp: [Deprecated]: syz.3.13539 (pid 4542) Use of int in max_burst socket option deprecated. [ 860.669254][ T4542] Use struct sctp_assoc_value instead [ 860.708086][ T4529] team0: Port device team_slave_0 removed [ 860.747374][ T4529] team0: Port device team_slave_1 removed [ 860.758087][ T4529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.772579][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.792575][ T4529] bond5: (slave veth5): Releasing active interface [ 860.810538][ T4529] bond6: (slave gretap1): Releasing active interface [ 860.839587][ T4529] bond7: (slave bond8): Releasing active interface [ 860.998488][ T4546] netlink: 'syz.0.13542': attribute type 142 has an invalid length. [ 861.273603][ T4556] IPv6: NLM_F_CREATE should be specified when creating new route [ 861.898023][ T4587] team_slave_1: Caught tx_queue_len zero misconfig [ 862.293566][ T4604] __nla_validate_parse: 8 callbacks suppressed [ 862.293589][ T4604] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.13562'. [ 862.321710][ T4604] netlink: Conntrack attr has 4 unknown bytes [ 862.372772][ T4608] openvswitch: netlink: IP tunnel TTL not specified. [ 862.583987][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13567'. [ 862.732206][ T4638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13568'. [ 865.081209][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13581'. [ 865.101996][ T4680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13582'. [ 865.127510][ T4681] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 865.213100][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13583'. [ 865.228533][ T4685] netlink: 159084 bytes leftover after parsing attributes in process `syz.0.13581'. [ 865.539822][ T4699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.845819][ T4710] syzkaller0: entered promiscuous mode [ 865.860239][ T4710] syzkaller0: entered allmulticast mode [ 868.250040][ T4749] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13599'. [ 868.398423][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13603'. [ 868.641670][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13607'. [ 868.832446][ T4783] veth1_vlan: Caught tx_queue_len zero misconfig [ 869.054980][ T4790] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13614'. [ 869.144860][ T4791] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN PTI [ 869.156922][ T4791] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 869.165371][ T4791] CPU: 0 UID: 0 PID: 4791 Comm: syz.1.13613 Not tainted syzkaller #0 PREEMPT(full) [ 869.174785][ T4791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 869.184878][ T4791] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 869.190729][ T4791] Code: 52 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 57 e1 bd f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 3a e1 bd f8 4d 8b 1f 4c 89 f7 89 [ 869.210379][ T4791] RSP: 0018:ffffc90005bc70a8 EFLAGS: 00010202 [ 869.216491][ T4791] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff888031953d80 [ 869.224506][ T4791] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888076a9e040 [ 869.232510][ T4791] RBP: 0000000000000002 R08: ffffffff9030d4f7 R09: 1ffffffff2061a9e [ 869.240525][ T4791] R10: dffffc0000000000 R11: fffffbfff2061a9f R12: dffffc0000000000 [ 869.248557][ T4791] R13: dffffc0000000000 R14: ffff888076a9e040 R15: 0000000000000068 [ 869.256567][ T4791] FS: 00007f80e96646c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 869.265521][ T4791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 869.272119][ T4791] CR2: 00007f2fcdbe8158 CR3: 0000000085e68000 CR4: 00000000003526f0 [ 869.280111][ T4791] Call Trace: [ 869.283422][ T4791] [ 869.286369][ T4791] udp_tunnel_sock_release+0x6f/0x80 [ 869.291678][ T4791] rxe_net_del+0x121/0x2e0 [ 869.296135][ T4791] rxe_dellink+0x15/0x20 [ 869.300398][ T4791] nldev_dellink+0x304/0x3d0 [ 869.305025][ T4791] ? __pfx_nldev_dellink+0x10/0x10 [ 869.310193][ T4791] ? apparmor_capable+0x126/0x170 [ 869.315228][ T4791] ? bpf_lsm_capable+0x9/0x20 [ 869.319933][ T4791] ? security_capable+0x7e/0x2c0 [ 869.324890][ T4791] ? __pfx_nldev_dellink+0x10/0x10 [ 869.330023][ T4791] rdma_nl_rcv+0x6d1/0xa10 [ 869.334469][ T4791] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 869.339436][ T4791] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.344655][ T4791] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.349895][ T4791] netlink_unicast+0x75c/0x8e0 [ 869.354692][ T4791] netlink_sendmsg+0x813/0xb40 [ 869.359491][ T4791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.364807][ T4791] ? aa_sock_msg_perm+0xf1/0x1b0 [ 869.369772][ T4791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 869.375087][ T4791] ____sys_sendmsg+0x972/0x9f0 [ 869.379889][ T4791] ? __might_fault+0xaf/0x130 [ 869.384625][ T4791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.389950][ T4791] ? import_iovec+0x73/0xa0 [ 869.394501][ T4791] ___sys_sendmsg+0x2a5/0x360 [ 869.399221][ T4791] ? __lock_acquire+0x6b5/0x2cf0 [ 869.404194][ T4791] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.409432][ T4791] ? futex_wait+0x2a2/0x390 [ 869.413977][ T4791] ? __fget_files+0x2a/0x420 [ 869.418595][ T4791] ? __fget_files+0x3a0/0x420 [ 869.423303][ T4791] __x64_sys_sendmsg+0x1bd/0x2a0 [ 869.428270][ T4791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 869.433761][ T4791] ? rcu_is_watching+0x15/0xb0 [ 869.438560][ T4791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.444646][ T4791] do_syscall_64+0x15f/0xf80 [ 869.449261][ T4791] ? clear_bhb_loop+0x40/0x90 [ 869.453965][ T4791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.459968][ T4791] RIP: 0033:0x7f80e879ce59 [ 869.464416][ T4791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.484035][ T4791] RSP: 002b:00007f80e9664028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.492471][ T4791] RAX: ffffffffffffffda RBX: 00007f80e8a16090 RCX: 00007f80e879ce59 [ 869.500462][ T4791] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000f [ 869.508466][ T4791] RBP: 00007f80e8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 869.516455][ T4791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.524439][ T4791] R13: 00007f80e8a16128 R14: 00007f80e8a16090 R15: 00007ffd32c7a3b8 [ 869.532449][ T4791] [ 869.535492][ T4791] Modules linked in: [ 869.540967][ T4791] ---[ end trace 0000000000000000 ]--- [ 869.548018][ T4791] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 869.553942][ T4791] Code: 52 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 57 e1 bd f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 3a e1 bd f8 4d 8b 1f 4c 89 f7 89 [ 869.584162][ T4791] RSP: 0018:ffffc90005bc70a8 EFLAGS: 00010202 [ 869.593997][ T4791] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff888031953d80 [ 869.605229][ T4792] smc: removing ib device syz2 [ 869.608592][ T4791] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888076a9e040 [ 869.653398][ T4792] smbdirect: ib_dev[syz2] removed [ 869.655383][ T4791] RBP: 0000000000000002 R08: ffffffff9030d4f7 R09: 1ffffffff2061a9e [ 869.683106][ T4791] R10: dffffc0000000000 R11: fffffbfff2061a9f R12: dffffc0000000000 [ 869.705255][ T4791] R13: dffffc0000000000 R14: ffff888076a9e040 R15: 0000000000000068 [ 869.714172][ T4791] FS: 00007f80e96646c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 869.723447][ T4791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 869.730267][ T4791] CR2: 00007f2fcdbea9b8 CR3: 0000000085e68000 CR4: 00000000003526f0 [ 869.738971][ T4791] Kernel panic - not syncing: Fatal exception [ 869.745694][ T4791] Kernel Offset: disabled [ 869.750032][ T4791] Rebooting in 86400 seconds..