last executing test programs: 3.63438192s ago: executing program 3 (id=906): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 3.480435439s ago: executing program 3 (id=908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.299550301s ago: executing program 3 (id=911): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200)={0x3, 0x6}, 0x2) 3.112478368s ago: executing program 1 (id=914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000030a01040000000000000000010000020900010073797a30000000000c0002"], 0xf8}, 0x1, 0x20, 0x0, 0x8040}, 0x0) 2.917757391s ago: executing program 3 (id=916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc0000001b0001000003000000000000fc000000000000000000000000000000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0xcc}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x66) 2.892585433s ago: executing program 4 (id=917): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 2.678710335s ago: executing program 1 (id=920): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0x9}, [@typed={0x1d, 0x10d, 0x0, 0x0, @binary="32b44903af730c5ffe2ad5ed3667b809fed3fbf1cc4c530f8b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) 2.667513012s ago: executing program 4 (id=921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.488620778s ago: executing program 4 (id=922): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) 2.403839999s ago: executing program 0 (id=924): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.32684159s ago: executing program 1 (id=925): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae", 0x4}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2.316206442s ago: executing program 2 (id=926): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000200)={0x3, 0x6}, 0x2) 2.255837199s ago: executing program 4 (id=927): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) 2.15074932s ago: executing program 1 (id=928): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000400)="e48dc0a3", 0x4}], 0x2}, 0x4004) 2.125444791s ago: executing program 2 (id=929): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x10000, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x2}]}]}, 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x20000841) 2.070917773s ago: executing program 4 (id=930): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000003820000004", @ANYRES32, @ANYBLOB="c32966a0"], 0x20) 1.398495009s ago: executing program 0 (id=931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x2004000) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040) close(r1) 1.285095655s ago: executing program 0 (id=932): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40000102, 0x0) 1.231379942s ago: executing program 1 (id=933): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000003800010901bd7000fcdbdf25090000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x24000081}, 0x80d4) 1.050297746s ago: executing program 2 (id=934): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r0, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) 923.521017ms ago: executing program 1 (id=935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x140) 354.444011ms ago: executing program 0 (id=936): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 275.826256ms ago: executing program 2 (id=937): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) 194.127238ms ago: executing program 0 (id=938): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x33, 0x0, 0x63) 152.271788ms ago: executing program 3 (id=939): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000200)={0x3, 0x6}, 0x2) 151.467217ms ago: executing program 2 (id=940): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) 14.831561ms ago: executing program 3 (id=941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14.730852ms ago: executing program 4 (id=942): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.026761ms ago: executing program 0 (id=943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 2 (id=944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [@jmp={0x5, 0x1, 0x8, 0x1, 0x1, 0xffffffffffffffe0, 0xffffffffffffffe0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) kernel console output (not intermixed with test programs): Compute Engine, BIOS Google 02/12/2026 [ 93.602396][ T5969] Call Trace: [ 93.602405][ T5969] [ 93.602414][ T5969] dump_stack_lvl+0xe8/0x150 [ 93.602454][ T5969] should_fail_ex+0x412/0x560 [ 93.602485][ T5969] should_failslab+0xa8/0x100 [ 93.602511][ T5969] ? skb_clone+0x212/0x3a0 [ 93.602543][ T5969] kmem_cache_alloc_noprof+0x87/0x650 [ 93.602577][ T5969] ? __netlink_lookup+0xc6/0x8b0 [ 93.602613][ T5969] skb_clone+0x212/0x3a0 [ 93.602649][ T5969] __netlink_deliver_tap+0x404/0x850 [ 93.602689][ T5969] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.602718][ T5969] netlink_deliver_tap+0x19c/0x1b0 [ 93.602746][ T5969] netlink_unicast+0x7e3/0x9b0 [ 93.602779][ T5969] ? __pfx_netlink_unicast+0x10/0x10 [ 93.602814][ T5969] ? netlink_sendmsg+0x650/0xb40 [ 93.602840][ T5969] ? skb_put+0x11b/0x210 [ 93.602872][ T5969] netlink_sendmsg+0x813/0xb40 [ 93.602909][ T5969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.602940][ T5969] ? aa_sock_msg_perm+0xf1/0x1b0 [ 93.602968][ T5969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 93.602992][ T5969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.603018][ T5969] ____sys_sendmsg+0xa68/0xad0 [ 93.603060][ T5969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.603102][ T5969] ? import_iovec+0x73/0xa0 [ 93.603136][ T5969] ___sys_sendmsg+0x2a5/0x360 [ 93.603174][ T5969] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.603244][ T5969] ? __fget_files+0x2a/0x420 [ 93.603273][ T5969] ? __fget_files+0x3a0/0x420 [ 93.603314][ T5969] __x64_sys_sendmsg+0x1bd/0x2a0 [ 93.603349][ T5969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.603391][ T5969] ? __pfx_ksys_write+0x10/0x10 [ 93.603425][ T5969] do_syscall_64+0x14d/0xf80 [ 93.603445][ T5969] ? trace_irq_disable+0x3b/0x150 [ 93.603476][ T5969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.603498][ T5969] ? clear_bhb_loop+0x40/0x90 [ 93.603525][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.603547][ T5969] RIP: 0033:0x7fe75d79c799 [ 93.603578][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.603596][ T5969] RSP: 002b:00007fe75b9b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.603627][ T5969] RAX: ffffffffffffffda RBX: 00007fe75da16180 RCX: 00007fe75d79c799 [ 93.603642][ T5969] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 93.603655][ T5969] RBP: 00007fe75b9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 93.603668][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.603680][ T5969] R13: 00007fe75da16218 R14: 00007fe75da16180 R15: 00007ffed1f89048 [ 93.603714][ T5969] [ 93.778451][ T5844] Bluetooth: hci1: command tx timeout [ 93.884152][ T5844] Bluetooth: hci3: command tx timeout [ 93.896212][ T5844] Bluetooth: hci0: command tx timeout [ 93.901671][ T5844] Bluetooth: hci4: command tx timeout [ 93.909675][ T5844] Bluetooth: hci2: command tx timeout [ 94.134365][ T5975] bond1: option coupled_control: invalid value (12) [ 94.158127][ T5975] bond1 (unregistering): Released all slaves [ 94.377326][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 94.496497][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16'. [ 94.731303][ T6012] FAULT_INJECTION: forcing a failure. [ 94.731303][ T6012] name failslab, interval 1, probability 0, space 0, times 0 [ 94.763100][ T6013] syz.2.19 uses obsolete (PF_INET,SOCK_PACKET) [ 94.815920][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.4.20 Not tainted syzkaller #0 PREEMPT(full) [ 94.815949][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.815962][ T6012] Call Trace: [ 94.815970][ T6012] [ 94.815979][ T6012] dump_stack_lvl+0xe8/0x150 [ 94.816015][ T6012] should_fail_ex+0x412/0x560 [ 94.816045][ T6012] should_failslab+0xa8/0x100 [ 94.816070][ T6012] ? skb_clone+0x212/0x3a0 [ 94.816103][ T6012] kmem_cache_alloc_noprof+0x87/0x650 [ 94.816145][ T6012] skb_clone+0x212/0x3a0 [ 94.816181][ T6012] pfkey_sendmsg+0x4a3/0x1120 [ 94.816214][ T6012] ? __lock_acquire+0x6b5/0x2cf0 [ 94.816256][ T6012] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 94.816306][ T6012] ? aa_sock_msg_perm+0xf1/0x1b0 [ 94.816334][ T6012] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 94.816359][ T6012] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 94.816380][ T6012] ____sys_sendmsg+0xa68/0xad0 [ 94.816411][ T6012] ? __lock_acquire+0x6b5/0x2cf0 [ 94.816447][ T6012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.816489][ T6012] ? import_iovec+0x73/0xa0 [ 94.816523][ T6012] ___sys_sendmsg+0x2a5/0x360 [ 94.816561][ T6012] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.816646][ T6012] __sys_sendmmsg+0x27c/0x4e0 [ 94.816685][ T6012] ? __pfx___sys_sendmmsg+0x10/0x10 [ 94.816715][ T6012] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 94.816772][ T6012] ? ksys_write+0x242/0x270 [ 94.816794][ T6012] ? __pfx_ksys_write+0x10/0x10 [ 94.816824][ T6012] __x64_sys_sendmmsg+0xa0/0xc0 [ 94.816857][ T6012] do_syscall_64+0x14d/0xf80 [ 94.816876][ T6012] ? trace_irq_disable+0x3b/0x150 [ 94.816906][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.816927][ T6012] ? clear_bhb_loop+0x40/0x90 [ 94.816951][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.816973][ T6012] RIP: 0033:0x7fe75d79c799 [ 94.816993][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.817011][ T6012] RSP: 002b:00007fe75b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 94.817034][ T6012] RAX: ffffffffffffffda RBX: 00007fe75da15fa0 RCX: 00007fe75d79c799 [ 94.817049][ T6012] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 94.817063][ T6012] RBP: 00007fe75b9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.817076][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.817088][ T6012] R13: 00007fe75da16038 R14: 00007fe75da15fa0 R15: 00007ffed1f89048 [ 94.817122][ T6012] [ 94.817476][ T6014] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20'. [ 95.480505][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 95.546655][ T6025] netlink: 220 bytes leftover after parsing attributes in process `syz.0.24'. [ 95.596717][ T6021] team0: Port device team_slave_0 removed [ 95.699839][ T6027] pimreg: entered allmulticast mode [ 95.736492][ T6033] Cannot find add_set index 0 as target [ 95.904646][ T6037] netlink: 'syz.2.28': attribute type 31 has an invalid length. [ 96.006830][ T6046] xt_bpf: check failed: parse error [ 96.015901][ T6043] Illegal XDP return value 1480853606 on prog (id 10) dev syz_tun, expect packet loss! [ 96.108805][ T6039] lo speed is unknown, defaulting to 1000 [ 96.114837][ T6039] lo speed is unknown, defaulting to 1000 [ 96.209376][ T6039] lo speed is unknown, defaulting to 1000 [ 96.241899][ T6050] Zero length message leads to an empty skb [ 96.253197][ T6039] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.308458][ T6039] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.424874][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 96.426437][ T6039] lo speed is unknown, defaulting to 1000 [ 96.479254][ T6039] lo speed is unknown, defaulting to 1000 [ 96.775729][ T6039] lo speed is unknown, defaulting to 1000 [ 96.809831][ T6039] lo speed is unknown, defaulting to 1000 [ 96.829208][ T6039] lo speed is unknown, defaulting to 1000 [ 97.069437][ T6082] ip6t_srh: unknown srh invflags 4000 [ 97.162218][ T6087] netlink: 'syz.2.43': attribute type 2 has an invalid length. [ 97.201797][ T6087] !: entered promiscuous mode [ 97.264262][ T6082] lo speed is unknown, defaulting to 1000 [ 97.366866][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.884683][ T6111] netlink: 964 bytes leftover after parsing attributes in process `syz.3.46'. [ 97.895049][ T6110] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 98.001239][ T6118] netlink: 52 bytes leftover after parsing attributes in process `syz.1.51'. [ 98.024692][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.033659][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.106649][ T6104] syzkaller1: entered promiscuous mode [ 98.112198][ T6104] syzkaller1: entered allmulticast mode [ 98.921616][ T6151] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 99.006602][ T797] IPVS: starting estimator thread 0... [ 99.017801][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 99.110753][ T6158] IPVS: using max 25 ests per chain, 60000 per kthread [ 99.176176][ T6165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.68'. [ 100.115471][ T6191] FAULT_INJECTION: forcing a failure. [ 100.115471][ T6191] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.132164][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.4.77 Not tainted syzkaller #0 PREEMPT(full) [ 100.132194][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.132207][ T6191] Call Trace: [ 100.132216][ T6191] [ 100.132225][ T6191] dump_stack_lvl+0xe8/0x150 [ 100.132263][ T6191] should_fail_ex+0x412/0x560 [ 100.132294][ T6191] _copy_to_user+0x31/0xb0 [ 100.132326][ T6191] simple_read_from_buffer+0xe1/0x170 [ 100.132361][ T6191] proc_fail_nth_read+0x1bb/0x230 [ 100.132394][ T6191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.132427][ T6191] ? rw_verify_area+0x2a6/0x4d0 [ 100.132447][ T6191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.132478][ T6191] vfs_read+0x20c/0xa70 [ 100.132497][ T6191] ? fdget_pos+0x246/0x320 [ 100.132533][ T6191] ? __pfx___mutex_lock+0x10/0x10 [ 100.132555][ T6191] ? __pfx_vfs_read+0x10/0x10 [ 100.132577][ T6191] ? __fget_files+0x2a/0x420 [ 100.132610][ T6191] ? __fget_files+0x3a0/0x420 [ 100.132637][ T6191] ? __fget_files+0x2a/0x420 [ 100.132674][ T6191] ksys_read+0x150/0x270 [ 100.132696][ T6191] ? __pfx_ksys_read+0x10/0x10 [ 100.132728][ T6191] do_syscall_64+0x14d/0xf80 [ 100.132755][ T6191] ? trace_irq_disable+0x3b/0x150 [ 100.132784][ T6191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.132805][ T6191] ? clear_bhb_loop+0x40/0x90 [ 100.132832][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.132853][ T6191] RIP: 0033:0x7fe75d75cfce [ 100.132872][ T6191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.132890][ T6191] RSP: 002b:00007fe75b9d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.132911][ T6191] RAX: ffffffffffffffda RBX: 00007fe75b9d56c0 RCX: 00007fe75d75cfce [ 100.132926][ T6191] RDX: 000000000000000f RSI: 00007fe75b9d50a0 RDI: 0000000000000004 [ 100.132938][ T6191] RBP: 00007fe75b9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 100.132951][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.132963][ T6191] R13: 00007fe75da16128 R14: 00007fe75da16090 R15: 00007ffed1f89048 [ 100.132997][ T6191] [ 100.402497][ T6202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.450028][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 100.479799][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 100.518874][ T6198] batman_adv: batadv0: Adding interface: ipvlan2 [ 100.525277][ T6198] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.550721][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.561238][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.571174][ T6198] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 100.652856][ T6212] xt_bpf: check failed: parse error [ 100.676163][ T6212] siw: device registration error -23 [ 100.809496][ T6220] FAULT_INJECTION: forcing a failure. [ 100.809496][ T6220] name failslab, interval 1, probability 0, space 0, times 0 [ 100.822844][ T6220] CPU: 0 UID: 0 PID: 6220 Comm: syz.2.87 Not tainted syzkaller #0 PREEMPT(full) [ 100.822873][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.822897][ T6220] Call Trace: [ 100.822905][ T6220] [ 100.822913][ T6220] dump_stack_lvl+0xe8/0x150 [ 100.822950][ T6220] should_fail_ex+0x412/0x560 [ 100.822981][ T6220] should_failslab+0xa8/0x100 [ 100.823009][ T6220] __kmalloc_cache_noprof+0x88/0x660 [ 100.823033][ T6220] ? sctp_add_bind_addr+0x8c/0x370 [ 100.823065][ T6220] sctp_add_bind_addr+0x8c/0x370 [ 100.823096][ T6220] sctp_copy_local_addr_list+0x314/0x4f0 [ 100.823127][ T6220] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 100.823153][ T6220] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 100.823182][ T6220] ? sctp_v6_is_any+0x64/0x80 [ 100.823211][ T6220] ? sctp_copy_one_addr+0x93/0x360 [ 100.823240][ T6220] sctp_bind_addr_copy+0xb3/0x3c0 [ 100.823268][ T6220] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 100.823307][ T6220] sctp_connect_new_asoc+0x2ff/0x6b0 [ 100.823343][ T6220] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 100.823376][ T6220] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 100.823408][ T6220] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 100.823437][ T6220] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 100.823469][ T6220] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 100.823494][ T6220] ? security_sctp_bind_connect+0x7e/0x2c0 [ 100.823532][ T6220] sctp_sendmsg+0x1528/0x2c10 [ 100.823582][ T6220] ? __pfx_sctp_sendmsg+0x10/0x10 [ 100.823615][ T6220] ? aa_sk_perm+0x6d5/0x900 [ 100.823646][ T6220] ? __pfx_aa_sk_perm+0x10/0x10 [ 100.823671][ T6220] ? sock_rps_record_flow+0x19/0x350 [ 100.823706][ T6220] ? inet_sendmsg+0x2f4/0x370 [ 100.823736][ T6220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.823761][ T6220] __sys_sendto+0x627/0x7a0 [ 100.823793][ T6220] ? __pfx___sys_sendto+0x10/0x10 [ 100.823818][ T6220] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 100.823849][ T6220] ? __fget_files+0x3a0/0x420 [ 100.823895][ T6220] ? ksys_write+0x242/0x270 [ 100.823917][ T6220] ? __pfx_ksys_write+0x10/0x10 [ 100.823941][ T6220] __x64_sys_sendto+0xde/0x100 [ 100.823968][ T6220] do_syscall_64+0x14d/0xf80 [ 100.823984][ T6220] ? trace_irq_disable+0x3b/0x150 [ 100.824008][ T6220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.824026][ T6220] ? clear_bhb_loop+0x40/0x90 [ 100.824047][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.824064][ T6220] RIP: 0033:0x7f0e1079c799 [ 100.824082][ T6220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.824096][ T6220] RSP: 002b:00007f0e11669028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 100.824114][ T6220] RAX: ffffffffffffffda RBX: 00007f0e10a15fa0 RCX: 00007f0e1079c799 [ 100.824127][ T6220] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 100.824137][ T6220] RBP: 00007f0e11669090 R08: 0000200000000200 R09: 000000000000001c [ 100.824149][ T6220] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000002 [ 100.824160][ T6220] R13: 00007f0e10a16038 R14: 00007f0e10a15fa0 R15: 00007ffe97674c88 [ 100.824187][ T6220] [ 101.415505][ T6207] team0: Port device team_slave_0 removed [ 101.673573][ T6241] Bluetooth: MGMT ver 1.23 [ 101.681542][ T6239] pim6reg99999999: entered allmulticast mode [ 101.768887][ T6241] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.984457][ T6241] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.091357][ T6241] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.279108][ T6241] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.396007][ T6253] syzkaller0: entered promiscuous mode [ 102.406607][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 102.426004][ T6253] syzkaller0: entered allmulticast mode [ 102.569588][ T58] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.595682][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 102.624539][ T480] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.633686][ T6268] FAULT_INJECTION: forcing a failure. [ 102.633686][ T6268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.661213][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.710476][ T195] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.728311][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.4.102 Not tainted syzkaller #0 PREEMPT(full) [ 102.728342][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.728355][ T6268] Call Trace: [ 102.728363][ T6268] [ 102.728372][ T6268] dump_stack_lvl+0xe8/0x150 [ 102.728408][ T6268] should_fail_ex+0x412/0x560 [ 102.728439][ T6268] _copy_from_iter+0x1d3/0x1670 [ 102.728471][ T6268] ? rcu_is_watching+0x15/0xb0 [ 102.728507][ T6268] ? __pfx__copy_from_iter+0x10/0x10 [ 102.728532][ T6268] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 102.728565][ T6268] ? netlink_sendmsg+0x650/0xb40 [ 102.728592][ T6268] ? skb_put+0x11b/0x210 [ 102.728625][ T6268] netlink_sendmsg+0x6c0/0xb40 [ 102.728662][ T6268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.728694][ T6268] ? aa_sock_msg_perm+0xf1/0x1b0 [ 102.728722][ T6268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.728749][ T6268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.728775][ T6268] ____sys_sendmsg+0xa68/0xad0 [ 102.728818][ T6268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.728860][ T6268] ? import_iovec+0x73/0xa0 [ 102.728893][ T6268] ___sys_sendmsg+0x2a5/0x360 [ 102.728931][ T6268] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.729004][ T6268] ? __fget_files+0x2a/0x420 [ 102.729034][ T6268] ? __fget_files+0x3a0/0x420 [ 102.729074][ T6268] __x64_sys_sendmsg+0x1bd/0x2a0 [ 102.729109][ T6268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.729158][ T6268] ? __pfx_ksys_write+0x10/0x10 [ 102.729192][ T6268] do_syscall_64+0x14d/0xf80 [ 102.729212][ T6268] ? trace_irq_disable+0x3b/0x150 [ 102.729243][ T6268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.729264][ T6268] ? clear_bhb_loop+0x40/0x90 [ 102.729290][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.729312][ T6268] RIP: 0033:0x7fe75d79c799 [ 102.729331][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.729349][ T6268] RSP: 002b:00007fe75b9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.729372][ T6268] RAX: ffffffffffffffda RBX: 00007fe75da15fa0 RCX: 00007fe75d79c799 [ 102.729387][ T6268] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 102.729400][ T6268] RBP: 00007fe75b9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 102.729413][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.729425][ T6268] R13: 00007fe75da16038 R14: 00007fe75da15fa0 R15: 00007ffed1f89048 [ 102.729458][ T6268] [ 103.737637][ T6306] raw_sendmsg: syz.4.115 forgot to set AF_INET. Fix it! [ 103.754560][ T6306] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.784421][ T1542] IPVS: starting estimator thread 0... [ 103.803422][ T6309] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 103.824529][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 103.851242][ T6306] netlink: 348 bytes leftover after parsing attributes in process `syz.4.115'. [ 103.881532][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 103.904901][ T6306] netlink: 348 bytes leftover after parsing attributes in process `syz.4.115'. [ 103.909883][ T6310] IPVS: using max 27 ests per chain, 64800 per kthread [ 104.487588][ T6332] batadv_slave_0: entered promiscuous mode [ 104.548126][ T6335] __nla_validate_parse: 1 callbacks suppressed [ 104.548147][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 104.568200][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.640326][ T6335] batadv_slave_0 (unregistering): left promiscuous mode [ 104.684031][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.700527][ T6342] netlink: 'syz.2.127': attribute type 9 has an invalid length. [ 105.000041][ T6353] syzkaller1: entered promiscuous mode [ 105.029220][ T6353] syzkaller1: entered allmulticast mode [ 105.159694][ T6358] netlink: 56 bytes leftover after parsing attributes in process `syz.3.133'. [ 105.403430][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 105.658843][ T6379] FAULT_INJECTION: forcing a failure. [ 105.658843][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 105.673079][ T6378] netlink: 256 bytes leftover after parsing attributes in process `syz.4.139'. [ 105.692899][ T6378] netlink: 56 bytes leftover after parsing attributes in process `syz.4.139'. [ 105.735969][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: syz.2.140 Not tainted syzkaller #0 PREEMPT(full) [ 105.735999][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.736012][ T6379] Call Trace: [ 105.736021][ T6379] [ 105.736030][ T6379] dump_stack_lvl+0xe8/0x150 [ 105.736070][ T6379] should_fail_ex+0x412/0x560 [ 105.736102][ T6379] should_failslab+0xa8/0x100 [ 105.736129][ T6379] __kvmalloc_node_noprof+0x178/0x8a0 [ 105.736155][ T6379] ? alloc_fdtable+0x169/0x2c0 [ 105.736184][ T6379] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 105.736213][ T6379] alloc_fdtable+0x169/0x2c0 [ 105.736245][ T6379] dup_fd+0x84f/0xb40 [ 105.736278][ T6379] ? _raw_spin_unlock+0x28/0x50 [ 105.736308][ T6379] ? copy_fs_struct+0x1c3/0x270 [ 105.736337][ T6379] ksys_unshare+0x488/0x930 [ 105.736372][ T6379] ? fput+0xa0/0xd0 [ 105.736404][ T6379] ? __pfx_ksys_unshare+0x10/0x10 [ 105.736436][ T6379] ? __pfx_ksys_write+0x10/0x10 [ 105.736468][ T6379] __x64_sys_unshare+0x38/0x50 [ 105.736500][ T6379] do_syscall_64+0x14d/0xf80 [ 105.736520][ T6379] ? trace_irq_disable+0x3b/0x150 [ 105.736550][ T6379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.736571][ T6379] ? clear_bhb_loop+0x40/0x90 [ 105.736595][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.736616][ T6379] RIP: 0033:0x7f0e1079c799 [ 105.736636][ T6379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.736653][ T6379] RSP: 002b:00007f0e11648028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 105.736675][ T6379] RAX: ffffffffffffffda RBX: 00007f0e10a16090 RCX: 00007f0e1079c799 [ 105.736690][ T6379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 105.736703][ T6379] RBP: 00007f0e11648090 R08: 0000000000000000 R09: 0000000000000000 [ 105.736716][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.736728][ T6379] R13: 00007f0e10a16128 R14: 00007f0e10a16090 R15: 00007ffe97674c88 [ 105.736762][ T6379] [ 106.288803][ T6375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.329467][ T6350] tipc: Started in network mode [ 106.336518][ T6350] tipc: Node identity c279cd130d, cluster identity 4711 [ 106.346767][ T6350] tipc: Enabled bearer , priority 0 [ 106.418734][ T6372] syzkaller0: entered promiscuous mode [ 106.424286][ T6372] syzkaller0: entered allmulticast mode [ 106.434904][ T6372] tipc: Resetting bearer [ 106.468463][ T6345] tipc: Resetting bearer [ 106.494434][ T6390] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.143'. [ 106.645597][ T6394] syz.2.145: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.662592][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT(full) [ 106.662621][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.662635][ T6394] Call Trace: [ 106.662643][ T6394] [ 106.662652][ T6394] dump_stack_lvl+0xe8/0x150 [ 106.662696][ T6394] warn_alloc+0x249/0x340 [ 106.662724][ T6394] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 106.662761][ T6394] ? __pfx_warn_alloc+0x10/0x10 [ 106.662793][ T6394] ? kasan_save_track+0x4f/0x80 [ 106.662814][ T6394] ? kasan_save_track+0x3e/0x80 [ 106.662833][ T6394] ? __kasan_kmalloc+0x93/0xb0 [ 106.662854][ T6394] ? __kmalloc_cache_noprof+0x31c/0x660 [ 106.662876][ T6394] ? xskq_create+0x56/0x170 [ 106.662906][ T6394] ? xsk_setsockopt+0x54c/0x990 [ 106.662933][ T6394] ? do_sock_setsockopt+0x17c/0x1b0 [ 106.662963][ T6394] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 106.662993][ T6394] ? do_syscall_64+0x14d/0xf80 [ 106.663018][ T6394] __vmalloc_node_range_noprof+0x132/0x1730 [ 106.663074][ T6394] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.663103][ T6394] ? __kasan_kmalloc+0x93/0xb0 [ 106.663132][ T6394] vmalloc_user_noprof+0xad/0xe0 [ 106.663152][ T6394] ? xskq_create+0xbf/0x170 [ 106.663183][ T6394] xskq_create+0xbf/0x170 [ 106.663217][ T6394] xsk_init_queue+0x8a/0xe0 [ 106.663250][ T6394] xsk_setsockopt+0x54c/0x990 [ 106.663282][ T6394] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.663309][ T6394] ? __pfx_aa_sk_perm+0x10/0x10 [ 106.663336][ T6394] ? aa_sock_opt_perm+0xff/0x1a0 [ 106.663378][ T6394] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 106.663401][ T6394] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.663430][ T6394] do_sock_setsockopt+0x17c/0x1b0 [ 106.663475][ T6394] __x64_sys_setsockopt+0x13d/0x1b0 [ 106.663512][ T6394] do_syscall_64+0x14d/0xf80 [ 106.663532][ T6394] ? trace_irq_disable+0x3b/0x150 [ 106.663562][ T6394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.663583][ T6394] ? clear_bhb_loop+0x40/0x90 [ 106.663610][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.663632][ T6394] RIP: 0033:0x7f0e1079c799 [ 106.663653][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.663671][ T6394] RSP: 002b:00007f0e11669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.663694][ T6394] RAX: ffffffffffffffda RBX: 00007f0e10a15fa0 RCX: 00007f0e1079c799 [ 106.663710][ T6394] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 106.663722][ T6394] RBP: 00007f0e10832bd9 R08: 0000000000000004 R09: 0000000000000000 [ 106.663735][ T6394] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.663748][ T6394] R13: 00007f0e10a16038 R14: 00007f0e10a15fa0 R15: 00007ffe97674c88 [ 106.663781][ T6394] [ 106.663803][ T6394] Mem-Info: [ 106.958923][ T6394] active_anon:13277 inactive_anon:0 isolated_anon:0 [ 106.958923][ T6394] active_file:3400 inactive_file:39936 isolated_file:0 [ 106.958923][ T6394] unevictable:768 dirty:608 writeback:0 [ 106.958923][ T6394] slab_reclaimable:10611 slab_unreclaimable:98927 [ 106.958923][ T6394] mapped:36372 shmem:8725 pagetables:1223 [ 106.958923][ T6394] sec_pagetables:0 bounce:0 [ 106.958923][ T6394] kernel_misc_reclaimable:0 [ 106.958923][ T6394] free:1322294 free_pcp:7389 free_cma:0 [ 107.006165][ T6394] Node 0 active_anon:53108kB inactive_anon:0kB active_file:13600kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145488kB dirty:2420kB writeback:0kB shmem:33364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12064kB pagetables:4636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.039195][ T6394] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.084133][ T6394] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.121439][ T6394] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 107.128124][ T6394] Node 0 DMA32 free:1338548kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53112kB inactive_anon:0kB active_file:13600kB inactive_file:159544kB unevictable:1536kB writepending:2352kB zspages:0kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:29184kB local_pcp:12380kB free_cma:0kB [ 107.180109][ T6394] lowmem_reserve[]: 0 0 0 0 0 [ 107.197780][ T6394] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:888kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 107.229150][ T6394] lowmem_reserve[]: 0 0 0 0 0 [ 107.239479][ T6394] Node 1 Normal free:3935224kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.274359][ T6394] lowmem_reserve[]: 0 0 0 0 0 [ 107.279767][ T6394] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.293833][ T6394] Node 0 DMA32: 1405*4kB (UM) 512*8kB (UM) 108*16kB (UME) 1*32kB (M) 4*64kB (E) 2*128kB (UM) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 322*4096kB (M) = 1338324kB [ 107.311875][ T6394] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 107.324390][ T6394] Node 1 Normal: 0*4kB 5*8kB (UM) 9*16kB (UME) 10*32kB (UM) 8*64kB (UME) 4*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 958*4096kB (M) = 3935224kB [ 107.342987][ T6394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.361628][ T6394] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.372231][ T6394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.386647][ T6394] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.396543][ T6394] 52057 total pagecache pages [ 107.401286][ T6394] 0 pages in swap cache [ 107.405511][ T6394] Free swap = 124996kB [ 107.410329][ T6394] Total swap = 124996kB [ 107.414530][ T6394] 2097051 pages RAM [ 107.418826][ T6394] 0 pages HighMem/MovableOnly [ 107.423706][ T6394] 427020 pages reserved [ 107.427968][ T6394] 0 pages cma reserved [ 108.320069][ T6345] tipc: Disabling bearer [ 108.348199][ T6375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.364886][ T6399] netlink: 88 bytes leftover after parsing attributes in process `syz.3.147'. [ 108.376008][ T6400] netlink: 88 bytes leftover after parsing attributes in process `syz.3.147'. [ 108.392994][ T5945] tipc: Node number set to 3480866067 [ 108.539283][ T6375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.676115][ T6375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.767236][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 108.833969][ T6411] netlink: 596 bytes leftover after parsing attributes in process `syz.3.151'. [ 108.907736][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.944546][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.011162][ T6422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.035414][ T6420] IPVS: Unknown mcast interface: xfrm0 [ 109.091128][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.259583][ T6428] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 109.281474][ T6428] bond1 (unregistering): Released all slaves [ 109.436328][ T6375] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.037956][ T6375] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.219096][ T6375] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.290935][ T6461] __nla_validate_parse: 2 callbacks suppressed [ 110.290956][ T6461] netlink: 64 bytes leftover after parsing attributes in process `syz.1.160'. [ 110.364435][ T6465] Bluetooth: MGMT ver 1.23 [ 110.581241][ T6467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.749264][ T6467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.775409][ T6483] netlink: 'syz.2.171': attribute type 21 has an invalid length. [ 110.822024][ T6481] syzkaller0: entered promiscuous mode [ 110.830264][ T6481] syzkaller0: entered allmulticast mode [ 110.841682][ T6481] tipc: Started in network mode [ 110.847102][ T6481] tipc: Node identity , cluster identity 4711 [ 110.853355][ T6481] tipc: Failed to obtain node identity [ 110.859591][ T6481] tipc: Enabling of bearer rejected, failed to enable media [ 110.895626][ T6467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.182001][ T6467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.329238][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.398793][ T195] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.409448][ T195] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.446144][ T195] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.603196][ T6499] netlink: 'syz.1.175': attribute type 13 has an invalid length. [ 111.656535][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 111.958922][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 111.970334][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 112.082088][ T797] IPVS: starting estimator thread 0... [ 112.106872][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 112.131838][ T6509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.184736][ T6509] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 112.199031][ T6509] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 112.211378][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 112.227064][ T6519] IPVS: using max 29 ests per chain, 69600 per kthread [ 112.263017][ T6514] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 112.276221][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 112.310645][ T6520] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 112.327780][ T6520] bond1 (unregistering): Released all slaves [ 112.500759][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 112.561378][ T6530] FAULT_INJECTION: forcing a failure. [ 112.561378][ T6530] name failslab, interval 1, probability 0, space 0, times 0 [ 112.613857][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.3.186 Not tainted syzkaller #0 PREEMPT(full) [ 112.613886][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.613899][ T6530] Call Trace: [ 112.613908][ T6530] [ 112.613917][ T6530] dump_stack_lvl+0xe8/0x150 [ 112.613953][ T6530] should_fail_ex+0x412/0x560 [ 112.613985][ T6530] should_failslab+0xa8/0x100 [ 112.614013][ T6530] __kmalloc_cache_noprof+0x88/0x660 [ 112.614034][ T6530] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 112.614062][ T6530] ? sctp_add_bind_addr+0x8c/0x370 [ 112.614093][ T6530] sctp_add_bind_addr+0x8c/0x370 [ 112.614124][ T6530] sctp_copy_local_addr_list+0x314/0x4f0 [ 112.614155][ T6530] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 112.614187][ T6530] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 112.614216][ T6530] ? sctp_v6_is_any+0x64/0x80 [ 112.614245][ T6530] ? sctp_copy_one_addr+0x93/0x360 [ 112.614274][ T6530] sctp_bind_addr_copy+0xb3/0x3c0 [ 112.614302][ T6530] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 112.614342][ T6530] sctp_connect_new_asoc+0x2ff/0x6b0 [ 112.614377][ T6530] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 112.614410][ T6530] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 112.614442][ T6530] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 112.614472][ T6530] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 112.614504][ T6530] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 112.614528][ T6530] ? security_sctp_bind_connect+0x7e/0x2c0 [ 112.614566][ T6530] sctp_sendmsg+0x1528/0x2c10 [ 112.614613][ T6530] ? __pfx_sctp_sendmsg+0x10/0x10 [ 112.614647][ T6530] ? aa_sk_perm+0x6d5/0x900 [ 112.614680][ T6530] ? __pfx_aa_sk_perm+0x10/0x10 [ 112.614708][ T6530] ? sock_rps_record_flow+0x19/0x350 [ 112.614743][ T6530] ? inet_sendmsg+0x2f4/0x370 [ 112.614773][ T6530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.614798][ T6530] __sys_sendto+0x627/0x7a0 [ 112.614839][ T6530] ? __pfx___sys_sendto+0x10/0x10 [ 112.614866][ T6530] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 112.614903][ T6530] ? __fget_files+0x3a0/0x420 [ 112.614946][ T6530] ? ksys_write+0x242/0x270 [ 112.614969][ T6530] ? __pfx_ksys_write+0x10/0x10 [ 112.614995][ T6530] __x64_sys_sendto+0xde/0x100 [ 112.615027][ T6530] do_syscall_64+0x14d/0xf80 [ 112.615046][ T6530] ? trace_irq_disable+0x3b/0x150 [ 112.615075][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.615096][ T6530] ? clear_bhb_loop+0x40/0x90 [ 112.615121][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.615141][ T6530] RIP: 0033:0x7fe39eb9c799 [ 112.615161][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.615179][ T6530] RSP: 002b:00007fe39fac4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 112.615200][ T6530] RAX: ffffffffffffffda RBX: 00007fe39ee15fa0 RCX: 00007fe39eb9c799 [ 112.615216][ T6530] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 112.615228][ T6530] RBP: 00007fe39fac4090 R08: 0000200000000200 R09: 000000000000001c [ 112.615242][ T6530] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000002 [ 112.615255][ T6530] R13: 00007fe39ee16038 R14: 00007fe39ee15fa0 R15: 00007ffe21332f88 [ 112.615288][ T6530] [ 113.061056][ T6531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.183'. [ 113.072312][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 113.250413][ T6541] syzkaller1: entered promiscuous mode [ 113.283312][ T6541] syzkaller1: entered allmulticast mode [ 113.504716][ T6559] netlink: 220 bytes leftover after parsing attributes in process `syz.0.196'. [ 113.881717][ T6567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.050040][ T6577] Cannot find add_set index 0 as target [ 114.130982][ T6567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.172095][ T6579] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 114.333136][ T6567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.449513][ T6567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.664904][ T6600] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 114.701751][ T6598] syzkaller0: entered promiscuous mode [ 114.707907][ T6598] syzkaller0: entered allmulticast mode [ 114.877788][ T195] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.957350][ T195] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.049942][ T195] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.066915][ T195] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.084928][ T6613] netlink: 'syz.3.213': attribute type 5 has an invalid length. [ 115.321641][ T6628] batman_adv: batadv0: Adding interface: ipvlan2 [ 115.346541][ T1542] IPVS: starting estimator thread 0... [ 115.373263][ T6628] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.415525][ T6636] FAULT_INJECTION: forcing a failure. [ 115.415525][ T6636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.436879][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.456189][ T6634] IPVS: using max 29 ests per chain, 69600 per kthread [ 115.463907][ T6636] CPU: 0 UID: 0 PID: 6636 Comm: syz.1.217 Not tainted syzkaller #0 PREEMPT(full) [ 115.463937][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.463951][ T6636] Call Trace: [ 115.463959][ T6636] [ 115.463969][ T6636] dump_stack_lvl+0xe8/0x150 [ 115.464004][ T6636] should_fail_ex+0x412/0x560 [ 115.464034][ T6636] _copy_from_user+0x2d/0xb0 [ 115.464066][ T6636] bpf_prog_test_run_xdp+0xde3/0x1160 [ 115.464112][ T6636] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 115.464145][ T6636] ? __fget_files+0x2a/0x420 [ 115.464181][ T6636] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 115.464210][ T6636] bpf_prog_test_run+0x2c7/0x340 [ 115.464235][ T6636] __sys_bpf+0x643/0x950 [ 115.464270][ T6636] ? __pfx___sys_bpf+0x10/0x10 [ 115.464318][ T6636] ? ksys_write+0x242/0x270 [ 115.464343][ T6636] ? __pfx_ksys_write+0x10/0x10 [ 115.464373][ T6636] __x64_sys_bpf+0x7c/0x90 [ 115.464403][ T6636] do_syscall_64+0x14d/0xf80 [ 115.464423][ T6636] ? trace_irq_disable+0x3b/0x150 [ 115.464453][ T6636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.464475][ T6636] ? clear_bhb_loop+0x40/0x90 [ 115.464501][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.464529][ T6636] RIP: 0033:0x7f7337f9c799 [ 115.464550][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.464568][ T6636] RSP: 002b:00007f7338de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.464599][ T6636] RAX: ffffffffffffffda RBX: 00007f7338215fa0 RCX: 00007f7337f9c799 [ 115.464614][ T6636] RDX: 000000000000002c RSI: 0000200000000280 RDI: 000000000000000a [ 115.464627][ T6636] RBP: 00007f7338de5090 R08: 0000000000000000 R09: 0000000000000000 [ 115.464640][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.464651][ T6636] R13: 00007f7338216038 R14: 00007f7338215fa0 R15: 00007ffeda377678 [ 115.464685][ T6636] [ 115.671882][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.681919][ T6628] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 115.888916][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.897422][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.015676][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.030103][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.050946][ T6644] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 116.243893][ T6651] bond0: option miimon: invalid value (18446744073334219755) [ 116.251577][ T6651] bond0: option miimon: allowed values 0 - 2147483647 [ 116.267740][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.288969][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.336098][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.381485][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.620891][ T6671] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.697644][ T6680] __nla_validate_parse: 5 callbacks suppressed [ 116.697664][ T6680] netlink: 44 bytes leftover after parsing attributes in process `syz.1.229'. [ 116.745052][ T6671] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.855493][ T6671] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.929247][ T6686] FAULT_INJECTION: forcing a failure. [ 116.929247][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 116.953807][ T6671] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.011231][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.0.231 Not tainted syzkaller #0 PREEMPT(full) [ 117.011261][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.011274][ T6686] Call Trace: [ 117.011282][ T6686] [ 117.011291][ T6686] dump_stack_lvl+0xe8/0x150 [ 117.011326][ T6686] should_fail_ex+0x412/0x560 [ 117.011358][ T6686] should_failslab+0xa8/0x100 [ 117.011386][ T6686] __kmalloc_node_noprof+0xf0/0x7c0 [ 117.011409][ T6686] ? alloc_slab_obj_exts+0x4b/0x1b0 [ 117.011447][ T6686] alloc_slab_obj_exts+0x4b/0x1b0 [ 117.011483][ T6686] __memcg_slab_post_alloc_hook+0x53c/0xa80 [ 117.011533][ T6686] kmem_cache_alloc_node_noprof+0x40e/0x690 [ 117.011570][ T6686] ? __alloc_skb+0x1d0/0x7d0 [ 117.011596][ T6686] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 117.011635][ T6686] __alloc_skb+0x1d0/0x7d0 [ 117.011668][ T6686] alloc_skb_with_frags+0xca/0x890 [ 117.011708][ T6686] ? __pfx_css_rstat_updated+0x10/0x10 [ 117.011733][ T6686] ? __lock_acquire+0x6b5/0x2cf0 [ 117.011767][ T6686] sock_alloc_send_pskb+0x878/0x990 [ 117.011820][ T6686] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 117.011859][ T6686] ? __lock_acquire+0x6b5/0x2cf0 [ 117.011890][ T6686] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 117.011919][ T6686] unix_dgram_sendmsg+0x460/0x18e0 [ 117.011970][ T6686] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 117.011995][ T6686] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 117.012028][ T6686] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.012073][ T6686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.012097][ T6686] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 117.012122][ T6686] ____sys_sendmsg+0xa68/0xad0 [ 117.012163][ T6686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.012205][ T6686] ? import_iovec+0x73/0xa0 [ 117.012237][ T6686] ___sys_sendmsg+0x2a5/0x360 [ 117.012279][ T6686] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.012356][ T6686] __sys_sendmmsg+0x27c/0x4e0 [ 117.012394][ T6686] ? __pfx___sys_sendmmsg+0x10/0x10 [ 117.012423][ T6686] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 117.012472][ T6686] ? ksys_write+0x242/0x270 [ 117.012496][ T6686] ? __pfx_ksys_write+0x10/0x10 [ 117.012523][ T6686] __x64_sys_sendmmsg+0xa0/0xc0 [ 117.012557][ T6686] do_syscall_64+0x14d/0xf80 [ 117.012576][ T6686] ? trace_irq_disable+0x3b/0x150 [ 117.012605][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.012627][ T6686] ? clear_bhb_loop+0x40/0x90 [ 117.012654][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.012674][ T6686] RIP: 0033:0x7fc96779c799 [ 117.012703][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.012720][ T6686] RSP: 002b:00007fc968661028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.012743][ T6686] RAX: ffffffffffffffda RBX: 00007fc967a15fa0 RCX: 00007fc96779c799 [ 117.012758][ T6686] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 117.012773][ T6686] RBP: 00007fc968661090 R08: 0000000000000000 R09: 0000000000000000 [ 117.012786][ T6686] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 117.012798][ T6686] R13: 00007fc967a16038 R14: 00007fc967a15fa0 R15: 00007ffe6c0b5c58 [ 117.012829][ T6686] [ 117.384763][ T6689] syzkaller0: entered promiscuous mode [ 117.405554][ T6689] syzkaller0: entered allmulticast mode [ 117.419625][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.473903][ T6697] netlink: 'syz.4.235': attribute type 28 has an invalid length. [ 117.484886][ T6697] netlink: 'syz.4.235': attribute type 3 has an invalid length. [ 117.535077][ T6697] netlink: 132 bytes leftover after parsing attributes in process `syz.4.235'. [ 117.551975][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.577207][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.599532][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 117.611186][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.759547][ T6710] FAULT_INJECTION: forcing a failure. [ 117.759547][ T6710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.773104][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.4.238 Not tainted syzkaller #0 PREEMPT(full) [ 117.773133][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.773163][ T6710] Call Trace: [ 117.773171][ T6710] [ 117.773179][ T6710] dump_stack_lvl+0xe8/0x150 [ 117.773214][ T6710] should_fail_ex+0x412/0x560 [ 117.773244][ T6710] _copy_from_iter+0x1d3/0x1670 [ 117.773276][ T6710] ? rcu_is_watching+0x15/0xb0 [ 117.773312][ T6710] ? __pfx__copy_from_iter+0x10/0x10 [ 117.773346][ T6710] ? netlink_sendmsg+0x650/0xb40 [ 117.773371][ T6710] ? skb_put+0x11b/0x210 [ 117.773403][ T6710] netlink_sendmsg+0x6c0/0xb40 [ 117.773439][ T6710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.773470][ T6710] ? aa_sock_msg_perm+0xf1/0x1b0 [ 117.773497][ T6710] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.773522][ T6710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.773548][ T6710] ____sys_sendmsg+0xa68/0xad0 [ 117.773591][ T6710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.773633][ T6710] ? import_iovec+0x73/0xa0 [ 117.773667][ T6710] ___sys_sendmsg+0x2a5/0x360 [ 117.773705][ T6710] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.773775][ T6710] ? __fget_files+0x2a/0x420 [ 117.773803][ T6710] ? __fget_files+0x3a0/0x420 [ 117.773844][ T6710] __x64_sys_sendmsg+0x1bd/0x2a0 [ 117.773879][ T6710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.773922][ T6710] ? __pfx_ksys_write+0x10/0x10 [ 117.773956][ T6710] do_syscall_64+0x14d/0xf80 [ 117.773975][ T6710] ? trace_irq_disable+0x3b/0x150 [ 117.774005][ T6710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.774027][ T6710] ? clear_bhb_loop+0x40/0x90 [ 117.774053][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.774073][ T6710] RIP: 0033:0x7fe75d79c799 [ 117.774102][ T6710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.774119][ T6710] RSP: 002b:00007fe75b9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.774141][ T6710] RAX: ffffffffffffffda RBX: 00007fe75da15fa0 RCX: 00007fe75d79c799 [ 117.774156][ T6710] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 117.774170][ T6710] RBP: 00007fe75b9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.774182][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.774194][ T6710] R13: 00007fe75da16038 R14: 00007fe75da15fa0 R15: 00007ffed1f89048 [ 117.774227][ T6710] [ 118.244589][ T6693] team0: Port device team_slave_0 removed [ 118.339810][ T6706] batman_adv: batadv0: Adding interface: ipvlan2 [ 118.347885][ T6721] FAULT_INJECTION: forcing a failure. [ 118.347885][ T6721] name failslab, interval 1, probability 0, space 0, times 0 [ 118.362199][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.2.243 Not tainted syzkaller #0 PREEMPT(full) [ 118.362226][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.362238][ T6721] Call Trace: [ 118.362246][ T6721] [ 118.362254][ T6721] dump_stack_lvl+0xe8/0x150 [ 118.362290][ T6721] should_fail_ex+0x412/0x560 [ 118.362321][ T6721] should_failslab+0xa8/0x100 [ 118.362360][ T6721] __kmalloc_cache_noprof+0x88/0x660 [ 118.362383][ T6721] ? sctp_v6_cmp_addr+0x15/0xd0 [ 118.362409][ T6721] ? sctp_add_bind_addr+0x8c/0x370 [ 118.362441][ T6721] sctp_add_bind_addr+0x8c/0x370 [ 118.362471][ T6721] sctp_copy_local_addr_list+0x314/0x4f0 [ 118.362501][ T6721] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 118.362527][ T6721] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 118.362556][ T6721] ? sctp_v6_is_any+0x64/0x80 [ 118.362584][ T6721] ? sctp_copy_one_addr+0x93/0x360 [ 118.362614][ T6721] sctp_bind_addr_copy+0xb3/0x3c0 [ 118.362640][ T6721] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 118.362678][ T6721] sctp_connect_new_asoc+0x2ff/0x6b0 [ 118.362714][ T6721] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 118.362747][ T6721] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 118.362779][ T6721] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 118.362807][ T6721] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 118.362839][ T6721] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 118.362864][ T6721] ? security_sctp_bind_connect+0x7e/0x2c0 [ 118.362902][ T6721] sctp_sendmsg+0x1528/0x2c10 [ 118.362949][ T6721] ? __pfx_sctp_sendmsg+0x10/0x10 [ 118.362983][ T6721] ? aa_sk_perm+0x6d5/0x900 [ 118.363016][ T6721] ? __pfx_aa_sk_perm+0x10/0x10 [ 118.363044][ T6721] ? sock_rps_record_flow+0x19/0x350 [ 118.363079][ T6721] ? inet_sendmsg+0x2f4/0x370 [ 118.363108][ T6721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.363134][ T6721] __sys_sendto+0x627/0x7a0 [ 118.363167][ T6721] ? __pfx___sys_sendto+0x10/0x10 [ 118.363194][ T6721] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 118.363230][ T6721] ? __fget_files+0x3a0/0x420 [ 118.363271][ T6721] ? ksys_write+0x242/0x270 [ 118.363295][ T6721] ? __pfx_ksys_write+0x10/0x10 [ 118.363323][ T6721] __x64_sys_sendto+0xde/0x100 [ 118.363365][ T6721] do_syscall_64+0x14d/0xf80 [ 118.363385][ T6721] ? trace_irq_disable+0x3b/0x150 [ 118.363415][ T6721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.363437][ T6721] ? clear_bhb_loop+0x40/0x90 [ 118.363463][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.363484][ T6721] RIP: 0033:0x7f0e1079c799 [ 118.363505][ T6721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.363523][ T6721] RSP: 002b:00007f0e11669028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 118.363545][ T6721] RAX: ffffffffffffffda RBX: 00007f0e10a15fa0 RCX: 00007f0e1079c799 [ 118.363559][ T6721] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 118.363572][ T6721] RBP: 00007f0e11669090 R08: 0000200000000200 R09: 000000000000001c [ 118.363585][ T6721] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000002 [ 118.363597][ T6721] R13: 00007f0e10a16038 R14: 00007f0e10a15fa0 R15: 00007ffe97674c88 [ 118.363631][ T6721] [ 118.684888][ T6706] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.710681][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.721397][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.732049][ T6706] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 118.767278][ T6722] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 118.775031][ T6722] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.240'. [ 118.807916][ T6719] netlink: 'syz.0.241': attribute type 2 has an invalid length. [ 118.934684][ T6719] !: entered promiscuous mode [ 118.953060][ T6733] x_tables: (null)_tables: pkttype.0 match: invalid size 8 (kernel) != (user) 16 [ 119.088920][ T6735] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.167979][ T6741] netlink: 60 bytes leftover after parsing attributes in process `syz.3.249'. [ 119.203085][ T6735] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.222981][ T6741] netlink: 60 bytes leftover after parsing attributes in process `syz.3.249'. [ 119.274424][ T6735] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.367540][ T6735] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.434367][ T6751] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 119.545238][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'. [ 119.746528][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.817491][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.987723][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.041350][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.286776][ T6786] ipt_REJECT: TCP_RESET invalid for non-tcp [ 120.293387][ T6786] FAULT_INJECTION: forcing a failure. [ 120.293387][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 120.316322][ T6786] CPU: 1 UID: 0 PID: 6786 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT(full) [ 120.316352][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.316365][ T6786] Call Trace: [ 120.316374][ T6786] [ 120.316383][ T6786] dump_stack_lvl+0xe8/0x150 [ 120.316419][ T6786] should_fail_ex+0x412/0x560 [ 120.316451][ T6786] should_failslab+0xa8/0x100 [ 120.316480][ T6786] __kvmalloc_node_noprof+0x178/0x8a0 [ 120.316505][ T6786] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 120.316544][ T6786] __nf_hook_entries_try_shrink+0x328/0x700 [ 120.316587][ T6786] __nf_unregister_net_hook+0x4cc/0x6f0 [ 120.316627][ T6786] nf_unregister_net_hooks+0xcb/0x140 [ 120.316661][ T6786] nf_defrag_ipv4_disable+0x95/0xe0 [ 120.316693][ T6786] ? __pfx_socket_mt_destroy+0x10/0x10 [ 120.316722][ T6786] translate_table+0x1a72/0x2110 [ 120.316770][ T6786] ? __pfx_translate_table+0x10/0x10 [ 120.316819][ T6786] ? _copy_from_user+0x94/0xb0 [ 120.316855][ T6786] do_ipt_set_ctl+0x9f5/0xe00 [ 120.316880][ T6786] ? rcu_is_watching+0x15/0xb0 [ 120.316910][ T6786] ? trace_contention_end+0x3d/0x150 [ 120.316944][ T6786] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 120.316985][ T6786] ? __pfx___mutex_lock+0x10/0x10 [ 120.317008][ T6786] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.317038][ T6786] ? __pfx_aa_sk_perm+0x10/0x10 [ 120.317068][ T6786] nf_setsockopt+0x26f/0x290 [ 120.317105][ T6786] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 120.317134][ T6786] do_sock_setsockopt+0x17c/0x1b0 [ 120.317170][ T6786] __x64_sys_setsockopt+0x13d/0x1b0 [ 120.317216][ T6786] do_syscall_64+0x14d/0xf80 [ 120.317236][ T6786] ? trace_irq_disable+0x3b/0x150 [ 120.317267][ T6786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.317290][ T6786] ? clear_bhb_loop+0x40/0x90 [ 120.317316][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.317338][ T6786] RIP: 0033:0x7f7337f9c799 [ 120.317359][ T6786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.317376][ T6786] RSP: 002b:00007f7338de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 120.317399][ T6786] RAX: ffffffffffffffda RBX: 00007f7338215fa0 RCX: 00007f7337f9c799 [ 120.317414][ T6786] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 120.317427][ T6786] RBP: 00007f7338de5090 R08: 00000000000003e0 R09: 0000000000000000 [ 120.317440][ T6786] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 120.317458][ T6786] R13: 00007f7338216038 R14: 00007f7338215fa0 R15: 00007ffeda377678 [ 120.317493][ T6786] [ 120.595198][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 120.658636][ T6791] IPv6: addrconf: prefix option has invalid lifetime [ 120.925578][ T6748] dvmrp0: entered allmulticast mode [ 121.057029][ T6800] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 122.167060][ T6836] FAULT_INJECTION: forcing a failure. [ 122.167060][ T6836] name failslab, interval 1, probability 0, space 0, times 0 [ 122.180337][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.2.276 Not tainted syzkaller #0 PREEMPT(full) [ 122.180358][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.180367][ T6836] Call Trace: [ 122.180373][ T6836] [ 122.180379][ T6836] dump_stack_lvl+0xe8/0x150 [ 122.180406][ T6836] should_fail_ex+0x412/0x560 [ 122.180428][ T6836] should_failslab+0xa8/0x100 [ 122.180446][ T6836] ? ovs_flow_alloc+0x24/0x1f0 [ 122.180464][ T6836] kmem_cache_alloc_noprof+0x87/0x650 [ 122.180496][ T6836] ovs_flow_alloc+0x24/0x1f0 [ 122.180515][ T6836] ovs_flow_cmd_new+0x2b9/0xe80 [ 122.180541][ T6836] ? kasan_save_track+0x4f/0x80 [ 122.180554][ T6836] ? kasan_save_track+0x3e/0x80 [ 122.180569][ T6836] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 122.180635][ T6836] ? __nla_parse+0x40/0x60 [ 122.180658][ T6836] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 122.180714][ T6836] genl_family_rcv_msg_doit+0x22a/0x330 [ 122.180756][ T6836] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 122.180804][ T6836] ? bpf_lsm_capable+0x9/0x20 [ 122.180825][ T6836] ? security_capable+0x7e/0x2c0 [ 122.180847][ T6836] genl_rcv_msg+0x61c/0x7a0 [ 122.180875][ T6836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.180898][ T6836] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 122.180920][ T6836] ? __lock_acquire+0x6b5/0x2cf0 [ 122.180949][ T6836] netlink_rcv_skb+0x232/0x4b0 [ 122.180969][ T6836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.180993][ T6836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.181025][ T6836] ? down_read+0x272/0x2e0 [ 122.181040][ T6836] ? genl_rcv+0xd/0x40 [ 122.181064][ T6836] genl_rcv+0x28/0x40 [ 122.181085][ T6836] netlink_unicast+0x80f/0x9b0 [ 122.181108][ T6836] ? __pfx_netlink_unicast+0x10/0x10 [ 122.181124][ T6836] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 122.181142][ T6836] ? netlink_sendmsg+0x650/0xb40 [ 122.181160][ T6836] ? skb_put+0x11b/0x210 [ 122.181184][ T6836] netlink_sendmsg+0x813/0xb40 [ 122.181263][ T6836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.181296][ T6836] ? aa_sock_msg_perm+0xf1/0x1b0 [ 122.181329][ T6836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.181347][ T6836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.181366][ T6836] ____sys_sendmsg+0xa68/0xad0 [ 122.181396][ T6836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.181426][ T6836] ? import_iovec+0x73/0xa0 [ 122.181450][ T6836] ___sys_sendmsg+0x2a5/0x360 [ 122.181478][ T6836] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.181528][ T6836] ? __fget_files+0x2a/0x420 [ 122.181549][ T6836] ? __fget_files+0x3a0/0x420 [ 122.181578][ T6836] __x64_sys_sendmsg+0x1bd/0x2a0 [ 122.181603][ T6836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.181634][ T6836] ? __pfx_ksys_write+0x10/0x10 [ 122.181658][ T6836] do_syscall_64+0x14d/0xf80 [ 122.181672][ T6836] ? trace_irq_disable+0x3b/0x150 [ 122.181700][ T6836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.181715][ T6836] ? clear_bhb_loop+0x40/0x90 [ 122.181734][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.181749][ T6836] RIP: 0033:0x7f0e1079c799 [ 122.181764][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.181777][ T6836] RSP: 002b:00007f0e11669028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.181793][ T6836] RAX: ffffffffffffffda RBX: 00007f0e10a15fa0 RCX: 00007f0e1079c799 [ 122.181804][ T6836] RDX: 0000000020008054 RSI: 0000200000000000 RDI: 0000000000000003 [ 122.181814][ T6836] RBP: 00007f0e11669090 R08: 0000000000000000 R09: 0000000000000000 [ 122.181823][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.181832][ T6836] R13: 00007f0e10a16038 R14: 00007f0e10a15fa0 R15: 00007ffe97674c88 [ 122.181856][ T6836] [ 122.550419][ T6761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.591353][ T480] dvmrp0: left allmulticast mode [ 122.761130][ T6841] FAULT_INJECTION: forcing a failure. [ 122.761130][ T6841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.786727][ T6841] CPU: 1 UID: 0 PID: 6841 Comm: syz.2.277 Not tainted syzkaller #0 PREEMPT(full) [ 122.786770][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.786784][ T6841] Call Trace: [ 122.786792][ T6841] [ 122.786801][ T6841] dump_stack_lvl+0xe8/0x150 [ 122.786837][ T6841] should_fail_ex+0x412/0x560 [ 122.786868][ T6841] _copy_to_user+0x31/0xb0 [ 122.786901][ T6841] simple_read_from_buffer+0xe1/0x170 [ 122.786936][ T6841] proc_fail_nth_read+0x1bb/0x230 [ 122.786969][ T6841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.787002][ T6841] ? rw_verify_area+0x2a6/0x4d0 [ 122.787022][ T6841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.787053][ T6841] vfs_read+0x20c/0xa70 [ 122.787073][ T6841] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.787099][ T6841] ? sco_sock_connect+0xd8/0xab0 [ 122.787125][ T6841] ? __pfx_vfs_read+0x10/0x10 [ 122.787147][ T6841] ? bpf_lsm_socket_connect+0x9/0x20 [ 122.787172][ T6841] ? __sys_connect+0x335/0x450 [ 122.787204][ T6841] ? __pfx___sys_connect+0x10/0x10 [ 122.787239][ T6841] ksys_read+0x150/0x270 [ 122.787263][ T6841] ? __pfx_ksys_read+0x10/0x10 [ 122.787297][ T6841] do_syscall_64+0x14d/0xf80 [ 122.787317][ T6841] ? trace_irq_disable+0x3b/0x150 [ 122.787347][ T6841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.787368][ T6841] ? clear_bhb_loop+0x40/0x90 [ 122.787395][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.787416][ T6841] RIP: 0033:0x7f0e1075cfce [ 122.787436][ T6841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.787453][ T6841] RSP: 002b:00007f0e11668fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.787476][ T6841] RAX: ffffffffffffffda RBX: 00007f0e116696c0 RCX: 00007f0e1075cfce [ 122.787492][ T6841] RDX: 000000000000000f RSI: 00007f0e116690a0 RDI: 0000000000000003 [ 122.787505][ T6841] RBP: 00007f0e11669090 R08: 0000000000000000 R09: 0000000000000000 [ 122.787518][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.787530][ T6841] R13: 00007f0e10a16038 R14: 00007f0e10a15fa0 R15: 00007ffe97674c88 [ 122.787565][ T6841] [ 123.125193][ T6843] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 123.133932][ T6843] netlink: 248 bytes leftover after parsing attributes in process `syz.3.279'. [ 123.418290][ T6860] sctp: [Deprecated]: syz.2.283 (pid 6860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.418290][ T6860] Use struct sctp_sack_info instead [ 123.449709][ T6858] veth1_macvtap: left promiscuous mode [ 123.669634][ T6874] FAULT_INJECTION: forcing a failure. [ 123.669634][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 123.702848][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.4.287 Not tainted syzkaller #0 PREEMPT(full) [ 123.702876][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.702889][ T6874] Call Trace: [ 123.702897][ T6874] [ 123.702906][ T6874] dump_stack_lvl+0xe8/0x150 [ 123.702942][ T6874] should_fail_ex+0x412/0x560 [ 123.702974][ T6874] should_failslab+0xa8/0x100 [ 123.703003][ T6874] __kmalloc_cache_noprof+0x88/0x660 [ 123.703025][ T6874] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 123.703053][ T6874] ? sctp_add_bind_addr+0x8c/0x370 [ 123.703082][ T6874] sctp_add_bind_addr+0x8c/0x370 [ 123.703113][ T6874] sctp_copy_local_addr_list+0x314/0x4f0 [ 123.703144][ T6874] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 123.703171][ T6874] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 123.703200][ T6874] ? sctp_v6_is_any+0x64/0x80 [ 123.703229][ T6874] ? sctp_copy_one_addr+0x93/0x360 [ 123.703258][ T6874] sctp_bind_addr_copy+0xb3/0x3c0 [ 123.703285][ T6874] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 123.703329][ T6874] sctp_connect_new_asoc+0x2ff/0x6b0 [ 123.703364][ T6874] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 123.703397][ T6874] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 123.703429][ T6874] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 123.703459][ T6874] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 123.703499][ T6874] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 123.703526][ T6874] ? security_sctp_bind_connect+0x7e/0x2c0 [ 123.703565][ T6874] sctp_sendmsg+0x1528/0x2c10 [ 123.703613][ T6874] ? __pfx_sctp_sendmsg+0x10/0x10 [ 123.703648][ T6874] ? aa_sk_perm+0x6d5/0x900 [ 123.703682][ T6874] ? __pfx_aa_sk_perm+0x10/0x10 [ 123.703710][ T6874] ? sock_rps_record_flow+0x19/0x350 [ 123.703746][ T6874] ? inet_sendmsg+0x2f4/0x370 [ 123.703776][ T6874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.703803][ T6874] __sys_sendto+0x627/0x7a0 [ 123.703834][ T6874] ? __pfx___sys_sendto+0x10/0x10 [ 123.703861][ T6874] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 123.703896][ T6874] ? __fget_files+0x3a0/0x420 [ 123.703938][ T6874] ? ksys_write+0x242/0x270 [ 123.703961][ T6874] ? __pfx_ksys_write+0x10/0x10 [ 123.703988][ T6874] __x64_sys_sendto+0xde/0x100 [ 123.704020][ T6874] do_syscall_64+0x14d/0xf80 [ 123.704039][ T6874] ? trace_irq_disable+0x3b/0x150 [ 123.704068][ T6874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.704090][ T6874] ? clear_bhb_loop+0x40/0x90 [ 123.704115][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.704136][ T6874] RIP: 0033:0x7fe75d79c799 [ 123.704156][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.704173][ T6874] RSP: 002b:00007fe75b9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 123.704195][ T6874] RAX: ffffffffffffffda RBX: 00007fe75da16090 RCX: 00007fe75d79c799 [ 123.704210][ T6874] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 123.704224][ T6874] RBP: 00007fe75b9d5090 R08: 0000200000000200 R09: 000000000000001c [ 123.704238][ T6874] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000002 [ 123.704251][ T6874] R13: 00007fe75da16128 R14: 00007fe75da16090 R15: 00007ffed1f89048 [ 123.704286][ T6874] [ 124.403900][ T6890] veth1_macvtap: left promiscuous mode [ 124.583895][ T6908] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.301'. [ 124.689227][ T6909] xt_bpf: check failed: parse error [ 124.724484][ T6905] lo speed is unknown, defaulting to 1000 [ 124.746188][ T6905] lo speed is unknown, defaulting to 1000 [ 124.752824][ T6905] lo speed is unknown, defaulting to 1000 [ 124.791958][ T6905] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 124.822388][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.304'. [ 124.921212][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.930769][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.065120][ T6914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.084168][ T6914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.247184][ T6905] lo speed is unknown, defaulting to 1000 [ 125.258314][ T480] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.281296][ T480] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.302099][ T6905] lo speed is unknown, defaulting to 1000 [ 125.310912][ T480] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.326442][ T480] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.355926][ T6905] lo speed is unknown, defaulting to 1000 [ 125.367324][ T6905] lo speed is unknown, defaulting to 1000 [ 125.426480][ T6905] lo speed is unknown, defaulting to 1000 [ 125.519173][ T6925] netlink: 'syz.2.308': attribute type 3 has an invalid length. [ 125.539022][ T6925] netlink: 'syz.2.308': attribute type 2 has an invalid length. [ 125.549187][ T6925] netlink: 'syz.2.308': attribute type 2 has an invalid length. [ 125.557047][ T6923] batadv0: entered promiscuous mode [ 125.562625][ T6923] vlan0: entered promiscuous mode [ 125.593618][ T6925] netlink: 68 bytes leftover after parsing attributes in process `syz.2.308'. [ 125.929833][ T6941] netlink: 72 bytes leftover after parsing attributes in process `syz.2.314'. [ 125.958182][ T6938] lo speed is unknown, defaulting to 1000 [ 126.083934][ T6946] ipt_ECN: cannot use operation on non-tcp rule [ 126.116809][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 126.159221][ T6935] netlink: 'syz.3.311': attribute type 32 has an invalid length. [ 126.196971][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'. [ 126.277529][ T6935] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 126.295954][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 126.394926][ T6954] team0: Port device team_slave_0 removed [ 126.402294][ T6959] xt_bpf: check failed: parse error [ 126.428200][ T6959] siw: device registration error -23 [ 126.469866][ T6950] batman_adv: batadv0: Adding interface: ipvlan2 [ 126.492825][ T6950] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.519387][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.530086][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.556423][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 126.575600][ T6950] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 126.618663][ T6943] lo speed is unknown, defaulting to 1000 [ 126.667767][ T6953] batman_adv: batadv0: Adding interface: ipvlan3 [ 126.674178][ T6953] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.737735][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.766886][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.798934][ T6953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 126.865866][ T6953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.875739][ T6953] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 127.087562][ T6982] netlink: 44 bytes leftover after parsing attributes in process `syz.4.325'. [ 127.102664][ T6982] netlink: 'syz.4.325': attribute type 5 has an invalid length. [ 127.157462][ T6973] lo speed is unknown, defaulting to 1000 [ 127.747296][ T1010] nci: nci_rx_work: unknown MT 0x7 [ 127.774089][ T7007] xt_bpf: check failed: parse error [ 127.791902][ T7007] siw: device registration error -23 [ 127.864164][ T7004] lo speed is unknown, defaulting to 1000 [ 128.149715][ T7029] __nla_validate_parse: 1 callbacks suppressed [ 128.149734][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 128.217009][ T7029] batman_adv: batadv0: Adding interface: ipvlan3 [ 128.245105][ T7029] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.288248][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.313741][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.330814][ T7029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 128.352161][ T7029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.362395][ T7029] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 128.480998][ T7038] lo speed is unknown, defaulting to 1000 [ 128.983069][ T7056] xt_bpf: check failed: parse error [ 129.062829][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 129.073179][ T7058] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 129.128914][ T7060] netlink: 'syz.0.345': attribute type 10 has an invalid length. [ 129.143228][ T7060] team0: Port device dummy0 added [ 129.156999][ T7060] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 129.225430][ T7060] netlink: 'syz.0.345': attribute type 10 has an invalid length. [ 129.238465][ T7060] team0: Port device dummy0 removed [ 129.247487][ T7060] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.416448][ T6998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.614619][ T7072] SET target dimension over the limit! [ 130.860245][ T7087] xt_recent: hitcount (4194304) is larger than allowed maximum (65535) [ 130.902822][ T7086] xt_bpf: check failed: parse error [ 130.911952][ T7087] netlink: 36 bytes leftover after parsing attributes in process `syz.0.356'. [ 130.930836][ T7086] siw: device registration error -23 [ 130.938971][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 130.963986][ T7084] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 131.074511][ T7081] syzkaller1: entered promiscuous mode [ 131.105929][ T7081] syzkaller1: entered allmulticast mode [ 131.360984][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 131.440584][ T7096] batman_adv: batadv0: Adding interface: ipvlan4 [ 131.468621][ T7096] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.512360][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.525001][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.602191][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 131.652310][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.664180][ T7124] netlink: 52 bytes leftover after parsing attributes in process `syz.1.365'. [ 131.675229][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 131.693678][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.741619][ T7096] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 131.848120][ T7131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.366'. [ 131.956451][ T7136] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.367'. [ 132.053663][ T7139] xt_bpf: check failed: parse error [ 132.087062][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'. [ 132.087817][ T7139] siw: device registration error -23 [ 132.105975][ T7141] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 132.951402][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.964243][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.179476][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 133.450974][ T7168] FAULT_INJECTION: forcing a failure. [ 133.450974][ T7168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.470695][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.1.377 Not tainted syzkaller #0 PREEMPT(full) [ 133.470723][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.470736][ T7168] Call Trace: [ 133.470744][ T7168] [ 133.470753][ T7168] dump_stack_lvl+0xe8/0x150 [ 133.470787][ T7168] should_fail_ex+0x412/0x560 [ 133.470816][ T7168] _copy_from_user+0x2d/0xb0 [ 133.470847][ T7168] csum_and_copy_from_iter_full+0x491/0x1f00 [ 133.470899][ T7168] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 133.470938][ T7168] ? rcu_is_watching+0x15/0xb0 [ 133.470966][ T7168] ? trace_kmalloc+0x2a/0x110 [ 133.470990][ T7168] ip_generic_getfrag+0x149/0x2d0 [ 133.471022][ T7168] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 133.471052][ T7168] ? __alloc_skb+0x4e5/0x7d0 [ 133.471076][ T7168] ? skb_put+0x11b/0x210 [ 133.471106][ T7168] __ip_append_data+0x31af/0x3f30 [ 133.471154][ T7168] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 133.471190][ T7168] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 133.471238][ T7168] ? __pfx___ip_append_data+0x10/0x10 [ 133.471277][ T7168] ? do_raw_spin_lock+0x12b/0x2f0 [ 133.471300][ T7168] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 133.471323][ T7168] ip_append_data+0x10d/0x190 [ 133.471354][ T7168] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 133.471384][ T7168] udp_sendmsg+0x466/0x22f0 [ 133.471432][ T7168] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 133.471463][ T7168] ? __pfx_udp_sendmsg+0x10/0x10 [ 133.471524][ T7168] ? __pfx_aa_sk_perm+0x10/0x10 [ 133.471545][ T7168] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 133.471575][ T7168] ? sock_rps_record_flow+0x19/0x350 [ 133.471607][ T7168] ? inet_sendmsg+0x29c/0x370 [ 133.471646][ T7168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.471671][ T7168] ____sys_sendmsg+0x894/0xad0 [ 133.471711][ T7168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.471752][ T7168] ? import_iovec+0x73/0xa0 [ 133.471784][ T7168] ___sys_sendmsg+0x2a5/0x360 [ 133.471820][ T7168] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.471901][ T7168] __sys_sendmmsg+0x27c/0x4e0 [ 133.471934][ T7168] ? __pfx___sys_sendmmsg+0x10/0x10 [ 133.471960][ T7168] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 133.472007][ T7168] ? ksys_write+0x242/0x270 [ 133.472031][ T7168] ? __pfx_ksys_write+0x10/0x10 [ 133.472060][ T7168] __x64_sys_sendmmsg+0xa0/0xc0 [ 133.472095][ T7168] do_syscall_64+0x14d/0xf80 [ 133.472114][ T7168] ? trace_irq_disable+0x3b/0x150 [ 133.472144][ T7168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.472166][ T7168] ? clear_bhb_loop+0x40/0x90 [ 133.472192][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.472213][ T7168] RIP: 0033:0x7f7337f9c799 [ 133.472242][ T7168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.472260][ T7168] RSP: 002b:00007f7338de5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.472282][ T7168] RAX: ffffffffffffffda RBX: 00007f7338215fa0 RCX: 00007f7337f9c799 [ 133.472298][ T7168] RDX: 0000000000000003 RSI: 0000200000004540 RDI: 0000000000000003 [ 133.472311][ T7168] RBP: 00007f7338de5090 R08: 0000000000000000 R09: 0000000000000000 [ 133.472323][ T7168] R10: 00000000240080e4 R11: 0000000000000246 R12: 0000000000000002 [ 133.472336][ T7168] R13: 00007f7338216038 R14: 00007f7338215fa0 R15: 00007ffeda377678 [ 133.472368][ T7168] [ 134.172038][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 134.335318][ T7179] batman_adv: batadv0: Adding interface: ipvlan3 [ 134.398815][ T7182] FAULT_INJECTION: forcing a failure. [ 134.398815][ T7182] name failslab, interval 1, probability 0, space 0, times 0 [ 134.427224][ T7179] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.453643][ T7182] CPU: 0 UID: 0 PID: 7182 Comm: syz.3.380 Not tainted syzkaller #0 PREEMPT(full) [ 134.453671][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.453685][ T7182] Call Trace: [ 134.453693][ T7182] [ 134.453702][ T7182] dump_stack_lvl+0xe8/0x150 [ 134.453736][ T7182] should_fail_ex+0x412/0x560 [ 134.453767][ T7182] should_failslab+0xa8/0x100 [ 134.453795][ T7182] __kmalloc_node_noprof+0xf0/0x7c0 [ 134.453819][ T7182] ? alloc_slab_obj_exts+0x4b/0x1b0 [ 134.453856][ T7182] alloc_slab_obj_exts+0x4b/0x1b0 [ 134.453892][ T7182] __memcg_slab_post_alloc_hook+0x53c/0xa80 [ 134.453942][ T7182] kmem_cache_alloc_node_noprof+0x40e/0x690 [ 134.453976][ T7182] ? __alloc_skb+0x1d0/0x7d0 [ 134.454002][ T7182] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 134.454039][ T7182] __alloc_skb+0x1d0/0x7d0 [ 134.454070][ T7182] alloc_skb_with_frags+0xca/0x890 [ 134.454107][ T7182] ? __lock_acquire+0x6b5/0x2cf0 [ 134.454175][ T7182] sock_alloc_send_pskb+0x878/0x990 [ 134.454229][ T7182] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 134.454267][ T7182] ? sock_def_readable+0xae/0x580 [ 134.454295][ T7182] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 134.454324][ T7182] unix_dgram_sendmsg+0x460/0x18e0 [ 134.454377][ T7182] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 134.454408][ T7182] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 134.454440][ T7182] ? count_memcg_event_mm+0x21/0x260 [ 134.454472][ T7182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.454494][ T7182] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 134.454517][ T7182] ____sys_sendmsg+0xa68/0xad0 [ 134.454558][ T7182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.454598][ T7182] ? import_iovec+0x73/0xa0 [ 134.454631][ T7182] ___sys_sendmsg+0x2a5/0x360 [ 134.454666][ T7182] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.454716][ T7182] ? lockdep_hardirqs_on+0x7a/0x110 [ 134.454774][ T7182] __sys_sendmmsg+0x27c/0x4e0 [ 134.454810][ T7182] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.454838][ T7182] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 134.454897][ T7182] ? ksys_write+0x242/0x270 [ 134.454921][ T7182] ? __pfx_ksys_write+0x10/0x10 [ 134.454950][ T7182] __x64_sys_sendmmsg+0xa0/0xc0 [ 134.454985][ T7182] do_syscall_64+0x14d/0xf80 [ 134.455003][ T7182] ? trace_irq_disable+0x3b/0x150 [ 134.455032][ T7182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.455054][ T7182] ? clear_bhb_loop+0x40/0x90 [ 134.455079][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.455100][ T7182] RIP: 0033:0x7fe39eb9c799 [ 134.455120][ T7182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.455146][ T7182] RSP: 002b:00007fe39fac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.455169][ T7182] RAX: ffffffffffffffda RBX: 00007fe39ee15fa0 RCX: 00007fe39eb9c799 [ 134.455185][ T7182] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 134.455199][ T7182] RBP: 00007fe39fac4090 R08: 0000000000000000 R09: 0000000000000000 [ 134.455212][ T7182] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 134.455225][ T7182] R13: 00007fe39ee16038 R14: 00007fe39ee15fa0 R15: 00007ffe21332f88 [ 134.455258][ T7182] [ 134.460945][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.707977][ T7186] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.382'. [ 134.765974][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.816357][ T7186] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 134.846117][ T7179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 134.899967][ T7179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.919543][ T7179] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 134.997175][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 135.036819][ T7191] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 135.286209][ T7202] FAULT_INJECTION: forcing a failure. [ 135.286209][ T7202] name failslab, interval 1, probability 0, space 0, times 0 [ 135.310814][ T7202] CPU: 0 UID: 0 PID: 7202 Comm: syz.1.388 Not tainted syzkaller #0 PREEMPT(full) [ 135.310843][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.310856][ T7202] Call Trace: [ 135.310864][ T7202] [ 135.310873][ T7202] dump_stack_lvl+0xe8/0x150 [ 135.310909][ T7202] should_fail_ex+0x412/0x560 [ 135.310940][ T7202] should_failslab+0xa8/0x100 [ 135.310969][ T7202] __kmalloc_cache_noprof+0x88/0x660 [ 135.310994][ T7202] ? garp_init_applicant+0x181/0x430 [ 135.311016][ T7202] ? __kmalloc_cache_noprof+0x15b/0x660 [ 135.311043][ T7202] garp_init_applicant+0x181/0x430 [ 135.311070][ T7202] register_vlan_dev+0x223/0x800 [ 135.311111][ T7202] vlan_newlink+0x4b2/0x610 [ 135.311135][ T7202] ? __pfx_vlan_newlink+0x10/0x10 [ 135.311168][ T7202] rtnl_newlink_create+0x329/0xb70 [ 135.311201][ T7202] ? __pfx___nla_validate_parse+0x10/0x10 [ 135.311242][ T7202] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 135.311282][ T7202] ? __pfx___mutex_lock+0x10/0x10 [ 135.311316][ T7202] ? ns_capable+0x89/0xe0 [ 135.311348][ T7202] rtnl_newlink+0x1666/0x1be0 [ 135.311393][ T7202] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.311419][ T7202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.311481][ T7202] ? kasan_quarantine_put+0xbb/0x1f0 [ 135.311503][ T7202] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.311541][ T7202] ? kmem_cache_free+0x187/0x630 [ 135.311563][ T7202] ? nlmon_xmit+0xb0/0x100 [ 135.311607][ T7202] ? __lock_acquire+0x6b5/0x2cf0 [ 135.311641][ T7202] ? __local_bh_enable_ip+0xd0/0x130 [ 135.311670][ T7202] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.311703][ T7202] ? __dev_queue_xmit+0x28d/0x38d0 [ 135.311722][ T7202] ? __local_bh_enable_ip+0xd0/0x130 [ 135.311748][ T7202] ? __dev_queue_xmit+0x28d/0x38d0 [ 135.311796][ T7202] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.311824][ T7202] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 135.311856][ T7202] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 135.311882][ T7202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.311908][ T7202] ? ref_tracker_free+0x693/0x840 [ 135.311933][ T7202] ? __copy_skb_header+0xa3/0x4a0 [ 135.311967][ T7202] ? __pfx_ref_tracker_free+0x10/0x10 [ 135.312006][ T7202] netlink_rcv_skb+0x232/0x4b0 [ 135.312035][ T7202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.312065][ T7202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.312105][ T7202] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.312148][ T7202] netlink_unicast+0x80f/0x9b0 [ 135.312183][ T7202] ? __pfx_netlink_unicast+0x10/0x10 [ 135.312210][ T7202] ? netlink_sendmsg+0x650/0xb40 [ 135.312236][ T7202] ? skb_put+0x11b/0x210 [ 135.312268][ T7202] netlink_sendmsg+0x813/0xb40 [ 135.312305][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.312336][ T7202] ? aa_sock_msg_perm+0xf1/0x1b0 [ 135.312363][ T7202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.312387][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.312413][ T7202] ____sys_sendmsg+0xa68/0xad0 [ 135.312455][ T7202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.312497][ T7202] ? import_iovec+0x73/0xa0 [ 135.312533][ T7202] ___sys_sendmsg+0x2a5/0x360 [ 135.312571][ T7202] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.312639][ T7202] ? __fget_files+0x2a/0x420 [ 135.312668][ T7202] ? __fget_files+0x3a0/0x420 [ 135.312706][ T7202] __x64_sys_sendmsg+0x1bd/0x2a0 [ 135.312742][ T7202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.312785][ T7202] ? __pfx_ksys_write+0x10/0x10 [ 135.312819][ T7202] do_syscall_64+0x14d/0xf80 [ 135.312839][ T7202] ? trace_irq_disable+0x3b/0x150 [ 135.312869][ T7202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.312891][ T7202] ? clear_bhb_loop+0x40/0x90 [ 135.312918][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.312939][ T7202] RIP: 0033:0x7f7337f9c799 [ 135.312960][ T7202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.312977][ T7202] RSP: 002b:00007f7338de5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.313000][ T7202] RAX: ffffffffffffffda RBX: 00007f7338215fa0 RCX: 00007f7337f9c799 [ 135.313016][ T7202] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 135.313030][ T7202] RBP: 00007f7338de5090 R08: 0000000000000000 R09: 0000000000000000 [ 135.313043][ T7202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.313055][ T7202] R13: 00007f7338216038 R14: 00007f7338215fa0 R15: 00007ffeda377678 [ 135.313090][ T7202] [ 135.867582][ T7204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.387'. [ 136.037018][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.387'. [ 136.121460][ T7209] veth1_macvtap: left promiscuous mode [ 136.604727][ T7225] netlink: 'syz.3.397': attribute type 2 has an invalid length. [ 136.650896][ T7225] !: entered promiscuous mode [ 136.730611][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 136.817359][ T7235] batman_adv: batadv0: Adding interface: ipvlan5 [ 136.838894][ T7235] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.876707][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.916033][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.935954][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 136.970121][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.013012][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 137.047571][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.077872][ T7243] netlink: 100 bytes leftover after parsing attributes in process `syz.0.400'. [ 137.077872][ T7244] netlink: 100 bytes leftover after parsing attributes in process `syz.0.400'. [ 137.109330][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 137.132695][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.153049][ T7235] batman_adv: batadv0: Not using interface ipvlan5 (retrying later): interface not active [ 137.425659][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 137.572377][ T7252] syz_tun: entered promiscuous mode [ 137.578758][ T7252] macsec1: entered allmulticast mode [ 137.584164][ T7252] syz_tun: entered allmulticast mode [ 137.593774][ T7252] syz_tun: left allmulticast mode [ 137.601893][ T7252] syz_tun: left promiscuous mode [ 138.014165][ T7272] netlink: 'syz.1.405': attribute type 5 has an invalid length. [ 138.145219][ T7278] netlink: 'syz.4.410': attribute type 21 has an invalid length. [ 138.382875][ T7287] __nla_validate_parse: 2 callbacks suppressed [ 138.382896][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 138.451894][ T7287] batman_adv: batadv0: Adding interface: ipvlan4 [ 138.535643][ T7287] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.596430][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 138.641594][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.660698][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.671242][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 138.716915][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.736657][ T7304] netlink: 44 bytes leftover after parsing attributes in process `syz.3.416'. [ 138.757034][ T7287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 138.783495][ T7287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.792743][ T7304] netlink: 'syz.3.416': attribute type 5 has an invalid length. [ 138.803154][ T7287] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 138.961099][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 139.047597][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 139.090461][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 139.126332][ T7321] FAULT_INJECTION: forcing a failure. [ 139.126332][ T7321] name failslab, interval 1, probability 0, space 0, times 0 [ 139.205845][ T7321] CPU: 0 UID: 0 PID: 7321 Comm: syz.0.419 Not tainted syzkaller #0 PREEMPT(full) [ 139.205874][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.205887][ T7321] Call Trace: [ 139.205895][ T7321] [ 139.205904][ T7321] dump_stack_lvl+0xe8/0x150 [ 139.205941][ T7321] should_fail_ex+0x412/0x560 [ 139.205971][ T7321] should_failslab+0xa8/0x100 [ 139.205999][ T7321] __kmalloc_cache_noprof+0x88/0x660 [ 139.206024][ T7321] ? alloc_mnt_ns+0xb3/0x2c0 [ 139.206058][ T7321] alloc_mnt_ns+0xb3/0x2c0 [ 139.206089][ T7321] copy_mnt_ns+0x1af/0x990 [ 139.206117][ T7321] ? kmem_cache_alloc_noprof+0x307/0x650 [ 139.206147][ T7321] ? create_new_namespaces+0x33/0x6a0 [ 139.206185][ T7321] create_new_namespaces+0xcf/0x6a0 [ 139.206215][ T7321] ? bpf_lsm_capable+0x9/0x20 [ 139.206241][ T7321] ? security_capable+0x7e/0x2c0 [ 139.206272][ T7321] unshare_nsproxy_namespaces+0x11a/0x160 [ 139.206312][ T7321] ksys_unshare+0x51d/0x930 [ 139.206353][ T7321] ? __pfx_ksys_unshare+0x10/0x10 [ 139.206385][ T7321] ? __pfx_ksys_write+0x10/0x10 [ 139.206414][ T7321] __x64_sys_unshare+0x38/0x50 [ 139.206445][ T7321] do_syscall_64+0x14d/0xf80 [ 139.206464][ T7321] ? trace_irq_disable+0x3b/0x150 [ 139.206494][ T7321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.206515][ T7321] ? clear_bhb_loop+0x40/0x90 [ 139.206541][ T7321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.206561][ T7321] RIP: 0033:0x7fc96779c799 [ 139.206582][ T7321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.206599][ T7321] RSP: 002b:00007fc968640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 139.206621][ T7321] RAX: ffffffffffffffda RBX: 00007fc967a16090 RCX: 00007fc96779c799 [ 139.206636][ T7321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 139.206648][ T7321] RBP: 00007fc968640090 R08: 0000000000000000 R09: 0000000000000000 [ 139.206661][ T7321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.206673][ T7321] R13: 00007fc967a16128 R14: 00007fc967a16090 R15: 00007ffe6c0b5c58 [ 139.206706][ T7321] [ 139.682134][ T7333] xt_bpf: check failed: parse error [ 139.691248][ T7333] lo speed is unknown, defaulting to 1000 [ 139.697314][ T7333] lo speed is unknown, defaulting to 1000 [ 139.704150][ T7333] lo speed is unknown, defaulting to 1000 [ 139.728013][ T7333] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.785735][ T7333] lo speed is unknown, defaulting to 1000 [ 139.798551][ T7333] lo speed is unknown, defaulting to 1000 [ 139.807302][ T7333] lo speed is unknown, defaulting to 1000 [ 139.816487][ T7333] lo speed is unknown, defaulting to 1000 [ 139.833047][ T7333] lo speed is unknown, defaulting to 1000 [ 140.078143][ T7340] xt_bpf: check failed: parse error [ 140.101434][ T7342] 8021q: VLANs not supported on nlmon0 [ 140.108751][ T7344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.431'. [ 140.130106][ T7340] siw: device registration error -23 [ 140.132837][ T7344] netlink: 'syz.2.431': attribute type 5 has an invalid length. [ 140.370267][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 140.485389][ T58] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.523664][ T58] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.580648][ T7367] netlink: 'syz.1.439': attribute type 21 has an invalid length. [ 140.603975][ T58] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.622807][ T58] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.646180][ T7367] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.674863][ T7367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.682462][ T7367] IPv6: NLM_F_CREATE should be set when creating new route [ 140.689916][ T7367] IPv6: NLM_F_CREATE should be set when creating new route [ 140.697232][ T7367] IPv6: NLM_F_CREATE should be set when creating new route [ 140.732100][ T7372] Cannot find set identified by id 0 to match [ 140.752852][ T7373] Cannot find set identified by id 0 to match [ 140.807738][ T7376] netlink: 'syz.0.441': attribute type 10 has an invalid length. [ 140.823134][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.832573][ T7376] team0: Port device bond0 added [ 140.859050][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 140.928214][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 141.009082][ T7383] netlink: 'syz.3.444': attribute type 5 has an invalid length. [ 141.148801][ T7389] syzkaller0: entered promiscuous mode [ 141.164681][ T7389] syzkaller0: entered allmulticast mode [ 141.180340][ T7391] 8021q: VLANs not supported on caif0 [ 141.197550][ T7393] netlink: 'syz.2.447': attribute type 7 has an invalid length. [ 141.229099][ T7389] tipc: Started in network mode [ 141.234040][ T7389] tipc: Node identity 36137fa24855, cluster identity 4711 [ 141.245694][ T7389] tipc: Enabled bearer , priority 0 [ 141.314097][ T7387] tipc: Resetting bearer [ 141.347349][ T7387] tipc: Disabling bearer [ 141.444378][ T7404] vlan2: entered promiscuous mode [ 141.470763][ T7404] bond0: entered promiscuous mode [ 141.488861][ T7404] bond_slave_0: entered promiscuous mode [ 141.494908][ T7404] bond_slave_1: entered promiscuous mode [ 141.562970][ T7402] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.669937][ T7402] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.770416][ T7402] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.858391][ T7402] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.923509][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.941876][ T1010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.959355][ T1010] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.978011][ T1010] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.747841][ T7425] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 142.954847][ T7440] netlink: 'syz.0.461': attribute type 21 has an invalid length. [ 156.136208][ T5834] Bluetooth: hci4: link tx timeout [ 156.142431][ T5834] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 156.152178][ T5834] Bluetooth: hci4: link tx timeout [ 156.159093][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.279344][ T12] nci: nci_rx_work: unknown MT 0x7 [ 157.045498][ T7483] __nla_validate_parse: 6 callbacks suppressed [ 157.045515][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'. [ 157.062321][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 157.072871][ T7483] netlink: 580 bytes leftover after parsing attributes in process `syz.1.474'. [ 158.225922][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 159.085552][ T7462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.488564][ T7509] syzkaller0: entered promiscuous mode [ 159.495341][ T7509] syzkaller0: entered allmulticast mode [ 159.513960][ T7509] tipc: Enabled bearer , priority 0 [ 159.544361][ T7508] tipc: Resetting bearer [ 159.569045][ T7508] tipc: Disabling bearer [ 159.577100][ T7514] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 159.587127][ T7514] netlink: 96 bytes leftover after parsing attributes in process `syz.1.487'. [ 159.598801][ T7514] netlink: 658 bytes leftover after parsing attributes in process `syz.1.487'. [ 159.611058][ T7514] netlink: 1 bytes leftover after parsing attributes in process `syz.1.487'. [ 159.744960][ T7519] SET target dimension over the limit! [ 160.191898][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.199201][ T7529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.207593][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.214800][ T7529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.321139][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 160.352130][ T7529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.422965][ T5831] lo speed is unknown, defaulting to 1000 [ 160.432258][ T7544] FAULT_INJECTION: forcing a failure. [ 160.432258][ T7544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.471019][ T7544] CPU: 1 UID: 0 PID: 7544 Comm: syz.4.496 Not tainted syzkaller #0 PREEMPT(full) [ 160.471049][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.471063][ T7544] Call Trace: [ 160.471072][ T7544] [ 160.471081][ T7544] dump_stack_lvl+0xe8/0x150 [ 160.471118][ T7544] should_fail_ex+0x412/0x560 [ 160.471149][ T7544] _copy_from_user+0x2d/0xb0 [ 160.471181][ T7544] ___sys_recvmsg+0x175/0x590 [ 160.471213][ T7544] ? __lock_acquire+0x6b5/0x2cf0 [ 160.471246][ T7544] ? __pfx____sys_recvmsg+0x10/0x10 [ 160.471316][ T7544] do_recvmmsg+0x334/0x800 [ 160.471359][ T7544] ? __pfx_do_recvmmsg+0x10/0x10 [ 160.471405][ T7544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.471444][ T7544] __x64_sys_recvmmsg+0x198/0x250 [ 160.471479][ T7544] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 160.471519][ T7544] do_syscall_64+0x14d/0xf80 [ 160.471537][ T7544] ? trace_irq_disable+0x3b/0x150 [ 160.471564][ T7544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.471584][ T7544] ? clear_bhb_loop+0x40/0x90 [ 160.471607][ T7544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.471626][ T7544] RIP: 0033:0x7fe75d79c799 [ 160.471644][ T7544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.471661][ T7544] RSP: 002b:00007fe75b9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 160.471682][ T7544] RAX: ffffffffffffffda RBX: 00007fe75da16090 RCX: 00007fe75d79c799 [ 160.471696][ T7544] RDX: 0400000000000166 RSI: 0000200000005180 RDI: 0000000000000003 [ 160.471709][ T7544] RBP: 00007fe75b9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 160.471721][ T7544] R10: 000000000001a000 R11: 0000000000000246 R12: 0000000000000002 [ 160.471733][ T7544] R13: 00007fe75da16128 R14: 00007fe75da16090 R15: 00007ffed1f89048 [ 160.471774][ T7544] [ 160.704151][ T7553] pimreg: tun_chr_ioctl cmd 21731 [ 161.479199][ T7584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.628954][ T7589] lo speed is unknown, defaulting to 1000 [ 161.822149][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 162.167319][ T7603] team0: Port device team_slave_0 removed [ 162.293720][ T7610] netlink: 52 bytes leftover after parsing attributes in process `syz.2.521'. [ 162.801044][ T7632] FAULT_INJECTION: forcing a failure. [ 162.801044][ T7632] name failslab, interval 1, probability 0, space 0, times 0 [ 162.844197][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: syz.3.531 Not tainted syzkaller #0 PREEMPT(full) [ 162.844226][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.844239][ T7632] Call Trace: [ 162.844247][ T7632] [ 162.844255][ T7632] dump_stack_lvl+0xe8/0x150 [ 162.844290][ T7632] should_fail_ex+0x412/0x560 [ 162.844320][ T7632] should_failslab+0xa8/0x100 [ 162.844348][ T7632] __kmalloc_cache_noprof+0x88/0x660 [ 162.844372][ T7632] ? alloc_mnt_ns+0xb3/0x2c0 [ 162.844407][ T7632] alloc_mnt_ns+0xb3/0x2c0 [ 162.844438][ T7632] copy_mnt_ns+0x1af/0x990 [ 162.844466][ T7632] ? kmem_cache_alloc_noprof+0x307/0x650 [ 162.844497][ T7632] ? create_new_namespaces+0x33/0x6a0 [ 162.844533][ T7632] create_new_namespaces+0xcf/0x6a0 [ 162.844563][ T7632] ? bpf_lsm_capable+0x9/0x20 [ 162.844603][ T7632] ? security_capable+0x7e/0x2c0 [ 162.844635][ T7632] unshare_nsproxy_namespaces+0x11a/0x160 [ 162.844667][ T7632] ksys_unshare+0x51d/0x930 [ 162.844709][ T7632] ? __pfx_ksys_unshare+0x10/0x10 [ 162.844742][ T7632] ? __pfx_ksys_write+0x10/0x10 [ 162.844773][ T7632] __x64_sys_unshare+0x38/0x50 [ 162.844804][ T7632] do_syscall_64+0x14d/0xf80 [ 162.844825][ T7632] ? trace_irq_disable+0x3b/0x150 [ 162.844859][ T7632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.844880][ T7632] ? clear_bhb_loop+0x40/0x90 [ 162.844907][ T7632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.844928][ T7632] RIP: 0033:0x7fe39eb9c799 [ 162.844949][ T7632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.844967][ T7632] RSP: 002b:00007fe39faa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 162.844989][ T7632] RAX: ffffffffffffffda RBX: 00007fe39ee16090 RCX: 00007fe39eb9c799 [ 162.845006][ T7632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 162.845019][ T7632] RBP: 00007fe39faa3090 R08: 0000000000000000 R09: 0000000000000000 [ 162.845032][ T7632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.845045][ T7632] R13: 00007fe39ee16128 R14: 00007fe39ee16090 R15: 00007ffe21332f88 [ 162.845080][ T7632] [ 163.343876][ T7645] FAULT_INJECTION: forcing a failure. [ 163.343876][ T7645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.357360][ T7645] CPU: 0 UID: 0 PID: 7645 Comm: syz.4.535 Not tainted syzkaller #0 PREEMPT(full) [ 163.357391][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.357405][ T7645] Call Trace: [ 163.357414][ T7645] [ 163.357422][ T7645] dump_stack_lvl+0xe8/0x150 [ 163.357457][ T7645] should_fail_ex+0x412/0x560 [ 163.357489][ T7645] _copy_to_user+0x31/0xb0 [ 163.357523][ T7645] simple_read_from_buffer+0xe1/0x170 [ 163.357567][ T7645] proc_fail_nth_read+0x1bb/0x230 [ 163.357608][ T7645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.357642][ T7645] ? rw_verify_area+0x2a6/0x4d0 [ 163.357669][ T7645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.357700][ T7645] vfs_read+0x20c/0xa70 [ 163.357719][ T7645] ? fdget_pos+0x246/0x320 [ 163.357753][ T7645] ? __pfx___mutex_lock+0x10/0x10 [ 163.357784][ T7645] ? __pfx_vfs_read+0x10/0x10 [ 163.357806][ T7645] ? __fget_files+0x2a/0x420 [ 163.357838][ T7645] ? __fget_files+0x3a0/0x420 [ 163.357866][ T7645] ? __fget_files+0x2a/0x420 [ 163.357903][ T7645] ksys_read+0x150/0x270 [ 163.357927][ T7645] ? __pfx_ksys_read+0x10/0x10 [ 163.357960][ T7645] do_syscall_64+0x14d/0xf80 [ 163.357980][ T7645] ? trace_irq_disable+0x3b/0x150 [ 163.358011][ T7645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.358032][ T7645] ? clear_bhb_loop+0x40/0x90 [ 163.358058][ T7645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.358080][ T7645] RIP: 0033:0x7fe75d75cfce [ 163.358101][ T7645] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.358120][ T7645] RSP: 002b:00007fe75b9f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.358142][ T7645] RAX: ffffffffffffffda RBX: 00007fe75b9f66c0 RCX: 00007fe75d75cfce [ 163.358157][ T7645] RDX: 000000000000000f RSI: 00007fe75b9f60a0 RDI: 0000000000000004 [ 163.358170][ T7645] RBP: 00007fe75b9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.358183][ T7645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.358196][ T7645] R13: 00007fe75da16038 R14: 00007fe75da15fa0 R15: 00007ffed1f89048 [ 163.358228][ T7645] [ 163.514072][ T7646] FAULT_INJECTION: forcing a failure. [ 163.514072][ T7646] name failslab, interval 1, probability 0, space 0, times 0 [ 163.637035][ T7646] CPU: 0 UID: 0 PID: 7646 Comm: syz.3.537 Not tainted syzkaller #0 PREEMPT(full) [ 163.637066][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.637081][ T7646] Call Trace: [ 163.637089][ T7646] [ 163.637098][ T7646] dump_stack_lvl+0xe8/0x150 [ 163.637134][ T7646] should_fail_ex+0x412/0x560 [ 163.637166][ T7646] should_failslab+0xa8/0x100 [ 163.637191][ T7646] ? skb_clone+0x212/0x3a0 [ 163.637225][ T7646] kmem_cache_alloc_noprof+0x87/0x650 [ 163.637259][ T7646] ? __netlink_lookup+0xc6/0x8b0 [ 163.637295][ T7646] skb_clone+0x212/0x3a0 [ 163.637331][ T7646] __netlink_deliver_tap+0x404/0x850 [ 163.637371][ T7646] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.637401][ T7646] netlink_deliver_tap+0x19c/0x1b0 [ 163.637429][ T7646] netlink_unicast+0x7e3/0x9b0 [ 163.637463][ T7646] ? __pfx_netlink_unicast+0x10/0x10 [ 163.637489][ T7646] ? netlink_sendmsg+0x650/0xb40 [ 163.637515][ T7646] ? skb_put+0x11b/0x210 [ 163.637548][ T7646] netlink_sendmsg+0x813/0xb40 [ 163.637585][ T7646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.637618][ T7646] ? aa_sock_msg_perm+0xf1/0x1b0 [ 163.637645][ T7646] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.637671][ T7646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.637697][ T7646] ____sys_sendmsg+0xa68/0xad0 [ 163.637750][ T7646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.637798][ T7646] ? import_iovec+0x73/0xa0 [ 163.637833][ T7646] ___sys_sendmsg+0x2a5/0x360 [ 163.637863][ T7646] ? get_pid_task+0x20/0x1f0 [ 163.637889][ T7646] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.637957][ T7646] ? sb_end_write+0xe9/0x1c0 [ 163.638004][ T7646] ? __pfx_vfs_write+0x10/0x10 [ 163.638039][ T7646] __x64_sys_sendmsg+0x1bd/0x2a0 [ 163.638074][ T7646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.638117][ T7646] ? __pfx_ksys_write+0x10/0x10 [ 163.638151][ T7646] do_syscall_64+0x14d/0xf80 [ 163.638172][ T7646] ? trace_irq_disable+0x3b/0x150 [ 163.638202][ T7646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.638224][ T7646] ? clear_bhb_loop+0x40/0x90 [ 163.638256][ T7646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.638278][ T7646] RIP: 0033:0x7fe39eb9c799 [ 163.638299][ T7646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.638318][ T7646] RSP: 002b:00007fe39fac4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.638341][ T7646] RAX: ffffffffffffffda RBX: 00007fe39ee15fa0 RCX: 00007fe39eb9c799 [ 163.638357][ T7646] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000005 [ 163.638370][ T7646] RBP: 00007fe39fac4090 R08: 0000000000000000 R09: 0000000000000000 [ 163.638383][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.638396][ T7646] R13: 00007fe39ee16038 R14: 00007fe39ee15fa0 R15: 00007ffe21332f88 [ 163.638429][ T7646] [ 163.946129][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 164.151573][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.540'. [ 164.260779][ T7664] netlink: 'syz.3.545': attribute type 4 has an invalid length. [ 164.293196][ T7664] netlink: 17 bytes leftover after parsing attributes in process `syz.3.545'. [ 164.565975][ T7677] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 164.609632][ T7677] syzkaller1: linktype set to 825 [ 164.616369][ T7677] netlink: 'syz.3.550': attribute type 4 has an invalid length. [ 164.659863][ T7677] Cannot find add_set index 3 as target [ 164.909774][ T7692] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 165.068810][ T7698] veth1_macvtap: left promiscuous mode [ 165.391255][ T7708] wg1: entered promiscuous mode [ 165.403267][ T7708] wg1: entered allmulticast mode [ 165.704409][ T7717] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 165.766565][ T7719] pimreg: left allmulticast mode [ 166.087326][ T7730] netlink: 44 bytes leftover after parsing attributes in process `syz.2.572'. [ 166.146007][ T7737] netlink: 'syz.2.572': attribute type 5 has an invalid length. [ 168.711559][ T7732] 8021q: VLANs not supported on caif0 [ 169.029231][ T7768] syzkaller1: entered promiscuous mode [ 169.045975][ T7768] syzkaller1: entered allmulticast mode [ 169.288418][ T7774] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 169.313523][ T7774] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 169.327005][ T7780] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.582'. [ 169.391005][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 169.592147][ T7776] lo speed is unknown, defaulting to 1000 [ 170.168724][ T7817] xt_hashlimit: size too large, truncated to 1048576 [ 170.747056][ T7836] syzkaller0: entered promiscuous mode [ 170.752640][ T7836] syzkaller0: entered allmulticast mode [ 171.244149][ T7859] syzkaller0: entered promiscuous mode [ 171.273644][ T7859] syzkaller0: entered allmulticast mode [ 171.867572][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.874867][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.910316][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'. [ 171.935979][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'. [ 172.082699][ T7885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.099943][ T7885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.229363][ T5897] lo speed is unknown, defaulting to 1000 [ 172.254593][ T5897] syz2: Port: 1 Link DOWN [ 172.339228][ T7895] erspan0: entered promiscuous mode [ 172.356633][ T7895] gretap0: entered promiscuous mode [ 172.363174][ T7895] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 172.394938][ T7895] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 172.422588][ T7911] xt_hashlimit: size too large, truncated to 1048576 [ 172.517662][ T7907] ipvlan5: entered allmulticast mode [ 172.523162][ T7907] batadv_slave_1: entered allmulticast mode [ 172.536515][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.555348][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.602116][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.642441][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.689526][ T7915] syzkaller0: entered promiscuous mode [ 172.695074][ T7915] syzkaller0: entered allmulticast mode [ 172.807217][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 173.542005][ T7958] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 174.505554][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.651'. [ 175.185955][ T8033] netlink: 'syz.1.661': attribute type 39 has an invalid length. [ 175.655255][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 175.763023][ T8047] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.667'. [ 176.842154][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 177.521861][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 177.554359][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 177.567764][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 177.968706][ T8134] netlink: 41 bytes leftover after parsing attributes in process `syz.4.702'. [ 178.008645][ T8134] netlink: 116 bytes leftover after parsing attributes in process `syz.4.702'. [ 178.065999][ T8134] netlink: 41 bytes leftover after parsing attributes in process `syz.4.702'. [ 178.434730][ T8161] syzkaller1: entered promiscuous mode [ 178.442475][ T8161] syzkaller1: entered allmulticast mode [ 178.510124][ T8163] syzkaller0: entered promiscuous mode [ 178.515650][ T8163] syzkaller0: entered allmulticast mode [ 178.777500][ T8173] syzkaller1: left promiscuous mode [ 178.790581][ T8173] syzkaller1: left allmulticast mode [ 179.178096][ T8190] syzkaller0: entered promiscuous mode [ 179.194705][ T8190] syzkaller0: entered allmulticast mode [ 179.434039][ T8202] syzkaller0: entered promiscuous mode [ 179.448821][ T8202] syzkaller0: entered allmulticast mode [ 179.525286][ T8207] __nla_validate_parse: 3 callbacks suppressed [ 179.525309][ T8207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.736'. [ 179.601883][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 180.216407][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 180.225925][ T5143] Bluetooth: hci0: command tx timeout [ 180.321518][ T8236] netlink: 84 bytes leftover after parsing attributes in process `syz.0.748'. [ 180.390001][ T8238] netlink: 11 bytes leftover after parsing attributes in process `syz.2.749'. [ 180.401568][ T8238] syzkaller0: entered promiscuous mode [ 180.407747][ T8238] syzkaller0: entered allmulticast mode [ 180.652217][ T8246] syzkaller1: entered promiscuous mode [ 180.685812][ T8246] syzkaller1: entered allmulticast mode [ 181.108296][ T8270] syzkaller1: entered promiscuous mode [ 181.113841][ T8270] syzkaller1: entered allmulticast mode [ 181.245697][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 181.305200][ T8283] netlink: 'syz.2.770': attribute type 4 has an invalid length. [ 181.515913][ T8295] netlink: 2120 bytes leftover after parsing attributes in process `syz.4.775'. [ 183.099474][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 183.896151][ T8416] sctp: [Deprecated]: syz.1.830 (pid 8416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.896151][ T8416] Use struct sctp_sack_info instead [ 184.635985][ T8454] netlink: 'syz.3.851': attribute type 2 has an invalid length. [ 184.655920][ T8454] netlink: 'syz.3.851': attribute type 8 has an invalid length. [ 184.663646][ T8454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.851'. [ 184.896919][ T8469] netlink: 104 bytes leftover after parsing attributes in process `syz.4.857'. [ 185.352198][ T8493] netlink: 966 bytes leftover after parsing attributes in process `syz.1.868'. [ 185.442385][ T8497] netlink: 104 bytes leftover after parsing attributes in process `syz.2.871'. [ 186.442470][ T8546] netlink: 11 bytes leftover after parsing attributes in process `syz.2.895'. [ 186.523091][ T8549] xt_hashlimit: size too large, truncated to 1048576 [ 186.898069][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.902'. [ 186.976136][ T8572] delete_channel: no stack [ 187.184131][ T8584] netlink: 68 bytes leftover after parsing attributes in process `syz.2.907'. [ 187.847332][ T8623] netlink: 88 bytes leftover after parsing attributes in process `syz.1.914'. [ 188.331590][ T8642] netlink: 188 bytes leftover after parsing attributes in process `syz.4.922'. [ 189.657429][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 190.498573][ T8711] netlink: 188 bytes leftover after parsing attributes in process `syz.2.937'. [ 190.752636][ T8721] ------------[ cut here ]------------ [ 190.758275][ T8721] verifier bug: REG INVARIANTS VIOLATION (false_reg2): range bounds violation u64=[0xffbfffb4, 0xf000e60e] s64=[0xffbfffb4, 0xf000e60e] u32=[0xffbfffb4, 0xf000e60e] s32=[0xffbfffb4, 0xf000e60e] var_off=(0xffbfffb4, 0x0) [ 190.779826][ T8721] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.4.942/8721 [ 190.790781][ T8721] Modules linked in: [ 190.794748][ T8721] CPU: 1 UID: 0 PID: 8721 Comm: syz.4.942 Not tainted syzkaller #0 PREEMPT(full) [ 190.804092][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.814524][ T8721] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 190.820883][ T8721] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 190.840635][ T8721] RSP: 0018:ffffc9000585ef10 EFLAGS: 00010246 [ 190.846802][ T8721] RAX: dffffc0000000000 RBX: 1ffff1100abe0c3c RCX: 00000000ffbfffb4 [ 190.854830][ T8721] RDX: ffffffff8bd46f60 RSI: ffffffff8bd4f8e0 RDI: ffffffff90153700 [ 190.862962][ T8721] RBP: 00000000f000e60e R08: 00000000f000e60e R09: 00000000ffbfffb4 [ 190.871105][ T8721] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888055f061e0 [ 190.879205][ T8721] R13: 00000000ffbfffb4 R14: 1ffff1100abe0c3b R15: 00000000ffbfffb4 [ 190.887269][ T8721] FS: 00007fe75b9f66c0(0000) GS:ffff888125568000(0000) knlGS:0000000000000000 [ 190.896404][ T8721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.903042][ T8721] CR2: 00007fe75d84eaeb CR3: 0000000076460000 CR4: 00000000003526f0 [ 190.911147][ T8721] Call Trace: [ 190.914466][ T8721] [ 190.917557][ T8721] check_cond_jmp_op+0x1db5/0x31a0 [ 190.922738][ T8721] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 190.928385][ T8721] ? kfree+0x1c1/0x630 [ 190.932515][ T8721] ? do_check+0x6326/0x10690 [ 190.937241][ T8721] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 190.943288][ T8721] do_check+0x7970/0x10690 [ 190.948330][ T8721] ? __pfx_do_check+0x10/0x10 [ 190.953092][ T8721] ? init_func_state+0x1ab2/0x28d0 [ 190.960401][ T8721] do_check_common+0x19c8/0x25b0 [ 190.965443][ T8721] bpf_check+0x5f3e/0x1ce00 [ 190.970537][ T8721] ? __lock_acquire+0x6b5/0x2cf0 [ 190.975559][ T8721] ? __lock_acquire+0x6b5/0x2cf0 [ 190.981114][ T8721] ? __mutex_trylock_common+0x158/0x260 [ 190.987295][ T8721] ? __pfx___mutex_trylock_common+0x10/0x10 [ 190.993266][ T8721] ? __lock_acquire+0x6b5/0x2cf0 [ 190.998792][ T8721] ? css_rstat_updated+0x23a/0x530 [ 191.003963][ T8721] ? __pfx_css_rstat_updated+0x10/0x10 [ 191.009909][ T8721] ? pcpu_alloc_noprof+0xe8f/0x19c0 [ 191.015174][ T8721] ? __lock_acquire+0x6b5/0x2cf0 [ 191.020252][ T8721] ? __pfx_bpf_check+0x10/0x10 [ 191.025158][ T8721] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 191.031855][ T8721] ? pcpu_memcg_post_alloc_hook+0x44a/0x580 [ 191.037899][ T8721] ? ktime_get_with_offset+0x93/0x2a0 [ 191.043327][ T8721] ? ktime_get_with_offset+0x93/0x2a0 [ 191.048842][ T8721] ? __asan_memset+0x22/0x50 [ 191.053589][ T8721] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 191.058915][ T8721] ? security_bpf_prog_load+0x125/0x3c0 [ 191.064525][ T8721] bpf_prog_load+0x1484/0x1ae0 [ 191.069437][ T8721] ? __pfx_bpf_prog_load+0x10/0x10 [ 191.074617][ T8721] ? tomoyo_path_number_perm+0x219/0x630 [ 191.080411][ T8721] ? bpf_lsm_bpf+0x9/0x20 [ 191.084797][ T8721] ? security_bpf+0x7e/0x2d0 [ 191.089515][ T8721] __sys_bpf+0x618/0x950 [ 191.093826][ T8721] ? __pfx___sys_bpf+0x10/0x10 [ 191.099168][ T8721] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.105043][ T8721] ? __pfx_kcov_ioctl+0x10/0x10 [ 191.110744][ T8721] __x64_sys_bpf+0x7c/0x90 [ 191.115231][ T8721] do_syscall_64+0x14d/0xf80 [ 191.119982][ T8721] ? trace_irq_disable+0x3b/0x150 [ 191.125079][ T8721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.131292][ T8721] ? clear_bhb_loop+0x40/0x90 [ 191.136143][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.142083][ T8721] RIP: 0033:0x7fe75d79c799 [ 191.146621][ T8721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.166351][ T8721] RSP: 002b:00007fe75b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.174822][ T8721] RAX: ffffffffffffffda RBX: 00007fe75da15fa0 RCX: 00007fe75d79c799 [ 191.182934][ T8721] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 191.191166][ T8721] RBP: 00007fe75d832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 191.199316][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.207390][ T8721] R13: 00007fe75da16038 R14: 00007fe75da15fa0 R15: 00007ffed1f89048 [ 191.215439][ T8721] [ 191.218572][ T8721] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.225895][ T8721] CPU: 1 UID: 0 PID: 8721 Comm: syz.4.942 Not tainted syzkaller #0 PREEMPT(full) [ 191.235136][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.245224][ T8721] Call Trace: [ 191.248563][ T8721] [ 191.251522][ T8721] vpanic+0x56c/0xa60 [ 191.255544][ T8721] ? __pfx__printk+0x10/0x10 [ 191.260159][ T8721] ? __pfx_vpanic+0x10/0x10 [ 191.264692][ T8721] ? is_bpf_text_address+0x292/0x2b0 [ 191.270003][ T8721] ? is_bpf_text_address+0x26/0x2b0 [ 191.275239][ T8721] panic+0xc5/0xd0 [ 191.278995][ T8721] ? __pfx_panic+0x10/0x10 [ 191.283465][ T8721] __warn+0x315/0x4f0 [ 191.287485][ T8721] ? reg_bounds_sanity_check+0x201/0xc30 [ 191.293161][ T8721] ? reg_bounds_sanity_check+0x201/0xc30 [ 191.298916][ T8721] __report_bug+0x29a/0x540 [ 191.303464][ T8721] ? reg_bounds_sanity_check+0x201/0xc30 [ 191.309125][ T8721] ? __pfx___report_bug+0x10/0x10 [ 191.314221][ T8721] ? do_check_common+0x19c8/0x25b0 [ 191.319392][ T8721] report_bug_entry+0x19a/0x290 [ 191.324278][ T8721] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 191.329942][ T8721] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 191.335613][ T8721] handle_bug+0xca/0x200 [ 191.339888][ T8721] exc_invalid_op+0x1a/0x50 [ 191.344419][ T8721] asm_exc_invalid_op+0x1a/0x20 [ 191.349293][ T8721] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 191.355595][ T8721] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 191.375227][ T8721] RSP: 0018:ffffc9000585ef10 EFLAGS: 00010246 [ 191.381329][ T8721] RAX: dffffc0000000000 RBX: 1ffff1100abe0c3c RCX: 00000000ffbfffb4 [ 191.389330][ T8721] RDX: ffffffff8bd46f60 RSI: ffffffff8bd4f8e0 RDI: ffffffff90153700 [ 191.397329][ T8721] RBP: 00000000f000e60e R08: 00000000f000e60e R09: 00000000ffbfffb4 [ 191.405351][ T8721] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888055f061e0 [ 191.413344][ T8721] R13: 00000000ffbfffb4 R14: 1ffff1100abe0c3b R15: 00000000ffbfffb4 [ 191.421408][ T8721] check_cond_jmp_op+0x1db5/0x31a0 [ 191.426573][ T8721] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 191.432096][ T8721] ? kfree+0x1c1/0x630 [ 191.436286][ T8721] ? do_check+0x6326/0x10690 [ 191.440898][ T8721] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 191.446905][ T8721] do_check+0x7970/0x10690 [ 191.451397][ T8721] ? __pfx_do_check+0x10/0x10 [ 191.456093][ T8721] ? init_func_state+0x1ab2/0x28d0 [ 191.461236][ T8721] do_check_common+0x19c8/0x25b0 [ 191.466220][ T8721] bpf_check+0x5f3e/0x1ce00 [ 191.470756][ T8721] ? __lock_acquire+0x6b5/0x2cf0 [ 191.475728][ T8721] ? __lock_acquire+0x6b5/0x2cf0 [ 191.480715][ T8721] ? __mutex_trylock_common+0x158/0x260 [ 191.486297][ T8721] ? __pfx___mutex_trylock_common+0x10/0x10 [ 191.492249][ T8721] ? __lock_acquire+0x6b5/0x2cf0 [ 191.497225][ T8721] ? css_rstat_updated+0x23a/0x530 [ 191.502373][ T8721] ? __pfx_css_rstat_updated+0x10/0x10 [ 191.507858][ T8721] ? pcpu_alloc_noprof+0xe8f/0x19c0 [ 191.513082][ T8721] ? __lock_acquire+0x6b5/0x2cf0 [ 191.518057][ T8721] ? __pfx_bpf_check+0x10/0x10 [ 191.522845][ T8721] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 191.528712][ T8721] ? pcpu_memcg_post_alloc_hook+0x44a/0x580 [ 191.534640][ T8721] ? ktime_get_with_offset+0x93/0x2a0 [ 191.540067][ T8721] ? ktime_get_with_offset+0x93/0x2a0 [ 191.545484][ T8721] ? __asan_memset+0x22/0x50 [ 191.550113][ T8721] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 191.555374][ T8721] ? security_bpf_prog_load+0x125/0x3c0 [ 191.560958][ T8721] bpf_prog_load+0x1484/0x1ae0 [ 191.565774][ T8721] ? __pfx_bpf_prog_load+0x10/0x10 [ 191.570925][ T8721] ? tomoyo_path_number_perm+0x219/0x630 [ 191.576604][ T8721] ? bpf_lsm_bpf+0x9/0x20 [ 191.580970][ T8721] ? security_bpf+0x7e/0x2d0 [ 191.585585][ T8721] __sys_bpf+0x618/0x950 [ 191.589865][ T8721] ? __pfx___sys_bpf+0x10/0x10 [ 191.594673][ T8721] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.600523][ T8721] ? __pfx_kcov_ioctl+0x10/0x10 [ 191.605442][ T8721] __x64_sys_bpf+0x7c/0x90 [ 191.609900][ T8721] do_syscall_64+0x14d/0xf80 [ 191.614531][ T8721] ? trace_irq_disable+0x3b/0x150 [ 191.619592][ T8721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.625685][ T8721] ? clear_bhb_loop+0x40/0x90 [ 191.630408][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.636328][ T8721] RIP: 0033:0x7fe75d79c799 [ 191.640794][ T8721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.660424][ T8721] RSP: 002b:00007fe75b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.668872][ T8721] RAX: ffffffffffffffda RBX: 00007fe75da15fa0 RCX: 00007fe75d79c799 [ 191.676875][ T8721] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 191.684875][ T8721] RBP: 00007fe75d832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 191.692886][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.700895][ T8721] R13: 00007fe75da16038 R14: 00007fe75da15fa0 R15: 00007ffed1f89048 [ 191.708964][ T8721] [ 191.712237][ T8721] Kernel Offset: disabled [ 191.716639][ T8721] Rebooting in 86400 seconds..