last executing test programs: 51.180211516s ago: executing program 4 (id=4960): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f00000008c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x45, &(0x7f0000000a00)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c"}}}}}, 0x0) 51.114004671s ago: executing program 1 (id=4961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), r3) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f0000070003006c6f"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf252d00000008000321c412d5348d6e8a183ac2a77a00", @ANYRES32=r5, @ANYBLOB="0c0099000200000005000000720045008055567fd2363c3385f0bf13c93ec9d393ed138cb6b6abf88968716654a6e4c5137f3e76419d8495dbbbb2b0294ea619580a4d391d6dc59c574fd6dce7cbc341de1f5f525f162df2bf97acee0ed7f05a8e7f803aee7f77422be410505a030c7145cbb8d68e29df809f65cb927f670000"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 50.874590437s ago: executing program 4 (id=4964): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000e410000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 50.846139225s ago: executing program 1 (id=4965): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001780)={0x90, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a77e12283a0af56ad50b8a3a2f875b27876a50c18c055076"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x90}}, 0x0) 50.510426117s ago: executing program 1 (id=4967): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r0, 0x0) (async) getsockopt$bt_hci(r0, 0x84, 0x2, &(0x7f0000000d80)=""/4027, &(0x7f0000001d80)=0xfbb) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5, 0x0, 0x100000000}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2040}, 0x50) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) (async, rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r1}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r0, &(0x7f0000000180)=0x8, r0, &(0x7f00000001c0)=0x8000, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 50.492379434s ago: executing program 4 (id=4968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 50.019690968s ago: executing program 0 (id=4971): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x16, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x2f, 0x107, 0x70bd2a, 0xfffffffe, {0x3, 0x7c}, [@nested={0x4, 0x2}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pipe(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r1, r2, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="250a0000000900004e117040000000001800000000000000000000000e460f009500000000000000ed3a36eb72fcb50fd154a0f3dda61f192301a30906b9faca14b058a6c973cde22a0e1a269d94ccc9e3d91cbf97b77a0e61a09b39902e3dae5e950a83b6caef21a193da00000000"], &(0x7f00000005c0)='GPL\x00'}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000c40)={0x108060, 0x3, 0x3, 0x3}, 0x66) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 49.877499766s ago: executing program 1 (id=4972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0xfce0, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xd}}]}}]}, 0x54}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000b00)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f0000000c80)="66f7", 0x4}, {&(0x7f0000000cc0)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000780)={0x2, [0x0, 0x0]}, &(0x7f00000007c0)=0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000800), 0x4) (async) sendmsg$kcm(r9, &(0x7f0000000840)={&(0x7f0000000880)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)="27031c00160014000000001106afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28a4894f", 0x3a}], 0x1}, 0x8eec3816282631eb) (async) getsockopt$bt_BT_VOICE(r8, 0x112, 0xb, 0x0, &(0x7f0000000580)) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x10, 0x2, {{0xffffffff, 0xffff, 0x5, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000240)=0x81, 0x4) writev(r0, &(0x7f0000003600)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="774860edd827891eabc362f4bdac117452239cb700b9d147c288c3d8f7744df82e6256d6b5dc5de7083b53ad4464ca6ba1bba5686f79cc615e1ffe1fb7960d8ada0e39502cc64bf61616390f110c3f21e6a3e3cd243d7b0d2f66e5d3e94c6065023a17dfb3237f0bbde18b8d4b", 0x6d}, {&(0x7f0000002380)="f7119b6f6ff5735d9fd04a28833ff21d26416ad2aec430346e", 0x19}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000033c0)="d9a433b1663d4ada4ff8cc0f2870b5b3101b17ad82609d171601927c5c8a09a1cb9feb006c95bea501e8df707afe774d336f5e9c0b0f6987ab7c76bfe09d57e0becf94733b5801a930cf24b03a0cff85d4368883db877a97108fc628eb8edd6ac4a4efeb443e1c5133db478ee3fc737fad75d1874424bc5244074258217720fe1ab33107348c4c39be67033cb6a5f708bf4426816157c99d8221bb0b6cecd75b948162aae8d7323b36a1b7a3318e968f0f44d2b21186a2d0a5af21d2d69b867c095e818573fd4e9f3e21cdd806da7873b879fd7c1971521d06c5f03684463f7f17d4", 0xe2}, {&(0x7f00000034c0)="849adebb68be08329d210f0195487d2d7416aaea828e3e17b06e92a1da14694dc266f39497e642", 0x27}, {&(0x7f0000003500)="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", 0xfd}], 0x7) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a80)=@newtaction={0x74, 0x30, 0x1, 0x0, 0xfffffffe, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TTL={0x5, 0x7, 0xd}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 49.861252399s ago: executing program 2 (id=4973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 49.585875597s ago: executing program 0 (id=4975): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f00000008c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000a00)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 49.524636023s ago: executing program 3 (id=4976): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000008008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 49.520315945s ago: executing program 2 (id=4977): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001780)={0x90, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a77e12283a0af56ad50b8a3a2f875b27876a50c18c055076"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x90}}, 0x0) 49.313139002s ago: executing program 0 (id=4978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000200)='./cgroup/cgroup.procs\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1}}, 0x40) listen(r0, 0x0) listen(r0, 0x1) (async) listen(r0, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0000060000ff86dd6001010000101100fe8000000000f8ffffffffffffff00bbfe8000000000000000000000000000aa4e214e210010a7625ce0f0fc92a44006"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff0000060000ff86dd6001010000101100fe8000000000f8ffffffffffffff00bbfe8000000000000000000000000000aa4e214e210010a7625ce0f0fc92a44006"], 0x0) 49.161954037s ago: executing program 3 (id=4979): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4044084) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xc}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa0}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x0, 0x2, 0x5, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24}, 0x5) 49.161377463s ago: executing program 4 (id=4980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, 0x0, 0x20000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000780)={0x18, 0x2, {0x1, @remote}}, 0x1e) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000500)=0x2000008, 0x4) connect$inet(r6, &(0x7f0000000540)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[], 0xfffffdef}}, 0x1) accept(r3, 0x0, 0x0) 49.161079106s ago: executing program 2 (id=4981): syz_emit_ethernet(0xbe, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0xb0, 0x67, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {0x0, 0x883e, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "1729126607ec01523d392540578d6e124da9a7a95ce7a975a2e32ab1cb11d139", "b1b01d89323b927ce226f1f917e9749234f5cf9e2771ba4654512b292f7e41bb549e43d2f7423a736f6fb15828a8c285", "a9ee93f4495b810a92445062eea52348ec785a9c8211b11a2bfa0532", {"3ed8de0500000000000000162edc896e", "70684b076cf4038e68a01440fb7c6380"}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendto(r1, &(0x7f0000000240)="0cff6b14405cce213c14881efb44c5016111c26b38bf162119d9002a3bc3ca8f2f061991a7cef7a79b73d044535c30486893efd190f1c16957a3c759e6", 0x3d, 0x48000, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, r7, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xa}, {0x8, 0x13, 0xc06}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6bc6}, {0x6, 0x11, 0x8b4}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}, {0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xfff1}, {0x8, 0x13, 0x7}, {0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4004801) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r4, &(0x7f0000000340)={0x1f, 0x0, @none}, 0xe) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x2c, 0x28, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 48.855873005s ago: executing program 3 (id=4982): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @aes128}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="51c88d959dda0ccfb9bb57e30b41a20bd28b2c7ea1819e60336d7f05edcf15f8f19ae6860e57caa92e33ca23bf440b5392cd7506475241560a1d416efa2e0ea0da040a030c5284c8ee4b9156d04eb88a36eff39963f92519", 0x58}], 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000140)={0x0, 0x7, @status={[0x1, 0x9, 0x3, 0x6, 0x4, 0x6]}, [0x100, 0x9, 0x8b, 0x0, 0x3, 0x2, 0x4, 0x1, 0x9, 0x4, 0x1, 0x5, 0x5, 0x4, 0x9, 0x6, 0x101, 0x7, 0x8, 0x6, 0x0, 0x1, 0x1, 0x4, 0x8, 0x4, 0x8, 0x4, 0x5, 0x1, 0xb, 0x1, 0x2, 0x3, 0x7, 0x0, 0x19fc, 0xc9, 0x2, 0xfffffffffffffffa, 0x93, 0x800, 0x5a07, 0x2, 0x2, 0x9, 0x8, 0x29, 0x16, 0xa, 0x80000000, 0x80, 0x80000000, 0xfff, 0x8000000000000000, 0x0, 0x9f, 0x2, 0x9, 0x3, 0x8001, 0x420, 0x7, 0xfffffffffffffd90]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xb4, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x41}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x62}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xce}]}, 0xb4}}, 0xc000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000f80)={0x0, 0xe8, &(0x7f0000000e80)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x40, @private2}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}, @in6={0xa, 0x4e22, 0x6, @local, 0x2}, @in6={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in6={0xa, 0x4e21, 0x2, @remote}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x211c04c7}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x9}]}, &(0x7f0000000fc0)=0x10) setsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r5, 0x84, 0x83, &(0x7f0000001000)={r6, 0x1}, 0x8) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x84, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfd, "22b0ecfffb01ee5c9a3d3eabd38a73f0a18c6142d57b1137901fda6a27dde29ac24aad5e154d455bc3356479da4fb00d1415de4e076e24b04adbc799e2190b430b2815bf5f5699517ae5da19d54272dabea0ab4a249050901a856bca58a7dc843882f024da1b87b85b9fcac21b83debbfb", ["", "", "", "", "", "", "", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x20000024) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r3) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000001980)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001240)={0x6cc, r7, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x21, 0x80, [@supported_rates={0x1, 0x7, [{0x30, 0x1}, {0x60}, {0xb, 0x1}, {0x27, 0x1}, {0x24, 0x1}, {0xc}, {0xb}]}, @link_id={0x65, 0x12, {@random="1e0edcba05b1", @broadcast, @broadcast}}]}, @NL80211_ATTR_BEACON_TAIL={0xba, 0xf, [@random={0x6b, 0xd, "98d7f4b0f4db4cf3b9fac74c9f"}, @cf={0x4, 0x6, {0x88, 0xfb, 0x4, 0x7}}, @random_vendor={0xdd, 0x9d, "358fef1bcc5875362b1faa2ddaad7051e5e703cce09341e244b5113df314d1f956bf407afa6548ba464d1d500414c6dbfd487e6cca30a9b7edcbbd174f35a3f53f7caaaf9065bac339a757b018df58eac7f7fbc59b3608f6ab037db47ce0719425461f57f84efa3a2697889cc714eef6aaa79aad8602e2500cbb75f58df4e627f7b10c672a4846ee572d243d2a49d371db37d772daa598c7f70904d7d0"}]}, @NL80211_ATTR_PROBE_RESP={0x5c2, 0x91, "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"}]]}, 0x6cc}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048000) r8 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r8, &(0x7f00000019c0)={0x2, 0x0, @multicast1}, &(0x7f0000001a00)=0x10) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001a40)) preadv(r3, &(0x7f0000002f80)=[{&(0x7f0000001a80)=""/240, 0xf0}, {&(0x7f0000001b80)=""/239, 0xef}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/141, 0x8d}, {&(0x7f0000002d40)=""/90, 0x5a}, {&(0x7f0000002dc0)=""/248, 0xf8}, {&(0x7f0000002ec0)=""/84, 0x54}, {&(0x7f0000002f40)=""/30, 0x1e}], 0x8, 0x2, 0x3ff) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000003000)={r6, 0xfffff000, 0x0, 0x9}, &(0x7f0000003040)=0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000003080)={r6, 0x101, 0xffff9ab4, 0x4, 0xb, 0x2, 0x5cfd, 0x200, {r9, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x9, 0x3e96, 0x3, 0xffffff00, 0x3}}, &(0x7f0000003140)=0xb0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000031c0), r10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x40, r11, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x81) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003300)={r0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003380)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000003540)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003500)={&(0x7f0000003440)={0xa8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc7f}]}, 0xa8}}, 0x4) 48.78286361s ago: executing program 2 (id=4983): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@o_path={&(0x7f0000000080)='./file0\x00', r0, 0x4000, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x0, 0x32, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x8001}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1}}]}, 0xfffffffffffffebd}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1a, 0x2a, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3494d}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x3d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bfa208000000000007020000f0ffffffb70300000c00000085000000cd0000001500fbff0000000095"], &(0x7f0000000380)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000840)={@broadcast, @initdev, 0x0}, &(0x7f0000000880)=0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x25, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0xc42e, 0xb4, &(0x7f0000000780)=""/180, 0x40f00, 0x10, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000900)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r0], &(0x7f0000000980)=[{0x2, 0x3, 0x6, 0xc}, {0x1, 0x2, 0xb, 0x6}, {0x3, 0x5, 0x0, 0xc}, {0x1, 0x3, 0x8, 0x8}], 0x10, 0xa}, 0x94) 48.634025866s ago: executing program 0 (id=4984): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x4, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r1 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000340)="580000001400010300000000000000001e000000ffffffff00fe00"/88, 0x58) 48.453001996s ago: executing program 1 (id=4985): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xe1e, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f0000000100", '\x00\t\x00', "a301fbcf1fe65504"}, 0x38) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="9de4e6943f67cbab616d5da0a1e6475b63c2424e239c9879fa22aa44d57c8c7ffc050ab2e16e7985ba09e4512e6447f177080be24b702ec89ad3be91398c78870adcd7395cf4c12b4a96ff021eb00b010e6e51fdb618057924e14a5d0f8c73ce66a65dcd2a6df36e2eb376d6e2ca05352b82fc65d15b6d5783c1351c2c7a09a95a7fff08be65c32904ac3034a378c170d50dc54bc310e885a6d529789d7921790313400503fa263d11a130345c66e450b54d947e6a1cdb7bd732b06fdaf31580c8", 0x4000}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x8, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f0000000280)='\t', 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) 48.374363349s ago: executing program 3 (id=4986): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000440)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) 48.285761826s ago: executing program 2 (id=4987): socket(0x15, 0x80000, 0xffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd20020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000340)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001200010a667202d00000cf21a333"], 0x26}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000580)={@broadcast, @link_local, @val={@void, {0x8100, 0x4, 0x0, 0x2}}, {@can={0xc, {{0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "e5d58c41803910cf"}}}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf, 0x32, 0xffffffffffffffff, 0xbb865000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x2, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180a000000000000000000000000010095000000000000006bef80454bb38dde38e864e1f61a8c4724a0f85a6e8a20c3611a69e61f596a41fa23999b06b8c8a423bdefe28232440d7611557ae3284f0d3bd364f14c49259a8b50ef4dcd7c20f841babb9797b2efc9107ca7ce3dc6d53389702f2a8ea4cae5a3712c06de8ed2687a228104a80cd4ce3f38e6f63af1ef5ca3208a360b9f83c512eaed8937a2acf9b48a519d073665ece5d3ff7e264f0bb9f18acdacf00ba1db3753e9c9127e6484c691130a88bacc2f291182cb94c0ae15142d2dd18b589ec79520"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0xffffffffffffffff, 0x41000}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x80000, 0xffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd20020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000340)={0x3}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001200010a667202d00000cf21a333"], 0x26}}, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000580)={@broadcast, @link_local, @val={@void, {0x8100, 0x4, 0x0, 0x2}}, {@can={0xc, {{0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "e5d58c41803910cf"}}}}, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf, 0x32, 0xffffffffffffffff, 0xbb865000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x2, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180a000000000000000000000000010095000000000000006bef80454bb38dde38e864e1f61a8c4724a0f85a6e8a20c3611a69e61f596a41fa23999b06b8c8a423bdefe28232440d7611557ae3284f0d3bd364f14c49259a8b50ef4dcd7c20f841babb9797b2efc9107ca7ce3dc6d53389702f2a8ea4cae5a3712c06de8ed2687a228104a80cd4ce3f38e6f63af1ef5ca3208a360b9f83c512eaed8937a2acf9b48a519d073665ece5d3ff7e264f0bb9f18acdacf00ba1db3753e9c9127e6484c691130a88bacc2f291182cb94c0ae15142d2dd18b589ec79520"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0xffffffffffffffff, 0x41000}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 48.189373486s ago: executing program 0 (id=4988): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0xe4ffffff}, 0x50) 48.031007367s ago: executing program 3 (id=4989): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xa, 0xb}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4048000) (async) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000300)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 47.790837832s ago: executing program 4 (id=4990): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000004f40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004fc0)={&(0x7f0000000840)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002bbd7000fddbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="8de20b42a31da85095ce8d52da7b72527521bbd13ab9c600"/35], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 47.722676436s ago: executing program 0 (id=4991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 47.232372688s ago: executing program 2 (id=4992): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000440)=0xf, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=' ', 0x1}], 0x1}, 0x4000001) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000721) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000540)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000580)=0x4, 0x4) (async) connect$l2tp6(r3, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x400, 0x1, 0x1, 0x7, 0x1ff, 0x57}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0xb7e0, 0x0, 0x3aa}}]}}}]}, 0x60}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="143eaf70008afffeff0711000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 47.219141361s ago: executing program 4 (id=4993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x18002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'batadv_slave_1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 47.10975507s ago: executing program 1 (id=4994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000700080000000000f5ffffff000048c8", @ANYRES32=r4, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2, r5}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={'pimreg1\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d"], 0x34}}, 0x0) 27.448931485s ago: executing program 3 (id=4995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0xa000000) 0s ago: executing program 32 (id=4991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) kernel console output (not intermixed with test programs): msg+0x10/0x10 [ 478.427400][T19646] ? import_iovec+0x73/0xa0 [ 478.427434][T19646] ___sys_sendmsg+0x2a5/0x360 [ 478.427457][T19646] ? __lock_acquire+0x747/0x2de0 [ 478.427491][T19646] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.427557][T19646] ? __fget_files+0x3a2/0x420 [ 478.427584][T19646] ? __fget_files+0x2a/0x420 [ 478.427624][T19646] __x64_sys_sendmsg+0x1b1/0x290 [ 478.427654][T19646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.427703][T19646] do_syscall_64+0x166/0x520 [ 478.427730][T19646] ? trace_irq_disable+0x3b/0x140 [ 478.427762][T19646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.427786][T19646] ? clear_bhb_loop+0x70/0xc0 [ 478.427816][T19646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.427839][T19646] RIP: 0033:0x7f498239fb19 [ 478.427860][T19646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.427881][T19646] RSP: 002b:00007f4983258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.427906][T19646] RAX: ffffffffffffffda RBX: 00007f4982625fa0 RCX: 00007f498239fb19 [ 478.427923][T19646] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 478.427937][T19646] RBP: 00007f4983258090 R08: 0000000000000000 R09: 0000000000000000 [ 478.427951][T19646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.427965][T19646] R13: 00007f4982626038 R14: 00007f4982625fa0 R15: 00007ffed858f478 [ 478.428003][T19646] [ 479.313219][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4310'. [ 479.386739][T19679] netlink: 'syz.2.4312': attribute type 2 has an invalid length. [ 479.391654][T19679] netlink: 'syz.2.4312': attribute type 1 has an invalid length. [ 479.391684][T19679] nbd: nbd296 already in use [ 479.699615][T19704] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4315'. [ 479.701173][T19704] gretap0: entered promiscuous mode [ 479.728694][T19704] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4315'. [ 479.728870][T19704] 0ªî{X¹¦: renamed from gretap0 [ 479.755752][T19704] 0ªî{X¹¦: left promiscuous mode [ 479.755779][T19704] 0ªî{X¹¦: entered allmulticast mode [ 479.763126][T19704] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 479.810604][T19704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'. [ 479.842228][ T5753] hid-generic 0005:0008:0007.0006: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 479.952833][T19712] IPv6: addrconf: prefix option has invalid lifetime [ 479.952855][T19712] IPv6: addrconf: prefix option has invalid lifetime [ 479.996918][T19711] fido_id[19711]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 480.159853][T19721] FAULT_INJECTION: forcing a failure. [ 480.159853][T19721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.159888][T19721] CPU: 0 UID: 0 PID: 19721 Comm: syz.3.4325 Not tainted syzkaller #0 PREEMPT(full) [ 480.159915][T19721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 480.159930][T19721] Call Trace: [ 480.159940][T19721] [ 480.159950][T19721] dump_stack_lvl+0xe8/0x150 [ 480.159992][T19721] should_fail_ex+0x3eb/0x540 [ 480.160027][T19721] _copy_to_iter+0x404/0x17e0 [ 480.160052][T19721] ? __kernel_text_address+0xd/0x30 [ 480.160098][T19721] ? __pfx__copy_to_iter+0x10/0x10 [ 480.160129][T19721] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 480.160159][T19721] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 480.160189][T19721] __skb_datagram_iter+0xf8/0x980 [ 480.160216][T19721] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 480.160262][T19721] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 480.160301][T19721] skb_copy_datagram_iter+0xb5/0x240 [ 480.160334][T19721] netlink_recvmsg+0x2c8/0xa70 [ 480.160379][T19721] ? __pfx_netlink_recvmsg+0x10/0x10 [ 480.160421][T19721] ? aa_sock_msg_perm+0x144/0x210 [ 480.160450][T19721] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 480.160479][T19721] ? security_socket_recvmsg+0x7e/0x2c0 [ 480.160507][T19721] ? __pfx_netlink_recvmsg+0x10/0x10 [ 480.160542][T19721] sock_recvmsg+0x196/0x1e0 [ 480.160577][T19721] ____sys_recvmsg+0x1f8/0x530 [ 480.160601][T19721] ? iovec_from_user+0x87/0x250 [ 480.160639][T19721] ? __pfx_____sys_recvmsg+0x10/0x10 [ 480.160683][T19721] ? import_iovec+0x73/0xa0 [ 480.160715][T19721] ___sys_recvmsg+0x213/0x5a0 [ 480.160749][T19721] ? __pfx____sys_recvmsg+0x10/0x10 [ 480.160780][T19721] ? lock_acquire+0x115/0x350 [ 480.160828][T19721] ? __fget_files+0x2a/0x420 [ 480.160855][T19721] ? __fget_files+0x3a2/0x420 [ 480.160882][T19721] ? __fget_files+0x2a/0x420 [ 480.160921][T19721] __x64_sys_recvmsg+0x1ae/0x290 [ 480.160951][T19721] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 480.161002][T19721] do_syscall_64+0x166/0x520 [ 480.161030][T19721] ? trace_irq_disable+0x3b/0x140 [ 480.161062][T19721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.161086][T19721] ? clear_bhb_loop+0x70/0xc0 [ 480.161115][T19721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.161139][T19721] RIP: 0033:0x7f498239fb19 [ 480.161161][T19721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.161182][T19721] RSP: 002b:00007f4983258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 480.161206][T19721] RAX: ffffffffffffffda RBX: 00007f4982625fa0 RCX: 00007f498239fb19 [ 480.161232][T19721] RDX: 0000000040000180 RSI: 0000200000000400 RDI: 0000000000000003 [ 480.161248][T19721] RBP: 00007f4983258090 R08: 0000000000000000 R09: 0000000000000000 [ 480.161263][T19721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.161277][T19721] R13: 00007f4982626038 R14: 00007f4982625fa0 R15: 00007ffed858f478 [ 480.161314][T19721] [ 480.678241][T19734] FAULT_INJECTION: forcing a failure. [ 480.678241][T19734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.678275][T19734] CPU: 1 UID: 0 PID: 19734 Comm: syz.4.4330 Not tainted syzkaller #0 PREEMPT(full) [ 480.678301][T19734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 480.678316][T19734] Call Trace: [ 480.678325][T19734] [ 480.678341][T19734] dump_stack_lvl+0xe8/0x150 [ 480.678383][T19734] should_fail_ex+0x3eb/0x540 [ 480.678417][T19734] _copy_from_iter+0x1d3/0x1680 [ 480.678445][T19734] ? __alloc_skb+0x27a/0x7a0 [ 480.678482][T19734] ? __alloc_skb+0x27a/0x7a0 [ 480.678520][T19734] ? __alloc_skb+0x27a/0x7a0 [ 480.678556][T19734] ? __pfx__copy_from_iter+0x10/0x10 [ 480.678588][T19734] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 480.678614][T19734] ? __alloc_skb+0x27a/0x7a0 [ 480.678659][T19734] ? __alloc_skb+0x27a/0x7a0 [ 480.678698][T19734] ? netlink_sendmsg+0x64f/0xb20 [ 480.678729][T19734] ? skb_put+0x112/0x210 [ 480.678753][T19734] netlink_sendmsg+0x6bb/0xb20 [ 480.678792][T19734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.678828][T19734] ? aa_sock_msg_perm+0x144/0x210 [ 480.678857][T19734] ? apparmor_socket_sendmsg+0x98/0x360 [ 480.678892][T19734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.678923][T19734] sock_sendmsg_nosec+0x14e/0x190 [ 480.678956][T19734] ____sys_sendmsg+0x54e/0x850 [ 480.678986][T19734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.679021][T19734] ? import_iovec+0x73/0xa0 [ 480.679052][T19734] ___sys_sendmsg+0x2a5/0x360 [ 480.679074][T19734] ? __lock_acquire+0x747/0x2de0 [ 480.679109][T19734] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.679174][T19734] ? __fget_files+0x3a2/0x420 [ 480.679204][T19734] ? __fget_files+0x2a/0x420 [ 480.679242][T19734] __x64_sys_sendmsg+0x1b1/0x290 [ 480.679269][T19734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.679318][T19734] do_syscall_64+0x166/0x520 [ 480.679345][T19734] ? trace_irq_disable+0x3b/0x140 [ 480.679375][T19734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.679399][T19734] ? clear_bhb_loop+0x70/0xc0 [ 480.679427][T19734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.679450][T19734] RIP: 0033:0x7f7c2579fb19 [ 480.679471][T19734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.679490][T19734] RSP: 002b:00007f7c239f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.679514][T19734] RAX: ffffffffffffffda RBX: 00007f7c25a25fa0 RCX: 00007f7c2579fb19 [ 480.679531][T19734] RDX: 0000000000040000 RSI: 0000200000000780 RDI: 0000000000000003 [ 480.679589][T19734] RBP: 00007f7c239f6090 R08: 0000000000000000 R09: 0000000000000000 [ 480.679605][T19734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.679619][T19734] R13: 00007f7c25a26038 R14: 00007f7c25a25fa0 R15: 00007ffe635a2ed8 [ 480.679657][T19734] [ 481.150314][T19747] FAULT_INJECTION: forcing a failure. [ 481.150314][T19747] name failslab, interval 1, probability 0, space 0, times 0 [ 481.150349][T19747] CPU: 0 UID: 0 PID: 19747 Comm: syz.4.4334 Not tainted syzkaller #0 PREEMPT(full) [ 481.150387][T19747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 481.150400][T19747] Call Trace: [ 481.150410][T19747] [ 481.150419][T19747] dump_stack_lvl+0xe8/0x150 [ 481.150460][T19747] should_fail_ex+0x3eb/0x540 [ 481.150492][T19747] ? __alloc_skb+0x1db/0x7a0 [ 481.150525][T19747] should_failslab+0xa8/0x100 [ 481.150559][T19747] ? __alloc_skb+0x1db/0x7a0 [ 481.150590][T19747] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 481.150618][T19747] ? __alloc_skb+0x18d/0x7a0 [ 481.150650][T19747] ? __alloc_skb+0x1db/0x7a0 [ 481.150689][T19747] __alloc_skb+0x1db/0x7a0 [ 481.150726][T19747] netlink_ack+0x136/0xb30 [ 481.150753][T19747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.150778][T19747] ? __pfx_nl80211_post_doit+0x10/0x10 [ 481.150820][T19747] netlink_rcv_skb+0x2a4/0x4a0 [ 481.150852][T19747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.150879][T19747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.150928][T19747] ? down_read+0x2b9/0x320 [ 481.150961][T19747] genl_rcv+0x28/0x40 [ 481.151001][T19747] netlink_unicast+0x8ef/0xa80 [ 481.151061][T19747] netlink_sendmsg+0x7f0/0xb20 [ 481.151107][T19747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.151145][T19747] ? aa_sock_msg_perm+0x144/0x210 [ 481.151175][T19747] ? apparmor_socket_sendmsg+0x98/0x360 [ 481.151211][T19747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.151243][T19747] sock_sendmsg_nosec+0x14e/0x190 [ 481.151278][T19747] ____sys_sendmsg+0x54e/0x850 [ 481.151309][T19747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.151346][T19747] ? import_iovec+0x73/0xa0 [ 481.151380][T19747] ___sys_sendmsg+0x2a5/0x360 [ 481.151402][T19747] ? __lock_acquire+0x747/0x2de0 [ 481.151435][T19747] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.151504][T19747] ? __fget_files+0x3a2/0x420 [ 481.151532][T19747] ? __fget_files+0x2a/0x420 [ 481.151571][T19747] __x64_sys_sendmsg+0x1b1/0x290 [ 481.151601][T19747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.151652][T19747] do_syscall_64+0x166/0x520 [ 481.151678][T19747] ? trace_irq_disable+0x3b/0x140 [ 481.151710][T19747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.151734][T19747] ? clear_bhb_loop+0x70/0xc0 [ 481.151763][T19747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.151786][T19747] RIP: 0033:0x7f7c2579fb19 [ 481.151808][T19747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.151828][T19747] RSP: 002b:00007f7c239f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.151852][T19747] RAX: ffffffffffffffda RBX: 00007f7c25a25fa0 RCX: 00007f7c2579fb19 [ 481.151869][T19747] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 481.151883][T19747] RBP: 00007f7c239f6090 R08: 0000000000000000 R09: 0000000000000000 [ 481.151897][T19747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.151910][T19747] R13: 00007f7c25a26038 R14: 00007f7c25a25fa0 R15: 00007ffe635a2ed8 [ 481.151948][T19747] [ 481.792684][T19770] pimreg3: entered allmulticast mode [ 481.822281][T19774] ip6_tunnel: non-ECT from fe80:7100:0000:0000:00f4:ffff:ffff:ffba with DS=0x1b [ 482.035548][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4344'. [ 482.060268][T19781] rxe_newlink: 23 callbacks suppressed [ 482.060293][T19781] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 482.220069][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'. [ 482.403852][T19802] sctp: Trying to GSO but underlying device doesn't support it. [ 482.417240][T19808] FAULT_INJECTION: forcing a failure. [ 482.417240][T19808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.417278][T19808] CPU: 1 UID: 0 PID: 19808 Comm: syz.1.4355 Not tainted syzkaller #0 PREEMPT(full) [ 482.417302][T19808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 482.417315][T19808] Call Trace: [ 482.417323][T19808] [ 482.417332][T19808] dump_stack_lvl+0xe8/0x150 [ 482.417371][T19808] should_fail_ex+0x3eb/0x540 [ 482.417401][T19808] _copy_to_iter+0x5a1/0x17e0 [ 482.417423][T19808] ? __kernel_text_address+0xd/0x30 [ 482.417464][T19808] ? __pfx__copy_to_iter+0x10/0x10 [ 482.417492][T19808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 482.417516][T19808] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 482.417542][T19808] __skb_datagram_iter+0xf8/0x980 [ 482.417565][T19808] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 482.417594][T19808] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 482.417626][T19808] skb_copy_datagram_iter+0xb5/0x240 [ 482.417654][T19808] netlink_recvmsg+0x2c8/0xa70 [ 482.417692][T19808] ? __pfx_netlink_recvmsg+0x10/0x10 [ 482.417728][T19808] ? aa_sock_msg_perm+0x144/0x210 [ 482.417753][T19808] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 482.417777][T19808] ? security_socket_recvmsg+0x7e/0x2c0 [ 482.417801][T19808] ? __pfx_netlink_recvmsg+0x10/0x10 [ 482.417831][T19808] sock_recvmsg+0x196/0x1e0 [ 482.417861][T19808] ____sys_recvmsg+0x1f8/0x530 [ 482.417881][T19808] ? iovec_from_user+0x87/0x250 [ 482.417913][T19808] ? __pfx_____sys_recvmsg+0x10/0x10 [ 482.417958][T19808] ? import_iovec+0x73/0xa0 [ 482.417986][T19808] ___sys_recvmsg+0x213/0x5a0 [ 482.418014][T19808] ? __pfx____sys_recvmsg+0x10/0x10 [ 482.418040][T19808] ? lock_acquire+0x115/0x350 [ 482.418081][T19808] ? __fget_files+0x2a/0x420 [ 482.418104][T19808] ? __fget_files+0x3a2/0x420 [ 482.418128][T19808] ? __fget_files+0x2a/0x420 [ 482.418167][T19808] __x64_sys_recvmsg+0x1ae/0x290 [ 482.418197][T19808] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 482.418251][T19808] do_syscall_64+0x166/0x520 [ 482.418277][T19808] ? trace_irq_disable+0x3b/0x140 [ 482.418310][T19808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.418334][T19808] ? clear_bhb_loop+0x70/0xc0 [ 482.418364][T19808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.418387][T19808] RIP: 0033:0x7f7a7e39fb19 [ 482.418409][T19808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.418428][T19808] RSP: 002b:00007f7a7f1ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 482.418453][T19808] RAX: ffffffffffffffda RBX: 00007f7a7e625fa0 RCX: 00007f7a7e39fb19 [ 482.418470][T19808] RDX: 0000000040000180 RSI: 0000200000000400 RDI: 0000000000000003 [ 482.418486][T19808] RBP: 00007f7a7f1ad090 R08: 0000000000000000 R09: 0000000000000000 [ 482.418501][T19808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.418515][T19808] R13: 00007f7a7e626038 R14: 00007f7a7e625fa0 R15: 00007fff81a4d4b8 [ 482.418555][T19808] [ 482.825884][T19812] FAULT_INJECTION: forcing a failure. [ 482.825884][T19812] name failslab, interval 1, probability 0, space 0, times 0 [ 482.825920][T19812] CPU: 1 UID: 0 PID: 19812 Comm: syz.2.4358 Not tainted syzkaller #0 PREEMPT(full) [ 482.825946][T19812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 482.825969][T19812] Call Trace: [ 482.825979][T19812] [ 482.825989][T19812] dump_stack_lvl+0xe8/0x150 [ 482.826032][T19812] should_fail_ex+0x3eb/0x540 [ 482.826067][T19812] should_failslab+0xa8/0x100 [ 482.826104][T19812] __kmalloc_cache_noprof+0x9e/0x600 [ 482.826134][T19812] ? __kmalloc_cache_noprof+0x148/0x600 [ 482.826160][T19812] ? sctp_add_bind_addr+0x8c/0x370 [ 482.826186][T19812] ? sctp_add_bind_addr+0x8c/0x370 [ 482.826222][T19812] sctp_add_bind_addr+0x8c/0x370 [ 482.826257][T19812] sctp_copy_local_addr_list+0x31a/0x4e0 [ 482.826289][T19812] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 482.826319][T19812] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 482.826350][T19812] ? sctp_v6_is_any+0x64/0x80 [ 482.826383][T19812] ? sctp_copy_one_addr+0x93/0x360 [ 482.826416][T19812] sctp_bind_addr_copy+0xb3/0x3c0 [ 482.826446][T19812] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 482.826475][T19812] sctp_connect_new_asoc+0x2ff/0x6b0 [ 482.826517][T19812] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 482.826553][T19812] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 482.826588][T19812] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 482.826620][T19812] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 482.826656][T19812] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 482.826688][T19812] ? security_sctp_bind_connect+0x7e/0x2c0 [ 482.826724][T19812] sctp_sendmsg+0x159b/0x2d00 [ 482.826776][T19812] ? __pfx_sctp_sendmsg+0x10/0x10 [ 482.826817][T19812] ? __lock_acquire+0x747/0x2de0 [ 482.826863][T19812] ? aa_sock_msg_perm+0xf5/0x210 [ 482.826886][T19812] ? sock_rps_record_flow+0x19/0x350 [ 482.826914][T19812] ? inet_sendmsg+0x298/0x320 [ 482.826936][T19812] ? apparmor_socket_sendmsg+0x98/0x360 [ 482.826979][T19812] ? __pfx_inet_sendmsg+0x10/0x10 [ 482.827002][T19812] sock_sendmsg_nosec+0x10f/0x190 [ 482.827037][T19812] ____sys_sendmsg+0x54e/0x850 [ 482.827069][T19812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.827106][T19812] ? import_iovec+0x73/0xa0 [ 482.827140][T19812] ___sys_sendmsg+0x2a5/0x360 [ 482.827163][T19812] ? __lock_acquire+0x747/0x2de0 [ 482.827198][T19812] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.827241][T19812] ? kstrtouint+0x6e/0xe0 [ 482.827307][T19812] ? __fget_files+0x3a2/0x420 [ 482.827333][T19812] ? __fget_files+0x2a/0x420 [ 482.827373][T19812] __sys_sendmmsg+0x273/0x4e0 [ 482.827405][T19812] ? __pfx___sys_sendmmsg+0x10/0x10 [ 482.827440][T19812] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.827486][T19812] ? ksys_write+0x242/0x270 [ 482.827518][T19812] ? __pfx_ksys_write+0x10/0x10 [ 482.827555][T19812] __x64_sys_sendmmsg+0xa0/0xc0 [ 482.827583][T19812] do_syscall_64+0x166/0x520 [ 482.827608][T19812] ? trace_irq_disable+0x3b/0x140 [ 482.827639][T19812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.827663][T19812] ? clear_bhb_loop+0x70/0xc0 [ 482.827692][T19812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.827714][T19812] RIP: 0033:0x7ffbd6f9fb19 [ 482.827737][T19812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.827756][T19812] RSP: 002b:00007ffbd7e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 482.827780][T19812] RAX: ffffffffffffffda RBX: 00007ffbd7225fa0 RCX: 00007ffbd6f9fb19 [ 482.827797][T19812] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 482.827811][T19812] RBP: 00007ffbd7e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 482.827825][T19812] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 482.827839][T19812] R13: 00007ffbd7226038 R14: 00007ffbd7225fa0 R15: 00007ffddd199678 [ 482.827876][T19812] [ 483.703033][T19848] FAULT_INJECTION: forcing a failure. [ 483.703033][T19848] name failslab, interval 1, probability 0, space 0, times 0 [ 483.703069][T19848] CPU: 0 UID: 0 PID: 19848 Comm: syz.4.4370 Not tainted syzkaller #0 PREEMPT(full) [ 483.703096][T19848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 483.703111][T19848] Call Trace: [ 483.703120][T19848] [ 483.703131][T19848] dump_stack_lvl+0xe8/0x150 [ 483.703175][T19848] should_fail_ex+0x3eb/0x540 [ 483.703209][T19848] should_failslab+0xa8/0x100 [ 483.703243][T19848] ? skb_clone+0x212/0x3a0 [ 483.703269][T19848] kmem_cache_alloc_noprof+0x9c/0x600 [ 483.703298][T19848] ? skb_clone+0x212/0x3a0 [ 483.703332][T19848] skb_clone+0x212/0x3a0 [ 483.703362][T19848] __netlink_deliver_tap+0x355/0x6e0 [ 483.703408][T19848] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.703443][T19848] netlink_deliver_tap+0x19c/0x1b0 [ 483.703478][T19848] netlink_sendskb+0x68/0x140 [ 483.703511][T19848] netlink_rcv_skb+0x2a4/0x4a0 [ 483.703545][T19848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.703573][T19848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.703624][T19848] ? down_read+0x2b9/0x320 [ 483.703661][T19848] genl_rcv+0x28/0x40 [ 483.703684][T19848] netlink_unicast+0x8ef/0xa80 [ 483.703734][T19848] netlink_sendmsg+0x7f0/0xb20 [ 483.703774][T19848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.703812][T19848] ? aa_sock_msg_perm+0x144/0x210 [ 483.703842][T19848] ? apparmor_socket_sendmsg+0x98/0x360 [ 483.703885][T19848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.703916][T19848] sock_sendmsg_nosec+0x14e/0x190 [ 483.703950][T19848] ____sys_sendmsg+0x54e/0x850 [ 483.703986][T19848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.704023][T19848] ? import_iovec+0x73/0xa0 [ 483.704056][T19848] ___sys_sendmsg+0x2a5/0x360 [ 483.704080][T19848] ? __lock_acquire+0x747/0x2de0 [ 483.704115][T19848] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.704184][T19848] ? __fget_files+0x3a2/0x420 [ 483.704212][T19848] ? __fget_files+0x2a/0x420 [ 483.704252][T19848] __x64_sys_sendmsg+0x1b1/0x290 [ 483.704282][T19848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.704333][T19848] do_syscall_64+0x166/0x520 [ 483.704360][T19848] ? trace_irq_disable+0x3b/0x140 [ 483.704390][T19848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.704413][T19848] ? clear_bhb_loop+0x70/0xc0 [ 483.704443][T19848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.704466][T19848] RIP: 0033:0x7f7c2579fb19 [ 483.704489][T19848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.704508][T19848] RSP: 002b:00007f7c239d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.704534][T19848] RAX: ffffffffffffffda RBX: 00007f7c25a26090 RCX: 00007f7c2579fb19 [ 483.704551][T19848] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 483.704566][T19848] RBP: 00007f7c239d5090 R08: 0000000000000000 R09: 0000000000000000 [ 483.704581][T19848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.704595][T19848] R13: 00007f7c25a26128 R14: 00007f7c25a26090 R15: 00007ffe635a2ed8 [ 483.704633][T19848] [ 484.071744][T19854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4372'. [ 484.291831][T19864] syzkaller1: entered promiscuous mode [ 484.291858][T19864] syzkaller1: entered allmulticast mode [ 484.342966][T19867] FAULT_INJECTION: forcing a failure. [ 484.342966][T19867] name failslab, interval 1, probability 0, space 0, times 0 [ 484.343002][T19867] CPU: 0 UID: 0 PID: 19867 Comm: syz.1.4376 Not tainted syzkaller #0 PREEMPT(full) [ 484.343029][T19867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 484.343044][T19867] Call Trace: [ 484.343053][T19867] [ 484.343062][T19867] dump_stack_lvl+0xe8/0x150 [ 484.343104][T19867] should_fail_ex+0x3eb/0x540 [ 484.343138][T19867] should_failslab+0xa8/0x100 [ 484.343173][T19867] __kmalloc_cache_noprof+0x9e/0x600 [ 484.343203][T19867] ? sctp_add_bind_addr+0x8c/0x370 [ 484.343227][T19867] ? sctp_add_bind_addr+0x8c/0x370 [ 484.343261][T19867] sctp_add_bind_addr+0x8c/0x370 [ 484.343293][T19867] sctp_copy_local_addr_list+0x31a/0x4e0 [ 484.343324][T19867] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 484.343354][T19867] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 484.343385][T19867] ? sctp_v6_is_any+0x64/0x80 [ 484.343417][T19867] ? sctp_copy_one_addr+0x93/0x360 [ 484.343449][T19867] sctp_bind_addr_copy+0xb3/0x3c0 [ 484.343478][T19867] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 484.343506][T19867] sctp_connect_new_asoc+0x2ff/0x6b0 [ 484.343544][T19867] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 484.343579][T19867] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 484.343613][T19867] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 484.343645][T19867] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 484.343680][T19867] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 484.343711][T19867] ? security_sctp_bind_connect+0x7e/0x2c0 [ 484.343743][T19867] sctp_sendmsg+0x159b/0x2d00 [ 484.343793][T19867] ? __pfx_sctp_sendmsg+0x10/0x10 [ 484.343839][T19867] ? __lock_acquire+0x747/0x2de0 [ 484.343882][T19867] ? aa_sock_msg_perm+0xf5/0x210 [ 484.343904][T19867] ? sock_rps_record_flow+0x19/0x350 [ 484.343936][T19867] ? inet_sendmsg+0x298/0x320 [ 484.343963][T19867] ? apparmor_socket_sendmsg+0x98/0x360 [ 484.343989][T19867] ? __pfx_inet_sendmsg+0x10/0x10 [ 484.344005][T19867] sock_sendmsg_nosec+0x10f/0x190 [ 484.344030][T19867] ____sys_sendmsg+0x54e/0x850 [ 484.344052][T19867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.344077][T19867] ? import_iovec+0x73/0xa0 [ 484.344101][T19867] ___sys_sendmsg+0x2a5/0x360 [ 484.344116][T19867] ? __lock_acquire+0x747/0x2de0 [ 484.344140][T19867] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.344162][T19867] ? kstrtouint+0x6e/0xe0 [ 484.344209][T19867] ? __fget_files+0x3a2/0x420 [ 484.344229][T19867] ? __fget_files+0x2a/0x420 [ 484.344255][T19867] __sys_sendmmsg+0x273/0x4e0 [ 484.344278][T19867] ? __pfx___sys_sendmmsg+0x10/0x10 [ 484.344305][T19867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 484.344371][T19867] ? ksys_write+0x242/0x270 [ 484.344404][T19867] ? __pfx_ksys_write+0x10/0x10 [ 484.344441][T19867] __x64_sys_sendmmsg+0xa0/0xc0 [ 484.344468][T19867] do_syscall_64+0x166/0x520 [ 484.344494][T19867] ? trace_irq_disable+0x3b/0x140 [ 484.344525][T19867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.344549][T19867] ? clear_bhb_loop+0x70/0xc0 [ 484.344578][T19867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.344601][T19867] RIP: 0033:0x7f7a7e39fb19 [ 484.344622][T19867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.344641][T19867] RSP: 002b:00007f7a7f1ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 484.344666][T19867] RAX: ffffffffffffffda RBX: 00007f7a7e625fa0 RCX: 00007f7a7e39fb19 [ 484.344683][T19867] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 484.344699][T19867] RBP: 00007f7a7f1ad090 R08: 0000000000000000 R09: 0000000000000000 [ 484.344713][T19867] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 484.344728][T19867] R13: 00007f7a7e626038 R14: 00007f7a7e625fa0 R15: 00007fff81a4d4b8 [ 484.344767][T19867] [ 484.869143][T19873] FAULT_INJECTION: forcing a failure. [ 484.869143][T19873] name failslab, interval 1, probability 0, space 0, times 0 [ 484.869177][T19873] CPU: 1 UID: 0 PID: 19873 Comm: syz.1.4378 Not tainted syzkaller #0 PREEMPT(full) [ 484.869203][T19873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 484.869218][T19873] Call Trace: [ 484.869227][T19873] [ 484.869237][T19873] dump_stack_lvl+0xe8/0x150 [ 484.869286][T19873] should_fail_ex+0x3eb/0x540 [ 484.869321][T19873] should_failslab+0xa8/0x100 [ 484.869358][T19873] __kmalloc_cache_noprof+0x9e/0x600 [ 484.869388][T19873] ? __kmalloc_cache_noprof+0x148/0x600 [ 484.869415][T19873] ? sctp_add_bind_addr+0x8c/0x370 [ 484.869441][T19873] ? sctp_add_bind_addr+0x8c/0x370 [ 484.869477][T19873] sctp_add_bind_addr+0x8c/0x370 [ 484.869510][T19873] sctp_copy_local_addr_list+0x31a/0x4e0 [ 484.869542][T19873] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 484.869573][T19873] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 484.869604][T19873] ? sctp_v6_is_any+0x64/0x80 [ 484.869637][T19873] ? sctp_copy_one_addr+0x93/0x360 [ 484.869670][T19873] sctp_bind_addr_copy+0xb3/0x3c0 [ 484.869700][T19873] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 484.869729][T19873] sctp_connect_new_asoc+0x2ff/0x6b0 [ 484.869767][T19873] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 484.869810][T19873] ? __local_bh_enable_ip+0xd6/0x140 [ 484.869840][T19873] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 484.869869][T19873] ? security_sctp_bind_connect+0x7e/0x2c0 [ 484.869905][T19873] sctp_sendmsg+0x159b/0x2d00 [ 484.869956][T19873] ? __pfx_sctp_sendmsg+0x10/0x10 [ 484.869997][T19873] ? __lock_acquire+0x747/0x2de0 [ 484.870044][T19873] ? aa_sock_msg_perm+0xf5/0x210 [ 484.870065][T19873] ? sock_rps_record_flow+0x19/0x350 [ 484.870095][T19873] ? inet_sendmsg+0x298/0x320 [ 484.870123][T19873] ? __pfx_inet_sendmsg+0x10/0x10 [ 484.870146][T19873] sock_sendmsg_nosec+0x10f/0x190 [ 484.870182][T19873] ____sys_sendmsg+0x54e/0x850 [ 484.870214][T19873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.870258][T19873] ? import_iovec+0x73/0xa0 [ 484.870292][T19873] ___sys_sendmsg+0x2a5/0x360 [ 484.870315][T19873] ? __lock_acquire+0x747/0x2de0 [ 484.870351][T19873] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.870383][T19873] ? kstrtouint+0x6e/0xe0 [ 484.870452][T19873] ? __fget_files+0x3a2/0x420 [ 484.870479][T19873] ? __fget_files+0x2a/0x420 [ 484.870518][T19873] __sys_sendmmsg+0x273/0x4e0 [ 484.870551][T19873] ? __pfx___sys_sendmmsg+0x10/0x10 [ 484.870589][T19873] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 484.870636][T19873] ? ksys_write+0x242/0x270 [ 484.870669][T19873] ? __pfx_ksys_write+0x10/0x10 [ 484.870708][T19873] __x64_sys_sendmmsg+0xa0/0xc0 [ 484.870740][T19873] do_syscall_64+0x166/0x520 [ 484.870767][T19873] ? trace_irq_disable+0x3b/0x140 [ 484.870799][T19873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.870824][T19873] ? clear_bhb_loop+0x70/0xc0 [ 484.870853][T19873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.870877][T19873] RIP: 0033:0x7f7a7e39fb19 [ 484.870898][T19873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.870919][T19873] RSP: 002b:00007f7a7f1ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 484.870943][T19873] RAX: ffffffffffffffda RBX: 00007f7a7e625fa0 RCX: 00007f7a7e39fb19 [ 484.870960][T19873] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 484.870975][T19873] RBP: 00007f7a7f1ad090 R08: 0000000000000000 R09: 0000000000000000 [ 484.870989][T19873] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 484.871003][T19873] R13: 00007f7a7e626038 R14: 00007f7a7e625fa0 R15: 00007fff81a4d4b8 [ 484.871042][T19873] [ 485.363584][T19879] netlink: 'syz.2.4386': attribute type 12 has an invalid length. [ 485.363610][T19879] netlink: 'syz.2.4386': attribute type 29 has an invalid length. [ 485.363626][T19879] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4386'. [ 485.363647][T19879] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4386'. [ 485.450659][T19883] IPv6: addrconf: prefix option has invalid lifetime [ 485.450680][T19883] IPv6: addrconf: prefix option has invalid lifetime [ 485.552574][T19892] netlink: 'syz.2.4388': attribute type 12 has an invalid length. [ 485.552600][T19892] netlink: 'syz.2.4388': attribute type 29 has an invalid length. [ 485.552617][T19892] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4388'. [ 485.552639][T19892] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4388'. [ 485.896277][T19901] netlink: 'syz.0.4392': attribute type 10 has an invalid length. [ 485.916858][T19901] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 486.000986][T19901] team0: Port device wlan0 added [ 486.058834][T19915] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4396'. [ 486.058877][T19915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.100006][T19918] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4396'. [ 486.100047][T19918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.470491][T19930] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4401'. [ 486.736586][T19942] FAULT_INJECTION: forcing a failure. [ 486.736586][T19942] name failslab, interval 1, probability 0, space 0, times 0 [ 486.736623][T19942] CPU: 1 UID: 0 PID: 19942 Comm: syz.0.4404 Not tainted syzkaller #0 PREEMPT(full) [ 486.736649][T19942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 486.736664][T19942] Call Trace: [ 486.736678][T19942] [ 486.736689][T19942] dump_stack_lvl+0xe8/0x150 [ 486.736731][T19942] should_fail_ex+0x3eb/0x540 [ 486.736766][T19942] should_failslab+0xa8/0x100 [ 486.736812][T19942] __kmalloc_cache_noprof+0x9e/0x600 [ 486.736842][T19942] ? __kmalloc_cache_noprof+0x148/0x600 [ 486.736869][T19942] ? sctp_add_bind_addr+0x8c/0x370 [ 486.736896][T19942] ? sctp_add_bind_addr+0x8c/0x370 [ 486.736932][T19942] sctp_add_bind_addr+0x8c/0x370 [ 486.736965][T19942] sctp_copy_local_addr_list+0x31a/0x4e0 [ 486.736997][T19942] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 486.737026][T19942] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 486.737057][T19942] ? sctp_v6_is_any+0x64/0x80 [ 486.737089][T19942] ? sctp_copy_one_addr+0x93/0x360 [ 486.737122][T19942] sctp_bind_addr_copy+0xb3/0x3c0 [ 486.737151][T19942] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 486.737180][T19942] sctp_connect_new_asoc+0x2ff/0x6b0 [ 486.737218][T19942] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 486.737254][T19942] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 486.737288][T19942] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 486.737321][T19942] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 486.737357][T19942] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 486.737389][T19942] ? security_sctp_bind_connect+0x7e/0x2c0 [ 486.737423][T19942] sctp_sendmsg+0x159b/0x2d00 [ 486.737472][T19942] ? __pfx_sctp_sendmsg+0x10/0x10 [ 486.737512][T19942] ? __lock_acquire+0x747/0x2de0 [ 486.737557][T19942] ? aa_sock_msg_perm+0xf5/0x210 [ 486.737578][T19942] ? sock_rps_record_flow+0x19/0x350 [ 486.737606][T19942] ? inet_sendmsg+0x298/0x320 [ 486.737628][T19942] ? apparmor_socket_sendmsg+0x98/0x360 [ 486.737664][T19942] ? __pfx_inet_sendmsg+0x10/0x10 [ 486.737687][T19942] sock_sendmsg_nosec+0x10f/0x190 [ 486.737721][T19942] ____sys_sendmsg+0x54e/0x850 [ 486.737751][T19942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.737794][T19942] ? import_iovec+0x73/0xa0 [ 486.737826][T19942] ___sys_sendmsg+0x2a5/0x360 [ 486.737847][T19942] ? __lock_acquire+0x747/0x2de0 [ 486.737882][T19942] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.737913][T19942] ? kstrtouint+0x6e/0xe0 [ 486.737981][T19942] ? __fget_files+0x3a2/0x420 [ 486.738008][T19942] ? __fget_files+0x2a/0x420 [ 486.738046][T19942] __sys_sendmmsg+0x273/0x4e0 [ 486.738079][T19942] ? __pfx___sys_sendmmsg+0x10/0x10 [ 486.738116][T19942] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 486.738164][T19942] ? ksys_write+0x242/0x270 [ 486.738197][T19942] ? __pfx_ksys_write+0x10/0x10 [ 486.738236][T19942] __x64_sys_sendmmsg+0xa0/0xc0 [ 486.738265][T19942] do_syscall_64+0x166/0x520 [ 486.738291][T19942] ? trace_irq_disable+0x3b/0x140 [ 486.738322][T19942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.738346][T19942] ? clear_bhb_loop+0x70/0xc0 [ 486.738375][T19942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.738399][T19942] RIP: 0033:0x7f3a5cd9fb19 [ 486.738420][T19942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.738441][T19942] RSP: 002b:00007f3a5dd3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 486.738466][T19942] RAX: ffffffffffffffda RBX: 00007f3a5d025fa0 RCX: 00007f3a5cd9fb19 [ 486.738483][T19942] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 486.738499][T19942] RBP: 00007f3a5dd3a090 R08: 0000000000000000 R09: 0000000000000000 [ 486.738514][T19942] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 486.738528][T19942] R13: 00007f3a5d026038 R14: 00007f3a5d025fa0 R15: 00007ffebf515e48 [ 486.738567][T19942] [ 487.224637][T19952] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 487.301684][T19954] FAULT_INJECTION: forcing a failure. [ 487.301684][T19954] name failslab, interval 1, probability 0, space 0, times 0 [ 487.301720][T19954] CPU: 0 UID: 0 PID: 19954 Comm: syz.2.4409 Not tainted syzkaller #0 PREEMPT(full) [ 487.301751][T19954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 487.301765][T19954] Call Trace: [ 487.301775][T19954] [ 487.301785][T19954] dump_stack_lvl+0xe8/0x150 [ 487.301830][T19954] should_fail_ex+0x3eb/0x540 [ 487.301864][T19954] should_failslab+0xa8/0x100 [ 487.301901][T19954] __kmalloc_cache_noprof+0x9e/0x600 [ 487.301930][T19954] ? __kmalloc_cache_noprof+0x148/0x600 [ 487.301957][T19954] ? sctp_add_bind_addr+0x8c/0x370 [ 487.301984][T19954] ? sctp_add_bind_addr+0x8c/0x370 [ 487.302019][T19954] sctp_add_bind_addr+0x8c/0x370 [ 487.302053][T19954] sctp_copy_local_addr_list+0x31a/0x4e0 [ 487.302085][T19954] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 487.302114][T19954] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 487.302146][T19954] ? sctp_v6_is_any+0x64/0x80 [ 487.302178][T19954] ? sctp_copy_one_addr+0x93/0x360 [ 487.302210][T19954] sctp_bind_addr_copy+0xb3/0x3c0 [ 487.302247][T19954] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 487.302276][T19954] sctp_connect_new_asoc+0x2ff/0x6b0 [ 487.302315][T19954] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 487.302358][T19954] ? __local_bh_enable_ip+0xd6/0x140 [ 487.302389][T19954] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 487.302420][T19954] ? security_sctp_bind_connect+0x7e/0x2c0 [ 487.302456][T19954] sctp_sendmsg+0x159b/0x2d00 [ 487.302508][T19954] ? __pfx_sctp_sendmsg+0x10/0x10 [ 487.302547][T19954] ? __lock_acquire+0x747/0x2de0 [ 487.302594][T19954] ? aa_sock_msg_perm+0xf5/0x210 [ 487.302615][T19954] ? sock_rps_record_flow+0x19/0x350 [ 487.302643][T19954] ? inet_sendmsg+0x298/0x320 [ 487.302671][T19954] ? __pfx_inet_sendmsg+0x10/0x10 [ 487.302694][T19954] sock_sendmsg_nosec+0x10f/0x190 [ 487.302728][T19954] ____sys_sendmsg+0x54e/0x850 [ 487.302760][T19954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.302797][T19954] ? import_iovec+0x73/0xa0 [ 487.302831][T19954] ___sys_sendmsg+0x2a5/0x360 [ 487.302854][T19954] ? __lock_acquire+0x747/0x2de0 [ 487.302889][T19954] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.302920][T19954] ? kstrtouint+0x6e/0xe0 [ 487.302988][T19954] ? __fget_files+0x3a2/0x420 [ 487.303015][T19954] ? __fget_files+0x2a/0x420 [ 487.303054][T19954] __sys_sendmmsg+0x273/0x4e0 [ 487.303086][T19954] ? __pfx___sys_sendmmsg+0x10/0x10 [ 487.303123][T19954] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 487.303170][T19954] ? ksys_write+0x242/0x270 [ 487.303203][T19954] ? __pfx_ksys_write+0x10/0x10 [ 487.303249][T19954] __x64_sys_sendmmsg+0xa0/0xc0 [ 487.303278][T19954] do_syscall_64+0x166/0x520 [ 487.303305][T19954] ? trace_irq_disable+0x3b/0x140 [ 487.303336][T19954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.303360][T19954] ? clear_bhb_loop+0x70/0xc0 [ 487.303389][T19954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.303413][T19954] RIP: 0033:0x7ffbd6f9fb19 [ 487.303434][T19954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.303455][T19954] RSP: 002b:00007ffbd7e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.303480][T19954] RAX: ffffffffffffffda RBX: 00007ffbd7225fa0 RCX: 00007ffbd6f9fb19 [ 487.303498][T19954] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 487.303513][T19954] RBP: 00007ffbd7e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 487.303528][T19954] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 487.303542][T19954] R13: 00007ffbd7226038 R14: 00007ffbd7225fa0 R15: 00007ffddd199678 [ 487.303580][T19954] [ 487.962005][T19980] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 487.972003][T19980] bond7 (unregistering): Released all slaves [ 490.367632][T19956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.701997][T20008] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4427'. [ 490.702028][T20008] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4427'. [ 490.784837][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4427'. [ 490.897137][T20018] openvswitch: netlink: Missing key (keys=40, expected=100) [ 491.108897][T20027] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.915767][T20058] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4443'. [ 491.951664][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4443'. [ 491.980099][T20060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4444'. [ 492.057256][T20065] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4445'. [ 492.198957][ T53] Bluetooth: hci2: link tx timeout [ 492.198979][ T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 492.279851][T20079] FAULT_INJECTION: forcing a failure. [ 492.279851][T20079] name failslab, interval 1, probability 0, space 0, times 0 [ 492.279888][T20079] CPU: 0 UID: 0 PID: 20079 Comm: syz.3.4448 Not tainted syzkaller #0 PREEMPT(full) [ 492.279913][T20079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 492.279928][T20079] Call Trace: [ 492.279937][T20079] [ 492.279946][T20079] dump_stack_lvl+0xe8/0x150 [ 492.279988][T20079] should_fail_ex+0x3eb/0x540 [ 492.280021][T20079] should_failslab+0xa8/0x100 [ 492.280058][T20079] __kmalloc_cache_noprof+0x9e/0x600 [ 492.280087][T20079] ? __kmalloc_cache_noprof+0x148/0x600 [ 492.280114][T20079] ? sctp_add_bind_addr+0x8c/0x370 [ 492.280140][T20079] ? sctp_add_bind_addr+0x8c/0x370 [ 492.280247][T20079] sctp_add_bind_addr+0x8c/0x370 [ 492.280289][T20079] sctp_copy_local_addr_list+0x31a/0x4e0 [ 492.280322][T20079] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 492.280353][T20079] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 492.280383][T20079] ? sctp_v6_is_any+0x64/0x80 [ 492.280428][T20079] ? sctp_copy_one_addr+0x93/0x360 [ 492.280458][T20079] sctp_bind_addr_copy+0xb3/0x3c0 [ 492.280486][T20079] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 492.280514][T20079] sctp_connect_new_asoc+0x2ff/0x6b0 [ 492.280550][T20079] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 492.280585][T20079] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 492.280618][T20079] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 492.280661][T20079] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 492.280696][T20079] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 492.280729][T20079] ? security_sctp_bind_connect+0x7e/0x2c0 [ 492.280765][T20079] sctp_sendmsg+0x159b/0x2d00 [ 492.280815][T20079] ? __pfx_sctp_sendmsg+0x10/0x10 [ 492.280859][T20079] ? __lock_acquire+0x747/0x2de0 [ 492.280905][T20079] ? aa_sock_msg_perm+0xf5/0x210 [ 492.280928][T20079] ? sock_rps_record_flow+0x19/0x350 [ 492.280957][T20079] ? inet_sendmsg+0x298/0x320 [ 492.280979][T20079] ? apparmor_socket_sendmsg+0x98/0x360 [ 492.281012][T20079] ? __pfx_inet_sendmsg+0x10/0x10 [ 492.281033][T20079] sock_sendmsg_nosec+0x10f/0x190 [ 492.281067][T20079] ____sys_sendmsg+0x54e/0x850 [ 492.281098][T20079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.281133][T20079] ? import_iovec+0x73/0xa0 [ 492.281166][T20079] ___sys_sendmsg+0x2a5/0x360 [ 492.281189][T20079] ? __lock_acquire+0x747/0x2de0 [ 492.281223][T20079] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.281256][T20079] ? kstrtouint+0x6e/0xe0 [ 492.281325][T20079] ? __fget_files+0x3a2/0x420 [ 492.281354][T20079] ? __fget_files+0x2a/0x420 [ 492.281393][T20079] __sys_sendmmsg+0x273/0x4e0 [ 492.281427][T20079] ? __pfx___sys_sendmmsg+0x10/0x10 [ 492.281465][T20079] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 492.281514][T20079] ? ksys_write+0x242/0x270 [ 492.281549][T20079] ? __pfx_ksys_write+0x10/0x10 [ 492.281588][T20079] __x64_sys_sendmmsg+0xa0/0xc0 [ 492.281616][T20079] do_syscall_64+0x166/0x520 [ 492.281653][T20079] ? trace_irq_disable+0x3b/0x140 [ 492.281685][T20079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.281711][T20079] ? clear_bhb_loop+0x70/0xc0 [ 492.281741][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.281765][T20079] RIP: 0033:0x7f498239fb19 [ 492.281788][T20079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.281809][T20079] RSP: 002b:00007f4983258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 492.281835][T20079] RAX: ffffffffffffffda RBX: 00007f4982625fa0 RCX: 00007f498239fb19 [ 492.281852][T20079] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 492.281868][T20079] RBP: 00007f4983258090 R08: 0000000000000000 R09: 0000000000000000 [ 492.281883][T20079] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 492.281898][T20079] R13: 00007f4982626038 R14: 00007f4982625fa0 R15: 00007ffed858f478 [ 492.281935][T20079] [ 492.678296][T20082] TCP: TCP_TX_DELAY enabled [ 492.880416][T20091] netlink: 'syz.0.4452': attribute type 1 has an invalid length. [ 493.150454][T20103] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4460'. [ 493.479215][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 493.898807][T20141] sctp: [Deprecated]: syz.4.4474 (pid 20141) Use of int in max_burst socket option. [ 493.898807][T20141] Use struct sctp_assoc_value instead [ 494.149187][T20152] ip6gretap0: entered promiscuous mode [ 494.279137][ T5660] Bluetooth: hci2: command 0x0406 tx timeout [ 495.341018][ T12] IPVS: starting estimator thread 0... [ 495.434488][T20200] IPVS: using max 25 ests per chain, 60000 per kthread [ 497.338282][T20257] syzkaller0: entered promiscuous mode [ 497.338309][T20257] syzkaller0: entered allmulticast mode [ 497.384291][T20257] tipc: Enabled bearer , priority 0 [ 497.407217][T20256] tipc: Resetting bearer [ 497.455071][T20256] tipc: Disabling bearer [ 497.618969][T20267] netlink: 'syz.1.4531': attribute type 12 has an invalid length. [ 497.618994][T20267] netlink: 'syz.1.4531': attribute type 29 has an invalid length. [ 497.619010][T20267] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4531'. [ 497.619031][T20267] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4531'. [ 497.743375][T20275] netlink: 'syz.2.4533': attribute type 2 has an invalid length. [ 497.757807][T20275] netlink: 'syz.2.4533': attribute type 1 has an invalid length. [ 497.757861][T20275] nbd: nbd296 already in use [ 498.487125][T20317] netlink: 'syz.1.4547': attribute type 2 has an invalid length. [ 498.529496][T20321] sock: sock_timestamping_bind_phc: sock not bind to device [ 498.530188][T20317] netlink: 'syz.1.4547': attribute type 1 has an invalid length. [ 498.530216][T20317] nbd: nbd296 already in use [ 498.573911][T20323] FAULT_INJECTION: forcing a failure. [ 498.573911][T20323] name failslab, interval 1, probability 0, space 0, times 0 [ 498.573947][T20323] CPU: 1 UID: 0 PID: 20323 Comm: syz.0.4548 Not tainted syzkaller #0 PREEMPT(full) [ 498.573973][T20323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 498.573987][T20323] Call Trace: [ 498.573997][T20323] [ 498.574007][T20323] dump_stack_lvl+0xe8/0x150 [ 498.574051][T20323] should_fail_ex+0x3eb/0x540 [ 498.574087][T20323] should_failslab+0xa8/0x100 [ 498.574124][T20323] __kmalloc_cache_noprof+0x9e/0x600 [ 498.574165][T20323] ? __kmalloc_cache_noprof+0x148/0x600 [ 498.574192][T20323] ? sctp_add_bind_addr+0x8c/0x370 [ 498.574219][T20323] ? sctp_add_bind_addr+0x8c/0x370 [ 498.574261][T20323] sctp_add_bind_addr+0x8c/0x370 [ 498.574295][T20323] sctp_copy_local_addr_list+0x31a/0x4e0 [ 498.574330][T20323] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 498.574358][T20323] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 498.574389][T20323] ? sctp_v6_is_any+0x64/0x80 [ 498.574420][T20323] ? sctp_copy_one_addr+0x93/0x360 [ 498.574451][T20323] sctp_bind_addr_copy+0xb3/0x3c0 [ 498.574480][T20323] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 498.574510][T20323] sctp_connect_new_asoc+0x2ff/0x6b0 [ 498.574550][T20323] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 498.574592][T20323] ? __local_bh_enable_ip+0xd6/0x140 [ 498.574623][T20323] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 498.574655][T20323] ? security_sctp_bind_connect+0x7e/0x2c0 [ 498.574692][T20323] sctp_sendmsg+0x159b/0x2d00 [ 498.574743][T20323] ? __pfx_sctp_sendmsg+0x10/0x10 [ 498.574782][T20323] ? __lock_acquire+0x747/0x2de0 [ 498.574829][T20323] ? aa_sock_msg_perm+0xf5/0x210 [ 498.574851][T20323] ? sock_rps_record_flow+0x19/0x350 [ 498.574880][T20323] ? inet_sendmsg+0x298/0x320 [ 498.574908][T20323] ? __pfx_inet_sendmsg+0x10/0x10 [ 498.574931][T20323] sock_sendmsg_nosec+0x10f/0x190 [ 498.574966][T20323] ____sys_sendmsg+0x54e/0x850 [ 498.574998][T20323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.575035][T20323] ? import_iovec+0x73/0xa0 [ 498.575069][T20323] ___sys_sendmsg+0x2a5/0x360 [ 498.575091][T20323] ? __lock_acquire+0x747/0x2de0 [ 498.575126][T20323] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.575165][T20323] ? kstrtouint+0x6e/0xe0 [ 498.575233][T20323] ? __fget_files+0x3a2/0x420 [ 498.575261][T20323] ? __fget_files+0x2a/0x420 [ 498.575300][T20323] __sys_sendmmsg+0x273/0x4e0 [ 498.575333][T20323] ? __pfx___sys_sendmmsg+0x10/0x10 [ 498.575370][T20323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.575417][T20323] ? ksys_write+0x242/0x270 [ 498.575450][T20323] ? __pfx_ksys_write+0x10/0x10 [ 498.575490][T20323] __x64_sys_sendmmsg+0xa0/0xc0 [ 498.575518][T20323] do_syscall_64+0x166/0x520 [ 498.575544][T20323] ? trace_irq_disable+0x3b/0x140 [ 498.575576][T20323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.575600][T20323] ? clear_bhb_loop+0x70/0xc0 [ 498.575630][T20323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.575653][T20323] RIP: 0033:0x7f3a5cd9fb19 [ 498.575675][T20323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.575695][T20323] RSP: 002b:00007f3a5dd3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 498.575719][T20323] RAX: ffffffffffffffda RBX: 00007f3a5d025fa0 RCX: 00007f3a5cd9fb19 [ 498.575738][T20323] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 498.575753][T20323] RBP: 00007f3a5dd3a090 R08: 0000000000000000 R09: 0000000000000000 [ 498.575768][T20323] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 498.575783][T20323] R13: 00007f3a5d026038 R14: 00007f3a5d025fa0 R15: 00007ffebf515e48 [ 498.575821][T20323] [ 499.162156][T20336] syzkaller0: MTU not usable for tipc bearer [ 499.162200][T20336] tipc: Enabling of bearer rejected, failed to enable media [ 499.295305][T20341] FAULT_INJECTION: forcing a failure. [ 499.295305][T20341] name failslab, interval 1, probability 0, space 0, times 0 [ 499.295342][T20341] CPU: 0 UID: 0 PID: 20341 Comm: syz.3.4555 Not tainted syzkaller #0 PREEMPT(full) [ 499.295369][T20341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 499.295383][T20341] Call Trace: [ 499.295391][T20341] [ 499.295401][T20341] dump_stack_lvl+0xe8/0x150 [ 499.295444][T20341] should_fail_ex+0x3eb/0x540 [ 499.295479][T20341] should_failslab+0xa8/0x100 [ 499.295514][T20341] __kmalloc_cache_noprof+0x9e/0x600 [ 499.295551][T20341] ? __kmalloc_cache_noprof+0x148/0x600 [ 499.295579][T20341] ? sctp_add_bind_addr+0x8c/0x370 [ 499.295604][T20341] ? sctp_add_bind_addr+0x8c/0x370 [ 499.295638][T20341] sctp_add_bind_addr+0x8c/0x370 [ 499.295671][T20341] sctp_copy_local_addr_list+0x31a/0x4e0 [ 499.295702][T20341] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 499.295732][T20341] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 499.295768][T20341] ? sctp_v6_is_any+0x64/0x80 [ 499.295801][T20341] ? sctp_copy_one_addr+0x93/0x360 [ 499.295833][T20341] sctp_bind_addr_copy+0xb3/0x3c0 [ 499.295863][T20341] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 499.295893][T20341] sctp_connect_new_asoc+0x2ff/0x6b0 [ 499.295931][T20341] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 499.295967][T20341] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 499.296002][T20341] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 499.296034][T20341] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 499.296069][T20341] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 499.296100][T20341] ? security_sctp_bind_connect+0x7e/0x2c0 [ 499.296136][T20341] sctp_sendmsg+0x159b/0x2d00 [ 499.296186][T20341] ? __pfx_sctp_sendmsg+0x10/0x10 [ 499.296226][T20341] ? __lock_acquire+0x747/0x2de0 [ 499.296273][T20341] ? aa_sock_msg_perm+0xf5/0x210 [ 499.296294][T20341] ? sock_rps_record_flow+0x19/0x350 [ 499.296322][T20341] ? inet_sendmsg+0x298/0x320 [ 499.296344][T20341] ? apparmor_socket_sendmsg+0x98/0x360 [ 499.296380][T20341] ? __pfx_inet_sendmsg+0x10/0x10 [ 499.296403][T20341] sock_sendmsg_nosec+0x10f/0x190 [ 499.296438][T20341] ____sys_sendmsg+0x54e/0x850 [ 499.296470][T20341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.296506][T20341] ? import_iovec+0x73/0xa0 [ 499.296539][T20341] ___sys_sendmsg+0x2a5/0x360 [ 499.296569][T20341] ? __lock_acquire+0x747/0x2de0 [ 499.296604][T20341] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.296636][T20341] ? kstrtouint+0x6e/0xe0 [ 499.296705][T20341] ? __fget_files+0x3a2/0x420 [ 499.296732][T20341] ? __fget_files+0x2a/0x420 [ 499.296771][T20341] __sys_sendmmsg+0x273/0x4e0 [ 499.296804][T20341] ? __pfx___sys_sendmmsg+0x10/0x10 [ 499.296840][T20341] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 499.296888][T20341] ? ksys_write+0x242/0x270 [ 499.296922][T20341] ? __pfx_ksys_write+0x10/0x10 [ 499.296961][T20341] __x64_sys_sendmmsg+0xa0/0xc0 [ 499.296989][T20341] do_syscall_64+0x166/0x520 [ 499.297015][T20341] ? trace_irq_disable+0x3b/0x140 [ 499.297047][T20341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.297072][T20341] ? clear_bhb_loop+0x70/0xc0 [ 499.297102][T20341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.297125][T20341] RIP: 0033:0x7f498239fb19 [ 499.297148][T20341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.297168][T20341] RSP: 002b:00007f4983258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 499.297193][T20341] RAX: ffffffffffffffda RBX: 00007f4982625fa0 RCX: 00007f498239fb19 [ 499.297211][T20341] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 499.297226][T20341] RBP: 00007f4983258090 R08: 0000000000000000 R09: 0000000000000000 [ 499.297240][T20341] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 499.297255][T20341] R13: 00007f4982626038 R14: 00007f4982625fa0 R15: 00007ffed858f478 [ 499.297291][T20341] [ 499.713957][T20337] x_tables: ip_tables: osf match: only valid for protocol 6 [ 499.850566][T20353] netlink: 'syz.4.4558': attribute type 1 has an invalid length. [ 499.939143][T20353] 8021q: adding VLAN 0 to HW filter on device bond7 [ 500.018159][T20360] bond7: (slave veth0_to_bond): making interface the new active one [ 500.053063][T20360] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 500.065938][T20363] batman_adv: batadv0: Adding interface: syzkaller0 [ 500.065957][T20363] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.066003][T20363] batman_adv: batadv0: Interface activated: syzkaller0 [ 500.139018][T20357] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 500.233558][T20357] batman_adv: batadv0: Removing interface: syzkaller0 [ 500.270811][T20353] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4558'. [ 500.320828][T20353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'. [ 500.465744][T20383] netlink: 'syz.1.4569': attribute type 12 has an invalid length. [ 500.465770][T20383] netlink: 'syz.1.4569': attribute type 29 has an invalid length. [ 500.465785][T20383] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4569'. [ 500.465805][T20383] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4569'. [ 501.638726][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.159199][T20470] syzkaller0: entered promiscuous mode [ 502.159228][T20470] syzkaller0: entered allmulticast mode [ 502.239880][T20470] tipc: Enabled bearer , priority 0 [ 502.255675][T20467] tipc: Resetting bearer [ 502.338504][T20467] tipc: Disabling bearer [ 502.386707][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'. [ 502.420328][T20481] FAULT_INJECTION: forcing a failure. [ 502.420328][T20481] name failslab, interval 1, probability 0, space 0, times 0 [ 502.420362][T20481] CPU: 0 UID: 0 PID: 20481 Comm: syz.3.4596 Not tainted syzkaller #0 PREEMPT(full) [ 502.420389][T20481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 502.420405][T20481] Call Trace: [ 502.420414][T20481] [ 502.420424][T20481] dump_stack_lvl+0xe8/0x150 [ 502.420468][T20481] should_fail_ex+0x3eb/0x540 [ 502.420502][T20481] should_failslab+0xa8/0x100 [ 502.420541][T20481] __kmalloc_cache_noprof+0x9e/0x600 [ 502.420571][T20481] ? __kmalloc_cache_noprof+0x148/0x600 [ 502.420598][T20481] ? sctp_add_bind_addr+0x8c/0x370 [ 502.420624][T20481] ? sctp_add_bind_addr+0x8c/0x370 [ 502.420660][T20481] sctp_add_bind_addr+0x8c/0x370 [ 502.420693][T20481] sctp_copy_local_addr_list+0x31a/0x4e0 [ 502.420725][T20481] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 502.420756][T20481] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 502.420788][T20481] ? sctp_v6_is_any+0x64/0x80 [ 502.420821][T20481] ? sctp_copy_one_addr+0x93/0x360 [ 502.420863][T20481] sctp_bind_addr_copy+0xb3/0x3c0 [ 502.420893][T20481] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 502.420922][T20481] sctp_connect_new_asoc+0x2ff/0x6b0 [ 502.420961][T20481] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 502.420998][T20481] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 502.421032][T20481] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 502.421065][T20481] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 502.421100][T20481] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 502.421133][T20481] ? security_sctp_bind_connect+0x7e/0x2c0 [ 502.421170][T20481] sctp_sendmsg+0x159b/0x2d00 [ 502.421221][T20481] ? __pfx_sctp_sendmsg+0x10/0x10 [ 502.421265][T20481] ? __lock_acquire+0x747/0x2de0 [ 502.421311][T20481] ? aa_sock_msg_perm+0xf5/0x210 [ 502.421333][T20481] ? sock_rps_record_flow+0x19/0x350 [ 502.421360][T20481] ? inet_sendmsg+0x298/0x320 [ 502.421382][T20481] ? apparmor_socket_sendmsg+0x98/0x360 [ 502.421417][T20481] ? __pfx_inet_sendmsg+0x10/0x10 [ 502.421440][T20481] sock_sendmsg_nosec+0x10f/0x190 [ 502.421475][T20481] ____sys_sendmsg+0x54e/0x850 [ 502.421508][T20481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.421544][T20481] ? import_iovec+0x73/0xa0 [ 502.421579][T20481] ___sys_sendmsg+0x2a5/0x360 [ 502.421602][T20481] ? __lock_acquire+0x747/0x2de0 [ 502.421637][T20481] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.421704][T20481] ? __fget_files+0x3a2/0x420 [ 502.421731][T20481] ? __fget_files+0x2a/0x420 [ 502.421777][T20481] __sys_sendmmsg+0x273/0x4e0 [ 502.421810][T20481] ? __pfx___sys_sendmmsg+0x10/0x10 [ 502.421886][T20481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 502.421937][T20481] ? rcu_is_watching+0x16/0xb0 [ 502.421981][T20481] __x64_sys_sendmmsg+0xa0/0xc0 [ 502.422010][T20481] do_syscall_64+0x166/0x520 [ 502.422036][T20481] ? trace_irq_disable+0x3b/0x140 [ 502.422067][T20481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.422091][T20481] ? clear_bhb_loop+0x70/0xc0 [ 502.422121][T20481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.422144][T20481] RIP: 0033:0x7f498239fb19 [ 502.422166][T20481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.422187][T20481] RSP: 002b:00007f4983258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 502.422212][T20481] RAX: ffffffffffffffda RBX: 00007f4982625fa0 RCX: 00007f498239fb19 [ 502.422228][T20481] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 502.422243][T20481] RBP: 00007f4983258090 R08: 0000000000000000 R09: 0000000000000000 [ 502.422258][T20481] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 502.422272][T20481] R13: 00007f4982626038 R14: 00007f4982625fa0 R15: 00007ffed858f478 [ 502.422307][T20481] [ 503.108643][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4601'. [ 503.152064][T20498] xt_ecn: cannot match TCP bits for non-tcp packets [ 503.175527][T20499] netlink: 'syz.0.4601': attribute type 3 has an invalid length. [ 503.208213][T20498] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4603'. [ 503.317337][ T4956] Bluetooth: hci3: command 0x0406 tx timeout [ 503.354836][ T12] IPVS: starting estimator thread 0... [ 503.396780][T20508] FAULT_INJECTION: forcing a failure. [ 503.396780][T20508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.396822][T20508] CPU: 0 UID: 0 PID: 20508 Comm: syz.0.4606 Not tainted syzkaller #0 PREEMPT(full) [ 503.396848][T20508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 503.396863][T20508] Call Trace: [ 503.396872][T20508] [ 503.396883][T20508] dump_stack_lvl+0xe8/0x150 [ 503.396924][T20508] should_fail_ex+0x3eb/0x540 [ 503.396958][T20508] _copy_from_user+0x2d/0xb0 [ 503.396989][T20508] ___sys_sendmsg+0x1c6/0x360 [ 503.397013][T20508] ? __lock_acquire+0x747/0x2de0 [ 503.397048][T20508] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.397115][T20508] ? __fget_files+0x3a2/0x420 [ 503.397143][T20508] ? __fget_files+0x2a/0x420 [ 503.397181][T20508] __x64_sys_sendmsg+0x1b1/0x290 [ 503.397210][T20508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.397260][T20508] do_syscall_64+0x166/0x520 [ 503.397287][T20508] ? trace_irq_disable+0x3b/0x140 [ 503.397319][T20508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.397343][T20508] ? clear_bhb_loop+0x70/0xc0 [ 503.397372][T20508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.397396][T20508] RIP: 0033:0x7f3a5cd9fb19 [ 503.397418][T20508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.397440][T20508] RSP: 002b:00007f3a5dd3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.397465][T20508] RAX: ffffffffffffffda RBX: 00007f3a5d025fa0 RCX: 00007f3a5cd9fb19 [ 503.397483][T20508] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 503.397498][T20508] RBP: 00007f3a5dd3a090 R08: 0000000000000000 R09: 0000000000000000 [ 503.397512][T20508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.397526][T20508] R13: 00007f3a5d026038 R14: 00007f3a5d025fa0 R15: 00007ffebf515e48 [ 503.397564][T20508] [ 503.447309][T20506] IPVS: using max 26 ests per chain, 62400 per kthread [ 503.699842][T20515] syzkaller0: entered promiscuous mode [ 503.699870][T20515] syzkaller0: entered allmulticast mode [ 503.770413][T20515] tipc: Enabled bearer , priority 0 [ 503.789783][T20513] tipc: Resetting bearer [ 503.848658][T20513] tipc: Disabling bearer [ 503.877774][T20522] netlink: 'syz.0.4610': attribute type 2 has an invalid length. [ 503.914306][T20520] bridge2: entered allmulticast mode [ 503.940913][T20518] netlink: 'syz.0.4610': attribute type 1 has an invalid length. [ 503.940946][T20518] nbd: nbd296 already in use [ 503.987532][T20526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 504.029745][T20520] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.127836][ T12] IPVS: starting estimator thread 0... [ 504.215371][T20534] IPVS: using max 37 ests per chain, 88800 per kthread [ 504.521288][T20551] syzkaller0: entered promiscuous mode [ 504.521315][T20551] syzkaller0: entered allmulticast mode [ 504.546485][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4620'. [ 504.808883][T20565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4623'. [ 504.832633][T20566] netlink: 'syz.0.4624': attribute type 2 has an invalid length. [ 504.856005][T20566] netlink: 'syz.0.4624': attribute type 1 has an invalid length. [ 504.856041][T20566] nbd: nbd296 already in use [ 505.012519][T20569] syzkaller0: entered promiscuous mode [ 505.012546][T20569] syzkaller0: entered allmulticast mode [ 505.147108][T20569] tipc: Enabled bearer , priority 0 [ 505.173873][T20568] tipc: Resetting bearer [ 505.192102][T20579] ip_tables: iptables: counters copy to user failed while replacing table [ 505.240087][T20568] tipc: Disabling bearer [ 505.275073][ T5300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.430925][T20595] netlink: 'syz.3.4630': attribute type 1 has an invalid length. [ 505.468191][T20595] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.512911][T20585] syzkaller1: entered promiscuous mode [ 505.512937][T20585] syzkaller1: entered allmulticast mode [ 505.721601][T20609] netlink: get zone limit has 8 unknown bytes [ 508.129418][T20578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.461182][T20638] syzkaller0: entered promiscuous mode [ 508.461209][T20638] syzkaller0: entered allmulticast mode [ 508.637083][T20638] tipc: Enabled bearer , priority 0 [ 508.659203][T20636] tipc: Resetting bearer [ 508.768583][T20636] tipc: Disabling bearer [ 509.001571][T20654] netlink: 'syz.3.4645': attribute type 16 has an invalid length. [ 509.001598][T20654] netlink: 'syz.3.4645': attribute type 17 has an invalid length. [ 509.204125][T20654] veth1_macvtap: entered promiscuous mode [ 509.259041][T20654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.427422][ T1392] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 509.427507][ T1392] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 509.454448][ T1392] bond2: active interface up! [ 509.687985][T20678] FAULT_INJECTION: forcing a failure. [ 509.687985][T20678] name failslab, interval 1, probability 0, space 0, times 0 [ 509.689612][T20678] CPU: 1 UID: 0 PID: 20678 Comm: syz.4.4650 Not tainted syzkaller #0 PREEMPT(full) [ 509.689641][T20678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 509.689653][T20678] Call Trace: [ 509.689661][T20678] [ 509.689670][T20678] dump_stack_lvl+0xe8/0x150 [ 509.689730][T20678] should_fail_ex+0x3eb/0x540 [ 509.689764][T20678] should_failslab+0xa8/0x100 [ 509.689800][T20678] __kmalloc_noprof+0xf9/0x710 [ 509.689829][T20678] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 509.689857][T20678] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 509.689893][T20678] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 509.689931][T20678] genl_family_rcv_msg_doit+0xda/0x340 [ 509.689966][T20678] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 509.690002][T20678] ? apparmor_capable+0x126/0x170 [ 509.690034][T20678] ? bpf_lsm_capable+0x9/0x20 [ 509.690054][T20678] ? security_capable+0x7e/0x2c0 [ 509.690098][T20678] genl_rcv_msg+0x614/0x7a0 [ 509.690132][T20678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.690155][T20678] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 509.690180][T20678] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 509.690214][T20678] ? __pfx_nl80211_post_doit+0x10/0x10 [ 509.690257][T20678] netlink_rcv_skb+0x226/0x4a0 [ 509.690291][T20678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.690319][T20678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.690377][T20678] ? down_read+0x2b9/0x320 [ 509.690413][T20678] genl_rcv+0x28/0x40 [ 509.690436][T20678] netlink_unicast+0x8ef/0xa80 [ 509.690487][T20678] netlink_sendmsg+0x7f0/0xb20 [ 509.690527][T20678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.690564][T20678] ? aa_sock_msg_perm+0x144/0x210 [ 509.690593][T20678] ? apparmor_socket_sendmsg+0x98/0x360 [ 509.690629][T20678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.690660][T20678] sock_sendmsg_nosec+0x14e/0x190 [ 509.690702][T20678] ____sys_sendmsg+0x54e/0x850 [ 509.690736][T20678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.690773][T20678] ? import_iovec+0x73/0xa0 [ 509.690806][T20678] ___sys_sendmsg+0x2a5/0x360 [ 509.690829][T20678] ? __lock_acquire+0x747/0x2de0 [ 509.690865][T20678] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.690933][T20678] ? __fget_files+0x3a2/0x420 [ 509.690962][T20678] ? __fget_files+0x2a/0x420 [ 509.691003][T20678] __x64_sys_sendmsg+0x1b1/0x290 [ 509.691032][T20678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.691085][T20678] do_syscall_64+0x166/0x520 [ 509.691117][T20678] ? trace_irq_disable+0x3b/0x140 [ 509.691149][T20678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.691174][T20678] ? clear_bhb_loop+0x70/0xc0 [ 509.691204][T20678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.691228][T20678] RIP: 0033:0x7f7c2579fb19 [ 509.691250][T20678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.691271][T20678] RSP: 002b:00007f7c239d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.691295][T20678] RAX: ffffffffffffffda RBX: 00007f7c25a26090 RCX: 00007f7c2579fb19 [ 509.691312][T20678] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 509.691326][T20678] RBP: 00007f7c239d5090 R08: 0000000000000000 R09: 0000000000000000 [ 509.691341][T20678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.691354][T20678] R13: 00007f7c25a26128 R14: 00007f7c25a26090 R15: 00007ffe635a2ed8 [ 509.691392][T20678] [ 510.318859][T20690] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4651'. [ 510.462044][T20694] syzkaller0: MTU not usable for tipc bearer [ 510.462088][T20694] tipc: Enabling of bearer rejected, failed to enable media [ 510.668440][T20703] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4657'. [ 510.722409][T20708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4659'. [ 510.751107][T20705] bond0: (slave team0): Releasing backup interface [ 510.790466][T20705] team0 (unregistering): Port device team_slave_0 removed [ 510.812126][T20705] team0 (unregistering): Port device team_slave_1 removed [ 510.891294][T20709] netlink: 'syz.0.4660': attribute type 2 has an invalid length. [ 511.260014][T20733] FAULT_INJECTION: forcing a failure. [ 511.260014][T20733] name failslab, interval 1, probability 0, space 0, times 0 [ 511.260050][T20733] CPU: 1 UID: 0 PID: 20733 Comm: syz.1.4667 Not tainted syzkaller #0 PREEMPT(full) [ 511.260076][T20733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 511.260091][T20733] Call Trace: [ 511.260100][T20733] [ 511.260110][T20733] dump_stack_lvl+0xe8/0x150 [ 511.260152][T20733] should_fail_ex+0x3eb/0x540 [ 511.260187][T20733] should_failslab+0xa8/0x100 [ 511.260237][T20733] __kmalloc_cache_noprof+0x9e/0x600 [ 511.260268][T20733] ? __kmalloc_cache_noprof+0x148/0x600 [ 511.260295][T20733] ? sctp_add_bind_addr+0x8c/0x370 [ 511.260322][T20733] ? sctp_add_bind_addr+0x8c/0x370 [ 511.260357][T20733] sctp_add_bind_addr+0x8c/0x370 [ 511.260392][T20733] sctp_copy_local_addr_list+0x31a/0x4e0 [ 511.260425][T20733] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 511.260455][T20733] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 511.260486][T20733] ? sctp_v6_is_any+0x64/0x80 [ 511.260519][T20733] ? sctp_copy_one_addr+0x93/0x360 [ 511.260551][T20733] sctp_bind_addr_copy+0xb3/0x3c0 [ 511.260580][T20733] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 511.260609][T20733] sctp_connect_new_asoc+0x2ff/0x6b0 [ 511.260648][T20733] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 511.260691][T20733] ? __local_bh_enable_ip+0xd6/0x140 [ 511.260722][T20733] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 511.260754][T20733] ? security_sctp_bind_connect+0x7e/0x2c0 [ 511.260791][T20733] sctp_sendmsg+0x159b/0x2d00 [ 511.260843][T20733] ? __pfx_sctp_sendmsg+0x10/0x10 [ 511.260883][T20733] ? __lock_acquire+0x747/0x2de0 [ 511.260931][T20733] ? aa_sock_msg_perm+0xf5/0x210 [ 511.260953][T20733] ? sock_rps_record_flow+0x19/0x350 [ 511.260985][T20733] ? inet_sendmsg+0x298/0x320 [ 511.261015][T20733] ? __pfx_inet_sendmsg+0x10/0x10 [ 511.261039][T20733] sock_sendmsg_nosec+0x10f/0x190 [ 511.261075][T20733] ____sys_sendmsg+0x54e/0x850 [ 511.261108][T20733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.261147][T20733] ? import_iovec+0x73/0xa0 [ 511.261182][T20733] ___sys_sendmsg+0x2a5/0x360 [ 511.261206][T20733] ? __lock_acquire+0x747/0x2de0 [ 511.261252][T20733] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.261284][T20733] ? kstrtouint+0x6e/0xe0 [ 511.261354][T20733] ? __fget_files+0x3a2/0x420 [ 511.261383][T20733] ? __fget_files+0x2a/0x420 [ 511.261421][T20733] __sys_sendmmsg+0x273/0x4e0 [ 511.261453][T20733] ? __pfx___sys_sendmmsg+0x10/0x10 [ 511.261489][T20733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 511.261536][T20733] ? ksys_write+0x242/0x270 [ 511.261568][T20733] ? __pfx_ksys_write+0x10/0x10 [ 511.261604][T20733] __x64_sys_sendmmsg+0xa0/0xc0 [ 511.261632][T20733] do_syscall_64+0x166/0x520 [ 511.261659][T20733] ? trace_irq_disable+0x3b/0x140 [ 511.261691][T20733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.261714][T20733] ? clear_bhb_loop+0x70/0xc0 [ 511.261743][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.261766][T20733] RIP: 0033:0x7f7a7e39fb19 [ 511.261786][T20733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.261806][T20733] RSP: 002b:00007f7a7f1ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 511.261831][T20733] RAX: ffffffffffffffda RBX: 00007f7a7e625fa0 RCX: 00007f7a7e39fb19 [ 511.261849][T20733] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 511.261864][T20733] RBP: 00007f7a7f1ad090 R08: 0000000000000000 R09: 0000000000000000 [ 511.261879][T20733] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 511.261893][T20733] R13: 00007f7a7e626038 R14: 00007f7a7e625fa0 R15: 00007fff81a4d4b8 [ 511.261933][T20733] [ 511.333020][T20739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4665'. [ 514.037587][T20720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.159830][T20770] netlink: 'syz.0.4677': attribute type 2 has an invalid length. [ 514.176493][T20770] netlink: 'syz.0.4677': attribute type 1 has an invalid length. [ 514.176535][T20770] nbd: nbd296 already in use [ 514.285500][T20775] netlink: 'syz.4.4678': attribute type 8 has an invalid length. [ 514.288161][T20775] syzkaller0: entered promiscuous mode [ 514.288203][T20775] syzkaller0: entered allmulticast mode [ 514.343798][T20776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4682'. [ 514.659941][T20793] ip_tables: iptables: counters copy to user failed while replacing table [ 514.805491][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4687'. [ 514.805595][T20800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.805610][T20800] IPv6: NLM_F_CREATE should be set when creating new route [ 514.805639][T20800] IPv6: NLM_F_CREATE should be set when creating new route [ 515.115437][T20813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4691'. [ 515.262377][T20822] FAULT_INJECTION: forcing a failure. [ 515.262377][T20822] name failslab, interval 1, probability 0, space 0, times 0 [ 515.262413][T20822] CPU: 0 UID: 0 PID: 20822 Comm: syz.4.4693 Not tainted syzkaller #0 PREEMPT(full) [ 515.262439][T20822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 515.262453][T20822] Call Trace: [ 515.262463][T20822] [ 515.262473][T20822] dump_stack_lvl+0xe8/0x150 [ 515.262517][T20822] should_fail_ex+0x3eb/0x540 [ 515.262553][T20822] should_failslab+0xa8/0x100 [ 515.262591][T20822] __kmalloc_cache_noprof+0x9e/0x600 [ 515.262620][T20822] ? __kmalloc_cache_noprof+0x148/0x600 [ 515.262647][T20822] ? sctp_add_bind_addr+0x8c/0x370 [ 515.262674][T20822] ? sctp_add_bind_addr+0x8c/0x370 [ 515.262711][T20822] sctp_add_bind_addr+0x8c/0x370 [ 515.262745][T20822] sctp_copy_local_addr_list+0x31a/0x4e0 [ 515.262781][T20822] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 515.262819][T20822] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 515.262851][T20822] ? sctp_v6_is_any+0x64/0x80 [ 515.262884][T20822] ? sctp_copy_one_addr+0x93/0x360 [ 515.262917][T20822] sctp_bind_addr_copy+0xb3/0x3c0 [ 515.262947][T20822] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 515.262977][T20822] sctp_connect_new_asoc+0x2ff/0x6b0 [ 515.263016][T20822] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 515.263059][T20822] ? __local_bh_enable_ip+0xd6/0x140 [ 515.263090][T20822] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 515.263122][T20822] ? security_sctp_bind_connect+0x7e/0x2c0 [ 515.263158][T20822] sctp_sendmsg+0x159b/0x2d00 [ 515.263199][T20822] ? __pfx_sctp_sendmsg+0x10/0x10 [ 515.263231][T20822] ? __lock_acquire+0x747/0x2de0 [ 515.263267][T20822] ? aa_sock_msg_perm+0xf5/0x210 [ 515.263284][T20822] ? sock_rps_record_flow+0x19/0x350 [ 515.263308][T20822] ? inet_sendmsg+0x298/0x320 [ 515.263330][T20822] ? __pfx_inet_sendmsg+0x10/0x10 [ 515.263348][T20822] sock_sendmsg_nosec+0x10f/0x190 [ 515.263376][T20822] ____sys_sendmsg+0x54e/0x850 [ 515.263401][T20822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.263435][T20822] ? import_iovec+0x73/0xa0 [ 515.263462][T20822] ___sys_sendmsg+0x2a5/0x360 [ 515.263480][T20822] ? __lock_acquire+0x747/0x2de0 [ 515.263507][T20822] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.263532][T20822] ? kstrtouint+0x6e/0xe0 [ 515.263585][T20822] ? __fget_files+0x3a2/0x420 [ 515.263619][T20822] ? __fget_files+0x2a/0x420 [ 515.263649][T20822] __sys_sendmmsg+0x273/0x4e0 [ 515.263673][T20822] ? __pfx___sys_sendmmsg+0x10/0x10 [ 515.263701][T20822] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 515.263736][T20822] ? ksys_write+0x242/0x270 [ 515.263761][T20822] ? __pfx_ksys_write+0x10/0x10 [ 515.263790][T20822] __x64_sys_sendmmsg+0xa0/0xc0 [ 515.263859][T20822] do_syscall_64+0x166/0x520 [ 515.263880][T20822] ? trace_irq_disable+0x3b/0x140 [ 515.263904][T20822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.263923][T20822] ? clear_bhb_loop+0x70/0xc0 [ 515.263945][T20822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.263963][T20822] RIP: 0033:0x7f7c2579fb19 [ 515.263980][T20822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.263995][T20822] RSP: 002b:00007f7c239f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 515.264017][T20822] RAX: ffffffffffffffda RBX: 00007f7c25a25fa0 RCX: 00007f7c2579fb19 [ 515.264030][T20822] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 515.264042][T20822] RBP: 00007f7c239f6090 R08: 0000000000000000 R09: 0000000000000000 [ 515.264053][T20822] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 515.264064][T20822] R13: 00007f7c25a26038 R14: 00007f7c25a25fa0 R15: 00007ffe635a2ed8 [ 515.264093][T20822] [ 515.826548][T20833] netlink: 'syz.0.4698': attribute type 1 has an invalid length. [ 515.859358][T20833] 8021q: adding VLAN 0 to HW filter on device bond7 [ 515.873695][T20832] syzkaller0: entered promiscuous mode [ 515.873713][T20832] syzkaller0: entered allmulticast mode [ 516.011045][T20838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4701'. [ 516.081138][T20841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4702'. [ 516.197692][T20848] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 516.238495][T20850] FAULT_INJECTION: forcing a failure. [ 516.238495][T20850] name failslab, interval 1, probability 0, space 0, times 0 [ 516.238530][T20850] CPU: 0 UID: 0 PID: 20850 Comm: syz.0.4706 Not tainted syzkaller #0 PREEMPT(full) [ 516.238557][T20850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 516.238571][T20850] Call Trace: [ 516.238580][T20850] [ 516.238591][T20850] dump_stack_lvl+0xe8/0x150 [ 516.238635][T20850] should_fail_ex+0x3eb/0x540 [ 516.238672][T20850] should_failslab+0xa8/0x100 [ 516.238710][T20850] __kmalloc_cache_noprof+0x9e/0x600 [ 516.238740][T20850] ? __kmalloc_cache_noprof+0x148/0x600 [ 516.238769][T20850] ? sctp_add_bind_addr+0x8c/0x370 [ 516.238796][T20850] ? sctp_add_bind_addr+0x8c/0x370 [ 516.238833][T20850] sctp_add_bind_addr+0x8c/0x370 [ 516.238867][T20850] sctp_copy_local_addr_list+0x31a/0x4e0 [ 516.238900][T20850] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 516.238931][T20850] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 516.238961][T20850] ? sctp_v6_is_any+0x64/0x80 [ 516.238994][T20850] ? sctp_copy_one_addr+0x93/0x360 [ 516.239024][T20850] sctp_bind_addr_copy+0xb3/0x3c0 [ 516.239054][T20850] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 516.239082][T20850] sctp_connect_new_asoc+0x2ff/0x6b0 [ 516.239117][T20850] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 516.239159][T20850] ? __local_bh_enable_ip+0xd6/0x140 [ 516.239187][T20850] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 516.239217][T20850] ? security_sctp_bind_connect+0x7e/0x2c0 [ 516.239261][T20850] sctp_sendmsg+0x159b/0x2d00 [ 516.239310][T20850] ? __pfx_sctp_sendmsg+0x10/0x10 [ 516.239349][T20850] ? __lock_acquire+0x747/0x2de0 [ 516.239395][T20850] ? aa_sock_msg_perm+0xf5/0x210 [ 516.239416][T20850] ? sock_rps_record_flow+0x19/0x350 [ 516.239445][T20850] ? inet_sendmsg+0x298/0x320 [ 516.239471][T20850] ? __pfx_inet_sendmsg+0x10/0x10 [ 516.239493][T20850] sock_sendmsg_nosec+0x10f/0x190 [ 516.239531][T20850] ____sys_sendmsg+0x54e/0x850 [ 516.239562][T20850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.239598][T20850] ? import_iovec+0x73/0xa0 [ 516.239629][T20850] ___sys_sendmsg+0x2a5/0x360 [ 516.239650][T20850] ? __lock_acquire+0x747/0x2de0 [ 516.239685][T20850] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.239715][T20850] ? kstrtouint+0x6e/0xe0 [ 516.239785][T20850] ? __fget_files+0x3a2/0x420 [ 516.239812][T20850] ? __fget_files+0x2a/0x420 [ 516.239850][T20850] __sys_sendmmsg+0x273/0x4e0 [ 516.239882][T20850] ? __pfx___sys_sendmmsg+0x10/0x10 [ 516.239920][T20850] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 516.239966][T20850] ? ksys_write+0x242/0x270 [ 516.240000][T20850] ? __pfx_ksys_write+0x10/0x10 [ 516.240037][T20850] __x64_sys_sendmmsg+0xa0/0xc0 [ 516.240065][T20850] do_syscall_64+0x166/0x520 [ 516.240091][T20850] ? trace_irq_disable+0x3b/0x140 [ 516.240122][T20850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.240147][T20850] ? clear_bhb_loop+0x70/0xc0 [ 516.240175][T20850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.240199][T20850] RIP: 0033:0x7f3a5cd9fb19 [ 516.240221][T20850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.240242][T20850] RSP: 002b:00007f3a5dd3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 516.240277][T20850] RAX: ffffffffffffffda RBX: 00007f3a5d025fa0 RCX: 00007f3a5cd9fb19 [ 516.240294][T20850] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 516.240309][T20850] RBP: 00007f3a5dd3a090 R08: 0000000000000000 R09: 0000000000000000 [ 516.240324][T20850] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 516.240338][T20850] R13: 00007f3a5d026038 R14: 00007f3a5d025fa0 R15: 00007ffebf515e48 [ 516.240377][T20850] [ 516.642748][T20852] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 516.718016][T20857] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 516.782630][T20865] netlink: 'syz.4.4710': attribute type 1 has an invalid length. [ 516.877360][T20865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 516.980249][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4712'. [ 516.980276][T20876] openvswitch: netlink: Flow key attr not present in new flow. [ 517.092592][T20879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4714'. [ 517.341474][T20889] FAULT_INJECTION: forcing a failure. [ 517.341474][T20889] name failslab, interval 1, probability 0, space 0, times 0 [ 517.341510][T20889] CPU: 0 UID: 0 PID: 20889 Comm: syz.1.4718 Not tainted syzkaller #0 PREEMPT(full) [ 517.341536][T20889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 517.341550][T20889] Call Trace: [ 517.341559][T20889] [ 517.341570][T20889] dump_stack_lvl+0xe8/0x150 [ 517.341613][T20889] should_fail_ex+0x3eb/0x540 [ 517.341649][T20889] should_failslab+0xa8/0x100 [ 517.341696][T20889] __kmalloc_cache_noprof+0x9e/0x600 [ 517.341726][T20889] ? __kmalloc_cache_noprof+0x148/0x600 [ 517.341754][T20889] ? sctp_add_bind_addr+0x8c/0x370 [ 517.341781][T20889] ? sctp_add_bind_addr+0x8c/0x370 [ 517.341817][T20889] sctp_add_bind_addr+0x8c/0x370 [ 517.341852][T20889] sctp_copy_local_addr_list+0x31a/0x4e0 [ 517.341885][T20889] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 517.341915][T20889] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 517.341946][T20889] ? sctp_v6_is_any+0x64/0x80 [ 517.341979][T20889] ? sctp_copy_one_addr+0x93/0x360 [ 517.342013][T20889] sctp_bind_addr_copy+0xb3/0x3c0 [ 517.342043][T20889] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 517.342073][T20889] sctp_connect_new_asoc+0x2ff/0x6b0 [ 517.342112][T20889] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 517.342155][T20889] ? __local_bh_enable_ip+0xd6/0x140 [ 517.342187][T20889] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 517.342219][T20889] ? security_sctp_bind_connect+0x7e/0x2c0 [ 517.342256][T20889] sctp_sendmsg+0x159b/0x2d00 [ 517.342308][T20889] ? __pfx_sctp_sendmsg+0x10/0x10 [ 517.342350][T20889] ? __lock_acquire+0x747/0x2de0 [ 517.342397][T20889] ? aa_sock_msg_perm+0xf5/0x210 [ 517.342419][T20889] ? sock_rps_record_flow+0x19/0x350 [ 517.342449][T20889] ? inet_sendmsg+0x298/0x320 [ 517.342480][T20889] ? __pfx_inet_sendmsg+0x10/0x10 [ 517.342503][T20889] sock_sendmsg_nosec+0x10f/0x190 [ 517.342539][T20889] ____sys_sendmsg+0x54e/0x850 [ 517.342572][T20889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.342609][T20889] ? import_iovec+0x73/0xa0 [ 517.342643][T20889] ___sys_sendmsg+0x2a5/0x360 [ 517.342672][T20889] ? __lock_acquire+0x747/0x2de0 [ 517.342708][T20889] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.342741][T20889] ? kstrtouint+0x6e/0xe0 [ 517.342811][T20889] ? __fget_files+0x3a2/0x420 [ 517.342839][T20889] ? __fget_files+0x2a/0x420 [ 517.342879][T20889] __sys_sendmmsg+0x273/0x4e0 [ 517.342912][T20889] ? __pfx___sys_sendmmsg+0x10/0x10 [ 517.342949][T20889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 517.342998][T20889] ? ksys_write+0x242/0x270 [ 517.343032][T20889] ? __pfx_ksys_write+0x10/0x10 [ 517.343071][T20889] __x64_sys_sendmmsg+0xa0/0xc0 [ 517.343100][T20889] do_syscall_64+0x166/0x520 [ 517.343127][T20889] ? trace_irq_disable+0x3b/0x140 [ 517.343160][T20889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.343185][T20889] ? clear_bhb_loop+0x70/0xc0 [ 517.343215][T20889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.343238][T20889] RIP: 0033:0x7f7a7e39fb19 [ 517.343261][T20889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.343280][T20889] RSP: 002b:00007f7a7f1ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 517.343304][T20889] RAX: ffffffffffffffda RBX: 00007f7a7e625fa0 RCX: 00007f7a7e39fb19 [ 517.343321][T20889] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 517.343336][T20889] RBP: 00007f7a7f1ad090 R08: 0000000000000000 R09: 0000000000000000 [ 517.343350][T20889] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 517.343364][T20889] R13: 00007f7a7e626038 R14: 00007f7a7e625fa0 R15: 00007fff81a4d4b8 [ 517.343403][T20889] [ 517.766733][T20801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.259850][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4726'. [ 518.272140][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4725'. [ 518.428667][T20922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.428688][T20922] IPv6: NLM_F_CREATE should be set when creating new route [ 518.428762][T20922] IPv6: NLM_F_CREATE should be set when creating new route [ 518.428791][T20922] IPv6: NLM_F_CREATE should be set when creating new route [ 518.587220][T20927] FAULT_INJECTION: forcing a failure. [ 518.587220][T20927] name failslab, interval 1, probability 0, space 0, times 0 [ 518.587255][T20927] CPU: 1 UID: 0 PID: 20927 Comm: syz.3.4730 Not tainted syzkaller #0 PREEMPT(full) [ 518.587280][T20927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 518.587295][T20927] Call Trace: [ 518.587305][T20927] [ 518.587315][T20927] dump_stack_lvl+0xe8/0x150 [ 518.587358][T20927] should_fail_ex+0x3eb/0x540 [ 518.587392][T20927] ? __alloc_skb+0x1db/0x7a0 [ 518.587427][T20927] should_failslab+0xa8/0x100 [ 518.587464][T20927] ? __alloc_skb+0x1db/0x7a0 [ 518.587496][T20927] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 518.587524][T20927] ? __alloc_skb+0x18d/0x7a0 [ 518.587560][T20927] ? __alloc_skb+0x1db/0x7a0 [ 518.587604][T20927] __alloc_skb+0x1db/0x7a0 [ 518.587645][T20927] netlink_ack+0x136/0xb30 [ 518.587675][T20927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.587702][T20927] ? __pfx_nl80211_post_doit+0x10/0x10 [ 518.587746][T20927] netlink_rcv_skb+0x2a4/0x4a0 [ 518.587780][T20927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.587809][T20927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.587862][T20927] ? down_read+0x2b9/0x320 [ 518.587903][T20927] genl_rcv+0x28/0x40 [ 518.587926][T20927] netlink_unicast+0x8ef/0xa80 [ 518.587978][T20927] netlink_sendmsg+0x7f0/0xb20 [ 518.588019][T20927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.588064][T20927] ? aa_sock_msg_perm+0x144/0x210 [ 518.588095][T20927] ? apparmor_socket_sendmsg+0x98/0x360 [ 518.588131][T20927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.588164][T20927] sock_sendmsg_nosec+0x14e/0x190 [ 518.588198][T20927] ____sys_sendmsg+0x54e/0x850 [ 518.588231][T20927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.588269][T20927] ? import_iovec+0x73/0xa0 [ 518.588301][T20927] ___sys_sendmsg+0x2a5/0x360 [ 518.588324][T20927] ? __lock_acquire+0x747/0x2de0 [ 518.588360][T20927] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.588432][T20927] ? __fget_files+0x3a2/0x420 [ 518.588459][T20927] ? __fget_files+0x2a/0x420 [ 518.588498][T20927] __x64_sys_sendmsg+0x1b1/0x290 [ 518.588527][T20927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.588575][T20927] do_syscall_64+0x166/0x520 [ 518.588602][T20927] ? trace_irq_disable+0x3b/0x140 [ 518.588633][T20927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.588657][T20927] ? clear_bhb_loop+0x70/0xc0 [ 518.588686][T20927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.588709][T20927] RIP: 0033:0x7f498239fb19 [ 518.588730][T20927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.588750][T20927] RSP: 002b:00007f4983258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.588773][T20927] RAX: ffffffffffffffda RBX: 00007f4982625fa0 RCX: 00007f498239fb19 [ 518.588790][T20927] RDX: 0000000000000004 RSI: 0000200000000540 RDI: 0000000000000003 [ 518.588804][T20927] RBP: 00007f4983258090 R08: 0000000000000000 R09: 0000000000000000 [ 518.588818][T20927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.588832][T20927] R13: 00007f4982626038 R14: 00007f4982625fa0 R15: 00007ffed858f478 [ 518.588869][T20927] [ 518.936192][T20925] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4729'. [ 519.102290][T20945] netlink: 'syz.0.4733': attribute type 1 has an invalid length. [ 519.168424][T20945] 8021q: adding VLAN 0 to HW filter on device bond8 [ 519.838555][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4745'. [ 519.941372][T20997] IPv6: addrconf: prefix option has invalid lifetime [ 519.941406][T20997] IPv6: addrconf: prefix option has invalid lifetime [ 520.002122][T20998] batadv0: entered promiscuous mode [ 520.002317][T20998] macsec1: entered promiscuous mode [ 520.023116][T20998] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 520.045297][T20998] batadv0: left promiscuous mode [ 520.101111][T21002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4749'. [ 520.208695][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4749'. [ 520.382003][T21020] netlink: 'syz.3.4754': attribute type 12 has an invalid length. [ 520.382032][T21020] netlink: 'syz.3.4754': attribute type 29 has an invalid length. [ 521.026175][T21051] FAULT_INJECTION: forcing a failure. [ 521.026175][T21051] name failslab, interval 1, probability 0, space 0, times 0 [ 521.026212][T21051] CPU: 0 UID: 0 PID: 21051 Comm: syz.2.4765 Not tainted syzkaller #0 PREEMPT(full) [ 521.026239][T21051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 521.026254][T21051] Call Trace: [ 521.026263][T21051] [ 521.026274][T21051] dump_stack_lvl+0xe8/0x150 [ 521.026318][T21051] should_fail_ex+0x3eb/0x540 [ 521.026353][T21051] should_failslab+0xa8/0x100 [ 521.026390][T21051] __kmalloc_cache_noprof+0x9e/0x600 [ 521.026420][T21051] ? sctp_add_bind_addr+0x8c/0x370 [ 521.026447][T21051] ? sctp_add_bind_addr+0x8c/0x370 [ 521.026475][T21051] ? __pfx_sctp_get_port_local+0x10/0x10 [ 521.026514][T21051] sctp_add_bind_addr+0x8c/0x370 [ 521.026541][T21051] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 521.026578][T21051] sctp_do_bind+0x597/0x9a0 [ 521.026628][T21051] sctp_connect_new_asoc+0x270/0x6b0 [ 521.026666][T21051] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 521.026709][T21051] ? __local_bh_enable_ip+0xd6/0x140 [ 521.026740][T21051] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 521.026771][T21051] ? security_sctp_bind_connect+0x7e/0x2c0 [ 521.026814][T21051] sctp_sendmsg+0x159b/0x2d00 [ 521.026861][T21051] ? kstrtouint+0x6e/0xe0 [ 521.026898][T21051] ? __pfx_sctp_sendmsg+0x10/0x10 [ 521.026929][T21051] ? lock_acquire+0x115/0x350 [ 521.026983][T21051] ? aa_sock_msg_perm+0xf5/0x210 [ 521.027005][T21051] ? sock_rps_record_flow+0x19/0x350 [ 521.027034][T21051] ? inet_sendmsg+0x298/0x320 [ 521.027062][T21051] ? __pfx_inet_sendmsg+0x10/0x10 [ 521.027085][T21051] sock_sendmsg_nosec+0x10f/0x190 [ 521.027120][T21051] __sys_sendto+0x408/0x5a0 [ 521.027155][T21051] ? ksys_write+0x1e6/0x270 [ 521.027190][T21051] ? __pfx___sys_sendto+0x10/0x10 [ 521.027223][T21051] ? __mutex_unlock_slowpath+0x731/0x900 [ 521.027268][T21051] ? fdget+0x1ac/0x250 [ 521.027313][T21051] ? __pfx_ksys_write+0x10/0x10 [ 521.027350][T21051] __x64_sys_sendto+0xde/0x100 [ 521.027390][T21051] do_syscall_64+0x166/0x520 [ 521.027417][T21051] ? trace_irq_disable+0x3b/0x140 [ 521.027449][T21051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.027473][T21051] ? clear_bhb_loop+0x70/0xc0 [ 521.027502][T21051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.027526][T21051] RIP: 0033:0x7ffbd6f9fb19 [ 521.027548][T21051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.027567][T21051] RSP: 002b:00007ffbd7e0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 521.027592][T21051] RAX: ffffffffffffffda RBX: 00007ffbd7225fa0 RCX: 00007ffbd6f9fb19 [ 521.027609][T21051] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 521.027624][T21051] RBP: 00007ffbd7e0d090 R08: 0000200000000340 R09: 000000000000001c [ 521.027640][T21051] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000001 [ 521.027654][T21051] R13: 00007ffbd7226038 R14: 00007ffbd7225fa0 R15: 00007ffddd199678 [ 521.027693][T21051] [ 521.421219][T21050] netlink: 'syz.1.4766': attribute type 12 has an invalid length. [ 521.421250][T21050] netlink: 'syz.1.4766': attribute type 29 has an invalid length. [ 521.421265][T21050] __nla_validate_parse: 3 callbacks suppressed [ 521.421279][T21050] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4766'. [ 521.421300][T21050] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4766'. [ 521.508961][T21053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.675893][T21069] xt_IDLETIMER: timeout value is too big [ 521.830829][T21059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.501238][T21113] netlink: 'syz.3.4790': attribute type 1 has an invalid length. [ 522.594303][T21119] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4791'. [ 522.600192][T21117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 522.606488][T21117] bond6: (slave bond7): making interface the new active one [ 522.616520][T21117] bond6: (slave bond7): Enslaving as an active interface with an up link [ 522.779885][T21113] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 523.031518][T21136] netlink: 'syz.4.4800': attribute type 2 has an invalid length. [ 523.031543][T21136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4800'. [ 523.173100][T21143] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4803'. [ 523.316821][T21147] syzkaller0: entered promiscuous mode [ 523.316846][T21147] syzkaller0: entered allmulticast mode [ 523.421738][T21158] netlink: zone id is out of range [ 523.437345][T21158] netlink: set zone limit has 4 unknown bytes [ 523.463597][T21159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4808'. [ 523.670486][T21163] batman_adv: batadv0: Adding interface: syzkaller0 [ 523.670510][T21163] batman_adv: batadv0: Interface activated: syzkaller0 [ 523.674006][T21168] FAULT_INJECTION: forcing a failure. [ 523.674006][T21168] name failslab, interval 1, probability 0, space 0, times 0 [ 523.674039][T21168] CPU: 0 UID: 0 PID: 21168 Comm: syz.1.4813 Not tainted syzkaller #0 PREEMPT(full) [ 523.674065][T21168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 523.674079][T21168] Call Trace: [ 523.674088][T21168] [ 523.674098][T21168] dump_stack_lvl+0xe8/0x150 [ 523.674140][T21168] should_fail_ex+0x3eb/0x540 [ 523.674184][T21168] should_failslab+0xa8/0x100 [ 523.674222][T21168] __kmalloc_cache_noprof+0x9e/0x600 [ 523.674251][T21168] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 523.674278][T21168] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 523.674318][T21168] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 523.674346][T21168] ? sctp_stream_interleave_init+0x55/0x90 [ 523.674379][T21168] sctp_association_new+0x15be/0x25d0 [ 523.674425][T21168] sctp_connect_new_asoc+0x2e4/0x6b0 [ 523.674462][T21168] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 523.674505][T21168] ? __local_bh_enable_ip+0xd6/0x140 [ 523.674536][T21168] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 523.674568][T21168] ? security_sctp_bind_connect+0x7e/0x2c0 [ 523.674604][T21168] sctp_sendmsg+0x159b/0x2d00 [ 523.674651][T21168] ? kstrtouint+0x6e/0xe0 [ 523.674688][T21168] ? __pfx_sctp_sendmsg+0x10/0x10 [ 523.674719][T21168] ? lock_acquire+0x115/0x350 [ 523.674772][T21168] ? aa_sock_msg_perm+0xf5/0x210 [ 523.674793][T21168] ? sock_rps_record_flow+0x19/0x350 [ 523.674885][T21168] ? inet_sendmsg+0x298/0x320 [ 523.674968][T21168] ? __pfx_inet_sendmsg+0x10/0x10 [ 523.675035][T21168] sock_sendmsg_nosec+0x10f/0x190 [ 523.675130][T21168] __sys_sendto+0x408/0x5a0 [ 523.675225][T21168] ? ksys_write+0x1e6/0x270 [ 523.675313][T21168] ? __pfx___sys_sendto+0x10/0x10 [ 523.675400][T21168] ? __mutex_unlock_slowpath+0x731/0x900 [ 523.675520][T21168] ? fdget+0x1ac/0x250 [ 523.675626][T21168] ? __pfx_ksys_write+0x10/0x10 [ 523.675709][T21168] __x64_sys_sendto+0xde/0x100 [ 523.675816][T21168] do_syscall_64+0x166/0x520 [ 523.675874][T21168] ? trace_irq_disable+0x3b/0x140 [ 523.675957][T21168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.676020][T21168] ? clear_bhb_loop+0x70/0xc0 [ 523.676113][T21168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.676175][T21168] RIP: 0033:0x7f7a7e39fb19 [ 523.676229][T21168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.676273][T21168] RSP: 002b:00007f7a7f1ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 523.676352][T21168] RAX: ffffffffffffffda RBX: 00007f7a7e625fa0 RCX: 00007f7a7e39fb19 [ 523.676403][T21168] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 523.676455][T21168] RBP: 00007f7a7f1ad090 R08: 0000200000000340 R09: 000000000000001c [ 523.676496][T21168] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000001 [ 523.676530][T21168] R13: 00007f7a7e626038 R14: 00007f7a7e625fa0 R15: 00007fff81a4d4b8 [ 523.676634][T21168] [ 524.053377][T21172] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4812'. [ 524.153954][T21179] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20004 [ 524.364725][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4819'. [ 524.563868][T21201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4824'. [ 524.663375][T21204] FAULT_INJECTION: forcing a failure. [ 524.663375][T21204] name failslab, interval 1, probability 0, space 0, times 0 [ 524.663410][T21204] CPU: 0 UID: 0 PID: 21204 Comm: syz.4.4825 Not tainted syzkaller #0 PREEMPT(full) [ 524.663436][T21204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 524.663451][T21204] Call Trace: [ 524.663460][T21204] [ 524.663470][T21204] dump_stack_lvl+0xe8/0x150 [ 524.663546][T21204] should_fail_ex+0x3eb/0x540 [ 524.663582][T21204] should_failslab+0xa8/0x100 [ 524.663619][T21204] __kmalloc_cache_noprof+0x9e/0x600 [ 524.663648][T21204] ? lock_acquire+0x115/0x350 [ 524.663677][T21204] ? sctp_add_bind_addr+0x8c/0x370 [ 524.663703][T21204] ? sctp_add_bind_addr+0x8c/0x370 [ 524.663743][T21204] sctp_add_bind_addr+0x8c/0x370 [ 524.663777][T21204] sctp_copy_local_addr_list+0x31a/0x4e0 [ 524.663829][T21204] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 524.663859][T21204] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 524.663891][T21204] ? sctp_v6_is_any+0x64/0x80 [ 524.663924][T21204] ? sctp_copy_one_addr+0x93/0x360 [ 524.663957][T21204] sctp_bind_addr_copy+0xb3/0x3c0 [ 524.663987][T21204] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 524.664017][T21204] sctp_connect_new_asoc+0x2ff/0x6b0 [ 524.664055][T21204] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 524.664099][T21204] ? __local_bh_enable_ip+0xd6/0x140 [ 524.664130][T21204] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 524.664162][T21204] ? security_sctp_bind_connect+0x7e/0x2c0 [ 524.664198][T21204] sctp_sendmsg+0x159b/0x2d00 [ 524.664246][T21204] ? kstrtouint+0x6e/0xe0 [ 524.664283][T21204] ? __pfx_sctp_sendmsg+0x10/0x10 [ 524.664315][T21204] ? lock_acquire+0x115/0x350 [ 524.664365][T21204] ? aa_sock_msg_perm+0xf5/0x210 [ 524.664386][T21204] ? sock_rps_record_flow+0x19/0x350 [ 524.664414][T21204] ? inet_sendmsg+0x298/0x320 [ 524.664440][T21204] ? __pfx_inet_sendmsg+0x10/0x10 [ 524.664464][T21204] sock_sendmsg_nosec+0x10f/0x190 [ 524.664507][T21204] __sys_sendto+0x408/0x5a0 [ 524.664543][T21204] ? ksys_write+0x1e6/0x270 [ 524.664578][T21204] ? __pfx___sys_sendto+0x10/0x10 [ 524.664611][T21204] ? __mutex_unlock_slowpath+0x731/0x900 [ 524.664657][T21204] ? fdget+0x1ac/0x250 [ 524.664702][T21204] ? __pfx_ksys_write+0x10/0x10 [ 524.664740][T21204] __x64_sys_sendto+0xde/0x100 [ 524.664780][T21204] do_syscall_64+0x166/0x520 [ 524.664807][T21204] ? trace_irq_disable+0x3b/0x140 [ 524.664839][T21204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.664864][T21204] ? clear_bhb_loop+0x70/0xc0 [ 524.664895][T21204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.664919][T21204] RIP: 0033:0x7f7c2579fb19 [ 524.664941][T21204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.664962][T21204] RSP: 002b:00007f7c239f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 524.664988][T21204] RAX: ffffffffffffffda RBX: 00007f7c25a25fa0 RCX: 00007f7c2579fb19 [ 524.665006][T21204] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 524.665022][T21204] RBP: 00007f7c239f6090 R08: 0000200000000340 R09: 000000000000001c [ 524.665038][T21204] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000001 [ 524.665053][T21204] R13: 00007f7c25a26038 R14: 00007f7c25a25fa0 R15: 00007ffe635a2ed8 [ 524.665092][T21204] [ 524.937349][T21206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4824'. [ 525.164300][T21215] netlink: 'syz.0.4828': attribute type 1 has an invalid length. [ 525.168511][T21216] netlink: 'syz.0.4828': attribute type 1 has an invalid length. [ 525.260488][T21215] 8021q: adding VLAN 0 to HW filter on device bond9 [ 525.302967][T21221] veth0: entered promiscuous mode [ 525.377488][T21215] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.413267][T21215] bond9: (slave team0): making interface the new active one [ 525.427452][T21215] bond9: (slave team0): Enslaving as an active interface with an up link [ 525.563288][T21230] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.617288][T21213] veth0: left promiscuous mode [ 525.689551][ T1014] bond9: (slave team0): link status definitely down, disabling slave [ 525.716161][ T1014] bond9: now running without any active interface! [ 525.940163][T21254] tcf_pedit_act: 7 callbacks suppressed [ 525.940188][T21254] tc action pedit unable to extract header offset for header type (0x4) [ 525.940206][T21254] tc action pedit unable to extract header offset for header type (0x4) [ 525.940221][T21254] tc action pedit unable to extract header offset for header type (0x4) [ 525.940236][T21254] tc action pedit unable to extract header offset for header type (0x4) [ 525.940251][T21254] tc action pedit unable to extract header offset for header type (0x4) [ 525.940266][T21254] tc action pedit unable to extract header offset for header type (0x4) [ 525.940280][T21254] tc action pedit unable to extract header offset for header type (0x4) [ 525.940295][T21254] tc action pedit unable to extract header offset for header type (0x4) [ 525.940310][T21254] tc action pedit unable to extract header offset for header type (0x4) [ 525.940325][T21254] tc action pedit unable to extract header offset for header type (0x4) [ 525.940354][T21254] 0: reclassify loop, rule prio 0, protocol 800 [ 526.618333][T21283] __nla_validate_parse: 1 callbacks suppressed [ 526.618366][T21283] netlink: 594 bytes leftover after parsing attributes in process `syz.2.4846'. [ 526.691125][T21288] FAULT_INJECTION: forcing a failure. [ 526.691125][T21288] name failslab, interval 1, probability 0, space 0, times 0 [ 526.691160][T21288] CPU: 0 UID: 0 PID: 21288 Comm: syz.1.4848 Not tainted syzkaller #0 PREEMPT(full) [ 526.691185][T21288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 526.691204][T21288] Call Trace: [ 526.691212][T21288] [ 526.691223][T21288] dump_stack_lvl+0xe8/0x150 [ 526.691266][T21288] should_fail_ex+0x3eb/0x540 [ 526.691300][T21288] should_failslab+0xa8/0x100 [ 526.691336][T21288] __kmalloc_cache_noprof+0x9e/0x600 [ 526.691363][T21288] ? __kmalloc_cache_noprof+0x148/0x600 [ 526.691390][T21288] ? sctp_add_bind_addr+0x8c/0x370 [ 526.691415][T21288] ? sctp_add_bind_addr+0x8c/0x370 [ 526.691450][T21288] sctp_add_bind_addr+0x8c/0x370 [ 526.691483][T21288] sctp_copy_local_addr_list+0x31a/0x4e0 [ 526.691514][T21288] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 526.691543][T21288] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 526.691573][T21288] ? sctp_v6_is_any+0x64/0x80 [ 526.691606][T21288] ? sctp_copy_one_addr+0x93/0x360 [ 526.691657][T21288] sctp_bind_addr_copy+0xb3/0x3c0 [ 526.691687][T21288] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 526.691717][T21288] sctp_connect_new_asoc+0x2ff/0x6b0 [ 526.691756][T21288] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 526.691800][T21288] ? __local_bh_enable_ip+0xd6/0x140 [ 526.691881][T21288] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 526.691913][T21288] ? security_sctp_bind_connect+0x7e/0x2c0 [ 526.691949][T21288] sctp_sendmsg+0x159b/0x2d00 [ 526.691996][T21288] ? kstrtouint+0x6e/0xe0 [ 526.692033][T21288] ? __pfx_sctp_sendmsg+0x10/0x10 [ 526.692064][T21288] ? lock_acquire+0x115/0x350 [ 526.692118][T21288] ? aa_sock_msg_perm+0xf5/0x210 [ 526.692139][T21288] ? sock_rps_record_flow+0x19/0x350 [ 526.692168][T21288] ? inet_sendmsg+0x298/0x320 [ 526.692196][T21288] ? __pfx_inet_sendmsg+0x10/0x10 [ 526.692219][T21288] sock_sendmsg_nosec+0x10f/0x190 [ 526.692254][T21288] __sys_sendto+0x408/0x5a0 [ 526.692289][T21288] ? ksys_write+0x1e6/0x270 [ 526.692322][T21288] ? __pfx___sys_sendto+0x10/0x10 [ 526.692354][T21288] ? __mutex_unlock_slowpath+0x731/0x900 [ 526.692397][T21288] ? fdget+0x1ac/0x250 [ 526.692442][T21288] ? __pfx_ksys_write+0x10/0x10 [ 526.692479][T21288] __x64_sys_sendto+0xde/0x100 [ 526.692520][T21288] do_syscall_64+0x166/0x520 [ 526.692547][T21288] ? trace_irq_disable+0x3b/0x140 [ 526.692578][T21288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.692602][T21288] ? clear_bhb_loop+0x70/0xc0 [ 526.692632][T21288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.692656][T21288] RIP: 0033:0x7f7a7e39fb19 [ 526.692678][T21288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.692699][T21288] RSP: 002b:00007f7a7f1ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 526.692723][T21288] RAX: ffffffffffffffda RBX: 00007f7a7e625fa0 RCX: 00007f7a7e39fb19 [ 526.692740][T21288] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 526.692755][T21288] RBP: 00007f7a7f1ad090 R08: 0000200000000340 R09: 000000000000001c [ 526.692771][T21288] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000001 [ 526.692785][T21288] R13: 00007f7a7e626038 R14: 00007f7a7e625fa0 R15: 00007fff81a4d4b8 [ 526.692825][T21288] [ 527.200795][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4851'. [ 527.243525][T21300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.260138][T21296] TC_ACT_REPEAT abuse ? [ 528.135531][T21350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4865'. [ 528.448855][T21367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4871'. [ 528.758288][T21381] syzkaller1: entered promiscuous mode [ 528.758312][T21381] syzkaller1: entered allmulticast mode [ 528.936818][T21389] netlink: 'syz.4.4880': attribute type 20 has an invalid length. [ 528.936845][T21389] IPv6: NLM_F_CREATE should be specified when creating new route [ 528.939830][T21389] syzkaller0: entered promiscuous mode [ 528.939847][T21389] syzkaller0: entered allmulticast mode [ 528.982570][T21389] netlink: 'syz.4.4880': attribute type 1 has an invalid length. [ 529.115302][T21399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4883'. [ 529.296328][T21403] FAULT_INJECTION: forcing a failure. [ 529.296328][T21403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.296363][T21403] CPU: 0 UID: 0 PID: 21403 Comm: syz.4.4885 Not tainted syzkaller #0 PREEMPT(full) [ 529.296389][T21403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 529.296405][T21403] Call Trace: [ 529.296414][T21403] [ 529.296425][T21403] dump_stack_lvl+0xe8/0x150 [ 529.296468][T21403] should_fail_ex+0x3eb/0x540 [ 529.296503][T21403] _copy_to_iter+0x1e4/0x17e0 [ 529.296535][T21403] ? __might_fault+0xaf/0x130 [ 529.296565][T21403] ? _copy_to_iter+0x255/0x17e0 [ 529.296600][T21403] ? __pfx__copy_to_iter+0x10/0x10 [ 529.296644][T21403] __skb_datagram_iter+0xf8/0x980 [ 529.296675][T21403] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 529.296707][T21403] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 529.296737][T21403] __skb_datagram_iter+0x6ee/0x980 [ 529.296767][T21403] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 529.296810][T21403] skb_copy_datagram_iter+0xb5/0x240 [ 529.296844][T21403] ping_recvmsg+0x1cf/0x1010 [ 529.296868][T21403] ? lock_acquire+0x115/0x350 [ 529.296911][T21403] ? __pfx_ping_recvmsg+0x10/0x10 [ 529.296942][T21403] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 529.296972][T21403] ? sock_common_recvmsg+0x28/0xa0 [ 529.297005][T21403] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 529.297038][T21403] sock_recvmsg+0x196/0x1e0 [ 529.297074][T21403] __sys_recvfrom+0x231/0x3a0 [ 529.297110][T21403] ? ksys_write+0x1e6/0x270 [ 529.297144][T21403] ? __pfx___sys_recvfrom+0x10/0x10 [ 529.297177][T21403] ? __mutex_unlock_slowpath+0x731/0x900 [ 529.297220][T21403] ? fdget+0x1ac/0x250 [ 529.297263][T21403] ? __pfx_ksys_write+0x10/0x10 [ 529.297298][T21403] __x64_sys_recvfrom+0xde/0x100 [ 529.297339][T21403] do_syscall_64+0x166/0x520 [ 529.297365][T21403] ? trace_irq_disable+0x3b/0x140 [ 529.297396][T21403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.297419][T21403] ? clear_bhb_loop+0x70/0xc0 [ 529.297448][T21403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.297471][T21403] RIP: 0033:0x7f7c2579fb19 [ 529.297493][T21403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.297511][T21403] RSP: 002b:00007f7c239f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 529.297536][T21403] RAX: ffffffffffffffda RBX: 00007f7c25a25fa0 RCX: 00007f7c2579fb19 [ 529.297554][T21403] RDX: fffffffffffffe4e RSI: 0000200000000340 RDI: 0000000000000003 [ 529.297570][T21403] RBP: 00007f7c239f6090 R08: 0000000000000000 R09: 0000000000000000 [ 529.297585][T21403] R10: 30c64a8c5dc2dff0 R11: 0000000000000246 R12: 0000000000000001 [ 529.297609][T21403] R13: 00007f7c25a26038 R14: 00007f7c25a25fa0 R15: 00007ffe635a2ed8 [ 529.297647][T21403] [ 530.196756][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4891'. [ 531.047076][T21458] FAULT_INJECTION: forcing a failure. [ 531.047076][T21458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 531.047112][T21458] CPU: 1 UID: 0 PID: 21458 Comm: syz.2.4899 Not tainted syzkaller #0 PREEMPT(full) [ 531.047139][T21458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 531.047154][T21458] Call Trace: [ 531.047163][T21458] [ 531.047174][T21458] dump_stack_lvl+0xe8/0x150 [ 531.047217][T21458] should_fail_ex+0x3eb/0x540 [ 531.047252][T21458] prepare_alloc_pages+0x21e/0x5f0 [ 531.047291][T21458] __alloc_frozen_pages_noprof+0x17c/0x410 [ 531.047327][T21458] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 531.047373][T21458] ? policy_nodemask+0x31b/0x980 [ 531.047415][T21458] alloc_pages_mpol+0x21e/0x390 [ 531.047458][T21458] folio_alloc_mpol_noprof+0x39/0x160 [ 531.047493][T21458] vma_alloc_folio_noprof+0xe1/0x1e0 [ 531.047532][T21458] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 531.047574][T21458] ? vma_has_anon_rmap+0x95/0x270 [ 531.047610][T21458] do_wp_page+0x1166/0x4b60 [ 531.047666][T21458] ? __pfx_do_wp_page+0x10/0x10 [ 531.047697][T21458] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.047725][T21458] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 531.047761][T21458] handle_mm_fault+0x15d7/0x3750 [ 531.047809][T21458] ? handle_mm_fault+0xf1/0x3750 [ 531.047857][T21458] ? __pfx_handle_mm_fault+0x10/0x10 [ 531.047908][T21458] ? __pfx___up_read+0x10/0x10 [ 531.047947][T21458] ? lock_mm_and_find_vma+0xa7/0x340 [ 531.047975][T21458] do_user_addr_fault+0x7f6/0x1480 [ 531.048032][T21458] exc_page_fault+0x6a/0xc0 [ 531.048062][T21458] asm_exc_page_fault+0x26/0x30 [ 531.048085][T21458] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 531.048121][T21458] Code: 80 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 80 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 531.048141][T21458] RSP: 0018:ffffc9000c7e78f8 EFLAGS: 00050206 [ 531.048162][T21458] RAX: ffffffff84eae401 RBX: ffff88803e810000 RCX: 0000000000006348 [ 531.048179][T21458] RDX: 0000000000000000 RSI: ffff88803e811cb8 RDI: 0000200000002000 [ 531.048195][T21458] RBP: ffffc9000c7e7a70 R08: ffff88803e817fff R09: 1ffff11007d02fff [ 531.048212][T21458] R10: dffffc0000000000 R11: ffffed1007d03000 R12: 1ffff920018fcfbb [ 531.048228][T21458] R13: 0000200000000348 R14: ffffc9000c7e7de8 R15: 0000000000008000 [ 531.048253][T21458] ? _copy_to_iter+0x171/0x17e0 [ 531.048288][T21458] _copy_to_iter+0x255/0x17e0 [ 531.048332][T21458] ? __pfx__copy_to_iter+0x10/0x10 [ 531.048365][T21458] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 531.048393][T21458] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 531.048424][T21458] __skb_datagram_iter+0x419/0x980 [ 531.048455][T21458] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 531.048494][T21458] skb_copy_datagram_iter+0xb5/0x240 [ 531.048528][T21458] ping_recvmsg+0x1cf/0x1010 [ 531.048553][T21458] ? lock_acquire+0x115/0x350 [ 531.048596][T21458] ? __pfx_ping_recvmsg+0x10/0x10 [ 531.048627][T21458] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 531.048657][T21458] ? sock_common_recvmsg+0x28/0xa0 [ 531.048716][T21458] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 531.048750][T21458] sock_recvmsg+0x196/0x1e0 [ 531.048786][T21458] __sys_recvfrom+0x231/0x3a0 [ 531.048823][T21458] ? ksys_write+0x1e6/0x270 [ 531.048864][T21458] ? __pfx___sys_recvfrom+0x10/0x10 [ 531.048899][T21458] ? __mutex_unlock_slowpath+0x731/0x900 [ 531.048944][T21458] ? fdget+0x1ac/0x250 [ 531.048989][T21458] ? __pfx_ksys_write+0x10/0x10 [ 531.049034][T21458] __x64_sys_recvfrom+0xde/0x100 [ 531.049076][T21458] do_syscall_64+0x166/0x520 [ 531.049103][T21458] ? trace_irq_disable+0x3b/0x140 [ 531.049134][T21458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.049159][T21458] ? clear_bhb_loop+0x70/0xc0 [ 531.049189][T21458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.049211][T21458] RIP: 0033:0x7ffbd6f9fb19 [ 531.049233][T21458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.049251][T21458] RSP: 002b:00007ffbd7e0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 531.049275][T21458] RAX: ffffffffffffffda RBX: 00007ffbd7225fa0 RCX: 00007ffbd6f9fb19 [ 531.049292][T21458] RDX: fffffffffffffe4e RSI: 0000200000000340 RDI: 0000000000000003 [ 531.049309][T21458] RBP: 00007ffbd7e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 531.049324][T21458] R10: 30c64a8c5dc2dff0 R11: 0000000000000246 R12: 0000000000000001 [ 531.049339][T21458] R13: 00007ffbd7226038 R14: 00007ffbd7225fa0 R15: 00007ffddd199678 [ 531.049378][T21458] [ 533.137321][T21499] xt_l2tp: wrong L2TP version: 255 [ 533.498661][T21511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4919'. [ 533.578017][T21512] vcan0: tx address claim with dlc 0 [ 534.217489][T21524] xt_l2tp: missing protocol rule (udp|l2tpip) [ 535.024680][T21551] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 535.147995][T21547] bond10: invalid ARP target 0.0.0.0 specified for addition [ 535.148034][T21547] bond10: option arp_ip_target: invalid value (0) [ 535.252549][T21547] bond10 (unregistering): Released all slaves [ 535.456864][T21557] netlink: 'syz.2.4937': attribute type 28 has an invalid length. [ 535.456892][T21557] netlink: 'syz.2.4937': attribute type 3 has an invalid length. [ 535.456907][T21557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4937'. [ 535.600669][T21569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4936'. [ 535.826214][T21571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4938'. [ 536.502380][T21587] FAULT_INJECTION: forcing a failure. [ 536.502380][T21587] name failslab, interval 1, probability 0, space 0, times 0 [ 536.502416][T21587] CPU: 1 UID: 0 PID: 21587 Comm: syz.2.4942 Not tainted syzkaller #0 PREEMPT(full) [ 536.502442][T21587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 536.502457][T21587] Call Trace: [ 536.502466][T21587] [ 536.502477][T21587] dump_stack_lvl+0xe8/0x150 [ 536.502520][T21587] should_fail_ex+0x3eb/0x540 [ 536.502556][T21587] should_failslab+0xa8/0x100 [ 536.502598][T21587] __kmalloc_cache_noprof+0x9e/0x600 [ 536.502629][T21587] ? __kmalloc_cache_noprof+0x148/0x600 [ 536.502656][T21587] ? sctp_add_bind_addr+0x8c/0x370 [ 536.502683][T21587] ? sctp_add_bind_addr+0x8c/0x370 [ 536.502719][T21587] sctp_add_bind_addr+0x8c/0x370 [ 536.502753][T21587] sctp_copy_local_addr_list+0x31a/0x4e0 [ 536.502786][T21587] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 536.502816][T21587] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 536.502848][T21587] ? sctp_v6_is_any+0x64/0x80 [ 536.502881][T21587] ? sctp_copy_one_addr+0x93/0x360 [ 536.502914][T21587] sctp_bind_addr_copy+0xb3/0x3c0 [ 536.502944][T21587] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 536.502974][T21587] sctp_connect_new_asoc+0x2ff/0x6b0 [ 536.503020][T21587] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 536.503064][T21587] ? __local_bh_enable_ip+0xd6/0x140 [ 536.503096][T21587] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 536.503128][T21587] ? security_sctp_bind_connect+0x7e/0x2c0 [ 536.503165][T21587] sctp_sendmsg+0x159b/0x2d00 [ 536.503212][T21587] ? kstrtouint+0x6e/0xe0 [ 536.503249][T21587] ? __pfx_sctp_sendmsg+0x10/0x10 [ 536.503282][T21587] ? lock_acquire+0x115/0x350 [ 536.503336][T21587] ? aa_sock_msg_perm+0xf5/0x210 [ 536.503358][T21587] ? sock_rps_record_flow+0x19/0x350 [ 536.503387][T21587] ? inet_sendmsg+0x298/0x320 [ 536.503415][T21587] ? __pfx_inet_sendmsg+0x10/0x10 [ 536.503438][T21587] sock_sendmsg_nosec+0x10f/0x190 [ 536.503473][T21587] __sys_sendto+0x408/0x5a0 [ 536.503508][T21587] ? ksys_write+0x1e6/0x270 [ 536.503542][T21587] ? __pfx___sys_sendto+0x10/0x10 [ 536.503574][T21587] ? __mutex_unlock_slowpath+0x731/0x900 [ 536.503620][T21587] ? fdget+0x1ac/0x250 [ 536.503664][T21587] ? __pfx_ksys_write+0x10/0x10 [ 536.503702][T21587] __x64_sys_sendto+0xde/0x100 [ 536.503742][T21587] do_syscall_64+0x166/0x520 [ 536.503769][T21587] ? trace_irq_disable+0x3b/0x140 [ 536.503800][T21587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.503824][T21587] ? clear_bhb_loop+0x70/0xc0 [ 536.503854][T21587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.503878][T21587] RIP: 0033:0x7ffbd6f9fb19 [ 536.503900][T21587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.503920][T21587] RSP: 002b:00007ffbd7e0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 536.503945][T21587] RAX: ffffffffffffffda RBX: 00007ffbd7225fa0 RCX: 00007ffbd6f9fb19 [ 536.503963][T21587] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 536.503978][T21587] RBP: 00007ffbd7e0d090 R08: 0000200000000340 R09: 000000000000001c [ 536.503994][T21587] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000002 [ 536.504017][T21587] R13: 00007ffbd7226038 R14: 00007ffbd7225fa0 R15: 00007ffddd199678 [ 536.504057][T21587] [ 537.445753][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4949'. [ 538.140077][T21624] IPv6: addrconf: prefix option has invalid lifetime [ 538.140098][T21624] IPv6: addrconf: prefix option has invalid lifetime [ 538.275723][ T5660] Bluetooth: hci3: command 0x0406 tx timeout [ 539.739157][T21657] netlink: 'syz.3.4963': attribute type 1 has an invalid length. [ 539.739186][T21657] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4963'. [ 540.305867][T21675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.657822][T21680] netlink: 'syz.0.4971': attribute type 1 has an invalid length. [ 541.131344][T21695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4976'. [ 541.545108][T21705] netlink: 'syz.2.4981': attribute type 1 has an invalid length. [ 541.545134][T21705] netlink: 'syz.2.4981': attribute type 2 has an invalid length. [ 542.834208][T21733] netlink: 'syz.3.4989': attribute type 10 has an invalid length. [ 543.002220][T21733] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.040698][T21741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4990'. [ 543.160010][ C0] sched: DL replenish lagged too much [ 543.211056][T21744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.217564][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.422849][ T4956] Bluetooth: hci2: command 0x0406 tx timeout [ 626.367527][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.166948][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.814279][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 694.821302][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21753/1:b..l.. [ 694.830715][ C1] rcu: (detected by 1, t=10503 jiffies, g=109177, q=2334 ncpus=2) [ 694.838665][ C1] task:syz.1.4994 state:R running task stack:24696 pid:21753 tgid:21749 ppid:14870 task_flags:0x400140 flags:0x00080002 [ 694.852282][ C1] Call Trace: [ 694.855609][ C1] [ 694.858581][ C1] __schedule+0x17dd/0x5830 [ 694.863164][ C1] ? __pfx___schedule+0x10/0x10 [ 694.868084][ C1] preempt_schedule_irq+0x4b/0x90 [ 694.873159][ C1] irqentry_exit+0x14f/0x9b0 [ 694.877794][ C1] ? trace_irq_disable+0x3b/0x140 [ 694.882883][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 694.888909][ C1] RIP: 0010:kasan_byte_accessible+0x16/0x30 [ 694.894856][ C1] Code: 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 <3c> 08 0f 92 c0 e9 00 3b c6 09 cc 66 66 66 66 66 66 2e 0f 1f 84 00 [ 694.914555][ C1] RSP: 0018:ffffc900042267a8 EFLAGS: 00000a02 [ 694.920687][ C1] RAX: 0000000000000000 RBX: ffffffff817879ec RCX: 8000000000000001 [ 694.928700][ C1] RDX: 0000000000000000 RSI: ffffffff817879ec RDI: 1ffffffff1feb464 [ 694.936708][ C1] RBP: 1ffff92000844d28 R08: 0000000000000000 R09: 0000000000000000 [ 694.944735][ C1] R10: ffffc90004226958 R11: ffffffff81b3a880 R12: ffffffff8ff5a320 [ 694.952747][ C1] R13: 0000000000000002 R14: ffffffff8ff5a320 R15: 0000000000000000 [ 694.960762][ C1] ? unwind_next_frame+0xac/0x2550 [ 694.965941][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 694.972153][ C1] ? unwind_next_frame+0xac/0x2550 [ 694.977355][ C1] ? rcu_is_watching+0x16/0xb0 [ 694.982168][ C1] __kasan_check_byte+0x12/0x40 [ 694.987074][ C1] lock_acquire+0x7d/0x350 [ 694.991549][ C1] ? unwind_next_frame+0x8f/0x2550 [ 694.996712][ C1] ? netlink_sendmsg+0x7f0/0xb20 [ 695.001696][ C1] ? unwind_next_frame+0x8f/0x2550 [ 695.006855][ C1] unwind_next_frame+0xac/0x2550 [ 695.011849][ C1] ? unwind_next_frame+0x8f/0x2550 [ 695.017020][ C1] ? netlink_unicast+0x8ef/0xa80 [ 695.022017][ C1] ? unwind_next_frame+0x8f/0x2550 [ 695.027220][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 695.033427][ C1] arch_stack_walk+0x11b/0x150 [ 695.038260][ C1] ? netlink_sendmsg+0x7f0/0xb20 [ 695.043260][ C1] stack_trace_save+0xa9/0x100 [ 695.048159][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 695.053587][ C1] ? __lock_acquire+0x747/0x2de0 [ 695.058767][ C1] save_stack+0x122/0x230 [ 695.063176][ C1] ? __pfx_save_stack+0x10/0x10 [ 695.068128][ C1] ? lock_acquire+0x115/0x350 [ 695.072857][ C1] ? __free_frozen_pages+0xc97/0xd90 [ 695.078189][ C1] ? __slab_free+0x269/0x2c0 [ 695.082832][ C1] ? qlist_free_all+0x99/0x100 [ 695.087643][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 695.093326][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 695.098149][ C1] ? __kvmalloc_node_noprof+0x50a/0x820 [ 695.103756][ C1] ? alloc_netdev_mqs+0xa9/0x1240 [ 695.108835][ C1] ? rtnl_create_link+0x321/0xd70 [ 695.113921][ C1] ? rtnl_newlink_create+0x258/0x7b0 [ 695.119270][ C1] ? rtnl_newlink+0x167a/0x1c30 [ 695.124274][ C1] ? rtnetlink_rcv_msg+0x802/0xc00 [ 695.129422][ C1] ? netlink_rcv_skb+0x226/0x4a0 [ 695.134414][ C1] ? netlink_unicast+0x8ef/0xa80 [ 695.139432][ C1] ? netlink_sendmsg+0x7f0/0xb20 [ 695.144443][ C1] __reset_page_owner+0x73/0x2a0 [ 695.149445][ C1] __free_frozen_pages+0xc97/0xd90 [ 695.154664][ C1] __slab_free+0x269/0x2c0 [ 695.159140][ C1] ? qlist_free_all+0x8e/0x100 [ 695.164001][ C1] qlist_free_all+0x99/0x100 [ 695.168657][ C1] kasan_quarantine_reduce+0x148/0x160 [ 695.174179][ C1] __kasan_kmalloc+0x22/0xb0 [ 695.178817][ C1] __kvmalloc_node_noprof+0x50a/0x820 [ 695.184250][ C1] ? __kvmalloc_node_noprof+0x340/0x820 [ 695.190029][ C1] ? alloc_netdev_mqs+0xa9/0x1240 [ 695.195107][ C1] ? alloc_netdev_mqs+0xa9/0x1240 [ 695.200194][ C1] alloc_netdev_mqs+0xa9/0x1240 [ 695.205128][ C1] ? __pfx_snprintf+0x10/0x10 [ 695.209855][ C1] ? __pfx_br_dev_setup+0x10/0x10 [ 695.214941][ C1] rtnl_create_link+0x321/0xd70 [ 695.219864][ C1] rtnl_newlink_create+0x258/0x7b0 [ 695.225062][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 695.230761][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 695.235848][ C1] ? ns_capable+0x84/0xe0 [ 695.240237][ C1] rtnl_newlink+0x167a/0x1c30 [ 695.244976][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 695.250065][ C1] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 695.255576][ C1] ? netlink_deliver_tap+0x19c/0x1b0 [ 695.260908][ C1] ? netlink_unicast+0x8c1/0xa80 [ 695.265921][ C1] ? netlink_sendmsg+0x7f0/0xb20 [ 695.270911][ C1] ? sock_sendmsg_nosec+0x14e/0x190 [ 695.276150][ C1] ? ____sys_sendmsg+0x54e/0x850 [ 695.281124][ C1] ? ___sys_sendmsg+0x2a5/0x360 [ 695.286038][ C1] ? __x64_sys_sendmsg+0x1b1/0x290 [ 695.291182][ C1] ? do_syscall_64+0x166/0x520 [ 695.295984][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.302131][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 695.307463][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 695.312717][ C1] ? nlmon_xmit+0xb0/0x100 [ 695.317182][ C1] ? kmem_cache_free+0x182/0x650 [ 695.322181][ C1] ? __lock_acquire+0x747/0x2de0 [ 695.327173][ C1] ? __pfx_hook_capable+0x10/0x10 [ 695.332234][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 695.337416][ C1] ? __pfx_hook_capable+0x10/0x10 [ 695.342485][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 695.347747][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 695.352807][ C1] rtnetlink_rcv_msg+0x802/0xc00 [ 695.357805][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 695.362956][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 695.368488][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 695.373587][ C1] netlink_rcv_skb+0x226/0x4a0 [ 695.378403][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 695.383996][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 695.389376][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 695.394634][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 695.399891][ C1] netlink_unicast+0x8ef/0xa80 [ 695.404719][ C1] netlink_sendmsg+0x7f0/0xb20 [ 695.409540][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.414877][ C1] ? aa_sock_msg_perm+0x144/0x210 [ 695.419943][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 695.425544][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.430900][ C1] sock_sendmsg_nosec+0x14e/0x190 [ 695.435978][ C1] ____sys_sendmsg+0x54e/0x850 [ 695.440791][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.446124][ C1] ? import_iovec+0x73/0xa0 [ 695.450675][ C1] ___sys_sendmsg+0x2a5/0x360 [ 695.455389][ C1] ? __lock_acquire+0x747/0x2de0 [ 695.460379][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.465633][ C1] ? futex_wait+0x2a2/0x390 [ 695.470220][ C1] ? __fget_files+0x3a2/0x420 [ 695.474937][ C1] ? __fget_files+0x2a/0x420 [ 695.479586][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 695.484682][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.490309][ C1] do_syscall_64+0x166/0x520 [ 695.494953][ C1] ? trace_irq_disable+0x3b/0x140 [ 695.500031][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.506164][ C1] ? clear_bhb_loop+0x70/0xc0 [ 695.510896][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.516833][ C1] RIP: 0033:0x7f7a7e39fb19 [ 695.521301][ C1] RSP: 002b:00007f7a7f1ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.529787][ C1] RAX: ffffffffffffffda RBX: 00007f7a7e625fa0 RCX: 00007f7a7e39fb19 [ 695.537830][ C1] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 695.545849][ C1] RBP: 00007f7a7e437b70 R08: 0000000000000000 R09: 0000000000000000 [ 695.553971][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.562005][ C1] R13: 00007f7a7e626038 R14: 00007f7a7e625fa0 R15: 00007fff81a4d4b8 [ 695.570048][ C1]