last executing test programs: 4.618625651s ago: executing program 0 (id=1516): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548", 0xe1}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1", 0xdd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540", 0x6d}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 3.721621846s ago: executing program 0 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x204080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)=0x4) r2 = socket$rds(0x15, 0x5, 0x0) close(r2) socket$inet6_icmp(0xa, 0x2, 0x3a) bind$rds(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r3, &(0x7f00000000c0)=0xa7, 0x12) 3.345463486s ago: executing program 1 (id=1543): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x18, 0x0, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000440)=[{0x10, 0x10b, 0xc}, {0x10, 0x84, 0x8}], 0x20}, 0x41) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.058436722s ago: executing program 4 (id=1549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x12c}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d", 0xd7}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 2.897009329s ago: executing program 4 (id=1552): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x8, 0x5, 0x8209, 0x0, 0x2, 0x6, 0x10, 0x40}, &(0x7f0000000140)=0x20) 2.509662763s ago: executing program 4 (id=1557): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000faffbfff000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000048500000082000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x4, 0x4, 0x3, 0x840, 0x1}, 0x50) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d40)={0x0}, &(0x7f0000000d80)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="240000002d000100000000000000000c00000000", @ANYRES32=r8, @ANYBLOB="0b000080976b640868603000"], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) sendmsg$unix(r4, &(0x7f0000000e80)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000c40)="3dd1251f42ee6d354b942608f5c35f635aa675ac8093c10153e2484e6bf1fa245a2b63345e812f2b212e56e7092db902800bd01c2a2de8b6e2c5fe029ef8f3eba8de6572e08cc74299f05b9f4bb24c9b5b3be6c0f99cb35fe51e1c02783c67e5147128f6382c39a0a61d3590b3820009fc6e2c8578bc5d83126d570990fbc3d328f1ba83e9192270b5703d10b59b51ee6972c83dcf6893aaa162737cc129bf68f998", 0xa2}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}], 0x20, 0x4}, 0x40804) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000001200000006000000000000070000000000302e5f305f00302e3000"], &(0x7f0000000780)=""/186, 0x2f, 0xba, 0x1, 0x5, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x20, &(0x7f0000000a40)={&(0x7f00000008c0)=""/117, 0x75, 0x0, &(0x7f0000000940)=""/246, 0xf6}}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r12}, &(0x7f0000000080), &(0x7f0000000240)=r13}, 0x20) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f40)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYRES16=r14, @ANYBLOB="02002bbd7000fcdbdf250200000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8004811}, 0x4) unshare(0x8040480) r19 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r19, 0x10e, 0x2, &(0x7f0000000fc0)=0x1, 0x4) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e000000010100008a02000003000000b0500200", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_lsm={0x1d, 0x29, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x517c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7fff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='syzkaller\x00', 0x11, 0x96, &(0x7f0000000680)=""/150, 0x41100, 0x14, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f0000000880)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r11, 0x0, 0x0, &(0x7f0000000b40)=[r1, r1, r1, r12, r20, r1], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.374103019s ago: executing program 1 (id=1558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_int(r2, &(0x7f00000000c0)=0xa7, 0x12) 1.426135536s ago: executing program 4 (id=1561): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newnexthop={0x0, 0x68, 0x400, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4, 0x0, 0x31}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x5}, @NHA_GATEWAY={0x0, 0x6, @in6_addr=@dev={0xfe, 0x80, '\x00', 0x33}}, @NHA_GROUP={0x0, 0x2, [{0x1, 0x3}, {0x1, 0x7}, {0xb, 0xc}, {0x2, 0x9}]}, @NHA_BLACKHOLE, @NHA_FDB, @NHA_OIF={0x0, 0x5, r2}, @NHA_BLACKHOLE]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) (async) mmap(&(0x7f00003da000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0x704ae000) (async) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}], 0x20}}], 0x5e, 0x4880) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) syz_emit_ethernet(0x69, &(0x7f0000000300)={@remote, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x3}}, {@generic={0x88f8, "dd82021461ad06c65f4295f78b5ed0ac51d6227e5c369967e0b44103f7f17921fb091fb01713ff721a42562e54ae18d2a31e79644f09f8d92aed736359aaa2fa64e04b54e2d39f173fecdb5143eec8946a4025"}}}, &(0x7f0000000380)={0x0, 0x4, [0xa2e, 0x265, 0x54e, 0xd97]}) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r4, 0x29, 0x4b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) 1.334759202s ago: executing program 0 (id=1562): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/6, 0x6}], 0x1}, 0x40000000) 1.290619931s ago: executing program 0 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000060601080000000000000000010000050900020073797a3000000000050001"], 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', r3, 0x20, 0x1, 0x1, 0x8, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x65, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c000200010000001500f7000c000c80080003000200"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.264499037s ago: executing program 2 (id=1565): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 1.202014461s ago: executing program 1 (id=1566): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff73013f0000000000950000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) syz_emit_ethernet(0x69, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x33, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2c6"}}}}}}}, 0x0) listen(r0, 0x200204) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800004, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r2, 0x80000003) listen(r1, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x44880) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000002c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002840), 0xffffffffffffffff) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) 1.138741639s ago: executing program 4 (id=1567): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x20000, @local, 0x13}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, &(0x7f0000000300), 0x0}, 0x20) 1.13414957s ago: executing program 3 (id=1568): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1.037688492s ago: executing program 0 (id=1569): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x12c}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09", 0xda}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 989.935962ms ago: executing program 3 (id=1570): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323", 0x47}, {&(0x7f0000000900)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c", 0x10}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 980.665458ms ago: executing program 1 (id=1571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000faffbfff000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000048500000082000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 3) 882.103098ms ago: executing program 3 (id=1572): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 798.431857ms ago: executing program 3 (id=1573): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r6, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0xa0, 0x10, 0x403, 0x70bd25, 0x1, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MAP={0x24, 0xe, {0x4f8f, 0x7460b215, 0x6, 0x3, 0xa, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x15e) 582.098644ms ago: executing program 1 (id=1574): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x12c}], 0x1}}], 0x1, 0x2090) sendmmsg$inet_sctp(r0, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="056ce834bcdee9ea4065fb800f6496", 0xf}, {&(0x7f00000002c0)="7186fc715c350b41428d3f3de32ee502f81a0d21f9842162d75e2b0fefcc", 0x1e}, {&(0x7f0000000300)="5f9fccd87600e26bfc90f7de5d81e7853dd6db98c0dd471efd7a3b9737da9b11bec6dc77bcd7f3e1048b4ee8296ec9c6261685ab0124396ff69255e95514c255a915e9a120a57ac2b3795d27d721a22f5a9a441b99a9fa1b92669031cf339a8e01ab4fe1d3cc00c874fd8ded07aa0d56bfcc787e5133675244bfce51cd992a3d81adafa9aea942c983c71f", 0x8b}, {&(0x7f0000000400)="dccd23d613dca388b7a346c71a8c538c8246ad6c8ba4b1506682755cdbbb0a5336df7ac2e1759b7e3704850a01c6b841dda83bbcb1daafb7459719c305b8affde5bf4a1210a0732a626cd81367faa1e9d975ee60c55b4947d52f87ffd55a9b1e9e8f9e6a1ae23932c632babae6acf8773332e8dca9af310192f8a6e30fa0f0b5970c18f380264d3803fd325ddcf72b1458787d7ed87f1215dba64bdac06eab382a", 0xa1}, {&(0x7f0000000500)="913f62aa2ac9ff5b25483612c232247f48906e70b40ff6ce73d3ed1775e665256d5312e5193d7ad140398da4", 0x2c}], 0x5}], 0x1, 0x440d4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 558.987527ms ago: executing program 1 (id=1575): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000040) 459.528143ms ago: executing program 2 (id=1576): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab8000000060a0500000000000000000002000000080009400000000108000940000000030900020073797a31000000000900010073797a30000000000c00064000000000000000010800094000000001080009400000000108000140000000034c00058008000140000000350800014000008864080001400000000108000240000000000800014000"], 0xe0}}, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000240)={0x2, [0x0, 0x0]}) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r0, &(0x7f0000000280)='/]{\x00', 0x61a000, &(0x7f00000002c0)={@align=0x8, {0x1ff, 0x6, 0x9, 0x1}}, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x800}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'hsr0\x00', 0xa00}) 342.63386ms ago: executing program 2 (id=1577): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0xaadd}, 0x8) (fail_nth: 3) 246.465409ms ago: executing program 2 (id=1578): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x15e) 215.772469ms ago: executing program 3 (id=1579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000060601080000000000000000010000050900020073797a3000000000050001"], 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', r3, 0x20, 0x1, 0x1, 0x8, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x65, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c000200010000001500f7000c000c80080003000200"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 201.941701ms ago: executing program 4 (id=1580): r0 = socket$kcm(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xb4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0xbc, &(0x7f0000000240)=""/188, 0x40f00, 0x7a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x9, 0x40, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000001c80)={&(0x7f0000000040)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="60a40c4c53d97d61c9686f55d6e530274b9997106bad1b3e5ebd583e1bf8fb593e39f01fb8ec26749f77479a11df14783b612feeb45dd4745dcd59d424fd0370c59384da18cfec03d38c3a869faf93f08a348b7431e9f454c9", 0x59}, {&(0x7f0000001980)="c07327166fb17a6535c3deb8dde0e327c3739632ea2ccd29a2dcd62cd512", 0x1e}, {&(0x7f00000019c0)="d8df06113004d0008950f185889098ce0e23c598ff5b9269103218ea", 0x1c}, {&(0x7f0000001a00)="2036bc835e8b7a7a6b003776ebe626dabaafcdf9e0a1967aee970d7eb720d463166b22eae1ee2b927a42d0beff202dff541b7f4c62af1ab98a01a035d682343d3ae404a518cd3b46db9ebfa86a6f7a9787", 0x51}, {&(0x7f0000001a80)="3d8557298bc1e978f6578f2f842308e0b9337c39d179dd21a63e5243d7826bf2a7d0e20f43b2b9871a6279de34d2ee02b5cdbe82e2c91da0d365b99af2d692755c12eef11bfa0d5128fecc9349d785b1e9425b2555675c81b304267f336a617a6567ad4cac9cfc591e25c11c77265923cf6eabac8d8f38f751017ca1536b5c2778600a1a87d5deedd6dbfd71ac17eb23d2c759ba43a12b12cdb2336400e0a99dadea2074e08c4a7d1ab1de9145a3ad90f16a936d6125", 0xb6}, {&(0x7f0000001b40)="b091d532e9d23cfdc34c0f5c43c27fc0bf20ae13432f31def4cb12f7dd", 0x1d}], 0x7, &(0x7f0000001c00)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x3, 0x4, 0x1ee3}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x3d}}], 0x58, 0x4}, 0x1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000005c0)={r0, &(0x7f0000000480)='&%,@#\x00', 0x100, &(0x7f00000004c0)={@_ha_fsid={[0x9, 0x9]}, {0x2, 0xc, 0x5, 0x4}}, 0x8, &(0x7f0000000500), &(0x7f0000000540)=0xc}) write$tun(r5, &(0x7f0000000600)={@val={0x0, 0x892f}, @val={0x3, 0x4, 0x5, 0x9, 0x7ff, 0x6}, @eth={@multicast, @random="6104506e3131", @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @remote, @remote, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}, 0x54) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x401, @ipv4={'\x00', '\xff\xff', @local}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "fd1bd3edff00", "c754c484c6157749c7a85b040000008e", "0460f800", "9fd74ba2972e7547"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "49a1c291f19eee45", "5c6495997b26a2da703d7be911a2a22f", "0016f4ff", "1fbd70a6fc9a4fc2"}, 0x9) socket$kcm(0x1e, 0x7, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) 131.655714ms ago: executing program 2 (id=1581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=@newtclass={0x24, 0x28, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x5, 0xf}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}, @jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 54.477125ms ago: executing program 0 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323", 0x47}, {&(0x7f0000000900)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c", 0x10}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 40.166856ms ago: executing program 3 (id=1583): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb00"/66], 0x38}}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 0s ago: executing program 2 (id=1584): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1000000, 0xc7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000e400"/20, @ANYRES8=r1, @ANYRES32, @ANYBLOB], 0x48) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r7 = socket(0x15, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r9, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c085}, 0x40000000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000380)={r4, &(0x7f0000000200)='[\x88\x00', 0x8000, &(0x7f0000000240)={@_ha_fsid={[0x9, 0x5]}, {0x5, 0x0, 0xfc, 0xfffffffffffff72a}}, 0x101, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000340)=0x8000}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000400), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x80, 0x80, 0x8a8b, 0xd, {{0xf, 0x4, 0x3, 0x1, 0x3c, 0x68, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x17, 0x7, "41f0b651d7"}, @ssrr={0x89, 0x1f, 0x30, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @remote, @multicast2]}]}}}}}) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000500)={@local, @initdev, 0x0}, &(0x7f0000000540)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1b0, r11, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r12}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x200, 0x3, 0xa, 0x101}, {0x400, 0x4, 0x3, 0x4}, {0x3, 0x5a, 0x5, 0x2}, {0x6, 0x5, 0x7, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) kernel console output (not intermixed with test programs): 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.994041][ T8159] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.994059][ T8159] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 146.994071][ T8159] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 146.994081][ T8159] RBP: 00007fb97823b090 R08: 0000000000000000 R09: 0000000000000000 [ 146.994090][ T8159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.994100][ T8159] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 146.994127][ T8159] [ 147.179637][ T8169] FAULT_INJECTION: forcing a failure. [ 147.179637][ T8169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.238335][ T8169] CPU: 0 UID: 0 PID: 8169 Comm: syz.3.876 Not tainted syzkaller #0 PREEMPT(full) [ 147.238358][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.238369][ T8169] Call Trace: [ 147.238376][ T8169] [ 147.238383][ T8169] dump_stack_lvl+0xe8/0x150 [ 147.238409][ T8169] should_fail_ex+0x412/0x560 [ 147.238435][ T8169] _copy_from_user+0x2d/0xb0 [ 147.238460][ T8169] ___sys_sendmsg+0x1c6/0x360 [ 147.238482][ T8169] ? __lock_acquire+0x6b5/0x2cf0 [ 147.238514][ T8169] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.238569][ T8169] ? __fget_files+0x2a/0x420 [ 147.238589][ T8169] ? __fget_files+0x3a0/0x420 [ 147.238619][ T8169] __x64_sys_sendmsg+0x1bd/0x2a0 [ 147.238644][ T8169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.238675][ T8169] ? __pfx_ksys_write+0x10/0x10 [ 147.238707][ T8169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.238726][ T8169] do_syscall_64+0x15f/0xf80 [ 147.238750][ T8169] ? trace_irq_disable+0x3b/0x140 [ 147.238774][ T8169] ? clear_bhb_loop+0x40/0x90 [ 147.238796][ T8169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.238813][ T8169] RIP: 0033:0x7fb97739cdd9 [ 147.238830][ T8169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.238844][ T8169] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.238862][ T8169] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 147.238874][ T8169] RDX: 0000000004000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 147.238886][ T8169] RBP: 00007fb97823b090 R08: 0000000000000000 R09: 0000000000000000 [ 147.238896][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.238907][ T8169] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 147.238934][ T8169] [ 147.423735][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.495359][ T8172] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 147.641613][ T8176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.877'. [ 147.657842][ T8172] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 147.676476][ T8172] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 147.928273][ T8176] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 147.986406][ T8186] ip6gretap2: entered promiscuous mode [ 147.992199][ T8186] ip6gretap2: entered allmulticast mode [ 148.007622][ T8186] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 148.207606][ T8199] netlink: 'syz.3.887': attribute type 4 has an invalid length. [ 148.248005][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.890'. [ 148.262930][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 148.307838][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 148.325136][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.887'. [ 148.418605][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 148.674569][ T8225] tipc: Enabled bearer , priority 0 [ 148.689790][ T8225] tipc: Resetting bearer [ 148.706962][ T8224] tipc: Disabling bearer [ 148.842663][ T8229] netlink: 68 bytes leftover after parsing attributes in process `syz.4.898'. [ 149.730236][ T8267] netlink: 'syz.1.912': attribute type 4 has an invalid length. [ 149.783309][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'. [ 149.956906][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'. [ 150.181620][ T8285] FAULT_INJECTION: forcing a failure. [ 150.181620][ T8285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.194917][ T8285] CPU: 1 UID: 0 PID: 8285 Comm: syz.0.915 Not tainted syzkaller #0 PREEMPT(full) [ 150.194939][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.194949][ T8285] Call Trace: [ 150.194956][ T8285] [ 150.194963][ T8285] dump_stack_lvl+0xe8/0x150 [ 150.194987][ T8285] should_fail_ex+0x412/0x560 [ 150.195013][ T8285] _copy_from_user+0x2d/0xb0 [ 150.195037][ T8285] __sys_bpf+0x229/0x950 [ 150.195063][ T8285] ? __pfx___sys_bpf+0x10/0x10 [ 150.195101][ T8285] ? ksys_write+0x242/0x270 [ 150.195127][ T8285] ? __pfx_ksys_write+0x10/0x10 [ 150.195153][ T8285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.195171][ T8285] __x64_sys_bpf+0x7c/0x90 [ 150.195194][ T8285] do_syscall_64+0x15f/0xf80 [ 150.195215][ T8285] ? clear_bhb_loop+0x40/0x90 [ 150.195244][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.195261][ T8285] RIP: 0033:0x7ff06f39cdd9 [ 150.195277][ T8285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.195291][ T8285] RSP: 002b:00007ff070212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.195309][ T8285] RAX: ffffffffffffffda RBX: 00007ff06f615fa0 RCX: 00007ff06f39cdd9 [ 150.195320][ T8285] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 150.195330][ T8285] RBP: 00007ff070212090 R08: 0000000000000000 R09: 0000000000000000 [ 150.195340][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.195350][ T8285] R13: 00007ff06f616038 R14: 00007ff06f615fa0 R15: 00007fff70293c98 [ 150.195377][ T8285] [ 152.847286][ T8333] __nla_validate_parse: 1 callbacks suppressed [ 152.847304][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 152.973292][ T8338] openvswitch: netlink: IPv4 tun info is not correct [ 152.999976][ T8338] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.032914][ T8344] FAULT_INJECTION: forcing a failure. [ 153.032914][ T8344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.062956][ T8344] CPU: 1 UID: 0 PID: 8344 Comm: syz.0.937 Not tainted syzkaller #0 PREEMPT(full) [ 153.062981][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.062991][ T8344] Call Trace: [ 153.062998][ T8344] [ 153.063005][ T8344] dump_stack_lvl+0xe8/0x150 [ 153.063031][ T8344] should_fail_ex+0x412/0x560 [ 153.063059][ T8344] _copy_from_user+0x2d/0xb0 [ 153.063084][ T8344] __sys_bpf+0x229/0x950 [ 153.063114][ T8344] ? __pfx___sys_bpf+0x10/0x10 [ 153.063154][ T8344] ? ksys_write+0x242/0x270 [ 153.063180][ T8344] ? __pfx_ksys_write+0x10/0x10 [ 153.063209][ T8344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.063228][ T8344] __x64_sys_bpf+0x7c/0x90 [ 153.063252][ T8344] do_syscall_64+0x15f/0xf80 [ 153.063274][ T8344] ? clear_bhb_loop+0x40/0x90 [ 153.063296][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.063314][ T8344] RIP: 0033:0x7ff06f39cdd9 [ 153.063332][ T8344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.063345][ T8344] RSP: 002b:00007ff070212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.063362][ T8344] RAX: ffffffffffffffda RBX: 00007ff06f615fa0 RCX: 00007ff06f39cdd9 [ 153.063373][ T8344] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 153.063384][ T8344] RBP: 00007ff070212090 R08: 0000000000000000 R09: 0000000000000000 [ 153.063393][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.063402][ T8344] R13: 00007ff06f616038 R14: 00007ff06f615fa0 R15: 00007fff70293c98 [ 153.063429][ T8344] [ 153.242722][ T8347] netlink: 72 bytes leftover after parsing attributes in process `syz.1.938'. [ 153.251964][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.938'. [ 153.407712][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'. [ 153.604642][ T8368] FAULT_INJECTION: forcing a failure. [ 153.604642][ T8368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.664954][ T8368] CPU: 1 UID: 0 PID: 8368 Comm: syz.4.946 Not tainted syzkaller #0 PREEMPT(full) [ 153.664978][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.664988][ T8368] Call Trace: [ 153.664994][ T8368] [ 153.665001][ T8368] dump_stack_lvl+0xe8/0x150 [ 153.665026][ T8368] should_fail_ex+0x412/0x560 [ 153.665053][ T8368] _copy_from_user+0x2d/0xb0 [ 153.665078][ T8368] ___sys_sendmsg+0x1c6/0x360 [ 153.665100][ T8368] ? __lock_acquire+0x6b5/0x2cf0 [ 153.665124][ T8368] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.665178][ T8368] ? __fget_files+0x2a/0x420 [ 153.665198][ T8368] ? __fget_files+0x3a0/0x420 [ 153.665227][ T8368] __x64_sys_sendmsg+0x1bd/0x2a0 [ 153.665252][ T8368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.665284][ T8368] ? __pfx_ksys_write+0x10/0x10 [ 153.665316][ T8368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.665335][ T8368] do_syscall_64+0x15f/0xf80 [ 153.665355][ T8368] ? trace_irq_disable+0x3b/0x140 [ 153.665380][ T8368] ? clear_bhb_loop+0x40/0x90 [ 153.665401][ T8368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.665417][ T8368] RIP: 0033:0x7f246479cdd9 [ 153.665432][ T8368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.665445][ T8368] RSP: 002b:00007f2465592028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.665462][ T8368] RAX: ffffffffffffffda RBX: 00007f2464a15fa0 RCX: 00007f246479cdd9 [ 153.665474][ T8368] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 153.665483][ T8368] RBP: 00007f2465592090 R08: 0000000000000000 R09: 0000000000000000 [ 153.665492][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.665500][ T8368] R13: 00007f2464a16038 R14: 00007f2464a15fa0 R15: 00007fff34bfc638 [ 153.665526][ T8368] [ 153.690932][ T8376] netlink: 'syz.3.949': attribute type 21 has an invalid length. [ 153.891175][ T8376] netlink: 128 bytes leftover after parsing attributes in process `syz.3.949'. [ 153.902083][ T8376] netlink: 3 bytes leftover after parsing attributes in process `syz.3.949'. [ 153.991515][ T8381] netlink: 'syz.4.950': attribute type 12 has an invalid length. [ 154.054546][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 154.106491][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 154.227563][ T8394] syzkaller0: entered promiscuous mode [ 154.238989][ T8394] syzkaller0: entered allmulticast mode [ 154.420371][ T8406] netlink: 68 bytes leftover after parsing attributes in process `syz.2.960'. [ 154.642672][ T8418] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 154.672645][ T8418] netlink: 52 bytes leftover after parsing attributes in process `syz.0.963'. [ 155.011379][ T8433] can: request_module (can-proto-0) failed. [ 155.083489][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.384456][ T7983] IPVS: starting estimator thread 0... [ 155.473810][ T8452] IPVS: using max 27 ests per chain, 64800 per kthread [ 155.716310][ T8461] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 155.997672][ T8477] FAULT_INJECTION: forcing a failure. [ 155.997672][ T8477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.054047][ T8483] FAULT_INJECTION: forcing a failure. [ 156.054047][ T8483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.063535][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: syz.1.978 Not tainted syzkaller #0 PREEMPT(full) [ 156.063560][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.063576][ T8477] Call Trace: [ 156.063584][ T8477] [ 156.063590][ T8477] dump_stack_lvl+0xe8/0x150 [ 156.063616][ T8477] should_fail_ex+0x412/0x560 [ 156.063642][ T8477] _copy_from_user+0x2d/0xb0 [ 156.063666][ T8477] ___sys_recvmsg+0x175/0x590 [ 156.063688][ T8477] ? get_pid_task+0x20/0x1f0 [ 156.063708][ T8477] ? get_pid_task+0x20/0x1f0 [ 156.063732][ T8477] ? __pfx____sys_recvmsg+0x10/0x10 [ 156.063759][ T8477] ? __fget_files+0x2a/0x420 [ 156.063792][ T8477] ? __fget_files+0x3a0/0x420 [ 156.063821][ T8477] __x64_sys_recvmsg+0x1ba/0x2a0 [ 156.063845][ T8477] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 156.063875][ T8477] ? __pfx_ksys_write+0x10/0x10 [ 156.063905][ T8477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.063924][ T8477] do_syscall_64+0x15f/0xf80 [ 156.063943][ T8477] ? trace_irq_disable+0x3b/0x140 [ 156.063966][ T8477] ? clear_bhb_loop+0x40/0x90 [ 156.063986][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.064003][ T8477] RIP: 0033:0x7eff1419cdd9 [ 156.064019][ T8477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.064032][ T8477] RSP: 002b:00007eff15103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 156.064050][ T8477] RAX: ffffffffffffffda RBX: 00007eff14415fa0 RCX: 00007eff1419cdd9 [ 156.064062][ T8477] RDX: 0000000000012000 RSI: 0000200000000840 RDI: 0000000000000003 [ 156.064072][ T8477] RBP: 00007eff15103090 R08: 0000000000000000 R09: 0000000000000000 [ 156.064083][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.064092][ T8477] R13: 00007eff14416038 R14: 00007eff14415fa0 R15: 00007fff16cff368 [ 156.064120][ T8477] [ 156.305183][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: syz.4.981 Not tainted syzkaller #0 PREEMPT(full) [ 156.305207][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.305218][ T8483] Call Trace: [ 156.305225][ T8483] [ 156.305232][ T8483] dump_stack_lvl+0xe8/0x150 [ 156.305258][ T8483] should_fail_ex+0x412/0x560 [ 156.305284][ T8483] _copy_from_user+0x2d/0xb0 [ 156.305310][ T8483] ___sys_sendmsg+0x1c6/0x360 [ 156.305331][ T8483] ? __lock_acquire+0x6b5/0x2cf0 [ 156.305355][ T8483] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.305410][ T8483] ? __fget_files+0x2a/0x420 [ 156.305430][ T8483] ? __fget_files+0x3a0/0x420 [ 156.305460][ T8483] __x64_sys_sendmsg+0x1bd/0x2a0 [ 156.305485][ T8483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.305517][ T8483] ? __pfx_ksys_write+0x10/0x10 [ 156.305555][ T8483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.305574][ T8483] do_syscall_64+0x15f/0xf80 [ 156.305594][ T8483] ? trace_irq_disable+0x3b/0x140 [ 156.305619][ T8483] ? clear_bhb_loop+0x40/0x90 [ 156.305641][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.305658][ T8483] RIP: 0033:0x7f246479cdd9 [ 156.305674][ T8483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.305688][ T8483] RSP: 002b:00007f2465592028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.305707][ T8483] RAX: ffffffffffffffda RBX: 00007f2464a15fa0 RCX: 00007f246479cdd9 [ 156.305720][ T8483] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 156.305730][ T8483] RBP: 00007f2465592090 R08: 0000000000000000 R09: 0000000000000000 [ 156.305741][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.305751][ T8483] R13: 00007f2464a16038 R14: 00007f2464a15fa0 R15: 00007fff34bfc638 [ 156.305779][ T8483] [ 156.599589][ T8504] FAULT_INJECTION: forcing a failure. [ 156.599589][ T8504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.613229][ T8504] CPU: 1 UID: 0 PID: 8504 Comm: syz.1.990 Not tainted syzkaller #0 PREEMPT(full) [ 156.613251][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.613260][ T8504] Call Trace: [ 156.613267][ T8504] [ 156.613273][ T8504] dump_stack_lvl+0xe8/0x150 [ 156.613298][ T8504] should_fail_ex+0x412/0x560 [ 156.613328][ T8504] _copy_from_user+0x2d/0xb0 [ 156.613352][ T8504] __sys_bpf+0x229/0x950 [ 156.613379][ T8504] ? __pfx___sys_bpf+0x10/0x10 [ 156.613415][ T8504] ? ksys_write+0x242/0x270 [ 156.613441][ T8504] ? __pfx_ksys_write+0x10/0x10 [ 156.613469][ T8504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.613488][ T8504] __x64_sys_bpf+0x7c/0x90 [ 156.613518][ T8504] do_syscall_64+0x15f/0xf80 [ 156.613538][ T8504] ? trace_irq_disable+0x3b/0x140 [ 156.613561][ T8504] ? clear_bhb_loop+0x40/0x90 [ 156.613582][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.613599][ T8504] RIP: 0033:0x7eff1419cdd9 [ 156.613615][ T8504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.613628][ T8504] RSP: 002b:00007eff15103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.613645][ T8504] RAX: ffffffffffffffda RBX: 00007eff14415fa0 RCX: 00007eff1419cdd9 [ 156.613657][ T8504] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 156.613667][ T8504] RBP: 00007eff15103090 R08: 0000000000000000 R09: 0000000000000000 [ 156.613678][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.613687][ T8504] R13: 00007eff14416038 R14: 00007eff14415fa0 R15: 00007fff16cff368 [ 156.613715][ T8504] [ 156.879835][ T8513] FAULT_INJECTION: forcing a failure. [ 156.879835][ T8513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.947267][ T8513] CPU: 1 UID: 0 PID: 8513 Comm: syz.1.992 Not tainted syzkaller #0 PREEMPT(full) [ 156.947289][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.947299][ T8513] Call Trace: [ 156.947306][ T8513] [ 156.947313][ T8513] dump_stack_lvl+0xe8/0x150 [ 156.947336][ T8513] should_fail_ex+0x412/0x560 [ 156.947362][ T8513] _copy_from_user+0x2d/0xb0 [ 156.947387][ T8513] ___sys_sendmsg+0x1c6/0x360 [ 156.947406][ T8513] ? __lock_acquire+0x6b5/0x2cf0 [ 156.947426][ T8513] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.947474][ T8513] ? __fget_files+0x2a/0x420 [ 156.947493][ T8513] ? __fget_files+0x3a0/0x420 [ 156.947522][ T8513] __x64_sys_sendmsg+0x1bd/0x2a0 [ 156.947544][ T8513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.947567][ T8513] ? __pfx_ksys_write+0x10/0x10 [ 156.947597][ T8513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.947614][ T8513] do_syscall_64+0x15f/0xf80 [ 156.947635][ T8513] ? trace_irq_disable+0x3b/0x140 [ 156.947658][ T8513] ? clear_bhb_loop+0x40/0x90 [ 156.947679][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.947696][ T8513] RIP: 0033:0x7eff1419cdd9 [ 156.947712][ T8513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.947726][ T8513] RSP: 002b:00007eff15103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.947744][ T8513] RAX: ffffffffffffffda RBX: 00007eff14415fa0 RCX: 00007eff1419cdd9 [ 156.947756][ T8513] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 156.947767][ T8513] RBP: 00007eff15103090 R08: 0000000000000000 R09: 0000000000000000 [ 156.947777][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.947786][ T8513] R13: 00007eff14416038 R14: 00007eff14415fa0 R15: 00007fff16cff368 [ 156.947812][ T8513] [ 156.959062][ T8506] netlink: 'syz.0.988': attribute type 10 has an invalid length. [ 157.152227][ T8506] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 157.270393][ T8527] netlink: 'syz.1.999': attribute type 1 has an invalid length. [ 157.611665][ T8548] FAULT_INJECTION: forcing a failure. [ 157.611665][ T8548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.613833][ T8546] syzkaller0: entered promiscuous mode [ 157.624942][ T8548] CPU: 0 UID: 0 PID: 8548 Comm: syz.1.1009 Not tainted syzkaller #0 PREEMPT(full) [ 157.624964][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.624974][ T8548] Call Trace: [ 157.624982][ T8548] [ 157.624990][ T8548] dump_stack_lvl+0xe8/0x150 [ 157.625015][ T8548] should_fail_ex+0x412/0x560 [ 157.625041][ T8548] _copy_from_user+0x2d/0xb0 [ 157.625065][ T8548] ___sys_sendmsg+0x1c6/0x360 [ 157.625086][ T8548] ? __lock_acquire+0x6b5/0x2cf0 [ 157.625109][ T8548] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.625170][ T8548] ? __fget_files+0x2a/0x420 [ 157.625189][ T8548] ? __fget_files+0x3a0/0x420 [ 157.625216][ T8548] __x64_sys_sendmsg+0x1bd/0x2a0 [ 157.625240][ T8548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.625269][ T8548] ? __pfx_ksys_write+0x10/0x10 [ 157.625299][ T8548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.625318][ T8548] do_syscall_64+0x15f/0xf80 [ 157.625337][ T8548] ? trace_irq_disable+0x3b/0x140 [ 157.625361][ T8548] ? clear_bhb_loop+0x40/0x90 [ 157.625380][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.625397][ T8548] RIP: 0033:0x7eff1419cdd9 [ 157.625413][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.625426][ T8548] RSP: 002b:00007eff15103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.625444][ T8548] RAX: ffffffffffffffda RBX: 00007eff14415fa0 RCX: 00007eff1419cdd9 [ 157.625456][ T8548] RDX: 0000000000040010 RSI: 0000200000000340 RDI: 0000000000000004 [ 157.625466][ T8548] RBP: 00007eff15103090 R08: 0000000000000000 R09: 0000000000000000 [ 157.625476][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.625485][ T8548] R13: 00007eff14416038 R14: 00007eff14415fa0 R15: 00007fff16cff368 [ 157.625512][ T8548] [ 157.825039][ T8546] syzkaller0: entered allmulticast mode [ 158.006059][ T8564] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 158.033293][ T8564] __nla_validate_parse: 10 callbacks suppressed [ 158.033309][ T8564] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1014'. [ 158.487930][ T8585] FAULT_INJECTION: forcing a failure. [ 158.487930][ T8585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.516679][ T8585] CPU: 1 UID: 0 PID: 8585 Comm: syz.2.1022 Not tainted syzkaller #0 PREEMPT(full) [ 158.516703][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.516713][ T8585] Call Trace: [ 158.516720][ T8585] [ 158.516727][ T8585] dump_stack_lvl+0xe8/0x150 [ 158.516753][ T8585] should_fail_ex+0x412/0x560 [ 158.516780][ T8585] _copy_from_user+0x2d/0xb0 [ 158.516805][ T8585] ___sys_sendmsg+0x1c6/0x360 [ 158.516827][ T8585] ? __lock_acquire+0x6b5/0x2cf0 [ 158.516850][ T8585] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.516905][ T8585] ? __fget_files+0x2a/0x420 [ 158.516925][ T8585] ? __fget_files+0x3a0/0x420 [ 158.516954][ T8585] __x64_sys_sendmsg+0x1bd/0x2a0 [ 158.516980][ T8585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.517011][ T8585] ? __pfx_ksys_write+0x10/0x10 [ 158.517049][ T8585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.517068][ T8585] do_syscall_64+0x15f/0xf80 [ 158.517091][ T8585] ? clear_bhb_loop+0x40/0x90 [ 158.517112][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.517129][ T8585] RIP: 0033:0x7feb0bf9cdd9 [ 158.517146][ T8585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.517159][ T8585] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.517178][ T8585] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 158.517191][ T8585] RDX: 0000000004008010 RSI: 0000200000000380 RDI: 0000000000000007 [ 158.517201][ T8585] RBP: 00007feb0cdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 158.517212][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.517222][ T8585] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 158.517250][ T8585] [ 158.771452][ T8592] FAULT_INJECTION: forcing a failure. [ 158.771452][ T8592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.832765][ T8592] CPU: 0 UID: 0 PID: 8592 Comm: syz.4.1026 Not tainted syzkaller #0 PREEMPT(full) [ 158.832788][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.832798][ T8592] Call Trace: [ 158.832804][ T8592] [ 158.832812][ T8592] dump_stack_lvl+0xe8/0x150 [ 158.832836][ T8592] should_fail_ex+0x412/0x560 [ 158.832863][ T8592] _copy_from_iter+0x1d3/0x1670 [ 158.832888][ T8592] ? unwind_next_frame+0xa6/0x2550 [ 158.832914][ T8592] ? __pfx__copy_from_iter+0x10/0x10 [ 158.832938][ T8592] ? tun_get_user+0x8aa/0x43e0 [ 158.832968][ T8592] copy_page_from_iter+0x220/0x2d0 [ 158.832994][ T8592] tun_get_user+0x1bf7/0x43e0 [ 158.833016][ T8592] ? tun_get_user+0x8aa/0x43e0 [ 158.833051][ T8592] ? aa_file_perm+0x50e/0x15e0 [ 158.833074][ T8592] ? __pfx_tun_get_user+0x10/0x10 [ 158.833097][ T8592] ? __lock_acquire+0x6b5/0x2cf0 [ 158.833128][ T8592] ? ref_tracker_alloc+0x35c/0x4c0 [ 158.833153][ T8592] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 158.833176][ T8592] ? tun_get+0x1c/0x2f0 [ 158.833196][ T8592] ? tun_get+0x1c/0x2f0 [ 158.833220][ T8592] ? tun_get+0x1c/0x2f0 [ 158.833239][ T8592] ? tun_get+0x1c/0x2f0 [ 158.833268][ T8592] tun_chr_write_iter+0x113/0x200 [ 158.833292][ T8592] vfs_write+0x61d/0xb90 [ 158.833326][ T8592] ? __pfx_vfs_write+0x10/0x10 [ 158.833356][ T8592] ? __fget_files+0x2a/0x420 [ 158.833384][ T8592] ksys_write+0x150/0x270 [ 158.833410][ T8592] ? __pfx_ksys_write+0x10/0x10 [ 158.833441][ T8592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.833460][ T8592] do_syscall_64+0x15f/0xf80 [ 158.833482][ T8592] ? clear_bhb_loop+0x40/0x90 [ 158.833503][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.833520][ T8592] RIP: 0033:0x7f246475d60e [ 158.833536][ T8592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.833549][ T8592] RSP: 002b:00007f2465591fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.833567][ T8592] RAX: ffffffffffffffda RBX: 00007f24655926c0 RCX: 00007f246475d60e [ 158.833579][ T8592] RDX: 0000000000000042 RSI: 0000200000000140 RDI: 00000000000000c8 [ 158.833590][ T8592] RBP: 00007f2465592090 R08: 0000000000000000 R09: 0000000000000000 [ 158.833600][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.833610][ T8592] R13: 00007f2464a16038 R14: 00007f2464a15fa0 R15: 00007fff34bfc638 [ 158.833638][ T8592] [ 159.129081][ T8597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1028'. [ 159.146947][ T8598] FAULT_INJECTION: forcing a failure. [ 159.146947][ T8598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.160605][ T8598] CPU: 0 UID: 0 PID: 8598 Comm: syz.2.1025 Not tainted syzkaller #0 PREEMPT(full) [ 159.160627][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.160636][ T8598] Call Trace: [ 159.160643][ T8598] [ 159.160650][ T8598] dump_stack_lvl+0xe8/0x150 [ 159.160674][ T8598] should_fail_ex+0x412/0x560 [ 159.160697][ T8598] _copy_from_user+0x2d/0xb0 [ 159.160719][ T8598] ___sys_sendmsg+0x1c6/0x360 [ 159.160739][ T8598] ? __lock_acquire+0x6b5/0x2cf0 [ 159.160760][ T8598] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.160807][ T8598] ? __fget_files+0x2a/0x420 [ 159.160824][ T8598] ? __fget_files+0x3a0/0x420 [ 159.160851][ T8598] __x64_sys_sendmsg+0x1bd/0x2a0 [ 159.160874][ T8598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.160901][ T8598] ? __pfx_ksys_write+0x10/0x10 [ 159.160931][ T8598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.160950][ T8598] do_syscall_64+0x15f/0xf80 [ 159.160969][ T8598] ? trace_irq_disable+0x3b/0x140 [ 159.160990][ T8598] ? clear_bhb_loop+0x40/0x90 [ 159.161011][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.161028][ T8598] RIP: 0033:0x7feb0bf9cdd9 [ 159.161045][ T8598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.161058][ T8598] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.161075][ T8598] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 159.161087][ T8598] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 159.161098][ T8598] RBP: 00007feb0cdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 159.161108][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.161119][ T8598] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 159.161148][ T8598] [ 159.483057][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 159.620389][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1032'. [ 159.649513][ T8620] sctp: [Deprecated]: syz.1.1038 (pid 8620) Use of int in max_burst socket option deprecated. [ 159.649513][ T8620] Use struct sctp_assoc_value instead [ 159.828873][ T8629] FAULT_INJECTION: forcing a failure. [ 159.828873][ T8629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.872460][ T8629] CPU: 0 UID: 0 PID: 8629 Comm: syz.4.1041 Not tainted syzkaller #0 PREEMPT(full) [ 159.872483][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.872493][ T8629] Call Trace: [ 159.872499][ T8629] [ 159.872506][ T8629] dump_stack_lvl+0xe8/0x150 [ 159.872530][ T8629] should_fail_ex+0x412/0x560 [ 159.872555][ T8629] _copy_from_user+0x2d/0xb0 [ 159.872580][ T8629] ___sys_sendmsg+0x1c6/0x360 [ 159.872602][ T8629] ? __lock_acquire+0x6b5/0x2cf0 [ 159.872620][ T8629] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.872649][ T8629] ? __fget_files+0x2a/0x420 [ 159.872660][ T8629] ? __fget_files+0x3a0/0x420 [ 159.872675][ T8629] __x64_sys_sendmsg+0x1bd/0x2a0 [ 159.872689][ T8629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.872705][ T8629] ? __pfx_ksys_write+0x10/0x10 [ 159.872722][ T8629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.872733][ T8629] do_syscall_64+0x15f/0xf80 [ 159.872744][ T8629] ? trace_irq_disable+0x3b/0x140 [ 159.872758][ T8629] ? clear_bhb_loop+0x40/0x90 [ 159.872770][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.872779][ T8629] RIP: 0033:0x7f246479cdd9 [ 159.872789][ T8629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.872797][ T8629] RSP: 002b:00007f2465592028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.872808][ T8629] RAX: ffffffffffffffda RBX: 00007f2464a15fa0 RCX: 00007f246479cdd9 [ 159.872815][ T8629] RDX: 0000000000000004 RSI: 0000200000001700 RDI: 0000000000000003 [ 159.872821][ T8629] RBP: 00007f2465592090 R08: 0000000000000000 R09: 0000000000000000 [ 159.872827][ T8629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.872832][ T8629] R13: 00007f2464a16038 R14: 00007f2464a15fa0 R15: 00007fff34bfc638 [ 159.872847][ T8629] [ 159.886539][ T5630] Bluetooth: hci3: link tx timeout [ 160.018245][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 160.021241][ T5630] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 160.054769][ T5630] Bluetooth: hci3: link tx timeout [ 160.085224][ T5630] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.093538][ T5630] Bluetooth: hci3: link tx timeout [ 160.098669][ T5630] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 160.106345][ T5630] Bluetooth: hci3: link tx timeout [ 160.111464][ T5630] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.176750][ T8641] FAULT_INJECTION: forcing a failure. [ 160.176750][ T8641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.198196][ T8641] CPU: 1 UID: 0 PID: 8641 Comm: syz.2.1044 Not tainted syzkaller #0 PREEMPT(full) [ 160.198220][ T8641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.198231][ T8641] Call Trace: [ 160.198237][ T8641] [ 160.198245][ T8641] dump_stack_lvl+0xe8/0x150 [ 160.198269][ T8641] should_fail_ex+0x412/0x560 [ 160.198296][ T8641] _copy_from_user+0x2d/0xb0 [ 160.198325][ T8641] ___sys_sendmsg+0x1c6/0x360 [ 160.198347][ T8641] ? __lock_acquire+0x6b5/0x2cf0 [ 160.198370][ T8641] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.198424][ T8641] ? __fget_files+0x2a/0x420 [ 160.198443][ T8641] ? __fget_files+0x3a0/0x420 [ 160.198472][ T8641] __x64_sys_sendmsg+0x1bd/0x2a0 [ 160.198497][ T8641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.198529][ T8641] ? __pfx_ksys_write+0x10/0x10 [ 160.198560][ T8641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.198579][ T8641] do_syscall_64+0x15f/0xf80 [ 160.198598][ T8641] ? trace_irq_disable+0x3b/0x140 [ 160.198622][ T8641] ? clear_bhb_loop+0x40/0x90 [ 160.198644][ T8641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.198661][ T8641] RIP: 0033:0x7feb0bf9cdd9 [ 160.198677][ T8641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.198690][ T8641] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.198709][ T8641] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 160.198721][ T8641] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 160.198731][ T8641] RBP: 00007feb0cdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 160.198742][ T8641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.198752][ T8641] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 160.198779][ T8641] [ 160.487723][ T8643] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1045'. [ 160.516035][ T8643] netlink: 1432 bytes leftover after parsing attributes in process `syz.4.1045'. [ 160.525419][ T8643] openvswitch: netlink: Flow key attr not present in new flow. [ 160.535240][ T8643] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1045'. [ 160.939653][ T8663] syzkaller1: entered promiscuous mode [ 160.949896][ T8663] syzkaller1: entered allmulticast mode [ 161.032735][ T8671] FAULT_INJECTION: forcing a failure. [ 161.032735][ T8671] name failslab, interval 1, probability 0, space 0, times 0 [ 161.058109][ T8670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1058'. [ 161.066663][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.1.1057 Not tainted syzkaller #0 PREEMPT(full) [ 161.066687][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.066697][ T8671] Call Trace: [ 161.066703][ T8671] [ 161.066710][ T8671] dump_stack_lvl+0xe8/0x150 [ 161.066736][ T8671] should_fail_ex+0x412/0x560 [ 161.066762][ T8671] should_failslab+0xa8/0x100 [ 161.066789][ T8671] __kmalloc_noprof+0xe8/0x760 [ 161.066812][ T8671] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 161.066840][ T8671] tomoyo_realpath_from_path+0xe3/0x5d0 [ 161.066865][ T8671] ? tomoyo_domain+0xd7/0x130 [ 161.066892][ T8671] ? tomoyo_path_number_perm+0x219/0x630 [ 161.066911][ T8671] tomoyo_path_number_perm+0x246/0x630 [ 161.066932][ T8671] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 161.066950][ T8671] ? __lock_acquire+0x6b5/0x2cf0 [ 161.066982][ T8671] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 161.067022][ T8671] ? __fget_files+0x2a/0x420 [ 161.067045][ T8671] ? __fget_files+0x2a/0x420 [ 161.067068][ T8671] ? __fget_files+0x3a0/0x420 [ 161.067086][ T8671] ? __fget_files+0x2a/0x420 [ 161.067108][ T8671] security_file_ioctl+0xc3/0x2a0 [ 161.067128][ T8671] __se_sys_ioctl+0x47/0x170 [ 161.067153][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.067171][ T8671] do_syscall_64+0x15f/0xf80 [ 161.067189][ T8671] ? trace_irq_disable+0x3b/0x140 [ 161.067212][ T8671] ? clear_bhb_loop+0x40/0x90 [ 161.067233][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.067248][ T8671] RIP: 0033:0x7eff1419cdd9 [ 161.067265][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.067277][ T8671] RSP: 002b:00007eff15103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.067296][ T8671] RAX: ffffffffffffffda RBX: 00007eff14415fa0 RCX: 00007eff1419cdd9 [ 161.067308][ T8671] RDX: 0000200000002180 RSI: 000000000000541b RDI: 0000000000000006 [ 161.067319][ T8671] RBP: 00007eff15103090 R08: 0000000000000000 R09: 0000000000000000 [ 161.067329][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.067339][ T8671] R13: 00007eff14416038 R14: 00007eff14415fa0 R15: 00007fff16cff368 [ 161.067366][ T8671] [ 161.086815][ T8671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.481522][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 161.955636][ T8705] syzkaller0: entered promiscuous mode [ 161.961136][ T8705] syzkaller0: entered allmulticast mode [ 162.123467][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 162.160249][ T8714] FAULT_INJECTION: forcing a failure. [ 162.160249][ T8714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.196356][ T8714] CPU: 1 UID: 0 PID: 8714 Comm: syz.2.1073 Not tainted syzkaller #0 PREEMPT(full) [ 162.196381][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.196391][ T8714] Call Trace: [ 162.196399][ T8714] [ 162.196406][ T8714] dump_stack_lvl+0xe8/0x150 [ 162.196432][ T8714] should_fail_ex+0x412/0x560 [ 162.196460][ T8714] _copy_from_user+0x2d/0xb0 [ 162.196486][ T8714] ___sys_sendmsg+0x1c6/0x360 [ 162.196507][ T8714] ? __lock_acquire+0x6b5/0x2cf0 [ 162.196530][ T8714] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.196585][ T8714] ? __fget_files+0x2a/0x420 [ 162.196604][ T8714] ? __fget_files+0x3a0/0x420 [ 162.196632][ T8714] __x64_sys_sendmsg+0x1bd/0x2a0 [ 162.196657][ T8714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.196688][ T8714] ? __pfx_ksys_write+0x10/0x10 [ 162.196719][ T8714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.196738][ T8714] do_syscall_64+0x15f/0xf80 [ 162.196757][ T8714] ? trace_irq_disable+0x3b/0x140 [ 162.196782][ T8714] ? clear_bhb_loop+0x40/0x90 [ 162.196803][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.196821][ T8714] RIP: 0033:0x7feb0bf9cdd9 [ 162.196838][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.196852][ T8714] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.196870][ T8714] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 162.196890][ T8714] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 162.196901][ T8714] RBP: 00007feb0cdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 162.196910][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.196919][ T8714] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 162.196948][ T8714] [ 163.135022][ T8765] __nla_validate_parse: 11 callbacks suppressed [ 163.135040][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 163.404251][ T8774] nbd4: detected capacity change from 0 to 63 [ 163.426542][ T8779] block nbd4: NBD_DISCONNECT [ 163.449610][ T8779] block nbd4: Disconnected due to user request. [ 163.495053][ T8779] block nbd4: shutting down sockets [ 163.505338][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.514634][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 163.527266][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.527329][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1098'. [ 163.536411][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 163.536498][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.536521][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 163.536630][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.579186][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 163.589259][ T5629] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.607203][ T5629] Buffer I/O error on dev nbd4, logical block 0, async page read [ 163.615848][ T5629] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.625707][ T5629] Buffer I/O error on dev nbd4, logical block 1, async page read [ 163.633823][ T5629] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.645450][ T5629] Buffer I/O error on dev nbd4, logical block 2, async page read [ 163.658960][ T5629] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.668202][ T5629] Buffer I/O error on dev nbd4, logical block 3, async page read [ 163.678419][ T5629] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.693510][ T5629] Buffer I/O error on dev nbd4, logical block 0, async page read [ 163.708816][ T5629] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.722201][ T5629] Buffer I/O error on dev nbd4, logical block 1, async page read [ 163.737684][ T5629] ldm_validate_partition_table(): Disk read failed. [ 163.746716][ T5629] Dev nbd4: unable to read RDB block 0 [ 163.754646][ T5629] nbd4: unable to read partition table [ 163.800121][ T5629] ldm_validate_partition_table(): Disk read failed. [ 163.811125][ T5629] Dev nbd4: unable to read RDB block 0 [ 163.821992][ T5629] nbd4: unable to read partition table [ 163.971272][ T8796] netlink: 'syz.2.1105': attribute type 1 has an invalid length. [ 164.010235][ T8796] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1105'. [ 164.133436][ T8807] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1109'. [ 164.207292][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 164.251381][ T8811] tap0: tun_chr_ioctl cmd 1074025692 [ 164.480279][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 164.601843][ T8837] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 164.617387][ T29] audit: type=1804 audit(1777716813.295:2): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1119" name="/newroot/246/memory.events" dev="tmpfs" ino=1260 res=1 errno=0 [ 164.661578][ T29] audit: type=1800 audit(1777716813.295:3): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1119" name="memory.events" dev="tmpfs" ino=1260 res=0 errno=0 [ 164.827810][ T8848] FAULT_INJECTION: forcing a failure. [ 164.827810][ T8848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.842800][ T8848] CPU: 1 UID: 0 PID: 8848 Comm: syz.4.1123 Not tainted syzkaller #0 PREEMPT(full) [ 164.842828][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.842837][ T8848] Call Trace: [ 164.842845][ T8848] [ 164.842851][ T8848] dump_stack_lvl+0xe8/0x150 [ 164.842878][ T8848] should_fail_ex+0x412/0x560 [ 164.842905][ T8848] _copy_to_user+0x31/0xb0 [ 164.842932][ T8848] simple_read_from_buffer+0xe1/0x170 [ 164.842957][ T8848] proc_fail_nth_read+0x1bb/0x230 [ 164.842982][ T8848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.843007][ T8848] ? rw_verify_area+0x2a6/0x4d0 [ 164.843030][ T8848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.843053][ T8848] vfs_read+0x20c/0xa70 [ 164.843081][ T8848] ? __pfx___mutex_lock+0x10/0x10 [ 164.843104][ T8848] ? __pfx_vfs_read+0x10/0x10 [ 164.843129][ T8848] ? __fget_files+0x2a/0x420 [ 164.843153][ T8848] ? __fget_files+0x3a0/0x420 [ 164.843172][ T8848] ? __fget_files+0x2a/0x420 [ 164.843201][ T8848] ksys_read+0x150/0x270 [ 164.843226][ T8848] ? __pfx_ksys_read+0x10/0x10 [ 164.843257][ T8848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.843277][ T8848] do_syscall_64+0x15f/0xf80 [ 164.843296][ T8848] ? trace_irq_disable+0x3b/0x140 [ 164.843320][ T8848] ? clear_bhb_loop+0x40/0x90 [ 164.843339][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.843362][ T8848] RIP: 0033:0x7f246475d60e [ 164.843383][ T8848] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.843396][ T8848] RSP: 002b:00007f2465570fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.843413][ T8848] RAX: ffffffffffffffda RBX: 00007f24655716c0 RCX: 00007f246475d60e [ 164.843425][ T8848] RDX: 000000000000000f RSI: 00007f24655710a0 RDI: 0000000000000003 [ 164.843435][ T8848] RBP: 00007f2465571090 R08: 0000000000000000 R09: 0000000000000000 [ 164.843443][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.843451][ T8848] R13: 00007f2464a16128 R14: 00007f2464a16090 R15: 00007fff34bfc638 [ 164.843479][ T8848] [ 165.452896][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1128'. [ 165.526443][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1128'. [ 165.549116][ T8862] FAULT_INJECTION: forcing a failure. [ 165.549116][ T8862] name failslab, interval 1, probability 0, space 0, times 0 [ 165.566975][ T8862] CPU: 1 UID: 0 PID: 8862 Comm: syz.2.1129 Not tainted syzkaller #0 PREEMPT(full) [ 165.566998][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.567008][ T8862] Call Trace: [ 165.567015][ T8862] [ 165.567022][ T8862] dump_stack_lvl+0xe8/0x150 [ 165.567047][ T8862] should_fail_ex+0x412/0x560 [ 165.567072][ T8862] should_failslab+0xa8/0x100 [ 165.567098][ T8862] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 165.567121][ T8862] ? __alloc_skb+0x186/0x7d0 [ 165.567138][ T8862] ? __alloc_skb+0x1d0/0x7d0 [ 165.567153][ T8862] ? __local_bh_enable_ip+0xd0/0x130 [ 165.567172][ T8862] __alloc_skb+0x1d0/0x7d0 [ 165.567194][ T8862] netlink_sendmsg+0x5d4/0xb40 [ 165.567224][ T8862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.567246][ T8862] ? aa_sock_msg_perm+0xf1/0x1b0 [ 165.567269][ T8862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.567295][ T8862] ____sys_sendmsg+0x972/0x9f0 [ 165.567316][ T8862] ? __might_fault+0xaf/0x130 [ 165.567339][ T8862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.567376][ T8862] ? import_iovec+0x73/0xa0 [ 165.567403][ T8862] ___sys_sendmsg+0x2a5/0x360 [ 165.567423][ T8862] ? __lock_acquire+0x6b5/0x2cf0 [ 165.567445][ T8862] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.567493][ T8862] ? __fget_files+0x2a/0x420 [ 165.567512][ T8862] ? __fget_files+0x3a0/0x420 [ 165.567542][ T8862] __x64_sys_sendmsg+0x1bd/0x2a0 [ 165.567567][ T8862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.567597][ T8862] ? __pfx_ksys_write+0x10/0x10 [ 165.567627][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.567646][ T8862] do_syscall_64+0x15f/0xf80 [ 165.567665][ T8862] ? trace_irq_disable+0x3b/0x140 [ 165.567690][ T8862] ? clear_bhb_loop+0x40/0x90 [ 165.567710][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.567727][ T8862] RIP: 0033:0x7feb0bf9cdd9 [ 165.567744][ T8862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.567762][ T8862] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.567780][ T8862] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 165.567792][ T8862] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 165.567803][ T8862] RBP: 00007feb0cdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 165.567813][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.567823][ T8862] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 165.567850][ T8862] [ 165.919796][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 166.190703][ T8879] FAULT_INJECTION: forcing a failure. [ 166.190703][ T8879] name failslab, interval 1, probability 0, space 0, times 0 [ 166.244920][ T8879] CPU: 1 UID: 0 PID: 8879 Comm: syz.2.1135 Not tainted syzkaller #0 PREEMPT(full) [ 166.244944][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.244954][ T8879] Call Trace: [ 166.244961][ T8879] [ 166.244968][ T8879] dump_stack_lvl+0xe8/0x150 [ 166.244993][ T8879] should_fail_ex+0x412/0x560 [ 166.245018][ T8879] should_failslab+0xa8/0x100 [ 166.245044][ T8879] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 166.245069][ T8879] ? __get_vm_area_node+0x13f/0x300 [ 166.245093][ T8879] __get_vm_area_node+0x13f/0x300 [ 166.245118][ T8879] __vmalloc_node_range_noprof+0x36a/0x1750 [ 166.245142][ T8879] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 166.245172][ T8879] ? __lock_acquire+0x6b5/0x2cf0 [ 166.245213][ T8879] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.245235][ T8879] ? __lock_acquire+0x6b5/0x2cf0 [ 166.245255][ T8879] ? _parse_integer_limit+0x1ae/0x1f0 [ 166.245279][ T8879] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 166.245302][ T8879] __vmalloc_noprof+0xd2/0x120 [ 166.245323][ T8879] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 166.245352][ T8879] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 166.245382][ T8879] bpf_prog_alloc+0x3c/0x1a0 [ 166.245402][ T8879] bpf_prog_load+0x779/0x1a10 [ 166.245438][ T8879] ? __pfx_bpf_prog_load+0x10/0x10 [ 166.245464][ T8879] ? __might_fault+0xaf/0x130 [ 166.245506][ T8879] ? bpf_lsm_bpf+0x9/0x20 [ 166.245521][ T8879] ? security_bpf+0x7e/0x2d0 [ 166.245543][ T8879] __sys_bpf+0x618/0x950 [ 166.245569][ T8879] ? __pfx___sys_bpf+0x10/0x10 [ 166.245608][ T8879] ? ksys_write+0x242/0x270 [ 166.245634][ T8879] ? __pfx_ksys_write+0x10/0x10 [ 166.245662][ T8879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.245681][ T8879] __x64_sys_bpf+0x7c/0x90 [ 166.245705][ T8879] do_syscall_64+0x15f/0xf80 [ 166.245725][ T8879] ? trace_irq_disable+0x3b/0x140 [ 166.245750][ T8879] ? clear_bhb_loop+0x40/0x90 [ 166.245771][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.245788][ T8879] RIP: 0033:0x7feb0bf9cdd9 [ 166.245804][ T8879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.245818][ T8879] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.245836][ T8879] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 166.245848][ T8879] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 166.245859][ T8879] RBP: 00007feb0cdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 166.245869][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.245879][ T8879] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 166.245906][ T8879] [ 166.246067][ T8879] syz.2.1135: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.529220][ T8879] CPU: 1 UID: 0 PID: 8879 Comm: syz.2.1135 Not tainted syzkaller #0 PREEMPT(full) [ 166.529242][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.529251][ T8879] Call Trace: [ 166.529258][ T8879] [ 166.529265][ T8879] dump_stack_lvl+0xe8/0x150 [ 166.529290][ T8879] warn_alloc+0x249/0x340 [ 166.529319][ T8879] ? __pfx_warn_alloc+0x10/0x10 [ 166.529344][ T8879] ? __get_vm_area_node+0x13f/0x300 [ 166.529368][ T8879] ? __get_vm_area_node+0x2b5/0x300 [ 166.529394][ T8879] __vmalloc_node_range_noprof+0x38f/0x1750 [ 166.529419][ T8879] ? __lock_acquire+0x6b5/0x2cf0 [ 166.529459][ T8879] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.529481][ T8879] ? __lock_acquire+0x6b5/0x2cf0 [ 166.529502][ T8879] ? _parse_integer_limit+0x1ae/0x1f0 [ 166.529527][ T8879] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 166.529551][ T8879] __vmalloc_noprof+0xd2/0x120 [ 166.529573][ T8879] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 166.529602][ T8879] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 166.529632][ T8879] bpf_prog_alloc+0x3c/0x1a0 [ 166.529651][ T8879] bpf_prog_load+0x779/0x1a10 [ 166.529687][ T8879] ? __pfx_bpf_prog_load+0x10/0x10 [ 166.529713][ T8879] ? __might_fault+0xaf/0x130 [ 166.529749][ T8879] ? bpf_lsm_bpf+0x9/0x20 [ 166.529764][ T8879] ? security_bpf+0x7e/0x2d0 [ 166.529787][ T8879] __sys_bpf+0x618/0x950 [ 166.529814][ T8879] ? __pfx___sys_bpf+0x10/0x10 [ 166.529852][ T8879] ? ksys_write+0x242/0x270 [ 166.529878][ T8879] ? __pfx_ksys_write+0x10/0x10 [ 166.529906][ T8879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.529925][ T8879] __x64_sys_bpf+0x7c/0x90 [ 166.529949][ T8879] do_syscall_64+0x15f/0xf80 [ 166.529969][ T8879] ? trace_irq_disable+0x3b/0x140 [ 166.529994][ T8879] ? clear_bhb_loop+0x40/0x90 [ 166.530021][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.530038][ T8879] RIP: 0033:0x7feb0bf9cdd9 [ 166.530054][ T8879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.530068][ T8879] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.530085][ T8879] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 166.530097][ T8879] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 166.530107][ T8879] RBP: 00007feb0cdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 166.530117][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.530127][ T8879] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 166.530156][ T8879] [ 166.530190][ T8879] Mem-Info: [ 166.672477][ T8890] FAULT_INJECTION: forcing a failure. [ 166.672477][ T8890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.693509][ T8879] active_anon:15261 inactive_anon:0 isolated_anon:0 [ 166.693509][ T8879] active_file:3464 inactive_file:39966 isolated_file:0 [ 166.693509][ T8879] unevictable:768 dirty:534 writeback:0 [ 166.693509][ T8879] slab_reclaimable:10923 slab_unreclaimable:99173 [ 166.693509][ T8879] mapped:29766 shmem:10868 pagetables:1257 [ 166.693509][ T8879] sec_pagetables:0 bounce:0 [ 166.693509][ T8879] kernel_misc_reclaimable:0 [ 166.693509][ T8879] free:1319778 free_pcp:8093 free_cma:0 [ 166.846537][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.3.1140 Not tainted syzkaller #0 PREEMPT(full) [ 166.846560][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.846569][ T8890] Call Trace: [ 166.846576][ T8890] [ 166.846583][ T8890] dump_stack_lvl+0xe8/0x150 [ 166.846609][ T8890] should_fail_ex+0x412/0x560 [ 166.846634][ T8890] _copy_from_user+0x2d/0xb0 [ 166.846658][ T8890] ___sys_sendmsg+0x1c6/0x360 [ 166.846677][ T8890] ? __lock_acquire+0x6b5/0x2cf0 [ 166.846698][ T8890] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.846722][ T8890] ? kstrtouint+0x6e/0xe0 [ 166.846758][ T8890] ? __fget_files+0x2a/0x420 [ 166.846775][ T8890] ? __fget_files+0x3a0/0x420 [ 166.846798][ T8890] __sys_sendmmsg+0x27c/0x4e0 [ 166.846818][ T8890] ? __pfx___sys_sendmmsg+0x10/0x10 [ 166.846833][ T8890] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 166.846871][ T8890] ? ksys_write+0x242/0x270 [ 166.846895][ T8890] ? __pfx_ksys_write+0x10/0x10 [ 166.846923][ T8890] __x64_sys_sendmmsg+0xa0/0xc0 [ 166.846944][ T8890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.846961][ T8890] do_syscall_64+0x15f/0xf80 [ 166.846980][ T8890] ? trace_irq_disable+0x3b/0x140 [ 166.847004][ T8890] ? clear_bhb_loop+0x40/0x90 [ 166.847021][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.847035][ T8890] RIP: 0033:0x7fb97739cdd9 [ 166.847048][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.847060][ T8890] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 166.847075][ T8890] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 166.847084][ T8890] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 166.847093][ T8890] RBP: 00007fb97823b090 R08: 0000000000000000 R09: 0000000000000000 [ 166.847102][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.847110][ T8890] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 166.847139][ T8890] [ 166.847342][ T8879] Node 0 active_anon:71240kB inactive_anon:0kB active_file:13856kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119088kB dirty:2164kB writeback:0kB shmem:52296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12864kB pagetables:4768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 167.082908][ T8879] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 167.118588][ T8879] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.156124][ T8879] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 167.162689][ T8879] Node 0 DMA32 free:1315464kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45140kB inactive_anon:0kB active_file:13856kB inactive_file:159660kB unevictable:1536kB writepending:2164kB zspages:0kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:46592kB local_pcp:18172kB free_cma:0kB [ 167.203472][ T8879] lowmem_reserve[]: 0 0 0 0 0 [ 167.215955][ T8879] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 167.246099][ T8879] lowmem_reserve[]: 0 0 0 0 0 [ 167.250877][ T8879] Node 1 Normal free:3948880kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 167.314224][ T8879] lowmem_reserve[]: 0 0 0 0 0 [ 167.323842][ T8879] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.351320][ T8879] Node 0 DMA32: 1172*4kB (UM) 1177*8kB (UM) 549*16kB (UM) 372*32kB (UME) 108*64kB (UM) 57*128kB (UME) 24*256kB (U) 14*512kB (U) 13*1024kB (UM) 7*2048kB (UM) 301*4096kB (UM) = 1322856kB [ 167.399690][ T8879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 167.433169][ T8879] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 5*32kB (UM) 5*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 963*4096kB (M) = 3948932kB [ 167.450593][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 167.463473][ T8879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.482001][ T8879] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.494561][ T8879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.507747][ T8879] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.518293][ T8879] 44759 total pagecache pages [ 167.523085][ T8879] 0 pages in swap cache [ 167.527464][ T8879] Free swap = 124996kB [ 167.531770][ T8879] Total swap = 124996kB [ 167.536028][ T8879] 2097051 pages RAM [ 167.539936][ T8879] 0 pages HighMem/MovableOnly [ 167.545065][ T8879] 427099 pages reserved [ 167.549281][ T8879] 0 pages cma reserved [ 167.691833][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1149'. [ 168.165172][ T8931] ip6gretap2: entered promiscuous mode [ 168.170802][ T8931] ip6gretap2: entered allmulticast mode [ 168.184912][ T8936] __nla_validate_parse: 2 callbacks suppressed [ 168.184923][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1156'. [ 168.288224][ T8942] FAULT_INJECTION: forcing a failure. [ 168.288224][ T8942] name failslab, interval 1, probability 0, space 0, times 0 [ 168.313683][ T8942] CPU: 1 UID: 0 PID: 8942 Comm: syz.2.1159 Not tainted syzkaller #0 PREEMPT(full) [ 168.313707][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.313717][ T8942] Call Trace: [ 168.313724][ T8942] [ 168.313732][ T8942] dump_stack_lvl+0xe8/0x150 [ 168.313758][ T8942] should_fail_ex+0x412/0x560 [ 168.313785][ T8942] should_failslab+0xa8/0x100 [ 168.313813][ T8942] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 168.313839][ T8942] ? __get_vm_area_node+0x13f/0x300 [ 168.313865][ T8942] __get_vm_area_node+0x13f/0x300 [ 168.313891][ T8942] __vmalloc_node_range_noprof+0x36a/0x1750 [ 168.313915][ T8942] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 168.313946][ T8942] ? __lock_acquire+0x6b5/0x2cf0 [ 168.314004][ T8942] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.314027][ T8942] ? __lock_acquire+0x6b5/0x2cf0 [ 168.314048][ T8942] ? _parse_integer_limit+0x1ae/0x1f0 [ 168.314073][ T8942] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 168.314097][ T8942] __vmalloc_noprof+0xd2/0x120 [ 168.314120][ T8942] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 168.314148][ T8942] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 168.314178][ T8942] bpf_prog_alloc+0x3c/0x1a0 [ 168.314196][ T8942] bpf_prog_load+0x779/0x1a10 [ 168.314233][ T8942] ? __pfx_bpf_prog_load+0x10/0x10 [ 168.314259][ T8942] ? __might_fault+0xaf/0x130 [ 168.314301][ T8942] ? bpf_lsm_bpf+0x9/0x20 [ 168.314316][ T8942] ? security_bpf+0x7e/0x2d0 [ 168.314338][ T8942] __sys_bpf+0x618/0x950 [ 168.314365][ T8942] ? __pfx___sys_bpf+0x10/0x10 [ 168.314405][ T8942] ? ksys_write+0x242/0x270 [ 168.314431][ T8942] ? __pfx_ksys_write+0x10/0x10 [ 168.314458][ T8942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.314478][ T8942] __x64_sys_bpf+0x7c/0x90 [ 168.314502][ T8942] do_syscall_64+0x15f/0xf80 [ 168.314522][ T8942] ? trace_irq_disable+0x3b/0x140 [ 168.314547][ T8942] ? clear_bhb_loop+0x40/0x90 [ 168.314569][ T8942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.314586][ T8942] RIP: 0033:0x7feb0bf9cdd9 [ 168.314603][ T8942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.314616][ T8942] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.314634][ T8942] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 168.314646][ T8942] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 168.314657][ T8942] RBP: 00007feb0cdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 168.314670][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.314680][ T8942] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 168.314707][ T8942] [ 168.640913][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1162'. [ 168.750507][ T8949] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 168.806990][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1164'. [ 168.935901][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1164'. [ 169.095593][ T8954] ip6gretap2: entered promiscuous mode [ 169.122787][ T8954] ip6gretap2: entered allmulticast mode [ 169.357412][ T8983] xt_TCPMSS: Only works on TCP SYN packets [ 169.410066][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1174'. [ 169.866668][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 169.986321][ T9014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.013711][ T9014] netlink: 8616 bytes leftover after parsing attributes in process `syz.1.1183'. [ 170.073051][ T9014] bond1 (unregistering): Released all slaves [ 170.229024][ T9030] FAULT_INJECTION: forcing a failure. [ 170.229024][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 170.248499][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.4.1186 Not tainted syzkaller #0 PREEMPT(full) [ 170.248527][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.248536][ T9030] Call Trace: [ 170.248543][ T9030] [ 170.248551][ T9030] dump_stack_lvl+0xe8/0x150 [ 170.248573][ T9030] should_fail_ex+0x412/0x560 [ 170.248599][ T9030] should_failslab+0xa8/0x100 [ 170.248626][ T9030] __kmalloc_cache_noprof+0x88/0x660 [ 170.248650][ T9030] ? tipc_group_create+0xa1/0x500 [ 170.248676][ T9030] tipc_group_create+0xa1/0x500 [ 170.248705][ T9030] tipc_sk_join+0x256/0x6a0 [ 170.248724][ T9030] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 170.248752][ T9030] ? __pfx_tipc_sk_join+0x10/0x10 [ 170.248767][ T9030] ? tipc_setsockopt+0x731/0x990 [ 170.248787][ T9030] ? __local_bh_enable_ip+0xd0/0x130 [ 170.248809][ T9030] tipc_setsockopt+0x73e/0x990 [ 170.248834][ T9030] ? __pfx_tipc_setsockopt+0x10/0x10 [ 170.248853][ T9030] ? __fget_files+0x2a/0x420 [ 170.248872][ T9030] ? aa_sock_opt_perm+0xff/0x1a0 [ 170.248894][ T9030] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 170.248916][ T9030] ? __pfx_tipc_setsockopt+0x10/0x10 [ 170.248936][ T9030] do_sock_setsockopt+0x17c/0x1b0 [ 170.248961][ T9030] __x64_sys_setsockopt+0x13d/0x1b0 [ 170.248982][ T9030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.249000][ T9030] do_syscall_64+0x15f/0xf80 [ 170.249025][ T9030] ? trace_irq_disable+0x3b/0x140 [ 170.249050][ T9030] ? clear_bhb_loop+0x40/0x90 [ 170.249068][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.249084][ T9030] RIP: 0033:0x7f246479cdd9 [ 170.249100][ T9030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.249113][ T9030] RSP: 002b:00007f2465592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.249130][ T9030] RAX: ffffffffffffffda RBX: 00007f2464a15fa0 RCX: 00007f246479cdd9 [ 170.249142][ T9030] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 170.249151][ T9030] RBP: 00007f2465592090 R08: 00000000000004bd R09: 0000000000000000 [ 170.249162][ T9030] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 170.249172][ T9030] R13: 00007f2464a16038 R14: 00007f2464a15fa0 R15: 00007fff34bfc638 [ 170.249201][ T9030] [ 171.108357][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 171.127425][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 171.162982][ T7968] IPVS: starting estimator thread 0... [ 171.253639][ T9075] IPVS: using max 53 ests per chain, 127200 per kthread [ 171.392379][ T9085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1195'. [ 171.610160][ T9099] FAULT_INJECTION: forcing a failure. [ 171.610160][ T9099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.625309][ T9099] CPU: 0 UID: 0 PID: 9099 Comm: syz.3.1204 Not tainted syzkaller #0 PREEMPT(full) [ 171.625334][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.625344][ T9099] Call Trace: [ 171.625351][ T9099] [ 171.625358][ T9099] dump_stack_lvl+0xe8/0x150 [ 171.625385][ T9099] should_fail_ex+0x412/0x560 [ 171.625413][ T9099] _copy_to_user+0x31/0xb0 [ 171.625439][ T9099] bpf_prog_test_run_syscall+0x337/0x4c0 [ 171.625467][ T9099] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 171.625496][ T9099] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 171.625520][ T9099] bpf_prog_test_run+0x2c7/0x340 [ 171.625542][ T9099] __sys_bpf+0x643/0x950 [ 171.625570][ T9099] ? __pfx___sys_bpf+0x10/0x10 [ 171.625614][ T9099] ? ksys_write+0x242/0x270 [ 171.625647][ T9099] ? __pfx_ksys_write+0x10/0x10 [ 171.625674][ T9099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.625694][ T9099] __x64_sys_bpf+0x7c/0x90 [ 171.625717][ T9099] do_syscall_64+0x15f/0xf80 [ 171.625736][ T9099] ? trace_irq_disable+0x3b/0x140 [ 171.625761][ T9099] ? clear_bhb_loop+0x40/0x90 [ 171.625782][ T9099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.625799][ T9099] RIP: 0033:0x7fb97739cdd9 [ 171.625816][ T9099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.625832][ T9099] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.625851][ T9099] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 171.625863][ T9099] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 171.625874][ T9099] RBP: 00007fb97823b090 R08: 0000000000000000 R09: 0000000000000000 [ 171.625885][ T9099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.625896][ T9099] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 171.625924][ T9099] [ 172.000154][ T9111] vxcan0: tx address claim with dest, not broadcast [ 172.363656][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 173.653588][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 173.927915][ T9142] __nla_validate_parse: 9 callbacks suppressed [ 173.927933][ T9142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1216'. [ 174.419443][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 174.853121][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1225'. [ 175.683092][ T9176] geneve2: entered promiscuous mode [ 175.756779][ T1049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.801141][ T1049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.832281][ T1049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.866961][ T1049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.932193][ T9186] syzkaller0: entered promiscuous mode [ 175.956683][ T9186] syzkaller0: entered allmulticast mode [ 175.984608][ T9193] FAULT_INJECTION: forcing a failure. [ 175.984608][ T9193] name failslab, interval 1, probability 0, space 0, times 0 [ 176.007530][ T9182] FAULT_INJECTION: forcing a failure. [ 176.007530][ T9182] name failslab, interval 1, probability 0, space 0, times 0 [ 176.029507][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.3.1233 Not tainted syzkaller #0 PREEMPT(full) [ 176.029532][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.029542][ T9193] Call Trace: [ 176.029549][ T9193] [ 176.029556][ T9193] dump_stack_lvl+0xe8/0x150 [ 176.029582][ T9193] should_fail_ex+0x412/0x560 [ 176.029609][ T9193] should_failslab+0xa8/0x100 [ 176.029638][ T9193] __kmalloc_noprof+0xe8/0x760 [ 176.029661][ T9193] ? bpf_test_init+0x9f/0x150 [ 176.029688][ T9193] bpf_test_init+0x9f/0x150 [ 176.029712][ T9193] bpf_prog_test_run_xdp+0x529/0x1160 [ 176.029750][ T9193] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 176.029777][ T9193] ? __fget_files+0x2a/0x420 [ 176.029802][ T9193] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 176.029826][ T9193] bpf_prog_test_run+0x2c7/0x340 [ 176.029848][ T9193] __sys_bpf+0x643/0x950 [ 176.029876][ T9193] ? __pfx___sys_bpf+0x10/0x10 [ 176.029915][ T9193] ? ksys_write+0x242/0x270 [ 176.029942][ T9193] ? __pfx_ksys_write+0x10/0x10 [ 176.029971][ T9193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.029990][ T9193] __x64_sys_bpf+0x7c/0x90 [ 176.030015][ T9193] do_syscall_64+0x15f/0xf80 [ 176.030036][ T9193] ? trace_irq_disable+0x3b/0x140 [ 176.030061][ T9193] ? clear_bhb_loop+0x40/0x90 [ 176.030082][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.030100][ T9193] RIP: 0033:0x7fb97739cdd9 [ 176.030116][ T9193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.030131][ T9193] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.030150][ T9193] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 176.030163][ T9193] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 176.030174][ T9193] RBP: 00007fb97823b090 R08: 0000000000000000 R09: 0000000000000000 [ 176.030185][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.030195][ T9193] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 176.030225][ T9193] [ 176.243104][ T9182] CPU: 0 UID: 0 PID: 9182 Comm: syz.1.1229 Not tainted syzkaller #0 PREEMPT(full) [ 176.243139][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.243149][ T9182] Call Trace: [ 176.243156][ T9182] [ 176.243162][ T9182] dump_stack_lvl+0xe8/0x150 [ 176.243189][ T9182] should_fail_ex+0x412/0x560 [ 176.243216][ T9182] should_failslab+0xa8/0x100 [ 176.243244][ T9182] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 176.243265][ T9182] ? __alloc_skb+0x186/0x7d0 [ 176.243283][ T9182] ? __alloc_skb+0x1d0/0x7d0 [ 176.243299][ T9182] ? __local_bh_enable_ip+0xd0/0x130 [ 176.243323][ T9182] __alloc_skb+0x1d0/0x7d0 [ 176.243345][ T9182] netlink_sendmsg+0x5d4/0xb40 [ 176.243373][ T9182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.243396][ T9182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 176.243418][ T9182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.243443][ T9182] ____sys_sendmsg+0x972/0x9f0 [ 176.243464][ T9182] ? __might_fault+0xaf/0x130 [ 176.243490][ T9182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.243518][ T9182] ? import_iovec+0x73/0xa0 [ 176.243542][ T9182] ___sys_sendmsg+0x2a5/0x360 [ 176.243561][ T9182] ? __lock_acquire+0x6b5/0x2cf0 [ 176.243583][ T9182] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.243636][ T9182] ? __fget_files+0x2a/0x420 [ 176.243654][ T9182] ? __fget_files+0x3a0/0x420 [ 176.243680][ T9182] __x64_sys_sendmsg+0x1bd/0x2a0 [ 176.243704][ T9182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.243734][ T9182] ? __pfx_ksys_write+0x10/0x10 [ 176.243766][ T9182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.243785][ T9182] do_syscall_64+0x15f/0xf80 [ 176.243806][ T9182] ? trace_irq_disable+0x3b/0x140 [ 176.243831][ T9182] ? clear_bhb_loop+0x40/0x90 [ 176.243852][ T9182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.243871][ T9182] RIP: 0033:0x7eff1419cdd9 [ 176.243888][ T9182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.243902][ T9182] RSP: 002b:00007eff15103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.243920][ T9182] RAX: ffffffffffffffda RBX: 00007eff14415fa0 RCX: 00007eff1419cdd9 [ 176.243933][ T9182] RDX: 00000000240000c0 RSI: 00002000000000c0 RDI: 0000000000000004 [ 176.243944][ T9182] RBP: 00007eff15103090 R08: 0000000000000000 R09: 0000000000000000 [ 176.243955][ T9182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.243966][ T9182] R13: 00007eff14416038 R14: 00007eff14415fa0 R15: 00007fff16cff368 [ 176.243995][ T9182] [ 176.962626][ T9214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.242657][ T9236] FAULT_INJECTION: forcing a failure. [ 177.242657][ T9236] name failslab, interval 1, probability 0, space 0, times 0 [ 177.260501][ T9236] CPU: 1 UID: 0 PID: 9236 Comm: syz.4.1244 Not tainted syzkaller #0 PREEMPT(full) [ 177.260528][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.260538][ T9236] Call Trace: [ 177.260545][ T9236] [ 177.260552][ T9236] dump_stack_lvl+0xe8/0x150 [ 177.260576][ T9236] should_fail_ex+0x412/0x560 [ 177.260598][ T9236] should_failslab+0xa8/0x100 [ 177.260621][ T9236] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 177.260641][ T9236] ? __alloc_skb+0x186/0x7d0 [ 177.260656][ T9236] ? __alloc_skb+0x1d0/0x7d0 [ 177.260670][ T9236] ? __local_bh_enable_ip+0xd0/0x130 [ 177.260689][ T9236] __alloc_skb+0x1d0/0x7d0 [ 177.260707][ T9236] netlink_sendmsg+0x5d4/0xb40 [ 177.260731][ T9236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.260751][ T9236] ? aa_sock_msg_perm+0xf1/0x1b0 [ 177.260770][ T9236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.260791][ T9236] ____sys_sendmsg+0x972/0x9f0 [ 177.260808][ T9236] ? __might_fault+0xaf/0x130 [ 177.260830][ T9236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.260854][ T9236] ? import_iovec+0x73/0xa0 [ 177.260876][ T9236] ___sys_sendmsg+0x2a5/0x360 [ 177.260893][ T9236] ? __lock_acquire+0x6b5/0x2cf0 [ 177.260915][ T9236] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.260957][ T9236] ? __fget_files+0x2a/0x420 [ 177.260973][ T9236] ? __fget_files+0x3a0/0x420 [ 177.260995][ T9236] __x64_sys_sendmsg+0x1bd/0x2a0 [ 177.261016][ T9236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.261049][ T9236] ? __pfx_ksys_write+0x10/0x10 [ 177.261074][ T9236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.261089][ T9236] do_syscall_64+0x15f/0xf80 [ 177.261105][ T9236] ? trace_irq_disable+0x3b/0x140 [ 177.261125][ T9236] ? clear_bhb_loop+0x40/0x90 [ 177.261142][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.261156][ T9236] RIP: 0033:0x7f246479cdd9 [ 177.261169][ T9236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.261181][ T9236] RSP: 002b:00007f2465571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.261197][ T9236] RAX: ffffffffffffffda RBX: 00007f2464a16090 RCX: 00007f246479cdd9 [ 177.261207][ T9236] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 177.261216][ T9236] RBP: 00007f2465571090 R08: 0000000000000000 R09: 0000000000000000 [ 177.261224][ T9236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.261232][ T9236] R13: 00007f2464a16128 R14: 00007f2464a16090 R15: 00007fff34bfc638 [ 177.261255][ T9236] [ 177.511088][ T9239] syzkaller0: entered promiscuous mode [ 177.520213][ T9239] syzkaller0: entered allmulticast mode [ 177.746215][ T9250] syzkaller0: entered promiscuous mode [ 177.751727][ T9250] syzkaller0: entered allmulticast mode [ 179.943894][ T9214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.971222][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'. [ 180.043668][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.245749][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 180.271335][ T9262] FAULT_INJECTION: forcing a failure. [ 180.271335][ T9262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.301048][ T9262] CPU: 0 UID: 0 PID: 9262 Comm: syz.2.1253 Not tainted syzkaller #0 PREEMPT(full) [ 180.301074][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.301085][ T9262] Call Trace: [ 180.301092][ T9262] [ 180.301100][ T9262] dump_stack_lvl+0xe8/0x150 [ 180.301125][ T9262] should_fail_ex+0x412/0x560 [ 180.301155][ T9262] _copy_from_user+0x2d/0xb0 [ 180.301181][ T9262] sctp_setsockopt+0x1c4/0x12c0 [ 180.301205][ T9262] ? sock_common_setsockopt+0x36/0xc0 [ 180.301224][ T9262] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.301244][ T9262] do_sock_setsockopt+0x17c/0x1b0 [ 180.301271][ T9262] __x64_sys_setsockopt+0x13d/0x1b0 [ 180.301296][ T9262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.301316][ T9262] do_syscall_64+0x15f/0xf80 [ 180.301337][ T9262] ? trace_irq_disable+0x3b/0x140 [ 180.301362][ T9262] ? clear_bhb_loop+0x40/0x90 [ 180.301385][ T9262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.301403][ T9262] RIP: 0033:0x7feb0bf9cdd9 [ 180.301419][ T9262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.301434][ T9262] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.301454][ T9262] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 180.301467][ T9262] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 180.301478][ T9262] RBP: 00007feb0cdc1090 R08: 000000000001000f R09: 0000000000000000 [ 180.301489][ T9262] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 180.301501][ T9262] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 180.301530][ T9262] [ 180.619154][ T9272] FAULT_INJECTION: forcing a failure. [ 180.619154][ T9272] name failslab, interval 1, probability 0, space 0, times 0 [ 180.632117][ T9272] CPU: 0 UID: 0 PID: 9272 Comm: syz.1.1260 Not tainted syzkaller #0 PREEMPT(full) [ 180.632141][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 180.632152][ T9272] Call Trace: [ 180.632159][ T9272] [ 180.632166][ T9272] dump_stack_lvl+0xe8/0x150 [ 180.632192][ T9272] should_fail_ex+0x412/0x560 [ 180.632219][ T9272] should_failslab+0xa8/0x100 [ 180.632247][ T9272] __kmalloc_noprof+0xe8/0x760 [ 180.632271][ T9272] ? tomoyo_encode+0x28b/0x550 [ 180.632300][ T9272] tomoyo_encode+0x28b/0x550 [ 180.632326][ T9272] tomoyo_realpath_from_path+0x58d/0x5d0 [ 180.632355][ T9272] ? tomoyo_path_number_perm+0x219/0x630 [ 180.632374][ T9272] tomoyo_path_number_perm+0x246/0x630 [ 180.632394][ T9272] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 180.632410][ T9272] ? __lock_acquire+0x6b5/0x2cf0 [ 180.632445][ T9272] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 180.632487][ T9272] ? __fget_files+0x2a/0x420 [ 180.632509][ T9272] ? __fget_files+0x2a/0x420 [ 180.632527][ T9272] ? __fget_files+0x3a0/0x420 [ 180.632546][ T9272] ? __fget_files+0x2a/0x420 [ 180.632570][ T9272] security_file_ioctl+0xc3/0x2a0 [ 180.632590][ T9272] __se_sys_ioctl+0x47/0x170 [ 180.632614][ T9272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.632633][ T9272] do_syscall_64+0x15f/0xf80 [ 180.632673][ T9272] ? trace_irq_disable+0x3b/0x140 [ 180.632696][ T9272] ? clear_bhb_loop+0x40/0x90 [ 180.632717][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.632734][ T9272] RIP: 0033:0x7eff1419cdd9 [ 180.632751][ T9272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.632766][ T9272] RSP: 002b:00007eff15103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.632784][ T9272] RAX: ffffffffffffffda RBX: 00007eff14415fa0 RCX: 00007eff1419cdd9 [ 180.632796][ T9272] RDX: 0000000000000306 RSI: 00000000400454cd RDI: 0000000000000003 [ 180.632807][ T9272] RBP: 00007eff15103090 R08: 0000000000000000 R09: 0000000000000000 [ 180.632817][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.632827][ T9272] R13: 00007eff14416038 R14: 00007eff14415fa0 R15: 00007fff16cff368 [ 180.632857][ T9272] [ 180.632873][ T9272] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.046805][ T9293] FAULT_INJECTION: forcing a failure. [ 181.046805][ T9293] name failslab, interval 1, probability 0, space 0, times 0 [ 181.070248][ T9293] CPU: 1 UID: 0 PID: 9293 Comm: syz.3.1265 Not tainted syzkaller #0 PREEMPT(full) [ 181.070273][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.070284][ T9293] Call Trace: [ 181.070291][ T9293] [ 181.070298][ T9293] dump_stack_lvl+0xe8/0x150 [ 181.070324][ T9293] should_fail_ex+0x412/0x560 [ 181.070351][ T9293] should_failslab+0xa8/0x100 [ 181.070379][ T9293] __kmalloc_cache_noprof+0x88/0x660 [ 181.070403][ T9293] ? tipc_group_create+0xa1/0x500 [ 181.070432][ T9293] tipc_group_create+0xa1/0x500 [ 181.070461][ T9293] tipc_sk_join+0x256/0x6a0 [ 181.070481][ T9293] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 181.070511][ T9293] ? __pfx_tipc_sk_join+0x10/0x10 [ 181.070532][ T9293] ? tipc_setsockopt+0x731/0x990 [ 181.070554][ T9293] ? __local_bh_enable_ip+0xd0/0x130 [ 181.070577][ T9293] tipc_setsockopt+0x73e/0x990 [ 181.070610][ T9293] ? __pfx_tipc_setsockopt+0x10/0x10 [ 181.070630][ T9293] ? __fget_files+0x2a/0x420 [ 181.070649][ T9293] ? aa_sock_opt_perm+0xff/0x1a0 [ 181.070674][ T9293] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 181.070697][ T9293] ? __pfx_tipc_setsockopt+0x10/0x10 [ 181.070719][ T9293] do_sock_setsockopt+0x17c/0x1b0 [ 181.070746][ T9293] __x64_sys_setsockopt+0x13d/0x1b0 [ 181.070770][ T9293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.070791][ T9293] do_syscall_64+0x15f/0xf80 [ 181.070811][ T9293] ? trace_irq_disable+0x3b/0x140 [ 181.070836][ T9293] ? clear_bhb_loop+0x40/0x90 [ 181.070857][ T9293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.070875][ T9293] RIP: 0033:0x7fb97739cdd9 [ 181.070892][ T9293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.070906][ T9293] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.070925][ T9293] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 181.070938][ T9293] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 181.070949][ T9293] RBP: 00007fb97823b090 R08: 00000000000004bd R09: 0000000000000000 [ 181.070959][ T9293] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 181.070970][ T9293] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 181.070999][ T9293] [ 181.098220][ T9291] gre1: entered allmulticast mode [ 181.849545][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1281'. [ 181.868454][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'. [ 181.945539][ T9338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1281'. [ 182.027547][ T9340] xt_TCPMSS: Only works on TCP SYN packets [ 182.040889][ T9333] ip6gretap2: entered promiscuous mode [ 182.050935][ T9333] ip6gretap2: entered allmulticast mode [ 182.714487][ T9379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1298'. [ 182.750903][ T9379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1298'. [ 182.792642][ T9379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1298'. [ 183.101156][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 183.141022][ T9404] FAULT_INJECTION: forcing a failure. [ 183.141022][ T9404] name failslab, interval 1, probability 0, space 0, times 0 [ 183.162208][ T9407] netlink: 'syz.1.1306': attribute type 61 has an invalid length. [ 183.173584][ T9404] CPU: 0 UID: 0 PID: 9404 Comm: syz.3.1303 Not tainted syzkaller #0 PREEMPT(full) [ 183.173607][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.173617][ T9404] Call Trace: [ 183.173624][ T9404] [ 183.173638][ T9404] dump_stack_lvl+0xe8/0x150 [ 183.173664][ T9404] should_fail_ex+0x412/0x560 [ 183.173691][ T9404] should_failslab+0xa8/0x100 [ 183.173718][ T9404] __kmalloc_noprof+0xe8/0x760 [ 183.173742][ T9404] ? bpf_test_init+0x9f/0x150 [ 183.173763][ T9404] ? __lock_acquire+0x6b5/0x2cf0 [ 183.173786][ T9404] bpf_test_init+0x9f/0x150 [ 183.173811][ T9404] bpf_prog_test_run_skb+0x392/0x2260 [ 183.173831][ T9404] ? bpf_prog_test_run_skb+0x241/0x2260 [ 183.173868][ T9404] ? __fget_files+0x3a0/0x420 [ 183.173889][ T9404] ? __fget_files+0x2a/0x420 [ 183.173913][ T9404] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 183.173936][ T9404] bpf_prog_test_run+0x2c7/0x340 [ 183.173958][ T9404] __sys_bpf+0x643/0x950 [ 183.173986][ T9404] ? __pfx___sys_bpf+0x10/0x10 [ 183.174027][ T9404] ? ksys_write+0x242/0x270 [ 183.174054][ T9404] ? __pfx_ksys_write+0x10/0x10 [ 183.174083][ T9404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.174101][ T9404] __x64_sys_bpf+0x7c/0x90 [ 183.174125][ T9404] do_syscall_64+0x15f/0xf80 [ 183.174145][ T9404] ? trace_irq_disable+0x3b/0x140 [ 183.174170][ T9404] ? clear_bhb_loop+0x40/0x90 [ 183.174191][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.174209][ T9404] RIP: 0033:0x7fb97739cdd9 [ 183.174227][ T9404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.174241][ T9404] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.174259][ T9404] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 183.174271][ T9404] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 183.174283][ T9404] RBP: 00007fb97823b090 R08: 0000000000000000 R09: 0000000000000000 [ 183.174294][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.174304][ T9404] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 183.174334][ T9404] [ 183.177892][ T9407] netlink: 'syz.1.1306': attribute type 62 has an invalid length. [ 183.485206][ T9419] FAULT_INJECTION: forcing a failure. [ 183.485206][ T9419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.523447][ T9419] CPU: 0 UID: 0 PID: 9419 Comm: syz.3.1309 Not tainted syzkaller #0 PREEMPT(full) [ 183.523472][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.523483][ T9419] Call Trace: [ 183.523490][ T9419] [ 183.523498][ T9419] dump_stack_lvl+0xe8/0x150 [ 183.523523][ T9419] should_fail_ex+0x412/0x560 [ 183.523549][ T9419] _copy_from_user+0x2d/0xb0 [ 183.523575][ T9419] ___sys_sendmsg+0x1c6/0x360 [ 183.523605][ T9419] ? __lock_acquire+0x6b5/0x2cf0 [ 183.523629][ T9419] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.523684][ T9419] ? __fget_files+0x2a/0x420 [ 183.523704][ T9419] ? __fget_files+0x3a0/0x420 [ 183.523734][ T9419] __x64_sys_sendmsg+0x1bd/0x2a0 [ 183.523756][ T9419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.523786][ T9419] ? __pfx_ksys_write+0x10/0x10 [ 183.523817][ T9419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.523835][ T9419] do_syscall_64+0x15f/0xf80 [ 183.523855][ T9419] ? trace_irq_disable+0x3b/0x140 [ 183.523879][ T9419] ? clear_bhb_loop+0x40/0x90 [ 183.523901][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.523918][ T9419] RIP: 0033:0x7fb97739cdd9 [ 183.523934][ T9419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.523948][ T9419] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.523967][ T9419] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 183.523979][ T9419] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 183.523991][ T9419] RBP: 00007fb97823b090 R08: 0000000000000000 R09: 0000000000000000 [ 183.524001][ T9419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.524010][ T9419] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 183.524039][ T9419] [ 183.901364][ T9435] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 183.910383][ T9429] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1313'. [ 184.077696][ T9443] netlink: 'syz.2.1317': attribute type 61 has an invalid length. [ 184.105853][ T9437] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 184.122302][ T9443] netlink: 'syz.2.1317': attribute type 62 has an invalid length. [ 184.138398][ T9437] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 184.163244][ T9447] FAULT_INJECTION: forcing a failure. [ 184.163244][ T9447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.177489][ T9447] CPU: 1 UID: 0 PID: 9447 Comm: syz.3.1318 Not tainted syzkaller #0 PREEMPT(full) [ 184.177510][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.177521][ T9447] Call Trace: [ 184.177529][ T9447] [ 184.177535][ T9447] dump_stack_lvl+0xe8/0x150 [ 184.177556][ T9447] should_fail_ex+0x412/0x560 [ 184.177578][ T9447] _copy_from_user+0x2d/0xb0 [ 184.177599][ T9447] sctp_setsockopt+0x1c4/0x12c0 [ 184.177619][ T9447] ? sock_common_setsockopt+0x36/0xc0 [ 184.177634][ T9447] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 184.177650][ T9447] do_sock_setsockopt+0x17c/0x1b0 [ 184.177672][ T9447] __x64_sys_setsockopt+0x13d/0x1b0 [ 184.177690][ T9447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.177706][ T9447] do_syscall_64+0x15f/0xf80 [ 184.177722][ T9447] ? trace_irq_disable+0x3b/0x140 [ 184.177743][ T9447] ? clear_bhb_loop+0x40/0x90 [ 184.177760][ T9447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.177774][ T9447] RIP: 0033:0x7fb97739cdd9 [ 184.177787][ T9447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.177804][ T9447] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.177819][ T9447] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 184.177829][ T9447] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 184.177838][ T9447] RBP: 00007fb97823b090 R08: 0000000000000008 R09: 0000000000000000 [ 184.177847][ T9447] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.177856][ T9447] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 184.177878][ T9447] [ 184.507053][ T9442] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 184.571398][ T9435] ip6gretap2: entered promiscuous mode [ 184.577094][ T9435] ip6gretap2: entered allmulticast mode [ 184.588742][ T9435] bond1: (slave ip6gretap2): making interface the new active one [ 184.617308][ T9435] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 184.998077][ T9476] __nla_validate_parse: 4 callbacks suppressed [ 184.998095][ T9476] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1326'. [ 185.248703][ T9492] xt_TCPMSS: Only works on TCP SYN packets [ 185.356571][ T9497] netlink: 'syz.2.1334': attribute type 1 has an invalid length. [ 185.451025][ T9497] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 185.464143][ T9497] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 185.473258][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1334'. [ 185.528035][ T9501] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 185.560389][ T9501] ip6gretap2: entered promiscuous mode [ 185.573403][ T9501] ip6gretap2: entered allmulticast mode [ 185.596082][ T9501] bond1: (slave ip6gretap2): making interface the new active one [ 185.621463][ T9501] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 185.981090][ T9527] netlink: 'syz.1.1346': attribute type 4 has an invalid length. [ 185.998169][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 186.060128][ T9527] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1346'. [ 186.311904][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1353'. [ 186.391428][ T9550] FAULT_INJECTION: forcing a failure. [ 186.391428][ T9550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.404851][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.2.1356 Not tainted syzkaller #0 PREEMPT(full) [ 186.404867][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.404874][ T9550] Call Trace: [ 186.404878][ T9550] [ 186.404882][ T9550] dump_stack_lvl+0xe8/0x150 [ 186.404899][ T9550] should_fail_ex+0x412/0x560 [ 186.404915][ T9550] _copy_from_user+0x2d/0xb0 [ 186.404930][ T9550] ___sys_sendmsg+0x1c6/0x360 [ 186.404943][ T9550] ? __lock_acquire+0x6b5/0x2cf0 [ 186.404956][ T9550] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.404985][ T9550] ? __fget_files+0x2a/0x420 [ 186.404996][ T9550] ? __fget_files+0x3a0/0x420 [ 186.405012][ T9550] __x64_sys_sendmsg+0x1bd/0x2a0 [ 186.405033][ T9550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.405050][ T9550] ? __pfx_ksys_write+0x10/0x10 [ 186.405068][ T9550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.405078][ T9550] do_syscall_64+0x15f/0xf80 [ 186.405090][ T9550] ? trace_irq_disable+0x3b/0x140 [ 186.405104][ T9550] ? clear_bhb_loop+0x40/0x90 [ 186.405116][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.405126][ T9550] RIP: 0033:0x7feb0bf9cdd9 [ 186.405136][ T9550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.405145][ T9550] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.405156][ T9550] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 186.405163][ T9550] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 186.405170][ T9550] RBP: 00007feb0cdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 186.405176][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.405182][ T9550] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 186.405197][ T9550] [ 186.408675][ T9550] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1356'. [ 186.664228][ T9554] netlink: 'syz.2.1357': attribute type 1 has an invalid length. [ 186.677060][ T9554] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1357'. [ 187.322233][ T9591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1374'. [ 187.696224][ T9611] openvswitch: netlink: Message has 592 unknown bytes. [ 187.703578][ T9611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.723492][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.005462][ T9622] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1388'. [ 188.155378][ T7989] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.206054][ T9630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1391'. [ 188.426353][ T9643] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 188.434408][ T7989] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.593756][ T9645] block nbd1: server does not support multiple connections per device. [ 188.615608][ T9645] block nbd1: shutting down sockets [ 188.883691][ T9662] netlink: 'syz.2.1406': attribute type 3 has an invalid length. [ 189.128023][ T9671] ip6gre1: entered promiscuous mode [ 189.142315][ T9671] ip6gre1: entered allmulticast mode [ 189.493536][ T9702] sctp: [Deprecated]: syz.3.1421 (pid 9702) Use of int in max_burst socket option deprecated. [ 189.493536][ T9702] Use struct sctp_assoc_value instead [ 190.204001][ T9736] __nla_validate_parse: 8 callbacks suppressed [ 190.204019][ T9736] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1435'. [ 190.988366][ T9776] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1452'. [ 191.411340][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 191.450438][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 191.683905][ T9808] FAULT_INJECTION: forcing a failure. [ 191.683905][ T9808] name failslab, interval 1, probability 0, space 0, times 0 [ 191.700128][ T9808] CPU: 1 UID: 0 PID: 9808 Comm: syz.2.1460 Not tainted syzkaller #0 PREEMPT(full) [ 191.700152][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.700162][ T9808] Call Trace: [ 191.700170][ T9808] [ 191.700177][ T9808] dump_stack_lvl+0xe8/0x150 [ 191.700203][ T9808] should_fail_ex+0x412/0x560 [ 191.700230][ T9808] should_failslab+0xa8/0x100 [ 191.700258][ T9808] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 191.700282][ T9808] ? __alloc_skb+0x186/0x7d0 [ 191.700302][ T9808] ? __alloc_skb+0x1d0/0x7d0 [ 191.700320][ T9808] ? __local_bh_enable_ip+0xd0/0x130 [ 191.700340][ T9808] __alloc_skb+0x1d0/0x7d0 [ 191.700359][ T9808] ? process_measurement+0x451/0x1c80 [ 191.700387][ T9808] alloc_skb_with_frags+0xc8/0x760 [ 191.700408][ T9808] ? __lock_acquire+0x6b5/0x2cf0 [ 191.700430][ T9808] sock_alloc_send_pskb+0x878/0x990 [ 191.700459][ T9808] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 191.700488][ T9808] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 191.700516][ T9808] ? dev_get_by_index+0x22/0x2e0 [ 191.700539][ T9808] ? dev_get_by_index+0x22/0x2e0 [ 191.700566][ T9808] packet_sendmsg+0x315a/0x4fb0 [ 191.700603][ T9808] ? __lock_acquire+0x6b5/0x2cf0 [ 191.700624][ T9808] ? kvm_sched_clock_read+0x11/0x20 [ 191.700642][ T9808] ? sched_clock+0x3f/0x60 [ 191.700682][ T9808] ? __pfx_packet_sendmsg+0x10/0x10 [ 191.700698][ T9808] ? aa_sk_perm+0x6d5/0x900 [ 191.700734][ T9808] ? __pfx_aa_sk_perm+0x10/0x10 [ 191.700752][ T9808] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 191.700778][ T9808] ? ktime_get+0x45/0x220 [ 191.700803][ T9808] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 191.700829][ T9808] ? aa_sock_msg_perm+0xf1/0x1b0 [ 191.700854][ T9808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.700881][ T9808] ____sys_sendmsg+0x972/0x9f0 [ 191.700912][ T9808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.700944][ T9808] ? import_iovec+0x73/0xa0 [ 191.700971][ T9808] ___sys_sendmsg+0x2a5/0x360 [ 191.700993][ T9808] ? __lock_acquire+0x6b5/0x2cf0 [ 191.701016][ T9808] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.701069][ T9808] ? __fget_files+0x2a/0x420 [ 191.701090][ T9808] ? __fget_files+0x3a0/0x420 [ 191.701119][ T9808] __x64_sys_sendmsg+0x1bd/0x2a0 [ 191.701145][ T9808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.701181][ T9808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.701208][ T9808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.701227][ T9808] do_syscall_64+0x15f/0xf80 [ 191.701247][ T9808] ? trace_irq_disable+0x3b/0x140 [ 191.701272][ T9808] ? clear_bhb_loop+0x40/0x90 [ 191.701294][ T9808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.701311][ T9808] RIP: 0033:0x7feb0bf9cdd9 [ 191.701328][ T9808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.701342][ T9808] RSP: 002b:00007feb0cdc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.701362][ T9808] RAX: ffffffffffffffda RBX: 00007feb0c215fa0 RCX: 00007feb0bf9cdd9 [ 191.701375][ T9808] RDX: 0000000004000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 191.701387][ T9808] RBP: 00007feb0cdc1090 R08: 0000000000000000 R09: 0000000000000000 [ 191.701397][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.701408][ T9808] R13: 00007feb0c216038 R14: 00007feb0c215fa0 R15: 00007ffc7c0003b8 [ 191.701437][ T9808] [ 192.079995][ T9810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1461'. [ 192.208599][ T9810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1461'. [ 192.624618][ T9843] netlink: 'syz.4.1472': attribute type 1 has an invalid length. [ 192.755805][ T9843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.857207][ T9856] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 192.912449][ T9859] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 193.010230][ T9863] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1479'. [ 193.061877][ T9865] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 193.081809][ T9865] netlink: 'syz.4.1480': attribute type 2 has an invalid length. [ 193.102978][ T9867] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 193.119873][ T9867] netlink: 'syz.4.1480': attribute type 2 has an invalid length. [ 193.530647][ T9880] netlink: 'syz.4.1486': attribute type 93 has an invalid length. [ 193.698888][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1489'. [ 193.724816][ T9884] vxcan0: tx address claim with different name [ 193.839421][ T9890] FAULT_INJECTION: forcing a failure. [ 193.839421][ T9890] name failslab, interval 1, probability 0, space 0, times 0 [ 193.866048][ T9890] CPU: 0 UID: 0 PID: 9890 Comm: syz.4.1490 Not tainted syzkaller #0 PREEMPT(full) [ 193.866073][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.866084][ T9890] Call Trace: [ 193.866091][ T9890] [ 193.866098][ T9890] dump_stack_lvl+0xe8/0x150 [ 193.866123][ T9890] should_fail_ex+0x412/0x560 [ 193.866151][ T9890] should_failslab+0xa8/0x100 [ 193.866178][ T9890] __kmalloc_noprof+0xe8/0x760 [ 193.866201][ T9890] ? __might_fault+0xaf/0x130 [ 193.866228][ T9890] ? iovec_from_user+0x87/0x250 [ 193.866257][ T9890] iovec_from_user+0x87/0x250 [ 193.866285][ T9890] __import_iovec+0x163/0x7e0 [ 193.866318][ T9890] import_iovec+0x73/0xa0 [ 193.866346][ T9890] ___sys_sendmsg+0x255/0x360 [ 193.866368][ T9890] ? __lock_acquire+0x6b5/0x2cf0 [ 193.866392][ T9890] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.866447][ T9890] ? __fget_files+0x2a/0x420 [ 193.866467][ T9890] ? __fget_files+0x3a0/0x420 [ 193.866496][ T9890] __x64_sys_sendmsg+0x1bd/0x2a0 [ 193.866521][ T9890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.866553][ T9890] ? __pfx_ksys_write+0x10/0x10 [ 193.866585][ T9890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.866604][ T9890] do_syscall_64+0x15f/0xf80 [ 193.866625][ T9890] ? trace_irq_disable+0x3b/0x140 [ 193.866650][ T9890] ? clear_bhb_loop+0x40/0x90 [ 193.866671][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.866689][ T9890] RIP: 0033:0x7f246479cdd9 [ 193.866706][ T9890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.866721][ T9890] RSP: 002b:00007f2465592028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.866740][ T9890] RAX: ffffffffffffffda RBX: 00007f2464a15fa0 RCX: 00007f246479cdd9 [ 193.866753][ T9890] RDX: 0000000020000805 RSI: 0000200000000200 RDI: 0000000000000003 [ 193.866765][ T9890] RBP: 00007f2465592090 R08: 0000000000000000 R09: 0000000000000000 [ 193.866776][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.866787][ T9890] R13: 00007f2464a16038 R14: 00007f2464a15fa0 R15: 00007fff34bfc638 [ 193.866816][ T9890] [ 193.904280][ T9893] netlink: 'syz.1.1492': attribute type 10 has an invalid length. [ 194.127083][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.948249][ T9893] ipvlan0: entered allmulticast mode [ 195.971957][ T9893] veth0_vlan: entered allmulticast mode [ 195.974191][ T9905] FAULT_INJECTION: forcing a failure. [ 195.974191][ T9905] name failslab, interval 1, probability 0, space 0, times 0 [ 195.999736][ T9893] team0: Device ipvlan0 failed to register rx_handler [ 196.013165][ T9905] CPU: 1 UID: 0 PID: 9905 Comm: syz.3.1494 Not tainted syzkaller #0 PREEMPT(full) [ 196.013188][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.013202][ T9905] Call Trace: [ 196.013209][ T9905] [ 196.013217][ T9905] dump_stack_lvl+0xe8/0x150 [ 196.013242][ T9905] should_fail_ex+0x412/0x560 [ 196.013269][ T9905] should_failslab+0xa8/0x100 [ 196.013297][ T9905] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 196.013321][ T9905] ? alloc_vmap_area+0x229/0x1480 [ 196.013347][ T9905] alloc_vmap_area+0x229/0x1480 [ 196.013378][ T9905] ? rcu_is_watching+0x15/0xb0 [ 196.013401][ T9905] ? __pfx_alloc_vmap_area+0x10/0x10 [ 196.013419][ T9905] ? __kasan_kmalloc+0x93/0xb0 [ 196.013447][ T9905] ? __get_vm_area_node+0x13f/0x300 [ 196.013467][ T9905] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 196.013490][ T9905] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 196.013517][ T9905] __get_vm_area_node+0x1f8/0x300 [ 196.013544][ T9905] __vmalloc_node_range_noprof+0x36a/0x1750 [ 196.013567][ T9905] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 196.013596][ T9905] ? __lock_acquire+0x6b5/0x2cf0 [ 196.013637][ T9905] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.013661][ T9905] ? __lock_acquire+0x6b5/0x2cf0 [ 196.013682][ T9905] ? _parse_integer_limit+0x1ae/0x1f0 [ 196.013706][ T9905] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 196.013729][ T9905] __vmalloc_noprof+0xd2/0x120 [ 196.013751][ T9905] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 196.013779][ T9905] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 196.013809][ T9905] bpf_prog_alloc+0x3c/0x1a0 [ 196.013828][ T9905] bpf_prog_load+0x779/0x1a10 [ 196.013865][ T9905] ? __pfx_bpf_prog_load+0x10/0x10 [ 196.013892][ T9905] ? __might_fault+0xaf/0x130 [ 196.013924][ T9905] ? bpf_lsm_bpf+0x9/0x20 [ 196.013939][ T9905] ? security_bpf+0x7e/0x2d0 [ 196.013961][ T9905] __sys_bpf+0x618/0x950 [ 196.013988][ T9905] ? __pfx___sys_bpf+0x10/0x10 [ 196.014033][ T9905] ? ksys_write+0x242/0x270 [ 196.014058][ T9905] ? __pfx_ksys_write+0x10/0x10 [ 196.014086][ T9905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.014104][ T9905] __x64_sys_bpf+0x7c/0x90 [ 196.014126][ T9905] do_syscall_64+0x15f/0xf80 [ 196.014145][ T9905] ? trace_irq_disable+0x3b/0x140 [ 196.014169][ T9905] ? clear_bhb_loop+0x40/0x90 [ 196.014190][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.014205][ T9905] RIP: 0033:0x7fb97739cdd9 [ 196.014221][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.014235][ T9905] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.014253][ T9905] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 196.014266][ T9905] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 196.014277][ T9905] RBP: 00007fb97823b090 R08: 0000000000000000 R09: 0000000000000000 [ 196.014287][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.014297][ T9905] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 196.014325][ T9905] [ 196.337690][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'. [ 196.369406][ T9905] warn_alloc: 1 callbacks suppressed [ 196.369422][ T9905] syz.3.1494: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 196.410143][ T9905] CPU: 1 UID: 0 PID: 9905 Comm: syz.3.1494 Not tainted syzkaller #0 PREEMPT(full) [ 196.410167][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.410178][ T9905] Call Trace: [ 196.410185][ T9905] [ 196.410192][ T9905] dump_stack_lvl+0xe8/0x150 [ 196.410217][ T9905] warn_alloc+0x249/0x340 [ 196.410241][ T9905] ? kasan_quarantine_put+0xbb/0x1f0 [ 196.410268][ T9905] ? __pfx_warn_alloc+0x10/0x10 [ 196.410294][ T9905] ? __get_vm_area_node+0x211/0x300 [ 196.410315][ T9905] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 196.410340][ T9905] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 196.410367][ T9905] ? __get_vm_area_node+0x211/0x300 [ 196.410396][ T9905] __vmalloc_node_range_noprof+0x38f/0x1750 [ 196.410423][ T9905] ? __lock_acquire+0x6b5/0x2cf0 [ 196.410463][ T9905] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.410488][ T9905] ? __lock_acquire+0x6b5/0x2cf0 [ 196.410510][ T9905] ? _parse_integer_limit+0x1ae/0x1f0 [ 196.410535][ T9905] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 196.410558][ T9905] __vmalloc_noprof+0xd2/0x120 [ 196.410581][ T9905] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 196.410608][ T9905] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 196.410639][ T9905] bpf_prog_alloc+0x3c/0x1a0 [ 196.410658][ T9905] bpf_prog_load+0x779/0x1a10 [ 196.410696][ T9905] ? __pfx_bpf_prog_load+0x10/0x10 [ 196.410722][ T9905] ? __might_fault+0xaf/0x130 [ 196.410758][ T9905] ? bpf_lsm_bpf+0x9/0x20 [ 196.410774][ T9905] ? security_bpf+0x7e/0x2d0 [ 196.410797][ T9905] __sys_bpf+0x618/0x950 [ 196.410824][ T9905] ? __pfx___sys_bpf+0x10/0x10 [ 196.410864][ T9905] ? ksys_write+0x242/0x270 [ 196.410891][ T9905] ? __pfx_ksys_write+0x10/0x10 [ 196.410919][ T9905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.410956][ T9905] __x64_sys_bpf+0x7c/0x90 [ 196.410986][ T9905] do_syscall_64+0x15f/0xf80 [ 196.411006][ T9905] ? trace_irq_disable+0x3b/0x140 [ 196.411031][ T9905] ? clear_bhb_loop+0x40/0x90 [ 196.411053][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.411071][ T9905] RIP: 0033:0x7fb97739cdd9 [ 196.411087][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.411102][ T9905] RSP: 002b:00007fb97823b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.411121][ T9905] RAX: ffffffffffffffda RBX: 00007fb977615fa0 RCX: 00007fb97739cdd9 [ 196.411134][ T9905] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 196.411145][ T9905] RBP: 00007fb97823b090 R08: 0000000000000000 R09: 0000000000000000 [ 196.411157][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.411171][ T9905] R13: 00007fb977616038 R14: 00007fb977615fa0 R15: 00007fffdd8c3ae8 [ 196.411200][ T9905] [ 196.411274][ T9905] Mem-Info: [ 196.684808][ T9905] active_anon:5567 inactive_anon:0 isolated_anon:0 [ 196.684808][ T9905] active_file:3464 inactive_file:39979 isolated_file:0 [ 196.684808][ T9905] unevictable:781 dirty:367 writeback:0 [ 196.684808][ T9905] slab_reclaimable:10978 slab_unreclaimable:101469 [ 196.684808][ T9905] mapped:29688 shmem:1287 pagetables:1275 [ 196.684808][ T9905] sec_pagetables:0 bounce:0 [ 196.684808][ T9905] kernel_misc_reclaimable:0 [ 196.684808][ T9905] free:1324482 free_pcp:11359 free_cma:0 [ 196.743696][ T9915] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.1499'. [ 196.776343][ T9905] Node 0 active_anon:22348kB inactive_anon:0kB active_file:13856kB inactive_file:159720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118736kB dirty:1496kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12904kB pagetables:4476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.818704][ T9905] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.858469][ T9905] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.892297][ T9905] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 196.898476][ T9905] Node 0 DMA32 free:1338124kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22548kB inactive_anon:0kB active_file:13856kB inactive_file:159720kB unevictable:1536kB writepending:1496kB zspages:0kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:41208kB local_pcp:28084kB free_cma:0kB [ 196.959371][ T9905] lowmem_reserve[]: 0 0 0 0 0 [ 196.968289][ T9905] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 197.019055][ T9905] lowmem_reserve[]: 0 0 0 0 0 [ 197.031989][ T9905] Node 1 Normal free:3949180kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.072879][ T9905] lowmem_reserve[]: 0 0 0 0 0 [ 197.081496][ T9905] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.095012][ T9905] Node 0 DMA32: 1453*4kB (UME) 1547*8kB (UE) 644*16kB (UE) 228*32kB (UME) 73*64kB (UME) 43*128kB (UME) 50*256kB (UME) 24*512kB (UME) 14*1024kB (UME) 9*2048kB (UME) 300*4096kB (UM) = 1332620kB [ 197.114870][ T9905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 197.130079][ T9905] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 8*16kB (UM) 9*32kB (UM) 5*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 963*4096kB (M) = 3949180kB [ 197.146969][ T9905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.165083][ T9905] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.194995][ T9905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.216100][ T9905] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.242782][ T9905] 47003 total pagecache pages [ 197.255484][ T9905] 0 pages in swap cache [ 197.261416][ T9905] Free swap = 124996kB [ 197.272405][ T9905] Total swap = 124996kB [ 197.282070][ T9905] 2097051 pages RAM [ 197.291309][ T9905] 0 pages HighMem/MovableOnly [ 197.304073][ T9905] 427099 pages reserved [ 197.313606][ T9905] 0 pages cma reserved [ 197.587635][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1513'. [ 197.599652][ T9947] vxcan0: tx address claim with different name [ 197.919561][ T9968] netlink: 'syz.3.1520': attribute type 1 has an invalid length. [ 198.052788][ T9971] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.068954][ T9971] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 198.081359][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1520'. [ 198.157018][ T9968] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 198.227665][ T9984] FAULT_INJECTION: forcing a failure. [ 198.227665][ T9984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.241123][ T9984] CPU: 1 UID: 0 PID: 9984 Comm: syz.4.1527 Not tainted syzkaller #0 PREEMPT(full) [ 198.241147][ T9984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.241158][ T9984] Call Trace: [ 198.241166][ T9984] [ 198.241174][ T9984] dump_stack_lvl+0xe8/0x150 [ 198.241199][ T9984] should_fail_ex+0x412/0x560 [ 198.241225][ T9984] _copy_from_user+0x2d/0xb0 [ 198.241251][ T9984] bpf_test_init+0xd8/0x150 [ 198.241277][ T9984] bpf_prog_test_run_skb+0x392/0x2260 [ 198.241297][ T9984] ? bpf_prog_test_run_skb+0x241/0x2260 [ 198.241337][ T9984] ? __fget_files+0x3a0/0x420 [ 198.241358][ T9984] ? __fget_files+0x2a/0x420 [ 198.241383][ T9984] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 198.241406][ T9984] bpf_prog_test_run+0x2c7/0x340 [ 198.241428][ T9984] __sys_bpf+0x643/0x950 [ 198.241455][ T9984] ? __pfx___sys_bpf+0x10/0x10 [ 198.241496][ T9984] ? ksys_write+0x242/0x270 [ 198.241523][ T9984] ? __pfx_ksys_write+0x10/0x10 [ 198.241551][ T9984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.241571][ T9984] __x64_sys_bpf+0x7c/0x90 [ 198.241596][ T9984] do_syscall_64+0x15f/0xf80 [ 198.241616][ T9984] ? trace_irq_disable+0x3b/0x140 [ 198.241641][ T9984] ? clear_bhb_loop+0x40/0x90 [ 198.241664][ T9984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.241681][ T9984] RIP: 0033:0x7f246479cdd9 [ 198.241697][ T9984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.241713][ T9984] RSP: 002b:00007f2465592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.241732][ T9984] RAX: ffffffffffffffda RBX: 00007f2464a15fa0 RCX: 00007f246479cdd9 [ 198.241744][ T9984] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 198.241756][ T9984] RBP: 00007f2465592090 R08: 0000000000000000 R09: 0000000000000000 [ 198.241767][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.241777][ T9984] R13: 00007f2464a16038 R14: 00007f2464a15fa0 R15: 00007fff34bfc638 [ 198.241807][ T9984] [ 198.941814][T10013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1540'. [ 199.837475][T10050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.121284][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 201.209253][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 201.229587][T10084] netlink: 'syz.2.1565': attribute type 10 has an invalid length. [ 201.255585][T10084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1565'. [ 201.342971][ T4942] Bluetooth: hci1: command 0x0406 tx timeout [ 201.343003][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 201.349055][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 201.419591][T10100] FAULT_INJECTION: forcing a failure. [ 201.419591][T10100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.454399][T10100] CPU: 0 UID: 0 PID: 10100 Comm: syz.1.1571 Not tainted syzkaller #0 PREEMPT(full) [ 201.454431][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.454442][T10100] Call Trace: [ 201.454449][T10100] [ 201.454457][T10100] dump_stack_lvl+0xe8/0x150 [ 201.454483][T10100] should_fail_ex+0x412/0x560 [ 201.454511][T10100] _copy_from_user+0x2d/0xb0 [ 201.454537][T10100] bpf_test_init+0xd8/0x150 [ 201.454563][T10100] bpf_prog_test_run_xdp+0x529/0x1160 [ 201.454598][T10100] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 201.454625][T10100] ? __fget_files+0x2a/0x420 [ 201.454650][T10100] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 201.454673][T10100] bpf_prog_test_run+0x2c7/0x340 [ 201.454694][T10100] __sys_bpf+0x643/0x950 [ 201.454722][T10100] ? __pfx___sys_bpf+0x10/0x10 [ 201.454762][T10100] ? ksys_write+0x242/0x270 [ 201.454788][T10100] ? __pfx_ksys_write+0x10/0x10 [ 201.454816][T10100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.454839][T10100] __x64_sys_bpf+0x7c/0x90 [ 201.454863][T10100] do_syscall_64+0x15f/0xf80 [ 201.454884][T10100] ? trace_irq_disable+0x3b/0x140 [ 201.454909][T10100] ? clear_bhb_loop+0x40/0x90 [ 201.454931][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.454949][T10100] RIP: 0033:0x7eff1419cdd9 [ 201.454966][T10100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.454980][T10100] RSP: 002b:00007eff15103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.454999][T10100] RAX: ffffffffffffffda RBX: 00007eff14415fa0 RCX: 00007eff1419cdd9 [ 201.455012][T10100] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 201.455023][T10100] RBP: 00007eff15103090 R08: 0000000000000000 R09: 0000000000000000 [ 201.455034][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.455044][T10100] R13: 00007eff14416038 R14: 00007eff14415fa0 R15: 00007fff16cff368 [ 201.455072][T10100] [ 201.783737][T10105] block nbd1: server does not support multiple connections per device. [ 201.796760][T10105] block nbd1: shutting down sockets [ 201.901111][T10114] netlink: 'syz.2.1576': attribute type 13 has an invalid length. [ 202.172540][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 202.204347][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 202.387364][T10127] [ 202.389734][T10127] ====================================================== [ 202.393765][T10134] vxcan0: tx address claim with different name [ 202.396743][T10127] WARNING: possible circular locking dependency detected [ 202.396769][T10127] syzkaller #0 Not tainted [ 202.414316][T10127] ------------------------------------------------------ [ 202.421330][T10127] syz.4.1580/10127 is trying to acquire lock: [ 202.427392][T10127] ffffffff8f0ac988 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 202.437069][T10127] [ 202.437069][T10127] but task is already holding lock: [ 202.444419][T10127] ffff8880596d8fe0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 202.453739][T10127] [ 202.453739][T10127] which lock already depends on the new lock. [ 202.453739][T10127] [ 202.464124][T10127] [ 202.464124][T10127] the existing dependency chain (in reverse order) is: [ 202.473118][T10127] [ 202.473118][T10127] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 202.480839][T10127] lock_sock_nested+0x41/0x100 [ 202.486113][T10127] inet_shutdown+0x6a/0x390 [ 202.491129][T10127] nbd_mark_nsock_dead+0x2e9/0x560 [ 202.496744][T10127] sock_shutdown+0x15e/0x260 [ 202.501845][T10127] nbd_clear_sock+0x24/0x170 [ 202.506941][T10127] nbd_config_put+0x2dd/0x580 [ 202.512127][T10127] nbd_genl_connect+0x19d5/0x1cf0 [ 202.517657][T10127] genl_family_rcv_msg_doit+0x22a/0x330 [ 202.523717][T10127] genl_rcv_msg+0x61c/0x7a0 [ 202.528732][T10127] netlink_rcv_skb+0x232/0x4b0 [ 202.534000][T10127] genl_rcv+0x28/0x40 [ 202.538493][T10127] netlink_unicast+0x75c/0x8e0 [ 202.543762][T10127] netlink_sendmsg+0x813/0xb40 [ 202.549034][T10127] ____sys_sendmsg+0x972/0x9f0 [ 202.554315][T10127] ___sys_sendmsg+0x2a5/0x360 [ 202.559500][T10127] __x64_sys_sendmsg+0x1bd/0x2a0 [ 202.564947][T10127] do_syscall_64+0x15f/0xf80 [ 202.570043][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.576442][T10127] [ 202.576442][T10127] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 202.584072][T10127] __mutex_lock+0x1a3/0x1550 [ 202.589174][T10127] nbd_queue_rq+0x37b/0x1100 [ 202.594273][T10127] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 202.600336][T10127] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 202.607179][T10127] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 202.613677][T10127] blk_mq_run_hw_queue+0x348/0x4f0 [ 202.619297][T10127] blk_mq_dispatch_list+0xd16/0xe10 [ 202.625008][T10127] blk_mq_flush_plug_list+0x48d/0x570 [ 202.630892][T10127] __blk_flush_plug+0x3ed/0x4d0 [ 202.636252][T10127] __submit_bio+0x28d/0x580 [ 202.641278][T10127] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 202.647423][T10127] block_read_full_folio+0x599/0x830 [ 202.653217][T10127] filemap_read_folio+0x137/0x3b0 [ 202.658751][T10127] do_read_cache_folio+0x358/0x590 [ 202.664375][T10127] read_part_sector+0xb6/0x2b0 [ 202.669647][T10127] adfspart_check_ICS+0xb1/0x960 [ 202.675096][T10127] bdev_disk_changed+0x817/0x1770 [ 202.680630][T10127] blkdev_get_whole+0x380/0x510 [ 202.685991][T10127] bdev_open+0x31e/0xd30 [ 202.690748][T10127] blkdev_open+0x470/0x610 [ 202.695666][T10127] do_dentry_open+0x785/0x14e0 [ 202.700936][T10127] vfs_open+0x3b/0x340 [ 202.705510][T10127] path_openat+0x2e08/0x3860 [ 202.710628][T10127] do_file_open+0x23e/0x4a0 [ 202.715641][T10127] do_sys_openat2+0x113/0x200 [ 202.720825][T10127] __x64_sys_openat+0x138/0x170 [ 202.726181][T10127] do_syscall_64+0x15f/0xf80 [ 202.731283][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.737682][T10127] [ 202.737682][T10127] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 202.744882][T10127] __mutex_lock+0x1a3/0x1550 [ 202.749980][T10127] nbd_queue_rq+0xc6/0x1100 [ 202.754987][T10127] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 202.761043][T10127] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 202.767881][T10127] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 202.774373][T10127] blk_mq_run_hw_queue+0x348/0x4f0 [ 202.779995][T10127] blk_mq_dispatch_list+0xd16/0xe10 [ 202.785710][T10127] blk_mq_flush_plug_list+0x48d/0x570 [ 202.791594][T10127] __blk_flush_plug+0x3ed/0x4d0 [ 202.796954][T10127] __submit_bio+0x28d/0x580 [ 202.801971][T10127] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 202.808113][T10127] block_read_full_folio+0x599/0x830 [ 202.813908][T10127] filemap_read_folio+0x137/0x3b0 [ 202.819446][T10127] do_read_cache_folio+0x358/0x590 [ 202.825069][T10127] read_part_sector+0xb6/0x2b0 [ 202.830343][T10127] adfspart_check_ICS+0xb1/0x960 [ 202.835793][T10127] bdev_disk_changed+0x817/0x1770 [ 202.841327][T10127] blkdev_get_whole+0x380/0x510 [ 202.846688][T10127] bdev_open+0x31e/0xd30 [ 202.851448][T10127] blkdev_open+0x470/0x610 [ 202.856366][T10127] do_dentry_open+0x785/0x14e0 [ 202.861637][T10127] vfs_open+0x3b/0x340 [ 202.866211][T10127] path_openat+0x2e08/0x3860 [ 202.871313][T10127] do_file_open+0x23e/0x4a0 [ 202.876329][T10127] do_sys_openat2+0x113/0x200 [ 202.881515][T10127] __x64_sys_openat+0x138/0x170 [ 202.886869][T10127] do_syscall_64+0x15f/0xf80 [ 202.891968][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.898365][T10127] [ 202.898365][T10127] -> #5 (set->srcu){.+.+}-{0:0}: [ 202.905476][T10127] __synchronize_srcu+0xca/0x300 [ 202.910920][T10127] elevator_switch+0x1e8/0x7a0 [ 202.916298][T10127] elevator_change+0x2cc/0x450 [ 202.921581][T10127] elevator_set_default+0x36c/0x430 [ 202.927293][T10127] blk_register_queue+0x3e9/0x4e0 [ 202.932828][T10127] __add_disk+0x677/0xd50 [ 202.937661][T10127] add_disk_fwnode+0xfb/0x480 [ 202.942840][T10127] nbd_dev_add+0x72c/0xb50 [ 202.947757][T10127] nbd_init+0x168/0x1f0 [ 202.952427][T10127] do_one_initcall+0x250/0x870 [ 202.957695][T10127] do_initcall_level+0x104/0x190 [ 202.963144][T10127] do_initcalls+0x59/0xa0 [ 202.967980][T10127] kernel_init_freeable+0x2a6/0x3e0 [ 202.973688][T10127] kernel_init+0x1d/0x1d0 [ 202.978532][T10127] ret_from_fork+0x514/0xb70 [ 202.983628][T10127] ret_from_fork_asm+0x1a/0x30 [ 202.988898][T10127] [ 202.988898][T10127] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 202.996702][T10127] __mutex_lock+0x1a3/0x1550 [ 203.001800][T10127] elevator_change+0x1b3/0x450 [ 203.007075][T10127] elevator_set_none+0xb5/0x140 [ 203.012436][T10127] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 203.018745][T10127] nbd_start_device+0x17f/0xb10 [ 203.024100][T10127] nbd_genl_connect+0x165b/0x1cf0 [ 203.029626][T10127] genl_family_rcv_msg_doit+0x22a/0x330 [ 203.035683][T10127] genl_rcv_msg+0x61c/0x7a0 [ 203.040702][T10127] netlink_rcv_skb+0x232/0x4b0 [ 203.045969][T10127] genl_rcv+0x28/0x40 [ 203.050463][T10127] netlink_unicast+0x75c/0x8e0 [ 203.055735][T10127] netlink_sendmsg+0x813/0xb40 [ 203.061005][T10127] ____sys_sendmsg+0x972/0x9f0 [ 203.066278][T10127] ___sys_sendmsg+0x2a5/0x360 [ 203.071463][T10127] __x64_sys_sendmsg+0x1bd/0x2a0 [ 203.076909][T10127] do_syscall_64+0x15f/0xf80 [ 203.082003][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.088400][T10127] [ 203.088400][T10127] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 203.097008][T10127] blk_alloc_queue+0x546/0x680 [ 203.102287][T10127] __blk_mq_alloc_disk+0x197/0x390 [ 203.107909][T10127] nbd_dev_add+0x499/0xb50 [ 203.112827][T10127] nbd_init+0x168/0x1f0 [ 203.117496][T10127] do_one_initcall+0x250/0x870 [ 203.122768][T10127] do_initcall_level+0x104/0x190 [ 203.128216][T10127] do_initcalls+0x59/0xa0 [ 203.133057][T10127] kernel_init_freeable+0x2a6/0x3e0 [ 203.138766][T10127] kernel_init+0x1d/0x1d0 [ 203.143612][T10127] ret_from_fork+0x514/0xb70 [ 203.148880][T10127] ret_from_fork_asm+0x1a/0x30 [ 203.154151][T10127] [ 203.154151][T10127] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 203.161355][T10127] fs_reclaim_acquire+0x71/0x100 [ 203.166813][T10127] __kmalloc_cache_noprof+0x40/0x660 [ 203.172610][T10127] cryptomgr_notify+0x85/0x930 [ 203.177881][T10127] notifier_call_chain+0x1ad/0x3d0 [ 203.183503][T10127] blocking_notifier_call_chain+0x6a/0x90 [ 203.189737][T10127] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 203.195530][T10127] crypto_alloc_tfm_node+0x13e/0x3f0 [ 203.201321][T10127] crypto_alloc_sync_skcipher+0x39/0xd0 [ 203.207377][T10127] rxkad_init+0x20/0xe0 [ 203.212046][T10127] rxrpc_init_security+0x72/0x120 [ 203.217578][T10127] af_rxrpc_init+0x13d/0x2e0 [ 203.222671][T10127] do_one_initcall+0x250/0x870 [ 203.227939][T10127] do_initcall_level+0x104/0x190 [ 203.233387][T10127] do_initcalls+0x59/0xa0 [ 203.238228][T10127] kernel_init_freeable+0x2a6/0x3e0 [ 203.243934][T10127] kernel_init+0x1d/0x1d0 [ 203.248779][T10127] ret_from_fork+0x514/0xb70 [ 203.253876][T10127] ret_from_fork_asm+0x1a/0x30 [ 203.259151][T10127] [ 203.259151][T10127] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 203.267223][T10127] down_read+0x47/0x2e0 [ 203.271888][T10127] blocking_notifier_call_chain+0x54/0x90 [ 203.278118][T10127] __crypto_register_alg+0x32b/0x3c0 [ 203.283916][T10127] crypto_register_alg+0x447/0x810 [ 203.289539][T10127] do_one_initcall+0x250/0x870 [ 203.294810][T10127] do_initcall_level+0x104/0x190 [ 203.300263][T10127] do_initcalls+0x59/0xa0 [ 203.305098][T10127] kernel_init_freeable+0x2a6/0x3e0 [ 203.310804][T10127] kernel_init+0x1d/0x1d0 [ 203.315644][T10127] ret_from_fork+0x514/0xb70 [ 203.320739][T10127] ret_from_fork_asm+0x1a/0x30 [ 203.326008][T10127] [ 203.326008][T10127] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 203.333555][T10127] __lock_acquire+0x15a5/0x2cf0 [ 203.338915][T10127] lock_acquire+0x106/0x350 [ 203.343923][T10127] down_write+0x96/0x200 [ 203.348679][T10127] crypto_alg_mod_lookup+0x211/0x5f0 [ 203.354470][T10127] crypto_alloc_tfm_node+0x13e/0x3f0 [ 203.360267][T10127] tls_set_sw_offload+0xa33/0x1780 [ 203.365887][T10127] tls_setsockopt+0xef2/0x15c0 [ 203.371159][T10127] do_sock_setsockopt+0x17c/0x1b0 [ 203.376697][T10127] __x64_sys_setsockopt+0x13d/0x1b0 [ 203.382402][T10127] do_syscall_64+0x15f/0xf80 [ 203.387496][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.393895][T10127] [ 203.393895][T10127] other info that might help us debug this: [ 203.393895][T10127] [ 203.404106][T10127] Chain exists of: [ 203.404106][T10127] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 203.404106][T10127] [ 203.417129][T10127] Possible unsafe locking scenario: [ 203.417129][T10127] [ 203.424559][T10127] CPU0 CPU1 [ 203.429918][T10127] ---- ---- [ 203.435262][T10127] lock(sk_lock-AF_INET6); [ 203.439757][T10127] lock(&nsock->tx_lock); [ 203.446675][T10127] lock(sk_lock-AF_INET6); [ 203.453683][T10127] lock(crypto_alg_sem); [ 203.457998][T10127] [ 203.457998][T10127] *** DEADLOCK *** [ 203.457998][T10127] [ 203.466119][T10127] 1 lock held by syz.4.1580/10127: [ 203.471205][T10127] #0: ffff8880596d8fe0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 203.480942][T10127] [ 203.480942][T10127] stack backtrace: [ 203.486812][T10127] CPU: 0 UID: 0 PID: 10127 Comm: syz.4.1580 Not tainted syzkaller #0 PREEMPT(full) [ 203.486832][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.486841][T10127] Call Trace: [ 203.486850][T10127] [ 203.486857][T10127] dump_stack_lvl+0xe8/0x150 [ 203.486876][T10127] print_circular_bug+0x2e1/0x300 [ 203.486898][T10127] check_noncircular+0x12e/0x150 [ 203.486920][T10127] __lock_acquire+0x15a5/0x2cf0 [ 203.486944][T10127] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 203.486961][T10127] lock_acquire+0x106/0x350 [ 203.486976][T10127] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 203.486997][T10127] down_write+0x96/0x200 [ 203.487018][T10127] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 203.487034][T10127] ? __pfx_down_write+0x10/0x10 [ 203.487055][T10127] ? crypto_larval_alloc+0x1bf/0x290 [ 203.487073][T10127] crypto_alg_mod_lookup+0x211/0x5f0 [ 203.487091][T10127] crypto_alloc_tfm_node+0x13e/0x3f0 [ 203.487109][T10127] ? timer_init_key+0x161/0x2c0 [ 203.487134][T10127] tls_set_sw_offload+0xa33/0x1780 [ 203.487162][T10127] tls_setsockopt+0xef2/0x15c0 [ 203.487188][T10127] ? __pfx_tls_setsockopt+0x10/0x10 [ 203.487209][T10127] ? __fget_files+0x2a/0x420 [ 203.487227][T10127] ? aa_sock_opt_perm+0xff/0x1a0 [ 203.487246][T10127] ? sock_common_setsockopt+0x36/0xc0 [ 203.487262][T10127] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 203.487278][T10127] do_sock_setsockopt+0x17c/0x1b0 [ 203.487298][T10127] __x64_sys_setsockopt+0x13d/0x1b0 [ 203.487318][T10127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.487335][T10127] do_syscall_64+0x15f/0xf80 [ 203.487353][T10127] ? trace_irq_disable+0x3b/0x140 [ 203.487376][T10127] ? clear_bhb_loop+0x40/0x90 [ 203.487393][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.487409][T10127] RIP: 0033:0x7f246479cdd9 [ 203.487425][T10127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.487440][T10127] RSP: 002b:00007f2465571028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.487456][T10127] RAX: ffffffffffffffda RBX: 00007f2464a16090 RCX: 00007f246479cdd9 [ 203.487468][T10127] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000006 [ 203.487478][T10127] RBP: 00007f2464832d69 R08: 0000000000000028 R09: 0000000000000000 [ 203.487489][T10127] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 203.487499][T10127] R13: 00007f2464a16128 R14: 00007f2464a16090 R15: 00007fff34bfc638 [ 203.487516][T10127] [ 203.739572][T10137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.750248][T10137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.774639][T10138] tipc: Started in network mode [ 203.786760][T10138] tipc: Node identity ac14140f, cluster identity 4711 [ 203.803243][T10138] tipc: New replicast peer: 172.20.20.170 [ 203.840965][T10138] tipc: Enabled bearer , priority 10 [ 203.855717][T10137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.866357][T10137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.917429][T10137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.927803][T10137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.998204][T10137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.008588][T10137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.056715][ T1049] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.065070][ T1049] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.077474][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.086013][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.097769][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.106941][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.119058][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.127360][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.953423][ T7968] tipc: Node number set to 2886997007 [ 205.883549][ T5626] Bluetooth: hci3: command 0x0406 tx timeout