last executing test programs: 8.23369453s ago: executing program 1 (id=3178): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r2, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x76, &(0x7f00000006c0)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x34, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x2}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0x2}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x4, "91ec"}]}]}}}}}}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff000000001c0000000c0001", @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[], 0x18}}, 0x20000000) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r12, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300"], 0x38}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0xe8, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r12, 0x40083, 0x602a}, [@IFLA_VF_PORTS={0xc8, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6aa615ab18de08062b53f650bbc5883a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "64149eeaa7d92cc2266f7a9101313add"}, @IFLA_PORT_REQUEST={0x5}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "682251c27768d4dd84a4fcd710cb321b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7c705b0e908ded65246e530b8ecb2ebb"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x10}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c46f8588677fd806da2cc75951a8c6ad"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e9d8d05d2f0836588a04ee5ab78e5abe"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc0}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f29eaec22e3eb421f7af2840dff47e63"}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bind$isdn_base(r11, &(0x7f0000000040)={0x22, 0x1, 0x7f, 0xff, 0x81}, 0x6) 7.844407826s ago: executing program 1 (id=3182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000007c0)=@get={0x1, &(0x7f0000000980)=""/205, 0x9}) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="600000002000000100000000000000000a142000ff0000000000000008000d000a00000014000200fc0000000000000000000000000000001400020000000000000000000000ffff7f00000114000100ff0200000000000000000000000000012c"], 0x60}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f00000001c0)={0x6, 'dvmrp1\x00', {0x4}, 0x1643}) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56a52c34ebc1631b116f88bc7dc2c97a577284031c913339227f53553945bf818031e4200d5328d1e92a16869713ffdef988acbff08f5e20032d42677fac", 0xdc}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb930bde", 0x18}, {&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b398bc15b", 0x78}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e6716bb1d646bcca45485a11272d312c6bb1b36aea56f0e24830676bf6b733175cfcf1b19dd6a7a85f523f8e348f9128a4ef48f560a8e0a1b9ff73a04699e6645f0f670b25e3ae799f7a2ee4fd95e80e00189dc7d93e1e4cca9c8ce4ca7ee203c3155b3623ee24e995dd42e67d22f5eb7f766567a247a0f981782f525b126919b9b0adeadff07f29ce8c874", 0xe3}, {&(0x7f0000000640)="1dcbc85af9feec85cdaa90a1f6bb5eca3475c705496a92d182147efa66cf148382493989558a401839427396285c136c7fb1ebd274e08452a219d6f628ebb9408650139466606c4c0b1a2bfeff287f23d5151bdeb54e8d21e2d1916360a117fbcbcf6cfa61c24dde9f441b300f4e4d66698caa882bf762bfa566e76cbf8e4bd1ed199dacf2367d50ec09216127e9e5f168fb85d01333cba55a89ad021e0c79d79b9ccb75fb50059fcd959664abb5600ac38d", 0xb2}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0e4387aa3e2d356dcb1c5eb1d0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x90) 6.87981471s ago: executing program 1 (id=3190): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r0, &(0x7f00000006c0)=r3, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='hugepage_set_pmd\x00', r12}, 0x18) sendmsg$nl_generic(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003800012fb387d834400f91f40326bd70e2f9dbdf25058007d1180100ffffffffffffd197959da019a35c405dfb2f893cfe2392274b1338eca1474b8188d81e1761d872092a0c62c6b2341058e89d83893e5acea8c0a35eb5699e6bb65e4862457d4edddbd04958e3efe76f11da4749f7cc665d814c46ec9702ff11dcd6476c440a16c0c5111b1fcb285b704e4dc181c1fda4769e5295adbe6ecb"], 0x14}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r13}, 0x0, 0x0}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff0000", @ANYRES32=r14, @ANYBLOB], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x0, &(0x7f0000000980)=[r13, r13, r13, r13, r13, 0xffffffffffffffff, r13, r13, 0x1]}, 0x94) 5.615895857s ago: executing program 1 (id=3201): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x4d, 0xff, 0x0, 0x7}, {0x6, 0x60, 0x6, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r3, r4, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r6}, 0x20) 5.227746591s ago: executing program 1 (id=3204): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'nicvf0\x00', &(0x7f0000000640)=@ethtool_link_settings={0x4c, 0x2, 0x2, 0x1, 0x9, 0x16, 0xb, 0x7, 0x2, 0x7, [0x0, 0xfe, 0x0, 0x0, 0x5, 0xfffffff9, 0x5, 0x496], [0x3, 0x1000, 0x401, 0x100]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xe, 0x12}, {0xb, 0xffe6}}}, 0x24}}, 0x4000010) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000003c0)="975c49a232", &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000004c0), 0x6b, r2}, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x2000c014) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@null, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@gettaction={0x2c, 0x32, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@default, @bcast, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x81}}}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x5, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRES16=r4, @ANYRES8=r7, @ANYRES64=0x0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.660304579s ago: executing program 1 (id=3210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002700)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/97, 0x61}], 0x1}, 0x40010000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r3, 0xff, 0x20}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r1}, 0x18) 4.379402898s ago: executing program 4 (id=3211): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r0, &(0x7f00000006c0)=r3, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='hugepage_set_pmd\x00', r12}, 0x18) sendmsg$nl_generic(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003800012fb387d834400f91f40326bd70e2f9dbdf25058007d1180100ffffffffffffd197959da019a35c405dfb2f893cfe2392274b1338eca1474b8188d81e1761d872092a0c62c6b2341058e89d83893e5acea8c0a35eb5699e6bb65e4862457d4edddbd04958e3efe76f11da4749f7cc665d814c46ec9702ff11dcd6476c440a16c0c5111b1fcb285b704e4dc181c1fda4769e5295adbe6ecb"], 0x14}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r13}, 0x0, 0x0}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff0000", @ANYRES32=r14, @ANYBLOB], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x0, &(0x7f0000000980)=[r13, r13, r13, r13, r13, 0xffffffffffffffff, r13, r13, 0x1]}, 0x94) 2.784811173s ago: executing program 4 (id=3222): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd7000fbdbdd254400000008000300", @ANYRES32=r1], 0x2c}}, 0x24040890) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x884) 2.24009s ago: executing program 4 (id=3225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x6, @empty, 0x10001, 0x3}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000100039042bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000800000400009b"], 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400030080000300", 0x33a) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21440100}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="3400000049dc871fd3c234c6f24aef3635b0fb9680e48f1edf23627b3f4deeaa06214ec53f78f888604730c9d2685b187c34b02b72e2f298c83bf42fb43057238dd9452b568e1c5296482cdd01beab0df08b4a666d1ed477a93d1fe9fb78f3fcdfe979c650f43346fef497e0081a9e062d14a4f8948625e8af7fc540cc87b8fb2723b73a4717a36facc5b7e589b7c760db5d1b4a829b46b7f401af294364fab33b61de1367a221861c970e5dcd00e430597efb65d43e", @ANYRES16=r5, @ANYBLOB="000025bd7000fddbdf25150000000c00060003000000030000000c000600030000000300000008002a0004000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000810) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000780)='percpu_alloc_percpu\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000bdb9211b95e1c70000010000000000000000f4d160a403721e812302000000000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00'}, 0x10) ppoll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x51, &(0x7f0000000040), &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200000000000000084000b248c16", @ANYRES32=r8], 0x20, 0xc005}], 0x1, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000080)={r8, 0x2}, 0x8) r9 = socket$kcm(0x2, 0x5, 0x84) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x7c, &(0x7f0000000000)=r10, 0x62) sendto$inet6(r10, &(0x7f00000003c0)="298095f4cf5704f7c26676c5be4d70cd0ebb55237cc110b7cd698966b08aa573904fb39dc12a13ec5e2882a5a0260bd0a478b229d05b9e5098073ad3494a8fdc2cd63909eb2a5ebce50f78a64bc5d29e11765a8dc92b914e071bfcec371fc8823e1fabf6e7d8eef0cab5393b7dd202d585ec05dd899e605013c1a77eefdd669a91649d307f61b70bf87c5bf3182b8d63003d84ee554f26194b94e5281a41a91458186ef9086155144254945cade69adcec4ae90e872f90fac4be6b", 0xbb, 0x40044, &(0x7f0000000480)={0xa, 0x4e21, 0x6, @mcast2, 0xffff7fff}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0x3, 0x10}, {0x9, 0x1}}, ["", "", "", "", ""]}, 0x24}}, 0x240400c0) 1.972059673s ago: executing program 3 (id=3227): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.888967441s ago: executing program 2 (id=3228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={r2, r5, r6}, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000080)={0x8, 'hsr0\x00', {'vlan0\x00'}, 0x101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ALPHA={0x3, 0x4, 0x12}]}}, @TCA_RATE={0x0, 0x5, {0x7, 0x1}}]}, 0xb8}}, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x6, 0x7, 0x4048, 0xffffffffffffffff, 0x7, '\x00', r4, r10, 0x3, 0x1, 0x4, 0x9}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x5}}, {0x4}}]}]}, 0x48}}, 0x4000010) 1.741924038s ago: executing program 3 (id=3230): r0 = socket$inet6(0xa, 0x3, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r2, &(0x7f00000000c0)="e3", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r2, 0xda8c) r3 = accept4(r2, &(0x7f0000000340)=@nfc, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000070a050000000000000000000a0040010900010073797a31000000000900020073797a32000000000c000340"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @remote}, 0x1c) connect$inet6(r5, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) 1.717283265s ago: executing program 0 (id=3231): r0 = socket(0x11, 0x800000003, 0x0) recvmsg$can_bcm(r0, &(0x7f00000044c0)={0x0, 0x0, 0x0}, 0x2000) 1.548569951s ago: executing program 2 (id=3232): r0 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000200010000000000", @ANYRES32, @ANYBLOB="f1ff000000000000001af3ffffff000000000000bc4db9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x50) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r5, 0xf9f3c000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r8, {0x5, 0x10}, {0x7}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.498290473s ago: executing program 0 (id=3233): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x60600) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000000)) 1.496687285s ago: executing program 3 (id=3234): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="d2664e3de44e5781659d1c2224a19de44fba87cf2fcf751c9b218685", 0xffffffffffffffe7, 0x2c000891, 0x0, 0x0) 1.307897912s ago: executing program 0 (id=3235): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) writev(r3, &(0x7f0000000880)=[{&(0x7f00000003c0)="f51af5231a", 0x5}], 0x1) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) close(0x3) sendto$inet6(r0, &(0x7f0000000080)='Xo', 0x2, 0x800, &(0x7f000005ffe4)={0xa, 0x0, 0xd910, @private2, 0x9}, 0x1c) socket$qrtr(0x2a, 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000000)=0x8) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) 1.307404256s ago: executing program 2 (id=3236): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'nicvf0\x00', &(0x7f0000000640)=@ethtool_link_settings={0x4c, 0x2, 0x2, 0x1, 0x9, 0x16, 0xb, 0x7, 0x2, 0x7, [0x0, 0xfe, 0x0, 0x0, 0x5, 0xfffffff9, 0x5, 0x496], [0x3, 0x1000, 0x401, 0x100]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xe, 0x12}, {0xb, 0xffe6}}}, 0x24}}, 0x4000010) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000003c0)="975c49a232", &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000004c0), 0x6b, r2}, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x2000c014) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@null, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@gettaction={0x2c, 0x32, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@default, @bcast, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x81}}}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x5, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRES16=r4, @ANYRES8=r7, @ANYRES64=0x0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.196089596s ago: executing program 0 (id=3237): socket$kcm(0x29, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)=""/4071, 0xfe7}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/127, 0x7f}, {&(0x7f0000001440)=""/131, 0x89}, {&(0x7f0000000000)=""/48, 0x30}], 0x5}, 0x4}], 0x45, 0x12000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1c}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="28fbdbdf2508000300feffff7f08003f000000000008000100"/40], 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x10) listen(r0, 0x8) r6 = socket(0x2c, 0x4, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000080), 0x4) 1.133780233s ago: executing program 4 (id=3238): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000001fc0)=""/4096, &(0x7f0000000e00)=0x1000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b1f00000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800812000000a000100aa"], 0x48}}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0xfffffffffffffffd}, {0x0}], 0x2}}], 0x2, 0x0, 0x0) socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) 995.28244ms ago: executing program 0 (id=3239): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000931038000000000095feffffff000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x6, 0x7, 0x3, 0x2, 0xc, @empty, @mcast2, 0x8, 0x10, 0x4, 0xfffffff9}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x6, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x2e, 0x30, 0x0, 0x2e]}}, &(0x7f0000000740)=""/210, 0x2e, 0xd2, 0x1, 0x8, 0x10000}, 0x28) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @generic={0x2, 0x7, 0x9, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x101, 0xbc, &(0x7f00000003c0)=""/188, 0x41100, 0x0, '\x00', r5, @fallback=0x34, r6, 0x8, &(0x7f0000000500)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x1, 0xffffff75}, 0x10, 0xffffffffffffffff, r1, 0x7, &(0x7f00000006c0)=[r0, r0, r0], &(0x7f0000000840)=[{0x1, 0x4, 0x9, 0x4}, {0x3, 0x4, 0x4, 0x1}, {0x0, 0x2, 0x3, 0x6}, {0x1, 0x4, 0x0, 0xb}, {0x2, 0x1, 0xb, 0x1}, {0x2, 0x2, 0xf}, {0x0, 0x3, 0x9, 0x2}], 0x10, 0x6}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r8) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r9, 0x211, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x23, 0xfffffff8}]}, 0xf8}}, 0x0) 994.740216ms ago: executing program 2 (id=3240): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xc0, r2, 0x201, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x400}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) 820.027279ms ago: executing program 2 (id=3241): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r1, 0x801, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15", 0x9c}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000033c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "a8c7e9385559d457"}}, 0x48}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 808.591151ms ago: executing program 0 (id=3242): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) recvfrom$inet6(r0, &(0x7f00000000c0)=""/203, 0xcb, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c) r2 = socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000ea0000d79786eeee46", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r3, 0x0) r4 = socket$isdn(0x22, 0x2, 0x25) close(r4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xfffd, 0x3}, 0x80, 0x0}, 0x8010) 597.213713ms ago: executing program 4 (id=3243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)='Xo', 0x2, 0x800, &(0x7f000005ffe4)={0xa, 0x2fc, 0xd910, @private2, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0), &(0x7f0000000000)=0x8) 450.129215ms ago: executing program 3 (id=3244): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) 403.765328ms ago: executing program 2 (id=3245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x6, @empty, 0x10001, 0x3}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000100039042bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000800000400009b"], 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400030080000300", 0x33a) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21440100}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="3400000049dc871fd3c234c6f24aef3635b0fb9680e48f1edf23627b3f4deeaa06214ec53f78f888604730c9d2685b187c34b02b72e2f298c83bf42fb43057238dd9452b568e1c5296482cdd01beab0df08b4a666d1ed477a93d1fe9fb78f3fcdfe979c650f43346fef497e0081a9e062d14a4f8948625e8af7fc540cc87b8fb2723b73a4717a36facc5b7e589b7c760db5d1b4a829b46b7f401af294364fab33b61de1367a221861c970e5dcd00e430597efb65d43e", @ANYRES16=r5, @ANYBLOB="000025bd7000fddbdf25150000000c00060003000000030000000c000600030000000300000008002a0004000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000810) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000780)='percpu_alloc_percpu\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000bdb9211b95e1c70000010000000000000000f4d160a403721e812302000000000000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00'}, 0x10) ppoll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x51, &(0x7f0000000040), &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000000100), 0x0, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000080)={r8, 0x2}, 0x8) r9 = socket$kcm(0x2, 0x5, 0x84) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x7c, &(0x7f0000000000)=r10, 0x62) sendto$inet6(r10, &(0x7f00000003c0)="298095f4cf5704f7c26676c5be4d70cd0ebb55237cc110b7cd698966b08aa573904fb39dc12a13ec5e2882a5a0260bd0a478b229d05b9e5098073ad3494a8fdc2cd63909eb2a5ebce50f78a64bc5d29e11765a8dc92b914e071bfcec371fc8823e1fabf6e7d8eef0cab5393b7dd202d585ec05dd899e605013c1a77eefdd669a91649d307f61b70bf87c5bf3182b8d63003d84ee554f26194b94e5281a41a91458186ef9086155144254945cade69adcec4ae90e872f90fac4be6b", 0xbb, 0x40044, &(0x7f0000000480)={0xa, 0x4e21, 0x6, @mcast2, 0xffff7fff}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0x3, 0x10}, {0x9, 0x1}}, ["", "", "", "", ""]}, 0x24}}, 0x240400c0) 274.473616ms ago: executing program 3 (id=3246): socket(0x10, 0x803, 0x0) unshare(0x60600) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000000)) 255.320359ms ago: executing program 4 (id=3247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @f={0x4, 0x3, 0x2, 0x80, {0x9, 0x1, '/'}, 0x1}}, 0xb) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) close(0x3) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r10, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x4000404) sendto$inet6(r7, &(0x7f00000000c0)="9fde5198888665f9c9534d7a75f82bff5aaa7590ef04d8434308053c4044b2be0e0c48ed217c438e772b9a9dfecce18decc1481d7d6c990beeee98456f25a36e68f5c7f7fe8827077913122542b80bb23c7ab1259cdf772a7cad246b517475ada4551dda9a32068554132ea412aa712db81151456527fceb92ec513dcb585b92c3bdfa6c9526f5c5f8ee9bbebaa4e44f57de5046014ce5a411ccd14b8f606334112d5515ec26919c", 0xa8, 0x40004, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x800}, 0x0, 0x7ff, 0x1, 0x0, 0x4}}, 0xb8}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28) unshare(0x22020400) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r12, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r13 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$inet_tcp_TLS_TX(r13, 0x6, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "4ca69a9c2b55f55e", "585148ce78fcf8f3dabb2e7bc874f40a", "741bf800", "1812c8fd0468302b"}, 0x28) 0s ago: executing program 3 (id=3248): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r2, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x76, &(0x7f00000006c0)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x34, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x2}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0x2}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x4, "91ec"}]}]}}}}}}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff000000001c0000000c0001", @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[], 0x18}}, 0x20000000) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r12, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300"], 0x38}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0xe8, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r12, 0x40083, 0x602a}, [@IFLA_VF_PORTS={0xc8, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6aa615ab18de08062b53f650bbc5883a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "64149eeaa7d92cc2266f7a9101313add"}, @IFLA_PORT_REQUEST={0x5}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "682251c27768d4dd84a4fcd710cb321b"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x10}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ea01391da3d92a74059be2431754256d"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c46f8588677fd806da2cc75951a8c6ad"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e9d8d05d2f0836588a04ee5ab78e5abe"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc0}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f29eaec22e3eb421f7af2840dff47e63"}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bind$isdn_base(r11, &(0x7f0000000040)={0x22, 0x1, 0x7f, 0xff, 0x81}, 0x6) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 548.480933][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 548.490359][T17237] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.723701][T17239] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.734070][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'. [ 548.743240][T17239] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.753983][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 548.850854][T17237] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.943703][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 549.063050][T17239] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.092046][T17239] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.110841][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 549.238328][T17237] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.326241][T17239] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.336664][T17239] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.651178][T17269] FAULT_INJECTION: forcing a failure. [ 549.651178][T17269] name failslab, interval 1, probability 0, space 0, times 0 [ 549.653140][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.665826][T17269] CPU: 1 UID: 0 PID: 17269 Comm: syz.4.2409 Not tainted syzkaller #0 PREEMPT(full) [ 549.665852][T17269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.665864][T17269] Call Trace: [ 549.665872][T17269] [ 549.665880][T17269] dump_stack_lvl+0x189/0x250 [ 549.665909][T17269] ? __pfx____ratelimit+0x10/0x10 [ 549.665936][T17269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.665959][T17269] ? __pfx__printk+0x10/0x10 [ 549.665991][T17269] ? __pfx___might_resched+0x10/0x10 [ 549.666015][T17269] should_fail_ex+0x414/0x560 [ 549.666045][T17269] should_failslab+0xa8/0x100 [ 549.666073][T17269] __kmalloc_cache_noprof+0x70/0x3d0 [ 549.666097][T17269] ? ovs_nla_get_identifier+0x72/0xd0 [ 549.666121][T17269] ovs_nla_get_identifier+0x72/0xd0 [ 549.666142][T17269] ovs_flow_cmd_new+0x436/0xd80 [ 549.666165][T17269] ? stack_depot_save_flags+0x40/0x860 [ 549.666198][T17269] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 549.666312][T17269] ? __nla_parse+0x40/0x60 [ 549.666353][T17269] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 549.666384][T17269] genl_family_rcv_msg_doit+0x212/0x300 [ 549.666413][T17269] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 549.666450][T17269] ? bpf_lsm_capable+0x9/0x20 [ 549.666473][T17269] ? security_capable+0x7e/0x2e0 [ 549.666506][T17269] genl_rcv_msg+0x60e/0x790 [ 549.666535][T17269] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.666555][T17269] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 549.666583][T17269] ? __asan_memcpy+0x40/0x70 [ 549.666609][T17269] ? __pfx_ref_tracker_free+0x10/0x10 [ 549.666643][T17269] netlink_rcv_skb+0x205/0x470 [ 549.666667][T17269] ? __lock_acquire+0xab9/0xd20 [ 549.666694][T17269] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.666717][T17269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 549.666764][T17269] ? down_read+0x1ad/0x2e0 [ 549.666786][T17269] genl_rcv+0x28/0x40 [ 549.666803][T17269] netlink_unicast+0x82f/0x9e0 [ 549.666837][T17269] ? __pfx_netlink_unicast+0x10/0x10 [ 549.666863][T17269] ? netlink_sendmsg+0x642/0xb30 [ 549.666888][T17269] ? skb_put+0x11b/0x210 [ 549.666909][T17269] netlink_sendmsg+0x805/0xb30 [ 549.666946][T17269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.666977][T17269] ? aa_sock_msg_perm+0xf1/0x1d0 [ 549.667007][T17269] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 549.667027][T17269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.667054][T17269] __sock_sendmsg+0x219/0x270 [ 549.667081][T17269] ____sys_sendmsg+0x505/0x830 [ 549.667107][T17269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.667138][T17269] ? import_iovec+0x74/0xa0 [ 549.667163][T17269] ___sys_sendmsg+0x21f/0x2a0 [ 549.667186][T17269] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.667247][T17269] ? __fget_files+0x2a/0x420 [ 549.667273][T17269] ? __fget_files+0x3a0/0x420 [ 549.667311][T17269] __x64_sys_sendmsg+0x19b/0x260 [ 549.667341][T17269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.667372][T17269] ? __pfx_ksys_write+0x10/0x10 [ 549.667393][T17269] ? rcu_is_watching+0x15/0xb0 [ 549.667418][T17269] ? do_syscall_64+0xbe/0x3b0 [ 549.667448][T17269] do_syscall_64+0xfa/0x3b0 [ 549.667472][T17269] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.667496][T17269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.667514][T17269] ? clear_bhb_loop+0x60/0xb0 [ 549.667537][T17269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.667555][T17269] RIP: 0033:0x7f9cbb18ebe9 [ 549.667572][T17269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.667589][T17269] RSP: 002b:00007f9cbbf5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.667610][T17269] RAX: ffffffffffffffda RBX: 00007f9cbb3b5fa0 RCX: 00007f9cbb18ebe9 [ 549.667624][T17269] RDX: 000000002000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 549.667637][T17269] RBP: 00007f9cbbf5d090 R08: 0000000000000000 R09: 0000000000000000 [ 549.667649][T17269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 549.667660][T17269] R13: 00007f9cbb3b6038 R14: 00007f9cbb3b5fa0 R15: 00007ffe3cc6a498 [ 549.667692][T17269] [ 549.984426][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 550.118350][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.204882][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.233487][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.761509][T17302] tipc: Enabled bearer , priority 0 [ 550.782460][T17302] syzkaller0: entered promiscuous mode [ 550.789614][T17302] syzkaller0: entered allmulticast mode [ 550.841383][T17302] tipc: Resetting bearer [ 550.977582][T17311] __nla_validate_parse: 7 callbacks suppressed [ 550.977603][T17311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2424'. [ 551.016414][T17301] tipc: Resetting bearer [ 551.023694][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 551.035226][T17314] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2424'. [ 551.046956][T17301] tipc: Disabling bearer [ 551.147008][T17316] unknown channel width for channel at 909000KHz? [ 551.161762][T17316] unknown channel width for channel at 909000KHz? [ 551.178650][T17316] unknown channel width for channel at 909000KHz? [ 551.248417][T17317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2425'. [ 551.380209][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 551.446717][T17327] 8021q: VLANs not supported on vxcan1 [ 551.470455][T17329] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 551.610782][ T754] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.622428][ T754] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.665655][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.686600][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.751509][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.803839][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.839892][T17345] FAULT_INJECTION: forcing a failure. [ 551.839892][T17345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.858630][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.869231][T17345] CPU: 0 UID: 0 PID: 17345 Comm: syz.0.2436 Not tainted syzkaller #0 PREEMPT(full) [ 551.869262][T17345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.869274][T17345] Call Trace: [ 551.869283][T17345] [ 551.869291][T17345] dump_stack_lvl+0x189/0x250 [ 551.869320][T17345] ? __pfx____ratelimit+0x10/0x10 [ 551.869349][T17345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.869373][T17345] ? __pfx__printk+0x10/0x10 [ 551.869402][T17345] ? __might_fault+0xb0/0x130 [ 551.869443][T17345] should_fail_ex+0x414/0x560 [ 551.869476][T17345] _copy_from_iter+0x1db/0x16f0 [ 551.869501][T17345] ? rcu_is_watching+0x15/0xb0 [ 551.869525][T17345] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 551.869563][T17345] ? __pfx__copy_from_iter+0x10/0x10 [ 551.869587][T17345] ? __build_skb_around+0x257/0x3e0 [ 551.869621][T17345] ? netlink_sendmsg+0x642/0xb30 [ 551.869649][T17345] ? skb_put+0x11b/0x210 [ 551.869672][T17345] netlink_sendmsg+0x6b2/0xb30 [ 551.869713][T17345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.869745][T17345] ? aa_sock_msg_perm+0xf1/0x1d0 [ 551.869778][T17345] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 551.869799][T17345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.869830][T17345] __sock_sendmsg+0x219/0x270 [ 551.869859][T17345] ____sys_sendmsg+0x505/0x830 [ 551.869888][T17345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.869919][T17345] ? import_iovec+0x74/0xa0 [ 551.869945][T17345] ___sys_sendmsg+0x21f/0x2a0 [ 551.869970][T17345] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.870032][T17345] ? __fget_files+0x2a/0x420 [ 551.870060][T17345] ? __fget_files+0x3a0/0x420 [ 551.870102][T17345] __x64_sys_sendmsg+0x19b/0x260 [ 551.870127][T17345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.870160][T17345] ? __pfx_ksys_write+0x10/0x10 [ 551.870184][T17345] ? rcu_is_watching+0x15/0xb0 [ 551.870208][T17345] ? do_syscall_64+0xbe/0x3b0 [ 551.870240][T17345] do_syscall_64+0xfa/0x3b0 [ 551.870267][T17345] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.870293][T17345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.870312][T17345] ? clear_bhb_loop+0x60/0xb0 [ 551.870336][T17345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.870355][T17345] RIP: 0033:0x7f9b4af8ebe9 [ 551.870374][T17345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.870393][T17345] RSP: 002b:00007f9b491f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.870416][T17345] RAX: ffffffffffffffda RBX: 00007f9b4b1b5fa0 RCX: 00007f9b4af8ebe9 [ 551.870432][T17345] RDX: 0000000000000084 RSI: 0000200000000600 RDI: 0000000000000003 [ 551.870446][T17345] RBP: 00007f9b491f6090 R08: 0000000000000000 R09: 0000000000000000 [ 551.870459][T17345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.870471][T17345] R13: 00007f9b4b1b6038 R14: 00007f9b4b1b5fa0 R15: 00007ffec4bfced8 [ 551.870506][T17345] [ 551.883703][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.073690][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.170803][T17358] validate_nla: 2 callbacks suppressed [ 552.170822][T17358] netlink: 'syz.1.2437': attribute type 5 has an invalid length. [ 552.220155][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 552.221866][T17357] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2440'. [ 552.362116][T17364] tipc: Enabling of bearer rejected, failed to enable media [ 552.436999][T17365] netlink: 'syz.2.2440': attribute type 5 has an invalid length. [ 552.607694][T17378] netlink: 'syz.1.2444': attribute type 3 has an invalid length. [ 552.772221][T17380] netlink: 'syz.1.2444': attribute type 1 has an invalid length. [ 552.811162][T17380] netlink: 'syz.1.2444': attribute type 2 has an invalid length. [ 552.845626][T17380] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.2444'. [ 552.920426][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'. [ 553.103685][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 553.239805][T17405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2451'. [ 553.540012][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2455'. [ 553.671302][T17422] FAULT_INJECTION: forcing a failure. [ 553.671302][T17422] name failslab, interval 1, probability 0, space 0, times 0 [ 553.754544][T17422] CPU: 1 UID: 0 PID: 17422 Comm: syz.4.2456 Not tainted syzkaller #0 PREEMPT(full) [ 553.754574][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.754586][T17422] Call Trace: [ 553.754596][T17422] [ 553.754606][T17422] dump_stack_lvl+0x189/0x250 [ 553.754637][T17422] ? __pfx____ratelimit+0x10/0x10 [ 553.754667][T17422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.754691][T17422] ? __pfx__printk+0x10/0x10 [ 553.754726][T17422] ? __pfx___might_resched+0x10/0x10 [ 553.754744][T17422] ? fs_reclaim_acquire+0x7d/0x100 [ 553.754781][T17422] should_fail_ex+0x414/0x560 [ 553.754814][T17422] should_failslab+0xa8/0x100 [ 553.754844][T17422] __kmalloc_cache_noprof+0x70/0x3d0 [ 553.754871][T17422] ? sctp_transport_new+0x7e/0x640 [ 553.754892][T17422] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 553.754924][T17422] sctp_transport_new+0x7e/0x640 [ 553.754950][T17422] sctp_assoc_add_peer+0x260/0x13b0 [ 553.754973][T17422] ? sctp_bind_addr_copy+0x380/0x3c0 [ 553.755005][T17422] sctp_connect_new_asoc+0x30a/0x690 [ 553.755030][T17422] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 553.755058][T17422] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 553.755082][T17422] ? security_sctp_bind_connect+0x7e/0x2e0 [ 553.755111][T17422] sctp_sendmsg+0x155c/0x2810 [ 553.755153][T17422] ? __pfx_sctp_sendmsg+0x10/0x10 [ 553.755186][T17422] ? aa_sk_perm+0x81e/0x950 [ 553.755222][T17422] ? __pfx_aa_sk_perm+0x10/0x10 [ 553.755253][T17422] ? sock_rps_record_flow+0x19/0x410 [ 553.755282][T17422] ? inet_sendmsg+0x2f4/0x370 [ 553.755311][T17422] __sock_sendmsg+0x19c/0x270 [ 553.755340][T17422] __sys_sendto+0x3bd/0x520 [ 553.755373][T17422] ? __pfx___sys_sendto+0x10/0x10 [ 553.755399][T17422] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 553.755451][T17422] ? __fget_files+0x3a0/0x420 [ 553.755492][T17422] ? ksys_write+0x22a/0x250 [ 553.755520][T17422] ? __pfx_ksys_write+0x10/0x10 [ 553.755542][T17422] ? rcu_is_watching+0x15/0xb0 [ 553.755569][T17422] __x64_sys_sendto+0xde/0x100 [ 553.755601][T17422] do_syscall_64+0xfa/0x3b0 [ 553.755626][T17422] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.755653][T17422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.755673][T17422] ? clear_bhb_loop+0x60/0xb0 [ 553.755699][T17422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.755719][T17422] RIP: 0033:0x7f9cbb18ebe9 [ 553.755738][T17422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.755756][T17422] RSP: 002b:00007f9cbbf5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 553.755780][T17422] RAX: ffffffffffffffda RBX: 00007f9cbb3b5fa0 RCX: 00007f9cbb18ebe9 [ 553.755795][T17422] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 553.755808][T17422] RBP: 00007f9cbbf5d090 R08: 000020000005ffe4 R09: 000000000000001c [ 553.755822][T17422] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 553.755834][T17422] R13: 00007f9cbb3b6038 R14: 00007f9cbb3b5fa0 R15: 00007ffe3cc6a498 [ 553.755867][T17422] [ 553.796607][T17431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.077751][T17431] FAULT_INJECTION: forcing a failure. [ 554.077751][T17431] name failslab, interval 1, probability 0, space 0, times 0 [ 554.090958][T17431] CPU: 0 UID: 0 PID: 17431 Comm: syz.3.2458 Not tainted syzkaller #0 PREEMPT(full) [ 554.090989][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.091002][T17431] Call Trace: [ 554.091011][T17431] [ 554.091020][T17431] dump_stack_lvl+0x189/0x250 [ 554.091050][T17431] ? __pfx____ratelimit+0x10/0x10 [ 554.091079][T17431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.091103][T17431] ? __pfx__printk+0x10/0x10 [ 554.091138][T17431] ? __pfx___might_resched+0x10/0x10 [ 554.091157][T17431] ? fs_reclaim_acquire+0x7d/0x100 [ 554.091194][T17431] should_fail_ex+0x414/0x560 [ 554.091240][T17431] should_failslab+0xa8/0x100 [ 554.091270][T17431] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 554.091298][T17431] ? __alloc_skb+0x112/0x2d0 [ 554.091334][T17431] __alloc_skb+0x112/0x2d0 [ 554.091369][T17431] netlink_ack+0x146/0xa50 [ 554.091395][T17431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.091440][T17431] netlink_rcv_skb+0x28c/0x470 [ 554.091465][T17431] ? __lock_acquire+0xab9/0xd20 [ 554.091495][T17431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.091521][T17431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 554.091573][T17431] ? down_read+0x1ad/0x2e0 [ 554.091596][T17431] genl_rcv+0x28/0x40 [ 554.091616][T17431] netlink_unicast+0x82f/0x9e0 [ 554.091654][T17431] ? __pfx_netlink_unicast+0x10/0x10 [ 554.091682][T17431] ? netlink_sendmsg+0x642/0xb30 [ 554.091710][T17431] ? skb_put+0x11b/0x210 [ 554.091734][T17431] netlink_sendmsg+0x805/0xb30 [ 554.091783][T17431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.091816][T17431] ? aa_sock_msg_perm+0xf1/0x1d0 [ 554.091850][T17431] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.091872][T17431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.091902][T17431] __sock_sendmsg+0x219/0x270 [ 554.091932][T17431] ____sys_sendmsg+0x505/0x830 [ 554.091961][T17431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.091994][T17431] ? import_iovec+0x74/0xa0 [ 554.092022][T17431] ___sys_sendmsg+0x21f/0x2a0 [ 554.092046][T17431] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.092121][T17431] ? __fget_files+0x2a/0x420 [ 554.092150][T17431] ? __fget_files+0x3a0/0x420 [ 554.092193][T17431] __x64_sys_sendmsg+0x19b/0x260 [ 554.092225][T17431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 554.092259][T17431] ? __pfx_ksys_write+0x10/0x10 [ 554.092283][T17431] ? rcu_is_watching+0x15/0xb0 [ 554.092310][T17431] ? do_syscall_64+0xbe/0x3b0 [ 554.092344][T17431] do_syscall_64+0xfa/0x3b0 [ 554.092371][T17431] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.092397][T17431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.092418][T17431] ? clear_bhb_loop+0x60/0xb0 [ 554.092444][T17431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.092462][T17431] RIP: 0033:0x7f6a9a58ebe9 [ 554.092481][T17431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.092499][T17431] RSP: 002b:00007f6a9b422038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.092522][T17431] RAX: ffffffffffffffda RBX: 00007f6a9a7b5fa0 RCX: 00007f6a9a58ebe9 [ 554.092538][T17431] RDX: 000000002000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 554.092552][T17431] RBP: 00007f6a9b422090 R08: 0000000000000000 R09: 0000000000000000 [ 554.092565][T17431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 554.092578][T17431] R13: 00007f6a9a7b6038 R14: 00007f6a9a7b5fa0 R15: 00007fffb2f306d8 [ 554.092613][T17431] [ 554.422963][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 554.461637][T17441] netlink: 'syz.0.2465': attribute type 23 has an invalid length. [ 555.423680][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 555.897718][T17500] 0ªX¹¦À: renamed from caif0 [ 555.905549][T17500] 0ªX¹¦À: entered allmulticast mode [ 555.910859][T17500] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 556.110466][T17503] netlink: 'syz.2.2484': attribute type 8 has an invalid length. [ 556.245604][T17512] FAULT_INJECTION: forcing a failure. [ 556.245604][T17512] name failslab, interval 1, probability 0, space 0, times 0 [ 556.270160][T17512] CPU: 1 UID: 0 PID: 17512 Comm: syz.2.2488 Not tainted syzkaller #0 PREEMPT(full) [ 556.270191][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.270205][T17512] Call Trace: [ 556.270213][T17512] [ 556.270222][T17512] dump_stack_lvl+0x189/0x250 [ 556.270265][T17512] ? __pfx____ratelimit+0x10/0x10 [ 556.270296][T17512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.270322][T17512] ? __pfx__printk+0x10/0x10 [ 556.270367][T17512] should_fail_ex+0x414/0x560 [ 556.270400][T17512] should_failslab+0xa8/0x100 [ 556.270432][T17512] __kmalloc_cache_noprof+0x70/0x3d0 [ 556.270459][T17512] ? sctp_add_bind_addr+0x8c/0x370 [ 556.270491][T17512] sctp_add_bind_addr+0x8c/0x370 [ 556.270532][T17512] sctp_copy_local_addr_list+0x30b/0x4e0 [ 556.270564][T17512] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 556.270591][T17512] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 556.270624][T17512] ? sctp_v4_is_any+0x35/0x60 [ 556.270650][T17512] ? sctp_copy_one_addr+0x93/0x360 [ 556.270681][T17512] sctp_bind_addr_copy+0x189/0x3c0 [ 556.270720][T17512] sctp_connect_new_asoc+0x2e0/0x690 [ 556.270745][T17512] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 556.270763][T17512] ? __local_bh_enable_ip+0x12d/0x1c0 [ 556.270795][T17512] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 556.270819][T17512] ? security_sctp_bind_connect+0x7e/0x2e0 [ 556.270850][T17512] sctp_sendmsg+0x155c/0x2810 [ 556.270897][T17512] ? __pfx_sctp_sendmsg+0x10/0x10 [ 556.270932][T17512] ? aa_sk_perm+0x81e/0x950 [ 556.270969][T17512] ? __pfx_aa_sk_perm+0x10/0x10 [ 556.271004][T17512] ? sock_rps_record_flow+0x19/0x410 [ 556.271033][T17512] ? inet_sendmsg+0x2f4/0x370 [ 556.271064][T17512] __sock_sendmsg+0x19c/0x270 [ 556.271095][T17512] ____sys_sendmsg+0x52d/0x830 [ 556.271125][T17512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.271160][T17512] ? import_iovec+0x74/0xa0 [ 556.271190][T17512] ___sys_sendmsg+0x21f/0x2a0 [ 556.271215][T17512] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.271294][T17512] ? __fget_files+0x2a/0x420 [ 556.271323][T17512] ? __fget_files+0x3a0/0x420 [ 556.271367][T17512] __sys_sendmmsg+0x227/0x430 [ 556.271397][T17512] ? __pfx___sys_sendmmsg+0x10/0x10 [ 556.271416][T17512] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 556.271482][T17512] ? ksys_write+0x22a/0x250 [ 556.271509][T17512] ? __pfx_ksys_write+0x10/0x10 [ 556.271529][T17512] ? rcu_is_watching+0x15/0xb0 [ 556.271558][T17512] __x64_sys_sendmmsg+0xa0/0xc0 [ 556.271583][T17512] do_syscall_64+0xfa/0x3b0 [ 556.271611][T17512] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.271638][T17512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.271659][T17512] ? clear_bhb_loop+0x60/0xb0 [ 556.271685][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.271705][T17512] RIP: 0033:0x7ff395d8ebe9 [ 556.271725][T17512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.271750][T17512] RSP: 002b:00007ff396bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 556.271776][T17512] RAX: ffffffffffffffda RBX: 00007ff395fb5fa0 RCX: 00007ff395d8ebe9 [ 556.271792][T17512] RDX: 0000000000000001 RSI: 0000200000007840 RDI: 0000000000000003 [ 556.271806][T17512] RBP: 00007ff396bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 556.271819][T17512] R10: 0000000000004081 R11: 0000000000000246 R12: 0000000000000002 [ 556.271833][T17512] R13: 00007ff395fb6038 R14: 00007ff395fb5fa0 R15: 00007ffde5487f38 [ 556.271871][T17512] [ 556.463664][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 556.602437][T17518] __nla_validate_parse: 3 callbacks suppressed [ 556.602459][T17518] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2489'. [ 556.691514][T17517] netlink: 'syz.2.2490': attribute type 11 has an invalid length. [ 556.852712][T17523] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2493'. [ 556.896558][T17526] netlink: 'syz.0.2492': attribute type 3 has an invalid length. [ 557.077165][T17530] netlink: 'syz.2.2494': attribute type 3 has an invalid length. [ 557.096510][T17532] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2495'. [ 557.114212][T17532] IPv6: NLM_F_CREATE should be specified when creating new route [ 557.381848][T17538] netlink: 'syz.3.2498': attribute type 8 has an invalid length. [ 557.503678][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 557.754972][T17550] syz_tun: entered promiscuous mode [ 557.769818][T17550] macsec1: entered allmulticast mode [ 557.782348][T17550] syz_tun: entered allmulticast mode [ 557.801706][T17550] syz_tun: left allmulticast mode [ 557.810901][T17550] syz_tun: left promiscuous mode [ 557.969113][T17553] netlink: 'syz.0.2504': attribute type 3 has an invalid length. [ 557.988772][T17553] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.086622][T17553] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.119547][T17556] netlink: 'syz.2.2503': attribute type 8 has an invalid length. [ 558.201375][T17553] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.241930][T17558] netlink: 'syz.2.2505': attribute type 2 has an invalid length. [ 558.250354][T17558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2505'. [ 558.262317][T17558] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 558.341286][T17553] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.543676][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 558.651835][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.668540][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.751987][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.848799][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.895646][T17573] netlink: 'syz.2.2512': attribute type 8 has an invalid length. [ 558.956574][T17579] netlink: 'syz.3.2515': attribute type 3 has an invalid length. [ 558.977867][T17576] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2514'. [ 559.013878][T17580] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2514'. [ 559.143447][T17592] netlink: 'syz.2.2516': attribute type 3 has an invalid length. [ 559.583825][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 560.263115][T17617] netlink: 'syz.4.2526': attribute type 8 has an invalid length. [ 560.370941][T17621] tipc: Enabled bearer , priority 0 [ 560.379316][T17621] syzkaller0: entered promiscuous mode [ 560.388792][T17621] syzkaller0: entered allmulticast mode [ 560.447833][T17618] tipc: Resetting bearer [ 560.489844][T17613] "syz.3.2525" (17613) uses obsolete ecb(arc4) skcipher [ 560.502661][T17618] tipc: Disabling bearer [ 560.574859][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'. [ 560.623801][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 560.822489][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2533'. [ 560.838097][T17637] : entered promiscuous mode [ 560.877458][T17641] netlink: 'syz.2.2533': attribute type 11 has an invalid length. [ 560.890576][T17626] netlink: del zone limit has 4 unknown bytes [ 561.382675][T17650] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 561.971190][T17668] netlink: 'syz.2.2539': attribute type 8 has an invalid length. [ 562.166466][T17675] FAULT_INJECTION: forcing a failure. [ 562.166466][T17675] name failslab, interval 1, probability 0, space 0, times 0 [ 562.179993][T17675] CPU: 1 UID: 0 PID: 17675 Comm: syz.2.2543 Not tainted syzkaller #0 PREEMPT(full) [ 562.180023][T17675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.180035][T17675] Call Trace: [ 562.180044][T17675] [ 562.180053][T17675] dump_stack_lvl+0x189/0x250 [ 562.180083][T17675] ? __pfx____ratelimit+0x10/0x10 [ 562.180113][T17675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.180138][T17675] ? __pfx__printk+0x10/0x10 [ 562.180174][T17675] ? __pfx___might_resched+0x10/0x10 [ 562.180201][T17675] should_fail_ex+0x414/0x560 [ 562.180235][T17675] should_failslab+0xa8/0x100 [ 562.180268][T17675] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 562.180297][T17675] ? __alloc_skb+0x112/0x2d0 [ 562.180324][T17675] ? __pfx___mutex_trylock_common+0x10/0x10 [ 562.180352][T17675] __alloc_skb+0x112/0x2d0 [ 562.180387][T17675] netlink_dump+0x1b7/0xe90 [ 562.180433][T17675] ? __netlink_lookup+0xbd/0x810 [ 562.180457][T17675] ? __pfx_netlink_dump+0x10/0x10 [ 562.180482][T17675] ? __netlink_lookup+0x752/0x810 [ 562.180521][T17675] ? netlink_lookup+0x30/0x200 [ 562.180548][T17675] ? netlink_lookup+0x30/0x200 [ 562.180571][T17675] ? netlink_lookup+0x30/0x200 [ 562.180606][T17675] __netlink_dump_start+0x5cb/0x7e0 [ 562.180647][T17675] ctnetlink_get_ct_dying+0x11c/0x190 [ 562.180669][T17675] ? __pfx___mutex_lock+0x10/0x10 [ 562.180699][T17675] ? __pfx_ctnetlink_get_ct_dying+0x10/0x10 [ 562.180721][T17675] ? __pfx_ctnetlink_dump_dying+0x10/0x10 [ 562.180742][T17675] ? __pfx_ctnetlink_done_list+0x10/0x10 [ 562.180784][T17675] nfnetlink_rcv_msg+0xb4a/0x1130 [ 562.180813][T17675] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 562.180868][T17675] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 562.180950][T17675] netlink_rcv_skb+0x205/0x470 [ 562.180981][T17675] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 562.181008][T17675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 562.181050][T17675] ? bpf_lsm_capable+0x9/0x20 [ 562.181077][T17675] ? security_capable+0x7e/0x2e0 [ 562.181115][T17675] nfnetlink_rcv+0x26a/0x2520 [ 562.181145][T17675] ? __dev_queue_xmit+0x1d79/0x3b50 [ 562.181184][T17675] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 562.181209][T17675] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.181238][T17675] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 562.181261][T17675] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 562.181287][T17675] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 562.181321][T17675] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 562.181367][T17675] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 562.181417][T17675] ? rcu_is_watching+0x15/0xb0 [ 562.181441][T17675] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 562.181470][T17675] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 562.181494][T17675] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.181532][T17675] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.181570][T17675] netlink_unicast+0x82f/0x9e0 [ 562.181608][T17675] ? __pfx_netlink_unicast+0x10/0x10 [ 562.181636][T17675] ? netlink_sendmsg+0x642/0xb30 [ 562.181662][T17675] ? skb_put+0x11b/0x210 [ 562.181687][T17675] netlink_sendmsg+0x805/0xb30 [ 562.181727][T17675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.181761][T17675] ? aa_sock_msg_perm+0xf1/0x1d0 [ 562.181794][T17675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 562.181816][T17675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.181847][T17675] __sock_sendmsg+0x219/0x270 [ 562.181877][T17675] ____sys_sendmsg+0x505/0x830 [ 562.181907][T17675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.181941][T17675] ? import_iovec+0x74/0xa0 [ 562.181970][T17675] ___sys_sendmsg+0x21f/0x2a0 [ 562.181995][T17675] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.182061][T17675] ? __fget_files+0x2a/0x420 [ 562.182089][T17675] ? __fget_files+0x3a0/0x420 [ 562.182132][T17675] __x64_sys_sendmsg+0x19b/0x260 [ 562.182156][T17675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 562.182308][T17675] ? __pfx_ksys_write+0x10/0x10 [ 562.182332][T17675] ? rcu_is_watching+0x15/0xb0 [ 562.182356][T17675] ? do_syscall_64+0xbe/0x3b0 [ 562.182399][T17675] do_syscall_64+0xfa/0x3b0 [ 562.182426][T17675] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.182453][T17675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.182473][T17675] ? clear_bhb_loop+0x60/0xb0 [ 562.182499][T17675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.182519][T17675] RIP: 0033:0x7ff395d8ebe9 [ 562.182541][T17675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.182558][T17675] RSP: 002b:00007ff396bfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.182581][T17675] RAX: ffffffffffffffda RBX: 00007ff395fb5fa0 RCX: 00007ff395d8ebe9 [ 562.182596][T17675] RDX: 0000000000000084 RSI: 0000200000000600 RDI: 0000000000000003 [ 562.182610][T17675] RBP: 00007ff396bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 562.182623][T17675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.182636][T17675] R13: 00007ff395fb6038 R14: 00007ff395fb5fa0 R15: 00007ffde5487f38 [ 562.182671][T17675] [ 563.122531][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.205727][T17680] tipc: Enabled bearer , priority 0 [ 563.256925][T17679] validate_nla: 1 callbacks suppressed [ 563.256950][T17679] netlink: 'syz.4.2545': attribute type 1 has an invalid length. [ 563.274050][T17684] tipc: Enabling of bearer rejected, failed to enable media [ 563.405397][T17683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2545'. [ 563.573424][T17687] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.601109][T17687] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.642944][T17688] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 563.652295][T17688] team0: Port device batadv1 added [ 563.667758][T17689] syzkaller0: entered promiscuous mode [ 563.673288][T17689] syzkaller0: entered allmulticast mode [ 563.721052][T17687] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.731465][T17687] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.768342][T17678] tipc: Resetting bearer [ 563.829401][T17678] tipc: Disabling bearer [ 563.830556][T17704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.863125][T17687] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.873151][T17687] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.890964][T17705] sctp: [Deprecated]: syz.0.2551 (pid 17705) Use of int in max_burst socket option. [ 563.890964][T17705] Use struct sctp_assoc_value instead [ 564.006631][T17687] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.018879][T17687] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.141859][T17709] netlink: 'syz.3.2553': attribute type 8 has an invalid length. [ 564.241251][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.251829][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.291970][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.318713][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.332531][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 564.361119][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.392363][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.414013][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.433807][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.486209][T17715] block nbd0: shutting down sockets [ 564.891478][T17731] netlink: 'syz.2.2561': attribute type 10 has an invalid length. [ 564.950008][T17733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 564.957401][T17733] IPv6: NLM_F_CREATE should be set when creating new route [ 564.964703][T17733] IPv6: NLM_F_CREATE should be set when creating new route [ 565.013888][T17733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.036172][T17733] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2563'. [ 565.093862][T17738] netlink: 'syz.2.2565': attribute type 8 has an invalid length. [ 565.941296][T17762] netlink: 'syz.4.2572': attribute type 10 has an invalid length. [ 566.182208][T17771] netlink: 'syz.2.2577': attribute type 8 has an invalid length. [ 566.808621][T17784] netlink: 'syz.3.2582': attribute type 3 has an invalid length. [ 566.967310][T17788] netlink: 'syz.0.2584': attribute type 3 has an invalid length. [ 567.220541][T17791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2586'. [ 567.861033][T17804] netlink: 'syz.4.2592': attribute type 3 has an invalid length. [ 568.512293][T17816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2595'. [ 569.069000][T17830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2601'. [ 569.277990][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2603'. [ 569.642051][T17855] netlink: 'syz.1.2609': attribute type 2 has an invalid length. [ 569.685728][T17855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2609'. [ 569.690481][T17854] Bluetooth: MGMT ver 1.23 [ 569.760212][T17860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.797686][T17860] FAULT_INJECTION: forcing a failure. [ 569.797686][T17860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.876690][T17860] CPU: 0 UID: 0 PID: 17860 Comm: syz.3.2610 Not tainted syzkaller #0 PREEMPT(full) [ 569.876722][T17860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.876735][T17860] Call Trace: [ 569.876743][T17860] [ 569.876753][T17860] dump_stack_lvl+0x189/0x250 [ 569.876784][T17860] ? __pfx____ratelimit+0x10/0x10 [ 569.876814][T17860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.876838][T17860] ? __pfx__printk+0x10/0x10 [ 569.876868][T17860] ? __might_fault+0xb0/0x130 [ 569.876910][T17860] should_fail_ex+0x414/0x560 [ 569.876943][T17860] _copy_from_user+0x2d/0xb0 [ 569.876966][T17860] kstrtouint_from_user+0xc4/0x170 [ 569.877000][T17860] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 569.877048][T17860] proc_fail_nth_write+0x88/0x200 [ 569.877073][T17860] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 569.877105][T17860] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 569.877131][T17860] vfs_write+0x27b/0xb30 [ 569.877169][T17860] ? __pfx_vfs_write+0x10/0x10 [ 569.877199][T17860] ? __fget_files+0x2a/0x420 [ 569.877234][T17860] ? __fget_files+0x3a0/0x420 [ 569.877262][T17860] ? __fget_files+0x2a/0x420 [ 569.877313][T17860] ksys_write+0x145/0x250 [ 569.877343][T17860] ? __pfx_ksys_write+0x10/0x10 [ 569.877366][T17860] ? rcu_is_watching+0x15/0xb0 [ 569.877393][T17860] ? do_syscall_64+0xbe/0x3b0 [ 569.877428][T17860] do_syscall_64+0xfa/0x3b0 [ 569.877455][T17860] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.877482][T17860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.877503][T17860] ? clear_bhb_loop+0x60/0xb0 [ 569.877528][T17860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.877546][T17860] RIP: 0033:0x7f6a9a58d69f [ 569.877565][T17860] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 569.877583][T17860] RSP: 002b:00007f6a9b422030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 569.877605][T17860] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a9a58d69f [ 569.877620][T17860] RDX: 0000000000000001 RSI: 00007f6a9b4220a0 RDI: 0000000000000004 [ 569.877633][T17860] RBP: 00007f6a9b422090 R08: 0000000000000000 R09: 0000000000000000 [ 569.877646][T17860] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 569.877658][T17860] R13: 00007f6a9a7b6038 R14: 00007f6a9a7b5fa0 R15: 00007fffb2f306d8 [ 569.877694][T17860] [ 569.964828][T17858] syz_tun: entered promiscuous mode [ 570.097595][T17866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2611'. [ 570.132299][T17858] macsec1: entered allmulticast mode [ 570.138826][T17858] syz_tun: entered allmulticast mode [ 570.153111][T17858] syz_tun: left allmulticast mode [ 570.177076][T17858] syz_tun: left promiscuous mode [ 570.542730][T17872] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 570.548708][T17878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2616'. [ 570.590654][T17880] netlink: 'syz.0.2613': attribute type 3 has an invalid length. [ 570.825381][T17883] netlink: 'syz.4.2617': attribute type 3 has an invalid length. [ 571.164716][T17891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2621'. [ 572.106516][T17902] netlink: 'syz.2.2623': attribute type 3 has an invalid length. [ 572.115541][T17906] netlink: 'syz.1.2626': attribute type 3 has an invalid length. [ 572.193311][T17906] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.298416][T17910] netlink: 'syz.4.2625': attribute type 3 has an invalid length. [ 572.384219][T17913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2627'. [ 572.395567][T17906] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.649864][T17906] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.668249][T17919] netlink: 'syz.3.2630': attribute type 2 has an invalid length. [ 572.832211][T17906] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.836065][T17922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2628'. [ 572.913123][T17925] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2631'. [ 573.187019][ T2959] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.227973][T17933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.260213][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.307368][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.391248][ T754] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.467352][T17919] netlink: 'syz.3.2630': attribute type 4 has an invalid length. [ 573.712621][T17945] __nla_validate_parse: 3 callbacks suppressed [ 573.712644][T17945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2638'. [ 574.000711][T17956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2640'. [ 574.021823][T17958] netlink: 'syz.4.2635': attribute type 3 has an invalid length. [ 574.235684][T17963] netlink: 'syz.2.2643': attribute type 3 has an invalid length. [ 574.276937][T17963] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.307151][T17963] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.508250][T17963] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.557391][T17963] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.767377][T17963] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.778322][T17963] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.879303][T17963] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.890015][T17963] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.935026][T17978] netlink: 'syz.0.2649': attribute type 3 has an invalid length. [ 575.188581][T17978] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.419901][T17988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2653'. [ 575.454758][T17978] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.474261][T17985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2651'. [ 576.361960][T17989] veth3: left promiscuous mode [ 576.372066][T17989] veth5: left promiscuous mode [ 576.382612][T17989] veth7: left promiscuous mode [ 576.390932][T17989] veth9: left promiscuous mode [ 576.413396][T17989] veth11: left promiscuous mode [ 576.422499][T17989] veth13: left promiscuous mode [ 576.432435][T17989] veth15: left promiscuous mode [ 576.441786][T17989] veth17: left promiscuous mode [ 576.448862][T18005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.451638][T17989] veth19: left promiscuous mode [ 576.456183][T18005] IPv6: NLM_F_CREATE should be set when creating new route [ 576.456217][T18005] IPv6: NLM_F_CREATE should be set when creating new route [ 576.456641][T18005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.491003][T17989] veth21: left promiscuous mode [ 576.501708][T17989] veth23: left promiscuous mode [ 576.513413][T17989] veth25: left promiscuous mode [ 576.528119][T17989] veth27: left promiscuous mode [ 576.533500][T17989] veth29: left promiscuous mode [ 576.548320][T17989] veth31: left promiscuous mode [ 576.559967][T17989] veth33: left promiscuous mode [ 576.567434][T17989] veth35: left promiscuous mode [ 576.572795][T17989] veth37: left promiscuous mode [ 576.606947][T17989] veth39: left promiscuous mode [ 576.618774][T17989] veth41: left promiscuous mode [ 576.646940][T17989] veth43: left promiscuous mode [ 576.659351][T17989] veth45: left promiscuous mode [ 576.668455][T17989] veth47: left promiscuous mode [ 576.674036][T17989] veth49: left promiscuous mode [ 576.681703][T17989] veth51: left promiscuous mode [ 576.689787][T17989] veth53: left promiscuous mode [ 576.695730][T17989] veth55: left promiscuous mode [ 576.703161][T17989] veth57: left promiscuous mode [ 576.716366][T17989] veth59: left promiscuous mode [ 576.731264][T17989] veth61: left promiscuous mode [ 576.742747][T17978] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.786725][T17998] netlink: 'syz.1.2654': attribute type 3 has an invalid length. [ 576.821665][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.837403][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.855090][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.877702][T17978] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.941756][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.976632][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.998900][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.047949][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.065578][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.087304][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.105151][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.277250][ T2959] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.303104][ T2959] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.305075][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'. [ 577.392079][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'. [ 577.430494][ T2959] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.476469][T18013] FAULT_INJECTION: forcing a failure. [ 577.476469][T18013] name failslab, interval 1, probability 0, space 0, times 0 [ 577.506418][T18013] CPU: 0 UID: 0 PID: 18013 Comm: syz.3.2660 Not tainted syzkaller #0 PREEMPT(full) [ 577.506448][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.506461][T18013] Call Trace: [ 577.506470][T18013] [ 577.506480][T18013] dump_stack_lvl+0x189/0x250 [ 577.506511][T18013] ? __pfx____ratelimit+0x10/0x10 [ 577.506540][T18013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.506565][T18013] ? __pfx__printk+0x10/0x10 [ 577.506602][T18013] ? __pfx___might_resched+0x10/0x10 [ 577.506621][T18013] ? fs_reclaim_acquire+0x7d/0x100 [ 577.506658][T18013] should_fail_ex+0x414/0x560 [ 577.506691][T18013] ? alloc_netdev_mqs+0x8a0/0x11b0 [ 577.506714][T18013] should_failslab+0xa8/0x100 [ 577.506746][T18013] __kvmalloc_node_noprof+0x161/0x5f0 [ 577.506776][T18013] ? alloc_netdev_mqs+0x8a0/0x11b0 [ 577.506808][T18013] alloc_netdev_mqs+0x8a0/0x11b0 [ 577.506843][T18013] rtnl_create_link+0x31f/0xd10 [ 577.506878][T18013] rtnl_newlink_create+0x25c/0xb00 [ 577.506905][T18013] ? __mutex_lock+0x5b6/0x1360 [ 577.506942][T18013] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 577.506968][T18013] ? __pfx___mutex_lock+0x10/0x10 [ 577.507010][T18013] ? ns_capable+0x8a/0xf0 [ 577.507038][T18013] rtnl_newlink+0x16d6/0x1c70 [ 577.507101][T18013] ? __pfx_rtnl_newlink+0x10/0x10 [ 577.507141][T18013] ? is_bpf_text_address+0x26/0x2b0 [ 577.507180][T18013] ? __lock_acquire+0xab9/0xd20 [ 577.507226][T18013] ? __lock_acquire+0xab9/0xd20 [ 577.507282][T18013] ? is_bpf_text_address+0x26/0x2b0 [ 577.507317][T18013] ? is_bpf_text_address+0x292/0x2b0 [ 577.507345][T18013] ? is_bpf_text_address+0x26/0x2b0 [ 577.507386][T18013] ? __lock_acquire+0xab9/0xd20 [ 577.507455][T18013] ? __pfx_rtnl_newlink+0x10/0x10 [ 577.507483][T18013] rtnetlink_rcv_msg+0x7cc/0xb70 [ 577.507511][T18013] ? __lock_acquire+0xab9/0xd20 [ 577.507543][T18013] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 577.507571][T18013] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.507622][T18013] netlink_rcv_skb+0x205/0x470 [ 577.507650][T18013] ? __lock_acquire+0xab9/0xd20 [ 577.507680][T18013] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.507712][T18013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.507757][T18013] ? netlink_deliver_tap+0x2e/0x1b0 [ 577.507797][T18013] netlink_unicast+0x82f/0x9e0 [ 577.507836][T18013] ? __pfx_netlink_unicast+0x10/0x10 [ 577.507866][T18013] ? netlink_sendmsg+0x642/0xb30 [ 577.507893][T18013] ? skb_put+0x11b/0x210 [ 577.507917][T18013] netlink_sendmsg+0x805/0xb30 [ 577.507960][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.507994][T18013] ? aa_sock_msg_perm+0xf1/0x1d0 [ 577.508028][T18013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.508059][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.508091][T18013] __sock_sendmsg+0x219/0x270 [ 577.508123][T18013] ____sys_sendmsg+0x505/0x830 [ 577.508153][T18013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.508188][T18013] ? import_iovec+0x74/0xa0 [ 577.508218][T18013] ___sys_sendmsg+0x21f/0x2a0 [ 577.508244][T18013] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.508313][T18013] ? __fget_files+0x2a/0x420 [ 577.508342][T18013] ? __fget_files+0x3a0/0x420 [ 577.508386][T18013] __x64_sys_sendmsg+0x19b/0x260 [ 577.508412][T18013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.508447][T18013] ? __pfx_ksys_write+0x10/0x10 [ 577.508471][T18013] ? rcu_is_watching+0x15/0xb0 [ 577.508500][T18013] ? do_syscall_64+0xbe/0x3b0 [ 577.508534][T18013] do_syscall_64+0xfa/0x3b0 [ 577.508560][T18013] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.508587][T18013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.508609][T18013] ? clear_bhb_loop+0x60/0xb0 [ 577.508635][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.508655][T18013] RIP: 0033:0x7f6a9a58ebe9 [ 577.508674][T18013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.508693][T18013] RSP: 002b:00007f6a9b422038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.508716][T18013] RAX: ffffffffffffffda RBX: 00007f6a9a7b5fa0 RCX: 00007f6a9a58ebe9 [ 577.508732][T18013] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 577.508746][T18013] RBP: 00007f6a9b422090 R08: 0000000000000000 R09: 0000000000000000 [ 577.508761][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.508774][T18013] R13: 00007f6a9a7b6038 R14: 00007f6a9a7b5fa0 R15: 00007fffb2f306d8 [ 577.508811][T18013] [ 577.599152][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.323075][T18023] netlink: 'syz.2.2661': attribute type 3 has an invalid length. [ 578.374017][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.590392][T18021] netlink: 'syz.1.2659': attribute type 3 has an invalid length. [ 578.665650][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.752233][T18034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2664'. [ 579.109320][T18039] netlink: 'syz.0.2666': attribute type 1 has an invalid length. [ 579.484356][T18057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2667'. [ 580.041307][T18051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.100002][T18074] netlink: 'syz.4.2674': attribute type 3 has an invalid length. [ 580.485103][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'. [ 580.724873][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2680'. [ 581.018229][T18109] netlink: 'syz.2.2685': attribute type 1 has an invalid length. [ 581.159817][T18114] netlink: 'syz.2.2685': attribute type 10 has an invalid length. [ 581.169448][T18114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2685'. [ 581.284026][T18114] team0: Port device geneve0 added [ 581.290617][T18116] tipc: Enabled bearer , priority 0 [ 581.318921][T18118] macsec2: entered allmulticast mode [ 581.325519][T18118] syz_tun: entered allmulticast mode [ 581.336575][T18118] syz_tun: left allmulticast mode [ 581.502776][T18111] tipc: Resetting bearer [ 581.543207][T18104] tipc: Disabling bearer [ 581.688959][T18126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2690'. [ 581.716035][T18126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2690'. [ 581.777583][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2691'. [ 581.839784][T18130] pimreg: entered allmulticast mode [ 582.039023][T18136] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 582.098827][T18140] netlink: 'syz.2.2694': attribute type 3 has an invalid length. [ 582.131223][T18145] FAULT_INJECTION: forcing a failure. [ 582.131223][T18145] name failslab, interval 1, probability 0, space 0, times 0 [ 582.155179][T18143] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2696'. [ 582.174498][T18145] CPU: 1 UID: 0 PID: 18145 Comm: syz.3.2697 Not tainted syzkaller #0 PREEMPT(full) [ 582.174528][T18145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.174541][T18145] Call Trace: [ 582.174549][T18145] [ 582.174559][T18145] dump_stack_lvl+0x189/0x250 [ 582.174589][T18145] ? __pfx____ratelimit+0x10/0x10 [ 582.174619][T18145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.174650][T18145] ? __pfx__printk+0x10/0x10 [ 582.174686][T18145] ? __pfx___might_resched+0x10/0x10 [ 582.174712][T18145] should_fail_ex+0x414/0x560 [ 582.174745][T18145] should_failslab+0xa8/0x100 [ 582.174776][T18145] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 582.174803][T18145] ? __alloc_skb+0x112/0x2d0 [ 582.174830][T18145] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 582.174864][T18145] __alloc_skb+0x112/0x2d0 [ 582.174899][T18145] pfkey_sendmsg+0x1dd/0x1090 [ 582.174937][T18145] ? __pfx___might_resched+0x10/0x10 [ 582.174955][T18145] ? __lock_acquire+0xab9/0xd20 [ 582.174990][T18145] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 582.175030][T18145] ? aa_sk_perm+0x81e/0x950 [ 582.175064][T18145] ? __pfx_aa_sk_perm+0x10/0x10 [ 582.175090][T18145] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 582.175119][T18145] ? aa_sock_msg_perm+0xf1/0x1d0 [ 582.175152][T18145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 582.175174][T18145] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 582.175214][T18145] __sock_sendmsg+0x219/0x270 [ 582.175244][T18145] ____sys_sendmsg+0x505/0x830 [ 582.175273][T18145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.175305][T18145] ? import_iovec+0x74/0xa0 [ 582.175334][T18145] ___sys_sendmsg+0x21f/0x2a0 [ 582.175359][T18145] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.175425][T18145] ? __fget_files+0x2a/0x420 [ 582.175454][T18145] ? __fget_files+0x3a0/0x420 [ 582.175497][T18145] __x64_sys_sendmsg+0x19b/0x260 [ 582.175523][T18145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.175556][T18145] ? __pfx_ksys_write+0x10/0x10 [ 582.175580][T18145] ? rcu_is_watching+0x15/0xb0 [ 582.175608][T18145] ? do_syscall_64+0xbe/0x3b0 [ 582.175641][T18145] do_syscall_64+0xfa/0x3b0 [ 582.175668][T18145] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.175695][T18145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.175716][T18145] ? clear_bhb_loop+0x60/0xb0 [ 582.175741][T18145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.175759][T18145] RIP: 0033:0x7f6a9a58ebe9 [ 582.175779][T18145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.175796][T18145] RSP: 002b:00007f6a9b422038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.175820][T18145] RAX: ffffffffffffffda RBX: 00007f6a9a7b5fa0 RCX: 00007f6a9a58ebe9 [ 582.175837][T18145] RDX: 0000000000008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 582.175851][T18145] RBP: 00007f6a9b422090 R08: 0000000000000000 R09: 0000000000000000 [ 582.175864][T18145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.175877][T18145] R13: 00007f6a9a7b6038 R14: 00007f6a9a7b5fa0 R15: 00007fffb2f306d8 [ 582.175911][T18145] [ 582.209778][T18147] netlink: 704 bytes leftover after parsing attributes in process `syz.1.2696'. [ 584.338187][T18201] __nla_validate_parse: 2 callbacks suppressed [ 584.338210][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'. [ 584.916160][T18222] batadv_slave_1: entered promiscuous mode [ 585.026417][T18228] netlink: 'syz.0.2725': attribute type 3 has an invalid length. [ 585.037594][T18231] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2723'. [ 585.076295][T18228] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.197624][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2726'. [ 585.249918][T18228] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.355513][T18228] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.441948][T18221] batadv_slave_1: left promiscuous mode [ 585.513443][T18228] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.870039][ T2947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.930914][ T2947] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.991180][T18255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2731'. [ 585.995321][ T2947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.010237][ T2947] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.120199][T18258] sctp: [Deprecated]: syz.1.2731 (pid 18258) Use of int in max_burst socket option deprecated. [ 586.120199][T18258] Use struct sctp_assoc_value instead [ 586.469009][T18274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2738'. [ 586.476647][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2737'. [ 586.568771][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2736'. [ 586.791704][T18291] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2741'. [ 586.911025][T18295] ip6tnl1: entered promiscuous mode [ 586.916831][T18295] ip6tnl1: entered allmulticast mode [ 586.934273][T18295] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 587.011440][T18296] ip6tnl1: entered promiscuous mode [ 587.017076][T18296] ip6tnl1: entered allmulticast mode [ 587.028659][T18296] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 587.120035][T18303] netlink: 'syz.2.2745': attribute type 3 has an invalid length. [ 587.512001][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2750'. [ 587.692996][T18320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2751'. [ 587.816916][T18327] netlink: 'syz.0.2753': attribute type 10 has an invalid length. [ 587.855009][T18328] netlink: 'syz.4.2752': attribute type 3 has an invalid length. [ 588.128746][T18327] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 588.175133][T18327] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 588.324280][T18339] tipc: Enabling of bearer rejected, failed to enable media [ 588.893965][T18353] netlink: 'syz.2.2760': attribute type 8 has an invalid length. [ 589.199456][T18364] tipc: Enabled bearer , priority 0 [ 589.211958][T18360] syzkaller0: entered promiscuous mode [ 589.221506][T18360] syzkaller0: entered allmulticast mode [ 589.323307][T18364] tipc: Resetting bearer [ 589.372868][T18359] tipc: Resetting bearer [ 589.395771][T18359] tipc: Disabling bearer [ 589.412565][T18375] __nla_validate_parse: 4 callbacks suppressed [ 589.412587][T18375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2766'. [ 589.429898][T18376] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2762'. [ 589.608521][T18383] tipc: Enabled bearer , priority 0 [ 589.639504][T18385] tipc: Enabling of bearer rejected, already enabled [ 589.722765][T18389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2770'. [ 589.940140][T18381] tipc: Disabling bearer [ 589.952081][T18394] netlink: 'syz.0.2771': attribute type 2 has an invalid length. [ 589.977993][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2773'. [ 589.979928][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2771'. [ 590.257890][T18398] syz_tun: entered promiscuous mode [ 590.263323][T18398] macsec1: entered allmulticast mode [ 590.268840][T18398] syz_tun: entered allmulticast mode [ 590.280991][T18398] syz_tun: left allmulticast mode [ 590.296878][T18398] syz_tun: left promiscuous mode [ 590.333258][T18411] FAULT_INJECTION: forcing a failure. [ 590.333258][T18411] name failslab, interval 1, probability 0, space 0, times 0 [ 590.349989][T18411] CPU: 0 UID: 0 PID: 18411 Comm: syz.4.2778 Not tainted syzkaller #0 PREEMPT(full) [ 590.350015][T18411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.350025][T18411] Call Trace: [ 590.350033][T18411] [ 590.350040][T18411] dump_stack_lvl+0x189/0x250 [ 590.350065][T18411] ? __pfx____ratelimit+0x10/0x10 [ 590.350089][T18411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.350108][T18411] ? __pfx__printk+0x10/0x10 [ 590.350145][T18411] should_fail_ex+0x414/0x560 [ 590.350171][T18411] should_failslab+0xa8/0x100 [ 590.350198][T18411] __kmalloc_cache_noprof+0x70/0x3d0 [ 590.350220][T18411] ? sctp_add_bind_addr+0x8c/0x370 [ 590.350246][T18411] sctp_add_bind_addr+0x8c/0x370 [ 590.350271][T18411] sctp_copy_local_addr_list+0x30b/0x4e0 [ 590.350296][T18411] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 590.350317][T18411] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 590.350342][T18411] ? sctp_v4_is_any+0x35/0x60 [ 590.350363][T18411] ? sctp_copy_one_addr+0x93/0x360 [ 590.350388][T18411] sctp_bind_addr_copy+0x189/0x3c0 [ 590.350416][T18411] sctp_connect_new_asoc+0x2e0/0x690 [ 590.350435][T18411] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 590.350449][T18411] ? __local_bh_enable_ip+0x12d/0x1c0 [ 590.350473][T18411] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 590.350492][T18411] ? security_sctp_bind_connect+0x7e/0x2e0 [ 590.350522][T18411] sctp_sendmsg+0x155c/0x2810 [ 590.350559][T18411] ? __pfx_sctp_sendmsg+0x10/0x10 [ 590.350587][T18411] ? aa_sk_perm+0x81e/0x950 [ 590.350615][T18411] ? __pfx_aa_sk_perm+0x10/0x10 [ 590.350642][T18411] ? sock_rps_record_flow+0x19/0x410 [ 590.350665][T18411] ? inet_sendmsg+0x2f4/0x370 [ 590.350688][T18411] __sock_sendmsg+0x19c/0x270 [ 590.350714][T18411] ____sys_sendmsg+0x52d/0x830 [ 590.350742][T18411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.350768][T18411] ? import_iovec+0x74/0xa0 [ 590.350791][T18411] ___sys_sendmsg+0x21f/0x2a0 [ 590.350810][T18411] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.350863][T18411] ? __fget_files+0x2a/0x420 [ 590.350887][T18411] ? __fget_files+0x3a0/0x420 [ 590.350922][T18411] __sys_sendmmsg+0x227/0x430 [ 590.350951][T18411] ? __pfx___sys_sendmmsg+0x10/0x10 [ 590.350967][T18411] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 590.351017][T18411] ? ksys_write+0x22a/0x250 [ 590.351040][T18411] ? __pfx_ksys_write+0x10/0x10 [ 590.351059][T18411] ? rcu_is_watching+0x15/0xb0 [ 590.351083][T18411] __x64_sys_sendmmsg+0xa0/0xc0 [ 590.351102][T18411] do_syscall_64+0xfa/0x3b0 [ 590.351124][T18411] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.351146][T18411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.351162][T18411] ? clear_bhb_loop+0x60/0xb0 [ 590.351183][T18411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.351199][T18411] RIP: 0033:0x7f9cbb18ebe9 [ 590.351215][T18411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.351230][T18411] RSP: 002b:00007f9cbbf5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 590.351251][T18411] RAX: ffffffffffffffda RBX: 00007f9cbb3b5fa0 RCX: 00007f9cbb18ebe9 [ 590.351263][T18411] RDX: 0000000000000001 RSI: 0000200000007840 RDI: 0000000000000003 [ 590.351274][T18411] RBP: 00007f9cbbf5d090 R08: 0000000000000000 R09: 0000000000000000 [ 590.351284][T18411] R10: 0000000000004081 R11: 0000000000000246 R12: 0000000000000002 [ 590.351294][T18411] R13: 00007f9cbb3b6038 R14: 00007f9cbb3b5fa0 R15: 00007ffe3cc6a498 [ 590.351323][T18411] [ 590.723505][T18415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2779'. [ 590.903321][T18422] tipc: Enabling of bearer rejected, already enabled [ 591.003466][T18426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2781'. [ 591.208411][T18431] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2783'. [ 591.210279][T18427] team0: Port device geneve0 removed [ 591.291781][T18431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2783'. [ 591.312025][T18431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2783'. [ 591.323512][T18427] bond0: (slave wlan1): Releasing backup interface [ 591.385138][T18427] team0: Port device batadv1 removed [ 591.392469][T18433] netlink: 'syz.0.2785': attribute type 3 has an invalid length. [ 591.855424][T18457] netlink: 'syz.3.2789': attribute type 10 has an invalid length. [ 592.321426][T18478] tipc: Enabling of bearer rejected, failed to enable media [ 592.460152][T18484] netlink: 'syz.4.2800': attribute type 11 has an invalid length. [ 592.982794][T18501] netlink: 'syz.3.2808': attribute type 2 has an invalid length. [ 593.038898][T18503] macsec0: entered allmulticast mode [ 593.057184][T18503] syz_tun: entered allmulticast mode [ 593.094550][T18503] syz_tun: left allmulticast mode [ 593.540006][T18525] netlink: 'syz.1.2816': attribute type 3 has an invalid length. [ 594.448835][T18549] IPVS: persistence engine module ip_vs_pe_ not found [ 594.624716][T18563] __nla_validate_parse: 7 callbacks suppressed [ 594.624737][T18563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2832'. [ 595.058759][T18577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2831'. [ 595.111337][T18579] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2836'. [ 595.650305][T18600] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 595.663883][T18598] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2843'. [ 595.841712][T18608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2847'. [ 595.895577][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 595.957428][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2846'. [ 595.982697][T18604] tipc: Enabling of bearer rejected, failed to enable media [ 596.003038][T18617] netlink: 'syz.3.2849': attribute type 1 has an invalid length. [ 596.010904][T18612] syz_tun: entered promiscuous mode [ 596.011066][T18612] macsec1: entered allmulticast mode [ 596.027915][T18612] syz_tun: entered allmulticast mode [ 596.038820][T18612] syz_tun: left allmulticast mode [ 596.049804][T18612] syz_tun: left promiscuous mode [ 596.376039][T18626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2852'. [ 596.394438][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 596.575741][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 597.326438][T18656] tipc: Enabling of bearer rejected, failed to enable media [ 597.556824][T18670] netlink: 'syz.1.2866': attribute type 1 has an invalid length. [ 597.739818][T18677] netlink: 'syz.1.2868': attribute type 3 has an invalid length. [ 597.766085][T18677] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.900165][T18677] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.010719][T18677] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.116851][T18683] syzkaller0: entered promiscuous mode [ 598.122467][T18683] syzkaller0: entered allmulticast mode [ 598.178260][T18677] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.552781][T18691] netlink: 'syz.0.2871': attribute type 3 has an invalid length. [ 600.703936][T18706] netlink: 'syz.2.2878': attribute type 1 has an invalid length. [ 600.734847][ T2990] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.830312][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.854594][T18711] __nla_validate_parse: 8 callbacks suppressed [ 600.854615][T18711] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2881'. [ 600.890831][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.925389][T18715] FAULT_INJECTION: forcing a failure. [ 600.925389][T18715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.939532][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.948653][T18715] CPU: 1 UID: 0 PID: 18715 Comm: syz.2.2882 Not tainted syzkaller #0 PREEMPT(full) [ 600.948680][T18715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 600.948692][T18715] Call Trace: [ 600.948701][T18715] [ 600.948711][T18715] dump_stack_lvl+0x189/0x250 [ 600.948742][T18715] ? __pfx____ratelimit+0x10/0x10 [ 600.948770][T18715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.948795][T18715] ? __pfx__printk+0x10/0x10 [ 600.948824][T18715] ? __might_fault+0xb0/0x130 [ 600.948864][T18715] should_fail_ex+0x414/0x560 [ 600.948897][T18715] _copy_from_iter+0x1db/0x16f0 [ 600.948923][T18715] ? rcu_is_watching+0x15/0xb0 [ 600.948947][T18715] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 600.948977][T18715] ? __pfx__copy_from_iter+0x10/0x10 [ 600.949001][T18715] ? __build_skb_around+0x257/0x3e0 [ 600.949035][T18715] ? skb_put+0x11b/0x210 [ 600.949057][T18715] pfkey_sendmsg+0x230/0x1090 [ 600.949103][T18715] ? __pfx___might_resched+0x10/0x10 [ 600.949121][T18715] ? __lock_acquire+0xab9/0xd20 [ 600.949156][T18715] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 600.949196][T18715] ? aa_sk_perm+0x81e/0x950 [ 600.949231][T18715] ? __pfx_aa_sk_perm+0x10/0x10 [ 600.949257][T18715] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 600.949287][T18715] ? aa_sock_msg_perm+0xf1/0x1d0 [ 600.949318][T18715] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.949340][T18715] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 600.949370][T18715] __sock_sendmsg+0x219/0x270 [ 600.949399][T18715] ____sys_sendmsg+0x505/0x830 [ 600.949424][T18715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.949456][T18715] ? import_iovec+0x74/0xa0 [ 600.949482][T18715] ___sys_sendmsg+0x21f/0x2a0 [ 600.949506][T18715] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.949566][T18715] ? __fget_files+0x2a/0x420 [ 600.949594][T18715] ? __fget_files+0x3a0/0x420 [ 600.949636][T18715] __x64_sys_sendmsg+0x19b/0x260 [ 600.949661][T18715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.949699][T18715] ? __pfx_ksys_write+0x10/0x10 [ 600.949722][T18715] ? rcu_is_watching+0x15/0xb0 [ 600.949748][T18715] ? do_syscall_64+0xbe/0x3b0 [ 600.949781][T18715] do_syscall_64+0xfa/0x3b0 [ 600.949807][T18715] ? lockdep_hardirqs_on+0x9c/0x150 [ 600.949833][T18715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.949854][T18715] ? clear_bhb_loop+0x60/0xb0 [ 600.949879][T18715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.949900][T18715] RIP: 0033:0x7ff395d8ebe9 [ 600.949919][T18715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.949937][T18715] RSP: 002b:00007ff396bfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.949961][T18715] RAX: ffffffffffffffda RBX: 00007ff395fb5fa0 RCX: 00007ff395d8ebe9 [ 600.949976][T18715] RDX: 0000000000008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 600.949990][T18715] RBP: 00007ff396bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 600.950004][T18715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.950016][T18715] R13: 00007ff395fb6038 R14: 00007ff395fb5fa0 R15: 00007ffde5487f38 [ 600.950051][T18715] [ 600.951125][T18716] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2879'. [ 601.147286][T18719] tipc: Enabled bearer , priority 0 [ 601.170146][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 601.201831][T18723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2880'. [ 601.247533][T18719] syzkaller0: entered promiscuous mode [ 601.315308][T18719] syzkaller0: entered allmulticast mode [ 601.369474][T18729] sit0: entered promiscuous mode [ 601.381476][T18729] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 601.395253][T18729] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2885'. [ 601.420857][T18718] tipc: Resetting bearer [ 601.433083][T18729] sctp: [Deprecated]: syz.1.2885 (pid 18729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.433083][T18729] Use struct sctp_sack_info instead [ 601.470078][T18718] tipc: Disabling bearer [ 601.539058][T18734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2887'. [ 601.548350][T18734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2887'. [ 601.833430][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'. [ 602.291715][T18755] netlink: 'syz.1.2890': attribute type 3 has an invalid length. [ 602.303851][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2894'. [ 602.458805][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 602.803115][T18783] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 602.901296][T18784] netlink: 'syz.2.2899': attribute type 3 has an invalid length. [ 603.524168][T18813] netlink: 'syz.1.2906': attribute type 3 has an invalid length. [ 603.626528][T18820] FAULT_INJECTION: forcing a failure. [ 603.626528][T18820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.677308][T18820] CPU: 0 UID: 0 PID: 18820 Comm: syz.0.2908 Not tainted syzkaller #0 PREEMPT(full) [ 603.677339][T18820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 603.677351][T18820] Call Trace: [ 603.677361][T18820] [ 603.677371][T18820] dump_stack_lvl+0x189/0x250 [ 603.677401][T18820] ? __pfx____ratelimit+0x10/0x10 [ 603.677427][T18820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.677450][T18820] ? __pfx__printk+0x10/0x10 [ 603.677477][T18820] ? __might_fault+0xb0/0x130 [ 603.677515][T18820] should_fail_ex+0x414/0x560 [ 603.677547][T18820] _copy_from_iter+0x1db/0x16f0 [ 603.677572][T18820] ? rcu_is_watching+0x15/0xb0 [ 603.677594][T18820] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 603.677620][T18820] ? __pfx__copy_from_iter+0x10/0x10 [ 603.677642][T18820] ? __build_skb_around+0x257/0x3e0 [ 603.677674][T18820] ? netlink_sendmsg+0x642/0xb30 [ 603.677700][T18820] ? skb_put+0x11b/0x210 [ 603.677722][T18820] netlink_sendmsg+0x6b2/0xb30 [ 603.677760][T18820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.677807][T18820] ? aa_sock_msg_perm+0xf1/0x1d0 [ 603.677838][T18820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.677859][T18820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.677887][T18820] __sock_sendmsg+0x219/0x270 [ 603.677915][T18820] ____sys_sendmsg+0x505/0x830 [ 603.677939][T18820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.677968][T18820] ? import_iovec+0x74/0xa0 [ 603.677992][T18820] ___sys_sendmsg+0x21f/0x2a0 [ 603.678014][T18820] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.678071][T18820] ? __fget_files+0x2a/0x420 [ 603.678097][T18820] ? __fget_files+0x3a0/0x420 [ 603.678135][T18820] __x64_sys_sendmsg+0x19b/0x260 [ 603.678158][T18820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.678190][T18820] ? __pfx_ksys_write+0x10/0x10 [ 603.678213][T18820] ? rcu_is_watching+0x15/0xb0 [ 603.678238][T18820] ? do_syscall_64+0xbe/0x3b0 [ 603.678271][T18820] do_syscall_64+0xfa/0x3b0 [ 603.678297][T18820] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.678323][T18820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.678342][T18820] ? clear_bhb_loop+0x60/0xb0 [ 603.678366][T18820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.678385][T18820] RIP: 0033:0x7f9b4af8ebe9 [ 603.678404][T18820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.678422][T18820] RSP: 002b:00007f9b491f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.678443][T18820] RAX: ffffffffffffffda RBX: 00007f9b4b1b5fa0 RCX: 00007f9b4af8ebe9 [ 603.678458][T18820] RDX: 0000000004008810 RSI: 0000200000000d80 RDI: 0000000000000003 [ 603.678471][T18820] RBP: 00007f9b491f6090 R08: 0000000000000000 R09: 0000000000000000 [ 603.678483][T18820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.678495][T18820] R13: 00007f9b4b1b6038 R14: 00007f9b4b1b5fa0 R15: 00007ffec4bfced8 [ 603.678528][T18820] [ 604.363941][T18828] netlink: 'syz.0.2909': attribute type 3 has an invalid length. [ 605.658030][T18864] netlink: 'syz.2.2924': attribute type 3 has an invalid length. [ 605.976894][T18871] __nla_validate_parse: 9 callbacks suppressed [ 605.976918][T18871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2927'. [ 606.149278][T18874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2928'. [ 606.316178][T18884] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2929'. [ 606.397273][T18888] netlink: 'syz.0.2931': attribute type 3 has an invalid length. [ 606.510060][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2932'. [ 606.564356][T18892] tipc: Enabling of bearer rejected, failed to enable media [ 606.795270][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2935'. [ 606.830576][T18899] tipc: Enabling of bearer rejected, failed to enable media [ 606.960453][T18905] netlink: 'syz.3.2936': attribute type 3 has an invalid length. [ 607.030764][T18906] netlink: 'syz.2.2933': attribute type 3 has an invalid length. [ 607.849578][T18918] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2941'. [ 607.973349][T18924] netlink: 'syz.4.2942': attribute type 3 has an invalid length. [ 608.472750][T18939] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2944'. [ 608.955014][T18954] netlink: 'syz.2.2948': attribute type 3 has an invalid length. [ 608.996425][T18952] netlink: 'syz.3.2949': attribute type 3 has an invalid length. [ 609.134878][T18961] netlink: 728 bytes leftover after parsing attributes in process `syz.0.2951'. [ 609.138200][T18963] netlink: 'syz.1.2950': attribute type 3 has an invalid length. [ 609.261221][T18964] veth53: entered promiscuous mode [ 609.468184][T18969] netlink: 'syz.0.2953': attribute type 3 has an invalid length. [ 609.651483][T18973] netlink: 'syz.4.2952': attribute type 8 has an invalid length. [ 609.837317][T18969] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.030780][T18969] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.082720][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 610.148728][T18969] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.287717][T18969] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.411389][T18988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2957'. [ 610.575494][ T2947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.639519][ T78] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.697967][ T754] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.741344][ T2990] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.005774][T19009] __nla_validate_parse: 1 callbacks suppressed [ 611.005794][T19009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2960'. [ 611.058211][T19012] netlink: 'syz.2.2962': attribute type 3 has an invalid length. [ 611.073804][T19012] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.085065][T19012] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.141117][T19012] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.163073][T19012] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.262720][T19012] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.273242][T19012] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.288867][T19016] tipc: Enabling of bearer rejected, failed to enable media [ 611.384886][T19012] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.401919][T19012] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.563218][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.571760][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.621532][ T2990] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.655062][ T2990] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.689644][T19028] tipc: Enabling of bearer rejected, already enabled [ 611.709044][ T2990] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.722345][ T2990] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.802197][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.819613][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.875884][T19031] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2968'. [ 611.951788][T19034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2969'. [ 612.098073][T19047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2970'. [ 612.129081][T19046] netlink: 'syz.2.2973': attribute type 3 has an invalid length. [ 612.219371][T19046] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.287519][T19046] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.524500][T19063] IPVS: set_ctl: invalid protocol: 58 2.64.0.0:20001 [ 612.599350][T19046] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.611262][T19046] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.679703][T19069] netlink: 'syz.3.2979': attribute type 1 has an invalid length. [ 612.790355][T19046] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.810932][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 612.830698][T19046] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.001975][T19046] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.014357][T19046] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.482601][T19092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2984'. [ 613.494016][T19092] tipc: Enabling of bearer rejected, failed to enable media [ 613.558023][T19094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2985'. [ 613.818064][T19102] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2988'. [ 613.869262][T19099] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2987'. [ 613.906503][T19102] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 614.203330][T19115] netlink: 'syz.1.2992': attribute type 11 has an invalid length. [ 614.384788][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2994'. [ 614.419048][T19129] tipc: Enabled bearer , priority 0 [ 614.453278][T19124] tipc: Resetting bearer [ 614.496854][T19124] tipc: Disabling bearer [ 614.843469][T19145] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 614.892433][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.050006][T19154] netlink: 'syz.0.3004': attribute type 3 has an invalid length. [ 615.090172][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.163736][T19149] netlink: 'syz.1.3003': attribute type 3 has an invalid length. [ 615.212442][T19158] FAULT_INJECTION: forcing a failure. [ 615.212442][T19158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 615.243873][T19158] CPU: 0 UID: 0 PID: 19158 Comm: syz.3.3006 Not tainted syzkaller #0 PREEMPT(full) [ 615.243905][T19158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.243917][T19158] Call Trace: [ 615.243927][T19158] [ 615.243936][T19158] dump_stack_lvl+0x189/0x250 [ 615.243967][T19158] ? __pfx____ratelimit+0x10/0x10 [ 615.243996][T19158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.244022][T19158] ? __pfx__printk+0x10/0x10 [ 615.244053][T19158] ? fs_reclaim_acquire+0x7d/0x100 [ 615.244094][T19158] should_fail_ex+0x414/0x560 [ 615.244128][T19158] prepare_alloc_pages+0x213/0x610 [ 615.244158][T19158] __alloc_frozen_pages_noprof+0x123/0x370 [ 615.244186][T19158] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 615.244229][T19158] alloc_pages_bulk_noprof+0x560/0x710 [ 615.244259][T19158] ? alloc_pages_noprof+0xbe/0x190 [ 615.244293][T19158] kasan_populate_vmalloc+0xba/0x1a0 [ 615.244325][T19158] alloc_vmap_area+0xd51/0x1490 [ 615.244372][T19158] ? __pfx_alloc_vmap_area+0x10/0x10 [ 615.244399][T19158] ? __kasan_kmalloc+0x93/0xb0 [ 615.244427][T19158] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 615.244456][T19158] ? __get_vm_area_node+0x13f/0x300 [ 615.244483][T19158] ? arena_map_alloc+0x256/0x520 [ 615.244512][T19158] __get_vm_area_node+0x1f8/0x300 [ 615.244548][T19158] get_vm_area+0x80/0xb0 [ 615.244575][T19158] ? arena_map_alloc+0x256/0x520 [ 615.244610][T19158] arena_map_alloc+0x256/0x520 [ 615.244647][T19158] map_create+0xaa0/0x14d0 [ 615.244680][T19158] ? security_bpf+0x7e/0x300 [ 615.244710][T19158] __sys_bpf+0x60f/0x870 [ 615.244740][T19158] ? __pfx___sys_bpf+0x10/0x10 [ 615.244783][T19158] ? ksys_write+0x22a/0x250 [ 615.244814][T19158] ? __pfx_ksys_write+0x10/0x10 [ 615.244838][T19158] ? rcu_is_watching+0x15/0xb0 [ 615.244868][T19158] __x64_sys_bpf+0x7c/0x90 [ 615.244893][T19158] do_syscall_64+0xfa/0x3b0 [ 615.244921][T19158] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.244949][T19158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.244970][T19158] ? clear_bhb_loop+0x60/0xb0 [ 615.244996][T19158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.245015][T19158] RIP: 0033:0x7f6a9a58ebe9 [ 615.245035][T19158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.245054][T19158] RSP: 002b:00007f6a9b422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.245079][T19158] RAX: ffffffffffffffda RBX: 00007f6a9a7b5fa0 RCX: 00007f6a9a58ebe9 [ 615.245095][T19158] RDX: 0000000000000050 RSI: 0000200000003940 RDI: 0000000000000000 [ 615.245109][T19158] RBP: 00007f6a9b422090 R08: 0000000000000000 R09: 0000000000000000 [ 615.245122][T19158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.245136][T19158] R13: 00007f6a9a7b6038 R14: 00007f6a9a7b5fa0 R15: 00007fffb2f306d8 [ 615.245171][T19158] [ 615.263692][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.550651][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.616490][ T2990] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.635527][ T2990] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.656312][T19163] tipc: Enabling of bearer rejected, failed to enable media [ 615.773350][ T2990] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.795017][ T2990] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.853242][T19170] netlink: 'syz.3.3010': attribute type 3 has an invalid length. [ 616.050027][T19179] netlink: 'syz.0.3013': attribute type 3 has an invalid length. [ 616.404374][T19187] block nbd0: server does not support multiple connections per device. [ 616.418890][T19192] sctp: [Deprecated]: syz.1.3018 (pid 19192) Use of int in max_burst socket option. [ 616.418890][T19192] Use struct sctp_assoc_value instead [ 616.438403][T19187] block nbd0: shutting down sockets [ 616.663138][T19203] __nla_validate_parse: 6 callbacks suppressed [ 616.663161][T19203] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3019'. [ 616.677259][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 616.759563][T19204] netlink: 'syz.1.3021': attribute type 3 has an invalid length. [ 616.798440][T19204] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.020109][T19204] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.180894][T19204] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.361236][T19204] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.428225][T19228] tipc: Enabled bearer , priority 0 [ 617.440331][T19228] syzkaller0: entered promiscuous mode [ 617.450559][T19228] syzkaller0: entered allmulticast mode [ 617.479970][T19230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3029'. [ 617.512299][T19227] tipc: Resetting bearer [ 617.576527][T19227] tipc: Disabling bearer [ 617.630870][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.658646][ T78] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.683447][ T78] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.714704][ T78] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.881052][T19239] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3032'. [ 617.991434][T19248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3034'. [ 618.106342][T19252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3036'. [ 618.165521][T19252] netlink: 'syz.1.3036': attribute type 11 has an invalid length. [ 618.191131][T19252] netlink: 'syz.1.3036': attribute type 1 has an invalid length. [ 618.200636][T19252] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3036'. [ 618.212006][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'. [ 618.222798][T19256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3035'. [ 618.294296][T19252] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3036'. [ 618.607306][T19267] tipc: Enabling of bearer rejected, failed to enable media [ 619.152440][T19294] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 619.358728][T19302] 8021q: adding VLAN 0 to HW filter on device bond31 [ 619.391541][T19302] bond30: (slave bond31): making interface the new active one [ 619.412366][T19302] bond30: (slave bond31): Enslaving as an active interface with an up link [ 619.494461][T19305] bond30: (slave gretap1): Enslaving as a backup interface with an up link [ 619.507320][T19294] 8021q: adding VLAN 0 to HW filter on device bond30 [ 619.515714][T19316] tipc: Enabled bearer , priority 1 [ 620.557236][T19353] tipc: Enabling of bearer rejected, failed to enable media [ 620.651549][T19358] pim6reg: entered allmulticast mode [ 620.662446][T19360] netlink: 'syz.4.3065': attribute type 10 has an invalid length. [ 620.700816][T19360] team0: Port device dummy0 added [ 620.712300][T19356] pim6reg: left allmulticast mode [ 621.129482][T19371] netlink: 'syz.1.3070': attribute type 2 has an invalid length. [ 621.174185][T19371] syz_tun: entered promiscuous mode [ 621.179555][T19371] macsec1: entered allmulticast mode [ 621.208990][T19371] syz_tun: entered allmulticast mode [ 621.232025][T19371] syz_tun: left allmulticast mode [ 621.251163][T19371] syz_tun: left promiscuous mode [ 621.403452][T19385] netlink: 'syz.2.3073': attribute type 3 has an invalid length. [ 621.839845][T19400] __nla_validate_parse: 13 callbacks suppressed [ 621.839867][T19400] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3076'. [ 622.131514][T19412] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3078'. [ 622.546168][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 622.783055][T19420] batman_adv: batadv0: Adding interface: macvlan2 [ 622.796515][T19420] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.829913][T19420] batman_adv: batadv0: Interface activated: macvlan2 [ 622.999646][T19432] FAULT_INJECTION: forcing a failure. [ 622.999646][T19432] name failslab, interval 1, probability 0, space 0, times 0 [ 623.018473][T19432] CPU: 0 UID: 0 PID: 19432 Comm: syz.4.3084 Not tainted syzkaller #0 PREEMPT(full) [ 623.018506][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.018518][T19432] Call Trace: [ 623.018528][T19432] [ 623.018549][T19432] dump_stack_lvl+0x189/0x250 [ 623.018580][T19432] ? __pfx____ratelimit+0x10/0x10 [ 623.018609][T19432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.018633][T19432] ? __pfx__printk+0x10/0x10 [ 623.018680][T19432] should_fail_ex+0x414/0x560 [ 623.018714][T19432] should_failslab+0xa8/0x100 [ 623.018747][T19432] __kmalloc_cache_noprof+0x70/0x3d0 [ 623.018774][T19432] ? sctp_add_bind_addr+0x8c/0x370 [ 623.018806][T19432] sctp_add_bind_addr+0x8c/0x370 [ 623.018838][T19432] sctp_copy_local_addr_list+0x30b/0x4e0 [ 623.018870][T19432] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 623.018896][T19432] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 623.018924][T19432] ? sctp_v6_is_any+0x64/0x80 [ 623.018954][T19432] ? sctp_copy_one_addr+0x93/0x360 [ 623.018984][T19432] sctp_bind_addr_copy+0x189/0x3c0 [ 623.019020][T19432] sctp_connect_new_asoc+0x2e0/0x690 [ 623.019045][T19432] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 623.019062][T19432] ? __local_bh_enable_ip+0x12d/0x1c0 [ 623.019105][T19432] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 623.019129][T19432] ? security_sctp_bind_connect+0x7e/0x2e0 [ 623.019159][T19432] sctp_sendmsg+0x155c/0x2810 [ 623.019204][T19432] ? __pfx_sctp_sendmsg+0x10/0x10 [ 623.019240][T19432] ? aa_sk_perm+0x81e/0x950 [ 623.019274][T19432] ? __pfx_aa_sk_perm+0x10/0x10 [ 623.019309][T19432] ? sock_rps_record_flow+0x19/0x410 [ 623.019339][T19432] ? inet_sendmsg+0x2f4/0x370 [ 623.019367][T19432] __sock_sendmsg+0x19c/0x270 [ 623.019399][T19432] __sys_sendto+0x3bd/0x520 [ 623.019434][T19432] ? __pfx___sys_sendto+0x10/0x10 [ 623.019460][T19432] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 623.019505][T19432] ? __fget_files+0x3a0/0x420 [ 623.019564][T19432] ? ksys_write+0x22a/0x250 [ 623.019595][T19432] ? __pfx_ksys_write+0x10/0x10 [ 623.019618][T19432] ? rcu_is_watching+0x15/0xb0 [ 623.019646][T19432] __x64_sys_sendto+0xde/0x100 [ 623.019681][T19432] do_syscall_64+0xfa/0x3b0 [ 623.019709][T19432] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.019735][T19432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.019770][T19432] ? clear_bhb_loop+0x60/0xb0 [ 623.019795][T19432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.019815][T19432] RIP: 0033:0x7f9cbb18ebe9 [ 623.019836][T19432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.019854][T19432] RSP: 002b:00007f9cbbf5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 623.019889][T19432] RAX: ffffffffffffffda RBX: 00007f9cbb3b5fa0 RCX: 00007f9cbb18ebe9 [ 623.019905][T19432] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 623.019918][T19432] RBP: 00007f9cbbf5d090 R08: 000020000005ffe4 R09: 000000000000001c [ 623.019931][T19432] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 623.019944][T19432] R13: 00007f9cbb3b6038 R14: 00007f9cbb3b5fa0 R15: 00007ffe3cc6a498 [ 623.019981][T19432] [ 623.341909][T19436] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3085'. [ 623.843321][T19456] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3090'. [ 623.893216][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3091'. [ 623.923167][T19455] tipc: Enabling of bearer rejected, failed to enable media [ 624.044427][T19461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3093'. [ 624.074660][T19461] tipc: Enabling of bearer rejected, failed to enable media [ 624.263265][T19466] netlink: 'syz.2.3095': attribute type 3 has an invalid length. [ 624.317983][T19466] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.335370][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 624.404020][T19466] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.507647][T19476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3096'. [ 624.547922][T19466] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.563440][T19466] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.954340][T19477] syzkaller1: entered promiscuous mode [ 624.959921][T19477] syzkaller1: entered allmulticast mode [ 625.119928][T19466] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.129789][T19466] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.250118][T19466] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.301708][T19466] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.511220][T19497] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 625.544614][T19497] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 625.591669][ T2947] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.602961][ T2947] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.637512][ T2947] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.655312][ T2947] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.699198][ T2947] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.713018][ T2947] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.738951][ T2947] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.747472][ T2947] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.110100][T19534] syzkaller0: entered promiscuous mode [ 626.123750][T19534] syzkaller0: entered allmulticast mode [ 626.163168][T19536] netlink: 'syz.4.3113': attribute type 10 has an invalid length. [ 626.350446][T19540] FAULT_INJECTION: forcing a failure. [ 626.350446][T19540] name failslab, interval 1, probability 0, space 0, times 0 [ 626.392837][T19540] CPU: 0 UID: 0 PID: 19540 Comm: syz.4.3115 Not tainted syzkaller #0 PREEMPT(full) [ 626.392868][T19540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.392880][T19540] Call Trace: [ 626.392890][T19540] [ 626.392899][T19540] dump_stack_lvl+0x189/0x250 [ 626.392930][T19540] ? __pfx____ratelimit+0x10/0x10 [ 626.392960][T19540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.392984][T19540] ? __pfx__printk+0x10/0x10 [ 626.393017][T19540] ? __pfx___might_resched+0x10/0x10 [ 626.393037][T19540] ? fs_reclaim_acquire+0x7d/0x100 [ 626.393074][T19540] should_fail_ex+0x414/0x560 [ 626.393104][T19540] should_failslab+0xa8/0x100 [ 626.393135][T19540] __kmalloc_noprof+0xcb/0x4f0 [ 626.393159][T19540] ? tomoyo_encode+0x28b/0x550 [ 626.393183][T19540] tomoyo_encode+0x28b/0x550 [ 626.393207][T19540] tomoyo_realpath_from_path+0x58d/0x5d0 [ 626.393228][T19540] ? tomoyo_domain+0xd9/0x130 [ 626.393254][T19540] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 626.393280][T19540] tomoyo_path_number_perm+0x1e8/0x5a0 [ 626.393308][T19540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 626.393356][T19540] ? __lock_acquire+0xab9/0xd20 [ 626.393411][T19540] ? __fget_files+0x2a/0x420 [ 626.393445][T19540] ? __fget_files+0x2a/0x420 [ 626.393472][T19540] ? __fget_files+0x3a0/0x420 [ 626.393500][T19540] ? __fget_files+0x2a/0x420 [ 626.393544][T19540] security_file_ioctl+0xcb/0x2d0 [ 626.393583][T19540] __se_sys_ioctl+0x47/0x170 [ 626.393612][T19540] do_syscall_64+0xfa/0x3b0 [ 626.393639][T19540] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.393665][T19540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.393685][T19540] ? clear_bhb_loop+0x60/0xb0 [ 626.393710][T19540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.393730][T19540] RIP: 0033:0x7f9cbb18ebe9 [ 626.393751][T19540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.393768][T19540] RSP: 002b:00007f9cbbf5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.393792][T19540] RAX: ffffffffffffffda RBX: 00007f9cbb3b5fa0 RCX: 00007f9cbb18ebe9 [ 626.393807][T19540] RDX: 0000200000000000 RSI: 0000000000008b26 RDI: 0000000000000003 [ 626.393821][T19540] RBP: 00007f9cbbf5d090 R08: 0000000000000000 R09: 0000000000000000 [ 626.393834][T19540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.393847][T19540] R13: 00007f9cbb3b6038 R14: 00007f9cbb3b5fa0 R15: 00007ffe3cc6a498 [ 626.393883][T19540] [ 626.678247][T19545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.707604][T19540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 626.910256][T19556] netlink: 'syz.1.3121': attribute type 4 has an invalid length. [ 626.923311][T19555] FAULT_INJECTION: forcing a failure. [ 626.923311][T19555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.949399][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'. [ 626.961664][T19555] CPU: 1 UID: 0 PID: 19555 Comm: syz.4.3120 Not tainted syzkaller #0 PREEMPT(full) [ 626.961696][T19555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.961709][T19555] Call Trace: [ 626.961721][T19555] [ 626.961732][T19555] dump_stack_lvl+0x189/0x250 [ 626.961763][T19555] ? __pfx____ratelimit+0x10/0x10 [ 626.961791][T19555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.961816][T19555] ? __pfx__printk+0x10/0x10 [ 626.961885][T19555] should_fail_ex+0x414/0x560 [ 626.961918][T19555] _copy_from_user+0x2d/0xb0 [ 626.961944][T19555] copy_from_sockptr+0x5e/0xa0 [ 626.961973][T19555] packet_setsockopt+0xac1/0x12c0 [ 626.962001][T19555] ? __pfx_packet_setsockopt+0x10/0x10 [ 626.962032][T19555] ? __lock_acquire+0xab9/0xd20 [ 626.962068][T19555] ? aa_sk_perm+0x81e/0x950 [ 626.962104][T19555] ? __pfx_aa_sk_perm+0x10/0x10 [ 626.962136][T19555] ? __fget_files+0x2a/0x420 [ 626.962164][T19555] ? aa_sock_opt_perm+0xff/0x1b0 [ 626.962187][T19555] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 626.962210][T19555] ? __pfx_packet_setsockopt+0x10/0x10 [ 626.962235][T19555] do_sock_setsockopt+0x179/0x1b0 [ 626.962264][T19555] __x64_sys_setsockopt+0x13f/0x1b0 [ 626.962291][T19555] do_syscall_64+0xfa/0x3b0 [ 626.962320][T19555] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.962347][T19555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.962368][T19555] ? clear_bhb_loop+0x60/0xb0 [ 626.962394][T19555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.962413][T19555] RIP: 0033:0x7f9cbb18ebe9 [ 626.962432][T19555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.962451][T19555] RSP: 002b:00007f9cbbf5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 626.962475][T19555] RAX: ffffffffffffffda RBX: 00007f9cbb3b5fa0 RCX: 00007f9cbb18ebe9 [ 626.962491][T19555] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000004 [ 626.962505][T19555] RBP: 00007f9cbbf5d090 R08: 0000000000000008 R09: 0000000000000000 [ 626.962518][T19555] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.962531][T19555] R13: 00007f9cbb3b6038 R14: 00007f9cbb3b5fa0 R15: 00007ffe3cc6a498 [ 626.962565][T19555] [ 627.380850][T19569] FAULT_INJECTION: forcing a failure. [ 627.380850][T19569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.419020][T19569] CPU: 1 UID: 0 PID: 19569 Comm: syz.3.3127 Not tainted syzkaller #0 PREEMPT(full) [ 627.419051][T19569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.419064][T19569] Call Trace: [ 627.419072][T19569] [ 627.419082][T19569] dump_stack_lvl+0x189/0x250 [ 627.419113][T19569] ? __pfx____ratelimit+0x10/0x10 [ 627.419141][T19569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.419166][T19569] ? __pfx__printk+0x10/0x10 [ 627.419194][T19569] ? __might_fault+0xb0/0x130 [ 627.419235][T19569] should_fail_ex+0x414/0x560 [ 627.419268][T19569] _copy_from_iter+0x1db/0x16f0 [ 627.419294][T19569] ? rcu_is_watching+0x15/0xb0 [ 627.419317][T19569] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 627.419347][T19569] ? __pfx__copy_from_iter+0x10/0x10 [ 627.419370][T19569] ? __build_skb_around+0x257/0x3e0 [ 627.419405][T19569] ? netlink_sendmsg+0x642/0xb30 [ 627.419432][T19569] ? skb_put+0x11b/0x210 [ 627.419456][T19569] netlink_sendmsg+0x6b2/0xb30 [ 627.419496][T19569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.419531][T19569] ? aa_sock_msg_perm+0xf1/0x1d0 [ 627.419564][T19569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 627.419586][T19569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.419616][T19569] __sock_sendmsg+0x219/0x270 [ 627.419646][T19569] ____sys_sendmsg+0x505/0x830 [ 627.419673][T19569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.419704][T19569] ? import_iovec+0x74/0xa0 [ 627.419730][T19569] ___sys_sendmsg+0x21f/0x2a0 [ 627.419753][T19569] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.419814][T19569] ? __fget_files+0x2a/0x420 [ 627.419855][T19569] ? __fget_files+0x3a0/0x420 [ 627.419894][T19569] __x64_sys_sendmsg+0x19b/0x260 [ 627.419918][T19569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.419950][T19569] ? __pfx_ksys_write+0x10/0x10 [ 627.419973][T19569] ? rcu_is_watching+0x15/0xb0 [ 627.419999][T19569] ? do_syscall_64+0xbe/0x3b0 [ 627.420032][T19569] do_syscall_64+0xfa/0x3b0 [ 627.420057][T19569] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.420083][T19569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.420103][T19569] ? clear_bhb_loop+0x60/0xb0 [ 627.420127][T19569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.420146][T19569] RIP: 0033:0x7f6a9a58ebe9 [ 627.420164][T19569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.420183][T19569] RSP: 002b:00007f6a9b422038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.420206][T19569] RAX: ffffffffffffffda RBX: 00007f6a9a7b5fa0 RCX: 00007f6a9a58ebe9 [ 627.420222][T19569] RDX: 0000000024004840 RSI: 0000200000000000 RDI: 0000000000000003 [ 627.420235][T19569] RBP: 00007f6a9b422090 R08: 0000000000000000 R09: 0000000000000000 [ 627.420247][T19569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.420259][T19569] R13: 00007f6a9a7b6038 R14: 00007f6a9a7b5fa0 R15: 00007fffb2f306d8 [ 627.420294][T19569] [ 627.756400][T19572] netlink: 'syz.0.3125': attribute type 3 has an invalid length. [ 627.821207][T19570] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3128'. [ 627.884854][T19578] tun0: tun_chr_ioctl cmd 2147767520 [ 628.579737][T19602] tipc: Withdrawal distribution failure [ 628.684360][T19606] tipc: Enabling of bearer rejected, failed to enable media [ 628.868921][T19622] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3142'. [ 628.987585][T19626] netlink: 'syz.1.3143': attribute type 3 has an invalid length. [ 629.034686][T19630] netlink: 'syz.4.3144': attribute type 3 has an invalid length. [ 630.266795][T19662] FAULT_INJECTION: forcing a failure. [ 630.266795][T19662] name failslab, interval 1, probability 0, space 0, times 0 [ 630.313799][T19662] CPU: 1 UID: 0 PID: 19662 Comm: syz.2.3152 Not tainted syzkaller #0 PREEMPT(full) [ 630.313842][T19662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.313856][T19662] Call Trace: [ 630.313866][T19662] [ 630.313876][T19662] dump_stack_lvl+0x189/0x250 [ 630.313906][T19662] ? __pfx____ratelimit+0x10/0x10 [ 630.313936][T19662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.313961][T19662] ? __pfx__printk+0x10/0x10 [ 630.313997][T19662] ? __pfx___might_resched+0x10/0x10 [ 630.314017][T19662] ? fs_reclaim_acquire+0x7d/0x100 [ 630.314053][T19662] should_fail_ex+0x414/0x560 [ 630.314086][T19662] should_failslab+0xa8/0x100 [ 630.314117][T19662] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 630.314145][T19662] ? __lock_acquire+0xab9/0xd20 [ 630.314172][T19662] ? __alloc_skb+0x112/0x2d0 [ 630.314208][T19662] __alloc_skb+0x112/0x2d0 [ 630.314242][T19662] netlink_ack+0x146/0xa50 [ 630.314269][T19662] ? __up_read+0x280/0x680 [ 630.314294][T19662] ? __pfx___up_read+0x10/0x10 [ 630.314329][T19662] rdma_nl_rcv+0x3c8/0x980 [ 630.314364][T19662] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 630.314382][T19662] ? __lock_acquire+0xab9/0xd20 [ 630.314435][T19662] ? netlink_deliver_tap+0x2e/0x1b0 [ 630.314474][T19662] netlink_unicast+0x82f/0x9e0 [ 630.314510][T19662] ? __pfx_netlink_unicast+0x10/0x10 [ 630.314540][T19662] ? netlink_sendmsg+0x642/0xb30 [ 630.314565][T19662] ? skb_put+0x11b/0x210 [ 630.314588][T19662] netlink_sendmsg+0x805/0xb30 [ 630.314635][T19662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.314668][T19662] ? aa_sock_msg_perm+0xf1/0x1d0 [ 630.314700][T19662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 630.314722][T19662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.314753][T19662] __sock_sendmsg+0x219/0x270 [ 630.314783][T19662] ____sys_sendmsg+0x505/0x830 [ 630.314820][T19662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.314853][T19662] ? import_iovec+0x74/0xa0 [ 630.314881][T19662] ___sys_sendmsg+0x21f/0x2a0 [ 630.314907][T19662] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.314972][T19662] ? __fget_files+0x2a/0x420 [ 630.315002][T19662] ? __fget_files+0x3a0/0x420 [ 630.315043][T19662] __x64_sys_sendmsg+0x19b/0x260 [ 630.315069][T19662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.315101][T19662] ? __pfx_ksys_write+0x10/0x10 [ 630.315125][T19662] ? rcu_is_watching+0x15/0xb0 [ 630.315152][T19662] ? do_syscall_64+0xbe/0x3b0 [ 630.315185][T19662] do_syscall_64+0xfa/0x3b0 [ 630.315212][T19662] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.315239][T19662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.315259][T19662] ? clear_bhb_loop+0x60/0xb0 [ 630.315284][T19662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.315304][T19662] RIP: 0033:0x7ff395d8ebe9 [ 630.315324][T19662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.315342][T19662] RSP: 002b:00007ff396bfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.315365][T19662] RAX: ffffffffffffffda RBX: 00007ff395fb5fa0 RCX: 00007ff395d8ebe9 [ 630.315381][T19662] RDX: 0000000004008810 RSI: 0000200000000d80 RDI: 0000000000000003 [ 630.315395][T19662] RBP: 00007ff396bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 630.315408][T19662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.315421][T19662] R13: 00007ff395fb6038 R14: 00007ff395fb5fa0 R15: 00007ffde5487f38 [ 630.315456][T19662] [ 630.942338][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3157'. [ 631.006419][T19682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3160'. [ 631.074761][T19688] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3156'. [ 631.509053][T19707] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3163'. [ 631.569937][T19709] netlink: 'syz.2.3166': attribute type 3 has an invalid length. [ 631.597387][T19709] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.611486][T19709] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.706978][T19709] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.727786][T19709] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.887662][T19709] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.900266][T19709] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.925559][T19722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3171'. [ 631.938143][T19722] tipc: Enabling of bearer rejected, failed to enable media [ 631.990316][T19725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3172'. [ 632.015027][T19709] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.025486][T19709] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.143387][ T78] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.183139][ T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.237620][ T78] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.269410][ T78] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.326637][ T2947] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.357199][ T2947] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.503436][T19733] netlink: 'syz.4.3174': attribute type 3 has an invalid length. [ 632.522149][ T78] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.539794][ T78] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.772546][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3182'. [ 633.223149][T19769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3184'. [ 633.405765][T19773] Bluetooth: MGMT ver 1.23 [ 633.619247][T19785] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3189'. [ 633.635729][T19786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3188'. [ 633.752298][T19789] netlink: 'syz.1.3190': attribute type 3 has an invalid length. [ 633.957978][T19789] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.159758][T19789] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.285746][T19806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 634.287283][T19789] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.305316][T19806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 634.320906][T19806] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3192'. [ 634.358377][T19805] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3193'. [ 634.399896][T19811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 634.414595][T19811] tipc: Enabling of bearer rejected, failed to enable media [ 634.511102][T19789] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.638923][T19819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3197'. [ 634.745357][ T754] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.780442][ T754] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.822108][ T2990] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.859452][T19825] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3199'. [ 634.884288][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.907445][T19827] netlink: 'syz.3.3198': attribute type 3 has an invalid length. [ 634.976877][T19831] netlink: 'syz.1.3201': attribute type 1 has an invalid length. [ 635.218866][T19836] netlink: 'syz.0.3203': attribute type 3 has an invalid length. [ 635.639854][T19855] netlink: 'syz.0.3205': attribute type 2 has an invalid length. [ 635.790073][T19860] tipc: Enabling of bearer rejected, failed to enable media [ 635.835586][T19862] FAULT_INJECTION: forcing a failure. [ 635.835586][T19862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.893926][T19862] CPU: 1 UID: 0 PID: 19862 Comm: syz.2.3208 Not tainted syzkaller #0 PREEMPT(full) [ 635.893957][T19862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.893970][T19862] Call Trace: [ 635.893979][T19862] [ 635.893989][T19862] dump_stack_lvl+0x189/0x250 [ 635.894019][T19862] ? __pfx____ratelimit+0x10/0x10 [ 635.894049][T19862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.894074][T19862] ? __pfx__printk+0x10/0x10 [ 635.894118][T19862] should_fail_ex+0x414/0x560 [ 635.894150][T19862] _copy_to_user+0x31/0xb0 [ 635.894177][T19862] simple_read_from_buffer+0xe1/0x170 [ 635.894212][T19862] proc_fail_nth_read+0x1b3/0x220 [ 635.894240][T19862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.894267][T19862] ? rw_verify_area+0x2a6/0x4d0 [ 635.894292][T19862] ? __lock_acquire+0xab9/0xd20 [ 635.894320][T19862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.894346][T19862] vfs_read+0x200/0xa30 [ 635.894371][T19862] ? fdget_pos+0x247/0x320 [ 635.894394][T19862] ? __pfx___mutex_lock+0x10/0x10 [ 635.894424][T19862] ? __pfx_vfs_read+0x10/0x10 [ 635.894453][T19862] ? __fget_files+0x2a/0x420 [ 635.894489][T19862] ? __fget_files+0x3a0/0x420 [ 635.894517][T19862] ? __fget_files+0x2a/0x420 [ 635.894558][T19862] ksys_read+0x145/0x250 [ 635.894588][T19862] ? __pfx_ksys_read+0x10/0x10 [ 635.894611][T19862] ? rcu_is_watching+0x15/0xb0 [ 635.894638][T19862] ? do_syscall_64+0xbe/0x3b0 [ 635.894682][T19862] do_syscall_64+0xfa/0x3b0 [ 635.894709][T19862] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.894737][T19862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.894757][T19862] ? clear_bhb_loop+0x60/0xb0 [ 635.894783][T19862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.894803][T19862] RIP: 0033:0x7ff395d8d5fc [ 635.894824][T19862] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 635.894843][T19862] RSP: 002b:00007ff396bfc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 635.894866][T19862] RAX: ffffffffffffffda RBX: 00007ff395fb5fa0 RCX: 00007ff395d8d5fc [ 635.894880][T19862] RDX: 000000000000000f RSI: 00007ff396bfc0a0 RDI: 0000000000000005 [ 635.894894][T19862] RBP: 00007ff396bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 635.894907][T19862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.894919][T19862] R13: 00007ff395fb6038 R14: 00007ff395fb5fa0 R15: 00007ffde5487f38 [ 635.894955][T19862] [ 636.195758][T19866] netlink: 'syz.4.3211': attribute type 3 has an invalid length. [ 636.334179][T19871] netlink: 'syz.3.3214': attribute type 8 has an invalid length. [ 636.532543][T19878] netlink: 'syz.2.3215': attribute type 3 has an invalid length. [ 637.969821][T19909] FAULT_INJECTION: forcing a failure. [ 637.969821][T19909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.993963][T19909] CPU: 1 UID: 0 PID: 19909 Comm: syz.3.3224 Not tainted syzkaller #0 PREEMPT(full) [ 637.993995][T19909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.994008][T19909] Call Trace: [ 637.994017][T19909] [ 637.994027][T19909] dump_stack_lvl+0x189/0x250 [ 637.994057][T19909] ? __pfx____ratelimit+0x10/0x10 [ 637.994085][T19909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.994109][T19909] ? __pfx__printk+0x10/0x10 [ 637.994138][T19909] ? __might_fault+0xb0/0x130 [ 637.994178][T19909] should_fail_ex+0x414/0x560 [ 637.994210][T19909] _copy_from_iter+0x1db/0x16f0 [ 637.994237][T19909] ? rcu_is_watching+0x15/0xb0 [ 637.994259][T19909] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 637.994289][T19909] ? __pfx__copy_from_iter+0x10/0x10 [ 637.994311][T19909] ? __build_skb_around+0x257/0x3e0 [ 637.994344][T19909] ? netlink_sendmsg+0x642/0xb30 [ 637.994371][T19909] ? skb_put+0x11b/0x210 [ 637.994394][T19909] netlink_sendmsg+0x6b2/0xb30 [ 637.994447][T19909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.994480][T19909] ? aa_sock_msg_perm+0xf1/0x1d0 [ 637.994513][T19909] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 637.994536][T19909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.994566][T19909] __sock_sendmsg+0x219/0x270 [ 637.994595][T19909] ____sys_sendmsg+0x505/0x830 [ 637.994625][T19909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.994658][T19909] ? import_iovec+0x74/0xa0 [ 637.994683][T19909] ___sys_sendmsg+0x21f/0x2a0 [ 637.994708][T19909] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.994769][T19909] ? __fget_files+0x2a/0x420 [ 637.994797][T19909] ? __fget_files+0x3a0/0x420 [ 637.994838][T19909] __x64_sys_sendmsg+0x19b/0x260 [ 637.994862][T19909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 637.994894][T19909] ? __pfx_ksys_write+0x10/0x10 [ 637.994918][T19909] ? rcu_is_watching+0x15/0xb0 [ 637.994945][T19909] ? do_syscall_64+0xbe/0x3b0 [ 637.994979][T19909] do_syscall_64+0xfa/0x3b0 [ 637.995005][T19909] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.995031][T19909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.995052][T19909] ? clear_bhb_loop+0x60/0xb0 [ 637.995078][T19909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.995097][T19909] RIP: 0033:0x7f6a9a58ebe9 [ 637.995118][T19909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.995136][T19909] RSP: 002b:00007f6a9b422038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.995159][T19909] RAX: ffffffffffffffda RBX: 00007f6a9a7b5fa0 RCX: 00007f6a9a58ebe9 [ 637.995176][T19909] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 637.995188][T19909] RBP: 00007f6a9b422090 R08: 0000000000000000 R09: 0000000000000000 [ 637.995201][T19909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.995213][T19909] R13: 00007f6a9a7b6038 R14: 00007f6a9a7b5fa0 R15: 00007fffb2f306d8 [ 637.995246][T19909] [ 638.397755][T19912] netlink: 'syz.4.3225': attribute type 3 has an invalid length. [ 638.571500][T19914] netlink: 'syz.2.3226': attribute type 8 has an invalid length. [ 638.772283][T19919] __nla_validate_parse: 4 callbacks suppressed [ 638.772304][T19919] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3228'. [ 638.820677][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3228'. [ 639.118252][T19928] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 639.791932][T19951] netlink: 'syz.4.3238': attribute type 8 has an invalid length. [ 640.040544][T19958] delete_channel: no stack [ 640.347744][T19966] netlink: 'syz.2.3245': attribute type 3 has an invalid length. [ 640.512716][ T2990] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 640.580336][ T5876] non-paged memory [ 640.591059][ T5876] list_del corruption, ffff888023a7b880->next is LIST_POISON1 (dead000000000100) [ 640.601310][ T5876] ------------[ cut here ]------------ [ 640.607132][ T5876] kernel BUG at lib/list_debug.c:58! [ 640.612747][ T5876] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 640.619381][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 640.628960][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.639132][ T5876] Workqueue: hci4 hci_conn_timeout [ 640.644288][ T5876] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 640.651436][ T5876] Code: 80 36 e3 8b 48 89 de e8 30 9d 57 fc 90 0f 0b 4c 89 e7 e8 d5 21 32 fd 48 c7 c7 e0 36 e3 8b 48 89 de 4c 89 e2 e8 13 9d 57 fc 90 <0f> 0b 4c 89 e7 e8 b8 21 32 fd 48 c7 c7 40 37 e3 8b 48 89 de 4c 89 [ 640.671083][ T5876] RSP: 0018:ffffc900040df980 EFLAGS: 00010246 [ 640.677189][ T5876] RAX: 000000000000004e RBX: ffff888023a7b880 RCX: cddccac98242b100 [ 640.685192][ T5876] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 640.693195][ T5876] RBP: ffffffff8a86e820 R08: 0000000000000003 R09: 0000000000000004 [ 640.701316][ T5876] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dead000000000100 [ 640.709479][ T5876] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 640.717496][ T5876] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 640.726636][ T5876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.733260][ T5876] CR2: 00007fb14cc34930 CR3: 000000005103a000 CR4: 00000000003526f0 [ 640.741276][ T5876] Call Trace: [ 640.744677][ T5876] [ 640.747642][ T5876] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 640.753328][ T5876] hci_cancel_connect_sync+0xc8/0x120 [ 640.758916][ T5876] hci_abort_conn+0x191/0x330 [ 640.763633][ T5876] ? process_scheduled_works+0x9ef/0x17b0 [ 640.769483][ T5876] process_scheduled_works+0xae1/0x17b0 [ 640.775076][ T5876] ? __pfx_process_scheduled_works+0x10/0x10 [ 640.781184][ T5876] worker_thread+0x8a0/0xda0 [ 640.785905][ T5876] kthread+0x711/0x8a0 [ 640.790008][ T5876] ? __pfx_worker_thread+0x10/0x10 [ 640.795162][ T5876] ? __pfx_kthread+0x10/0x10 [ 640.799785][ T5876] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.805026][ T5876] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.810259][ T5876] ? __pfx_kthread+0x10/0x10 [ 640.814980][ T5876] ret_from_fork+0x3f9/0x770 [ 640.819693][ T5876] ? __pfx_ret_from_fork+0x10/0x10 [ 640.824837][ T5876] ? __switch_to_asm+0x39/0x70 [ 640.829632][ T5876] ? __switch_to_asm+0x33/0x70 [ 640.834444][ T5876] ? __pfx_kthread+0x10/0x10 [ 640.839065][ T5876] ret_from_fork_asm+0x1a/0x30 [ 640.843880][ T5876] [ 640.846933][ T5876] Modules linked in: [ 640.852207][ T5876] ---[ end trace 0000000000000000 ]--- [ 640.858414][ T5876] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 640.865659][ T5876] Code: 80 36 e3 8b 48 89 de e8 30 9d 57 fc 90 0f 0b 4c 89 e7 e8 d5 21 32 fd 48 c7 c7 e0 36 e3 8b 48 89 de 4c 89 e2 e8 13 9d 57 fc 90 <0f> 0b 4c 89 e7 e8 b8 21 32 fd 48 c7 c7 40 37 e3 8b 48 89 de 4c 89 [ 640.885787][ T5876] RSP: 0018:ffffc900040df980 EFLAGS: 00010246 [ 640.891954][ T5876] RAX: 000000000000004e RBX: ffff888023a7b880 RCX: cddccac98242b100 [ 640.900135][ T5876] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 640.908513][ T5876] RBP: ffffffff8a86e820 R08: 0000000000000003 R09: 0000000000000004 [ 640.916640][ T5876] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dead000000000100 [ 640.924836][ T5876] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 640.932893][ T5876] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 640.942126][ T5876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.948970][ T5876] CR2: 00007fb14cc34930 CR3: 000000005103a000 CR4: 00000000003526f0 [ 640.957157][ T5876] Kernel panic - not syncing: Fatal exception [ 640.963594][ T5876] Kernel Offset: disabled [ 640.968018][ T5876] Rebooting in 86400 seconds..