last executing test programs: 4.272757566s ago: executing program 0 (id=7401): socket$nl_route(0x10, 0x3, 0x0) unshare(0x20400) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0xfffffffffffffe87) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b000009000000032800"/20], 0x14}}, 0x40) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket(0x10, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfd5d, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYBLOB="5fe4783c09502e14664b7831ca807e6ec7b39ab362d37c83473bdfc98befb4e93693698b3fe731e17e951afabc954855caee3a265eafafb876762205ffeb5bc2f66710ef5d82e9a79c2245329543ea8b0a9064cb", @ANYRESOCT=r2], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYRESHEX=r5, @ANYRES16=r4, @ANYRESDEC=r6, @ANYRESHEX=0x0, @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff7c) 3.549102559s ago: executing program 0 (id=7414): r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffdfe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x40, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) listen(r1, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) socket$inet6(0xa, 0x80003, 0x6) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffdfe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async) socket$netlink(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x40, 0x20}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) (async) listen(r1, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) 2.776791079s ago: executing program 2 (id=7421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b9ff0307633144bda80e1b03f9966bb5697e5a548084180053516c855c6e4d204b8b95917a4b62a551c8057bd67175a795cfc2f9239bef8ef3d03d534757eaea2972ac2e4065b5133cebebbc454b", 0x0, 0x3a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1f}, 0x16) 2.773451016s ago: executing program 0 (id=7422): r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff7f000000bc8f3939f631b83ecbac4500fdf4f2f78d9c26c6789d98feac621054c738dcd81e12d6cd88f9ca0429531b32f76876468253effdaeda1a06b48bddc25f4e2b0575fe2a30c682a714aed74b77d62b3a165438e4c2243ccfbc7090935d6c2a2e93d58d592e7b5a832e499f91aeda0235106a00f7cb9262e15f291af69ab6174ff582c04e21c7cb726c8e86667c8b97e072161507be709abeb7b807e7c9b6815fa4734bb1488891c04a74227bf8f6f42744216452d689376806ef6c540218bbba9401fb9edba3909e10b8cd4069bf3788d583a966fdabd553c7b0fd8039202522ac4c56350e1bee7dc17b7fece6a83898c525faa195ce489d23459d3b45a93c8483eefc2af1700115196f4a738b1d2827112e958280565d39e4790fe603e27ad0ced6b29fbb42b2c1ec55cba3317541e25934ace54d832770cc6c220988987114b761f6c74235c55d316178aea6", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="c2bbfb44bf2b859edd74ba660ea8a76ad525cbcd795c232fdd3d7eabdfb07757fb6c58980d57fea3373748f6f3d60bef9ed1e57ca4e838477422b60ab53c6602c9b9471b11a08d4f27ab4db4c1ff3d1436a1160df03a88c600d74a21aba97594dfdb2660400ded4a111e1973857cf17c9f93677fde663db9f97243194f355ecd292f12b8964a91aafaa493f6c5e1a48567931db53f771782a83f1c28", 0x9c}], 0x1, &(0x7f0000001840)=[@iv={0x88, 0x117, 0x2, 0x70, "647e16e40a4bad004b0d468d240a54bb380f60a235473daf23500a3f02168c0c6a60dc689eb78aaafcca3d2f23e22f03b1848fa380613f6a12b889c1f126afc18cecc03a275246b1a97cb5cea4ab644196644e506d34001cef95e0a742df9ef6a0dca82d25f5a93715a59e5efc8ca1e7"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0xb}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xf48}, @iv={0x88, 0x117, 0x2, 0x70, "b26c9484b5d2eb4080f8850d7e1a1f222ae9d7eb72eace90826ca0e3466fb0061d9b88888d4cfd11382a9aae45ffc6dafab7ddabf67075c191d6fedf8378ca7c406610bc4d84507976523f019a47a4ce49c422c5a5bb640415142cd0a84d9a3207139b4a60acb5689f30ade59da67979"}], 0x170, 0x20000010}], 0x2, 0x40800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2c2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xac}}, 0x0) write(r6, &(0x7f0000000800)="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", 0xfa6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000ff6bd4f541a1fc94c900000800", @ANYRES32=r10], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 2.629305401s ago: executing program 2 (id=7425): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.096135825s ago: executing program 0 (id=7432): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x1c}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x1, 0x7810, 0x9, 0x101, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x67, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, {[@generic={0x82, 0x2}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x7800, 0x700, 0x2, 0x4, {{0x30, 0x4, 0x1, 0x2, 0xc0, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x4, [{@broadcast, 0x77}]}, @ssrr={0x89, 0xb, 0x6c, [@loopback, @rand_addr=0x64010100]}, @noop, @rr={0x7, 0x2b, 0x6c, [@private=0xa010100, @remote, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x5}, @multicast1, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x1f}]}, @noop, @lsrr={0x83, 0x1f, 0x3f, [@empty, @remote, @remote, @broadcast, @broadcast, @remote, @broadcast]}, @rr={0x7, 0x7, 0x8d, [@remote]}, @timestamp_addr={0x44, 0x3c, 0x7f, 0x1, 0x2, [{@rand_addr=0x64010101, 0x1ff}, {@rand_addr=0x64010101, 0x300}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xee}, {@multicast2, 0xfffffafe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x40}}, {@local, 0xf}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', r1, 0x7, 0x700, 0x0, 0xcb43, {{0x3a, 0x4, 0x2, 0x9, 0xe8, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x40, 0xffffffffffffffff, [{0x0, 0x5, "28ac6a"}, {0x1, 0x3, ']'}, {0x1, 0x7, "9ed8ce6bd5"}, {0x6, 0xc, "92aab86d39cec0d4ebb4"}, {0x7, 0x5, "fb9ee0"}, {0x1, 0x9, "e0e4fc6e94a816"}, {0x1, 0x11, "3d92790a778a132533c495ac3ad5be"}]}, @timestamp_addr={0x44, 0x44, 0x51, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@loopback, 0x1}, {@private=0xa010100, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x1}]}, @lsrr={0x83, 0x27, 0x65, [@loopback, @local, @rand_addr=0x64010101, @empty, @local, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010100, @local]}, @end, @cipso={0x86, 0xb, 0x2, [{0x5, 0x5, "1d8e1f"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x6, [0x3, 0xa, 0x9, 0x4]}, @end, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004055) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000090000000500000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000004c0), 0x3f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f00000005c0), &(0x7f0000000200)=""/35}, 0x20) 2.065952321s ago: executing program 3 (id=7433): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2, 0x0}, &(0x7f0000000040)=0x14) r3 = accept$packet(r1, 0x0, &(0x7f0000000080)) accept4$packet(r3, 0x0, &(0x7f00000000c0), 0x80800) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r1}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) accept$unix(r5, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @timestamp], 0x2) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) write$nci(r7, &(0x7f00000003c0)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x3, {0x2, [{0x0, 0x6}, {0x1, 0xf7}]}}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@getstats={0x1c, 0x5e, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x2}, [""]}, 0x1c}}, 0x8080) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000040) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x700, 0x8000, 0x81, 0xf4, {{0x12, 0x4, 0x3, 0x32, 0x48, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x2c, 0x63, 0x1, 0x5, [{@multicast2, 0x6}, {@rand_addr=0x64010101, 0x7}, {@empty, 0x7}, {@local, 0x9}, {@remote, 0x10}]}, @generic={0x83, 0x5, "00b0f5"}]}}}}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000700)={@rand_addr=0x64010100, @private=0xa010100, r8}, 0xc) pselect6(0x40, &(0x7f0000000740)={0x8001, 0x1a00000000, 0x4, 0xf8b1, 0x6, 0x8, 0xf56}, &(0x7f0000000780)={0x10, 0x7ff, 0xffff, 0xfffffffffffffffb, 0x1, 0x4, 0x311d, 0x1}, &(0x7f00000007c0)={0x7, 0xba7, 0x0, 0x1, 0x1, 0xfffffffffffffffb, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x3938700}, &(0x7f0000000880)={&(0x7f0000000840)={[0x9]}, 0x8}) syz_genetlink_get_family_id$fou(&(0x7f00000008c0), r7) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000b40)=0x0) bind$nfc_llcp(r7, &(0x7f0000000b80)={0x27, r9, 0x1, 0x3, 0x4, 0x7, "2ed71f48b9f05d01db7687cc73be490cf18e0a233d4edfc0b933e233f267dd164ef5322d15eb2b338daf95d3b80847fe782aef18ab124c45e1813bff2e3ed6", 0x26}, 0x60) unshare(0x58040000) r10 = socket$netlink(0x10, 0x3, 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r11, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r10) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000d80)) 2.065073588s ago: executing program 4 (id=7434): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}) (fail_nth: 3) 1.981034907s ago: executing program 3 (id=7435): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0xfffffdb6}, 0x1, 0x40000000, 0x0, 0x20000040}, 0x200008c1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) 1.869146024s ago: executing program 0 (id=7437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x11, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) r2 = socket(0x8, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) shutdown(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r6, 0x1, 0x70bd2c, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)={0x44, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x42}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48885}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r4, 0x0) socket$kcm(0x29, 0x7, 0x0) r7 = socket(0x14, 0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x42000004, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000580)="ee6b16ff5bafbe1ec1032624c4f18887b0fa13ed0a7384b05be5bf9367828afd23db950f45768b03caa12fb173c89e814bb159e192e80f5fbb992a60a7473f3735a535f628e14ee6c2125eb4bf5a5ce22b0835c3f96d44aacd5ed6f3b60ff0d943b5718e3359da04a5b14619a82b30094b21f660dd6721225f90e7adc949b05ce9085189cfee61cc9a2ec898e31c9d4cc90129f30464ae25c107d2c49718cb5953fe3d24a62c62fad6eb79bf80da5dd5771f7c7675c1bb932ce1abd04390cc477347c8fe5f9d440ce70066e78f99ec12a1d2cd0b03", 0xd5, 0x20040804, &(0x7f0000000000)={0xa, 0x4e24, 0x417a, @private1, 0x10}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r8, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/219, 0xdb}, {&(0x7f0000000900)=""/231, 0xf2}, {&(0x7f0000001a00)=""/4095, 0xfff}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x1c4}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000340)=""/130, 0x2c}, {&(0x7f0000004e40)=""/4093, 0xffd}, {&(0x7f0000006080)=""/4080, 0xff5}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000000240)=""/102, 0x66}], 0x6}, 0x4d7}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40014002, 0x0) 1.551049921s ago: executing program 4 (id=7439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) (fail_nth: 2) 1.528647055s ago: executing program 2 (id=7440): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r7, {0xffe0}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x33}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f00000001c0)={r9}, 0x8) sendmsg$key(r0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x2, 0x20, 0x65, 0x0, 0x6, 0x2, 0x0, @private=0xa010102, @local, {[@ra={0x94, 0x4, 0x1000}]}}, {0x12, 0xfc, 0x0, @rand_addr=0x64010102}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000d3000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x0, @mcast2, 0x4}}}, &(0x7f0000000440)=0xffffffffffffff1e) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000040019807fd729c709d8e904805b1d5f244d68c3cd4afba2c8e543763c210f8d33fbf44899ac4581099974bb47b69d0e3621ec307425650fa49cf45d0c58123df2810a77d99e234b500d0f1e23ec5a68cf8f267158901494d62f9a8a38ae397fc76a3d16d0ae2de8"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x90) getsockopt$SO_COOKIE(r11, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r13 = socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2d, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@llc_tr={0x11, {@llc={0x0, 0x6, "cf", "b572eeebea97972c69eaea4c82bbbcf4a8f52af05b77f5e89316c011"}}}}}, 0x0) setsockopt$inet_int(r13, 0x0, 0xf, &(0x7f0000000040)=0x7, 0x4) bind$inet(r13, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 788.341486ms ago: executing program 3 (id=7441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4b}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0xb0, 0x20, 0x2d2c6d60ea1da725, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, @FRA_SRC={0x14, 0x2, @loopback}, @FRA_SRC={0x14, 0x2, @empty}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e21}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040090}, 0x48081) 727.934582ms ago: executing program 4 (id=7442): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 695.7359ms ago: executing program 4 (id=7443): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x178}}, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0xfffffffd, {0x2, 0x14, 0x20, 0x0, 0x0, 0x3, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b0000190007800800030000000000080002000000000008000300000000000800020000000000080003000000000004"], 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x20, 0x0, 0x38dc586a, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000370410008000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83450500010000001c0012800b00010067656e65766500000c0002800c000b4080000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES16=r9, @ANYBLOB, @ANYBLOB], 0x84}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x7c, r9, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x6c, r9, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "eda71bdc7ecd796645361de62c46b2d8"}, @NL80211_ATTR_SSID={0x13, 0x34, @random="95b669a8b7efafcd5137f72f6797a9"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b8ec0f9fbd6f"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6c6eca03b0b4"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) 695.296389ms ago: executing program 1 (id=7444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}, 0x4100) 649.085514ms ago: executing program 1 (id=7445): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[], 0x20}}, 0x0) 613.63295ms ago: executing program 1 (id=7446): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x85, 0x4, 0x0, @loopback, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', r1, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0x35, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty=0x21, @rand_addr=0x64010101}}}}) 528.556347ms ago: executing program 1 (id=7447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0) (fail_nth: 16) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 528.214436ms ago: executing program 2 (id=7448): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$kcm(0x29, 0x5, 0x0) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00'], 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000580)="629377324c4e889db3651c28e0367542086307f733249e58959b4db73ebc66686c306f683416c9df783600bd9b75d0de20d84916ae1d50585acf1762b1c3f77e36f096d919d102328881a827a0afd0ffe7167de9f8beb2e26cf5d8d7d0799c2e3a9e8993d082352f1277343c426e53c4aa95dd0b13272947830e441a6c01010b52242ab3fb4b63b67a71f8abcedaa8a0653af109ad669eb49c7cb38cb809be6bbb0fe1148a5b3b330b92161821c495e85943c7aa8da24cb23fbb1bf4d4d24aa889576ca1561bac1081e6a8394d0e5994e6caebb5900933983d2afc42ed0974a4584a7dd99a0049770486c19a50c0ef98", 0x0}, 0x8b) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x1fc, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3800000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x61a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x149e152d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) close(r1) 528.007368ms ago: executing program 3 (id=7449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000014000780080011400000000005001500100000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) (fail_nth: 8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) 481.28396ms ago: executing program 4 (id=7450): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x800) 449.668172ms ago: executing program 4 (id=7451): syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 76) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$kcm(0x2, 0xa, 0x2) 415.64301ms ago: executing program 2 (id=7452): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="302100001114010000000000000000000800010000000000080003"], 0x30}}, 0x0) 252.729096ms ago: executing program 0 (id=7453): r0 = socket$inet6(0xa, 0x3, 0x39) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000080)={r8, 0x7, 0x7ff, 0x0, 0x6, 0x0, 0x4, 0x3, {r8, @in6={{0xa, 0x4e21, 0x80000001, @local, 0xb}}, 0xe, 0x0, 0x9, 0x10001}}, &(0x7f0000000240)=0xb0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffffffffffd52, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r9, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000000)="7bddc58f613f6fcdb802a0028df0ba3d", 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r10, 0x10f, 0x84, &(0x7f0000000680), &(0x7f00000006c0)=0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="007bd47342"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x41, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r12, &(0x7f0000000240)=[{{0x0, 0xa, &(0x7f0000000040)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f0000004740)=""/4078, 0xfee}, {&(0x7f0000000300)=""/102, 0x66}], 0x3}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000480)}, 0x8000}], 0x3, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r12, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3005000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x130, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0xa4, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 252.588417ms ago: executing program 2 (id=7454): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 250.060958ms ago: executing program 3 (id=7455): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000801) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac141428000000003300000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000fffffffffffffffff1ffffffffffffff0300000000000000000000000000000000000000000000000000000000000000c400000000000000fe30a3124fc3b89bb9ffffffffffffff000000000000000096070000000000000000000000000000be00000000000000"], 0xf8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 224.705929ms ago: executing program 1 (id=7456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800020000000000000001000080181500006cb9c7705be9f93cfdf49e0e4f34c36c32451f5bca423ebbdd66a164fc70a98eb44a4d35c2ed61", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r4 = socket$kcm(0x1e, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000002c0), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 75.932624ms ago: executing program 3 (id=7457): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@ipv6_delrule={0x2c, 0x21, 0x121, 0x0, 0x1, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x4000000}, 0x0) 0s ago: executing program 1 (id=7458): setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e21, 0x6, 0x4e20, 0xff, 0x0, 0x120, 0x0, 0x87}, {0xf03, 0x8, 0x7, 0x1, 0x100000000, 0x8, 0x5, 0x8}, {0x1a, 0x6a, 0x4, 0x4}, 0xfffffffc, 0x6e6bba, 0x2, 0x1, 0x3, 0x3}, {{@in6=@loopback, 0x4d4, 0x33}, 0x2, @in=@private=0xa010100, 0x3506, 0x3, 0x2, 0x81, 0xf0, 0xfff, 0x5}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff00000000feffffff850000007b000000450000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x1) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x4) socket$unix(0x1, 0x5, 0x0) socket(0x1e, 0x4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01df180000000000000026cd00001400000006000000000000000100000d000000000200000001000000002e612e2000"], 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 6) accept$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x7fffffff, @mcast2, 0x8000}, 0x1c) kernel console output (not intermixed with test programs): +0x161/0x5f0 [ 899.110078][T30453] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 899.110113][T30453] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 899.110150][T30453] ? stack_trace_save+0x9c/0xe0 [ 899.110176][T30453] ? stack_depot_save_flags+0x40/0x860 [ 899.110205][T30453] ? unwind_next_frame+0x11/0x2390 [ 899.110234][T30453] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 899.110266][T30453] ? bpf_test_init+0xc2/0x170 [ 899.110292][T30453] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 899.110322][T30453] ? bpf_prog_test_run+0x2c7/0x340 [ 899.110348][T30453] ? __sys_bpf+0x581/0x870 [ 899.110372][T30453] ? __x64_sys_bpf+0x7c/0x90 [ 899.110413][T30453] ? __might_fault+0xb0/0x130 [ 899.110456][T30453] ? rcu_is_watching+0x15/0xb0 [ 899.110477][T30453] ? lock_acquire+0x5f/0x360 [ 899.110515][T30453] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 899.110537][T30453] ? __might_fault+0xcc/0x130 [ 899.110567][T30453] ? _copy_from_user+0x94/0xb0 [ 899.110591][T30453] ? bpf_test_init+0x133/0x170 [ 899.110621][T30453] ? xdp_convert_md_to_buff+0x5b/0x330 [ 899.110654][T30453] bpf_prog_test_run_xdp+0x713/0x1000 [ 899.110692][T30453] ? rcu_is_watching+0x15/0xb0 [ 899.110715][T30453] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 899.110750][T30453] ? __fget_files+0x2a/0x420 [ 899.110771][T30453] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 899.110802][T30453] bpf_prog_test_run+0x2c7/0x340 [ 899.110832][T30453] __sys_bpf+0x581/0x870 [ 899.110858][T30453] ? __pfx___sys_bpf+0x10/0x10 [ 899.110892][T30453] ? lock_release+0x4b/0x3e0 [ 899.110919][T30453] ? __might_fault+0xb0/0x130 [ 899.110947][T30453] ? rcu_is_watching+0x15/0xb0 [ 899.110969][T30453] __x64_sys_bpf+0x7c/0x90 [ 899.110992][T30453] do_syscall_64+0xfa/0x3b0 [ 899.111011][T30453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.111031][T30453] ? clear_bhb_loop+0x60/0xb0 [ 899.111054][T30453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.111074][T30453] RIP: 0033:0x7ff75918ebe9 [ 899.111092][T30453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.111111][T30453] RSP: 002b:00007ff75a083038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 899.111134][T30453] RAX: ffffffffffffffda RBX: 00007ff7593b5fa0 RCX: 00007ff75918ebe9 [ 899.111150][T30453] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 899.111164][T30453] RBP: 00007ff75a083090 R08: 0000000000000000 R09: 0000000000000000 [ 899.111177][T30453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.111190][T30453] R13: 00007ff7593b6038 R14: 00007ff7593b5fa0 R15: 00007ffc88f2bc58 [ 899.111216][T30453] [ 899.573419][T30460] netlink: 'syz.1.6861': attribute type 10 has an invalid length. [ 899.781755][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6868'. [ 899.929614][T30478] netlink: 'syz.0.6870': attribute type 16 has an invalid length. [ 899.941220][T30478] netlink: 'syz.0.6870': attribute type 3 has an invalid length. [ 899.953479][T30483] FAULT_INJECTION: forcing a failure. [ 899.953479][T30483] name failslab, interval 1, probability 0, space 0, times 0 [ 899.969510][T30478] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.6870'. [ 899.980175][T30483] CPU: 1 UID: 0 PID: 30483 Comm: syz.3.6872 Not tainted syzkaller #0 PREEMPT(full) [ 899.980208][T30483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 899.980224][T30483] Call Trace: [ 899.980234][T30483] [ 899.980243][T30483] dump_stack_lvl+0x189/0x250 [ 899.980275][T30483] ? __pfx____ratelimit+0x10/0x10 [ 899.980308][T30483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.980333][T30483] ? __pfx__printk+0x10/0x10 [ 899.980365][T30483] ? fs_reclaim_acquire+0x7d/0x100 [ 899.980411][T30483] ? rcu_is_watching+0x15/0xb0 [ 899.980433][T30483] ? __pfx___might_resched+0x10/0x10 [ 899.980452][T30483] ? lock_acquire+0x5f/0x360 [ 899.980485][T30483] should_fail_ex+0x414/0x560 [ 899.980517][T30483] should_failslab+0xa8/0x100 [ 899.980549][T30483] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 899.980579][T30483] ? __alloc_skb+0x112/0x2d0 [ 899.980602][T30483] __alloc_skb+0x112/0x2d0 [ 899.980624][T30483] netlink_sendmsg+0x5c6/0xb30 [ 899.980651][T30483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.980673][T30483] ? aa_sock_msg_perm+0xf1/0x1d0 [ 899.980695][T30483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 899.980719][T30483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.980739][T30483] __sock_sendmsg+0x21c/0x270 [ 899.980769][T30483] ____sys_sendmsg+0x505/0x830 [ 899.980796][T30483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 899.980825][T30483] ? import_iovec+0x74/0xa0 [ 899.980852][T30483] ___sys_sendmsg+0x21f/0x2a0 [ 899.980877][T30483] ? __pfx____sys_sendmsg+0x10/0x10 [ 899.980923][T30483] ? __fget_files+0x2a/0x420 [ 899.980942][T30483] ? __fget_files+0x3a0/0x420 [ 899.980967][T30483] __x64_sys_sendmsg+0x19b/0x260 [ 899.980993][T30483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 899.981021][T30483] ? __pfx_ksys_write+0x10/0x10 [ 899.981048][T30483] ? rcu_is_watching+0x15/0xb0 [ 899.981072][T30483] ? rcu_is_watching+0x15/0xb0 [ 899.981095][T30483] do_syscall_64+0xfa/0x3b0 [ 899.981115][T30483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.981135][T30483] ? clear_bhb_loop+0x60/0xb0 [ 899.981160][T30483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.981181][T30483] RIP: 0033:0x7fe51798ebe9 [ 899.981201][T30483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.981219][T30483] RSP: 002b:00007fe518725038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.981245][T30483] RAX: ffffffffffffffda RBX: 00007fe517bb5fa0 RCX: 00007fe51798ebe9 [ 899.981262][T30483] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 899.981276][T30483] RBP: 00007fe518725090 R08: 0000000000000000 R09: 0000000000000000 [ 899.981290][T30483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.981304][T30483] R13: 00007fe517bb6038 R14: 00007fe517bb5fa0 R15: 00007fff76576578 [ 899.981331][T30483] [ 900.431741][T30498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6878'. [ 900.517767][T30504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6878'. [ 900.542321][T30504] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 900.569362][T30509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6880'. [ 900.683499][T30515] netlink: 'syz.1.6884': attribute type 16 has an invalid length. [ 900.692940][T30515] netlink: 'syz.1.6884': attribute type 3 has an invalid length. [ 900.714652][T30515] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.6884'. [ 900.755393][T30519] lo speed is unknown, defaulting to 1000 [ 900.859365][T30519] lo speed is unknown, defaulting to 1000 [ 900.866310][T30519] wg1 speed is unknown, defaulting to 1000 [ 900.873685][T30519] hsr0 speed is unknown, defaulting to 1000 [ 900.960360][T30528] FAULT_INJECTION: forcing a failure. [ 900.960360][T30528] name failslab, interval 1, probability 0, space 0, times 0 [ 901.033163][T30528] CPU: 1 UID: 0 PID: 30528 Comm: syz.1.6885 Not tainted syzkaller #0 PREEMPT(full) [ 901.033196][T30528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 901.033211][T30528] Call Trace: [ 901.033221][T30528] [ 901.033230][T30528] dump_stack_lvl+0x189/0x250 [ 901.033261][T30528] ? __pfx____ratelimit+0x10/0x10 [ 901.033293][T30528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 901.033319][T30528] ? __pfx__printk+0x10/0x10 [ 901.033350][T30528] ? fs_reclaim_acquire+0x7d/0x100 [ 901.033383][T30528] ? __pfx___might_resched+0x10/0x10 [ 901.033404][T30528] ? lock_acquire+0x5f/0x360 [ 901.033437][T30528] should_fail_ex+0x414/0x560 [ 901.033468][T30528] should_failslab+0xa8/0x100 [ 901.033501][T30528] __kmalloc_noprof+0xcb/0x4f0 [ 901.033536][T30528] ? bpf_test_init+0xc2/0x170 [ 901.033570][T30528] bpf_test_init+0xc2/0x170 [ 901.033603][T30528] bpf_prog_test_run_xdp+0x37c/0x1000 [ 901.033642][T30528] ? rcu_is_watching+0x15/0xb0 [ 901.033666][T30528] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 901.033703][T30528] ? __fget_files+0x2a/0x420 [ 901.033726][T30528] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 901.033759][T30528] bpf_prog_test_run+0x2c7/0x340 [ 901.033792][T30528] __sys_bpf+0x581/0x870 [ 901.033821][T30528] ? __pfx___sys_bpf+0x10/0x10 [ 901.033858][T30528] ? lock_release+0x4b/0x3e0 [ 901.033888][T30528] ? __might_fault+0xb0/0x130 [ 901.033919][T30528] ? rcu_is_watching+0x15/0xb0 [ 901.033943][T30528] __x64_sys_bpf+0x7c/0x90 [ 901.033968][T30528] do_syscall_64+0xfa/0x3b0 [ 901.033989][T30528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.034011][T30528] ? clear_bhb_loop+0x60/0xb0 [ 901.034036][T30528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.034057][T30528] RIP: 0033:0x7fc172f8ebe9 [ 901.034076][T30528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.034096][T30528] RSP: 002b:00007fc173d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 901.034119][T30528] RAX: ffffffffffffffda RBX: 00007fc1731b5fa0 RCX: 00007fc172f8ebe9 [ 901.034135][T30528] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 901.034149][T30528] RBP: 00007fc173d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 901.034163][T30528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.034176][T30528] R13: 00007fc1731b6038 R14: 00007fc1731b5fa0 R15: 00007ffee754d5c8 [ 901.034203][T30528] [ 901.883866][T30557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6894'. [ 902.010170][T30554] FAULT_INJECTION: forcing a failure. [ 902.010170][T30554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.034631][T30554] CPU: 0 UID: 0 PID: 30554 Comm: syz.0.6891 Not tainted syzkaller #0 PREEMPT(full) [ 902.034664][T30554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 902.034680][T30554] Call Trace: [ 902.034689][T30554] [ 902.034700][T30554] dump_stack_lvl+0x189/0x250 [ 902.034732][T30554] ? __pfx____ratelimit+0x10/0x10 [ 902.034763][T30554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 902.034788][T30554] ? __pfx__printk+0x10/0x10 [ 902.034822][T30554] ? rcu_is_watching+0x15/0xb0 [ 902.034846][T30554] should_fail_ex+0x414/0x560 [ 902.034877][T30554] _copy_to_user+0x31/0xb0 [ 902.034903][T30554] simple_read_from_buffer+0xe1/0x170 [ 902.034937][T30554] proc_fail_nth_read+0x1b3/0x220 [ 902.034963][T30554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 902.034990][T30554] ? rw_verify_area+0x2a6/0x4d0 [ 902.035017][T30554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 902.035041][T30554] vfs_read+0x1fd/0xa30 [ 902.035069][T30554] ? fdget_pos+0x247/0x320 [ 902.035091][T30554] ? __pfx___mutex_lock+0x10/0x10 [ 902.035110][T30554] ? __pfx_vfs_read+0x10/0x10 [ 902.035142][T30554] ? __fget_files+0x3a0/0x420 [ 902.035158][T30554] ? __fget_files+0x2a/0x420 [ 902.035180][T30554] ksys_read+0x145/0x250 [ 902.035219][T30554] ? __pfx_ksys_read+0x10/0x10 [ 902.035244][T30554] ? rcu_is_watching+0x15/0xb0 [ 902.035267][T30554] ? rcu_is_watching+0x15/0xb0 [ 902.035288][T30554] do_syscall_64+0xfa/0x3b0 [ 902.035309][T30554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.035329][T30554] ? clear_bhb_loop+0x60/0xb0 [ 902.035354][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.035375][T30554] RIP: 0033:0x7ff75918d5fc [ 902.035394][T30554] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 902.035414][T30554] RSP: 002b:00007ff75a083030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 902.035438][T30554] RAX: ffffffffffffffda RBX: 00007ff7593b5fa0 RCX: 00007ff75918d5fc [ 902.035455][T30554] RDX: 000000000000000f RSI: 00007ff75a0830a0 RDI: 0000000000000005 [ 902.035470][T30554] RBP: 00007ff75a083090 R08: 0000000000000000 R09: 0000000000000000 [ 902.035485][T30554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.035498][T30554] R13: 00007ff7593b6038 R14: 00007ff7593b5fa0 R15: 00007ffc88f2bc58 [ 902.035524][T30554] [ 902.333254][T30575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6899'. [ 902.379041][T30566] mac80211_hwsim hwsim392 wlan0: entered promiscuous mode [ 902.683176][T30594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6908'. [ 902.838606][T30600] FAULT_INJECTION: forcing a failure. [ 902.838606][T30600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.852416][T30600] CPU: 0 UID: 0 PID: 30600 Comm: syz.4.6907 Not tainted syzkaller #0 PREEMPT(full) [ 902.852447][T30600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 902.852461][T30600] Call Trace: [ 902.852470][T30600] [ 902.852479][T30600] dump_stack_lvl+0x189/0x250 [ 902.852510][T30600] ? __pfx____ratelimit+0x10/0x10 [ 902.852541][T30600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 902.852567][T30600] ? __pfx__printk+0x10/0x10 [ 902.852595][T30600] ? __might_fault+0xb0/0x130 [ 902.852625][T30600] ? process_measurement+0x3d8/0x1a40 [ 902.852650][T30600] ? rcu_is_watching+0x15/0xb0 [ 902.852672][T30600] ? rcu_is_watching+0x15/0xb0 [ 902.852695][T30600] should_fail_ex+0x414/0x560 [ 902.852725][T30600] _copy_to_iter+0x3f5/0x16f0 [ 902.852753][T30600] ? __pfx__copy_to_iter+0x10/0x10 [ 902.852772][T30600] ? __skb_try_recv_from_queue+0x58f/0x730 [ 902.852801][T30600] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 902.852830][T30600] __skb_datagram_iter+0xf8/0x990 [ 902.852855][T30600] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 902.852885][T30600] skb_copy_datagram_iter+0xc5/0x230 [ 902.852912][T30600] netlink_recvmsg+0x2ab/0xa30 [ 902.852937][T30600] ? __pfx_netlink_recvmsg+0x10/0x10 [ 902.852955][T30600] ? unwind_next_frame+0xa5/0x2390 [ 902.852982][T30600] ? unwind_next_frame+0xa5/0x2390 [ 902.853004][T30600] ? aa_sock_msg_perm+0xf1/0x1d0 [ 902.853025][T30600] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 902.853049][T30600] ? security_socket_recvmsg+0x7e/0x2e0 [ 902.853073][T30600] ? __pfx_netlink_recvmsg+0x10/0x10 [ 902.853093][T30600] sock_recvmsg+0x22c/0x270 [ 902.853124][T30600] ____sys_recvmsg+0x1c9/0x460 [ 902.853153][T30600] ? __pfx_____sys_recvmsg+0x10/0x10 [ 902.853197][T30600] ? import_iovec+0x74/0xa0 [ 902.853224][T30600] ___sys_recvmsg+0x1b5/0x510 [ 902.853251][T30600] ? __pfx____sys_recvmsg+0x10/0x10 [ 902.853278][T30600] ? __fget_files+0x2a/0x420 [ 902.853296][T30600] ? rcu_is_watching+0x15/0xb0 [ 902.853327][T30600] ? __fget_files+0x3a0/0x420 [ 902.853352][T30600] do_recvmmsg+0x307/0x770 [ 902.853381][T30600] ? __pfx_do_recvmmsg+0x10/0x10 [ 902.853404][T30600] ? bpf_trace_run2+0x186/0x4b0 [ 902.853431][T30600] ? rcu_is_watching+0x15/0xb0 [ 902.853463][T30600] ? lock_acquire+0x5f/0x360 [ 902.853498][T30600] __x64_sys_recvmmsg+0x190/0x240 [ 902.853521][T30600] ? lock_release+0x4b/0x3e0 [ 902.853552][T30600] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 902.853578][T30600] ? rcu_is_watching+0x15/0xb0 [ 902.853599][T30600] ? trace_sys_enter+0x25/0x100 [ 902.853634][T30600] do_syscall_64+0xfa/0x3b0 [ 902.853654][T30600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.853675][T30600] ? clear_bhb_loop+0x60/0xb0 [ 902.853700][T30600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.853721][T30600] RIP: 0033:0x7f9deb78ebe9 [ 902.853741][T30600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.853761][T30600] RSP: 002b:00007f9de99ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 902.853786][T30600] RAX: ffffffffffffffda RBX: 00007f9deb9b5fa0 RCX: 00007f9deb78ebe9 [ 902.853802][T30600] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 902.853816][T30600] RBP: 00007f9de99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 902.853830][T30600] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 902.853844][T30600] R13: 00007f9deb9b6038 R14: 00007f9deb9b5fa0 R15: 00007ffc709256c8 [ 902.853871][T30600] [ 903.259167][T30606] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 903.863002][T30645] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 904.066803][T30654] netlink: 'syz.3.6929': attribute type 1 has an invalid length. [ 904.076448][T30654] __nla_validate_parse: 3 callbacks suppressed [ 904.076469][T30654] netlink: 208 bytes leftover after parsing attributes in process `syz.3.6929'. [ 904.369969][T30670] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 904.390047][T30668] netlink: 'syz.3.6933': attribute type 1 has an invalid length. [ 904.403750][T30673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.414107][T30668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6933'. [ 904.434195][T30673] tipc: Failed to remove unknown binding: 66,1,1/3365516358:527905265/527905267 [ 904.459904][T30673] tipc: Failed to remove unknown binding: 66,1,1/3365516358:527905265/527905267 [ 904.503953][T30673] tipc: Failed to remove unknown binding: 66,1,1/3365516358:527905265/527905267 [ 904.606002][T30691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 904.618439][T30689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6941'. [ 904.643111][T30686] tipc: Failed to remove unknown binding: 66,1,1/167082393:835666422/835666424 [ 904.659224][T30686] tipc: Failed to remove unknown binding: 66,1,1/167082393:835666422/835666424 [ 904.659662][T30693] netlink: 'syz.2.6944': attribute type 1 has an invalid length. [ 904.669781][T30686] tipc: Failed to remove unknown binding: 66,1,1/167082393:835666422/835666424 [ 904.686675][T30693] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6944'. [ 904.715503][T30694] netlink: 788 bytes leftover after parsing attributes in process `syz.4.6935'. [ 904.857932][T30691] netlink: 788 bytes leftover after parsing attributes in process `syz.0.6940'. [ 905.103470][T30711] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 905.140252][T30714] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 905.173682][T30716] netlink: 'syz.1.6951': attribute type 1 has an invalid length. [ 905.185586][T30716] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6951'. [ 905.269359][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6952'. [ 905.482714][T19375] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 905.515563][T19375] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 905.542966][T19375] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 905.551728][T19375] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 905.565717][T30739] netlink: 'syz.3.6958': attribute type 16 has an invalid length. [ 905.609413][T30739] netlink: 'syz.3.6958': attribute type 3 has an invalid length. [ 905.627117][T30743] FAULT_INJECTION: forcing a failure. [ 905.627117][T30743] name failslab, interval 1, probability 0, space 0, times 0 [ 905.641823][T30739] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.6958'. [ 905.644463][T30743] CPU: 0 UID: 0 PID: 30743 Comm: syz.4.6960 Not tainted syzkaller #0 PREEMPT(full) [ 905.644499][T30743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 905.644515][T30743] Call Trace: [ 905.644526][T30743] [ 905.644539][T30743] dump_stack_lvl+0x189/0x250 [ 905.644576][T30743] ? __pfx____ratelimit+0x10/0x10 [ 905.644614][T30743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.644643][T30743] ? __pfx__printk+0x10/0x10 [ 905.644684][T30743] ? fs_reclaim_acquire+0x7d/0x100 [ 905.644722][T30743] ? __pfx___might_resched+0x10/0x10 [ 905.644746][T30743] ? lock_acquire+0x5f/0x360 [ 905.644785][T30743] should_fail_ex+0x414/0x560 [ 905.644823][T30743] should_failslab+0xa8/0x100 [ 905.644860][T30743] __kmalloc_noprof+0xcb/0x4f0 [ 905.644904][T30743] ? bpf_test_init+0xc2/0x170 [ 905.644942][T30743] bpf_test_init+0xc2/0x170 [ 905.644979][T30743] bpf_prog_test_run_xdp+0x37c/0x1000 [ 905.645024][T30743] ? rcu_is_watching+0x15/0xb0 [ 905.645052][T30743] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 905.645092][T30743] ? __fget_files+0x2a/0x420 [ 905.645118][T30743] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 905.645155][T30743] bpf_prog_test_run+0x2c7/0x340 [ 905.645194][T30743] __sys_bpf+0x581/0x870 [ 905.645226][T30743] ? __pfx___sys_bpf+0x10/0x10 [ 905.645267][T30743] ? ksys_write+0x22a/0x250 [ 905.645300][T30743] ? __pfx_ksys_write+0x10/0x10 [ 905.645338][T30743] __x64_sys_bpf+0x7c/0x90 [ 905.645367][T30743] do_syscall_64+0xfa/0x3b0 [ 905.645388][T30743] ? rcu_is_watching+0x15/0xb0 [ 905.645412][T30743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.645437][T30743] ? clear_bhb_loop+0x60/0xb0 [ 905.645465][T30743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.645489][T30743] RIP: 0033:0x7f9deb78ebe9 [ 905.645512][T30743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.645535][T30743] RSP: 002b:00007f9de99ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 905.645562][T30743] RAX: ffffffffffffffda RBX: 00007f9deb9b5fa0 RCX: 00007f9deb78ebe9 [ 905.645581][T30743] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 905.645598][T30743] RBP: 00007f9de99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 905.645613][T30743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.645629][T30743] R13: 00007f9deb9b6038 R14: 00007f9deb9b5fa0 R15: 00007ffc709256c8 [ 905.645659][T30743] [ 906.042216][T30760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6967'. [ 906.090218][T30759] Unsupported ieee802154 address type: 0 [ 906.448886][T30785] netlink: 'syz.0.6977': attribute type 16 has an invalid length. [ 906.457067][T30785] netlink: 'syz.0.6977': attribute type 3 has an invalid length. [ 906.719524][T30793] FAULT_INJECTION: forcing a failure. [ 906.719524][T30793] name failslab, interval 1, probability 0, space 0, times 0 [ 906.732574][T30793] CPU: 1 UID: 0 PID: 30793 Comm: syz.4.6980 Not tainted syzkaller #0 PREEMPT(full) [ 906.732604][T30793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 906.732619][T30793] Call Trace: [ 906.732627][T30793] [ 906.732637][T30793] dump_stack_lvl+0x189/0x250 [ 906.732668][T30793] ? __pfx____ratelimit+0x10/0x10 [ 906.732700][T30793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 906.732726][T30793] ? __pfx__printk+0x10/0x10 [ 906.732757][T30793] ? __pfx___might_resched+0x10/0x10 [ 906.732779][T30793] ? lock_acquire+0x5f/0x360 [ 906.732820][T30793] should_fail_ex+0x414/0x560 [ 906.732851][T30793] should_failslab+0xa8/0x100 [ 906.732884][T30793] __kmalloc_noprof+0xcb/0x4f0 [ 906.732912][T30793] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 906.732939][T30793] ? lock_release+0x4b/0x3e0 [ 906.732971][T30793] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 906.733003][T30793] genl_family_rcv_msg_doit+0xb8/0x300 [ 906.733033][T30793] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 906.733065][T30793] ? apparmor_capable+0x137/0x1b0 [ 906.733092][T30793] ? bpf_lsm_capable+0x9/0x20 [ 906.733122][T30793] ? security_capable+0x7e/0x2e0 [ 906.733157][T30793] genl_rcv_msg+0x60e/0x790 [ 906.733186][T30793] ? __pfx_genl_rcv_msg+0x10/0x10 [ 906.733209][T30793] ? __kasan_slab_alloc+0x6c/0x80 [ 906.733234][T30793] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 906.733251][T30793] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 906.733277][T30793] ? __pfx_nl80211_post_doit+0x10/0x10 [ 906.733296][T30793] ? __netlink_lookup+0xbd/0x810 [ 906.733309][T30793] ? rcu_is_watching+0x15/0xb0 [ 906.733329][T30793] netlink_rcv_skb+0x205/0x470 [ 906.733352][T30793] ? __pfx_genl_rcv_msg+0x10/0x10 [ 906.733369][T30793] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 906.733397][T30793] ? lock_release+0x4b/0x3e0 [ 906.733420][T30793] ? down_read+0x1ad/0x2e0 [ 906.733436][T30793] genl_rcv+0x28/0x40 [ 906.733452][T30793] netlink_unicast+0x82c/0x9e0 [ 906.733476][T30793] ? __pfx_netlink_unicast+0x10/0x10 [ 906.733497][T30793] ? netlink_sendmsg+0x642/0xb30 [ 906.733509][T30793] ? skb_put+0x11b/0x210 [ 906.733525][T30793] netlink_sendmsg+0x805/0xb30 [ 906.733543][T30793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.733557][T30793] ? aa_sock_msg_perm+0xf1/0x1d0 [ 906.733572][T30793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 906.733588][T30793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.733601][T30793] __sock_sendmsg+0x21c/0x270 [ 906.733622][T30793] ____sys_sendmsg+0x505/0x830 [ 906.733640][T30793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.733660][T30793] ? import_iovec+0x74/0xa0 [ 906.733679][T30793] ___sys_sendmsg+0x21f/0x2a0 [ 906.733696][T30793] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.733728][T30793] ? __fget_files+0x2a/0x420 [ 906.733740][T30793] ? __fget_files+0x3a0/0x420 [ 906.733757][T30793] __x64_sys_sendmsg+0x19b/0x260 [ 906.733775][T30793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.733797][T30793] ? rcu_is_watching+0x15/0xb0 [ 906.733817][T30793] ? trace_sys_enter+0x25/0x100 [ 906.733842][T30793] do_syscall_64+0xfa/0x3b0 [ 906.733857][T30793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.733872][T30793] ? clear_bhb_loop+0x60/0xb0 [ 906.733889][T30793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.733904][T30793] RIP: 0033:0x7f9deb78ebe9 [ 906.733919][T30793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.733934][T30793] RSP: 002b:00007f9de99ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.733951][T30793] RAX: ffffffffffffffda RBX: 00007f9deb9b5fa0 RCX: 00007f9deb78ebe9 [ 906.733963][T30793] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 906.733973][T30793] RBP: 00007f9de99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 906.733983][T30793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.733993][T30793] R13: 00007f9deb9b6038 R14: 00007f9deb9b5fa0 R15: 00007ffc709256c8 [ 906.734012][T30793] [ 907.624182][T30822] FAULT_INJECTION: forcing a failure. [ 907.624182][T30822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.661397][T30822] CPU: 1 UID: 0 PID: 30822 Comm: syz.2.6994 Not tainted syzkaller #0 PREEMPT(full) [ 907.661429][T30822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 907.661444][T30822] Call Trace: [ 907.661453][T30822] [ 907.661463][T30822] dump_stack_lvl+0x189/0x250 [ 907.661496][T30822] ? __pfx____ratelimit+0x10/0x10 [ 907.661528][T30822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 907.661555][T30822] ? __pfx__printk+0x10/0x10 [ 907.661583][T30822] ? rcu_is_watching+0x15/0xb0 [ 907.661606][T30822] ? lock_acquire+0x5f/0x360 [ 907.661640][T30822] ? rcu_is_watching+0x15/0xb0 [ 907.661663][T30822] should_fail_ex+0x414/0x560 [ 907.661695][T30822] _copy_from_user+0x2d/0xb0 [ 907.661721][T30822] bpf_test_init+0xf8/0x170 [ 907.661766][T30822] bpf_prog_test_run_xdp+0x37c/0x1000 [ 907.661805][T30822] ? rcu_is_watching+0x15/0xb0 [ 907.661829][T30822] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 907.661866][T30822] ? __fget_files+0x2a/0x420 [ 907.661889][T30822] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 907.661923][T30822] bpf_prog_test_run+0x2c7/0x340 [ 907.661956][T30822] __sys_bpf+0x581/0x870 [ 907.661986][T30822] ? __pfx___sys_bpf+0x10/0x10 [ 907.662022][T30822] ? ksys_write+0x22a/0x250 [ 907.662053][T30822] ? __pfx_ksys_write+0x10/0x10 [ 907.662079][T30822] ? rcu_is_watching+0x15/0xb0 [ 907.662105][T30822] __x64_sys_bpf+0x7c/0x90 [ 907.662130][T30822] do_syscall_64+0xfa/0x3b0 [ 907.662151][T30822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.662172][T30822] ? clear_bhb_loop+0x60/0xb0 [ 907.662198][T30822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.662219][T30822] RIP: 0033:0x7f737ef8ebe9 [ 907.662237][T30822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.662254][T30822] RSP: 002b:00007f737fdbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 907.662278][T30822] RAX: ffffffffffffffda RBX: 00007f737f1b5fa0 RCX: 00007f737ef8ebe9 [ 907.662295][T30822] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 907.662309][T30822] RBP: 00007f737fdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 907.662322][T30822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.662335][T30822] R13: 00007f737f1b6038 R14: 00007f737f1b5fa0 R15: 00007ffd24f5a4a8 [ 907.662362][T30822] [ 907.663996][T30828] FAULT_INJECTION: forcing a failure. [ 907.663996][T30828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.758568][T30824] tipc: Enabled bearer , priority 0 [ 907.759411][T30828] CPU: 1 UID: 0 PID: 30828 Comm: syz.1.6997 Not tainted syzkaller #0 PREEMPT(full) [ 907.759442][T30828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 907.759459][T30828] Call Trace: [ 907.759469][T30828] [ 907.759479][T30828] dump_stack_lvl+0x189/0x250 [ 907.759516][T30828] ? __pfx____ratelimit+0x10/0x10 [ 907.759552][T30828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 907.759583][T30828] ? __pfx__printk+0x10/0x10 [ 907.759614][T30828] ? __might_fault+0xb0/0x130 [ 907.759650][T30828] ? policy_nodemask+0x27c/0x720 [ 907.759685][T30828] ? rcu_is_watching+0x15/0xb0 [ 907.759711][T30828] should_fail_ex+0x414/0x560 [ 907.759755][T30828] _copy_from_user+0x2d/0xb0 [ 907.759784][T30828] bpf_prog_test_run_xdp+0xd05/0x1000 [ 907.759832][T30828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 907.759874][T30828] ? __fget_files+0x2a/0x420 [ 907.759898][T30828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 907.759937][T30828] bpf_prog_test_run+0x2c7/0x340 [ 907.759973][T30828] __sys_bpf+0x581/0x870 [ 907.760004][T30828] ? __pfx___sys_bpf+0x10/0x10 [ 907.760046][T30828] ? ksys_write+0x22a/0x250 [ 907.760079][T30828] ? __pfx_ksys_write+0x10/0x10 [ 907.760116][T30828] ? rcu_is_watching+0x15/0xb0 [ 907.760144][T30828] __x64_sys_bpf+0x7c/0x90 [ 907.760171][T30828] do_syscall_64+0xfa/0x3b0 [ 907.760194][T30828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.760219][T30828] ? clear_bhb_loop+0x60/0xb0 [ 907.760247][T30828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.760270][T30828] RIP: 0033:0x7fc172f8ebe9 [ 907.760293][T30828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.760314][T30828] RSP: 002b:00007fc173d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 907.760341][T30828] RAX: ffffffffffffffda RBX: 00007fc1731b5fa0 RCX: 00007fc172f8ebe9 [ 907.760359][T30828] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 907.760376][T30828] RBP: 00007fc173d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 907.760391][T30828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.760406][T30828] R13: 00007fc1731b6038 R14: 00007fc1731b5fa0 R15: 00007ffee754d5c8 [ 907.760437][T30828] [ 908.151056][T30839] netlink: 'syz.2.7002': attribute type 1 has an invalid length. [ 908.169633][T30834] syzkaller0: entered promiscuous mode [ 908.179615][T30834] syzkaller0: entered allmulticast mode [ 908.244432][T30849] tipc: Resetting bearer [ 908.310157][T30823] tipc: Resetting bearer [ 908.336893][T30823] tipc: Disabling bearer [ 908.534594][T30865] syzkaller1: entered promiscuous mode [ 908.553695][T30865] syzkaller1: entered allmulticast mode [ 908.561031][T30868] FAULT_INJECTION: forcing a failure. [ 908.561031][T30868] name failslab, interval 1, probability 0, space 0, times 0 [ 908.574296][T30868] CPU: 1 UID: 0 PID: 30868 Comm: syz.2.7011 Not tainted syzkaller #0 PREEMPT(full) [ 908.574324][T30868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 908.574337][T30868] Call Trace: [ 908.574345][T30868] [ 908.574354][T30868] dump_stack_lvl+0x189/0x250 [ 908.574383][T30868] ? __pfx____ratelimit+0x10/0x10 [ 908.574414][T30868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.574439][T30868] ? __pfx__printk+0x10/0x10 [ 908.574470][T30868] ? __pfx___might_resched+0x10/0x10 [ 908.574490][T30868] ? lock_acquire+0x5f/0x360 [ 908.574521][T30868] should_fail_ex+0x414/0x560 [ 908.574551][T30868] should_failslab+0xa8/0x100 [ 908.574580][T30868] __kmalloc_noprof+0xcb/0x4f0 [ 908.574608][T30868] ? fib6_info_alloc+0x30/0xf0 [ 908.574632][T30868] ? rcu_is_watching+0x15/0xb0 [ 908.574656][T30868] fib6_info_alloc+0x30/0xf0 [ 908.574681][T30868] ip6_route_info_create+0x142/0x860 [ 908.574713][T30868] ip6_route_add+0x49/0x1b0 [ 908.574741][T30868] ipv6_route_ioctl+0x35c/0x480 [ 908.574774][T30868] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 908.574812][T30868] ? rcu_is_watching+0x15/0xb0 [ 908.574833][T30868] ? lock_release+0x4b/0x3e0 [ 908.574871][T30868] ? __might_fault+0xb0/0x130 [ 908.574899][T30868] ? __might_fault+0xcc/0x130 [ 908.574931][T30868] inet6_ioctl+0x219/0x280 [ 908.574952][T30868] ? __pfx_inet6_ioctl+0x10/0x10 [ 908.574971][T30868] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 908.575006][T30868] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 908.575040][T30868] sock_do_ioctl+0xdc/0x300 [ 908.575068][T30868] ? __pfx_sock_do_ioctl+0x10/0x10 [ 908.575093][T30868] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 908.575136][T30868] sock_ioctl+0x576/0x790 [ 908.575160][T30868] ? lock_release+0x4b/0x3e0 [ 908.575192][T30868] ? __pfx_sock_ioctl+0x10/0x10 [ 908.575219][T30868] ? __fget_files+0x2a/0x420 [ 908.575237][T30868] ? __fget_files+0x3a0/0x420 [ 908.575255][T30868] ? __fget_files+0x2a/0x420 [ 908.575275][T30868] ? bpf_lsm_file_ioctl+0x9/0x20 [ 908.575302][T30868] ? __pfx_sock_ioctl+0x10/0x10 [ 908.575329][T30868] __se_sys_ioctl+0xf9/0x170 [ 908.575356][T30868] do_syscall_64+0xfa/0x3b0 [ 908.575376][T30868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.575398][T30868] ? clear_bhb_loop+0x60/0xb0 [ 908.575423][T30868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.575444][T30868] RIP: 0033:0x7f737ef8ebe9 [ 908.575463][T30868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.575484][T30868] RSP: 002b:00007f737fdbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.575509][T30868] RAX: ffffffffffffffda RBX: 00007f737f1b5fa0 RCX: 00007f737ef8ebe9 [ 908.575526][T30868] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 908.575541][T30868] RBP: 00007f737fdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 908.575555][T30868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.575568][T30868] R13: 00007f737f1b6038 R14: 00007f737f1b5fa0 R15: 00007ffd24f5a4a8 [ 908.575595][T30868] [ 908.979107][T30874] netlink: 'syz.2.7013': attribute type 1 has an invalid length. [ 908.991626][T30873] lo speed is unknown, defaulting to 1000 [ 909.107559][T30873] lo speed is unknown, defaulting to 1000 [ 909.114286][T30873] wg1 speed is unknown, defaulting to 1000 [ 909.121214][T30873] hsr0 speed is unknown, defaulting to 1000 [ 909.375017][T30886] lo speed is unknown, defaulting to 1000 [ 909.481794][T30896] FAULT_INJECTION: forcing a failure. [ 909.481794][T30896] name failslab, interval 1, probability 0, space 0, times 0 [ 909.531510][T30896] CPU: 0 UID: 0 PID: 30896 Comm: syz.4.7019 Not tainted syzkaller #0 PREEMPT(full) [ 909.531547][T30896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 909.531562][T30896] Call Trace: [ 909.531572][T30896] [ 909.531581][T30896] dump_stack_lvl+0x189/0x250 [ 909.531613][T30896] ? __pfx____ratelimit+0x10/0x10 [ 909.531646][T30896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 909.531672][T30896] ? __pfx__printk+0x10/0x10 [ 909.531701][T30896] ? genl_family_rcv_msg_doit+0x267/0x300 [ 909.531730][T30896] ? __pfx___might_resched+0x10/0x10 [ 909.531749][T30896] ? lock_acquire+0x5f/0x360 [ 909.531781][T30896] should_fail_ex+0x414/0x560 [ 909.531820][T30896] should_failslab+0xa8/0x100 [ 909.531853][T30896] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 909.531884][T30896] ? __alloc_skb+0x112/0x2d0 [ 909.531905][T30896] __alloc_skb+0x112/0x2d0 [ 909.531928][T30896] netlink_ack+0x146/0xa50 [ 909.531957][T30896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 909.531982][T30896] ? __kasan_slab_alloc+0x6c/0x80 [ 909.532009][T30896] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 909.532034][T30896] ? __pfx_nl80211_post_doit+0x10/0x10 [ 909.532059][T30896] ? __netlink_lookup+0xbd/0x810 [ 909.532079][T30896] ? rcu_is_watching+0x15/0xb0 [ 909.532107][T30896] netlink_rcv_skb+0x28c/0x470 [ 909.532140][T30896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 909.532166][T30896] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 909.532205][T30896] ? lock_release+0x4b/0x3e0 [ 909.532239][T30896] ? down_read+0x1ad/0x2e0 [ 909.532262][T30896] genl_rcv+0x28/0x40 [ 909.532284][T30896] netlink_unicast+0x82c/0x9e0 [ 909.532317][T30896] ? __pfx_netlink_unicast+0x10/0x10 [ 909.532346][T30896] ? netlink_sendmsg+0x642/0xb30 [ 909.532363][T30896] ? skb_put+0x11b/0x210 [ 909.532384][T30896] netlink_sendmsg+0x805/0xb30 [ 909.532408][T30896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 909.532429][T30896] ? aa_sock_msg_perm+0xf1/0x1d0 [ 909.532450][T30896] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 909.532473][T30896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 909.532493][T30896] __sock_sendmsg+0x21c/0x270 [ 909.532523][T30896] ____sys_sendmsg+0x505/0x830 [ 909.532550][T30896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 909.532580][T30896] ? import_iovec+0x74/0xa0 [ 909.532608][T30896] ___sys_sendmsg+0x21f/0x2a0 [ 909.532633][T30896] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.532678][T30896] ? __fget_files+0x2a/0x420 [ 909.532697][T30896] ? __fget_files+0x3a0/0x420 [ 909.532722][T30896] __x64_sys_sendmsg+0x19b/0x260 [ 909.532747][T30896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 909.532777][T30896] ? __pfx_ksys_write+0x10/0x10 [ 909.532804][T30896] ? rcu_is_watching+0x15/0xb0 [ 909.532836][T30896] ? rcu_is_watching+0x15/0xb0 [ 909.532859][T30896] do_syscall_64+0xfa/0x3b0 [ 909.532880][T30896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.532901][T30896] ? clear_bhb_loop+0x60/0xb0 [ 909.532925][T30896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.532945][T30896] RIP: 0033:0x7f9deb78ebe9 [ 909.532963][T30896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.532981][T30896] RSP: 002b:00007f9de99ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.533006][T30896] RAX: ffffffffffffffda RBX: 00007f9deb9b5fa0 RCX: 00007f9deb78ebe9 [ 909.533022][T30896] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 909.533036][T30896] RBP: 00007f9de99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 909.533051][T30896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.533064][T30896] R13: 00007f9deb9b6038 R14: 00007f9deb9b5fa0 R15: 00007ffc709256c8 [ 909.533089][T30896] [ 909.943506][T30900] netlink: 'syz.0.7020': attribute type 12 has an invalid length. [ 910.020896][T30908] gretap3: entered promiscuous mode [ 910.062346][T30886] lo speed is unknown, defaulting to 1000 [ 910.077112][T30886] wg1 speed is unknown, defaulting to 1000 [ 910.084528][T30886] hsr0 speed is unknown, defaulting to 1000 [ 910.164612][T30913] FAULT_INJECTION: forcing a failure. [ 910.164612][T30913] name failslab, interval 1, probability 0, space 0, times 0 [ 910.177803][T30913] CPU: 0 UID: 0 PID: 30913 Comm: syz.3.7026 Not tainted syzkaller #0 PREEMPT(full) [ 910.177834][T30913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 910.177857][T30913] Call Trace: [ 910.177867][T30913] [ 910.177877][T30913] dump_stack_lvl+0x189/0x250 [ 910.177909][T30913] ? __pfx____ratelimit+0x10/0x10 [ 910.177941][T30913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 910.177967][T30913] ? __pfx__printk+0x10/0x10 [ 910.178001][T30913] ? __pfx___might_resched+0x10/0x10 [ 910.178021][T30913] ? lock_acquire+0x5f/0x360 [ 910.178054][T30913] should_fail_ex+0x414/0x560 [ 910.178086][T30913] should_failslab+0xa8/0x100 [ 910.178119][T30913] __kmalloc_cache_noprof+0x70/0x3d0 [ 910.178150][T30913] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 910.178173][T30913] ? rcu_is_watching+0x15/0xb0 [ 910.178198][T30913] __xdp_reg_mem_model+0x1d8/0x5a0 [ 910.178225][T30913] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 910.178250][T30913] ? page_pool_create_percpu+0x800/0xbe0 [ 910.178280][T30913] xdp_reg_mem_model+0x22/0x40 [ 910.178303][T30913] bpf_test_run_xdp_live+0x215/0x1b10 [ 910.178341][T30913] ? stack_trace_save+0x9c/0xe0 [ 910.178368][T30913] ? stack_depot_save_flags+0x40/0x860 [ 910.178397][T30913] ? unwind_next_frame+0x11/0x2390 [ 910.178427][T30913] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 910.178459][T30913] ? bpf_test_init+0xc2/0x170 [ 910.178487][T30913] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 910.178519][T30913] ? bpf_prog_test_run+0x2c7/0x340 [ 910.178548][T30913] ? __sys_bpf+0x581/0x870 [ 910.178574][T30913] ? __x64_sys_bpf+0x7c/0x90 [ 910.178618][T30913] ? __might_fault+0xb0/0x130 [ 910.178645][T30913] ? rcu_is_watching+0x15/0xb0 [ 910.178667][T30913] ? lock_acquire+0x5f/0x360 [ 910.178703][T30913] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 910.178725][T30913] ? __might_fault+0xcc/0x130 [ 910.178763][T30913] ? _copy_from_user+0x94/0xb0 [ 910.178787][T30913] ? bpf_test_init+0x133/0x170 [ 910.178817][T30913] ? xdp_convert_md_to_buff+0x5b/0x330 [ 910.178851][T30913] bpf_prog_test_run_xdp+0x713/0x1000 [ 910.178890][T30913] ? rcu_is_watching+0x15/0xb0 [ 910.178920][T30913] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 910.178956][T30913] ? __fget_files+0x2a/0x420 [ 910.178979][T30913] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 910.179012][T30913] bpf_prog_test_run+0x2c7/0x340 [ 910.179044][T30913] __sys_bpf+0x581/0x870 [ 910.179073][T30913] ? __pfx___sys_bpf+0x10/0x10 [ 910.179110][T30913] ? ksys_write+0x22a/0x250 [ 910.179140][T30913] ? __pfx_ksys_write+0x10/0x10 [ 910.179167][T30913] ? rcu_is_watching+0x15/0xb0 [ 910.179192][T30913] __x64_sys_bpf+0x7c/0x90 [ 910.179218][T30913] do_syscall_64+0xfa/0x3b0 [ 910.179239][T30913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.179261][T30913] ? clear_bhb_loop+0x60/0xb0 [ 910.179285][T30913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.179305][T30913] RIP: 0033:0x7fe51798ebe9 [ 910.179323][T30913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.179342][T30913] RSP: 002b:00007fe518725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 910.179365][T30913] RAX: ffffffffffffffda RBX: 00007fe517bb5fa0 RCX: 00007fe51798ebe9 [ 910.179381][T30913] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 910.179395][T30913] RBP: 00007fe518725090 R08: 0000000000000000 R09: 0000000000000000 [ 910.179408][T30913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 910.179421][T30913] R13: 00007fe517bb6038 R14: 00007fe517bb5fa0 R15: 00007fff76576578 [ 910.179447][T30913] [ 911.002090][T30946] __nla_validate_parse: 4 callbacks suppressed [ 911.002114][T30946] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7037'. [ 911.600288][T30985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7050'. [ 911.797488][T30998] bond0: (slave wlan1): Releasing backup interface [ 911.828741][T30998] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 911.852637][T31008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7055'. [ 912.182373][T31016] tipc: Enabling of bearer rejected, failed to enable media [ 912.447786][T31027] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7058'. [ 912.565434][T31044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7066'. [ 912.627760][T31049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7069'. [ 912.710328][T31047] lo speed is unknown, defaulting to 1000 [ 912.746281][T31045] FAULT_INJECTION: forcing a failure. [ 912.746281][T31045] name failslab, interval 1, probability 0, space 0, times 0 [ 912.762802][ T30] audit: type=1800 audit(1756151899.979:157): pid=31045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7067" name="cgroup.controllers" dev="tmpfs" ino=7561 res=0 errno=0 [ 912.784474][T31045] CPU: 1 UID: 0 PID: 31045 Comm: syz.3.7067 Not tainted syzkaller #0 PREEMPT(full) [ 912.784523][T31045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 912.784537][T31045] Call Trace: [ 912.784545][T31045] [ 912.784556][T31045] dump_stack_lvl+0x189/0x250 [ 912.784594][T31045] ? __pfx____ratelimit+0x10/0x10 [ 912.784626][T31045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 912.784654][T31045] ? __pfx__printk+0x10/0x10 [ 912.784692][T31045] ? fs_reclaim_acquire+0x7d/0x100 [ 912.784731][T31045] ? rcu_is_watching+0x15/0xb0 [ 912.784755][T31045] ? __pfx___might_resched+0x10/0x10 [ 912.784778][T31045] ? lock_acquire+0x5f/0x360 [ 912.784817][T31045] should_fail_ex+0x414/0x560 [ 912.784853][T31045] should_failslab+0xa8/0x100 [ 912.784891][T31045] __kmalloc_noprof+0xcb/0x4f0 [ 912.784923][T31045] ? ima_alloc_init_template+0x93/0x6f0 [ 912.784953][T31045] ? __asan_memcpy+0x40/0x70 [ 912.784984][T31045] ima_alloc_init_template+0x93/0x6f0 [ 912.785013][T31045] ? prepend_path+0x4d/0x830 [ 912.785046][T31045] ima_store_measurement+0x1b7/0x640 [ 912.785083][T31045] ? __pfx_ima_store_measurement+0x10/0x10 [ 912.785114][T31045] ? ima_d_path+0x189/0x250 [ 912.785149][T31045] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 912.785180][T31045] process_measurement+0x11eb/0x1a40 [ 912.785216][T31045] ? rcu_is_watching+0x15/0xb0 [ 912.785244][T31045] ? __pfx_process_measurement+0x10/0x10 [ 912.785270][T31045] ? rcu_is_watching+0x15/0xb0 [ 912.785294][T31045] ? rcu_is_watching+0x15/0xb0 [ 912.785336][T31045] ? get_pid_task+0x20/0x1f0 [ 912.785364][T31045] ? get_pid_task+0x20/0x1f0 [ 912.785394][T31045] ? rcu_is_watching+0x15/0xb0 [ 912.785424][T31045] ? lock_release+0x4b/0x3e0 [ 912.785464][T31045] ima_file_mmap+0x1a2/0x1f0 [ 912.785490][T31045] ? __pfx_ima_file_mmap+0x10/0x10 [ 912.785526][T31045] ? vfs_write+0x956/0xb30 [ 912.785560][T31045] ? common_file_perm+0x1b5/0x230 [ 912.785601][T31045] security_mmap_file+0x7a4/0xa60 [ 912.785636][T31045] vm_mmap_pgoff+0x129/0x4d0 [ 912.785664][T31045] ? rcu_is_watching+0x15/0xb0 [ 912.785691][T31045] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 912.785718][T31045] ? lock_release+0x4b/0x3e0 [ 912.785757][T31045] ? __fget_files+0x3a0/0x420 [ 912.785777][T31045] ? __fget_files+0x2a/0x420 [ 912.785802][T31045] ksys_mmap_pgoff+0x51f/0x760 [ 912.785839][T31045] do_syscall_64+0xfa/0x3b0 [ 912.785863][T31045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.785887][T31045] ? clear_bhb_loop+0x60/0xb0 [ 912.785915][T31045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.785940][T31045] RIP: 0033:0x7fe51798ebe9 [ 912.785969][T31045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.785990][T31045] RSP: 002b:00007fe518725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 912.786017][T31045] RAX: ffffffffffffffda RBX: 00007fe517bb5fa0 RCX: 00007fe51798ebe9 [ 912.786036][T31045] RDX: 000000000100000c RSI: 0000000000003000 RDI: 00002000007a6000 [ 912.786054][T31045] RBP: 00007fe518725090 R08: 0000000000000005 R09: 0000000000000000 [ 912.786071][T31045] R10: 0000000000022051 R11: 0000000000000246 R12: 0000000000000002 [ 912.786087][T31045] R13: 00007fe517bb6038 R14: 00007fe517bb5fa0 R15: 00007fff76576578 [ 912.786119][T31045] [ 912.980658][T31060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7073'. [ 913.051196][T31047] lo speed is unknown, defaulting to 1000 [ 913.099408][T31060] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 913.108735][T31047] wg1 speed is unknown, defaulting to 1000 [ 913.124683][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.132168][ T30] audit: type=1804 audit(1756151900.019:158): pid=31045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.7067" name="/newroot/1473/cgroup.controllers" dev="tmpfs" ino=7561 res=0 errno=0 [ 913.177316][T31047] hsr0 speed is unknown, defaulting to 1000 [ 913.527023][T31084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7078'. [ 913.556284][T31083] tipc: Enabled bearer , priority 0 [ 913.567701][T31083] syzkaller0: entered promiscuous mode [ 913.573309][T31083] syzkaller0: entered allmulticast mode [ 913.593281][T31083] tipc: Resetting bearer [ 913.619501][T31082] tipc: Resetting bearer [ 913.629321][T31082] tipc: Disabling bearer [ 913.637231][T31088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7080'. [ 913.808038][T31096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7082'. [ 914.488136][T31129] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 914.700561][T31139] lo speed is unknown, defaulting to 1000 [ 914.781425][T31145] netlink: 'syz.1.7101': attribute type 16 has an invalid length. [ 914.796801][T31145] netlink: 'syz.1.7101': attribute type 3 has an invalid length. [ 914.891220][T31139] lo speed is unknown, defaulting to 1000 [ 914.898583][T31139] wg1 speed is unknown, defaulting to 1000 [ 914.905670][T31139] hsr0 speed is unknown, defaulting to 1000 [ 915.000250][T31155] tipc: Enabled bearer , priority 0 [ 915.008095][T31155] syzkaller0: entered promiscuous mode [ 915.013615][T31155] syzkaller0: entered allmulticast mode [ 915.035980][T31155] tipc: Resetting bearer [ 915.053353][T31154] tipc: Resetting bearer [ 915.081141][T31154] tipc: Disabling bearer [ 915.125598][T31160] netlink: 'syz.0.7108': attribute type 1 has an invalid length. [ 915.670564][T31190] syzkaller1: entered promiscuous mode [ 915.676129][T31190] syzkaller1: entered allmulticast mode [ 915.754709][T31194] netlink: 'syz.1.7120': attribute type 1 has an invalid length. [ 915.868523][T31194] bond6: entered promiscuous mode [ 915.874123][T31194] 8021q: adding VLAN 0 to HW filter on device bond6 [ 915.945139][T31196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 915.957149][T31196] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 915.968197][T31196] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 915.981749][T31196] bond6: (slave wireguard0): making interface the new active one [ 915.990156][T31196] wireguard0: entered promiscuous mode [ 915.999724][T31196] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 916.489779][T31218] macvlan4: entered allmulticast mode [ 916.497400][T31218] veth1_vlan: entered allmulticast mode [ 916.515635][T31218] veth1_vlan: left allmulticast mode [ 916.619120][ T30] audit: type=1800 audit(1756151903.859:159): pid=31221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7129" name=CB dev="tmpfs" ino=7613 res=0 errno=0 [ 916.892367][T31247] FAULT_INJECTION: forcing a failure. [ 916.892367][T31247] name failslab, interval 1, probability 0, space 0, times 0 [ 916.965531][T31247] CPU: 0 UID: 0 PID: 31247 Comm: syz.0.7135 Not tainted syzkaller #0 PREEMPT(full) [ 916.965566][T31247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 916.965582][T31247] Call Trace: [ 916.965590][T31247] [ 916.965600][T31247] dump_stack_lvl+0x189/0x250 [ 916.965632][T31247] ? __pfx____ratelimit+0x10/0x10 [ 916.965665][T31247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 916.965691][T31247] ? __pfx__printk+0x10/0x10 [ 916.965722][T31247] ? fs_reclaim_acquire+0x7d/0x100 [ 916.965755][T31247] ? rcu_is_watching+0x15/0xb0 [ 916.965776][T31247] ? __pfx___might_resched+0x10/0x10 [ 916.965795][T31247] ? lock_acquire+0x5f/0x360 [ 916.965828][T31247] should_fail_ex+0x414/0x560 [ 916.965860][T31247] should_failslab+0xa8/0x100 [ 916.965893][T31247] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 916.965929][T31247] ? __alloc_skb+0x112/0x2d0 [ 916.965952][T31247] __alloc_skb+0x112/0x2d0 [ 916.965975][T31247] netlink_sendmsg+0x5c6/0xb30 [ 916.966001][T31247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.966024][T31247] ? aa_sock_msg_perm+0xf1/0x1d0 [ 916.966046][T31247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 916.966077][T31247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.966098][T31247] __sock_sendmsg+0x21c/0x270 [ 916.966130][T31247] ____sys_sendmsg+0x505/0x830 [ 916.966156][T31247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 916.966185][T31247] ? import_iovec+0x74/0xa0 [ 916.966221][T31247] ___sys_sendmsg+0x21f/0x2a0 [ 916.966244][T31247] ? __pfx____sys_sendmsg+0x10/0x10 [ 916.966286][T31247] ? __fget_files+0x2a/0x420 [ 916.966305][T31247] ? __fget_files+0x3a0/0x420 [ 916.966333][T31247] __x64_sys_sendmsg+0x19b/0x260 [ 916.966357][T31247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 916.966385][T31247] ? __pfx_ksys_write+0x10/0x10 [ 916.966411][T31247] ? rcu_is_watching+0x15/0xb0 [ 916.966434][T31247] ? rcu_is_watching+0x15/0xb0 [ 916.966456][T31247] do_syscall_64+0xfa/0x3b0 [ 916.966477][T31247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.966499][T31247] ? clear_bhb_loop+0x60/0xb0 [ 916.966524][T31247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.966546][T31247] RIP: 0033:0x7ff75918ebe9 [ 916.966565][T31247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.966585][T31247] RSP: 002b:00007ff75a083038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.966609][T31247] RAX: ffffffffffffffda RBX: 00007ff7593b5fa0 RCX: 00007ff75918ebe9 [ 916.966626][T31247] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 916.966640][T31247] RBP: 00007ff75a083090 R08: 0000000000000000 R09: 0000000000000000 [ 916.966655][T31247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.966669][T31247] R13: 00007ff7593b6038 R14: 00007ff7593b5fa0 R15: 00007ffc88f2bc58 [ 916.966696][T31247] [ 917.282280][T31263] __nla_validate_parse: 8 callbacks suppressed [ 917.282304][T31263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7140'. [ 917.394286][T31267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 917.415786][T31267] tipc: Failed to remove unknown binding: 66,1,1/167082393:2403432156/2403432158 [ 917.516990][T31267] tipc: Failed to remove unknown binding: 66,1,1/167082393:2403432156/2403432158 [ 917.543381][T31267] tipc: Failed to remove unknown binding: 66,1,1/167082393:2403432156/2403432158 [ 917.617883][T31288] netlink: 788 bytes leftover after parsing attributes in process `syz.0.7142'. [ 917.784678][T31294] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 917.840611][T31301] tipc: Enabling of bearer rejected, already enabled [ 917.855359][T31299] vlan2: entered promiscuous mode [ 917.864329][T31299] macvtap0: entered promiscuous mode [ 917.905980][T31304] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7154'. [ 917.977608][T31311] IPv6: NLM_F_REPLACE set, but no existing node found! [ 917.992173][T31301] syz_tun: refused to change device tx_queue_len [ 918.213584][T31332] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7165'. [ 918.427805][T31347] netlink: 'syz.1.7171': attribute type 1 has an invalid length. [ 918.452920][T31347] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7171'. [ 918.509562][T31356] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 918.582466][T31358] tipc: Enabled bearer , priority 0 [ 918.611676][T31358] syzkaller0: entered promiscuous mode [ 918.628933][T31358] syzkaller0: entered allmulticast mode [ 918.660103][T31358] tipc: Resetting bearer [ 918.676548][T31357] tipc: Resetting bearer [ 918.703036][T31357] tipc: Disabling bearer [ 918.809271][T31375] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 918.883479][T31382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7180'. [ 918.944669][T31383] FAULT_INJECTION: forcing a failure. [ 918.944669][T31383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.953882][T31387] netlink: 'syz.4.7186': attribute type 1 has an invalid length. [ 918.966046][T31383] CPU: 0 UID: 0 PID: 31383 Comm: syz.2.7184 Not tainted syzkaller #0 PREEMPT(full) [ 918.966073][T31383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 918.966086][T31383] Call Trace: [ 918.966094][T31383] [ 918.966103][T31383] dump_stack_lvl+0x189/0x250 [ 918.966132][T31383] ? __pfx____ratelimit+0x10/0x10 [ 918.966164][T31383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.966191][T31383] ? __pfx__printk+0x10/0x10 [ 918.966217][T31383] ? __might_fault+0xb0/0x130 [ 918.966252][T31383] ? rcu_is_watching+0x15/0xb0 [ 918.966276][T31383] should_fail_ex+0x414/0x560 [ 918.966307][T31383] _copy_from_user+0x2d/0xb0 [ 918.966336][T31383] ___sys_recvmsg+0x12e/0x510 [ 918.966362][T31383] ? __pfx____sys_recvmsg+0x10/0x10 [ 918.966389][T31383] ? __fget_files+0x2a/0x420 [ 918.966417][T31383] ? rcu_is_watching+0x15/0xb0 [ 918.966437][T31383] ? lock_release+0x4b/0x3e0 [ 918.966469][T31383] ? __might_fault+0xcc/0x130 [ 918.966499][T31383] do_recvmmsg+0x307/0x770 [ 918.966527][T31383] ? __pfx_do_recvmmsg+0x10/0x10 [ 918.966559][T31383] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 918.966603][T31383] __x64_sys_recvmmsg+0x190/0x240 [ 918.966628][T31383] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 918.966650][T31383] ? rcu_is_watching+0x15/0xb0 [ 918.966674][T31383] ? rcu_is_watching+0x15/0xb0 [ 918.966705][T31383] do_syscall_64+0xfa/0x3b0 [ 918.966725][T31383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.966747][T31383] ? clear_bhb_loop+0x60/0xb0 [ 918.966772][T31383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.966794][T31383] RIP: 0033:0x7f737ef8ebe9 [ 918.966814][T31383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.966832][T31383] RSP: 002b:00007f737fdbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 918.966854][T31383] RAX: ffffffffffffffda RBX: 00007f737f1b5fa0 RCX: 00007f737ef8ebe9 [ 918.966870][T31383] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 918.966884][T31383] RBP: 00007f737fdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 918.966897][T31383] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 918.966910][T31383] R13: 00007f737f1b6038 R14: 00007f737f1b5fa0 R15: 00007ffd24f5a4a8 [ 918.966937][T31383] [ 918.968835][T31378] sctp: [Deprecated]: syz.3.7183 (pid 31378) Use of int in max_burst socket option. [ 918.968835][T31378] Use struct sctp_assoc_value instead [ 919.034653][T31387] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7186'. [ 919.258208][T31396] netlink: 'syz.1.7188': attribute type 16 has an invalid length. [ 919.278131][T31396] netlink: 'syz.1.7188': attribute type 3 has an invalid length. [ 919.301807][T31396] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.7188'. [ 919.448806][T31415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7197'. [ 919.561109][T31423] FAULT_INJECTION: forcing a failure. [ 919.561109][T31423] name failslab, interval 1, probability 0, space 0, times 0 [ 919.593111][T31423] CPU: 1 UID: 0 PID: 31423 Comm: syz.1.7200 Not tainted syzkaller #0 PREEMPT(full) [ 919.593145][T31423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 919.593159][T31423] Call Trace: [ 919.593168][T31423] [ 919.593178][T31423] dump_stack_lvl+0x189/0x250 [ 919.593210][T31423] ? __pfx____ratelimit+0x10/0x10 [ 919.593242][T31423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 919.593268][T31423] ? __pfx__printk+0x10/0x10 [ 919.593299][T31423] ? fs_reclaim_acquire+0x7d/0x100 [ 919.593332][T31423] ? rcu_is_watching+0x15/0xb0 [ 919.593355][T31423] ? __pfx___might_resched+0x10/0x10 [ 919.593375][T31423] ? lock_acquire+0x5f/0x360 [ 919.593409][T31423] should_fail_ex+0x414/0x560 [ 919.593440][T31423] should_failslab+0xa8/0x100 [ 919.593473][T31423] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 919.593503][T31423] ? __alloc_skb+0x112/0x2d0 [ 919.593526][T31423] __alloc_skb+0x112/0x2d0 [ 919.593549][T31423] netlink_sendmsg+0x5c6/0xb30 [ 919.593576][T31423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 919.593598][T31423] ? aa_sock_msg_perm+0xf1/0x1d0 [ 919.593619][T31423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 919.593643][T31423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 919.593664][T31423] __sock_sendmsg+0x21c/0x270 [ 919.593695][T31423] ____sys_sendmsg+0x505/0x830 [ 919.593721][T31423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 919.593750][T31423] ? import_iovec+0x74/0xa0 [ 919.593776][T31423] ___sys_sendmsg+0x21f/0x2a0 [ 919.593800][T31423] ? __pfx____sys_sendmsg+0x10/0x10 [ 919.593846][T31423] ? __fget_files+0x2a/0x420 [ 919.593865][T31423] ? __fget_files+0x3a0/0x420 [ 919.593891][T31423] __x64_sys_sendmsg+0x19b/0x260 [ 919.593922][T31423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 919.593952][T31423] ? __pfx_ksys_write+0x10/0x10 [ 919.593979][T31423] ? rcu_is_watching+0x15/0xb0 [ 919.594004][T31423] ? rcu_is_watching+0x15/0xb0 [ 919.594027][T31423] do_syscall_64+0xfa/0x3b0 [ 919.594047][T31423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.594068][T31423] ? clear_bhb_loop+0x60/0xb0 [ 919.594092][T31423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.594117][T31423] RIP: 0033:0x7fc172f8ebe9 [ 919.594137][T31423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.594157][T31423] RSP: 002b:00007fc173d8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.594180][T31423] RAX: ffffffffffffffda RBX: 00007fc1731b5fa0 RCX: 00007fc172f8ebe9 [ 919.594197][T31423] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 919.594212][T31423] RBP: 00007fc173d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 919.594226][T31423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.594239][T31423] R13: 00007fc1731b6038 R14: 00007fc1731b5fa0 R15: 00007ffee754d5c8 [ 919.594265][T31423] [ 919.890525][T31428] netlink: 'syz.0.7202': attribute type 1 has an invalid length. [ 919.905636][T31428] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7202'. [ 919.920365][T31431] tipc: Started in network mode [ 919.925297][T31431] tipc: Node identity 82b4d32778c9, cluster identity 4711 [ 919.932795][T31431] tipc: Enabled bearer , priority 0 [ 919.942962][T31431] syzkaller0: entered promiscuous mode [ 919.948615][T31431] syzkaller0: entered allmulticast mode [ 919.967299][T31431] tipc: Resetting bearer [ 919.989344][T31426] tipc: Resetting bearer [ 920.011661][T31426] tipc: Disabling bearer [ 920.453568][T31462] netlink: 'syz.3.7218': attribute type 1 has an invalid length. [ 920.490052][T31465] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 920.516744][T31465] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 920.557557][T31465] syzkaller1: entered promiscuous mode [ 920.563482][T31465] syzkaller1: entered allmulticast mode [ 920.731537][T31483] netlink: 'syz.2.7226': attribute type 4 has an invalid length. [ 921.067777][T31497] netlink: 'syz.4.7232': attribute type 1 has an invalid length. [ 921.580288][T31527] netlink: 'syz.1.7238': attribute type 4 has an invalid length. [ 921.775638][T31542] netlink: 'syz.4.7247': attribute type 1 has an invalid length. [ 921.814507][ T3585] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 921.827780][ T3585] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 921.851764][ T3585] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 921.881802][ T3585] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 921.898504][ T3585] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 921.920157][T31550] vlan0: entered promiscuous mode [ 921.926222][T31550] netlink: 'syz.2.7249': attribute type 27 has an invalid length. [ 921.935988][ T3585] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 921.955143][ T3585] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 921.965183][ T3585] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 922.002357][T31563] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 922.177084][T31572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.204841][T31572] tipc: Failed to remove unknown binding: 66,1,1/0:1766768388/1766768390 [ 922.236114][T31572] tipc: Failed to remove unknown binding: 66,1,1/0:1766768388/1766768390 [ 922.247704][T31572] tipc: Failed to remove unknown binding: 66,1,1/0:1766768388/1766768390 [ 922.291697][T31580] __nla_validate_parse: 8 callbacks suppressed [ 922.291721][T31580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7257'. [ 922.379644][T31581] netlink: 788 bytes leftover after parsing attributes in process `syz.1.7256'. [ 923.264047][T31638] netlink: 'syz.1.7276': attribute type 1 has an invalid length. [ 923.285077][T31638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7276'. [ 923.297948][T31637] FAULT_INJECTION: forcing a failure. [ 923.297948][T31637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.325928][T31639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7276'. [ 923.352918][T31639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7276'. [ 923.371003][T31638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7276'. [ 923.394472][T31638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7276'. [ 923.404239][T31637] CPU: 1 UID: 0 PID: 31637 Comm: syz.4.7275 Not tainted syzkaller #0 PREEMPT(full) [ 923.404270][T31637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 923.404295][T31637] Call Trace: [ 923.404304][T31637] [ 923.404314][T31637] dump_stack_lvl+0x189/0x250 [ 923.404346][T31637] ? __pfx____ratelimit+0x10/0x10 [ 923.404378][T31637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.404404][T31637] ? __pfx__printk+0x10/0x10 [ 923.404438][T31637] ? rcu_is_watching+0x15/0xb0 [ 923.404462][T31637] should_fail_ex+0x414/0x560 [ 923.404492][T31637] _copy_to_user+0x31/0xb0 [ 923.404519][T31637] simple_read_from_buffer+0xe1/0x170 [ 923.404558][T31637] proc_fail_nth_read+0x1b3/0x220 [ 923.404584][T31637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 923.404609][T31637] ? rw_verify_area+0x2a6/0x4d0 [ 923.404637][T31637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 923.404662][T31637] vfs_read+0x1fd/0xa30 [ 923.404688][T31637] ? fdget_pos+0x247/0x320 [ 923.404710][T31637] ? __pfx___mutex_lock+0x10/0x10 [ 923.404730][T31637] ? __pfx_vfs_read+0x10/0x10 [ 923.404762][T31637] ? __fget_files+0x3a0/0x420 [ 923.404780][T31637] ? __fget_files+0x2a/0x420 [ 923.404804][T31637] ksys_read+0x145/0x250 [ 923.404830][T31637] ? lock_release+0x4b/0x3e0 [ 923.404862][T31637] ? __pfx_ksys_read+0x10/0x10 [ 923.404889][T31637] ? rcu_is_watching+0x15/0xb0 [ 923.404910][T31637] ? trace_sys_enter+0x25/0x100 [ 923.404946][T31637] do_syscall_64+0xfa/0x3b0 [ 923.404966][T31637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.404988][T31637] ? clear_bhb_loop+0x60/0xb0 [ 923.405013][T31637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.405035][T31637] RIP: 0033:0x7f9deb78d5fc [ 923.405053][T31637] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 923.405074][T31637] RSP: 002b:00007f9de99ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 923.405098][T31637] RAX: ffffffffffffffda RBX: 00007f9deb9b5fa0 RCX: 00007f9deb78d5fc [ 923.405114][T31637] RDX: 000000000000000f RSI: 00007f9de99ee0a0 RDI: 0000000000000006 [ 923.405128][T31637] RBP: 00007f9de99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 923.405142][T31637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.405155][T31637] R13: 00007f9deb9b6038 R14: 00007f9deb9b5fa0 R15: 00007ffc709256c8 [ 923.405182][T31637] [ 923.945941][T31659] netlink: 'syz.0.7285': attribute type 1 has an invalid length. [ 923.955960][T31659] netlink: 208 bytes leftover after parsing attributes in process `syz.0.7285'. [ 924.154256][T31675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7289'. [ 924.302376][T31683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7294'. [ 924.469773][T31696] FAULT_INJECTION: forcing a failure. [ 924.469773][T31696] name failslab, interval 1, probability 0, space 0, times 0 [ 924.483308][T31696] CPU: 1 UID: 0 PID: 31696 Comm: syz.4.7297 Not tainted syzkaller #0 PREEMPT(full) [ 924.483341][T31696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 924.483356][T31696] Call Trace: [ 924.483365][T31696] [ 924.483376][T31696] dump_stack_lvl+0x189/0x250 [ 924.483408][T31696] ? __pfx____ratelimit+0x10/0x10 [ 924.483440][T31696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 924.483466][T31696] ? __pfx__printk+0x10/0x10 [ 924.483497][T31696] ? fs_reclaim_acquire+0x7d/0x100 [ 924.483529][T31696] ? rcu_is_watching+0x15/0xb0 [ 924.483550][T31696] ? __pfx___might_resched+0x10/0x10 [ 924.483570][T31696] ? lock_acquire+0x5f/0x360 [ 924.483603][T31696] should_fail_ex+0x414/0x560 [ 924.483634][T31696] should_failslab+0xa8/0x100 [ 924.483666][T31696] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 924.483697][T31696] ? __alloc_skb+0x112/0x2d0 [ 924.483719][T31696] __alloc_skb+0x112/0x2d0 [ 924.483742][T31696] netlink_sendmsg+0x5c6/0xb30 [ 924.483769][T31696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.483791][T31696] ? aa_sock_msg_perm+0xf1/0x1d0 [ 924.483813][T31696] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 924.483836][T31696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.483856][T31696] __sock_sendmsg+0x21c/0x270 [ 924.483887][T31696] ____sys_sendmsg+0x505/0x830 [ 924.483914][T31696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 924.483943][T31696] ? import_iovec+0x74/0xa0 [ 924.483970][T31696] ___sys_sendmsg+0x21f/0x2a0 [ 924.483994][T31696] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.484040][T31696] ? __fget_files+0x2a/0x420 [ 924.484059][T31696] ? __fget_files+0x3a0/0x420 [ 924.484085][T31696] __x64_sys_sendmsg+0x19b/0x260 [ 924.484110][T31696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 924.484139][T31696] ? __pfx_ksys_write+0x10/0x10 [ 924.484167][T31696] ? rcu_is_watching+0x15/0xb0 [ 924.484192][T31696] ? rcu_is_watching+0x15/0xb0 [ 924.484223][T31696] do_syscall_64+0xfa/0x3b0 [ 924.484245][T31696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.484268][T31696] ? clear_bhb_loop+0x60/0xb0 [ 924.484293][T31696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.484315][T31696] RIP: 0033:0x7f9deb78ebe9 [ 924.484336][T31696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.484354][T31696] RSP: 002b:00007f9de99cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.484378][T31696] RAX: ffffffffffffffda RBX: 00007f9deb9b6090 RCX: 00007f9deb78ebe9 [ 924.484395][T31696] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 924.484409][T31696] RBP: 00007f9de99cd090 R08: 0000000000000000 R09: 0000000000000000 [ 924.484424][T31696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.484437][T31696] R13: 00007f9deb9b6128 R14: 00007f9deb9b6090 R15: 00007ffc709256c8 [ 924.484465][T31696] [ 925.764232][T31721] tipc: Enabled bearer , priority 0 [ 925.774041][T31721] sch_fq: defrate 257 ignored. [ 925.793702][T31721] tipc: Resetting bearer [ 925.809411][T31720] tipc: Disabling bearer [ 926.390451][T31763] lo speed is unknown, defaulting to 1000 [ 926.600576][T31778] syz.4.7329: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 926.623087][T31776] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 926.646797][T31778] CPU: 0 UID: 0 PID: 31778 Comm: syz.4.7329 Not tainted syzkaller #0 PREEMPT(full) [ 926.646831][T31778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 926.646846][T31778] Call Trace: [ 926.646855][T31778] [ 926.646867][T31778] dump_stack_lvl+0x189/0x250 [ 926.646901][T31778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.646928][T31778] ? __pfx__printk+0x10/0x10 [ 926.646957][T31778] ? lock_release+0x4b/0x3e0 [ 926.646991][T31778] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 926.647019][T31778] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 926.647057][T31778] warn_alloc+0x214/0x310 [ 926.647092][T31778] ? stack_depot_save_flags+0x40/0x860 [ 926.647124][T31778] ? __pfx_warn_alloc+0x10/0x10 [ 926.647159][T31778] ? kasan_save_track+0x4f/0x80 [ 926.647187][T31778] ? xskq_create+0x56/0x170 [ 926.647217][T31778] ? xsk_init_queue+0xb0/0x110 [ 926.647245][T31778] ? xsk_setsockopt+0x4dc/0x8d0 [ 926.647272][T31778] ? do_sock_setsockopt+0x179/0x1b0 [ 926.647294][T31778] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 926.647315][T31778] ? do_syscall_64+0xfa/0x3b0 [ 926.647333][T31778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.647360][T31778] __vmalloc_node_range_noprof+0x125/0x12f0 [ 926.647412][T31778] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 926.647446][T31778] ? xsk_setsockopt+0x462/0x8d0 [ 926.647472][T31778] ? __kasan_kmalloc+0x93/0xb0 [ 926.647504][T31778] vmalloc_user_noprof+0xad/0xf0 [ 926.647535][T31778] ? xskq_create+0xbf/0x170 [ 926.647566][T31778] xskq_create+0xbf/0x170 [ 926.647599][T31778] xsk_init_queue+0xb0/0x110 [ 926.647630][T31778] xsk_setsockopt+0x4dc/0x8d0 [ 926.647661][T31778] ? __pfx_xsk_setsockopt+0x10/0x10 [ 926.647688][T31778] ? rcu_is_watching+0x15/0xb0 [ 926.647710][T31778] ? __pfx_aa_sk_perm+0x10/0x10 [ 926.647743][T31778] ? aa_sock_opt_perm+0xff/0x1b0 [ 926.647765][T31778] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 926.647788][T31778] ? __pfx_xsk_setsockopt+0x10/0x10 [ 926.647817][T31778] do_sock_setsockopt+0x179/0x1b0 [ 926.647843][T31778] __x64_sys_setsockopt+0x13f/0x1b0 [ 926.647868][T31778] do_syscall_64+0xfa/0x3b0 [ 926.647888][T31778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.647909][T31778] ? clear_bhb_loop+0x60/0xb0 [ 926.647934][T31778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.647955][T31778] RIP: 0033:0x7f9deb78ebe9 [ 926.647976][T31778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.647996][T31778] RSP: 002b:00007f9de99ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 926.648022][T31778] RAX: ffffffffffffffda RBX: 00007f9deb9b5fa0 RCX: 00007f9deb78ebe9 [ 926.648048][T31778] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 926.648062][T31778] RBP: 00007f9deb811e19 R08: 0000000000000004 R09: 0000000000000000 [ 926.648076][T31778] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.648091][T31778] R13: 00007f9deb9b6038 R14: 00007f9deb9b5fa0 R15: 00007ffc709256c8 [ 926.648118][T31778] [ 926.648496][T31778] Mem-Info: [ 926.955466][T31780] FAULT_INJECTION: forcing a failure. [ 926.955466][T31780] name failslab, interval 1, probability 0, space 0, times 0 [ 926.956596][T31784] netlink: 'syz.3.7330': attribute type 10 has an invalid length. [ 926.988065][T31780] CPU: 1 UID: 0 PID: 31780 Comm: syz.0.7331 Not tainted syzkaller #0 PREEMPT(full) [ 926.988097][T31780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 926.988112][T31780] Call Trace: [ 926.988121][T31780] [ 926.988131][T31780] dump_stack_lvl+0x189/0x250 [ 926.988163][T31780] ? __pfx____ratelimit+0x10/0x10 [ 926.988195][T31780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.988221][T31780] ? __pfx__printk+0x10/0x10 [ 926.988261][T31780] ? fs_reclaim_acquire+0x7d/0x100 [ 926.988294][T31780] ? rcu_is_watching+0x15/0xb0 [ 926.988315][T31780] ? __pfx___might_resched+0x10/0x10 [ 926.988335][T31780] ? lock_acquire+0x5f/0x360 [ 926.988367][T31780] should_fail_ex+0x414/0x560 [ 926.988399][T31780] should_failslab+0xa8/0x100 [ 926.988432][T31780] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 926.988462][T31780] ? __alloc_skb+0x112/0x2d0 [ 926.988480][T31780] ? rcu_is_watching+0x15/0xb0 [ 926.988504][T31780] __alloc_skb+0x112/0x2d0 [ 926.988526][T31780] inet_netconf_notify_devconf+0x173/0x240 [ 926.988555][T31780] inetdev_event+0x77f/0x15b0 [ 926.988578][T31780] ? __pfx_del_netdev_ips+0x10/0x10 [ 926.988601][T31780] ? __pfx_pass_all_filter+0x10/0x10 [ 926.988625][T31780] ? __pfx_inetdev_event+0x10/0x10 [ 926.988656][T31780] notifier_call_chain+0x1b3/0x3e0 [ 926.988684][T31780] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 926.988723][T31780] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 926.988753][T31780] ? unregister_netdevice_queue+0x1b3/0x380 [ 926.988782][T31780] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 926.988810][T31780] ? __nla_parse+0x40/0x60 [ 926.988843][T31780] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 926.988868][T31780] rtnl_dellink+0x488/0x710 [ 926.988900][T31780] ? rcu_is_watching+0x15/0xb0 [ 926.988938][T31780] ? lock_release+0x4b/0x3e0 [ 926.988970][T31780] ? __pfx_rtnl_dellink+0x10/0x10 [ 926.989005][T31780] ? is_bpf_text_address+0x292/0x2b0 [ 926.989037][T31780] ? is_bpf_text_address+0x26/0x2b0 [ 926.989074][T31780] ? kernel_text_address+0xa5/0xe0 [ 926.989107][T31780] ? unwind_next_frame+0xa5/0x2390 [ 926.989131][T31780] ? rcu_is_watching+0x15/0xb0 [ 926.989186][T31780] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 926.989218][T31780] ? rcu_is_watching+0x15/0xb0 [ 926.989235][T31780] ? lock_release+0x4b/0x3e0 [ 926.989265][T31780] ? bpf_lsm_capable+0x9/0x20 [ 926.989289][T31780] ? security_capable+0x7e/0x2e0 [ 926.989317][T31780] ? __pfx_rtnl_dellink+0x10/0x10 [ 926.989343][T31780] rtnetlink_rcv_msg+0x7cf/0xb70 [ 926.989372][T31780] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 926.989397][T31780] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 926.989423][T31780] ? __netlink_lookup+0xbd/0x810 [ 926.989438][T31780] ? rcu_is_watching+0x15/0xb0 [ 926.989456][T31780] ? rcu_is_watching+0x15/0xb0 [ 926.989476][T31780] netlink_rcv_skb+0x205/0x470 [ 926.989504][T31780] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 926.989531][T31780] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 926.989568][T31780] netlink_unicast+0x82c/0x9e0 [ 926.989596][T31780] ? __pfx_netlink_unicast+0x10/0x10 [ 926.989620][T31780] ? netlink_sendmsg+0x642/0xb30 [ 926.989635][T31780] ? skb_put+0x11b/0x210 [ 926.989653][T31780] netlink_sendmsg+0x805/0xb30 [ 926.989674][T31780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.989691][T31780] ? aa_sock_msg_perm+0xf1/0x1d0 [ 926.989708][T31780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 926.989727][T31780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.989743][T31780] __sock_sendmsg+0x21c/0x270 [ 926.989767][T31780] ____sys_sendmsg+0x505/0x830 [ 926.989788][T31780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 926.989811][T31780] ? import_iovec+0x74/0xa0 [ 926.989833][T31780] ___sys_sendmsg+0x21f/0x2a0 [ 926.989852][T31780] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.989888][T31780] ? __fget_files+0x2a/0x420 [ 926.989903][T31780] ? __fget_files+0x3a0/0x420 [ 926.989923][T31780] __x64_sys_sendmsg+0x19b/0x260 [ 926.989943][T31780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 926.989966][T31780] ? __pfx_ksys_write+0x10/0x10 [ 926.989988][T31780] ? rcu_is_watching+0x15/0xb0 [ 926.990010][T31780] ? rcu_is_watching+0x15/0xb0 [ 926.990028][T31780] do_syscall_64+0xfa/0x3b0 [ 926.990045][T31780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.990062][T31780] ? clear_bhb_loop+0x60/0xb0 [ 926.990082][T31780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.990099][T31780] RIP: 0033:0x7ff75918ebe9 [ 926.990114][T31780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.990131][T31780] RSP: 002b:00007ff75a083038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.990151][T31780] RAX: ffffffffffffffda RBX: 00007ff7593b5fa0 RCX: 00007ff75918ebe9 [ 926.990164][T31780] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 926.990176][T31780] RBP: 00007ff75a083090 R08: 0000000000000000 R09: 0000000000000000 [ 926.990186][T31780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.990197][T31780] R13: 00007ff7593b6038 R14: 00007ff7593b5fa0 R15: 00007ffc88f2bc58 [ 926.990219][T31780] [ 926.990525][T31778] active_anon:10214 inactive_anon:0 isolated_anon:0 [ 926.990525][T31778] active_file:4092 inactive_file:40166 isolated_file:0 [ 926.990525][T31778] unevictable:768 dirty:259 writeback:0 [ 926.990525][T31778] slab_reclaimable:19246 slab_unreclaimable:166172 [ 926.990525][T31778] mapped:34855 shmem:4179 pagetables:1127 [ 926.990525][T31778] sec_pagetables:0 bounce:0 [ 926.990525][T31778] kernel_misc_reclaimable:0 [ 926.990525][T31778] free:1241488 free_pcp:15461 free_cma:0 [ 927.535250][T31778] Node 0 active_anon:41420kB inactive_anon:0kB active_file:16368kB inactive_file:160460kB unevictable:1504kB isolated(anon):0kB isolated(file):0kB mapped:143856kB dirty:1212kB writeback:0kB shmem:15444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14008kB pagetables:4464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 927.569966][T31781] veth0_to_bond: left allmulticast mode [ 927.572356][T31778] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 927.575834][T31781] veth0_to_bond: left promiscuous mode [ 927.611050][T31778] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.644406][T31781] bridge5: port 2(veth0_to_bond) entered disabled state [ 927.648300][T31778] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 927.657416][T31778] Node 0 DMA32 free:1054628kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41376kB inactive_anon:0kB active_file:16368kB inactive_file:158888kB unevictable:1536kB writepending:1244kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:53568kB local_pcp:20084kB free_cma:0kB [ 927.691951][T31778] lowmem_reserve[]: 0 0 1 1 1 [ 927.697834][T31778] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 927.727582][T31778] lowmem_reserve[]: 0 0 0 0 0 [ 927.732485][T31778] Node 1 Normal free:3899932kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4448kB local_pcp:0kB free_cma:0kB [ 927.732971][T31781] bond0: (slave batadv_slave_0): Releasing backup interface [ 927.772189][T31781] bond0: (slave batadv_slave_0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:3e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 927.790345][T31778] lowmem_reserve[]: 0 0 0 0 0 [ 927.795158][T31778] Node 0 DMA: [ 927.799235][T31781] bond0: (slave wlan1): Releasing backup interface [ 927.809746][T31778] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 927.821812][T31778] Node 0 DMA32: 800*4kB (UME) 88*8kB (UME) 19*16kB (UME) 241*32kB (UME) 264*64kB (UM) 46*128kB (UM) 91*256kB (UM) 9*512kB (UME) 3*1024kB (ME) 7*2048kB (UME) 238*4096kB (UM) = 1054864kB [ 927.822890][T31781] veth5: left allmulticast mode [ 927.840897][T31778] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 927.841038][T31778] Node 1 Normal: 171*4kB (UME) 46*8kB (UME) 48*16kB (UME) 238*32kB (UME) 105*64kB (UME) 26*128kB (UME) 8*256kB (UM) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3899932kB [ 927.841231][T31778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.841251][T31778] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 927.841270][T31778] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.841289][T31778] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 927.841307][T31778] 48478 total pagecache pages [ 927.849975][T31781] veth5: left promiscuous mode [ 927.866443][T31778] 0 pages in swap cache [ 927.877781][T31781] bridge5: port 1(veth5) entered disabled state [ 927.905424][T31778] Free swap = 124996kB [ 927.941278][T31781] vlan3: left allmulticast mode [ 927.942300][T31778] Total swap = 124996kB [ 927.946425][T31781] veth1: left allmulticast mode [ 927.950833][T31778] 2097051 pages RAM [ 927.955387][T31781] vlan3: left promiscuous mode [ 927.959433][T31778] 0 pages HighMem/MovableOnly [ 927.968162][T31781] veth1: left promiscuous mode [ 927.969883][T31778] 425663 pages reserved [ 927.974138][T31781] bridge5: port 3(vlan3) entered disabled state [ 927.978093][T31778] 0 pages cma reserved [ 927.991369][T31781] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 927.999866][T31781] batman_adv: batadv0: Removing interface: ip6gretap2 [ 928.011095][T31763] lo speed is unknown, defaulting to 1000 [ 928.011115][T31784] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 928.027626][T31784] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 928.041633][T31785] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 928.063434][T31785] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 928.075402][T31763] wg1 speed is unknown, defaulting to 1000 [ 928.081834][T31785] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 928.092493][T31763] hsr0 speed is unknown, defaulting to 1000 [ 928.245186][T31811] __nla_validate_parse: 8 callbacks suppressed [ 928.245208][T31811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7338'. [ 928.253158][T31812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7339'. [ 928.264212][T31813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7336'. [ 928.473792][T31825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7345'. [ 928.513924][T31828] netlink: 'syz.4.7346': attribute type 1 has an invalid length. [ 928.523396][T31828] netlink: 208 bytes leftover after parsing attributes in process `syz.4.7346'. [ 928.576701][T31825] netlink: 'syz.3.7345': attribute type 1 has an invalid length. [ 928.665379][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 928.675073][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 928.685471][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 928.701190][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 928.743389][T31836] FAULT_INJECTION: forcing a failure. [ 928.743389][T31836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.761326][T31836] CPU: 0 UID: 0 PID: 31836 Comm: syz.2.7349 Not tainted syzkaller #0 PREEMPT(full) [ 928.761360][T31836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 928.761374][T31836] Call Trace: [ 928.761383][T31836] [ 928.761393][T31836] dump_stack_lvl+0x189/0x250 [ 928.761425][T31836] ? __pfx____ratelimit+0x10/0x10 [ 928.761457][T31836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.761483][T31836] ? __pfx__printk+0x10/0x10 [ 928.761517][T31836] ? rcu_is_watching+0x15/0xb0 [ 928.761541][T31836] should_fail_ex+0x414/0x560 [ 928.761572][T31836] _copy_to_user+0x31/0xb0 [ 928.761599][T31836] simple_read_from_buffer+0xe1/0x170 [ 928.761633][T31836] proc_fail_nth_read+0x1b3/0x220 [ 928.761660][T31836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.761687][T31836] ? rw_verify_area+0x2a6/0x4d0 [ 928.761715][T31836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.761740][T31836] vfs_read+0x1fd/0xa30 [ 928.761767][T31836] ? fdget_pos+0x247/0x320 [ 928.761789][T31836] ? __pfx___mutex_lock+0x10/0x10 [ 928.761810][T31836] ? __pfx_vfs_read+0x10/0x10 [ 928.761847][T31836] ? array_map_lookup_elem+0x67/0x150 [ 928.761872][T31836] ? __fget_files+0x3a0/0x420 [ 928.761890][T31836] ? __fget_files+0x2a/0x420 [ 928.761915][T31836] ksys_read+0x145/0x250 [ 928.761941][T31836] ? lock_release+0x4b/0x3e0 [ 928.761974][T31836] ? __pfx_ksys_read+0x10/0x10 [ 928.762002][T31836] ? rcu_is_watching+0x15/0xb0 [ 928.762023][T31836] ? trace_sys_enter+0x25/0x100 [ 928.762058][T31836] do_syscall_64+0xfa/0x3b0 [ 928.762079][T31836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.762101][T31836] ? clear_bhb_loop+0x60/0xb0 [ 928.762131][T31836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.762152][T31836] RIP: 0033:0x7f737ef8d5fc [ 928.762171][T31836] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 928.762191][T31836] RSP: 002b:00007f737fdbe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 928.762216][T31836] RAX: ffffffffffffffda RBX: 00007f737f1b5fa0 RCX: 00007f737ef8d5fc [ 928.762232][T31836] RDX: 000000000000000f RSI: 00007f737fdbe0a0 RDI: 0000000000000004 [ 928.762246][T31836] RBP: 00007f737fdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 928.762260][T31836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.762274][T31836] R13: 00007f737f1b6038 R14: 00007f737f1b5fa0 R15: 00007ffd24f5a4a8 [ 928.762301][T31836] [ 928.869334][T31839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7350'. [ 928.952389][T31841] netlink: 'syz.2.7351': attribute type 1 has an invalid length. [ 929.047865][T31841] bond6: entered promiscuous mode [ 929.053352][T31841] 8021q: adding VLAN 0 to HW filter on device bond6 [ 929.079575][T31843] 8021q: adding VLAN 0 to HW filter on device bond6 [ 929.087344][T31843] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 929.097059][T31846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7352'. [ 929.098045][T31843] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 929.120805][T31843] bond6: (slave wireguard0): making interface the new active one [ 929.137055][T31843] wireguard0: entered promiscuous mode [ 929.144614][T31843] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 929.165294][T31848] syzkaller0: entered promiscuous mode [ 929.171558][T31848] syzkaller0: entered allmulticast mode [ 929.180963][T31848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7353'. [ 929.190339][T31848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7353'. [ 929.311005][T31856] netlink: 'syz.2.7357': attribute type 1 has an invalid length. [ 929.320325][T31856] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7357'. [ 929.600832][T31874] syzkaller0: entered promiscuous mode [ 929.615360][T31874] syzkaller0: entered allmulticast mode [ 929.650372][T31874] sch_fq: defrate 257 ignored. [ 929.826842][T31892] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 929.833047][T31894] netlink: 'syz.3.7371': attribute type 16 has an invalid length. [ 929.852084][T31894] netlink: 'syz.3.7371': attribute type 3 has an invalid length. [ 930.243162][T31921] netlink: 'syz.3.7382': attribute type 16 has an invalid length. [ 930.253554][T31921] netlink: 'syz.3.7382': attribute type 3 has an invalid length. [ 931.033046][T31948] netlink: 'syz.3.7391': attribute type 1 has an invalid length. [ 931.094448][T31948] bond10: entered promiscuous mode [ 931.099980][T31948] 8021q: adding VLAN 0 to HW filter on device bond10 [ 931.159369][T31948] 8021q: adding VLAN 0 to HW filter on device bond10 [ 931.176045][T31948] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 931.190461][T31948] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 931.206961][T31948] bond10: (slave wireguard0): making interface the new active one [ 931.214869][T31948] wireguard0: entered promiscuous mode [ 931.226145][T31948] bond10: (slave wireguard0): Enslaving as an active interface with an up link [ 931.282492][T31958] syzkaller1: entered promiscuous mode [ 931.301058][T31958] syzkaller1: entered allmulticast mode [ 931.792723][T31978] lo speed is unknown, defaulting to 1000 [ 931.962722][T31996] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 932.010570][T31978] lo speed is unknown, defaulting to 1000 [ 932.019271][T31978] wg1 speed is unknown, defaulting to 1000 [ 932.026156][T31978] hsr0 speed is unknown, defaulting to 1000 [ 932.300275][T32014] pimreg: entered allmulticast mode [ 932.414651][T32014] dvmrp8: entered allmulticast mode [ 932.436707][T32014] pimreg: left allmulticast mode [ 932.449657][T32014] dvmrp8: left allmulticast mode [ 932.638920][T32029] FAULT_INJECTION: forcing a failure. [ 932.638920][T32029] name failslab, interval 1, probability 0, space 0, times 0 [ 932.652074][T32029] CPU: 0 UID: 0 PID: 32029 Comm: syz.2.7418 Not tainted syzkaller #0 PREEMPT(full) [ 932.652104][T32029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 932.652118][T32029] Call Trace: [ 932.652125][T32029] [ 932.652134][T32029] dump_stack_lvl+0x189/0x250 [ 932.652164][T32029] ? __pfx____ratelimit+0x10/0x10 [ 932.652206][T32029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.652231][T32029] ? __pfx__printk+0x10/0x10 [ 932.652262][T32029] ? __pfx___might_resched+0x10/0x10 [ 932.652281][T32029] ? lock_acquire+0x5f/0x360 [ 932.652313][T32029] should_fail_ex+0x414/0x560 [ 932.652342][T32029] should_failslab+0xa8/0x100 [ 932.652372][T32029] __kmalloc_cache_noprof+0x70/0x3d0 [ 932.652400][T32029] ? hash_ipmac_create+0x2fe/0xfe0 [ 932.652428][T32029] hash_ipmac_create+0x2fe/0xfe0 [ 932.652457][T32029] ? __nla_parse+0x40/0x60 [ 932.652489][T32029] ? __pfx_hash_ipmac_create+0x10/0x10 [ 932.652514][T32029] ip_set_create+0xa94/0x1940 [ 932.652541][T32029] ? ip_set_create+0x4a2/0x1940 [ 932.652575][T32029] ? __pfx_ip_set_create+0x10/0x10 [ 932.652615][T32029] ? rcu_is_watching+0x15/0xb0 [ 932.652637][T32029] ? lock_release+0x4b/0x3e0 [ 932.652666][T32029] ? __nla_parse+0x40/0x60 [ 932.652701][T32029] nfnetlink_rcv_msg+0xb4a/0x1130 [ 932.652731][T32029] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 932.652771][T32029] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 932.652805][T32029] ? kasan_save_free_info+0x46/0x50 [ 932.652858][T32029] netlink_rcv_skb+0x205/0x470 [ 932.652891][T32029] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 932.652920][T32029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 932.652960][T32029] ? bpf_lsm_capable+0x9/0x20 [ 932.652989][T32029] ? security_capable+0x7e/0x2e0 [ 932.653030][T32029] nfnetlink_rcv+0x26a/0x2520 [ 932.653060][T32029] ? __dev_queue_xmit+0x1d79/0x3b50 [ 932.653093][T32029] ? __dev_queue_xmit+0x27b/0x3b50 [ 932.653126][T32029] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 932.653154][T32029] ? __pfx___dev_queue_xmit+0x10/0x10 [ 932.653188][T32029] ? ref_tracker_free+0x63a/0x7d0 [ 932.653218][T32029] ? __asan_memcpy+0x40/0x70 [ 932.653242][T32029] ? __pfx_ref_tracker_free+0x10/0x10 [ 932.653282][T32029] ? skb_clone+0x246/0x3a0 [ 932.653309][T32029] ? __netlink_deliver_tap+0x807/0x850 [ 932.653341][T32029] ? netlink_deliver_tap+0x2e/0x1b0 [ 932.653373][T32029] ? rcu_is_watching+0x15/0xb0 [ 932.653393][T32029] ? netlink_deliver_tap+0x2e/0x1b0 [ 932.653424][T32029] ? lock_release+0x4b/0x3e0 [ 932.653462][T32029] netlink_unicast+0x82c/0x9e0 [ 932.653496][T32029] ? __pfx_netlink_unicast+0x10/0x10 [ 932.653526][T32029] ? netlink_sendmsg+0x642/0xb30 [ 932.653545][T32029] ? skb_put+0x11b/0x210 [ 932.653567][T32029] netlink_sendmsg+0x805/0xb30 [ 932.653593][T32029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.653614][T32029] ? aa_sock_msg_perm+0xf1/0x1d0 [ 932.653635][T32029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 932.653659][T32029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.653679][T32029] __sock_sendmsg+0x21c/0x270 [ 932.653709][T32029] ____sys_sendmsg+0x505/0x830 [ 932.653736][T32029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 932.653766][T32029] ? import_iovec+0x74/0xa0 [ 932.653798][T32029] ___sys_sendmsg+0x21f/0x2a0 [ 932.653823][T32029] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.653869][T32029] ? __fget_files+0x2a/0x420 [ 932.653887][T32029] ? __fget_files+0x3a0/0x420 [ 932.653912][T32029] __x64_sys_sendmsg+0x19b/0x260 [ 932.653938][T32029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 932.653967][T32029] ? __pfx_ksys_write+0x10/0x10 [ 932.653993][T32029] ? rcu_is_watching+0x15/0xb0 [ 932.654016][T32029] ? rcu_is_watching+0x15/0xb0 [ 932.654039][T32029] do_syscall_64+0xfa/0x3b0 [ 932.654058][T32029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.654078][T32029] ? clear_bhb_loop+0x60/0xb0 [ 932.654100][T32029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.654120][T32029] RIP: 0033:0x7f737ef8ebe9 [ 932.654139][T32029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.654160][T32029] RSP: 002b:00007f737fdbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.654184][T32029] RAX: ffffffffffffffda RBX: 00007f737f1b5fa0 RCX: 00007f737ef8ebe9 [ 932.654201][T32029] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 932.654215][T32029] RBP: 00007f737fdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 932.654228][T32029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.654242][T32029] R13: 00007f737f1b6038 R14: 00007f737f1b5fa0 R15: 00007ffd24f5a4a8 [ 932.654269][T32029] [ 933.292729][T32044] FAULT_INJECTION: forcing a failure. [ 933.292729][T32044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.310075][T32044] CPU: 0 UID: 0 PID: 32044 Comm: syz.3.7424 Not tainted syzkaller #0 PREEMPT(full) [ 933.310110][T32044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 933.310126][T32044] Call Trace: [ 933.310135][T32044] [ 933.310146][T32044] dump_stack_lvl+0x189/0x250 [ 933.310177][T32044] ? __pfx____ratelimit+0x10/0x10 [ 933.310210][T32044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.310236][T32044] ? __pfx__printk+0x10/0x10 [ 933.310271][T32044] ? rcu_is_watching+0x15/0xb0 [ 933.310294][T32044] should_fail_ex+0x414/0x560 [ 933.310326][T32044] _copy_to_user+0x31/0xb0 [ 933.310353][T32044] simple_read_from_buffer+0xe1/0x170 [ 933.310388][T32044] proc_fail_nth_read+0x1b3/0x220 [ 933.310414][T32044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.310440][T32044] ? rw_verify_area+0x2a6/0x4d0 [ 933.310528][T32044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.310556][T32044] vfs_read+0x1fd/0xa30 [ 933.310583][T32044] ? fdget_pos+0x247/0x320 [ 933.310606][T32044] ? __pfx___mutex_lock+0x10/0x10 [ 933.310626][T32044] ? __pfx_vfs_read+0x10/0x10 [ 933.310673][T32044] ? __fget_files+0x3a0/0x420 [ 933.310691][T32044] ? __fget_files+0x2a/0x420 [ 933.310716][T32044] ksys_read+0x145/0x250 [ 933.310744][T32044] ? __pfx_ksys_read+0x10/0x10 [ 933.310769][T32044] ? rcu_is_watching+0x15/0xb0 [ 933.310793][T32044] ? rcu_is_watching+0x15/0xb0 [ 933.310815][T32044] do_syscall_64+0xfa/0x3b0 [ 933.310836][T32044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.310857][T32044] ? clear_bhb_loop+0x60/0xb0 [ 933.310881][T32044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.310903][T32044] RIP: 0033:0x7fe51798d5fc [ 933.310923][T32044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 933.310943][T32044] RSP: 002b:00007fe518725030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 933.310968][T32044] RAX: ffffffffffffffda RBX: 00007fe517bb5fa0 RCX: 00007fe51798d5fc [ 933.310985][T32044] RDX: 000000000000000f RSI: 00007fe5187250a0 RDI: 0000000000000005 [ 933.310999][T32044] RBP: 00007fe518725090 R08: 0000000000000000 R09: 0000000000000000 [ 933.311014][T32044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.311028][T32044] R13: 00007fe517bb6038 R14: 00007fe517bb5fa0 R15: 00007fff76576578 [ 933.311054][T32044] [ 933.625321][T32050] __nla_validate_parse: 6 callbacks suppressed [ 933.625345][T32050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7427'. [ 933.743911][T32057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7429'. [ 934.040558][T32078] FAULT_INJECTION: forcing a failure. [ 934.040558][T32078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.069232][T32078] CPU: 0 UID: 0 PID: 32078 Comm: syz.4.7434 Not tainted syzkaller #0 PREEMPT(full) [ 934.069264][T32078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 934.069278][T32078] Call Trace: [ 934.069288][T32078] [ 934.069297][T32078] dump_stack_lvl+0x189/0x250 [ 934.069329][T32078] ? __pfx____ratelimit+0x10/0x10 [ 934.069368][T32078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.069394][T32078] ? __pfx__printk+0x10/0x10 [ 934.069421][T32078] ? __might_fault+0xb0/0x130 [ 934.069456][T32078] ? rcu_is_watching+0x15/0xb0 [ 934.069479][T32078] should_fail_ex+0x414/0x560 [ 934.069510][T32078] _copy_from_user+0x2d/0xb0 [ 934.069534][T32078] nr_rt_ioctl+0x74f/0xd50 [ 934.069568][T32078] ? rcu_is_watching+0x15/0xb0 [ 934.069589][T32078] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 934.069624][T32078] ? apparmor_capable+0x137/0x1b0 [ 934.069654][T32078] ? capable+0x89/0xe0 [ 934.069675][T32078] ? nr_ioctl+0x1b1/0x3b0 [ 934.069699][T32078] sock_do_ioctl+0xdc/0x300 [ 934.069729][T32078] ? __pfx_sock_do_ioctl+0x10/0x10 [ 934.069755][T32078] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 934.069798][T32078] sock_ioctl+0x576/0x790 [ 934.069823][T32078] ? lock_release+0x4b/0x3e0 [ 934.069855][T32078] ? __pfx_sock_ioctl+0x10/0x10 [ 934.069881][T32078] ? __fget_files+0x2a/0x420 [ 934.069899][T32078] ? __fget_files+0x3a0/0x420 [ 934.069917][T32078] ? __fget_files+0x2a/0x420 [ 934.069937][T32078] ? bpf_lsm_file_ioctl+0x9/0x20 [ 934.069963][T32078] ? __pfx_sock_ioctl+0x10/0x10 [ 934.069989][T32078] __se_sys_ioctl+0xf9/0x170 [ 934.070016][T32078] do_syscall_64+0xfa/0x3b0 [ 934.070036][T32078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.070058][T32078] ? clear_bhb_loop+0x60/0xb0 [ 934.070082][T32078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.070103][T32078] RIP: 0033:0x7f9deb78ebe9 [ 934.070122][T32078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.070142][T32078] RSP: 002b:00007f9de99ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.070166][T32078] RAX: ffffffffffffffda RBX: 00007f9deb9b5fa0 RCX: 00007f9deb78ebe9 [ 934.070182][T32078] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 934.070196][T32078] RBP: 00007f9de99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 934.070210][T32078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.070223][T32078] R13: 00007f9deb9b6038 R14: 00007f9deb9b5fa0 R15: 00007ffc709256c8 [ 934.070255][T32078] [ 934.444136][T32087] FAULT_INJECTION: forcing a failure. [ 934.444136][T32087] name failslab, interval 1, probability 0, space 0, times 0 [ 934.461859][T32089] FAULT_INJECTION: forcing a failure. [ 934.461859][T32089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.493336][T32089] CPU: 1 UID: 0 PID: 32089 Comm: syz.1.7438 Not tainted syzkaller #0 PREEMPT(full) [ 934.493369][T32089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 934.493384][T32089] Call Trace: [ 934.493393][T32089] [ 934.493403][T32089] dump_stack_lvl+0x189/0x250 [ 934.493435][T32089] ? __pfx____ratelimit+0x10/0x10 [ 934.493467][T32089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.493493][T32089] ? __pfx__printk+0x10/0x10 [ 934.493522][T32089] ? __might_fault+0xb0/0x130 [ 934.493557][T32089] ? rcu_is_watching+0x15/0xb0 [ 934.493582][T32089] should_fail_ex+0x414/0x560 [ 934.493614][T32089] _copy_from_iter+0x1db/0x16f0 [ 934.493639][T32089] ? rcu_is_watching+0x15/0xb0 [ 934.493661][T32089] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 934.493692][T32089] ? __pfx__copy_from_iter+0x10/0x10 [ 934.493715][T32089] ? __build_skb_around+0x257/0x3e0 [ 934.493751][T32089] ? netlink_sendmsg+0x642/0xb30 [ 934.493770][T32089] ? skb_put+0x11b/0x210 [ 934.493793][T32089] netlink_sendmsg+0x6b2/0xb30 [ 934.493818][T32089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.493841][T32089] ? aa_sock_msg_perm+0xf1/0x1d0 [ 934.493862][T32089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 934.493886][T32089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.493908][T32089] __sock_sendmsg+0x21c/0x270 [ 934.493939][T32089] sock_write_iter+0x258/0x330 [ 934.493968][T32089] ? __pfx_sock_write_iter+0x10/0x10 [ 934.494002][T32089] ? kstrtoull+0x12f/0x1d0 [ 934.494039][T32089] do_iter_readv_writev+0x619/0x8b0 [ 934.494075][T32089] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 934.494105][T32089] ? common_file_perm+0x1b5/0x230 [ 934.494141][T32089] ? bpf_lsm_file_permission+0x9/0x20 [ 934.494168][T32089] ? security_file_permission+0x75/0x290 [ 934.494197][T32089] ? rw_verify_area+0x255/0x4d0 [ 934.494227][T32089] vfs_writev+0x31a/0x960 [ 934.494248][T32089] ? security_file_permission+0x75/0x290 [ 934.494281][T32089] ? __pfx_vfs_writev+0x10/0x10 [ 934.494301][T32089] ? vfs_write+0x956/0xb30 [ 934.494344][T32089] ? lock_release+0x4b/0x3e0 [ 934.494381][T32089] ? __fget_files+0x3a0/0x420 [ 934.494400][T32089] ? __fget_files+0x2a/0x420 [ 934.494424][T32089] do_writev+0x14d/0x2d0 [ 934.494446][T32089] ? __pfx_do_writev+0x10/0x10 [ 934.494465][T32089] ? rcu_is_watching+0x15/0xb0 [ 934.494490][T32089] ? rcu_is_watching+0x15/0xb0 [ 934.494513][T32089] do_syscall_64+0xfa/0x3b0 [ 934.494534][T32089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.494556][T32089] ? clear_bhb_loop+0x60/0xb0 [ 934.494581][T32089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.494601][T32089] RIP: 0033:0x7fc172f8ebe9 [ 934.494621][T32089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.494642][T32089] RSP: 002b:00007fc173d4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 934.494666][T32089] RAX: ffffffffffffffda RBX: 00007fc1731b6180 RCX: 00007fc172f8ebe9 [ 934.494683][T32089] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 934.494698][T32089] RBP: 00007fc173d4a090 R08: 0000000000000000 R09: 0000000000000000 [ 934.494713][T32089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.494726][T32089] R13: 00007fc1731b6218 R14: 00007fc1731b6180 R15: 00007ffee754d5c8 [ 934.494754][T32089] [ 934.551473][T32087] CPU: 0 UID: 0 PID: 32087 Comm: syz.4.7439 Not tainted syzkaller #0 PREEMPT(full) [ 934.551510][T32087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 934.551526][T32087] Call Trace: [ 934.551537][T32087] [ 934.551547][T32087] dump_stack_lvl+0x189/0x250 [ 934.551593][T32087] ? __pfx____ratelimit+0x10/0x10 [ 934.551630][T32087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.551660][T32087] ? __pfx__printk+0x10/0x10 [ 934.551694][T32087] ? rcu_is_watching+0x15/0xb0 [ 934.551721][T32087] ? __pfx___might_resched+0x10/0x10 [ 934.551745][T32087] ? lock_acquire+0x5f/0x360 [ 934.551783][T32087] should_fail_ex+0x414/0x560 [ 934.551818][T32087] should_failslab+0xa8/0x100 [ 934.551856][T32087] __kmalloc_cache_noprof+0x70/0x3d0 [ 934.551888][T32087] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 934.551927][T32087] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 934.551964][T32087] tcp_sendmsg_locked+0x4d9b/0x5620 [ 934.551999][T32087] ? tcp_sendmsg_locked+0x4a1/0x5620 [ 934.552034][T32087] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 934.552072][T32087] ? rcu_is_watching+0x15/0xb0 [ 934.552097][T32087] ? lock_acquire+0x5f/0x360 [ 934.552132][T32087] ? _parse_integer_limit+0x1ae/0x1f0 [ 934.552172][T32087] ? __pfx___might_resched+0x10/0x10 [ 934.552198][T32087] ? kstrtouint+0x6e/0xe0 [ 934.552232][T32087] ? get_pid_task+0x20/0x1f0 [ 934.552260][T32087] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 934.552289][T32087] ? rcu_is_watching+0x15/0xb0 [ 934.552313][T32087] ? __local_bh_enable_ip+0x12d/0x1c0 [ 934.552347][T32087] tcp_sendmsg+0x2f/0x50 [ 934.552380][T32087] __sock_sendmsg+0xe5/0x270 [ 934.552415][T32087] __sys_sendto+0x3bd/0x520 [ 934.552440][T32087] ? __pfx___sys_sendto+0x10/0x10 [ 934.552460][T32087] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 934.552510][T32087] ? __fget_files+0x3a0/0x420 [ 934.552539][T32087] ? ksys_write+0x22a/0x250 [ 934.552579][T32087] ? __pfx_ksys_write+0x10/0x10 [ 934.552610][T32087] ? rcu_is_watching+0x15/0xb0 [ 934.552636][T32087] __x64_sys_sendto+0xde/0x100 [ 934.552663][T32087] do_syscall_64+0xfa/0x3b0 [ 934.552687][T32087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.552711][T32087] ? clear_bhb_loop+0x60/0xb0 [ 934.552739][T32087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.552764][T32087] RIP: 0033:0x7f9deb78ebe9 [ 934.552786][T32087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.552810][T32087] RSP: 002b:00007f9de99ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 934.552837][T32087] RAX: ffffffffffffffda RBX: 00007f9deb9b5fa0 RCX: 00007f9deb78ebe9 [ 934.552857][T32087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 934.552873][T32087] RBP: 00007f9de99ee090 R08: 00002000000001c0 R09: 000000000000001c [ 934.552891][T32087] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 934.552906][T32087] R13: 00007f9deb9b6038 R14: 00007f9deb9b5fa0 R15: 00007ffc709256c8 [ 934.552938][T32087] [ 935.121484][T32091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7440'. [ 935.135409][T32091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7440'. [ 935.170495][T32093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7441'. [ 935.192441][T32095] validate_nla: 1 callbacks suppressed [ 935.192462][T32095] netlink: 'syz.4.7442': attribute type 16 has an invalid length. [ 935.206116][T32095] netlink: 'syz.4.7442': attribute type 3 has an invalid length. [ 935.214209][T32095] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.7442'. [ 935.488326][T32113] FAULT_INJECTION: forcing a failure. [ 935.488326][T32113] name failslab, interval 1, probability 0, space 0, times 0 [ 935.520859][T32106] FAULT_INJECTION: forcing a failure. [ 935.520859][T32106] name failslab, interval 1, probability 0, space 0, times 0 [ 935.526261][T32113] CPU: 1 UID: 0 PID: 32113 Comm: syz.3.7449 Not tainted syzkaller #0 PREEMPT(full) [ 935.526308][T32113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.526324][T32113] Call Trace: [ 935.526335][T32113] [ 935.526345][T32113] dump_stack_lvl+0x189/0x250 [ 935.526381][T32113] ? __pfx____ratelimit+0x10/0x10 [ 935.526418][T32113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.526447][T32113] ? __pfx__printk+0x10/0x10 [ 935.526484][T32113] ? fs_reclaim_acquire+0x7d/0x100 [ 935.526530][T32113] ? __pfx___might_resched+0x10/0x10 [ 935.526554][T32113] ? lock_acquire+0x5f/0x360 [ 935.526592][T32113] should_fail_ex+0x414/0x560 [ 935.526629][T32113] ? hash_ipmac_create+0x3a9/0xfe0 [ 935.526657][T32113] should_failslab+0xa8/0x100 [ 935.526695][T32113] __kvmalloc_node_noprof+0x161/0x5f0 [ 935.526731][T32113] ? hash_ipmac_create+0x3a9/0xfe0 [ 935.526757][T32113] ? hash_ipmac_create+0x2fe/0xfe0 [ 935.526795][T32113] hash_ipmac_create+0x3a9/0xfe0 [ 935.526829][T32113] ? __nla_parse+0x40/0x60 [ 935.526864][T32113] ? __pfx_hash_ipmac_create+0x10/0x10 [ 935.526894][T32113] ip_set_create+0xa94/0x1940 [ 935.526924][T32113] ? ip_set_create+0x4a2/0x1940 [ 935.526962][T32113] ? __pfx_ip_set_create+0x10/0x10 [ 935.527007][T32113] ? rcu_is_watching+0x15/0xb0 [ 935.527032][T32113] ? lock_release+0x4b/0x3e0 [ 935.527065][T32113] ? __nla_parse+0x40/0x60 [ 935.527103][T32113] nfnetlink_rcv_msg+0xb4a/0x1130 [ 935.527138][T32113] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 935.527184][T32113] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 935.527236][T32113] ? lock_release+0x4b/0x3e0 [ 935.527269][T32113] ? lock_release+0x4b/0x3e0 [ 935.527307][T32113] ? is_bpf_text_address+0x292/0x2b0 [ 935.527343][T32113] ? is_bpf_text_address+0x26/0x2b0 [ 935.527384][T32113] netlink_rcv_skb+0x205/0x470 [ 935.527423][T32113] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 935.527456][T32113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 935.527508][T32113] ? bpf_lsm_capable+0x9/0x20 [ 935.527540][T32113] ? security_capable+0x7e/0x2e0 [ 935.527582][T32113] nfnetlink_rcv+0x26a/0x2520 [ 935.527613][T32113] ? is_bpf_text_address+0x26/0x2b0 [ 935.527651][T32113] ? kernel_text_address+0xa5/0xe0 [ 935.527708][T32113] ? __kernel_text_address+0xd/0x40 [ 935.527742][T32113] ? unwind_get_return_address+0x4d/0x90 [ 935.527770][T32113] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 935.527800][T32113] ? arch_stack_walk+0xfc/0x150 [ 935.527840][T32113] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 935.527872][T32113] ? stack_depot_save_flags+0x40/0x860 [ 935.527905][T32113] ? __pfx_stack_trace_save+0x10/0x10 [ 935.527937][T32113] ? kasan_save_track+0x4f/0x80 [ 935.527967][T32113] ? kasan_save_track+0x3e/0x80 [ 935.527997][T32113] ? __kasan_slab_alloc+0x6c/0x80 [ 935.528029][T32113] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 935.528063][T32113] ? kmalloc_reserve+0xbd/0x290 [ 935.528087][T32113] ? __netlink_lookup+0xbd/0x810 [ 935.528109][T32113] ? rcu_is_watching+0x15/0xb0 [ 935.528134][T32113] ? rcu_is_watching+0x15/0xb0 [ 935.528174][T32113] ? lock_release+0x4b/0x3e0 [ 935.528215][T32113] ? net_generic+0x1e/0x240 [ 935.528243][T32113] ? rcu_is_watching+0x15/0xb0 [ 935.528266][T32113] ? netlink_deliver_tap+0x2e/0x1b0 [ 935.528300][T32113] ? rcu_is_watching+0x15/0xb0 [ 935.528323][T32113] ? netlink_deliver_tap+0x2e/0x1b0 [ 935.528360][T32113] ? rcu_is_watching+0x15/0xb0 [ 935.528381][T32113] ? netlink_deliver_tap+0x2e/0x1b0 [ 935.528417][T32113] ? lock_release+0x4b/0x3e0 [ 935.528449][T32113] ? net_generic+0x1e/0x240 [ 935.528479][T32113] ? net_generic+0x1e/0x240 [ 935.528520][T32113] netlink_unicast+0x82c/0x9e0 [ 935.528559][T32113] ? __pfx_netlink_unicast+0x10/0x10 [ 935.528594][T32113] ? netlink_sendmsg+0x642/0xb30 [ 935.528614][T32113] ? skb_put+0x11b/0x210 [ 935.528640][T32113] netlink_sendmsg+0x805/0xb30 [ 935.528669][T32113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.528692][T32113] ? aa_sock_msg_perm+0xf1/0x1d0 [ 935.528716][T32113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 935.528743][T32113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.528765][T32113] __sock_sendmsg+0x21c/0x270 [ 935.528800][T32113] ____sys_sendmsg+0x505/0x830 [ 935.528829][T32113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 935.528861][T32113] ? import_iovec+0x74/0xa0 [ 935.528891][T32113] ___sys_sendmsg+0x21f/0x2a0 [ 935.528918][T32113] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.528968][T32113] ? __fget_files+0x2a/0x420 [ 935.528988][T32113] ? __fget_files+0x3a0/0x420 [ 935.529017][T32113] __x64_sys_sendmsg+0x19b/0x260 [ 935.529044][T32113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 935.529077][T32113] ? __pfx_ksys_write+0x10/0x10 [ 935.529107][T32113] ? rcu_is_watching+0x15/0xb0 [ 935.529134][T32113] ? rcu_is_watching+0x15/0xb0 [ 935.529160][T32113] do_syscall_64+0xfa/0x3b0 [ 935.529183][T32113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.529208][T32113] ? clear_bhb_loop+0x60/0xb0 [ 935.529236][T32113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.529258][T32113] RIP: 0033:0x7fe51798ebe9 [ 935.529282][T32113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.529302][T32113] RSP: 002b:00007fe518725038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.529330][T32113] RAX: ffffffffffffffda RBX: 00007fe517bb5fa0 RCX: 00007fe51798ebe9 [ 935.529351][T32113] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 935.529367][T32113] RBP: 00007fe518725090 R08: 0000000000000000 R09: 0000000000000000 [ 935.529384][T32113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.529400][T32113] R13: 00007fe517bb6038 R14: 00007fe517bb5fa0 R15: 00007fff76576578 [ 935.529431][T32113] [ 935.632031][ T30] audit: type=1800 audit(1756151922.759:160): pid=32106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7447" name="cgroup.controllers" dev="tmpfs" ino=7617 res=0 errno=0 [ 935.672090][T32119] netlink: 'syz.2.7454': attribute type 16 has an invalid length. [ 935.677921][T32106] CPU: 1 UID: 0 PID: 32106 Comm: syz.1.7447 Not tainted syzkaller #0 PREEMPT(full) [ 935.677956][T32106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.677973][T32106] Call Trace: [ 935.677983][T32106] [ 935.677994][T32106] dump_stack_lvl+0x189/0x250 [ 935.678037][T32106] ? __pfx____ratelimit+0x10/0x10 [ 935.678076][T32106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.678105][T32106] ? __pfx__printk+0x10/0x10 [ 935.678140][T32106] ? fs_reclaim_acquire+0x7d/0x100 [ 935.678179][T32106] ? __pfx___might_resched+0x10/0x10 [ 935.678201][T32106] ? lock_acquire+0x5f/0x360 [ 935.678239][T32106] should_fail_ex+0x414/0x560 [ 935.678274][T32106] should_failslab+0xa8/0x100 [ 935.678311][T32106] kmem_cache_alloc_noprof+0x73/0x3c0 [ 935.678344][T32106] ? vm_area_dup+0x2b/0x680 [ 935.678383][T32106] vm_area_dup+0x2b/0x680 [ 935.678422][T32106] __split_vma+0x1a9/0xa00 [ 935.678453][T32106] ? mas_next_slot+0xc20/0xcf0 [ 935.678496][T32106] ? __pfx___split_vma+0x10/0x10 [ 935.678541][T32106] ? mas_find+0xb0e/0xd30 [ 935.678577][T32106] vms_gather_munmap_vmas+0x4ce/0x12f0 [ 935.678618][T32106] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 935.678652][T32106] ? mas_find+0xa7d/0xd30 [ 935.678690][T32106] mmap_region+0x724/0x20c0 [ 935.678731][T32106] ? __pfx_mmap_region+0x10/0x10 [ 935.678804][T32106] ? mm_get_unmapped_area+0xa7/0xd0 [ 935.678844][T32106] ? apparmor_capable+0x137/0x1b0 [ 935.678882][T32106] ? bpf_lsm_capable+0x9/0x20 [ 935.678916][T32106] ? security_capable+0x7e/0x2e0 [ 935.678950][T32106] ? shmem_mapping+0xd/0x50 [ 935.678975][T32106] ? memfd_check_seals_mmap+0x165/0x200 [ 935.679005][T32106] do_mmap+0xc45/0x10d0 [ 935.679033][T32106] ? lock_release+0x4b/0x3e0 [ 935.679076][T32106] ? __pfx_do_mmap+0x10/0x10 [ 935.679103][T32106] ? down_write_killable+0x178/0x230 [ 935.679132][T32106] ? __pfx_down_write_killable+0x10/0x10 [ 935.679156][T32106] ? common_file_perm+0x1b5/0x230 [ 935.679199][T32106] vm_mmap_pgoff+0x2a6/0x4d0 [ 935.679228][T32106] ? rcu_is_watching+0x15/0xb0 [ 935.679255][T32106] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 935.679284][T32106] ? lock_release+0x4b/0x3e0 [ 935.679326][T32106] ? __fget_files+0x3a0/0x420 [ 935.679347][T32106] ? __fget_files+0x2a/0x420 [ 935.679370][T32106] ksys_mmap_pgoff+0x51f/0x760 [ 935.679407][T32106] do_syscall_64+0xfa/0x3b0 [ 935.679430][T32106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.679454][T32106] ? clear_bhb_loop+0x60/0xb0 [ 935.679489][T32106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.679513][T32106] RIP: 0033:0x7fc172f8ebe9 [ 935.679536][T32106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.679557][T32106] RSP: 002b:00007fc173d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 935.679583][T32106] RAX: ffffffffffffffda RBX: 00007fc1731b5fa0 RCX: 00007fc172f8ebe9 [ 935.679602][T32106] RDX: 000000000100000c RSI: 0000000000003000 RDI: 00002000007a6000 [ 935.679620][T32106] RBP: 00007fc173d8c090 R08: 0000000000000005 R09: 0000000000000000 [ 935.679636][T32106] R10: 0000000000022051 R11: 0000000000000246 R12: 0000000000000002 [ 935.679650][T32106] R13: 00007fc1731b6038 R14: 00007fc1731b5fa0 R15: 00007ffee754d5c8 [ 935.679680][T32106] [ 935.707582][T32115] FAULT_INJECTION: forcing a failure. [ 935.707582][T32115] name failslab, interval 1, probability 0, space 0, times 0 [ 935.772806][T32123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7455'. [ 935.776921][T32115] CPU: 1 UID: 0 PID: 32115 Comm: syz.4.7451 Not tainted syzkaller #0 PREEMPT(full) [ 935.776951][T32115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.776965][T32115] Call Trace: [ 935.776974][T32115] [ 935.776984][T32115] dump_stack_lvl+0x189/0x250 [ 935.777014][T32115] ? __pfx____ratelimit+0x10/0x10 [ 935.777046][T32115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.777072][T32115] ? __pfx__printk+0x10/0x10 [ 935.777110][T32115] should_fail_ex+0x414/0x560 [ 935.777141][T32115] should_failslab+0xa8/0x100 [ 935.777174][T32115] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 935.777205][T32115] ? lock_release+0x4b/0x3e0 [ 935.777238][T32115] ? pfn_valid+0x125/0x4d0 [ 935.777257][T32115] ? pfn_valid+0x125/0x4d0 [ 935.777277][T32115] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 935.777316][T32115] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 935.777355][T32115] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 935.777390][T32115] ? 0xffffffffa02057c0 [ 935.777414][T32115] ? 0xffffffffa02057c0 [ 935.777446][T32115] ? 0xffffffffa0203a88 [ 935.777464][T32115] ? 0xffffffffa0203bc8 [ 935.777481][T32115] ? 0xffffffffa0203c10 [ 935.777529][T32115] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 935.777558][T32115] ? _copy_from_user+0x94/0xb0 [ 935.777587][T32115] ? bpf_test_init+0x133/0x170 [ 935.777622][T32115] ? xdp_convert_md_to_buff+0x5b/0x330 [ 935.777660][T32115] bpf_prog_test_run_xdp+0x713/0x1000 [ 935.777703][T32115] ? rcu_is_watching+0x15/0xb0 [ 935.777731][T32115] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 935.777772][T32115] ? __fget_files+0x2a/0x420 [ 935.777797][T32115] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 935.777836][T32115] bpf_prog_test_run+0x2c7/0x340 [ 935.777874][T32115] __sys_bpf+0x581/0x870 [ 935.777906][T32115] ? __pfx___sys_bpf+0x10/0x10 [ 935.777948][T32115] ? ksys_write+0x22a/0x250 [ 935.777980][T32115] ? __pfx_ksys_write+0x10/0x10 [ 935.778012][T32115] ? rcu_is_watching+0x15/0xb0 [ 935.778040][T32115] __x64_sys_bpf+0x7c/0x90 [ 935.778070][T32115] do_syscall_64+0xfa/0x3b0 [ 935.778092][T32115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.778118][T32115] ? clear_bhb_loop+0x60/0xb0 [ 935.778146][T32115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.778171][T32115] RIP: 0033:0x7f9deb78ebe9 [ 935.778193][T32115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.778216][T32115] RSP: 002b:00007f9de99ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 935.778244][T32115] RAX: ffffffffffffffda RBX: 00007f9deb9b5fa0 RCX: 00007f9deb78ebe9 [ 935.778261][T32115] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 935.778278][T32115] RBP: 00007f9de99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 935.778295][T32115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 935.778309][T32115] R13: 00007f9deb9b6038 R14: 00007f9deb9b5fa0 R15: 00007ffc709256c8 [ 935.778338][T32115] [ 935.778738][T32119] netlink: 'syz.2.7454': attribute type 3 has an invalid length. [ 935.887679][T32124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7453'. [ 935.896747][T32119] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.7454'. [ 935.938856][T19373] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 936.780632][T19373] CPU: 0 UID: 0 PID: 19373 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 936.790399][T19373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 936.800470][T19373] Workqueue: events_unbound cfg80211_wiphy_work [ 936.806755][T19373] RIP: 0010:mac80211_hwsim_link_info_changed+0x460/0xd80 [ 936.813876][T19373] Code: c6 48 8b 7c 24 18 48 8b 5c 24 38 74 0a e8 68 ca 24 fb 48 8b 7c 24 18 48 8b 0f 89 ce 4c 89 e0 48 c1 e8 20 74 5a 4c 89 e0 31 d2 <48> f7 f6 eb 57 e8 76 5e c1 fa 48 8b 5c 24 18 48 8d 7b 10 e8 f8 49 [ 936.833704][T19373] RSP: 0018:ffffc90003edf860 EFLAGS: 00010246 [ 936.839789][T19373] RAX: 00063d35fb8d922e RBX: ffff888025007048 RCX: 0000000000000000 [ 936.847777][T19373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888025007040 [ 936.855758][T19373] RBP: ffffc90003edf948 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 936.863870][T19373] R10: dffffc0000000000 R11: ffffffff8167ba30 R12: 00063d35fb8d922e [ 936.871872][T19373] R13: ffff888025006fc8 R14: dffffc0000000000 R15: 0000000000000200 [ 936.879858][T19373] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 936.888801][T19373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 936.895391][T19373] CR2: 00005555589075c8 CR3: 00000000323d6000 CR4: 00000000003526f0 [ 936.903393][T19373] Call Trace: [ 936.906703][T19373] [ 936.909648][T19373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 936.915655][T19373] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 936.922435][T19373] ? __pfx___might_resched+0x10/0x10 [ 936.927733][T19373] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 936.934534][T19373] drv_link_info_changed+0x518/0x870 [ 936.939848][T19373] ieee80211_offchannel_return+0x375/0x500 [ 936.945678][T19373] __ieee80211_roc_work+0x265/0x320 [ 936.950893][T19373] cfg80211_wiphy_work+0x2bb/0x470 [ 936.956040][T19373] ? process_scheduled_works+0x9ef/0x17b0 [ 936.961775][T19373] process_scheduled_works+0xae1/0x17b0 [ 936.967373][T19373] ? __pfx_process_scheduled_works+0x10/0x10 [ 936.973374][T19373] worker_thread+0x8a0/0xda0 [ 936.977988][T19373] kthread+0x70e/0x8a0 [ 936.982076][T19373] ? __pfx_worker_thread+0x10/0x10 [ 936.987284][T19373] ? __pfx_kthread+0x10/0x10 [ 936.991889][T19373] ? rcu_is_watching+0x15/0xb0 [ 936.996661][T19373] ? __pfx_kthread+0x10/0x10 [ 937.001265][T19373] ret_from_fork+0x3f9/0x770 [ 937.005870][T19373] ? __pfx_ret_from_fork+0x10/0x10 [ 937.011257][T19373] ? __switch_to_asm+0x39/0x70 [ 937.016060][T19373] ? __switch_to_asm+0x33/0x70 [ 937.020856][T19373] ? __pfx_kthread+0x10/0x10 [ 937.025470][T19373] ret_from_fork_asm+0x1a/0x30 [ 937.030293][T19373] [ 937.033337][T19373] Modules linked in: [ 937.042101][T19373] ---[ end trace 0000000000000000 ]--- [ 937.069233][T19373] RIP: 0010:mac80211_hwsim_link_info_changed+0x460/0xd80 [ 937.084530][T19373] Code: c6 48 8b 7c 24 18 48 8b 5c 24 38 74 0a e8 68 ca 24 fb 48 8b 7c 24 18 48 8b 0f 89 ce 4c 89 e0 48 c1 e8 20 74 5a 4c 89 e0 31 d2 <48> f7 f6 eb 57 e8 76 5e c1 fa 48 8b 5c 24 18 48 8d 7b 10 e8 f8 49 [ 937.105436][T19373] RSP: 0018:ffffc90003edf860 EFLAGS: 00010246 [ 937.112637][T19373] RAX: 00063d35fb8d922e RBX: ffff888025007048 RCX: 0000000000000000 [ 937.115546][T32132] netlink: 'syz.1.7458': attribute type 1 has an invalid length. [ 937.121775][T19373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888025007040 [ 937.137499][T19373] RBP: ffffc90003edf948 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6 [ 937.145628][T32132] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7458'. [ 937.145675][T19373] R10: dffffc0000000000 R11: ffffffff8167ba30 R12: 00063d35fb8d922e [ 937.163445][T32132] FAULT_INJECTION: forcing a failure. [ 937.163445][T32132] name failslab, interval 1, probability 0, space 0, times 0 [ 937.163486][T32132] CPU: 1 UID: 0 PID: 32132 Comm: syz.1.7458 Tainted: G D syzkaller #0 PREEMPT(full) [ 937.163517][T32132] Tainted: [D]=DIE [ 937.163525][T32132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 937.163539][T32132] Call Trace: [ 937.163548][T32132] [ 937.163557][T32132] dump_stack_lvl+0x189/0x250 [ 937.163587][T32132] ? __pfx____ratelimit+0x10/0x10 [ 937.163619][T32132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.163645][T32132] ? __pfx__printk+0x10/0x10 [ 937.163675][T32132] ? genl_family_rcv_msg_doit+0x267/0x300 [ 937.163705][T32132] ? __pfx___might_resched+0x10/0x10 [ 937.163725][T32132] ? lock_acquire+0x5f/0x360 [ 937.163757][T32132] should_fail_ex+0x414/0x560 [ 937.163793][T32132] should_failslab+0xa8/0x100 [ 937.163831][T32132] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 937.163868][T32132] ? __alloc_skb+0x112/0x2d0 [ 937.163892][T32132] __alloc_skb+0x112/0x2d0 [ 937.163919][T32132] netlink_ack+0x146/0xa50 [ 937.163952][T32132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 937.163979][T32132] ? __kasan_slab_alloc+0x6c/0x80 [ 937.164015][T32132] ? __netlink_lookup+0xbd/0x810 [ 937.164037][T32132] ? rcu_is_watching+0x15/0xb0 [ 937.164068][T32132] netlink_rcv_skb+0x28c/0x470 [ 937.164105][T32132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 937.164134][T32132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 937.164179][T32132] ? lock_release+0x4b/0x3e0 [ 937.164216][T32132] ? down_read+0x1ad/0x2e0 [ 937.164242][T32132] genl_rcv+0x28/0x40 [ 937.164268][T32132] netlink_unicast+0x82c/0x9e0 [ 937.164315][T32132] ? __pfx_netlink_unicast+0x10/0x10 [ 937.164350][T32132] ? netlink_sendmsg+0x642/0xb30 [ 937.164371][T32132] ? skb_put+0x11b/0x210 [ 937.164397][T32132] netlink_sendmsg+0x805/0xb30 [ 937.164425][T32132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.164450][T32132] ? aa_sock_msg_perm+0xf1/0x1d0 [ 937.164474][T32132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 937.164501][T32132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.164523][T32132] __sock_sendmsg+0x21c/0x270 [ 937.164558][T32132] ____sys_sendmsg+0x505/0x830 [ 937.164587][T32132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 937.164620][T32132] ? import_iovec+0x74/0xa0 [ 937.164651][T32132] ___sys_sendmsg+0x21f/0x2a0 [ 937.164678][T32132] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.164729][T32132] ? __fget_files+0x2a/0x420 [ 937.164750][T32132] ? __fget_files+0x3a0/0x420 [ 937.164778][T32132] __x64_sys_sendmsg+0x19b/0x260 [ 937.164807][T32132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 937.164841][T32132] ? __pfx_ksys_write+0x10/0x10 [ 937.164871][T32132] ? rcu_is_watching+0x15/0xb0 [ 937.164898][T32132] ? rcu_is_watching+0x15/0xb0 [ 937.164924][T32132] do_syscall_64+0xfa/0x3b0 [ 937.164946][T32132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.164971][T32132] ? clear_bhb_loop+0x60/0xb0 [ 937.164999][T32132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.165023][T32132] RIP: 0033:0x7fc172f8ebe9 [ 937.165045][T32132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.165067][T32132] RSP: 002b:00007fc173d8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.165093][T32132] RAX: ffffffffffffffda RBX: 00007fc1731b5fa0 RCX: 00007fc172f8ebe9 [ 937.165111][T32132] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e [ 937.165127][T32132] RBP: 00007fc173d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 937.165143][T32132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.165163][T32132] R13: 00007fc1731b6038 R14: 00007fc1731b5fa0 R15: 00007ffee754d5c8 [ 937.165192][T32132] [ 937.531711][T19373] R13: ffff888025006fc8 R14: dffffc0000000000 R15: 0000000000000200 [ 937.540063][T19373] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 937.564356][T19373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.575139][T19373] CR2: 000055558de4f5c8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 937.584860][T19373] Kernel panic - not syncing: Fatal exception [ 937.591313][T19373] Kernel Offset: disabled [ 937.595651][T19373] Rebooting in 86400 seconds..