last executing test programs: 4.776324463s ago: executing program 3 (id=7645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000003740)=""/4087, 0xff7}, {&(0x7f0000004740)=""/4083, 0xff3}], 0x4}, 0x8}], 0x3, 0x2, 0x0) 4.598751578s ago: executing program 0 (id=7648): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r0, &(0x7f00000006c0)=r3, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='hugepage_set_pmd\x00', r12}, 0x18) sendmsg$nl_generic(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003800012fb387d834400f91f40326bd70e2f9dbdf25058007d1180100ffffffffffffd197959da019a35c405dfb2f893cfe2392274b1338eca1474b8188d81e1761d872092a0c62c6b2341058e89d83893e5acea8c0a35eb5699e6bb65e4862457d4edddbd04958e3efe76f11da4749f7cc665d814c46ec9702ff11dcd6476c440a16c0c5111b1fcb285b704e4dc181c1fda4769e5295adbe6ecb"], 0x14}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r13}, 0x0, 0x0}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000", @ANYRES32=r14, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x0, &(0x7f0000000980)=[r13, r13, r13, r13, r13, 0xffffffffffffffff, r13, r13, 0x1]}, 0x94) 4.241032575s ago: executing program 3 (id=7652): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}, {&(0x7f00000001c0)=""/118, 0x76}], 0x4}, 0x8}], 0x3, 0x40000040, 0x0) 4.094486859s ago: executing program 3 (id=7654): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xc, 0x9, 0x6, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000000c0)={@default, @bcast}) (fail_nth: 2) 3.763786036s ago: executing program 0 (id=7658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x30000}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 3.763644708s ago: executing program 3 (id=7659): sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) unshare(0x60600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000000)) 3.545076319s ago: executing program 0 (id=7661): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r2, r3, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r5}, 0x20) 3.543533739s ago: executing program 3 (id=7662): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000700)="ce2ede98d4bde4b9a7931c4e260090a647151bacb721146be7ff4494578b050dc8c56c1571aa57d0f79d3ce5cc42977a719f4a8c88be34", 0x37}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4ee56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198e5a7169d91005cda3fc9870956d72773bd700", 0xc8}, {&(0x7f0000002dc0)="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", 0x287}], 0x4, 0x0, 0x0, 0x4001}], 0x1, 0x48800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x40044}}], 0x1, 0x4) 3.216071811s ago: executing program 0 (id=7663): bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r6, 0x400454cd, 0x10e) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1f}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x18}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x39}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff9}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x68}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000001000000000000090000000800010001000000050008000b0000000500080009000000050007"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000000100)={'vxcan1\x00', 0x200}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000010000000000000bcde761e763f64103143680f13afb010000151f2c"], 0x0, 0x26}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d000000040105"], 0x254}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 3.215733684s ago: executing program 3 (id=7664): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x128}, 0x240000d0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000040)=@srh={0x3c, 0x0, 0x4, 0x0, 0x6, 0x30, 0x9}, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x88000) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.792925565s ago: executing program 1 (id=7667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x204140, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000440)=0xff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1600, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c00028008"], 0xc8}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) 2.372433542s ago: executing program 1 (id=7668): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4048001) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x89c, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xb2c, 0x4) recvmmsg(r0, &(0x7f0000004c00), 0x0, 0x8003, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x20) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 2.168125661s ago: executing program 1 (id=7670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000400), &(0x7f00000004c0), 0x2}, 0x20) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x4000000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, 0x0, 0x20000000) unshare(0x22020400) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x9, [{{0x2, 0x2, @remote}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x80, @empty}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x2, @loopback}}]}, 0x510) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x10, 0x110, 0xb}}], 0x28}, 0x0) unshare(0x24020400) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r8, 0x11, 0x0, &(0x7f0000000300)=0x6, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000014000000030a0102000000e3000000000100000758000000060a010200000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c0002800800014000000003080002400000000b08000300000000230900010073797a3000000000140000001100010000000000000000000000000a"], 0xb4}}, 0x0) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x79, 0x6, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x40, 0x4, 0x1}}) bind$packet(r9, &(0x7f0000000bc0)={0x11, 0x2, r10, 0x1, 0xfd, 0x6, @broadcast}, 0x14) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0xfffffffe, 0x0, {0x30, 0x32, 0x2, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x2000000, @in6=@private2={0xfc, 0x2, '\x00', 0x4}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200020000007030e000000a47150e200010000040400010073797a300000aa00"], 0x20}, 0x1, 0x0, 0x0, 0x20000850}, 0x4) 1.988259099s ago: executing program 0 (id=7671): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014001}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011"], 0x20}], 0x1}, 0x20008300) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@setneightbl={0xb4, 0x43, 0x10, 0x70bd2a, 0x25dfdbfc, {0x7}, [@NDTA_PARMS={0x28, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x8, 0x9, 0x6}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x3}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x2}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0xffff}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x9}, @NDTA_THRESH3={0x8, 0x4, 0x2}, @NDTA_THRESH1={0x8, 0x2, 0x3}, @NDTA_NAME={0x6, 0x1, '}\x00'}, @NDTA_PARMS={0x44, 0x6, 0x0, 0x1, [@NDTPA_GC_STALETIME={0xc, 0x6, 0x5}, @NDTPA_IFINDEX={0x8, 0x1, r4}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0xd}, @NDTPA_LOCKTIME={0xc, 0xf, 0x2}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x7f}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x7}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x8}]}, @NDTA_THRESH3={0x8, 0x4, 0xf96cff2}, @NDTA_NAME={0x6, 0x1, '^\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x10004) 1.987740814s ago: executing program 4 (id=7672): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback}, 0x5d) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 1.874256688s ago: executing program 4 (id=7673): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}, {&(0x7f00000001c0)=""/118, 0x76}], 0x4}, 0x8}], 0x3, 0x40000040, 0x0) 1.742024898s ago: executing program 1 (id=7674): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}, {&(0x7f00000001c0)=""/118, 0x76}], 0x4}, 0x8}], 0x3, 0x40000040, 0x0) 1.654513311s ago: executing program 4 (id=7675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x48, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6d}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x4014) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000010095c9010900010073797a3100000000200004801c000180090001006d657461000000000c000209000000400000000b0900010073797a3000000000140000001100010000000000f6711058eff5fc2f"], 0x74}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r5 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x3}, 0x1c) 1.610933767s ago: executing program 0 (id=7676): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r0, &(0x7f00000006c0)=r3, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='hugepage_set_pmd\x00', r12}, 0x18) sendmsg$nl_generic(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003800012fb387d834400f91f40326bd70e2f9dbdf25058007d1180100ffffffffffffd197959da019a35c405dfb2f893cfe2392274b1338eca1474b8188d81e1761d872092a0c62c6b2341058e89d83893e5acea8c0a35eb5699e6bb65e4862457d4edddbd04958e3efe76f11da4749f7cc665d814c46ec9702ff11dcd6476c440a16c0c5111b1fcb285b704e4dc181c1fda4769e5295adbe6ecb"], 0x14}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r13}, 0x0, 0x0}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b70800", @ANYRES32=r14, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x0, &(0x7f0000000980)=[r13, r13, r13, r13, r13, 0xffffffffffffffff, r13, r13, 0x1]}, 0x94) 1.59458002s ago: executing program 1 (id=7677): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000001180)=0x0, &(0x7f00000011c0)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r3, @ANYBLOB="0100"/20, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="8100e8ffffff000000000000000000000000faffffff000000000000"], 0x50) close(r3) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) recvfrom$x25(r3, &(0x7f0000000140)=""/4096, 0x1000, 0x2000, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200"], 0x0}, 0x94) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301020000006d3347a803708e640f0800010001000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 1.238959876s ago: executing program 4 (id=7678): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x1c, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x1, 0x502}, 0x28) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e22, 0x6, @empty, 0xac}}, 0x0, 0x1000}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x5}}, {0x4}}]}]}, 0x48}}, 0x4000010) 1.088827982s ago: executing program 4 (id=7680): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4048001) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xb2c, 0x4) recvmmsg(r0, &(0x7f0000004c00), 0x0, 0x8003, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x20) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 1.08803842s ago: executing program 1 (id=7681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r0, &(0x7f00000006c0)=r3, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='hugepage_set_pmd\x00', r12}, 0x18) sendmsg$nl_generic(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003800012fb387d834400f91f40326bd70e2f9dbdf25058007d1180100ffffffffffffd197959da019a35c405dfb2f893cfe2392274b1338eca1474b8188d81e1761d872092a0c62c6b2341058e89d83893e5acea8c0a35eb5699e6bb65e4862457d4edddbd04958e3efe76f11da4749f7cc665d814c46ec9702ff11dcd6476c440a16c0c5111b1fcb285b704e4dc181c1fda4769e5295adbe6ecb"], 0x14}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r13}, 0x0, 0x0}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b70800", @ANYRES32=r14, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x0, &(0x7f0000000980)=[r13, r13, r13, r13, r13, 0xffffffffffffffff, r13, r13, 0x1]}, 0x94) 799.803344ms ago: executing program 2 (id=7682): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001d140bf327b97001f0dbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x48090}, 0x24004840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 662.814042ms ago: executing program 2 (id=7683): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="d2664e3de44e5781659d1c2224a19de44fba87cf2fcf751c9b218685", 0xffffffffffffffe7, 0x2c000891, 0x0, 0x0) 512.337749ms ago: executing program 2 (id=7684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800c000100626974776973650014000280080003400000000208000140000000140900010073797a3000000040140000001100010000000000000000000700000a"], 0xc4}, 0x1, 0x0, 0x0, 0xc841}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000084692a0f7baaf0ff00000000bf9700000000070000000000fffdffff7402000008000000182200"/132, @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r10, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r12, 0x12e9d000) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r13, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x38, 0x1410, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 300.31386ms ago: executing program 2 (id=7685): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2, 0x3f000000}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) 258.818986ms ago: executing program 2 (id=7686): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/130, 0x82}], 0x1}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}, {&(0x7f00000001c0)=""/118, 0x76}], 0x4}, 0x8}], 0x3, 0x40000040, 0x0) 157.504401ms ago: executing program 4 (id=7687): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000028c0)=@newtfilter={0xac, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_SEL={0x74, 0x5, {0x6, 0x1, 0x6, 0x5, 0xc9f0, 0x5, 0x2, 0xb4, [{0x6140ba75, 0x1, 0x0, 0x8}, {0x7, 0x2, 0x1, 0x10001}, {0xde, 0xffffffff, 0x2, 0x20b}, {0x4, 0x3, 0x0, 0xfffffff9}, {0x40, 0x7, 0x28, 0x9}, {0x9, 0x1f, 0x3ff, 0x200}]}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=@polexpire={0x514, 0x1b, 0x200, 0x70bd27, 0x25dfdbfd, {{{@in=@private=0xa010102, @in=@broadcast, 0x4e24, 0x2, 0x4e22, 0xc0c, 0x2, 0xa0, 0x80, 0x29, r3, r4}, {0x1000, 0x1, 0x7, 0x4, 0x0, 0xffff, 0x0, 0x7}, {0x0, 0x7ff, 0x60c, 0x3ba0}, 0x30a, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x3}, [@mark={0xc, 0x15, {0x350759, 0x5}}, @tmpl={0x184, 0x5, [{{@in=@loopback, 0x4d6, 0x2b}, 0xa, @in=@private=0xa010100, 0x3506, 0x1, 0x0, 0x1, 0xd80, 0x8001, 0x4}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d2, 0xe89c1c00e2d933ba}, 0x2, @in=@loopback, 0x0, 0x1, 0x1, 0xff, 0x6, 0x30}, {{@in=@empty, 0x4d2, 0x32}, 0xa, @in6=@private2, 0x3505, 0x3, 0x0, 0x0, 0xdd4, 0x5, 0x8}, {{@in=@local, 0x4d2, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x1, 0x8, 0x6, 0x5}, {{@in=@private=0xa010102, 0x4d3, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3505, 0x0, 0x3, 0x0, 0x8e68, 0x101, 0x8}, {{@in=@rand_addr=0x64010102, 0x4d4, 0xcc}, 0xa, @in6=@loopback, 0x3503, 0x2, 0x0, 0x7, 0x1, 0x10001, 0xff}]}, @migrate={0x180, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in6=@empty, @in6=@loopback, 0xff, 0x2, 0x0, 0x3506, 0xa, 0x2}, {@in=@remote, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010102, @in6=@remote, 0x33, 0x4, 0x0, 0x3502, 0x2, 0x997a62134e166b6d}, {@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010101, @in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x33, 0x2, 0x0, 0x3506, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0, 0x2b, 0x3, 0x0, 0x34ff, 0xa, 0xa}, {@in=@multicast1, @in=@rand_addr=0x64010102, @in=@loopback, @in=@multicast2, 0x3c, 0x3, 0x0, 0x3501, 0xa, 0x222a759b2bdee570}]}, @tfcpad={0x8, 0x16, 0x5}, @algo_aead={0x13c, 0x12, {{'aegis128l-generic\x00'}, 0x780, 0x200, "4a0d9b7370f0885d2c219f68f96efa5901fc15bfd29b2ff1b64f96bd87e582cd5701dafa6ae541946ee996905f8305a4f0e6b4c1ccd937e243d2c13c8e0dc7b4db42de10640339545a960556b9e1a707fef8d5ed21637e4278260b3f5336ec44f924ee184d7d6bea54853d973df67e04113d65372ab332070921848da3d8a97f8d114408d5cdfeec04ea9f2e796a4126c3d0ea3e7c9190312b4283cb598f11942b2cf654d0075d2e19a5f9a8454e2b90f2bc2864388566345758f66965b6428ea027d6e86c853530ab38705260f5360acb7d7e0a9ef671b2e839fbdd8301d6ed2693cc6a3ddbd0577cc39441cf18bc1d"}}]}, 0x514}, 0x1, 0x0, 0x0, 0x40000}, 0x24008080) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r6, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x3, 0x2, 0x2, {0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}}}, 0x32) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 0s ago: executing program 2 (id=7688): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="ac0300001000010028bd7000ffdbdf25e0000002000000000000000000000000ff0200000000000000000000000000014e23000020008000000080ff0c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000206c000000fe800000000000000000000000000023feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f000008000000000000000000000000000000fdffffffffffffff00000000090000000000000000000000000000000a"], 0x3ac}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000b140bf327b97001f0dbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x48090}, 0x24004840) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): 91820][T29281] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 986.891840][T29281] ? __local_bh_enable_ip+0x12d/0x1c0 [ 986.891871][T29281] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 986.891897][T29281] ? security_sctp_bind_connect+0x7e/0x2e0 [ 986.891931][T29281] sctp_sendmsg+0x155c/0x2810 [ 986.891980][T29281] ? __pfx_sctp_sendmsg+0x10/0x10 [ 986.892018][T29281] ? aa_sk_perm+0x81e/0x950 [ 986.892066][T29281] ? __pfx_aa_sk_perm+0x10/0x10 [ 986.892102][T29281] ? sock_rps_record_flow+0x19/0x410 [ 986.892134][T29281] ? inet_sendmsg+0x2f4/0x370 [ 986.892166][T29281] __sock_sendmsg+0x19c/0x270 [ 986.892200][T29281] ____sys_sendmsg+0x52d/0x830 [ 986.892231][T29281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 986.892266][T29281] ? import_iovec+0x74/0xa0 [ 986.892296][T29281] ___sys_sendmsg+0x21f/0x2a0 [ 986.892323][T29281] ? __pfx____sys_sendmsg+0x10/0x10 [ 986.892390][T29281] ? __fget_files+0x2a/0x420 [ 986.892422][T29281] ? __fget_files+0x3a0/0x420 [ 986.892468][T29281] __sys_sendmmsg+0x227/0x430 [ 986.892499][T29281] ? __pfx___sys_sendmmsg+0x10/0x10 [ 986.892519][T29281] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 986.892585][T29281] ? ksys_write+0x22a/0x250 [ 986.892617][T29281] ? __pfx_ksys_write+0x10/0x10 [ 986.892644][T29281] ? rcu_is_watching+0x15/0xb0 [ 986.892675][T29281] __x64_sys_sendmmsg+0xa0/0xc0 [ 986.892701][T29281] do_syscall_64+0xfa/0x3b0 [ 986.892731][T29281] ? lockdep_hardirqs_on+0x9c/0x150 [ 986.892761][T29281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.892783][T29281] ? clear_bhb_loop+0x60/0xb0 [ 986.892811][T29281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.892832][T29281] RIP: 0033:0x7f880398ebe9 [ 986.892853][T29281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.892872][T29281] RSP: 002b:00007f88048a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 986.892925][T29281] RAX: ffffffffffffffda RBX: 00007f8803bb5fa0 RCX: 00007f880398ebe9 [ 986.892942][T29281] RDX: 0000000000000001 RSI: 0000200000007840 RDI: 0000000000000003 [ 986.892956][T29281] RBP: 00007f88048a8090 R08: 0000000000000000 R09: 0000000000000000 [ 986.892970][T29281] R10: 0000000000004081 R11: 0000000000000246 R12: 0000000000000002 [ 986.892983][T29281] R13: 00007f8803bb6038 R14: 00007f8803bb5fa0 R15: 00007ffe4a811b98 [ 986.893019][T29281] [ 987.433305][T29297] tipc: Enabling of bearer rejected, failed to enable media [ 987.559863][T29304] netlink: 'syz.3.6639': attribute type 10 has an invalid length. [ 987.946123][T29322] tipc: Enabling of bearer rejected, failed to enable media [ 988.054664][T29324] tipc: Enabled bearer , priority 0 [ 988.066611][T29324] syzkaller0: entered promiscuous mode [ 988.074056][T29324] syzkaller0: entered allmulticast mode [ 988.181530][T29323] tipc: Resetting bearer [ 988.225844][T29323] tipc: Disabling bearer [ 988.275149][T29334] __nla_validate_parse: 8 callbacks suppressed [ 988.275173][T29334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6650'. [ 988.300318][T29337] netlink: 'syz.0.6651': attribute type 3 has an invalid length. [ 988.953393][T29352] netlink: 'syz.3.6657': attribute type 3 has an invalid length. [ 989.091954][T29356] FAULT_INJECTION: forcing a failure. [ 989.091954][T29356] name failslab, interval 1, probability 0, space 0, times 0 [ 989.129593][T29356] CPU: 1 UID: 0 PID: 29356 Comm: syz.2.6659 Not tainted syzkaller #0 PREEMPT(full) [ 989.129628][T29356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 989.129643][T29356] Call Trace: [ 989.129652][T29356] [ 989.129663][T29356] dump_stack_lvl+0x189/0x250 [ 989.129697][T29356] ? __pfx____ratelimit+0x10/0x10 [ 989.129729][T29356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.129757][T29356] ? __pfx__printk+0x10/0x10 [ 989.129796][T29356] ? __pfx___might_resched+0x10/0x10 [ 989.129824][T29356] should_fail_ex+0x414/0x560 [ 989.129867][T29356] should_failslab+0xa8/0x100 [ 989.129904][T29356] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 989.129937][T29356] ? __alloc_skb+0x112/0x2d0 [ 989.129968][T29356] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 989.129997][T29356] __alloc_skb+0x112/0x2d0 [ 989.130037][T29356] nldev_stat_set_doit+0x3c6/0x8c0 [ 989.130071][T29356] ? __pfx_nldev_stat_set_doit+0x10/0x10 [ 989.130206][T29356] ? apparmor_capable+0x137/0x1b0 [ 989.130236][T29356] ? bpf_lsm_capable+0x9/0x20 [ 989.130268][T29356] ? security_capable+0x7e/0x2e0 [ 989.130305][T29356] ? __pfx_nldev_stat_set_doit+0x10/0x10 [ 989.130331][T29356] rdma_nl_rcv+0x6ab/0x980 [ 989.130368][T29356] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 989.130389][T29356] ? __lock_acquire+0xab9/0xd20 [ 989.130447][T29356] ? netlink_deliver_tap+0x2e/0x1b0 [ 989.130492][T29356] netlink_unicast+0x82f/0x9e0 [ 989.130533][T29356] ? __pfx_netlink_unicast+0x10/0x10 [ 989.130565][T29356] ? netlink_sendmsg+0x642/0xb30 [ 989.130596][T29356] ? skb_put+0x11b/0x210 [ 989.130622][T29356] netlink_sendmsg+0x805/0xb30 [ 989.130668][T29356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.130706][T29356] ? aa_sock_msg_perm+0xf1/0x1d0 [ 989.130744][T29356] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 989.130769][T29356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.130804][T29356] __sock_sendmsg+0x219/0x270 [ 989.130845][T29356] ____sys_sendmsg+0x505/0x830 [ 989.130877][T29356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.130913][T29356] ? import_iovec+0x74/0xa0 [ 989.130944][T29356] ___sys_sendmsg+0x21f/0x2a0 [ 989.130971][T29356] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.131041][T29356] ? __fget_files+0x2a/0x420 [ 989.131074][T29356] ? __fget_files+0x3a0/0x420 [ 989.131123][T29356] __x64_sys_sendmsg+0x19b/0x260 [ 989.131150][T29356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 989.131187][T29356] ? __pfx_ksys_write+0x10/0x10 [ 989.131214][T29356] ? rcu_is_watching+0x15/0xb0 [ 989.131244][T29356] ? do_syscall_64+0xbe/0x3b0 [ 989.131283][T29356] do_syscall_64+0xfa/0x3b0 [ 989.131315][T29356] ? lockdep_hardirqs_on+0x9c/0x150 [ 989.131347][T29356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.131370][T29356] ? clear_bhb_loop+0x60/0xb0 [ 989.131399][T29356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.131421][T29356] RIP: 0033:0x7fdeee38ebe9 [ 989.131443][T29356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.131463][T29356] RSP: 002b:00007fdeec5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.131487][T29356] RAX: ffffffffffffffda RBX: 00007fdeee5b5fa0 RCX: 00007fdeee38ebe9 [ 989.131504][T29356] RDX: 0000000000000000 RSI: 0000200000002300 RDI: 0000000000000003 [ 989.131518][T29356] RBP: 00007fdeec5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 989.131533][T29356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.131546][T29356] R13: 00007fdeee5b6038 R14: 00007fdeee5b5fa0 R15: 00007ffe9da69288 [ 989.131584][T29356] [ 989.677358][T29362] netlink: 'syz.4.6662': attribute type 2 has an invalid length. [ 989.724951][T29362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6662'. [ 989.749979][T29364] netlink: 'syz.2.6663': attribute type 3 has an invalid length. [ 989.780926][T29364] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 989.952283][T29374] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6664'. [ 989.970953][T29364] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.223437][T29364] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.281553][T29385] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6666'. [ 990.524704][T29397] sctp: [Deprecated]: syz.0.6669 (pid 29397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 990.524704][T29397] Use struct sctp_sack_info instead [ 990.550573][T29364] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.637436][T29392] sit0: entered promiscuous mode [ 990.689934][T29392] netlink: 'syz.0.6669': attribute type 1 has an invalid length. [ 990.712640][T29392] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6669'. [ 990.762780][T29396] netlink: 'syz.4.6668': attribute type 3 has an invalid length. [ 990.960337][T29398] lo speed is unknown, defaulting to 1000 [ 990.967720][T29404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 990.983794][T29398] lo speed is unknown, defaulting to 1000 [ 990.985492][T29404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 991.017825][T29404] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6671'. [ 991.033582][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.103073][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.141854][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.182856][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.553081][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6676'. [ 991.787661][T29431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6677'. [ 991.818759][T29430] netlink: 'syz.4.6678': attribute type 2 has an invalid length. [ 991.850709][T29430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6678'. [ 992.042079][T29443] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6679'. [ 992.304804][T29449] netlink: 'syz.0.6682': attribute type 3 has an invalid length. [ 992.334976][T29449] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.810667][T29449] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.834368][T29461] batadv_slave_0: entered promiscuous mode [ 992.929242][T29472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 992.936967][T29472] IPv6: NLM_F_CREATE should be set when creating new route [ 992.945159][T29472] IPv6: NLM_F_CREATE should be set when creating new route [ 992.966240][T29472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 992.980172][T29449] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.140785][T29449] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.375737][T29489] __nla_validate_parse: 3 callbacks suppressed [ 993.375759][T29489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6693'. [ 993.413554][T29489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6693'. [ 993.447384][T29489] FAULT_INJECTION: forcing a failure. [ 993.447384][T29489] name failslab, interval 1, probability 0, space 0, times 0 [ 993.448656][T24577] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.481608][T29489] CPU: 0 UID: 0 PID: 29489 Comm: syz.2.6693 Not tainted syzkaller #0 PREEMPT(full) [ 993.481639][T29489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 993.481654][T29489] Call Trace: [ 993.481663][T29489] [ 993.481673][T29489] dump_stack_lvl+0x189/0x250 [ 993.481710][T29489] ? __pfx____ratelimit+0x10/0x10 [ 993.481741][T29489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.481768][T29489] ? __pfx__printk+0x10/0x10 [ 993.481806][T29489] ? __pfx___might_resched+0x10/0x10 [ 993.481826][T29489] ? fs_reclaim_acquire+0x7d/0x100 [ 993.481866][T29489] should_fail_ex+0x414/0x560 [ 993.481901][T29489] should_failslab+0xa8/0x100 [ 993.481935][T29489] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 993.481966][T29489] ? __alloc_skb+0x112/0x2d0 [ 993.482004][T29489] __alloc_skb+0x112/0x2d0 [ 993.482042][T29489] netlink_ack+0x146/0xa50 [ 993.482072][T29489] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 993.482112][T29489] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 993.482154][T29489] netlink_rcv_skb+0x28c/0x470 [ 993.482183][T29489] ? rcu_is_watching+0x15/0xb0 [ 993.482205][T29489] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 993.482239][T29489] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 993.482285][T29489] ? netlink_deliver_tap+0x2e/0x1b0 [ 993.482326][T29489] netlink_unicast+0x82f/0x9e0 [ 993.482365][T29489] ? __pfx_netlink_unicast+0x10/0x10 [ 993.482397][T29489] ? netlink_sendmsg+0x642/0xb30 [ 993.482426][T29489] ? skb_put+0x11b/0x210 [ 993.482450][T29489] netlink_sendmsg+0x805/0xb30 [ 993.482519][T29489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 993.482556][T29489] ? aa_sock_msg_perm+0xf1/0x1d0 [ 993.482593][T29489] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 993.482617][T29489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 993.482651][T29489] __sock_sendmsg+0x219/0x270 [ 993.482683][T29489] ____sys_sendmsg+0x505/0x830 [ 993.482713][T29489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 993.482752][T29489] ? import_iovec+0x74/0xa0 [ 993.482849][T29489] ___sys_sendmsg+0x21f/0x2a0 [ 993.482880][T29489] ? __pfx____sys_sendmsg+0x10/0x10 [ 993.482948][T29489] ? __fget_files+0x2a/0x420 [ 993.482981][T29489] ? __fget_files+0x3a0/0x420 [ 993.483029][T29489] __x64_sys_sendmsg+0x19b/0x260 [ 993.483058][T29489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 993.483093][T29489] ? __pfx_ksys_write+0x10/0x10 [ 993.483119][T29489] ? rcu_is_watching+0x15/0xb0 [ 993.483149][T29489] ? do_syscall_64+0xbe/0x3b0 [ 993.483188][T29489] do_syscall_64+0xfa/0x3b0 [ 993.483220][T29489] ? lockdep_hardirqs_on+0x9c/0x150 [ 993.483250][T29489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.483272][T29489] ? clear_bhb_loop+0x60/0xb0 [ 993.483297][T29489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.483320][T29489] RIP: 0033:0x7fdeee38ebe9 [ 993.483342][T29489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.483362][T29489] RSP: 002b:00007fdeec5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 993.483386][T29489] RAX: ffffffffffffffda RBX: 00007fdeee5b5fa0 RCX: 00007fdeee38ebe9 [ 993.483403][T29489] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 993.483417][T29489] RBP: 00007fdeec5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 993.483432][T29489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 993.483447][T29489] R13: 00007fdeee5b6038 R14: 00007fdeee5b5fa0 R15: 00007ffe9da69288 [ 993.483484][T29489] [ 993.521679][T24577] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.923113][ T6092] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.946160][ T6092] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.014328][T29495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6695'. [ 994.083280][T29498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6692'. [ 994.137173][T29495] team1: entered promiscuous mode [ 994.171581][T29495] team1: entered allmulticast mode [ 994.181343][T29495] 8021q: adding VLAN 0 to HW filter on device team1 [ 994.236244][T29500] bridge0: port 1(batadv1) entered blocking state [ 994.284051][T29500] bridge0: port 1(batadv1) entered disabled state [ 994.302304][T29500] batadv1: entered allmulticast mode [ 994.312779][T29500] batadv1: entered promiscuous mode [ 994.456457][T29504] tipc: Enabling of bearer rejected, failed to enable media [ 994.493267][T29507] netlink: 'syz.1.6699': attribute type 3 has an invalid length. [ 994.575060][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6700'. [ 994.719710][T10434] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 994.732919][T10434] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 995.085285][T29532] netlink: 'syz.1.6705': attribute type 1 has an invalid length. [ 995.141534][T29533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6704'. [ 995.452156][T29549] netlink: 'syz.1.6709': attribute type 3 has an invalid length. [ 995.526769][T29545] lo speed is unknown, defaulting to 1000 [ 995.573912][T29545] lo speed is unknown, defaulting to 1000 [ 996.451915][T29565] netlink: 'syz.2.6715': attribute type 2 has an invalid length. [ 996.459937][T29565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6715'. [ 996.724734][T29571] tipc: Enabled bearer , priority 0 [ 996.740952][T29576] netlink: 'syz.1.6714': attribute type 2 has an invalid length. [ 996.755090][T29576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6714'. [ 996.777696][T29571] syzkaller0: entered promiscuous mode [ 996.786258][T29571] syzkaller0: entered allmulticast mode [ 996.935238][T29569] tipc: Resetting bearer [ 997.029370][T29569] tipc: Disabling bearer [ 997.251480][T29587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6722'. [ 997.298317][T29587] tipc: Enabling of bearer rejected, failed to enable media [ 997.435195][T29597] netlink: 'syz.4.6727': attribute type 2 has an invalid length. [ 997.459960][T29599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6726'. [ 997.475950][T29601] IPVS: set_ctl: invalid protocol: 58 2.64.0.0:20001 [ 997.483163][T29599] tipc: Enabling of bearer rejected, failed to enable media [ 997.907622][T29616] tipc: Enabling of bearer rejected, failed to enable media [ 998.033733][T29619] netlink: 'syz.2.6733': attribute type 2 has an invalid length. [ 998.253591][T29625] FAULT_INJECTION: forcing a failure. [ 998.253591][T29625] name failslab, interval 1, probability 0, space 0, times 0 [ 998.348361][T29625] CPU: 0 UID: 0 PID: 29625 Comm: syz.2.6734 Not tainted syzkaller #0 PREEMPT(full) [ 998.348394][T29625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 998.348409][T29625] Call Trace: [ 998.348418][T29625] [ 998.348428][T29625] dump_stack_lvl+0x189/0x250 [ 998.348461][T29625] ? __pfx____ratelimit+0x10/0x10 [ 998.348493][T29625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.348520][T29625] ? __pfx__printk+0x10/0x10 [ 998.348559][T29625] ? __pfx___might_resched+0x10/0x10 [ 998.348586][T29625] should_fail_ex+0x414/0x560 [ 998.348622][T29625] should_failslab+0xa8/0x100 [ 998.348657][T29625] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 998.348689][T29625] ? __alloc_skb+0x112/0x2d0 [ 998.348728][T29625] __alloc_skb+0x112/0x2d0 [ 998.348767][T29625] netlink_sendmsg+0x5c6/0xb30 [ 998.348813][T29625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.348850][T29625] ? aa_sock_msg_perm+0xf1/0x1d0 [ 998.348887][T29625] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 998.348912][T29625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.348946][T29625] __sock_sendmsg+0x219/0x270 [ 998.348979][T29625] ____sys_sendmsg+0x505/0x830 [ 998.349010][T29625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 998.349044][T29625] ? import_iovec+0x74/0xa0 [ 998.349079][T29625] ___sys_sendmsg+0x21f/0x2a0 [ 998.349113][T29625] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.349180][T29625] ? __fget_files+0x2a/0x420 [ 998.349214][T29625] ? __fget_files+0x3a0/0x420 [ 998.349261][T29625] __x64_sys_sendmsg+0x19b/0x260 [ 998.349288][T29625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.349324][T29625] ? __pfx_ksys_write+0x10/0x10 [ 998.349351][T29625] ? rcu_is_watching+0x15/0xb0 [ 998.349380][T29625] ? do_syscall_64+0xbe/0x3b0 [ 998.349422][T29625] do_syscall_64+0xfa/0x3b0 [ 998.349453][T29625] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.349483][T29625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.349506][T29625] ? clear_bhb_loop+0x60/0xb0 [ 998.349533][T29625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.349555][T29625] RIP: 0033:0x7fdeee38ebe9 [ 998.349577][T29625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.349596][T29625] RSP: 002b:00007fdeec5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.349620][T29625] RAX: ffffffffffffffda RBX: 00007fdeee5b5fa0 RCX: 00007fdeee38ebe9 [ 998.349637][T29625] RDX: 0000000024004840 RSI: 0000200000000000 RDI: 0000000000000003 [ 998.349652][T29625] RBP: 00007fdeec5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 998.349665][T29625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.349678][T29625] R13: 00007fdeee5b6038 R14: 00007fdeee5b5fa0 R15: 00007ffe9da69288 [ 998.349713][T29625] [ 998.865335][T29636] netlink: 'syz.2.6739': attribute type 10 has an invalid length. [ 999.113068][T29649] netlink: 'syz.2.6744': attribute type 2 has an invalid length. [ 999.149749][T29649] __nla_validate_parse: 4 callbacks suppressed [ 999.149772][T29649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6744'. [ 999.153428][T29650] netlink: 'syz.3.6743': attribute type 3 has an invalid length. [ 999.371059][T29662] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6746'. [ 999.455771][T29661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 999.474233][T29661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 999.487127][T29661] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6747'. [ 999.794593][T29672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6751'. [ 999.799748][T29674] netlink: 'syz.3.6750': attribute type 8 has an invalid length. [ 1000.286273][T29694] netlink: 'syz.3.6758': attribute type 3 has an invalid length. [ 1000.385676][T29701] netlink: 'syz.1.6762': attribute type 21 has an invalid length. [ 1000.394836][T29701] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6762'. [ 1000.427162][T29701] netlink: 'syz.1.6762': attribute type 4 has an invalid length. [ 1000.443239][T29701] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6762'. [ 1000.455568][T29704] tipc: Enabling of bearer rejected, already enabled [ 1000.511202][T29705] netlink: 'syz.0.6763': attribute type 3 has an invalid length. [ 1000.652942][T29707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1000.937951][T29711] lo speed is unknown, defaulting to 1000 [ 1001.023865][T29711] lo speed is unknown, defaulting to 1000 [ 1001.231606][T29726] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6767'. [ 1001.261198][T29725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1001.270837][T29725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1001.279328][T29725] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6770'. [ 1001.386447][T29732] netlink: 'syz.0.6768': attribute type 3 has an invalid length. [ 1001.424931][T29734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6771'. [ 1002.112541][T29743] tipc: Enabled bearer , priority 1 [ 1002.204066][T29747] tipc: Enabling of bearer rejected, failed to enable media [ 1002.570910][T29762] netlink: 'syz.2.6779': attribute type 8 has an invalid length. [ 1002.792581][T29772] netlink: 'syz.1.6785': attribute type 3 has an invalid length. [ 1002.829043][T29773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1002.836409][T29773] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.843715][T29773] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.856666][T29773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1003.376855][T29792] tipc: Enabling of bearer rejected, failed to enable media [ 1003.478927][T29796] tipc: Enabled bearer , priority 0 [ 1003.563468][T29796] syzkaller0: entered promiscuous mode [ 1003.570200][T29796] syzkaller0: entered allmulticast mode [ 1003.649420][T29796] tipc: Resetting bearer [ 1003.666672][T29795] tipc: Resetting bearer [ 1004.290562][T29824] __nla_validate_parse: 7 callbacks suppressed [ 1004.290588][T29824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6798'. [ 1006.204146][T29795] tipc: Disabling bearer [ 1006.214083][T29809] netlink: 'syz.2.6796': attribute type 49 has an invalid length. [ 1006.511928][T29842] netlink: 'syz.3.6800': attribute type 3 has an invalid length. [ 1006.633821][T29852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1006.648494][T29852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1006.659340][T29852] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6805'. [ 1007.487091][T29880] FAULT_INJECTION: forcing a failure. [ 1007.487091][T29880] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.524910][T29880] CPU: 1 UID: 0 PID: 29880 Comm: syz.1.6818 Not tainted syzkaller #0 PREEMPT(full) [ 1007.524941][T29880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1007.524957][T29880] Call Trace: [ 1007.524967][T29880] [ 1007.524977][T29880] dump_stack_lvl+0x189/0x250 [ 1007.525011][T29880] ? __pfx____ratelimit+0x10/0x10 [ 1007.525042][T29880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1007.525070][T29880] ? __pfx__printk+0x10/0x10 [ 1007.525102][T29880] ? kasan_save_track+0x4f/0x80 [ 1007.525129][T29880] ? kasan_save_free_info+0x46/0x50 [ 1007.525150][T29880] ? __kasan_slab_free+0x5b/0x80 [ 1007.525177][T29880] ? kmem_cache_free+0x18f/0x400 [ 1007.525206][T29880] ? pfkey_sendmsg+0x48a/0x1090 [ 1007.525238][T29880] ? __sock_sendmsg+0x219/0x270 [ 1007.525264][T29880] ? ____sys_sendmsg+0x505/0x830 [ 1007.525284][T29880] ? ___sys_sendmsg+0x21f/0x2a0 [ 1007.525303][T29880] ? __x64_sys_sendmsg+0x19b/0x260 [ 1007.525330][T29880] should_fail_ex+0x414/0x560 [ 1007.525365][T29880] should_failslab+0xa8/0x100 [ 1007.525408][T29880] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1007.525437][T29880] ? xfrm_state_alloc+0x24/0x2f0 [ 1007.525475][T29880] xfrm_state_alloc+0x24/0x2f0 [ 1007.525509][T29880] pfkey_add+0x6e4/0x2e00 [ 1007.525554][T29880] ? __pfx_pfkey_add+0x10/0x10 [ 1007.525570][T29880] ? kmem_cache_free+0x18f/0x400 [ 1007.525617][T29880] pfkey_sendmsg+0xbfb/0x1090 [ 1007.525670][T29880] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1007.525736][T29880] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1007.525772][T29880] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1007.525796][T29880] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1007.525831][T29880] __sock_sendmsg+0x219/0x270 [ 1007.525863][T29880] ____sys_sendmsg+0x505/0x830 [ 1007.525894][T29880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1007.525929][T29880] ? import_iovec+0x74/0xa0 [ 1007.525959][T29880] ___sys_sendmsg+0x21f/0x2a0 [ 1007.525986][T29880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1007.526054][T29880] ? __fget_files+0x2a/0x420 [ 1007.526087][T29880] ? __fget_files+0x3a0/0x420 [ 1007.526134][T29880] __x64_sys_sendmsg+0x19b/0x260 [ 1007.526161][T29880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1007.526197][T29880] ? __pfx_ksys_write+0x10/0x10 [ 1007.526223][T29880] ? rcu_is_watching+0x15/0xb0 [ 1007.526253][T29880] ? do_syscall_64+0xbe/0x3b0 [ 1007.526288][T29880] do_syscall_64+0xfa/0x3b0 [ 1007.526318][T29880] ? lockdep_hardirqs_on+0x9c/0x150 [ 1007.526347][T29880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.526376][T29880] ? clear_bhb_loop+0x60/0xb0 [ 1007.526403][T29880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.526425][T29880] RIP: 0033:0x7fed2518ebe9 [ 1007.526446][T29880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.526466][T29880] RSP: 002b:00007fed260e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.526489][T29880] RAX: ffffffffffffffda RBX: 00007fed253b5fa0 RCX: 00007fed2518ebe9 [ 1007.526506][T29880] RDX: 0000000000008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1007.526521][T29880] RBP: 00007fed260e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.526535][T29880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.526548][T29880] R13: 00007fed253b6038 R14: 00007fed253b5fa0 R15: 00007ffe0a70a898 [ 1007.526585][T29880] [ 1008.278342][T29915] netlink: 'syz.3.6829': attribute type 3 has an invalid length. [ 1008.401765][T29921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6831'. [ 1008.411900][T29921] tipc: Enabling of bearer rejected, failed to enable media [ 1008.460895][T29919] erspan0: entered promiscuous mode [ 1008.469559][T29919] batman_adv: batadv0: Adding interface: macvlan2 [ 1008.476071][T29919] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 1008.527785][T29919] batman_adv: batadv0: Interface activated: macvlan2 [ 1008.755282][T29927] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6833'. [ 1009.027185][T29931] FAULT_INJECTION: forcing a failure. [ 1009.027185][T29931] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.064548][T29931] CPU: 1 UID: 0 PID: 29931 Comm: syz.0.6835 Not tainted syzkaller #0 PREEMPT(full) [ 1009.064580][T29931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1009.064594][T29931] Call Trace: [ 1009.064603][T29931] [ 1009.064612][T29931] dump_stack_lvl+0x189/0x250 [ 1009.064645][T29931] ? __pfx____ratelimit+0x10/0x10 [ 1009.064676][T29931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1009.064704][T29931] ? __pfx__printk+0x10/0x10 [ 1009.064741][T29931] ? __pfx___might_resched+0x10/0x10 [ 1009.064767][T29931] should_fail_ex+0x414/0x560 [ 1009.064802][T29931] should_failslab+0xa8/0x100 [ 1009.064837][T29931] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1009.064868][T29931] ? __alloc_skb+0x112/0x2d0 [ 1009.064906][T29931] __alloc_skb+0x112/0x2d0 [ 1009.064944][T29931] netlink_sendmsg+0x5c6/0xb30 [ 1009.064989][T29931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.065025][T29931] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1009.065062][T29931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1009.065086][T29931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.065121][T29931] __sock_sendmsg+0x219/0x270 [ 1009.065153][T29931] ____sys_sendmsg+0x505/0x830 [ 1009.065183][T29931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.065218][T29931] ? import_iovec+0x74/0xa0 [ 1009.065245][T29931] ___sys_sendmsg+0x21f/0x2a0 [ 1009.065272][T29931] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.065337][T29931] ? __fget_files+0x2a/0x420 [ 1009.065370][T29931] ? __fget_files+0x3a0/0x420 [ 1009.065415][T29931] __x64_sys_sendmsg+0x19b/0x260 [ 1009.065442][T29931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1009.065477][T29931] ? __pfx_ksys_write+0x10/0x10 [ 1009.065527][T29931] ? rcu_is_watching+0x15/0xb0 [ 1009.065559][T29931] ? do_syscall_64+0xbe/0x3b0 [ 1009.065597][T29931] do_syscall_64+0xfa/0x3b0 [ 1009.065628][T29931] ? lockdep_hardirqs_on+0x9c/0x150 [ 1009.065656][T29931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.065678][T29931] ? clear_bhb_loop+0x60/0xb0 [ 1009.065705][T29931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.065728][T29931] RIP: 0033:0x7f880398ebe9 [ 1009.065748][T29931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.065768][T29931] RSP: 002b:00007f88048a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.065792][T29931] RAX: ffffffffffffffda RBX: 00007f8803bb5fa0 RCX: 00007f880398ebe9 [ 1009.065809][T29931] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 1009.065824][T29931] RBP: 00007f88048a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.065838][T29931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.065851][T29931] R13: 00007f8803bb6038 R14: 00007f8803bb5fa0 R15: 00007ffe4a811b98 [ 1009.065887][T29931] [ 1009.702101][T29949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6842'. [ 1009.725355][T29949] tipc: Enabling of bearer rejected, failed to enable media [ 1009.751703][T29952] netlink: 'syz.4.6839': attribute type 3 has an invalid length. [ 1009.759948][T29952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6839'. [ 1009.774273][T29951] tipc: Enabling of bearer rejected, already enabled [ 1009.797746][T29957] netlink: 'syz.0.6841': attribute type 11 has an invalid length. [ 1009.955439][T29962] netlink: 'syz.3.6845': attribute type 2 has an invalid length. [ 1009.995754][T29962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6845'. [ 1010.326837][T29979] FAULT_INJECTION: forcing a failure. [ 1010.326837][T29979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.379711][T29979] CPU: 1 UID: 0 PID: 29979 Comm: syz.0.6848 Not tainted syzkaller #0 PREEMPT(full) [ 1010.379744][T29979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1010.379758][T29979] Call Trace: [ 1010.379768][T29979] [ 1010.379778][T29979] dump_stack_lvl+0x189/0x250 [ 1010.379810][T29979] ? __pfx____ratelimit+0x10/0x10 [ 1010.379841][T29979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1010.379867][T29979] ? __pfx__printk+0x10/0x10 [ 1010.379913][T29979] should_fail_ex+0x414/0x560 [ 1010.379947][T29979] _copy_to_user+0x31/0xb0 [ 1010.379972][T29979] simple_read_from_buffer+0xe1/0x170 [ 1010.380010][T29979] proc_fail_nth_read+0x1b3/0x220 [ 1010.380039][T29979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1010.380067][T29979] ? rw_verify_area+0x2a6/0x4d0 [ 1010.380094][T29979] ? __lock_acquire+0xab9/0xd20 [ 1010.380124][T29979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1010.380150][T29979] vfs_read+0x200/0xa30 [ 1010.380176][T29979] ? fdget_pos+0x247/0x320 [ 1010.380201][T29979] ? __pfx___mutex_lock+0x10/0x10 [ 1010.380234][T29979] ? __pfx_vfs_read+0x10/0x10 [ 1010.380266][T29979] ? __fget_files+0x2a/0x420 [ 1010.380304][T29979] ? __fget_files+0x3a0/0x420 [ 1010.380336][T29979] ? __fget_files+0x2a/0x420 [ 1010.380380][T29979] ksys_read+0x145/0x250 [ 1010.380421][T29979] ? __pfx_ksys_read+0x10/0x10 [ 1010.380456][T29979] ? do_syscall_64+0xbe/0x3b0 [ 1010.380494][T29979] do_syscall_64+0xfa/0x3b0 [ 1010.380525][T29979] ? lockdep_hardirqs_on+0x9c/0x150 [ 1010.380555][T29979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.380577][T29979] ? clear_bhb_loop+0x60/0xb0 [ 1010.380604][T29979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.380631][T29979] RIP: 0033:0x7f880398d5fc [ 1010.380651][T29979] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1010.380670][T29979] RSP: 002b:00007f88048a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1010.380694][T29979] RAX: ffffffffffffffda RBX: 00007f8803bb5fa0 RCX: 00007f880398d5fc [ 1010.380711][T29979] RDX: 000000000000000f RSI: 00007f88048a80a0 RDI: 0000000000000004 [ 1010.380725][T29979] RBP: 00007f88048a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.380739][T29979] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 1010.380754][T29979] R13: 00007f8803bb6038 R14: 00007f8803bb5fa0 R15: 00007ffe4a811b98 [ 1010.380790][T29979] [ 1010.812474][T29993] batadv0: mtu less than device minimum [ 1010.922260][T30004] netlink: 'syz.2.6857': attribute type 2 has an invalid length. [ 1010.932626][T30004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6857'. [ 1010.971657][T29999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6855'. [ 1011.003645][T30008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6856'. [ 1011.038706][T30008] tipc: Enabling of bearer rejected, failed to enable media [ 1011.259549][T30016] netlink: 'syz.3.6858': attribute type 1 has an invalid length. [ 1011.412849][T30020] netlink: 'syz.4.6859': attribute type 8 has an invalid length. [ 1011.445202][T30022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6861'. [ 1011.598616][T30034] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6867'. [ 1011.640143][T30035] netlink: 'syz.3.6865': attribute type 3 has an invalid length. [ 1012.060072][T30049] netlink: 'syz.4.6872': attribute type 1 has an invalid length. [ 1012.250516][T30056] IPVS: set_ctl: invalid protocol: 58 2.64.0.0:20001 [ 1012.387254][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6873'. [ 1012.408981][T30061] tipc: Enabling of bearer rejected, failed to enable media [ 1012.476178][T30063] netlink: 'syz.1.6876': attribute type 8 has an invalid length. [ 1012.499422][T30066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6878'. [ 1012.527616][T30066] FAULT_INJECTION: forcing a failure. [ 1012.527616][T30066] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.550363][T30066] CPU: 1 UID: 0 PID: 30066 Comm: syz.0.6878 Not tainted syzkaller #0 PREEMPT(full) [ 1012.550395][T30066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1012.550414][T30066] Call Trace: [ 1012.550423][T30066] [ 1012.550433][T30066] dump_stack_lvl+0x189/0x250 [ 1012.550466][T30066] ? __pfx____ratelimit+0x10/0x10 [ 1012.550497][T30066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1012.550524][T30066] ? __pfx__printk+0x10/0x10 [ 1012.550561][T30066] ? __pfx___might_resched+0x10/0x10 [ 1012.550582][T30066] ? fs_reclaim_acquire+0x7d/0x100 [ 1012.550622][T30066] should_fail_ex+0x414/0x560 [ 1012.550656][T30066] should_failslab+0xa8/0x100 [ 1012.550690][T30066] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1012.550721][T30066] ? __alloc_skb+0x112/0x2d0 [ 1012.550759][T30066] __alloc_skb+0x112/0x2d0 [ 1012.550797][T30066] netlink_ack+0x146/0xa50 [ 1012.550846][T30066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1012.550891][T30066] netlink_rcv_skb+0x28c/0x470 [ 1012.550920][T30066] ? __lock_acquire+0xab9/0xd20 [ 1012.550952][T30066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1012.550978][T30066] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1012.551033][T30066] ? down_read+0x1ad/0x2e0 [ 1012.551057][T30066] genl_rcv+0x28/0x40 [ 1012.551079][T30066] netlink_unicast+0x82f/0x9e0 [ 1012.551119][T30066] ? __pfx_netlink_unicast+0x10/0x10 [ 1012.551150][T30066] ? netlink_sendmsg+0x642/0xb30 [ 1012.551181][T30066] ? skb_put+0x11b/0x210 [ 1012.551205][T30066] netlink_sendmsg+0x805/0xb30 [ 1012.551256][T30066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.551293][T30066] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1012.551330][T30066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1012.551354][T30066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.551387][T30066] __sock_sendmsg+0x219/0x270 [ 1012.551420][T30066] ____sys_sendmsg+0x505/0x830 [ 1012.551449][T30066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1012.551484][T30066] ? import_iovec+0x74/0xa0 [ 1012.551513][T30066] ___sys_sendmsg+0x21f/0x2a0 [ 1012.551539][T30066] ? __pfx____sys_sendmsg+0x10/0x10 [ 1012.551604][T30066] ? __fget_files+0x2a/0x420 [ 1012.551637][T30066] ? __fget_files+0x3a0/0x420 [ 1012.551682][T30066] __x64_sys_sendmsg+0x19b/0x260 [ 1012.551708][T30066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1012.551743][T30066] ? __pfx_ksys_write+0x10/0x10 [ 1012.551769][T30066] ? rcu_is_watching+0x15/0xb0 [ 1012.551797][T30066] ? do_syscall_64+0xbe/0x3b0 [ 1012.551833][T30066] do_syscall_64+0xfa/0x3b0 [ 1012.551863][T30066] ? lockdep_hardirqs_on+0x9c/0x150 [ 1012.551893][T30066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.551915][T30066] ? clear_bhb_loop+0x60/0xb0 [ 1012.551942][T30066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.551963][T30066] RIP: 0033:0x7f880398ebe9 [ 1012.551983][T30066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.551998][T30066] RSP: 002b:00007f88048a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.552022][T30066] RAX: ffffffffffffffda RBX: 00007f8803bb5fa0 RCX: 00007f880398ebe9 [ 1012.552038][T30066] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1012.552051][T30066] RBP: 00007f88048a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.552065][T30066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.552077][T30066] R13: 00007f8803bb6038 R14: 00007f8803bb5fa0 R15: 00007ffe4a811b98 [ 1012.552112][T30066] [ 1013.009285][T30077] batadv_slave_1: entered promiscuous mode [ 1013.270268][T30089] netlink: 'syz.2.6883': attribute type 3 has an invalid length. [ 1013.492943][T30101] netlink: 'syz.3.6890': attribute type 8 has an invalid length. [ 1013.948335][ T30] audit: type=1800 audit(1755642273.095:4): pid=30112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6894" name="memory.events" dev="tmpfs" ino=7364 res=0 errno=0 [ 1014.677289][T30127] netlink: 'syz.3.6896': attribute type 3 has an invalid length. [ 1014.828007][T30141] netlink: 'syz.1.6901': attribute type 8 has an invalid length. [ 1014.879511][T30143] __nla_validate_parse: 4 callbacks suppressed [ 1014.879532][T30143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6902'. [ 1014.920465][T30144] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6903'. [ 1015.132441][T30158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6908'. [ 1015.175597][T30158] openvswitch: netlink: Flow actions attr not present in new flow. [ 1015.745503][T30187] FAULT_INJECTION: forcing a failure. [ 1015.745503][T30187] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.764208][T30187] CPU: 1 UID: 0 PID: 30187 Comm: syz.1.6915 Not tainted syzkaller #0 PREEMPT(full) [ 1015.764241][T30187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1015.764256][T30187] Call Trace: [ 1015.764266][T30187] [ 1015.764277][T30187] dump_stack_lvl+0x189/0x250 [ 1015.764310][T30187] ? __pfx____ratelimit+0x10/0x10 [ 1015.764342][T30187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1015.764369][T30187] ? __pfx__printk+0x10/0x10 [ 1015.764404][T30187] ? __pfx___might_resched+0x10/0x10 [ 1015.764425][T30187] ? fs_reclaim_acquire+0x7d/0x100 [ 1015.764466][T30187] should_fail_ex+0x414/0x560 [ 1015.764502][T30187] should_failslab+0xa8/0x100 [ 1015.764536][T30187] __kmalloc_noprof+0xcb/0x4f0 [ 1015.764565][T30187] ? tomoyo_encode+0x28b/0x550 [ 1015.764592][T30187] tomoyo_encode+0x28b/0x550 [ 1015.764622][T30187] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1015.764648][T30187] ? tomoyo_domain+0xd9/0x130 [ 1015.764677][T30187] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1015.764708][T30187] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1015.764742][T30187] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1015.764801][T30187] ? __lock_acquire+0xab9/0xd20 [ 1015.764858][T30187] ? __fget_files+0x2a/0x420 [ 1015.764896][T30187] ? __fget_files+0x2a/0x420 [ 1015.764928][T30187] ? __fget_files+0x3a0/0x420 [ 1015.764959][T30187] ? __fget_files+0x2a/0x420 [ 1015.764997][T30187] security_file_ioctl+0xcb/0x2d0 [ 1015.765029][T30187] __se_sys_ioctl+0x47/0x170 [ 1015.765060][T30187] do_syscall_64+0xfa/0x3b0 [ 1015.765091][T30187] ? lockdep_hardirqs_on+0x9c/0x150 [ 1015.765121][T30187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.765143][T30187] ? clear_bhb_loop+0x60/0xb0 [ 1015.765171][T30187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.765192][T30187] RIP: 0033:0x7fed2518ebe9 [ 1015.765212][T30187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.765232][T30187] RSP: 002b:00007fed260e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1015.765256][T30187] RAX: ffffffffffffffda RBX: 00007fed253b5fa0 RCX: 00007fed2518ebe9 [ 1015.765273][T30187] RDX: 00002000000001c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 1015.765288][T30187] RBP: 00007fed260e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.765302][T30187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.765315][T30187] R13: 00007fed253b6038 R14: 00007fed253b5fa0 R15: 00007ffe0a70a898 [ 1015.765352][T30187] [ 1015.765378][T30187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1016.261007][T30202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6921'. [ 1016.768434][T30220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1016.775921][T30220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1016.789525][T30220] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6925'. [ 1016.876976][ T30] audit: type=1107 audit(1755642276.025:5): pid=30222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1016.909353][T30225] siw: device registration error -23 [ 1017.211384][T30237] tipc: Enabling of bearer rejected, already enabled [ 1017.248561][T30241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6933'. [ 1017.257747][T30241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6933'. [ 1017.476926][T30255] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 1017.602787][T30260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6935'. [ 1017.972725][ T6092] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1018.412260][T30289] lo speed is unknown, defaulting to 1000 [ 1018.427182][T30289] lo speed is unknown, defaulting to 1000 [ 1018.672172][T30270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1018.853251][T30305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6953'. [ 1019.005778][T30313] netlink: 'syz.1.6954': attribute type 1 has an invalid length. [ 1019.120762][T30316] sock: sock_set_timeout: `syz.3.6955' (pid 30316) tries to set negative timeout [ 1019.155145][T30319] netlink: 'syz.0.6952': attribute type 3 has an invalid length. [ 1019.709920][T30330] netlink: 'syz.2.6956': attribute type 10 has an invalid length. [ 1020.296680][T30342] netlink: 'syz.3.6960': attribute type 2 has an invalid length. [ 1020.356389][T30342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6960'. [ 1020.395330][T30329] lo speed is unknown, defaulting to 1000 [ 1020.426067][T30329] lo speed is unknown, defaulting to 1000 [ 1020.803881][T30354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6961'. [ 1020.972621][T30363] netlink: 'syz.2.6967': attribute type 2 has an invalid length. [ 1020.977834][T30354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6961'. [ 1020.980528][T30363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6967'. [ 1021.420449][T30379] netlink: 'syz.0.6971': attribute type 3 has an invalid length. [ 1021.458991][T30382] FAULT_INJECTION: forcing a failure. [ 1021.458991][T30382] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.472633][T30382] CPU: 1 UID: 0 PID: 30382 Comm: syz.2.6972 Not tainted syzkaller #0 PREEMPT(full) [ 1021.472663][T30382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1021.472678][T30382] Call Trace: [ 1021.472686][T30382] [ 1021.472697][T30382] dump_stack_lvl+0x189/0x250 [ 1021.472729][T30382] ? __pfx____ratelimit+0x10/0x10 [ 1021.472761][T30382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1021.472787][T30382] ? __pfx__printk+0x10/0x10 [ 1021.472833][T30382] should_fail_ex+0x414/0x560 [ 1021.472866][T30382] should_failslab+0xa8/0x100 [ 1021.472899][T30382] __kmalloc_cache_noprof+0x70/0x3d0 [ 1021.472926][T30382] ? sctp_add_bind_addr+0x8c/0x370 [ 1021.472955][T30382] sctp_add_bind_addr+0x8c/0x370 [ 1021.472983][T30382] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1021.473011][T30382] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1021.473035][T30382] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1021.473065][T30382] ? sctp_v4_is_any+0x35/0x60 [ 1021.473094][T30382] ? sctp_copy_one_addr+0x93/0x360 [ 1021.473127][T30382] sctp_bind_addr_copy+0x189/0x3c0 [ 1021.473164][T30382] sctp_connect_new_asoc+0x2e0/0x690 [ 1021.473190][T30382] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1021.473210][T30382] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1021.473242][T30382] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1021.473269][T30382] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1021.473302][T30382] sctp_sendmsg+0x155c/0x2810 [ 1021.473351][T30382] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1021.473390][T30382] ? aa_sk_perm+0x81e/0x950 [ 1021.473428][T30382] ? __pfx_aa_sk_perm+0x10/0x10 [ 1021.473463][T30382] ? sock_rps_record_flow+0x19/0x410 [ 1021.473494][T30382] ? inet_sendmsg+0x2f4/0x370 [ 1021.473533][T30382] __sock_sendmsg+0x19c/0x270 [ 1021.473567][T30382] ____sys_sendmsg+0x52d/0x830 [ 1021.473598][T30382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1021.473640][T30382] ? import_iovec+0x74/0xa0 [ 1021.473671][T30382] ___sys_sendmsg+0x21f/0x2a0 [ 1021.473694][T30382] ? __pfx____sys_sendmsg+0x10/0x10 [ 1021.473762][T30382] ? __fget_files+0x2a/0x420 [ 1021.473796][T30382] ? __fget_files+0x3a0/0x420 [ 1021.473842][T30382] __sys_sendmmsg+0x227/0x430 [ 1021.473873][T30382] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1021.473893][T30382] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1021.473956][T30382] ? ksys_write+0x22a/0x250 [ 1021.473988][T30382] ? __pfx_ksys_write+0x10/0x10 [ 1021.474026][T30382] __x64_sys_sendmmsg+0xa0/0xc0 [ 1021.474052][T30382] do_syscall_64+0xfa/0x3b0 [ 1021.474088][T30382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.474109][T30382] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1021.474130][T30382] ? clear_bhb_loop+0x60/0xb0 [ 1021.474157][T30382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.474177][T30382] RIP: 0033:0x7fdeee38ebe9 [ 1021.474197][T30382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.474215][T30382] RSP: 002b:00007fdeec5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1021.474239][T30382] RAX: ffffffffffffffda RBX: 00007fdeee5b5fa0 RCX: 00007fdeee38ebe9 [ 1021.474255][T30382] RDX: 0000000000000001 RSI: 0000200000007840 RDI: 0000000000000003 [ 1021.474270][T30382] RBP: 00007fdeec5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.474284][T30382] R10: 0000000000004081 R11: 0000000000000246 R12: 0000000000000002 [ 1021.474297][T30382] R13: 00007fdeee5b6038 R14: 00007fdeee5b5fa0 R15: 00007ffe9da69288 [ 1021.474335][T30382] [ 1022.079011][T30391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6973'. [ 1022.139091][T30392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6975'. [ 1022.465834][T30402] netlink: 'syz.0.6976': attribute type 11 has an invalid length. [ 1022.718780][T30407] netlink: 'syz.4.6979': attribute type 3 has an invalid length. [ 1023.159468][T30422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6985'. [ 1023.172106][T30422] tipc: Enabling of bearer rejected, failed to enable media [ 1023.342472][T30427] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6987'. [ 1023.352028][T30427] syzkaller0: Caught tx_queue_len zero misconfig [ 1023.489971][T30435] netlink: 'syz.3.6989': attribute type 3 has an invalid length. [ 1023.497997][T30436] Unsupported ieee802154 address type: 0 [ 1023.640448][T30442] netlink: 'syz.0.6992': attribute type 1 has an invalid length. [ 1024.052333][T30448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6995'. [ 1024.139648][T30457] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6996'. [ 1024.536582][T30454] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1024.555201][ T6314] lo speed is unknown, defaulting to 1000 [ 1024.568671][ T6314] syz0: Port: 1 Link DOWN [ 1024.588492][T10439] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.606178][T30468] tipc: Enabling of bearer rejected, failed to enable media [ 1024.618241][T10439] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.627530][T10434] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.639236][ T6314] lo speed is unknown, defaulting to 1000 [ 1024.652977][T10434] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.856693][T30488] netlink: 'syz.2.7003': attribute type 3 has an invalid length. [ 1025.879230][T30498] netlink: 'syz.0.7004': attribute type 3 has an invalid length. [ 1026.015451][T30502] lo speed is unknown, defaulting to 1000 [ 1026.044644][T30502] lo speed is unknown, defaulting to 1000 [ 1026.067646][T30516] netlink: 'syz.4.7009': attribute type 3 has an invalid length. [ 1026.395018][T30525] netlink: 'syz.2.7010': attribute type 1 has an invalid length. [ 1026.495077][T30528] netlink: 'syz.0.7012': attribute type 3 has an invalid length. [ 1026.614306][T30530] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1027.442023][T30552] netlink: 'syz.4.7020': attribute type 3 has an invalid length. [ 1027.484279][T30554] __nla_validate_parse: 2 callbacks suppressed [ 1027.484300][T30554] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7021'. [ 1027.765149][T30562] netlink: 124 bytes leftover after parsing attributes in process `syz.2.7022'. [ 1027.836508][T30567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1027.854610][T30568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1027.866679][T30568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1028.070869][T30574] netlink: 'syz.1.7025': attribute type 3 has an invalid length. [ 1028.613871][T30577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7028'. [ 1029.097357][T30579] tipc: Enabling of bearer rejected, already enabled [ 1029.352517][T30597] netlink: 'syz.1.7030': attribute type 3 has an invalid length. [ 1029.418533][T30600] veth0_to_team: left promiscuous mode [ 1029.435384][T30600] batadv_slave_1: left promiscuous mode [ 1029.466800][T30600] syzkaller0: left allmulticast mode [ 1029.491549][T30600] veth3: left promiscuous mode [ 1029.497509][T30600] veth5: left promiscuous mode [ 1029.515776][T30600] veth9: left promiscuous mode [ 1029.525167][T30600] veth11: left promiscuous mode [ 1029.537187][T30600] veth13: left promiscuous mode [ 1029.561960][T30600] veth15: left promiscuous mode [ 1029.576907][T30600] veth17: left promiscuous mode [ 1029.587548][T30600] veth19: left promiscuous mode [ 1029.601925][T30600] veth21: left promiscuous mode [ 1029.613564][T30600] veth23: left promiscuous mode [ 1029.627971][T30600] veth25: left promiscuous mode [ 1029.633844][T30600] veth27: left promiscuous mode [ 1029.641869][T30600] veth29: left promiscuous mode [ 1029.647459][T30600] veth31: left promiscuous mode [ 1029.653234][T30600] veth33: left promiscuous mode [ 1029.659191][T30600] veth35: left promiscuous mode [ 1029.664779][T30600] veth37: left promiscuous mode [ 1029.670459][T30600] veth39: left promiscuous mode [ 1029.676126][T30600] veth41: left promiscuous mode [ 1029.705402][T30600] veth43: left promiscuous mode [ 1029.721919][T30600] veth45: left promiscuous mode [ 1029.727584][T30600] veth47: left promiscuous mode [ 1029.733311][T30600] veth49: left promiscuous mode [ 1029.741166][T30600] veth51: left promiscuous mode [ 1029.752378][T30600] veth53: left promiscuous mode [ 1029.789074][T30600] veth55: left promiscuous mode [ 1029.807108][T30600] veth57: left promiscuous mode [ 1029.825118][T30600] veth59: left promiscuous mode [ 1029.838553][T30600] veth61: left promiscuous mode [ 1029.844051][T30600] veth63: left promiscuous mode [ 1029.850055][T30600] veth65: left promiscuous mode [ 1029.855448][T30600] veth67: left promiscuous mode [ 1029.861204][T30600] veth69: left promiscuous mode [ 1029.866646][T30600] veth71: left promiscuous mode [ 1029.875146][T30600] veth73: left promiscuous mode [ 1029.880639][T30600] veth75: left promiscuous mode [ 1029.886196][T30600] veth77: left promiscuous mode [ 1029.891700][T30600] veth79: left promiscuous mode [ 1029.897357][T30600] veth81: left promiscuous mode [ 1029.903092][T30600] veth83: left promiscuous mode [ 1030.063250][T30623] netlink: 'syz.3.7037': attribute type 1 has an invalid length. [ 1030.296664][T30634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1030.304015][T30634] IPv6: NLM_F_CREATE should be set when creating new route [ 1030.311298][T30634] IPv6: NLM_F_CREATE should be set when creating new route [ 1030.341047][T30634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1030.352335][T30638] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7039'. [ 1030.393527][T30641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7040'. [ 1030.635384][T30655] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1030.646417][T30655] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1030.655116][T30655] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1030.673089][T30652] IPVS: set_ctl: invalid protocol: 57 172.20.20.187:20001 [ 1030.683847][T30652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1030.735490][T30658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7045'. [ 1031.515480][T30687] netlink: 'syz.1.7058': attribute type 3 has an invalid length. [ 1032.257537][T30699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7062'. [ 1032.415342][T30713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1032.424211][T30713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1032.439551][T30713] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7063'. [ 1032.610847][T30708] netlink: 'syz.0.7066': attribute type 3 has an invalid length. [ 1032.754437][T30724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7068'. [ 1032.851094][T30728] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7070'. [ 1032.860704][T30728] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7070'. [ 1033.175298][T30740] FAULT_INJECTION: forcing a failure. [ 1033.175298][T30740] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.196698][T30740] CPU: 1 UID: 0 PID: 30740 Comm: syz.2.7074 Not tainted syzkaller #0 PREEMPT(full) [ 1033.196731][T30740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1033.196746][T30740] Call Trace: [ 1033.196756][T30740] [ 1033.196767][T30740] dump_stack_lvl+0x189/0x250 [ 1033.196800][T30740] ? __pfx____ratelimit+0x10/0x10 [ 1033.196832][T30740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.196858][T30740] ? __pfx__printk+0x10/0x10 [ 1033.196897][T30740] ? __pfx___might_resched+0x10/0x10 [ 1033.196917][T30740] ? fs_reclaim_acquire+0x7d/0x100 [ 1033.196958][T30740] should_fail_ex+0x414/0x560 [ 1033.196993][T30740] should_failslab+0xa8/0x100 [ 1033.197028][T30740] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1033.197060][T30740] ? __alloc_skb+0x112/0x2d0 [ 1033.197099][T30740] __alloc_skb+0x112/0x2d0 [ 1033.197135][T30740] mgmt_cmd_complete+0x49/0x590 [ 1033.197169][T30740] ? read_exp_features_info+0x3ee/0x880 [ 1033.197208][T30740] read_exp_features_info+0x605/0x880 [ 1033.197249][T30740] hci_mgmt_cmd+0x9c6/0xef0 [ 1033.197286][T30740] hci_sock_sendmsg+0x6ca/0xef0 [ 1033.197336][T30740] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1033.197371][T30740] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1033.197408][T30740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1033.197433][T30740] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1033.197469][T30740] __sock_sendmsg+0x219/0x270 [ 1033.197501][T30740] sock_write_iter+0x258/0x330 [ 1033.197532][T30740] ? __pfx_sock_write_iter+0x10/0x10 [ 1033.197574][T30740] ? bpf_lsm_file_permission+0x9/0x20 [ 1033.197600][T30740] ? security_file_permission+0x75/0x290 [ 1033.197640][T30740] vfs_write+0x5c9/0xb30 [ 1033.197676][T30740] ? __pfx_sock_write_iter+0x10/0x10 [ 1033.197704][T30740] ? __pfx_vfs_write+0x10/0x10 [ 1033.197747][T30740] ? __fget_files+0x2a/0x420 [ 1033.197792][T30740] ksys_write+0x145/0x250 [ 1033.197825][T30740] ? __pfx_ksys_write+0x10/0x10 [ 1033.197851][T30740] ? rcu_is_watching+0x15/0xb0 [ 1033.197880][T30740] ? do_syscall_64+0xbe/0x3b0 [ 1033.197923][T30740] do_syscall_64+0xfa/0x3b0 [ 1033.197952][T30740] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.197982][T30740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.198004][T30740] ? clear_bhb_loop+0x60/0xb0 [ 1033.198035][T30740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.198055][T30740] RIP: 0033:0x7fdeee38ebe9 [ 1033.198076][T30740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.198095][T30740] RSP: 002b:00007fdeec5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1033.198118][T30740] RAX: ffffffffffffffda RBX: 00007fdeee5b5fa0 RCX: 00007fdeee38ebe9 [ 1033.198134][T30740] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 1033.198148][T30740] RBP: 00007fdeec5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.198162][T30740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.198174][T30740] R13: 00007fdeee5b6038 R14: 00007fdeee5b5fa0 R15: 00007ffe9da69288 [ 1033.198209][T30740] [ 1033.511671][T30742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7075'. [ 1033.575115][T30742] netlink: 'syz.4.7075': attribute type 1 has an invalid length. [ 1033.587959][T30742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7075'. [ 1033.597849][T30742] netlink: 'syz.4.7075': attribute type 1 has an invalid length. [ 1033.607195][T30742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7075'. [ 1033.617708][T30742] netlink: 'syz.4.7075': attribute type 1 has an invalid length. [ 1033.625905][T30742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7075'. [ 1033.634979][T30742] netlink: 'syz.4.7075': attribute type 1 has an invalid length. [ 1033.643520][T30742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7075'. [ 1033.652665][T30742] netlink: 'syz.4.7075': attribute type 1 has an invalid length. [ 1033.660575][T30742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7075'. [ 1033.670330][T30742] netlink: 'syz.4.7075': attribute type 1 has an invalid length. [ 1033.679078][T30742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7075'. [ 1033.688181][T30742] netlink: 'syz.4.7075': attribute type 1 has an invalid length. [ 1033.695967][T30742] netlink: 'syz.4.7075': attribute type 1 has an invalid length. [ 1033.846261][T30753] FAULT_INJECTION: forcing a failure. [ 1033.846261][T30753] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.888581][T30753] CPU: 0 UID: 0 PID: 30753 Comm: syz.2.7079 Not tainted syzkaller #0 PREEMPT(full) [ 1033.888617][T30753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1033.888633][T30753] Call Trace: [ 1033.888642][T30753] [ 1033.888653][T30753] dump_stack_lvl+0x189/0x250 [ 1033.888689][T30753] ? __pfx____ratelimit+0x10/0x10 [ 1033.888722][T30753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.888749][T30753] ? __pfx__printk+0x10/0x10 [ 1033.888788][T30753] ? __pfx___might_resched+0x10/0x10 [ 1033.888808][T30753] ? fs_reclaim_acquire+0x7d/0x100 [ 1033.888848][T30753] should_fail_ex+0x414/0x560 [ 1033.888884][T30753] should_failslab+0xa8/0x100 [ 1033.888919][T30753] __kmalloc_node_noprof+0xd1/0x4e0 [ 1033.888949][T30753] ? crypto_create_tfm_node+0x83/0x3f0 [ 1033.888989][T30753] crypto_create_tfm_node+0x83/0x3f0 [ 1033.889027][T30753] crypto_alloc_tfm_node+0x172/0x3f0 [ 1033.889096][T30753] ah_init_state+0x140/0x650 [ 1033.889141][T30753] __xfrm_init_state+0xa76/0x13f0 [ 1033.889169][T30753] ? __xfrm_init_state+0x7ef/0x13f0 [ 1033.889201][T30753] xfrm_init_state+0x18/0xa0 [ 1033.889225][T30753] pfkey_add+0x1d38/0x2e00 [ 1033.889270][T30753] ? __pfx_pfkey_add+0x10/0x10 [ 1033.889288][T30753] ? kmem_cache_free+0x18f/0x400 [ 1033.889345][T30753] pfkey_sendmsg+0xbfb/0x1090 [ 1033.889398][T30753] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1033.889460][T30753] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1033.889503][T30753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1033.889528][T30753] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1033.889562][T30753] __sock_sendmsg+0x219/0x270 [ 1033.889596][T30753] ____sys_sendmsg+0x505/0x830 [ 1033.889627][T30753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.889662][T30753] ? import_iovec+0x74/0xa0 [ 1033.889693][T30753] ___sys_sendmsg+0x21f/0x2a0 [ 1033.889720][T30753] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.889785][T30753] ? __fget_files+0x2a/0x420 [ 1033.889818][T30753] ? __fget_files+0x3a0/0x420 [ 1033.889864][T30753] __x64_sys_sendmsg+0x19b/0x260 [ 1033.889892][T30753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1033.889927][T30753] ? __pfx_ksys_write+0x10/0x10 [ 1033.889954][T30753] ? rcu_is_watching+0x15/0xb0 [ 1033.889983][T30753] ? do_syscall_64+0xbe/0x3b0 [ 1033.890020][T30753] do_syscall_64+0xfa/0x3b0 [ 1033.890050][T30753] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.890079][T30753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.890102][T30753] ? clear_bhb_loop+0x60/0xb0 [ 1033.890129][T30753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.890150][T30753] RIP: 0033:0x7fdeee38ebe9 [ 1033.890172][T30753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.890192][T30753] RSP: 002b:00007fdeec5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.890216][T30753] RAX: ffffffffffffffda RBX: 00007fdeee5b5fa0 RCX: 00007fdeee38ebe9 [ 1033.890232][T30753] RDX: 0000000000008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1033.890247][T30753] RBP: 00007fdeec5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.890261][T30753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.890274][T30753] R13: 00007fdeee5b6038 R14: 00007fdeee5b5fa0 R15: 00007ffe9da69288 [ 1033.890310][T30753] [ 1034.377589][T30755] hsr_slave_1 (unregistering): left promiscuous mode [ 1035.402090][T30797] lo speed is unknown, defaulting to 1000 [ 1035.414597][T30797] lo speed is unknown, defaulting to 1000 [ 1035.711556][T30808] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1035.717721][T30806] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1036.156785][T30829] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20004 [ 1036.547325][T30843] batadv1: entered promiscuous mode [ 1036.586452][T30844] batadv1: entered promiscuous mode [ 1036.903595][T30850] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 1036.924907][T30850] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1037.110912][T30857] wg1: entered promiscuous mode [ 1037.130847][T30857] wg1: entered allmulticast mode [ 1037.151404][T30860] team0: Mode changed to "broadcast" [ 1038.299009][T30917] __nla_validate_parse: 238 callbacks suppressed [ 1038.299032][T30917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1038.472294][T30920] validate_nla: 230 callbacks suppressed [ 1038.472319][T30920] netlink: 'syz.0.7137': attribute type 2 has an invalid length. [ 1038.511145][T30920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7137'. [ 1038.925892][T30950] netlink: 'syz.4.7145': attribute type 3 has an invalid length. [ 1039.061830][T30955] netlink: 'syz.0.7149': attribute type 3 has an invalid length. [ 1039.234101][T30960] netlink: 'syz.3.7151': attribute type 3 has an invalid length. [ 1039.995570][T30975] netlink: 'syz.4.7156': attribute type 2 has an invalid length. [ 1040.003893][T30975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7156'. [ 1040.017425][T30977] tipc: Enabled bearer , priority 0 [ 1040.034249][T30977] syzkaller0: entered promiscuous mode [ 1040.041146][T30977] syzkaller0: entered allmulticast mode [ 1040.111111][T30977] syzkaller0: mtu less than device minimum [ 1040.138233][T30976] tipc: Resetting bearer [ 1040.230645][T30976] tipc: Disabling bearer [ 1040.628707][T30993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7164'. [ 1040.742981][T31003] netlink: 'syz.0.7166': attribute type 3 has an invalid length. [ 1040.902821][T31012] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7167'. [ 1040.978337][T31011] tap0: tun_chr_ioctl cmd 35111 [ 1041.200490][T31021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7172'. [ 1041.346989][T31022] lo speed is unknown, defaulting to 1000 [ 1041.355239][T31022] lo speed is unknown, defaulting to 1000 [ 1041.799333][T31039] netlink: 'syz.1.7177': attribute type 12 has an invalid length. [ 1042.198295][T31059] FAULT_INJECTION: forcing a failure. [ 1042.198295][T31059] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.212252][T31059] CPU: 1 UID: 0 PID: 31059 Comm: syz.0.7183 Not tainted syzkaller #0 PREEMPT(full) [ 1042.212282][T31059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1042.212296][T31059] Call Trace: [ 1042.212305][T31059] [ 1042.212316][T31059] dump_stack_lvl+0x189/0x250 [ 1042.212349][T31059] ? __pfx____ratelimit+0x10/0x10 [ 1042.212380][T31059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1042.212406][T31059] ? __pfx__printk+0x10/0x10 [ 1042.212444][T31059] ? __pfx___might_resched+0x10/0x10 [ 1042.212465][T31059] ? fs_reclaim_acquire+0x7d/0x100 [ 1042.212504][T31059] should_fail_ex+0x414/0x560 [ 1042.212538][T31059] should_failslab+0xa8/0x100 [ 1042.212580][T31059] __kmalloc_node_noprof+0xd1/0x4e0 [ 1042.212609][T31059] ? crypto_create_tfm_node+0x83/0x3f0 [ 1042.212647][T31059] crypto_create_tfm_node+0x83/0x3f0 [ 1042.212684][T31059] crypto_ahash_init_tfm+0x162/0x770 [ 1042.212712][T31059] ? __kmalloc_node_noprof+0x293/0x4e0 [ 1042.212750][T31059] crypto_create_tfm_node+0x18c/0x3f0 [ 1042.212787][T31059] crypto_alloc_tfm_node+0x172/0x3f0 [ 1042.212830][T31059] ah_init_state+0x140/0x650 [ 1042.212871][T31059] __xfrm_init_state+0xa76/0x13f0 [ 1042.212897][T31059] ? __xfrm_init_state+0x7ef/0x13f0 [ 1042.212929][T31059] xfrm_init_state+0x18/0xa0 [ 1042.212952][T31059] pfkey_add+0x1d38/0x2e00 [ 1042.212995][T31059] ? __pfx_pfkey_add+0x10/0x10 [ 1042.213012][T31059] ? kmem_cache_free+0x18f/0x400 [ 1042.213057][T31059] pfkey_sendmsg+0xbfb/0x1090 [ 1042.213109][T31059] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1042.213173][T31059] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1042.213213][T31059] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1042.213237][T31059] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1042.213272][T31059] __sock_sendmsg+0x219/0x270 [ 1042.213304][T31059] ____sys_sendmsg+0x505/0x830 [ 1042.213334][T31059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1042.213368][T31059] ? import_iovec+0x74/0xa0 [ 1042.213398][T31059] ___sys_sendmsg+0x21f/0x2a0 [ 1042.213424][T31059] ? __pfx____sys_sendmsg+0x10/0x10 [ 1042.213490][T31059] ? __fget_files+0x2a/0x420 [ 1042.213522][T31059] ? __fget_files+0x3a0/0x420 [ 1042.213572][T31059] __x64_sys_sendmsg+0x19b/0x260 [ 1042.213597][T31059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1042.213631][T31059] ? __pfx_ksys_write+0x10/0x10 [ 1042.213656][T31059] ? rcu_is_watching+0x15/0xb0 [ 1042.213684][T31059] ? do_syscall_64+0xbe/0x3b0 [ 1042.213718][T31059] do_syscall_64+0xfa/0x3b0 [ 1042.213747][T31059] ? lockdep_hardirqs_on+0x9c/0x150 [ 1042.213776][T31059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.213797][T31059] ? clear_bhb_loop+0x60/0xb0 [ 1042.213824][T31059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.213844][T31059] RIP: 0033:0x7f880398ebe9 [ 1042.213864][T31059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.213884][T31059] RSP: 002b:00007f88048a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.213906][T31059] RAX: ffffffffffffffda RBX: 00007f8803bb5fa0 RCX: 00007f880398ebe9 [ 1042.213922][T31059] RDX: 0000000000008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 1042.213937][T31059] RBP: 00007f88048a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.213951][T31059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1042.213965][T31059] R13: 00007f8803bb6038 R14: 00007f8803bb5fa0 R15: 00007ffe4a811b98 [ 1042.213998][T31059] [ 1042.618180][T31065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7184'. [ 1042.899973][T31073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7187'. [ 1043.314371][T31087] netlink: 'syz.3.7194': attribute type 2 has an invalid length. [ 1043.327519][T31087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7194'. [ 1043.923662][T31116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7203'. [ 1043.988423][T31117] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7201'. [ 1044.541887][T31134] netlink: 'syz.3.7211': attribute type 2 has an invalid length. [ 1044.568248][T31134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7211'. [ 1044.593226][T31135] netlink: 'syz.1.7210': attribute type 3 has an invalid length. [ 1045.406447][T31158] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7217'. [ 1045.711281][T31163] netlink: 'syz.1.7218': attribute type 4 has an invalid length. [ 1046.018442][T31170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7220'. [ 1046.148779][T31174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7221'. [ 1046.169424][T31176] sctp: [Deprecated]: syz.1.7223 (pid 31176) Use of int in maxseg socket option. [ 1046.169424][T31176] Use struct sctp_assoc_value instead [ 1046.226727][T31176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7223'. [ 1046.514643][T31191] netlink: 'syz.4.7226': attribute type 3 has an invalid length. [ 1046.651247][T31194] FAULT_INJECTION: forcing a failure. [ 1046.651247][T31194] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.664750][T31194] CPU: 1 UID: 0 PID: 31194 Comm: syz.3.7227 Not tainted syzkaller #0 PREEMPT(full) [ 1046.664782][T31194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1046.664796][T31194] Call Trace: [ 1046.664806][T31194] [ 1046.664816][T31194] dump_stack_lvl+0x189/0x250 [ 1046.664849][T31194] ? __pfx____ratelimit+0x10/0x10 [ 1046.664880][T31194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.664908][T31194] ? __pfx__printk+0x10/0x10 [ 1046.664942][T31194] ? __pfx___might_resched+0x10/0x10 [ 1046.664965][T31194] ? fs_reclaim_acquire+0x7d/0x100 [ 1046.665005][T31194] should_fail_ex+0x414/0x560 [ 1046.665040][T31194] should_failslab+0xa8/0x100 [ 1046.665075][T31194] __kmalloc_noprof+0xcb/0x4f0 [ 1046.665103][T31194] ? __nla_parse+0x40/0x60 [ 1046.665133][T31194] ? devlink_nl_notify_filter_set_doit+0x116/0x530 [ 1046.665166][T31194] devlink_nl_notify_filter_set_doit+0x116/0x530 [ 1046.665200][T31194] genl_family_rcv_msg_doit+0x212/0x300 [ 1046.665236][T31194] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1046.665280][T31194] ? stack_trace_save+0x9c/0xe0 [ 1046.665315][T31194] genl_rcv_msg+0x60e/0x790 [ 1046.665348][T31194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1046.665373][T31194] ? __pfx_devlink_nl_notify_filter_set_doit+0x10/0x10 [ 1046.665417][T31194] netlink_rcv_skb+0x205/0x470 [ 1046.665447][T31194] ? __lock_acquire+0xab9/0xd20 [ 1046.665502][T31194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1046.665529][T31194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1046.665586][T31194] ? down_read+0x1ad/0x2e0 [ 1046.665610][T31194] genl_rcv+0x28/0x40 [ 1046.665629][T31194] netlink_unicast+0x82f/0x9e0 [ 1046.665674][T31194] ? __pfx_netlink_unicast+0x10/0x10 [ 1046.665705][T31194] ? netlink_sendmsg+0x642/0xb30 [ 1046.665823][T31194] ? skb_put+0x11b/0x210 [ 1046.665852][T31194] netlink_sendmsg+0x805/0xb30 [ 1046.665898][T31194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.665935][T31194] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1046.665972][T31194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1046.665997][T31194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.666031][T31194] __sock_sendmsg+0x219/0x270 [ 1046.666062][T31194] ____sys_sendmsg+0x505/0x830 [ 1046.666092][T31194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1046.666125][T31194] ? import_iovec+0x74/0xa0 [ 1046.666154][T31194] ___sys_sendmsg+0x21f/0x2a0 [ 1046.666180][T31194] ? __pfx____sys_sendmsg+0x10/0x10 [ 1046.666248][T31194] ? __fget_files+0x2a/0x420 [ 1046.666282][T31194] ? __fget_files+0x3a0/0x420 [ 1046.666329][T31194] __x64_sys_sendmsg+0x19b/0x260 [ 1046.666356][T31194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1046.666392][T31194] ? __pfx_ksys_write+0x10/0x10 [ 1046.666418][T31194] ? rcu_is_watching+0x15/0xb0 [ 1046.666456][T31194] ? do_syscall_64+0xbe/0x3b0 [ 1046.666493][T31194] do_syscall_64+0xfa/0x3b0 [ 1046.666525][T31194] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.666555][T31194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.666578][T31194] ? clear_bhb_loop+0x60/0xb0 [ 1046.666614][T31194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.666637][T31194] RIP: 0033:0x7fa25138ebe9 [ 1046.666658][T31194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.666678][T31194] RSP: 002b:00007fa252280038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1046.666702][T31194] RAX: ffffffffffffffda RBX: 00007fa2515b5fa0 RCX: 00007fa25138ebe9 [ 1046.666719][T31194] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1046.666733][T31194] RBP: 00007fa252280090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.666747][T31194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.666760][T31194] R13: 00007fa2515b6038 R14: 00007fa2515b5fa0 R15: 00007fff6d97b188 [ 1046.666796][T31194] [ 1047.310130][T31197] netlink: 'syz.3.7228': attribute type 3 has an invalid length. [ 1047.371307][T31199] netlink: 'syz.2.7230': attribute type 3 has an invalid length. [ 1047.510197][T31209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7232'. [ 1047.519830][T31210] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7229'. [ 1048.515779][T31227] netlink: 'syz.2.7238': attribute type 3 has an invalid length. [ 1048.563575][T31230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7239'. [ 1049.088642][T31237] netlink: 'syz.0.7241': attribute type 11 has an invalid length. [ 1049.393501][T31244] netlink: 'syz.4.7245': attribute type 9 has an invalid length. [ 1049.437172][T31244] netlink: 'syz.4.7245': attribute type 9 has an invalid length. [ 1049.612697][T31254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7246'. [ 1050.174028][T31270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7251'. [ 1050.218164][T31270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7251'. [ 1050.263397][T31277] netlink: 37768 bytes leftover after parsing attributes in process `syz.2.7251'. [ 1050.280836][T31277] netlink: 37768 bytes leftover after parsing attributes in process `syz.2.7251'. [ 1050.447547][T31292] netlink: 'syz.2.7260': attribute type 21 has an invalid length. [ 1050.455830][T31292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7260'. [ 1051.011131][T31313] syz.0.7267 (31313) used obsolete PPPIOCDETACH ioctl [ 1051.035623][T31313] netlink: 300 bytes leftover after parsing attributes in process `syz.0.7267'. [ 1051.131986][T31321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7270'. [ 1051.481590][T31343] siw: device registration error -23 [ 1052.305533][T31369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1052.774381][T31392] tipc: Enabling of bearer rejected, failed to enable media [ 1052.884635][T31396] netlink: 'syz.0.7293': attribute type 2 has an invalid length. [ 1053.401348][T31421] netlink: 'syz.0.7300': attribute type 3 has an invalid length. [ 1053.900380][T31432] tipc: Enabling of bearer rejected, failed to enable media [ 1054.069437][T31440] netlink: 'syz.4.7304': attribute type 10 has an invalid length. [ 1054.086958][T31440] team0: Device ipvlan1 failed to register rx_handler [ 1054.162798][T31447] netlink: 'syz.1.7306': attribute type 3 has an invalid length. [ 1054.262123][T31451] netlink: 'syz.4.7308': attribute type 2 has an invalid length. [ 1054.278320][T31451] __nla_validate_parse: 4 callbacks suppressed [ 1054.278343][T31451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7308'. [ 1054.616659][T31461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7312'. [ 1055.209752][T31485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7317'. [ 1055.221050][T31485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7317'. [ 1055.361060][T31489] netlink: 'syz.3.7320': attribute type 3 has an invalid length. [ 1055.523962][T31494] FAULT_INJECTION: forcing a failure. [ 1055.523962][T31494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.539633][T31494] CPU: 0 UID: 0 PID: 31494 Comm: syz.2.7322 Not tainted syzkaller #0 PREEMPT(full) [ 1055.539665][T31494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1055.539679][T31494] Call Trace: [ 1055.539687][T31494] [ 1055.539697][T31494] dump_stack_lvl+0x189/0x250 [ 1055.539735][T31494] ? __pfx____ratelimit+0x10/0x10 [ 1055.539765][T31494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1055.539790][T31494] ? __pfx__printk+0x10/0x10 [ 1055.539820][T31494] ? __might_fault+0xb0/0x130 [ 1055.539862][T31494] should_fail_ex+0x414/0x560 [ 1055.539896][T31494] _copy_from_iter+0x1db/0x16f0 [ 1055.539921][T31494] ? rcu_is_watching+0x15/0xb0 [ 1055.539945][T31494] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1055.539976][T31494] ? __pfx__copy_from_iter+0x10/0x10 [ 1055.539999][T31494] ? __build_skb_around+0x257/0x3e0 [ 1055.540035][T31494] ? netlink_sendmsg+0x642/0xb30 [ 1055.540064][T31494] ? skb_put+0x11b/0x210 [ 1055.540106][T31494] netlink_sendmsg+0x6b2/0xb30 [ 1055.540153][T31494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.540190][T31494] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1055.540227][T31494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1055.540250][T31494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.540284][T31494] __sock_sendmsg+0x219/0x270 [ 1055.540316][T31494] ____sys_sendmsg+0x505/0x830 [ 1055.540346][T31494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1055.540379][T31494] ? import_iovec+0x74/0xa0 [ 1055.540409][T31494] ___sys_sendmsg+0x21f/0x2a0 [ 1055.540434][T31494] ? __pfx____sys_sendmsg+0x10/0x10 [ 1055.540501][T31494] ? __fget_files+0x2a/0x420 [ 1055.540532][T31494] ? __fget_files+0x3a0/0x420 [ 1055.540577][T31494] __x64_sys_sendmsg+0x19b/0x260 [ 1055.540604][T31494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1055.540638][T31494] ? __pfx_ksys_write+0x10/0x10 [ 1055.540666][T31494] ? rcu_is_watching+0x15/0xb0 [ 1055.540693][T31494] ? do_syscall_64+0xbe/0x3b0 [ 1055.540736][T31494] do_syscall_64+0xfa/0x3b0 [ 1055.540767][T31494] ? lockdep_hardirqs_on+0x9c/0x150 [ 1055.540795][T31494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.540818][T31494] ? clear_bhb_loop+0x60/0xb0 [ 1055.540845][T31494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.540866][T31494] RIP: 0033:0x7fdeee38ebe9 [ 1055.540886][T31494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.540907][T31494] RSP: 002b:00007fdeec5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.540929][T31494] RAX: ffffffffffffffda RBX: 00007fdeee5b5fa0 RCX: 00007fdeee38ebe9 [ 1055.540946][T31494] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1055.540960][T31494] RBP: 00007fdeec5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.540974][T31494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.540987][T31494] R13: 00007fdeee5b6038 R14: 00007fdeee5b5fa0 R15: 00007ffe9da69288 [ 1055.541024][T31494] [ 1055.862425][T31496] netlink: 'syz.1.7323': attribute type 15 has an invalid length. [ 1056.081772][T31501] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1056.101035][T31501] bridge2: entered allmulticast mode [ 1056.198684][T31514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7328'. [ 1056.325790][T31517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7330'. [ 1056.334752][T31519] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7329'. [ 1056.345820][T31517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7330'. [ 1056.467161][T31522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7331'. [ 1056.998398][T31541] netlink: 'syz.4.7338': attribute type 3 has an invalid length. [ 1057.301112][T31559] netlink: 'syz.2.7342': attribute type 3 has an invalid length. [ 1057.803280][T31573] tipc: Enabling of bearer rejected, already enabled [ 1058.253261][T31594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7353'. [ 1058.854144][T31613] netlink: 'syz.3.7357': attribute type 2 has an invalid length. [ 1058.974558][T31606] netlink: 'syz.2.7355': attribute type 3 has an invalid length. [ 1059.216119][T31623] netlink: 'syz.4.7360': attribute type 2 has an invalid length. [ 1059.298903][T31630] __nla_validate_parse: 2 callbacks suppressed [ 1059.298925][T31630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7362'. [ 1059.444406][T31636] netlink: 'syz.0.7365': attribute type 29 has an invalid length. [ 1059.476574][T31636] netlink: 'syz.0.7365': attribute type 29 has an invalid length. [ 1059.499219][T31636] netlink: 488 bytes leftover after parsing attributes in process `syz.0.7365'. [ 1059.955418][T31640] netlink: 'syz.3.7367': attribute type 3 has an invalid length. [ 1060.324547][T31677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7375'. [ 1060.413966][T31683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1060.421560][T31683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1060.429709][T31683] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7378'. [ 1060.454066][T31674] lo speed is unknown, defaulting to 1000 [ 1060.480304][T31674] lo speed is unknown, defaulting to 1000 [ 1060.506322][T31678] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7374'. [ 1060.857494][T31699] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7384'. [ 1061.442145][T31721] netlink: 'syz.1.7391': attribute type 3 has an invalid length. [ 1061.593519][T31730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7396'. [ 1061.647510][T31729] pim6reg1: entered promiscuous mode [ 1061.664908][T31729] pim6reg1: entered allmulticast mode [ 1061.865592][T31732] lo speed is unknown, defaulting to 1000 [ 1061.896805][T31732] lo speed is unknown, defaulting to 1000 [ 1062.146737][T31745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1062.154387][T31745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1062.169035][T31745] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7401'. [ 1062.264099][T31749] tipc: Enabling of bearer rejected, already enabled [ 1062.283589][T31749] syzkaller0: entered promiscuous mode [ 1062.296295][T31749] syzkaller0: entered allmulticast mode [ 1062.377993][T31752] syzkaller0: MTU too low for tipc bearer [ 1062.421231][T31752] tipc: Disabling bearer [ 1062.944033][T31756] tipc: Resetting bearer [ 1062.952413][T31762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7405'. [ 1063.096324][T31758] netlink: 'syz.1.7404': attribute type 2 has an invalid length. [ 1063.134545][T31758] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.7404'. [ 1063.356406][T31767] lo speed is unknown, defaulting to 1000 [ 1063.372890][T31767] lo speed is unknown, defaulting to 1000 [ 1063.891610][T31785] lo speed is unknown, defaulting to 1000 [ 1063.949127][T31789] tap0: tun_chr_ioctl cmd 35111 [ 1063.992533][T31785] lo speed is unknown, defaulting to 1000 [ 1064.053950][T31791] netlink: 'syz.3.7414': attribute type 3 has an invalid length. [ 1064.325544][T31795] tipc: Enabled bearer , priority 0 [ 1064.341408][T31795] syzkaller0: entered promiscuous mode [ 1064.347070][T31795] syzkaller0: entered allmulticast mode [ 1064.372161][T31795] syzkaller0: MTU too low for tipc bearer [ 1064.378468][T31795] tipc: Disabling bearer [ 1064.710536][T31798] __nla_validate_parse: 2 callbacks suppressed [ 1064.710560][T31798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7416'. [ 1064.967692][T31809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7418'. [ 1065.076722][T31811] tap0: tun_chr_ioctl cmd 35111 [ 1065.277984][T31819] netlink: 'syz.4.7422': attribute type 2 has an invalid length. [ 1065.305053][T31819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7422'. [ 1065.524038][T31821] lo speed is unknown, defaulting to 1000 [ 1065.584326][T31821] lo speed is unknown, defaulting to 1000 [ 1065.807224][T31841] netlink: 'syz.4.7427': attribute type 3 has an invalid length. [ 1066.352775][T31852] tap0: tun_chr_ioctl cmd 35111 [ 1066.786980][T31869] netlink: 'syz.0.7438': attribute type 1 has an invalid length. [ 1067.224298][T31869] 8021q: adding VLAN 0 to HW filter on device bond48 [ 1067.230463][T31886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7439'. [ 1067.287977][T31872] bond48: (slave gretap1): making interface the new active one [ 1067.313980][T31872] bond48: (slave gretap1): Enslaving as an active interface with an up link [ 1067.358832][T31878] tipc: Enabled bearer , priority 0 [ 1067.496127][T31880] syzkaller0: entered promiscuous mode [ 1067.502951][T31880] syzkaller0: entered allmulticast mode [ 1067.518492][T31895] netlink: 'syz.2.7441': attribute type 3 has an invalid length. [ 1067.572553][T31873] tipc: Resetting bearer [ 1067.640978][T31873] tipc: Disabling bearer [ 1067.725726][T31900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7443'. [ 1067.885261][T31907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7445'. [ 1067.969072][T31910] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7447'. [ 1068.062969][T31915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7449'. [ 1068.083736][T31915] pim6reg1: entered promiscuous mode [ 1068.090593][T31915] pim6reg1: entered allmulticast mode [ 1068.160504][T31918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7448'. [ 1068.374893][T31924] tap0: tun_chr_ioctl cmd 35111 [ 1068.736588][T31940] netlink: 'syz.3.7457': attribute type 3 has an invalid length. [ 1068.812341][T31947] tipc: Enabling of bearer rejected, failed to enable media [ 1068.921049][T31953] netlink: 'syz.1.7460': attribute type 3 has an invalid length. [ 1069.604125][T31967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7465'. [ 1069.829850][T31975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7467'. [ 1069.907369][T31977] netlink: 'syz.2.7469': attribute type 3 has an invalid length. [ 1070.193025][T31988] netlink: 'syz.4.7471': attribute type 3 has an invalid length. [ 1070.391040][T31993] netlink: 'syz.3.7474': attribute type 3 has an invalid length. [ 1070.976963][T32002] netlink: 'syz.1.7478': attribute type 3 has an invalid length. [ 1071.244724][T32009] FAULT_INJECTION: forcing a failure. [ 1071.244724][T32009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.299591][T32009] CPU: 0 UID: 0 PID: 32009 Comm: syz.0.7482 Not tainted syzkaller #0 PREEMPT(full) [ 1071.299624][T32009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1071.299638][T32009] Call Trace: [ 1071.299649][T32009] [ 1071.299659][T32009] dump_stack_lvl+0x189/0x250 [ 1071.299692][T32009] ? __pfx____ratelimit+0x10/0x10 [ 1071.299723][T32009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1071.299750][T32009] ? __pfx__printk+0x10/0x10 [ 1071.299794][T32009] should_fail_ex+0x414/0x560 [ 1071.299829][T32009] _copy_to_user+0x31/0xb0 [ 1071.299857][T32009] simple_read_from_buffer+0xe1/0x170 [ 1071.299894][T32009] proc_fail_nth_read+0x1b3/0x220 [ 1071.299923][T32009] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.299952][T32009] ? rw_verify_area+0x2a6/0x4d0 [ 1071.299979][T32009] ? __lock_acquire+0xab9/0xd20 [ 1071.300008][T32009] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.300035][T32009] vfs_read+0x200/0xa30 [ 1071.300062][T32009] ? fdget_pos+0x247/0x320 [ 1071.300086][T32009] ? __pfx___mutex_lock+0x10/0x10 [ 1071.300118][T32009] ? __pfx_vfs_read+0x10/0x10 [ 1071.300147][T32009] ? __fget_files+0x2a/0x420 [ 1071.300184][T32009] ? __fget_files+0x3a0/0x420 [ 1071.300216][T32009] ? __fget_files+0x2a/0x420 [ 1071.300259][T32009] ksys_read+0x145/0x250 [ 1071.300290][T32009] ? __pfx_ksys_read+0x10/0x10 [ 1071.300316][T32009] ? rcu_is_watching+0x15/0xb0 [ 1071.300345][T32009] ? do_syscall_64+0xbe/0x3b0 [ 1071.300386][T32009] do_syscall_64+0xfa/0x3b0 [ 1071.300415][T32009] ? lockdep_hardirqs_on+0x9c/0x150 [ 1071.300450][T32009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.300472][T32009] ? clear_bhb_loop+0x60/0xb0 [ 1071.300499][T32009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.300520][T32009] RIP: 0033:0x7f880398d5fc [ 1071.300539][T32009] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1071.300558][T32009] RSP: 002b:00007f88048a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1071.300580][T32009] RAX: ffffffffffffffda RBX: 00007f8803bb5fa0 RCX: 00007f880398d5fc [ 1071.300596][T32009] RDX: 000000000000000f RSI: 00007f88048a80a0 RDI: 0000000000000004 [ 1071.300610][T32009] RBP: 00007f88048a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.300624][T32009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.300637][T32009] R13: 00007f8803bb6038 R14: 00007f8803bb5fa0 R15: 00007ffe4a811b98 [ 1071.300673][T32009] [ 1071.827427][T32019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7485'. [ 1071.857168][T32019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7485'. [ 1072.544733][T32058] netlink: 'syz.0.7492': attribute type 3 has an invalid length. [ 1072.704401][T32056] lo speed is unknown, defaulting to 1000 [ 1072.745281][T32056] lo speed is unknown, defaulting to 1000 [ 1073.102318][T32078] netlink: 'syz.2.7500': attribute type 11 has an invalid length. [ 1073.568604][T32090] netlink: 'syz.3.7505': attribute type 2 has an invalid length. [ 1073.588513][T32090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7505'. [ 1073.864093][T32096] IPVS: Scheduler module ip_vs_sip not found [ 1074.272987][T32122] FAULT_INJECTION: forcing a failure. [ 1074.272987][T32122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1074.342857][T32122] CPU: 0 UID: 0 PID: 32122 Comm: syz.3.7516 Not tainted syzkaller #0 PREEMPT(full) [ 1074.342889][T32122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1074.342903][T32122] Call Trace: [ 1074.342913][T32122] [ 1074.342923][T32122] dump_stack_lvl+0x189/0x250 [ 1074.342960][T32122] ? __pfx____ratelimit+0x10/0x10 [ 1074.342992][T32122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1074.343018][T32122] ? __pfx__printk+0x10/0x10 [ 1074.343051][T32122] ? fs_reclaim_acquire+0x7d/0x100 [ 1074.343095][T32122] should_fail_ex+0x414/0x560 [ 1074.343129][T32122] prepare_alloc_pages+0x213/0x610 [ 1074.343161][T32122] __alloc_frozen_pages_noprof+0x123/0x370 [ 1074.343190][T32122] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1074.343234][T32122] alloc_pages_bulk_noprof+0x560/0x710 [ 1074.343265][T32122] ? alloc_pages_noprof+0xbe/0x190 [ 1074.343303][T32122] kasan_populate_vmalloc+0xba/0x1a0 [ 1074.343336][T32122] alloc_vmap_area+0xd51/0x1490 [ 1074.343385][T32122] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1074.343414][T32122] ? __kasan_kmalloc+0x93/0xb0 [ 1074.343445][T32122] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 1074.343475][T32122] ? __get_vm_area_node+0x13f/0x300 [ 1074.343506][T32122] ? arena_map_alloc+0x256/0x520 [ 1074.343537][T32122] __get_vm_area_node+0x1f8/0x300 [ 1074.343576][T32122] get_vm_area+0x80/0xb0 [ 1074.343605][T32122] ? arena_map_alloc+0x256/0x520 [ 1074.343636][T32122] arena_map_alloc+0x256/0x520 [ 1074.343674][T32122] map_create+0xaa0/0x14d0 [ 1074.343709][T32122] ? security_bpf+0x7e/0x300 [ 1074.343743][T32122] __sys_bpf+0x60f/0x870 [ 1074.343774][T32122] ? __pfx___sys_bpf+0x10/0x10 [ 1074.343819][T32122] ? ksys_write+0x22a/0x250 [ 1074.343851][T32122] ? __pfx_ksys_write+0x10/0x10 [ 1074.343882][T32122] ? rcu_is_watching+0x15/0xb0 [ 1074.343913][T32122] __x64_sys_bpf+0x7c/0x90 [ 1074.343942][T32122] do_syscall_64+0xfa/0x3b0 [ 1074.343978][T32122] ? lockdep_hardirqs_on+0x9c/0x150 [ 1074.344008][T32122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.344031][T32122] ? clear_bhb_loop+0x60/0xb0 [ 1074.344058][T32122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.344079][T32122] RIP: 0033:0x7fa25138ebe9 [ 1074.344099][T32122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1074.344118][T32122] RSP: 002b:00007fa252280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1074.344141][T32122] RAX: ffffffffffffffda RBX: 00007fa2515b5fa0 RCX: 00007fa25138ebe9 [ 1074.344157][T32122] RDX: 0000000000000050 RSI: 0000200000003940 RDI: 0000000000000000 [ 1074.344171][T32122] RBP: 00007fa252280090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.344185][T32122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1074.344198][T32122] R13: 00007fa2515b6038 R14: 00007fa2515b5fa0 R15: 00007fff6d97b188 [ 1074.344234][T32122] [ 1074.641618][T32118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7514'. [ 1074.742987][T32128] syzkaller0: entered promiscuous mode [ 1074.748615][T32128] syzkaller0: entered allmulticast mode [ 1074.927045][T32134] netlink: 'syz.1.7521': attribute type 2 has an invalid length. [ 1074.939140][T32134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7521'. [ 1075.482050][T32176] netlink: 'syz.0.7528': attribute type 21 has an invalid length. [ 1075.496261][T32176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7528'. [ 1075.775351][T32173] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7528'. [ 1076.098394][T32188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7533'. [ 1076.285126][T32198] netlink: 'syz.2.7535': attribute type 3 has an invalid length. [ 1076.462756][T32206] netlink: 'syz.0.7538': attribute type 3 has an invalid length. [ 1076.848561][T32215] netlink: 'syz.1.7543': attribute type 3 has an invalid length. [ 1077.279945][T32221] FAULT_INJECTION: forcing a failure. [ 1077.279945][T32221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.318167][T32221] CPU: 1 UID: 0 PID: 32221 Comm: syz.3.7547 Not tainted syzkaller #0 PREEMPT(full) [ 1077.318199][T32221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1077.318215][T32221] Call Trace: [ 1077.318224][T32221] [ 1077.318234][T32221] dump_stack_lvl+0x189/0x250 [ 1077.318267][T32221] ? __pfx____ratelimit+0x10/0x10 [ 1077.318299][T32221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1077.318327][T32221] ? __pfx__printk+0x10/0x10 [ 1077.318372][T32221] should_fail_ex+0x414/0x560 [ 1077.318407][T32221] _copy_to_user+0x31/0xb0 [ 1077.318436][T32221] simple_read_from_buffer+0xe1/0x170 [ 1077.318474][T32221] proc_fail_nth_read+0x1b3/0x220 [ 1077.318503][T32221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1077.318532][T32221] ? rw_verify_area+0x2a6/0x4d0 [ 1077.318559][T32221] ? __lock_acquire+0xab9/0xd20 [ 1077.318590][T32221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1077.318616][T32221] vfs_read+0x200/0xa30 [ 1077.318643][T32221] ? fdget_pos+0x247/0x320 [ 1077.318668][T32221] ? __pfx___mutex_lock+0x10/0x10 [ 1077.318700][T32221] ? __pfx_vfs_read+0x10/0x10 [ 1077.318732][T32221] ? __fget_files+0x2a/0x420 [ 1077.318770][T32221] ? __fget_files+0x3a0/0x420 [ 1077.318802][T32221] ? __fget_files+0x2a/0x420 [ 1077.318846][T32221] ksys_read+0x145/0x250 [ 1077.318877][T32221] ? __pfx_ksys_read+0x10/0x10 [ 1077.318902][T32221] ? rcu_is_watching+0x15/0xb0 [ 1077.318931][T32221] ? do_syscall_64+0xbe/0x3b0 [ 1077.318973][T32221] do_syscall_64+0xfa/0x3b0 [ 1077.319003][T32221] ? lockdep_hardirqs_on+0x9c/0x150 [ 1077.319033][T32221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.319056][T32221] ? clear_bhb_loop+0x60/0xb0 [ 1077.319083][T32221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.319104][T32221] RIP: 0033:0x7fa25138d5fc [ 1077.319124][T32221] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1077.319143][T32221] RSP: 002b:00007fa252280030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1077.319167][T32221] RAX: ffffffffffffffda RBX: 00007fa2515b5fa0 RCX: 00007fa25138d5fc [ 1077.319195][T32221] RDX: 000000000000000f RSI: 00007fa2522800a0 RDI: 0000000000000003 [ 1077.319208][T32221] RBP: 00007fa252280090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.319221][T32221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1077.319234][T32221] R13: 00007fa2515b6038 R14: 00007fa2515b5fa0 R15: 00007fff6d97b188 [ 1077.319268][T32221] [ 1077.709042][T32226] netlink: 'syz.3.7551': attribute type 26 has an invalid length. [ 1077.877585][T32228] netlink: 'syz.0.7548': attribute type 39 has an invalid length. [ 1078.039488][T32245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7553'. [ 1078.055189][T32246] netlink: 'syz.2.7555': attribute type 3 has an invalid length. [ 1078.140996][T32249] lo speed is unknown, defaulting to 1000 [ 1078.154363][T32249] lo speed is unknown, defaulting to 1000 [ 1078.841380][T32261] tipc: Enabling of bearer rejected, already enabled [ 1079.115381][T32277] netlink: 'syz.3.7561': attribute type 3 has an invalid length. [ 1079.179485][T32279] netlink: 'syz.0.7562': attribute type 3 has an invalid length. [ 1079.415072][T32283] netlink: 'syz.4.7566': attribute type 1 has an invalid length. [ 1079.527093][T32283] 8021q: adding VLAN 0 to HW filter on device bond50 [ 1079.746887][T32287] 8021q: adding VLAN 0 to HW filter on device bond50 [ 1079.785256][T32287] bond50: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1079.862280][T32287] bond50: (slave vxcan1): Error -95 calling set_mac_address [ 1079.933527][T32289] netlink: 'syz.1.7567': attribute type 3 has an invalid length. [ 1079.989196][T32283] bond50: (slave bridge9): Enslaving as an active interface with a down link [ 1080.440465][T32305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7571'. [ 1080.512556][T32307] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7574'. [ 1080.523513][T32307] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7574'. [ 1080.536810][T32307] netlink: 'syz.4.7574': attribute type 5 has an invalid length. [ 1080.553336][T32307] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7574'. [ 1080.613333][T32310] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7575'. [ 1080.653172][T32310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7575'. [ 1080.696393][T32310] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7575'. [ 1080.725714][T32315] tipc: Enabled bearer , priority 0 [ 1080.739132][T32315] syzkaller0: entered promiscuous mode [ 1080.748416][T32315] syzkaller0: entered allmulticast mode [ 1080.764102][T32314] tipc: Resetting bearer [ 1080.776728][T32310] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7575'. [ 1080.832352][T32314] tipc: Disabling bearer [ 1080.862084][T32318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7573'. [ 1081.055961][T32323] 8021q: adding VLAN 0 to HW filter on device bond51 [ 1081.064288][T32323] bridge0: port 2(bond51) entered blocking state [ 1081.071397][T32323] bridge0: port 2(bond51) entered disabled state [ 1081.080852][T32323] bond51: entered allmulticast mode [ 1081.091784][T32323] bond51: entered promiscuous mode [ 1081.125199][T32323] netlink: 'syz.4.7578': attribute type 10 has an invalid length. [ 1081.133537][T32323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7578'. [ 1081.138257][T32334] tipc: Enabling of bearer rejected, failed to enable media [ 1081.200748][T32338] FAULT_INJECTION: forcing a failure. [ 1081.200748][T32338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.209569][T32323] team0: Port device geneve0 added [ 1081.214206][T32338] CPU: 1 UID: 0 PID: 32338 Comm: syz.2.7582 Not tainted syzkaller #0 PREEMPT(full) [ 1081.214240][T32338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1081.214257][T32338] Call Trace: [ 1081.214268][T32338] [ 1081.214281][T32338] dump_stack_lvl+0x189/0x250 [ 1081.214319][T32338] ? __pfx____ratelimit+0x10/0x10 [ 1081.214355][T32338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1081.214385][T32338] ? __pfx__printk+0x10/0x10 [ 1081.214438][T32338] should_fail_ex+0x414/0x560 [ 1081.214489][T32338] _copy_to_user+0x31/0xb0 [ 1081.214521][T32338] xsk_getsockopt+0x5e6/0x870 [ 1081.214562][T32338] ? __pfx_xsk_getsockopt+0x10/0x10 [ 1081.214593][T32338] ? do_user_addr_fault+0xc8a/0x1390 [ 1081.214657][T32338] ? irqentry_exit+0x74/0x90 [ 1081.214691][T32338] ? lockdep_hardirqs_on+0x9c/0x150 [ 1081.214725][T32338] ? irqentry_exit+0x74/0x90 [ 1081.214756][T32338] ? exc_page_fault+0x9f/0xf0 [ 1081.214809][T32338] ? rep_movs_alternative+0xf/0x90 [ 1081.214836][T32338] ? __pfx_xsk_getsockopt+0x10/0x10 [ 1081.214869][T32338] do_sock_getsockopt+0x372/0x450 [ 1081.214898][T32338] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1081.214922][T32338] ? write_ibpb+0x30/0x40 [ 1081.214959][T32338] ? ksys_write+0x1e1/0x250 [ 1081.215001][T32338] __x64_sys_getsockopt+0x1a5/0x250 [ 1081.215025][T32338] ? write_ibpb+0x30/0x40 [ 1081.215061][T32338] ? write_ibpb+0x30/0x40 [ 1081.215117][T32338] do_syscall_64+0xfa/0x3b0 [ 1081.215152][T32338] ? lockdep_hardirqs_on+0x9c/0x150 [ 1081.215191][T32338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.215217][T32338] ? clear_bhb_loop+0x60/0xb0 [ 1081.215249][T32338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.215273][T32338] RIP: 0033:0x7fdeee38ebe9 [ 1081.215296][T32338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.215319][T32338] RSP: 002b:00007fdeec5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1081.215347][T32338] RAX: ffffffffffffffda RBX: 00007fdeee5b5fa0 RCX: 00007fdeee38ebe9 [ 1081.215366][T32338] RDX: 0000000000000008 RSI: 000000000000011b RDI: 0000000000000004 [ 1081.215382][T32338] RBP: 00007fdeec5f6090 R08: 0000200000000000 R09: 0000000000000000 [ 1081.215400][T32338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.215416][T32338] R13: 00007fdeee5b6038 R14: 00007fdeee5b5fa0 R15: 00007ffe9da69288 [ 1081.215466][T32338] [ 1081.460567][T10428] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.476192][T32340] netlink: 'syz.1.7583': attribute type 3 has an invalid length. [ 1081.577347][T10428] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.592894][T10428] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.603481][T32347] FAULT_INJECTION: forcing a failure. [ 1081.603481][T32347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1081.620022][T10428] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.658256][T32347] CPU: 1 UID: 0 PID: 32347 Comm: syz.4.7585 Not tainted syzkaller #0 PREEMPT(full) [ 1081.658287][T32347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1081.658302][T32347] Call Trace: [ 1081.658311][T32347] [ 1081.658321][T32347] dump_stack_lvl+0x189/0x250 [ 1081.658364][T32347] ? __pfx____ratelimit+0x10/0x10 [ 1081.658395][T32347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1081.658422][T32347] ? __pfx__printk+0x10/0x10 [ 1081.658456][T32347] ? fs_reclaim_acquire+0x7d/0x100 [ 1081.658501][T32347] should_fail_ex+0x414/0x560 [ 1081.658536][T32347] prepare_alloc_pages+0x213/0x610 [ 1081.658568][T32347] __alloc_frozen_pages_noprof+0x123/0x370 [ 1081.658596][T32347] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1081.658644][T32347] alloc_pages_bulk_noprof+0x560/0x710 [ 1081.658675][T32347] ? alloc_pages_noprof+0xbe/0x190 [ 1081.658713][T32347] kasan_populate_vmalloc+0xba/0x1a0 [ 1081.658748][T32347] alloc_vmap_area+0xd51/0x1490 [ 1081.658797][T32347] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1081.658827][T32347] ? __kasan_kmalloc+0x93/0xb0 [ 1081.658858][T32347] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 1081.658889][T32347] ? __get_vm_area_node+0x13f/0x300 [ 1081.658919][T32347] ? arena_map_alloc+0x256/0x520 [ 1081.658950][T32347] __get_vm_area_node+0x1f8/0x300 [ 1081.658989][T32347] get_vm_area+0x80/0xb0 [ 1081.659018][T32347] ? arena_map_alloc+0x256/0x520 [ 1081.659049][T32347] arena_map_alloc+0x256/0x520 [ 1081.659088][T32347] map_create+0xaa0/0x14d0 [ 1081.659123][T32347] ? security_bpf+0x7e/0x300 [ 1081.659156][T32347] __sys_bpf+0x60f/0x870 [ 1081.659188][T32347] ? __pfx___sys_bpf+0x10/0x10 [ 1081.659233][T32347] ? ksys_write+0x22a/0x250 [ 1081.659266][T32347] ? __pfx_ksys_write+0x10/0x10 [ 1081.659303][T32347] __x64_sys_bpf+0x7c/0x90 [ 1081.659330][T32347] do_syscall_64+0xfa/0x3b0 [ 1081.659370][T32347] ? lockdep_hardirqs_on+0x9c/0x150 [ 1081.659400][T32347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.659422][T32347] ? clear_bhb_loop+0x60/0xb0 [ 1081.659450][T32347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.659470][T32347] RIP: 0033:0x7fde9cf8ebe9 [ 1081.659490][T32347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.659510][T32347] RSP: 002b:00007fde9de4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1081.659533][T32347] RAX: ffffffffffffffda RBX: 00007fde9d1b5fa0 RCX: 00007fde9cf8ebe9 [ 1081.659549][T32347] RDX: 0000000000000050 RSI: 0000200000003940 RDI: 0000000000000000 [ 1081.659563][T32347] RBP: 00007fde9de4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.659576][T32347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.659589][T32347] R13: 00007fde9d1b6038 R14: 00007fde9d1b5fa0 R15: 00007fff213b7f98 [ 1081.659625][T32347] [ 1082.141308][T32360] tipc: Enabled bearer , priority 0 [ 1082.155393][T32360] syzkaller0: entered promiscuous mode [ 1082.162499][T32360] syzkaller0: entered allmulticast mode [ 1082.187907][T32359] tipc: Resetting bearer [ 1082.234440][T32359] tipc: Disabling bearer [ 1082.424203][T32376] FAULT_INJECTION: forcing a failure. [ 1082.424203][T32376] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.450755][T32374] lo speed is unknown, defaulting to 1000 [ 1082.459239][T32374] lo speed is unknown, defaulting to 1000 [ 1082.465605][T32376] CPU: 1 UID: 0 PID: 32376 Comm: syz.3.7595 Not tainted syzkaller #0 PREEMPT(full) [ 1082.465637][T32376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1082.465652][T32376] Call Trace: [ 1082.465661][T32376] [ 1082.465671][T32376] dump_stack_lvl+0x189/0x250 [ 1082.465706][T32376] ? __pfx____ratelimit+0x10/0x10 [ 1082.465737][T32376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1082.465765][T32376] ? __pfx__printk+0x10/0x10 [ 1082.465815][T32376] should_fail_ex+0x414/0x560 [ 1082.465850][T32376] should_failslab+0xa8/0x100 [ 1082.465885][T32376] __kmalloc_cache_noprof+0x70/0x3d0 [ 1082.465915][T32376] ? sctp_add_bind_addr+0x8c/0x370 [ 1082.465950][T32376] sctp_add_bind_addr+0x8c/0x370 [ 1082.465984][T32376] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1082.466017][T32376] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1082.466047][T32376] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1082.466082][T32376] ? sctp_v4_is_any+0x35/0x60 [ 1082.466111][T32376] ? sctp_copy_one_addr+0x93/0x360 [ 1082.466145][T32376] sctp_bind_addr_copy+0x189/0x3c0 [ 1082.466184][T32376] sctp_connect_new_asoc+0x2e0/0x690 [ 1082.466210][T32376] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1082.466229][T32376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1082.466261][T32376] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1082.466289][T32376] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1082.466328][T32376] sctp_sendmsg+0x155c/0x2810 [ 1082.466376][T32376] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1082.466415][T32376] ? aa_sk_perm+0x81e/0x950 [ 1082.466455][T32376] ? __pfx_aa_sk_perm+0x10/0x10 [ 1082.466491][T32376] ? sock_rps_record_flow+0x19/0x410 [ 1082.466523][T32376] ? inet_sendmsg+0x2f4/0x370 [ 1082.466555][T32376] __sock_sendmsg+0x19c/0x270 [ 1082.466589][T32376] ____sys_sendmsg+0x52d/0x830 [ 1082.466620][T32376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1082.466656][T32376] ? import_iovec+0x74/0xa0 [ 1082.466686][T32376] ___sys_sendmsg+0x21f/0x2a0 [ 1082.466714][T32376] ? __pfx____sys_sendmsg+0x10/0x10 [ 1082.466783][T32376] ? __fget_files+0x2a/0x420 [ 1082.466817][T32376] ? __fget_files+0x3a0/0x420 [ 1082.466858][T32376] __sys_sendmmsg+0x227/0x430 [ 1082.466888][T32376] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1082.466910][T32376] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1082.466976][T32376] ? ksys_write+0x22a/0x250 [ 1082.467008][T32376] ? __pfx_ksys_write+0x10/0x10 [ 1082.467035][T32376] ? rcu_is_watching+0x15/0xb0 [ 1082.467066][T32376] __x64_sys_sendmmsg+0xa0/0xc0 [ 1082.467092][T32376] do_syscall_64+0xfa/0x3b0 [ 1082.467124][T32376] ? lockdep_hardirqs_on+0x9c/0x150 [ 1082.467154][T32376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.467177][T32376] ? clear_bhb_loop+0x60/0xb0 [ 1082.467205][T32376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.467228][T32376] RIP: 0033:0x7fa25138ebe9 [ 1082.467254][T32376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.467274][T32376] RSP: 002b:00007fa252280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1082.467298][T32376] RAX: ffffffffffffffda RBX: 00007fa2515b5fa0 RCX: 00007fa25138ebe9 [ 1082.467334][T32376] RDX: 0000000000000001 RSI: 0000200000007840 RDI: 0000000000000003 [ 1082.467348][T32376] RBP: 00007fa252280090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.467361][T32376] R10: 0000000000004081 R11: 0000000000000246 R12: 0000000000000002 [ 1082.467375][T32376] R13: 00007fa2515b6038 R14: 00007fa2515b5fa0 R15: 00007fff6d97b188 [ 1082.467412][T32376] [ 1083.059974][T32384] validate_nla: 1 callbacks suppressed [ 1083.059997][T32384] netlink: 'syz.2.7597': attribute type 9 has an invalid length. [ 1084.591407][T32440] netlink: 'syz.2.7620': attribute type 3 has an invalid length. [ 1084.787282][T32447] netlink: 'syz.4.7623': attribute type 3 has an invalid length. [ 1084.844533][T32447] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.916435][T32450] netlink: 'syz.0.7624': attribute type 3 has an invalid length. [ 1084.953186][T32447] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.036658][T32450] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.161786][T32447] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.301150][T32450] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.485668][T32447] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.573299][T32450] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.592538][T32460] __nla_validate_parse: 6 callbacks suppressed [ 1085.592560][T32460] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7626'. [ 1085.786102][T32450] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.966954][T32466] netlink: 'syz.1.7628': attribute type 3 has an invalid length. [ 1085.995882][T32043] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.017336][T32043] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.199589][T32470] openvswitch: netlink: Missing valid actions attribute. [ 1086.206902][T32470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1086.259629][T32043] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.267875][T32043] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.313969][T32043] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.393614][T10439] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.489492][T10439] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.565009][T32038] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.607752][T32484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7637'. [ 1087.000643][T32504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7644'. [ 1087.096006][T32511] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1087.109873][T32510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7647'. [ 1087.128899][T32510] netlink: 'syz.4.7647': attribute type 7 has an invalid length. [ 1087.136781][T32510] netlink: 'syz.4.7647': attribute type 8 has an invalid length. [ 1087.150032][T32510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7647'. [ 1087.397648][T32510] erspan0: entered promiscuous mode [ 1087.407364][T32510] batadv_slave_1: entered promiscuous mode [ 1087.426434][T32510] debugfs: 'hsr1' already exists in 'hsr' [ 1087.433153][T32510] Cannot create hsr debugfs directory [ 1087.440212][T32510] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1087.450647][T32510] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 1087.463420][T32515] netlink: 'syz.0.7648': attribute type 3 has an invalid length. [ 1087.572123][T32522] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7653'. [ 1087.719938][T32530] FAULT_INJECTION: forcing a failure. [ 1087.719938][T32530] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.748248][T32530] CPU: 1 UID: 0 PID: 32530 Comm: syz.3.7654 Not tainted syzkaller #0 PREEMPT(full) [ 1087.748281][T32530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1087.748296][T32530] Call Trace: [ 1087.748306][T32530] [ 1087.748316][T32530] dump_stack_lvl+0x189/0x250 [ 1087.748350][T32530] ? __pfx____ratelimit+0x10/0x10 [ 1087.748381][T32530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1087.748409][T32530] ? __pfx__printk+0x10/0x10 [ 1087.748448][T32530] ? __pfx___might_resched+0x10/0x10 [ 1087.748470][T32530] ? fs_reclaim_acquire+0x7d/0x100 [ 1087.748510][T32530] should_fail_ex+0x414/0x560 [ 1087.748546][T32530] should_failslab+0xa8/0x100 [ 1087.748580][T32530] __kmalloc_noprof+0xcb/0x4f0 [ 1087.748609][T32530] ? tomoyo_encode+0x28b/0x550 [ 1087.748636][T32530] tomoyo_encode+0x28b/0x550 [ 1087.748665][T32530] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1087.748690][T32530] ? tomoyo_domain+0xd9/0x130 [ 1087.748719][T32530] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1087.748751][T32530] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1087.748786][T32530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1087.748838][T32530] ? __lock_acquire+0xab9/0xd20 [ 1087.748893][T32530] ? __fget_files+0x2a/0x420 [ 1087.748931][T32530] ? __fget_files+0x2a/0x420 [ 1087.748963][T32530] ? __fget_files+0x3a0/0x420 [ 1087.748994][T32530] ? __fget_files+0x2a/0x420 [ 1087.749033][T32530] security_file_ioctl+0xcb/0x2d0 [ 1087.749066][T32530] __se_sys_ioctl+0x47/0x170 [ 1087.749096][T32530] do_syscall_64+0xfa/0x3b0 [ 1087.749136][T32530] ? lockdep_hardirqs_on+0x9c/0x150 [ 1087.749178][T32530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.749199][T32530] ? clear_bhb_loop+0x60/0xb0 [ 1087.749226][T32530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.749247][T32530] RIP: 0033:0x7fa25138ebe9 [ 1087.749267][T32530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.749287][T32530] RSP: 002b:00007fa252280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.749311][T32530] RAX: ffffffffffffffda RBX: 00007fa2515b5fa0 RCX: 00007fa25138ebe9 [ 1087.749327][T32530] RDX: 00002000000000c0 RSI: 00000000000089ea RDI: 0000000000000005 [ 1087.749341][T32530] RBP: 00007fa252280090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.749355][T32530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.749368][T32530] R13: 00007fa2515b6038 R14: 00007fa2515b5fa0 R15: 00007fff6d97b188 [ 1087.749404][T32530] [ 1087.749505][T32530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1087.852500][T32532] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7655'. [ 1088.036396][T32536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7657'. [ 1088.179441][T32534] lo speed is unknown, defaulting to 1000 [ 1088.189584][T32546] FAULT_INJECTION: forcing a failure. [ 1088.189584][T32546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.229952][T32534] lo speed is unknown, defaulting to 1000 [ 1088.240368][T32546] CPU: 0 UID: 0 PID: 32546 Comm: syz.4.7660 Not tainted syzkaller #0 PREEMPT(full) [ 1088.240398][T32546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1088.240412][T32546] Call Trace: [ 1088.240421][T32546] [ 1088.240430][T32546] dump_stack_lvl+0x189/0x250 [ 1088.240462][T32546] ? __pfx____ratelimit+0x10/0x10 [ 1088.240491][T32546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.240517][T32546] ? __pfx__printk+0x10/0x10 [ 1088.240560][T32546] should_fail_ex+0x414/0x560 [ 1088.240594][T32546] _copy_to_user+0x31/0xb0 [ 1088.240620][T32546] simple_read_from_buffer+0xe1/0x170 [ 1088.240656][T32546] proc_fail_nth_read+0x1b3/0x220 [ 1088.240685][T32546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1088.240711][T32546] ? rw_verify_area+0x2a6/0x4d0 [ 1088.240738][T32546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1088.240762][T32546] vfs_read+0x200/0xa30 [ 1088.240798][T32546] ? __pfx_vfs_read+0x10/0x10 [ 1088.240828][T32546] ? rep_movs_alternative+0xf/0x90 [ 1088.240852][T32546] ? __pfx_xsk_getsockopt+0x10/0x10 [ 1088.240880][T32546] ? do_sock_getsockopt+0x372/0x450 [ 1088.240913][T32546] ksys_read+0x145/0x250 [ 1088.240943][T32546] ? __pfx_ksys_read+0x10/0x10 [ 1088.240977][T32546] ? do_syscall_64+0xbe/0x3b0 [ 1088.241012][T32546] do_syscall_64+0xfa/0x3b0 [ 1088.241042][T32546] ? lockdep_hardirqs_on+0x9c/0x150 [ 1088.241079][T32546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.241100][T32546] ? clear_bhb_loop+0x60/0xb0 [ 1088.241127][T32546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.241147][T32546] RIP: 0033:0x7fde9cf8d5fc [ 1088.241167][T32546] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1088.241187][T32546] RSP: 002b:00007fde9de4e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1088.241210][T32546] RAX: ffffffffffffffda RBX: 00007fde9d1b5fa0 RCX: 00007fde9cf8d5fc [ 1088.241226][T32546] RDX: 000000000000000f RSI: 00007fde9de4e0a0 RDI: 0000000000000005 [ 1088.241239][T32546] RBP: 00007fde9de4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.241253][T32546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.241266][T32546] R13: 00007fde9d1b6038 R14: 00007fde9d1b5fa0 R15: 00007fff213b7f98 [ 1088.241300][T32546] [ 1089.103607][T32576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7667'. [ 1089.142631][T32038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.156757][T32038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.549920][T32579] tap0: tun_chr_ioctl cmd 1074025677 [ 1089.558419][T32579] tap0: linktype set to 270 [ 1090.297001][T32606] netlink: 'syz.1.7677': attribute type 2 has an invalid length. [ 1090.312943][T32606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7677'. [ 1090.328377][T32607] netlink: 'syz.0.7676': attribute type 3 has an invalid length. [ 1090.387682][T32607] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.512397][T32607] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.755382][T32607] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.793200][T32625] netlink: 'syz.1.7681': attribute type 3 has an invalid length. [ 1090.846819][T32626] bond44: entered promiscuous mode [ 1090.857696][T32626] bond44: entered allmulticast mode [ 1090.863832][T32626] 8021q: adding VLAN 0 to HW filter on device bond44 [ 1091.175132][T32607] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.552115][ T6092] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.672880][ T6092] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.717218][T32043] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.793305][ T9] ------------[ cut here ]------------ [ 1091.800205][ T9] WARNING: CPU: 0 PID: 9 at net/mac80211/iface.c:510 ieee80211_do_stop+0x1a36/0x1fb0 [ 1091.809823][ T9] Modules linked in: [ 1091.814120][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 1091.824546][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1091.834755][ T9] Workqueue: events cfg80211_rfkill_block_work [ 1091.841040][ T9] RIP: 0010:ieee80211_do_stop+0x1a36/0x1fb0 [ 1091.847195][ T9] Code: 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 27 05 00 00 41 ff 0c 24 e9 49 f5 ff ff e8 55 a1 d0 f6 e9 3f f5 ff ff e8 4b a1 d0 f6 90 <0f> 0b 90 e9 a3 e9 ff ff e8 3d a1 d0 f6 90 43 0f b6 04 2f 84 c0 0f [ 1091.867112][ T9] RSP: 0018:ffffc900000e7520 EFLAGS: 00010293 [ 1091.873257][ T9] RAX: ffffffff8aef0ae5 RBX: 0000000000000001 RCX: ffff88801ce90000 [ 1091.881344][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1091.889491][ T9] RBP: ffffc900000e7730 R08: 0000000000000000 R09: ffffffff8ae88b42 [ 1091.897524][ T9] R10: 0000096c00000000 R11: ffff88807acfb338 R12: ffffc900000e7690 [ 1091.905593][ T9] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888053b6a9d0 [ 1091.913658][ T9] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1091.922701][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1091.929363][ T9] CR2: 00007f4e87977e9c CR3: 0000000075150000 CR4: 00000000003526f0 [ 1091.937413][ T9] Call Trace: [ 1091.940802][ T9] [ 1091.943765][ T9] ? __lock_acquire+0xab9/0xd20 [ 1091.948905][ T9] ? irqentry_exit+0x74/0x90 [ 1091.953553][ T9] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1091.959122][ T9] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1091.965081][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1091.971547][ T9] ? wiphy_work_cancel+0x1eb/0x3c0 [ 1091.976719][ T9] ieee80211_stop+0x1b1/0x240 [ 1091.981579][ T9] ? __pfx_ieee80211_stop+0x10/0x10 [ 1091.986840][ T9] __dev_close_many+0x364/0x6f0 [ 1091.991821][ T9] ? __pfx___dev_close_many+0x10/0x10 [ 1091.997241][ T9] ? __mutex_trylock_common+0x153/0x260 [ 1092.003093][ T9] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1092.009159][ T9] netif_close_many+0x225/0x410 [ 1092.014081][ T9] ? __pfx_netif_close_many+0x10/0x10 [ 1092.019556][ T9] ? do_raw_spin_lock+0x121/0x290 [ 1092.024623][ T9] ? look_up_lock_class+0x74/0x170 [ 1092.029821][ T9] ? register_lock_class+0x51/0x320 [ 1092.035156][ T9] netif_close+0x158/0x210 [ 1092.039732][ T9] ? __pfx_netif_close+0x10/0x10 [ 1092.044718][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 1092.050053][ T9] dev_close+0x10a/0x220 [ 1092.051256][T32650] netlink: 700 bytes leftover after parsing attributes in process `syz.2.7688'. [ 1092.054345][ T9] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 1092.069650][ T9] cfg80211_rfkill_block_work+0x21/0x30 [ 1092.070844][T32650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7688'. [ 1092.075240][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 1092.075272][ T9] process_scheduled_works+0xae1/0x17b0 [ 1092.075332][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 1092.101633][ T9] worker_thread+0x8a0/0xda0 [ 1092.106298][ T9] kthread+0x711/0x8a0 [ 1092.110449][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1092.115596][ T9] ? __pfx_kthread+0x10/0x10 [ 1092.120287][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 1092.125529][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 1092.130889][ T9] ? __pfx_kthread+0x10/0x10 [ 1092.135526][ T9] ret_from_fork+0x3f9/0x770 [ 1092.140194][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1092.145349][ T9] ? __switch_to_asm+0x39/0x70 [ 1092.150384][ T9] ? __switch_to_asm+0x33/0x70 [ 1092.155190][ T9] ? __pfx_kthread+0x10/0x10 [ 1092.160123][ T9] ret_from_fork_asm+0x1a/0x30 [ 1092.164957][ T9] [ 1092.168063][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1092.175369][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 1092.184535][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1092.194625][ T9] Workqueue: events cfg80211_rfkill_block_work [ 1092.200851][ T9] Call Trace: [ 1092.204164][ T9] [ 1092.207128][ T9] dump_stack_lvl+0x99/0x250 [ 1092.211757][ T9] ? __asan_memcpy+0x40/0x70 [ 1092.216385][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1092.221711][ T9] ? __pfx__printk+0x10/0x10 [ 1092.226369][ T9] vpanic+0x281/0x750 [ 1092.230414][ T9] ? __pfx__printk+0x10/0x10 [ 1092.235050][ T9] ? __pfx_vpanic+0x10/0x10 [ 1092.239588][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 1092.244841][ T9] panic+0xb9/0xc0 [ 1092.248607][ T9] ? __pfx_panic+0x10/0x10 [ 1092.253063][ T9] __warn+0x31b/0x4b0 [ 1092.257061][ T9] ? ieee80211_do_stop+0x1a36/0x1fb0 [ 1092.262370][ T9] ? ieee80211_do_stop+0x1a36/0x1fb0 [ 1092.267686][ T9] report_bug+0x2be/0x4f0 [ 1092.272039][ T9] ? ieee80211_do_stop+0x1a36/0x1fb0 [ 1092.277434][ T9] ? ieee80211_do_stop+0x1a36/0x1fb0 [ 1092.282745][ T9] ? ieee80211_do_stop+0x1a38/0x1fb0 [ 1092.288086][ T9] handle_bug+0x84/0x160 [ 1092.292354][ T9] exc_invalid_op+0x1a/0x50 [ 1092.296869][ T9] asm_exc_invalid_op+0x1a/0x20 [ 1092.301851][ T9] RIP: 0010:ieee80211_do_stop+0x1a36/0x1fb0 [ 1092.307786][ T9] Code: 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 27 05 00 00 41 ff 0c 24 e9 49 f5 ff ff e8 55 a1 d0 f6 e9 3f f5 ff ff e8 4b a1 d0 f6 90 <0f> 0b 90 e9 a3 e9 ff ff e8 3d a1 d0 f6 90 43 0f b6 04 2f 84 c0 0f [ 1092.327432][ T9] RSP: 0018:ffffc900000e7520 EFLAGS: 00010293 [ 1092.333523][ T9] RAX: ffffffff8aef0ae5 RBX: 0000000000000001 RCX: ffff88801ce90000 [ 1092.341520][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1092.349506][ T9] RBP: ffffc900000e7730 R08: 0000000000000000 R09: ffffffff8ae88b42 [ 1092.357516][ T9] R10: 0000096c00000000 R11: ffff88807acfb338 R12: ffffc900000e7690 [ 1092.365504][ T9] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888053b6a9d0 [ 1092.373520][ T9] ? ieee80211_recalc_p2p_go_ps_allowed+0x72/0x3a0 [ 1092.380255][ T9] ? ieee80211_do_stop+0x1a35/0x1fb0 [ 1092.385577][ T9] ? __lock_acquire+0xab9/0xd20 [ 1092.390464][ T9] ? irqentry_exit+0x74/0x90 [ 1092.395080][ T9] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1092.400576][ T9] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1092.406493][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1092.412847][ T9] ? wiphy_work_cancel+0x1eb/0x3c0 [ 1092.417990][ T9] ieee80211_stop+0x1b1/0x240 [ 1092.422696][ T9] ? __pfx_ieee80211_stop+0x10/0x10 [ 1092.427915][ T9] __dev_close_many+0x364/0x6f0 [ 1092.432800][ T9] ? __pfx___dev_close_many+0x10/0x10 [ 1092.438190][ T9] ? __mutex_trylock_common+0x153/0x260 [ 1092.443851][ T9] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1092.449775][ T9] netif_close_many+0x225/0x410 [ 1092.454660][ T9] ? __pfx_netif_close_many+0x10/0x10 [ 1092.460051][ T9] ? do_raw_spin_lock+0x121/0x290 [ 1092.465093][ T9] ? look_up_lock_class+0x74/0x170 [ 1092.470236][ T9] ? register_lock_class+0x51/0x320 [ 1092.475459][ T9] netif_close+0x158/0x210 [ 1092.479897][ T9] ? __pfx_netif_close+0x10/0x10 [ 1092.484857][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 1092.489913][ T9] dev_close+0x10a/0x220 [ 1092.494180][ T9] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 1092.500361][ T9] cfg80211_rfkill_block_work+0x21/0x30 [ 1092.505929][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 1092.511662][ T9] process_scheduled_works+0xae1/0x17b0 [ 1092.517246][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 1092.523252][ T9] worker_thread+0x8a0/0xda0 [ 1092.527878][ T9] kthread+0x711/0x8a0 [ 1092.531968][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1092.537101][ T9] ? __pfx_kthread+0x10/0x10 [ 1092.541727][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 1092.546964][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 1092.552183][ T9] ? __pfx_kthread+0x10/0x10 [ 1092.556796][ T9] ret_from_fork+0x3f9/0x770 [ 1092.561402][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1092.566531][ T9] ? __switch_to_asm+0x39/0x70 [ 1092.571312][ T9] ? __switch_to_asm+0x33/0x70 [ 1092.576090][ T9] ? __pfx_kthread+0x10/0x10 [ 1092.580700][ T9] ret_from_fork_asm+0x1a/0x30 [ 1092.585509][ T9] [ 1092.588815][ T9] Kernel Offset: disabled [ 1092.593144][ T9] Rebooting in 86400 seconds..