last executing test programs: 2m24.307935162s ago: executing program 2 (id=3890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00'/20, @ANYRES32=0x0, @ANYBLOB="8b04040057cd00004400128008000100677470003800028008000100", @ANYRES32, @ANYBLOB="140008000000000000000000000000000000000005000600a100000008000200", @ANYRES32=r0, @ANYBLOB="0500050000000000"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x2000000000000377, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000bc0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xa, 0x4, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x9, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x38, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000280)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x1000}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r8, 0x111, 0x5, 0x20000000, 0x4) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="b9", 0x1}, {&(0x7f0000000440)="b54b86c587e16b9b00e30e65f52193969c9e79ed305235a9fa7f9cb94e24c4e8026332f6940d2c132aa55d2659cc11acfe3ae73a3c0da5e12e4f2df15b54d340a4bcb0088d9359899f416d753a9b662d20e08d0b69eb5200ea4fa4f85549da4134af5dc9ceeebbefc2a0be7cc246832a110c39a2c7893c4849b4af83442cb48756ea56df8a65db0e39c7133750d271ee9bc7a59a032bcd8926d85776b4e1c1cad15e377d1c3b9afc7c5cfb5cd309971cfb2588e454726531573e343af525b7b1b124918a4661be7c63b5cea81f63974097e9df0e435efdfb4eae5edf859e5db51df20011b8b955aab2ec6e4ff6c31c", 0xef}, {&(0x7f0000000040)="de7888c0e2f29a297068f66f9b705d14e9da4fbec5eb29530f9fd8e497fb9978e675e6f161faafa3610f578cbde0b42e3f43a56b965c27be", 0x38}, {&(0x7f00000001c0)="d8b01e6b83ba9ea3a754586fcfd61082f327e90e7cee8f6c91362511b8021ab960a2406b651f237495fac2a72076430bf41e43a134940d195116494e57364e4aaa1a5057c37da1ed974a540dd63d271a88764ef51386350c7feec577b501b569014dbf0e947d3c2bc4acee0125b95fa9a5919e30c1b6154d65d1e43ae7", 0x7d}, {&(0x7f0000000540)="bef7d61dda356da0b258dca237f891f16f59130d7e1a0fe46910aa8009e5cf5cb5892ea334bf18ec751592a71540dbe5323d9ea57dbc58fb70a3b28c261989b61e11769706f868facfc23b2e2b253b54950eb2082d84546a1396ed8d668003e902693d18b0444d4931e163fff0dcb831b8bd1f0cb4e4bc533256f1b681ac6edca414de", 0x83}, {&(0x7f0000000380)="dad642b2680e9d7cd864b11135dc74dd33e34d541684ceb88ce533dc797a53adcd1be94310cdb11fb2b10f50588bf22ba705e030faa6b5856c659e8bbae11a22c4", 0x41}, {&(0x7f0000000600)="11c8ea1084720e931cb489ba11ae1aaa74fa6afd97f32c347488dd4dc242b2601d15a4a65d093c42f27cbe9c0acf844e4b2f6e9af4fb10d2b17ebecc2000a066bb34dfe0e36d5dff2b867ba3035b5ba11b7c60b3bad8759a6b204620e29821b1595e308d2afc103cdf18f9134a7dc8844f5abb4c91ad5720d8654b17c084c8f9ca8be49dcd6b78e8e3d4ce8315a395cb3e982988f944ebb10ad89012d8c7d045ed2cc1a17529a0b31b61a93a8bae07ad4419cd99fb1cc9f95509ebc2271a512ea49f1461320c395931d0e26ffa932bec65557ded729b80963f6ebbec65f3c540ee3ff537aefc80a33a8d642dfc8be1d46d64dc51f796490ae9d0", 0xfa}, {&(0x7f0000000900)="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", 0x1000}], 0x8}}], 0x2, 0x0) 2m24.071652574s ago: executing program 2 (id=3892): r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010040, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x3862, 0xf8cc}}}}}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000380050800800030006ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48000) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r3 = socket$netlink(0x10, 0x3, 0xb) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x78, 0x0, 0x1, 0x70bd2c, 0xa5dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20041094) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) (async) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="21022abd7000f9ffffffffffffff0800030007000000eae7e050d9e5d6f9fa28370709bbf14235251cde7d7da78832925fcc6598455a75159676c1e6995d7a22ea8a106c77e23ea7d903d89bd9cc84e67029e2965a3e10c2aaa21b00d671"], 0xfffffffffffffd42}}, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000005800ca6c3bf05e4c030000007a17494f4d5b", @ANYRES16=r10, @ANYBLOB="000825bd7000fddbdf2503000000050005000300000004000400050006000300000004000400"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004081) 2m22.945069702s ago: executing program 2 (id=3902): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020600) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0xff, @empty, 0x4e23, 0x1, 'none\x00', 0x0, 0x2a07, 0x4}, 0x2c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x55) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2c, 0x6, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r7, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="28020000", @ANYRES16=r2, @ANYBLOB="000d2bbd7000fbdbdf254400000008010300", @ANYRES32=r9, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000240)={{0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 'lblcr\x00', 0x8, 0xff, 0x6c}, {@local, 0x4e24, 0x0, 0x7, 0x7fff, 0xf323}}, 0x5a) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) getsockopt$sock_buf(r10, 0x1, 0x22, &(0x7f00000000c0)=""/111, &(0x7f0000000140)=0x6f) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r12, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000068002105000000000000000002000000000000000800000000000000ac1e000100000000000000000000000064f5f6b57fa759485eb1ecd71ec9d7bce6db54077659190240399712cc44c7668df7b48080a9e8fef760323507b9955f8dbe8880c32874e82266facd32613151345b071c7150553261a72ba73662a4ee8ea5d30200c0733c873050ef"], 0x30}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r10) 2m22.475700469s ago: executing program 2 (id=3904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8ea45329", 0x4}], 0x1, 0x8001, 0x80) sendfile(r1, r0, 0x0, 0xf03a0005) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="000000994b000000b7080000000000007b8af8ff00000000bfa200000000000007020000e4ffffffb703000008000000b70c00000000000085000000030008009500000000000000baad263f52f2df0e6e557d9877cf80fa9e6b5cd3d5c25f3feba4e6ec1609f08c5a71ca5c2c4a23b5f86b8b23d1450bc6fedfdbcd61b406a0a319334601280d64d05140398c01a43b09968cd8e848ec8b47de6e7ccd989a7d9555"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@bridge_delvlan={0x30, 0x71, 0x600, 0x70bd26, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="6b880000b456090008002e0003000000"], 0x28}}, 0x0) 2m22.17165188s ago: executing program 2 (id=3906): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) 2m21.573398743s ago: executing program 2 (id=3909): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r1}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000009050000000000000000000b0000040c00048008000140000009820900010073797a31000000003c0002002c00018014000300ff02000000000000000000000000000114000400fe8000000004000000000000000000aa0c0002800500010088000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'sit0\x00'}) 2m21.134499884s ago: executing program 32 (id=3909): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r1}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000009050000000000000000000b0000040c00048008000140000009820900010073797a31000000003c0002002c00018014000300ff02000000000000000000000000000114000400fe8000000004000000000000000000aa0c0002800500010088000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'sit0\x00'}) 5.080142106s ago: executing program 3 (id=5067): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002880)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x2000000, 0x0, 0x55}, 0x4000) 3.136028722s ago: executing program 3 (id=5070): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x100, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x58, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xefaf}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) 2.993383788s ago: executing program 1 (id=5073): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x4000, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2.86391418s ago: executing program 4 (id=5075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) unshare(0x2c020400) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) pread64(r1, 0x0, 0x0, 0x9) 2.795830214s ago: executing program 1 (id=5076): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) r1 = epoll_create1(0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0xfffffffd, 0x0, 0x4000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x10000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1a0c, &(0x7f0000000080), 0x8) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000180)={@default, @default}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40808) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) 2.748854077s ago: executing program 4 (id=5077): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000001900)={'sit0\x00', 0x0, 0x40, 0x40, 0x5, 0x6, {{0x4b, 0x4, 0x2, 0x1f, 0x12c, 0x67, 0x0, 0xf, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @noop, @lsrr={0x83, 0x1f, 0x97, [@private=0xa010101, @multicast2, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102]}, @cipso={0x86, 0x5c, 0x3, [{0x2, 0x5, "6720ba"}, {0x2, 0xf, "c91a937b6d776f6c66fba449b2"}, {0x1, 0xe, "fd8f65a091950b89eb355f6f"}, {0x7, 0xf, "4d9cd81e2a581e878c072ec697"}, {0x7, 0x6, "f30575a5"}, {0x0, 0x7, "ddc5c6e80f"}, {0x3, 0x4, "1a5b"}, {0x0, 0x5, "567dc8"}, {0x1, 0x5, 'MOZ'}, {0x4, 0xa, "8d2f45333d72352c"}]}, @timestamp={0x44, 0x2c, 0x38, 0x0, 0xc, [0x8, 0xf, 0x7, 0x2345, 0x0, 0x8, 0x8, 0x7, 0x4, 0x8]}, @timestamp_addr={0x44, 0x44, 0x7d, 0x1, 0xf, [{@empty, 0xc9a}, {@rand_addr=0x64010101, 0x24000000}, {@empty, 0x800}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x2b}, {@loopback, 0xffff}, {@broadcast}, {@multicast1, 0x69c}, {@local, 0x10}]}, @ssrr={0x89, 0x27, 0x27, [@broadcast, @loopback, @remote, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001ac0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000007100)={'syztnl2\x00', &(0x7f0000007080)={'sit0\x00', 0x0, 0x1, 0x1, 0x5f, 0xf, {{0x17, 0x4, 0x3, 0x5, 0x5c, 0x68, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@ssrr={0x89, 0x27, 0x8f, [@local, @multicast1, @multicast1, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xd, 0x3, [{0x5, 0x4, "d24a"}, {0x6, 0x3, "a8"}]}, @rr={0x7, 0x13, 0x81, [@local, @rand_addr=0x64010101, @local, @private=0xa010102]}]}}}}}) 2.358258795s ago: executing program 4 (id=5078): socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c}}], 0x1b}, 0x0) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x2, 0x922000000001, 0x106) r10 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.216393752s ago: executing program 3 (id=5079): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) r1 = epoll_create1(0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0xfffffffd, 0x0, 0x4000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x10000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1a0c, &(0x7f0000000080), 0x8) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000180)={@default, @default}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40808) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) 1.825501069s ago: executing program 1 (id=5080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x80, 0x20, 0x14, 0x0, 0x0, 0x4, 0x0, 0x5, 0x100}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES16], 0xfe33) r1 = socket$inet6(0x10, 0x2, 0x7f) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r3}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r4}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x10, 0x271c, 0x20, @private0, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x7, 0x1ff, 0x100}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x1ca, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x27c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x4, 0x0, 0x0, 0x11}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x101}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x2ac}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x14, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @ldst={0x1, 0x3, 0x6, 0x4, 0x5, 0xffffffffffffffff, 0x4}, @generic={0x37, 0x0, 0xd, 0xf, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x6}, @alu={0x7, 0x1, 0x5, 0x4, 0x3, 0xd0, 0x4}]}, &(0x7f0000000540)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000580)=""/30, 0x41100, 0x40, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000880)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x2, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000900)=[r3, r3, r3, r12, r3, r3], &(0x7f0000000940)=[{0x3, 0x1, 0xe}], 0x10, 0xc, @void, @value}, 0x94) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r13, @ANYBLOB="200001"], 0x38}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) 1.301740118s ago: executing program 1 (id=5086): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x3, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5c}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20005011) select(0x0, 0x0, 0x0, &(0x7f0000000400)={0x3, 0x0, 0x2, 0x300, 0xffff, 0x0, 0x0, 0x8}, &(0x7f0000000440)={0x0, 0x2710}) 1.240707179s ago: executing program 3 (id=5087): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) socket$inet6_sctp(0xa, 0x4, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0)=0x8200000000000000, 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907a780000"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5000002000000000000006000000000303a00ff020000000000000000000000000001fc01000000000000e900000000000000040090"], 0x66) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10100) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) 1.17594703s ago: executing program 4 (id=5088): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000240)=0x409, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r4 = socket(0x5, 0x6, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x40, 0x7}, 0x8) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @empty}, &(0x7f00000000c0)=0x8) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000c8000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e80)={r9, &(0x7f0000000cc0), &(0x7f0000000dc0), 0x3}, 0x20) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="8c00000010000100"/20, @ANYRES32=r7, @ANYRES32=r9, @ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRESDEC=r9], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 1.175673319s ago: executing program 5 (id=5089): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x100, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x58, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xefaf}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) 1.136787806s ago: executing program 1 (id=5090): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x44}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800000006000000010000000300001f0000000000002e"], 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendto$inet(r0, &(0x7f00000000c0)="e3", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) r1 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x8}) listen(r0, 0xda8c) accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1.112104689s ago: executing program 0 (id=5091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40808) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x17c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2c00}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xc4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8a3313bd55416542e1f15e200c9b84a566fcdbc86be79ef49da55d165e98c37e"}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7ced7b03c73db68d57126e6aac8f30d0f607483d725825e381ae2be540c32093"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffaa71}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x17c}}, 0x41) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xfffffffd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000480) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xcc, r2, 0x100, 0x10001, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0xb0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5fe1c3507b69ac960b45cee0d7624d72"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfe7}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0646db458669af397cb3861f799a5943"}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x9fbec146278fbf56) 971.904274ms ago: executing program 5 (id=5092): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0x100000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80a}, {0xa, 0x8, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x5}}, 0x2, {[0x9, 0x1, 0xfffffffe, 0x1, 0xffffffff, 0x8, 0x4]}}, 0x5c) write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 841.817317ms ago: executing program 0 (id=5093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 704.0651ms ago: executing program 5 (id=5094): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010000", 0x7) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty, 0xfff}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r1, 0xd3) 629.569639ms ago: executing program 0 (id=5095): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100], [0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x4}]}]}}]}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x48}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x27, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100], [0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x4}]}]}}]}, 0x9c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x48}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x27, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) 523.452966ms ago: executing program 5 (id=5096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079124000"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xaf}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc9, &(0x7f00000002c0)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/188, 0xbc}], 0x4}, 0x8}], 0x3, 0x42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg(r1, &(0x7f0000001680)={&(0x7f0000001480)=@caif, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)="981cd69a0cd5f4b10006a7b16ce87a63057b46220fba3aae2d47d2a85c6fdcb97c5908c06acdc08081c0dc3e63cf6476a376a9417789625017e5bb12a6312fa9d46d2509c08c5cc75098ddc59efd999476a30a35f561e001d8099c669bbed42a69882155138005343ff99bba9c18a2aff995f0a8c9ef66d3afb9f1d54a5b9f74b924cc849cac949357603ed0c9de4cc883de846315309d922746672889949b8c774401", 0xa3}, {&(0x7f0000000100)="15739bf92aa0049252fb52", 0xb}], 0x2, &(0x7f0000001600)=[{0x48, 0x4, 0x9, "9b791ae2606e7348d0751caa7154a00f83a7005dec9352f60f2b9f9655e601c2e61f0cf62e2baed65991962465ddbd8348d57e32204170"}], 0x48}, 0x40008c4) write(r3, &(0x7f0000000640)="6a6f1825dc34", 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffe, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f00000000c0)=""/76}, 0x67) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f0000000740)=""/159, 0x7a, 0x9f, 0x0, 0xfffffffb, 0x0, @void, @value}, 0x20) 421.421559ms ago: executing program 0 (id=5097): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002300)={0x24, r1, 0x1, 0x70ad26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x200000000000000, 0x40000}, 0x4080) 375.63363ms ago: executing program 3 (id=5098): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02004000000a"}) 315.853197ms ago: executing program 5 (id=5099): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d2829"], 0xe0}], 0x1}, 0x40040) 274.231257ms ago: executing program 0 (id=5100): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000001900)={'sit0\x00', 0x0, 0x40, 0x40, 0x5, 0x6, {{0x4b, 0x4, 0x2, 0x1f, 0x12c, 0x67, 0x0, 0xf, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @noop, @lsrr={0x83, 0x1f, 0x97, [@private=0xa010101, @multicast2, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102]}, @cipso={0x86, 0x5c, 0x3, [{0x2, 0x5, "6720ba"}, {0x2, 0xf, "c91a937b6d776f6c66fba449b2"}, {0x1, 0xe, "fd8f65a091950b89eb355f6f"}, {0x7, 0xf, "4d9cd81e2a581e878c072ec697"}, {0x7, 0x6, "f30575a5"}, {0x0, 0x7, "ddc5c6e80f"}, {0x3, 0x4, "1a5b"}, {0x0, 0x5, "567dc8"}, {0x1, 0x5, 'MOZ'}, {0x4, 0xa, "8d2f45333d72352c"}]}, @timestamp={0x44, 0x2c, 0x38, 0x0, 0xc, [0x8, 0xf, 0x7, 0x2345, 0x0, 0x8, 0x8, 0x7, 0x4, 0x8]}, @timestamp_addr={0x44, 0x44, 0x7d, 0x1, 0xf, [{@empty, 0xc9a}, {@rand_addr=0x64010101, 0x24000000}, {@empty, 0x800}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x2b}, {@loopback, 0xffff}, {@broadcast}, {@multicast1, 0x69c}, {@local, 0x10}]}, @ssrr={0x89, 0x27, 0x27, [@broadcast, @loopback, @remote, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000007100)={'syztnl2\x00', &(0x7f0000007080)={'sit0\x00', 0x0, 0x1, 0x1, 0x5f, 0xf, {{0x17, 0x4, 0x3, 0x5, 0x5c, 0x68, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@ssrr={0x89, 0x27, 0x8f, [@local, @multicast1, @multicast1, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xd, 0x3, [{0x5, 0x4, "d24a"}, {0x6, 0x3, "a8"}]}, @rr={0x7, 0x13, 0x81, [@local, @rand_addr=0x64010101, @local, @private=0xa010102]}]}}}}}) 273.293699ms ago: executing program 3 (id=5101): pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000080)=0xf6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x816, 0xfffffffffffffe46, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x25dfdbf9, {0xa, 0x0, 0x0, 0x5, 0x0, 0x3}}, 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a0, &(0x7f0000000340)={'syzkaller1\x00', @remote}) 258.739531ms ago: executing program 4 (id=5102): r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x100, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x58, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xefaf}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) 128.823951ms ago: executing program 1 (id=5103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40808) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x17c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2c00}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xc4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8a3313bd55416542e1f15e200c9b84a566fcdbc86be79ef49da55d165e98c37e"}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7ced7b03c73db68d57126e6aac8f30d0f607483d725825e381ae2be540c32093"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffaa71}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x17c}}, 0x41) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xfffffffd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000480) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xcc, r2, 0x100, 0x10001, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0xb0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5fe1c3507b69ac960b45cee0d7624d72"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfe7}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0646db458669af397cb3861f799a5943"}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x9fbec146278fbf56) 60.002321ms ago: executing program 0 (id=5104): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56330300000000000000d6e747033a0093b837dc6cc01e32efaec80000ec00120c000140060404000d04009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00", 0x89}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x25, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x9c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000880)={r3, @in6={{0xa, 0x4e22, 0x1, @empty, 0x1f8}}, 0x1, 0xfe15}, 0x90) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r7, 0x8914, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) connect$rose(r9, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @null}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000020000009110a9000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0, @void, @value}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000100)=0x1ff) connect$inet(r10, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r10, 0x0, r5, 0x0, 0x7ffff041, 0x1200000000000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) 492.293µs ago: executing program 5 (id=5105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 4 (id=5106): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6}]}) write$ppp(r2, &(0x7f0000000480)='3I', 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x55}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x6c}}, 0x20050800) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000200360002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) unshare(0x20000400) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x1004, 0x1}, 0xe) read(r1, &(0x7f00000000c0)=""/127, 0x7f) kernel console output (not intermixed with test programs): ][T29574] ? __fget_files+0x2a/0x420 [ 1202.793703][T29574] ? __fget_files+0x3a0/0x420 [ 1202.793726][T29574] ? __fget_files+0x2a/0x420 [ 1202.793760][T29574] ksys_read+0x145/0x250 [ 1202.793784][T29574] ? __pfx_ksys_read+0x10/0x10 [ 1202.793801][T29574] ? rcu_is_watching+0x15/0xb0 [ 1202.793827][T29574] ? do_syscall_64+0xbe/0x3b0 [ 1202.793861][T29574] do_syscall_64+0xfa/0x3b0 [ 1202.793887][T29574] ? lockdep_hardirqs_on+0x9c/0x150 [ 1202.793913][T29574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.793934][T29574] ? clear_bhb_loop+0x60/0xb0 [ 1202.793960][T29574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.793979][T29574] RIP: 0033:0x7fd2ba78d33c [ 1202.793998][T29574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1202.794016][T29574] RSP: 002b:00007fd2bb5b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1202.794037][T29574] RAX: ffffffffffffffda RBX: 00007fd2ba9b5fa0 RCX: 00007fd2ba78d33c [ 1202.794053][T29574] RDX: 000000000000000f RSI: 00007fd2bb5b70a0 RDI: 0000000000000004 [ 1202.794066][T29574] RBP: 00007fd2bb5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.794078][T29574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1202.794091][T29574] R13: 0000000000000000 R14: 00007fd2ba9b5fa0 R15: 00007ffe512aafa8 [ 1202.794125][T29574] [ 1203.111808][T29572] pimreg: entered allmulticast mode [ 1203.367691][T29585] tipc: Started in network mode [ 1203.373072][T29585] tipc: Node identity ac14140f, cluster identity 4711 [ 1203.389949][T29585] tipc: New replicast peer: 255.255.255.255 [ 1203.459213][T29585] tipc: Enabled bearer , priority 10 [ 1203.636129][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.717962][T28359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1203.785034][T29592] vxcan3: entered allmulticast mode [ 1203.882993][T22819] Bluetooth: hci3: command 0x0406 tx timeout [ 1204.542100][T25674] tipc: Node number set to 2886997007 [ 1204.692168][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.854750][T29631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1204.943327][T29631] openvswitch: netlink: Actions may not be safe on all matching packets [ 1204.975137][T29640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.983766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.008678][T29631] netlink: 'syz.5.4356': attribute type 1 has an invalid length. [ 1205.018723][T29631] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4356'. [ 1205.079300][T29631] netlink: 'syz.5.4356': attribute type 1 has an invalid length. [ 1205.635878][T18630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.712627][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.782680][T29656] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4363'. [ 1205.929440][T29660] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1206.241011][T29669] FAULT_INJECTION: forcing a failure. [ 1206.241011][T29669] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.285157][T29669] CPU: 0 UID: 0 PID: 29669 Comm: syz.5.4369 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1206.285189][T29669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1206.285202][T29669] Call Trace: [ 1206.285209][T29669] [ 1206.285218][T29669] dump_stack_lvl+0x189/0x250 [ 1206.285255][T29669] ? __pfx____ratelimit+0x10/0x10 [ 1206.285282][T29669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1206.285314][T29669] ? __pfx__printk+0x10/0x10 [ 1206.285342][T29669] ? __pfx___might_resched+0x10/0x10 [ 1206.285367][T29669] should_fail_ex+0x414/0x560 [ 1206.285401][T29669] should_failslab+0xa8/0x100 [ 1206.285425][T29669] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1206.285448][T29669] ? __alloc_skb+0x112/0x2d0 [ 1206.285472][T29669] __alloc_skb+0x112/0x2d0 [ 1206.285496][T29669] netlink_sendmsg+0x5c6/0xb30 [ 1206.285533][T29669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1206.285558][T29669] ? aa_sock_msg_perm+0x94/0x160 [ 1206.285587][T29669] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1206.285622][T29669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1206.285644][T29669] __sock_sendmsg+0x219/0x270 [ 1206.285675][T29669] ____sys_sendmsg+0x505/0x830 [ 1206.285704][T29669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1206.285737][T29669] ? import_iovec+0x74/0xa0 [ 1206.285763][T29669] ___sys_sendmsg+0x21f/0x2a0 [ 1206.285789][T29669] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.285853][T29669] ? __fget_files+0x2a/0x420 [ 1206.285875][T29669] ? __fget_files+0x3a0/0x420 [ 1206.285910][T29669] __x64_sys_sendmsg+0x19b/0x260 [ 1206.285936][T29669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1206.285969][T29669] ? __pfx_ksys_write+0x10/0x10 [ 1206.285986][T29669] ? rcu_is_watching+0x15/0xb0 [ 1206.286011][T29669] ? do_syscall_64+0xbe/0x3b0 [ 1206.286042][T29669] do_syscall_64+0xfa/0x3b0 [ 1206.286068][T29669] ? lockdep_hardirqs_on+0x9c/0x150 [ 1206.286094][T29669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.286114][T29669] ? clear_bhb_loop+0x60/0xb0 [ 1206.286139][T29669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.286160][T29669] RIP: 0033:0x7fd2ba78e929 [ 1206.286178][T29669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.286196][T29669] RSP: 002b:00007fd2bb5b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1206.286218][T29669] RAX: ffffffffffffffda RBX: 00007fd2ba9b5fa0 RCX: 00007fd2ba78e929 [ 1206.286232][T29669] RDX: 0000000000004080 RSI: 0000200000002380 RDI: 0000000000000004 [ 1206.286246][T29669] RBP: 00007fd2bb5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.286258][T29669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.286270][T29669] R13: 0000000000000000 R14: 00007fd2ba9b5fa0 R15: 00007ffe512aafa8 [ 1206.286303][T29669] [ 1206.621200][T29673] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4371'. [ 1206.752728][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.587976][T29708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.673381][T28359] net_ratelimit: 1 callbacks suppressed [ 1208.673401][T28359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.687692][T29708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.756305][T29708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.865167][T29711] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4383'. [ 1208.912687][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.521143][T29715] netlink: 'syz.3.4384': attribute type 11 has an invalid length. [ 1209.540077][T29715] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4384'. [ 1209.564623][T29715] netlink: 165640 bytes leftover after parsing attributes in process `syz.3.4384'. [ 1209.953590][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.325528][T29729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.354585][T29729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.420385][T29729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1210.574654][T29735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4391'. [ 1210.720555][T29735] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1210.994105][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.070892][T29743] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4394'. [ 1211.342471][T29748] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4397'. [ 1211.345754][T29749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4396'. [ 1211.376680][T29755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1211.682766][T29763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.714684][T28359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.910262][T29779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4407'. [ 1211.930237][T29781] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4404'. [ 1211.954229][T29779] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4407'. [ 1212.034301][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.355832][T29791] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4410'. [ 1212.691546][T29815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4417'. [ 1212.755663][T29819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.825049][T29815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1212.904321][T29815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1213.076717][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.315542][T18630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.360989][T29839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.972116][T29855] can: request_module (can-proto-0) failed. [ 1214.112624][T25680] net_ratelimit: 1 callbacks suppressed [ 1214.112642][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.157381][T29872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4439'. [ 1214.515078][T29886] netlink: 'syz.4.4445': attribute type 10 has an invalid length. [ 1214.526588][T29886] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1214.694933][T29891] netlink: 'syz.4.4445': attribute type 11 has an invalid length. [ 1214.712023][T29891] netlink: 'syz.4.4445': attribute type 4 has an invalid length. [ 1214.757188][T18630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.152323][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.181872][T29899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.209766][T25680] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1215.226400][T25680] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1215.254824][ T7535] wlan1: authenticated [ 1215.255624][T29899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.287432][ T7535] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1215.342325][ T7537] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1215.352928][T29899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.373472][ T7537] wlan1: associated [ 1215.541376][T29911] netlink: 'syz.3.4453': attribute type 2 has an invalid length. [ 1215.600212][T29911] þ`Ì: entered promiscuous mode [ 1216.034910][T29926] FAULT_INJECTION: forcing a failure. [ 1216.034910][T29926] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.047660][T29926] CPU: 1 UID: 0 PID: 29926 Comm: syz.3.4461 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1216.047688][T29926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1216.047701][T29926] Call Trace: [ 1216.047709][T29926] [ 1216.047718][T29926] dump_stack_lvl+0x189/0x250 [ 1216.047754][T29926] ? __pfx____ratelimit+0x10/0x10 [ 1216.047781][T29926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1216.047812][T29926] ? __pfx__printk+0x10/0x10 [ 1216.047837][T29926] ? rcu_is_watching+0x15/0xb0 [ 1216.047867][T29926] should_fail_ex+0x414/0x560 [ 1216.047900][T29926] should_failslab+0xa8/0x100 [ 1216.047926][T29926] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1216.047947][T29926] ? skb_clone+0x212/0x3a0 [ 1216.047975][T29926] skb_clone+0x212/0x3a0 [ 1216.048004][T29926] bpf_clone_redirect+0xad/0x3d0 [ 1216.048043][T29926] bpf_prog_b36a1f39e2fdd4f4+0x5f/0x68 [ 1216.048070][T29926] ? ktime_get+0x3e/0x1f0 [ 1216.048100][T29926] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1216.048123][T29926] ? lockdep_hardirqs_on+0x9c/0x150 [ 1216.048148][T29926] ? ktime_get+0x3e/0x1f0 [ 1216.048167][T29926] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1216.048198][T29926] ? __local_bh_disable_ip+0xf1/0x190 [ 1216.048229][T29926] ? __pfx___cant_migrate+0x10/0x10 [ 1216.048246][T29926] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1216.048276][T29926] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1216.048311][T29926] ? bpf_test_timer_continue+0x136/0x350 [ 1216.048338][T29926] bpf_test_run+0x38e/0x830 [ 1216.048370][T29926] ? bpf_test_run+0x205/0x830 [ 1216.048397][T29926] ? __pfx_bpf_test_run+0x10/0x10 [ 1216.048445][T29926] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 1216.048477][T29926] ? convert___skb_to_skb+0x3d/0x590 [ 1216.048499][T29926] bpf_prog_test_run_skb+0xb30/0x1560 [ 1216.048550][T29926] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1216.048583][T29926] bpf_prog_test_run+0x2c7/0x340 [ 1216.048617][T29926] __sys_bpf+0x4a4/0x860 [ 1216.048656][T29926] ? __pfx___sys_bpf+0x10/0x10 [ 1216.048699][T29926] ? ksys_write+0x22a/0x250 [ 1216.048722][T29926] ? __pfx_ksys_write+0x10/0x10 [ 1216.048739][T29926] ? rcu_is_watching+0x15/0xb0 [ 1216.048766][T29926] __x64_sys_bpf+0x7c/0x90 [ 1216.048792][T29926] do_syscall_64+0xfa/0x3b0 [ 1216.048819][T29926] ? lockdep_hardirqs_on+0x9c/0x150 [ 1216.048844][T29926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.048865][T29926] ? clear_bhb_loop+0x60/0xb0 [ 1216.048890][T29926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.048909][T29926] RIP: 0033:0x7f40daf8e929 [ 1216.048927][T29926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1216.048944][T29926] RSP: 002b:00007f40dbe76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1216.048966][T29926] RAX: ffffffffffffffda RBX: 00007f40db1b5fa0 RCX: 00007f40daf8e929 [ 1216.048980][T29926] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 1216.048993][T29926] RBP: 00007f40dbe76090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.049004][T29926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1216.049016][T29926] R13: 0000000000000000 R14: 00007f40db1b5fa0 R15: 00007fff6dc7d288 [ 1216.049048][T29926] [ 1216.382442][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.430159][T29931] netlink: 'syz.5.4463': attribute type 4 has an invalid length. [ 1216.438013][T29931] __nla_validate_parse: 4 callbacks suppressed [ 1216.438029][T29931] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4463'. [ 1216.628973][T29936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.658258][T29936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.667504][T29936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.682224][T29936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.690809][T29936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.243524][T29953] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4469'. [ 1217.435110][T29959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.577026][T29959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.644322][T29959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.031255][T29973] IPVS: Unknown mcast interface: vcan0 [ 1218.901347][T29986] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4481'. [ 1219.282571][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4488'. [ 1219.295950][T30008] net_ratelimit: 7 callbacks suppressed [ 1219.295970][T30008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.310231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.473627][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.194210][T18630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.296814][T30040] netlink: 'syz.4.4498': attribute type 1 has an invalid length. [ 1220.312812][T30036] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4497'. [ 1220.516272][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.575843][T30045] IPv6: Can't replace route, no match found [ 1220.764294][T30055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4502'. [ 1220.830220][T30059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.838945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.095395][T30066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4508'. [ 1222.089213][T30096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4517'. [ 1223.053611][T30115] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1223.204959][T29617] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1223.424888][T30126] sctp: [Deprecated]: syz.4.4529 (pid 30126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1223.424888][T30126] Use struct sctp_sack_info instead [ 1224.101469][T30142] FAULT_INJECTION: forcing a failure. [ 1224.101469][T30142] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.142431][T30142] CPU: 0 UID: 0 PID: 30142 Comm: syz.4.4534 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1224.142459][T30142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1224.142470][T30142] Call Trace: [ 1224.142478][T30142] [ 1224.142486][T30142] dump_stack_lvl+0x189/0x250 [ 1224.142520][T30142] ? __pfx____ratelimit+0x10/0x10 [ 1224.142545][T30142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1224.142573][T30142] ? __pfx__printk+0x10/0x10 [ 1224.142609][T30142] should_fail_ex+0x414/0x560 [ 1224.142641][T30142] should_failslab+0xa8/0x100 [ 1224.142664][T30142] __kmalloc_cache_noprof+0x70/0x3d0 [ 1224.142684][T30142] ? sctp_add_bind_addr+0x8c/0x370 [ 1224.142716][T30142] sctp_add_bind_addr+0x8c/0x370 [ 1224.142748][T30142] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1224.142780][T30142] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1224.142807][T30142] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1224.142837][T30142] ? sctp_v6_is_any+0x64/0x80 [ 1224.142854][T30142] ? sctp_copy_one_addr+0x93/0x360 [ 1224.142882][T30142] sctp_bind_addr_copy+0xb3/0x3c0 [ 1224.142908][T30142] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1224.142934][T30142] sctp_connect_new_asoc+0x2e0/0x690 [ 1224.142957][T30142] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1224.142974][T30142] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1224.143006][T30142] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1224.143031][T30142] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1224.143053][T30142] sctp_sendmsg+0x155c/0x2810 [ 1224.143085][T30142] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1224.143106][T30142] ? aa_sk_perm+0x81e/0x950 [ 1224.143133][T30142] ? __pfx_aa_sk_perm+0x10/0x10 [ 1224.143157][T30142] ? sock_rps_record_flow+0x19/0x410 [ 1224.143185][T30142] ? inet_sendmsg+0x2f4/0x370 [ 1224.143213][T30142] __sock_sendmsg+0x19c/0x270 [ 1224.143240][T30142] ____sys_sendmsg+0x52d/0x830 [ 1224.143265][T30142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1224.143294][T30142] ? import_iovec+0x74/0xa0 [ 1224.143316][T30142] ___sys_sendmsg+0x21f/0x2a0 [ 1224.143337][T30142] ? __pfx____sys_sendmsg+0x10/0x10 [ 1224.143394][T30142] ? __fget_files+0x2a/0x420 [ 1224.143419][T30142] ? __fget_files+0x3a0/0x420 [ 1224.143450][T30142] __sys_sendmmsg+0x227/0x430 [ 1224.143475][T30142] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1224.143492][T30142] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1224.143543][T30142] ? ksys_write+0x22a/0x250 [ 1224.143564][T30142] ? __pfx_ksys_write+0x10/0x10 [ 1224.143579][T30142] ? rcu_is_watching+0x15/0xb0 [ 1224.143603][T30142] __x64_sys_sendmmsg+0xa0/0xc0 [ 1224.143627][T30142] do_syscall_64+0xfa/0x3b0 [ 1224.143650][T30142] ? lockdep_hardirqs_on+0x9c/0x150 [ 1224.143671][T30142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.143689][T30142] ? clear_bhb_loop+0x60/0xb0 [ 1224.143711][T30142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.143730][T30142] RIP: 0033:0x7f2601f8e929 [ 1224.143747][T30142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.143764][T30142] RSP: 002b:00007f2602e46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1224.143784][T30142] RAX: ffffffffffffffda RBX: 00007f26021b5fa0 RCX: 00007f2601f8e929 [ 1224.143798][T30142] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000003 [ 1224.143811][T30142] RBP: 00007f2602e46090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.143823][T30142] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000002 [ 1224.143835][T30142] R13: 0000000000000000 R14: 00007f26021b5fa0 R15: 00007ffe609abb78 [ 1224.143869][T30142] [ 1224.700613][T30144] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4536'. [ 1224.973992][T30150] FAULT_INJECTION: forcing a failure. [ 1224.973992][T30150] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.025460][T30150] CPU: 1 UID: 0 PID: 30150 Comm: syz.0.4538 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1225.025492][T30150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1225.025506][T30150] Call Trace: [ 1225.025514][T30150] [ 1225.025523][T30150] dump_stack_lvl+0x189/0x250 [ 1225.025561][T30150] ? __pfx____ratelimit+0x10/0x10 [ 1225.025589][T30150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1225.025621][T30150] ? __pfx__printk+0x10/0x10 [ 1225.025650][T30150] ? __pfx___might_resched+0x10/0x10 [ 1225.025669][T30150] ? fs_reclaim_acquire+0x7d/0x100 [ 1225.025699][T30150] should_fail_ex+0x414/0x560 [ 1225.025733][T30150] should_failslab+0xa8/0x100 [ 1225.025759][T30150] __kmalloc_noprof+0xcb/0x4f0 [ 1225.025779][T30150] ? kfree+0x4d/0x440 [ 1225.025794][T30150] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1225.025831][T30150] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1225.025864][T30150] ? tomoyo_domain+0xd9/0x130 [ 1225.025900][T30150] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1225.025926][T30150] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1225.025954][T30150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1225.026000][T30150] ? __lock_acquire+0xab9/0xd20 [ 1225.026054][T30150] ? __fget_files+0x2a/0x420 [ 1225.026088][T30150] ? __fget_files+0x2a/0x420 [ 1225.026111][T30150] ? __fget_files+0x3a0/0x420 [ 1225.026132][T30150] ? __fget_files+0x2a/0x420 [ 1225.026160][T30150] security_file_ioctl+0xcb/0x2d0 [ 1225.026186][T30150] __se_sys_ioctl+0x47/0x170 [ 1225.026221][T30150] do_syscall_64+0xfa/0x3b0 [ 1225.026248][T30150] ? lockdep_hardirqs_on+0x9c/0x150 [ 1225.026274][T30150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.026295][T30150] ? clear_bhb_loop+0x60/0xb0 [ 1225.026320][T30150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.026340][T30150] RIP: 0033:0x7f59cbd8e929 [ 1225.026358][T30150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1225.026375][T30150] RSP: 002b:00007f59ccbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1225.026397][T30150] RAX: ffffffffffffffda RBX: 00007f59cbfb5fa0 RCX: 00007f59cbd8e929 [ 1225.026412][T30150] RDX: 0000200000000340 RSI: 0000000000008940 RDI: 0000000000000003 [ 1225.026424][T30150] RBP: 00007f59ccbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.026437][T30150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.026453][T30150] R13: 0000000000000000 R14: 00007f59cbfb5fa0 R15: 00007fff70e0fba8 [ 1225.026486][T30150] [ 1225.026570][T30150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1225.795705][T30177] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4548'. [ 1225.885804][T30181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4551'. [ 1226.142657][T30192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4555'. [ 1226.231921][T30192] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1226.400859][T30198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4557'. [ 1226.578865][T30206] FAULT_INJECTION: forcing a failure. [ 1226.578865][T30206] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.614463][T30206] CPU: 0 UID: 0 PID: 30206 Comm: syz.3.4560 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1226.614495][T30206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1226.614507][T30206] Call Trace: [ 1226.614515][T30206] [ 1226.614524][T30206] dump_stack_lvl+0x189/0x250 [ 1226.614560][T30206] ? __pfx____ratelimit+0x10/0x10 [ 1226.614587][T30206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1226.614619][T30206] ? __pfx__printk+0x10/0x10 [ 1226.614645][T30206] ? __pfx___might_resched+0x10/0x10 [ 1226.614664][T30206] ? fs_reclaim_acquire+0x7d/0x100 [ 1226.614696][T30206] should_fail_ex+0x414/0x560 [ 1226.614729][T30206] should_failslab+0xa8/0x100 [ 1226.614754][T30206] __kmalloc_noprof+0xcb/0x4f0 [ 1226.614774][T30206] ? tomoyo_encode+0x28b/0x550 [ 1226.614808][T30206] tomoyo_encode+0x28b/0x550 [ 1226.614845][T30206] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1226.614877][T30206] ? tomoyo_domain+0xd9/0x130 [ 1226.614913][T30206] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1226.614938][T30206] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1226.614968][T30206] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1226.615013][T30206] ? __lock_acquire+0xab9/0xd20 [ 1226.615066][T30206] ? __fget_files+0x2a/0x420 [ 1226.615093][T30206] ? __fget_files+0x2a/0x420 [ 1226.615115][T30206] ? __fget_files+0x3a0/0x420 [ 1226.615137][T30206] ? __fget_files+0x2a/0x420 [ 1226.615165][T30206] security_file_ioctl+0xcb/0x2d0 [ 1226.615197][T30206] __se_sys_ioctl+0x47/0x170 [ 1226.615232][T30206] do_syscall_64+0xfa/0x3b0 [ 1226.615258][T30206] ? lockdep_hardirqs_on+0x9c/0x150 [ 1226.615285][T30206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.615305][T30206] ? clear_bhb_loop+0x60/0xb0 [ 1226.615330][T30206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.615351][T30206] RIP: 0033:0x7f40daf8e929 [ 1226.615368][T30206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1226.615386][T30206] RSP: 002b:00007f40dbe76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1226.615406][T30206] RAX: ffffffffffffffda RBX: 00007f40db1b5fa0 RCX: 00007f40daf8e929 [ 1226.615421][T30206] RDX: 0000200000000340 RSI: 0000000000008940 RDI: 0000000000000003 [ 1226.615434][T30206] RBP: 00007f40dbe76090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.615447][T30206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.615459][T30206] R13: 0000000000000000 R14: 00007f40db1b5fa0 R15: 00007fff6dc7d288 [ 1226.615492][T30206] [ 1226.615515][T30206] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1226.766725][T30213] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1227.055085][T22819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.064257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.124553][T30222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4566'. [ 1227.152224][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1227.160410][T30222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4566'. [ 1227.236909][T30221] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1228.772535][T30264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 1228.827977][T30269] netlink: 'syz.3.4580': attribute type 21 has an invalid length. [ 1228.867472][T30269] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4580'. [ 1228.962888][T30269] netlink: 'syz.3.4580': attribute type 5 has an invalid length. [ 1228.991397][T30269] netlink: 'syz.3.4580': attribute type 6 has an invalid length. [ 1229.027087][T30269] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4580'. [ 1229.129344][T22819] block nbd1: Receive control failed (result -104) [ 1229.487543][T30284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4585'. [ 1229.682547][T30290] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4588'. [ 1229.985914][T30297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4591'. [ 1230.029198][T30297] netlink: 'syz.5.4591': attribute type 1 has an invalid length. [ 1230.055214][T30297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4591'. [ 1230.234515][T30302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4593'. [ 1231.073152][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.878042][T30347] bridge0: port 1(syz_tun) entered blocking state [ 1231.889714][T30347] bridge0: port 1(syz_tun) entered disabled state [ 1231.907790][T30347] syz_tun: entered allmulticast mode [ 1231.990424][T30347] syz_tun: entered promiscuous mode [ 1232.113753][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.393992][T30363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.403224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.510592][T30369] macsec1: entered promiscuous mode [ 1232.516816][T30372] __nla_validate_parse: 5 callbacks suppressed [ 1232.516834][T30372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4622'. [ 1232.549174][T30369] macsec1: entered allmulticast mode [ 1232.592295][T30369] veth1_macvtap: entered allmulticast mode [ 1232.642900][T30369] veth1_macvtap: left allmulticast mode [ 1233.065917][T30381] netlink: 'syz.4.4625': attribute type 10 has an invalid length. [ 1233.084077][T30381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.113145][T30381] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1233.152581][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.229995][T30389] FAULT_INJECTION: forcing a failure. [ 1233.229995][T30389] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.276592][T30391] FAULT_INJECTION: forcing a failure. [ 1233.276592][T30391] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.320595][T30391] CPU: 1 UID: 0 PID: 30391 Comm: syz.0.4629 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1233.320627][T30391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1233.320639][T30391] Call Trace: [ 1233.320648][T30391] [ 1233.320657][T30391] dump_stack_lvl+0x189/0x250 [ 1233.320693][T30391] ? __pfx____ratelimit+0x10/0x10 [ 1233.320722][T30391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1233.320753][T30391] ? __pfx__printk+0x10/0x10 [ 1233.320799][T30391] should_fail_ex+0x414/0x560 [ 1233.320834][T30391] should_failslab+0xa8/0x100 [ 1233.320859][T30391] __kmalloc_cache_noprof+0x70/0x3d0 [ 1233.320881][T30391] ? sctp_add_bind_addr+0x8c/0x370 [ 1233.320917][T30391] sctp_add_bind_addr+0x8c/0x370 [ 1233.320952][T30391] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1233.320988][T30391] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1233.321018][T30391] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1233.321050][T30391] ? sctp_v6_is_any+0x64/0x80 [ 1233.321071][T30391] ? sctp_copy_one_addr+0x93/0x360 [ 1233.321105][T30391] sctp_bind_addr_copy+0xb3/0x3c0 [ 1233.321136][T30391] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1233.321168][T30391] sctp_connect_new_asoc+0x2e0/0x690 [ 1233.321195][T30391] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1233.321216][T30391] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1233.321255][T30391] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1233.321285][T30391] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1233.321313][T30391] sctp_sendmsg+0x155c/0x2810 [ 1233.321349][T30391] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1233.321376][T30391] ? aa_sk_perm+0x81e/0x950 [ 1233.321408][T30391] ? __pfx_aa_sk_perm+0x10/0x10 [ 1233.321436][T30391] ? sock_rps_record_flow+0x19/0x410 [ 1233.321470][T30391] ? inet_sendmsg+0x2f4/0x370 [ 1233.321503][T30391] __sock_sendmsg+0x19c/0x270 [ 1233.321537][T30391] ____sys_sendmsg+0x52d/0x830 [ 1233.321567][T30391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1233.321601][T30391] ? import_iovec+0x74/0xa0 [ 1233.321628][T30391] ___sys_sendmsg+0x21f/0x2a0 [ 1233.321654][T30391] ? __pfx____sys_sendmsg+0x10/0x10 [ 1233.321720][T30391] ? __fget_files+0x2a/0x420 [ 1233.321743][T30391] ? __fget_files+0x3a0/0x420 [ 1233.321789][T30391] __sys_sendmmsg+0x227/0x430 [ 1233.321819][T30391] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1233.321839][T30391] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1233.321900][T30391] ? ksys_write+0x22a/0x250 [ 1233.321922][T30391] ? __pfx_ksys_write+0x10/0x10 [ 1233.321944][T30391] ? rcu_is_watching+0x15/0xb0 [ 1233.321969][T30391] __x64_sys_sendmmsg+0xa0/0xc0 [ 1233.321995][T30391] do_syscall_64+0xfa/0x3b0 [ 1233.322023][T30391] ? lockdep_hardirqs_on+0x9c/0x150 [ 1233.322049][T30391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.322070][T30391] ? clear_bhb_loop+0x60/0xb0 [ 1233.322096][T30391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.322116][T30391] RIP: 0033:0x7f59cbd8e929 [ 1233.322135][T30391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.322153][T30391] RSP: 002b:00007f59ccbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1233.322175][T30391] RAX: ffffffffffffffda RBX: 00007f59cbfb5fa0 RCX: 00007f59cbd8e929 [ 1233.322190][T30391] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000003 [ 1233.322203][T30391] RBP: 00007f59ccbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.322216][T30391] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000002 [ 1233.322228][T30391] R13: 0000000000000000 R14: 00007f59cbfb5fa0 R15: 00007fff70e0fba8 [ 1233.322262][T30391] [ 1233.678052][T28359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.726045][T30389] CPU: 0 UID: 0 PID: 30389 Comm: syz.3.4628 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1233.726077][T30389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1233.726089][T30389] Call Trace: [ 1233.726098][T30389] [ 1233.726106][T30389] dump_stack_lvl+0x189/0x250 [ 1233.726144][T30389] ? __pfx____ratelimit+0x10/0x10 [ 1233.726171][T30389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1233.726202][T30389] ? __pfx__printk+0x10/0x10 [ 1233.726231][T30389] ? __pfx___might_resched+0x10/0x10 [ 1233.726255][T30389] should_fail_ex+0x414/0x560 [ 1233.726289][T30389] should_failslab+0xa8/0x100 [ 1233.726313][T30389] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1233.726336][T30389] ? __alloc_skb+0x112/0x2d0 [ 1233.726359][T30389] __alloc_skb+0x112/0x2d0 [ 1233.726383][T30389] netlink_sendmsg+0x5c6/0xb30 [ 1233.726415][T30389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1233.726440][T30389] ? aa_sock_msg_perm+0x94/0x160 [ 1233.726469][T30389] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1233.726496][T30389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1233.726518][T30389] __sock_sendmsg+0x219/0x270 [ 1233.726549][T30389] ____sys_sendmsg+0x505/0x830 [ 1233.726578][T30389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1233.726610][T30389] ? import_iovec+0x74/0xa0 [ 1233.726636][T30389] ___sys_sendmsg+0x21f/0x2a0 [ 1233.726660][T30389] ? __pfx____sys_sendmsg+0x10/0x10 [ 1233.726729][T30389] ? __fget_files+0x2a/0x420 [ 1233.726752][T30389] ? __fget_files+0x3a0/0x420 [ 1233.726786][T30389] __x64_sys_sendmsg+0x19b/0x260 [ 1233.726812][T30389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1233.726845][T30389] ? __pfx_ksys_write+0x10/0x10 [ 1233.726862][T30389] ? rcu_is_watching+0x15/0xb0 [ 1233.726887][T30389] ? do_syscall_64+0xbe/0x3b0 [ 1233.726920][T30389] do_syscall_64+0xfa/0x3b0 [ 1233.726946][T30389] ? lockdep_hardirqs_on+0x9c/0x150 [ 1233.726971][T30389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.726991][T30389] ? clear_bhb_loop+0x60/0xb0 [ 1233.727016][T30389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.727035][T30389] RIP: 0033:0x7f40daf8e929 [ 1233.727054][T30389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.727071][T30389] RSP: 002b:00007f40dbe76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1233.727093][T30389] RAX: ffffffffffffffda RBX: 00007f40db1b5fa0 RCX: 00007f40daf8e929 [ 1233.727107][T30389] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003 [ 1233.727121][T30389] RBP: 00007f40dbe76090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.727133][T30389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.727145][T30389] R13: 0000000000000000 R14: 00007f40db1b5fa0 R15: 00007fff6dc7d288 [ 1233.727177][T30389] [ 1234.112407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.197086][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.072464][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1235.137750][T30414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4637'. [ 1235.235239][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.280705][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.615861][T30464] FAULT_INJECTION: forcing a failure. [ 1236.615861][T30464] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.629378][T30464] CPU: 1 UID: 0 PID: 30464 Comm: syz.4.4655 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1236.629408][T30464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1236.629421][T30464] Call Trace: [ 1236.629430][T30464] [ 1236.629438][T30464] dump_stack_lvl+0x189/0x250 [ 1236.629475][T30464] ? __pfx____ratelimit+0x10/0x10 [ 1236.629502][T30464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1236.629541][T30464] ? __pfx__printk+0x10/0x10 [ 1236.629569][T30464] ? __pfx___might_resched+0x10/0x10 [ 1236.629587][T30464] ? fs_reclaim_acquire+0x7d/0x100 [ 1236.629617][T30464] should_fail_ex+0x414/0x560 [ 1236.629651][T30464] should_failslab+0xa8/0x100 [ 1236.629676][T30464] __kmalloc_noprof+0xcb/0x4f0 [ 1236.629695][T30464] ? esp_init_state+0x6de/0x1140 [ 1236.629725][T30464] esp_init_state+0x6de/0x1140 [ 1236.629746][T30464] ? pfkey_sendmsg+0xbfe/0x1090 [ 1236.629778][T30464] ? __sock_sendmsg+0x219/0x270 [ 1236.629806][T30464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.629835][T30464] ? __pfx_esp_init_state+0x10/0x10 [ 1236.629881][T30464] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1236.629919][T30464] ? __xfrm_init_state+0x7ef/0x13f0 [ 1236.629946][T30464] __xfrm_init_state+0xa76/0x13f0 [ 1236.629966][T30464] ? __xfrm_init_state+0x7ef/0x13f0 [ 1236.629992][T30464] xfrm_init_state+0x18/0xa0 [ 1236.630022][T30464] pfkey_add+0x1d38/0x2e00 [ 1236.630074][T30464] ? __pfx_pfkey_add+0x10/0x10 [ 1236.630101][T30464] ? kmem_cache_free+0x18f/0x400 [ 1236.630138][T30464] pfkey_sendmsg+0xbfe/0x1090 [ 1236.630186][T30464] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1236.630246][T30464] ? aa_sock_msg_perm+0x94/0x160 [ 1236.630274][T30464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1236.630301][T30464] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1236.630333][T30464] __sock_sendmsg+0x219/0x270 [ 1236.630364][T30464] ____sys_sendmsg+0x505/0x830 [ 1236.630393][T30464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1236.630427][T30464] ? import_iovec+0x74/0xa0 [ 1236.630453][T30464] ___sys_sendmsg+0x21f/0x2a0 [ 1236.630478][T30464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1236.630556][T30464] ? __fget_files+0x2a/0x420 [ 1236.630578][T30464] ? __fget_files+0x3a0/0x420 [ 1236.630614][T30464] __x64_sys_sendmsg+0x19b/0x260 [ 1236.630639][T30464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1236.630672][T30464] ? __pfx_ksys_write+0x10/0x10 [ 1236.630689][T30464] ? rcu_is_watching+0x15/0xb0 [ 1236.630715][T30464] ? do_syscall_64+0xbe/0x3b0 [ 1236.630747][T30464] do_syscall_64+0xfa/0x3b0 [ 1236.630773][T30464] ? lockdep_hardirqs_on+0x9c/0x150 [ 1236.630798][T30464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.630818][T30464] ? clear_bhb_loop+0x60/0xb0 [ 1236.630843][T30464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.630862][T30464] RIP: 0033:0x7f2601f8e929 [ 1236.630880][T30464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.630898][T30464] RSP: 002b:00007f2602e46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1236.630918][T30464] RAX: ffffffffffffffda RBX: 00007f26021b5fa0 RCX: 00007f2601f8e929 [ 1236.630933][T30464] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1236.630945][T30464] RBP: 00007f2602e46090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.630957][T30464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1236.630968][T30464] R13: 0000000000000000 R14: 00007f26021b5fa0 R15: 00007ffe609abb78 [ 1236.631002][T30464] [ 1236.964663][T28359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.128358][T30472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4657'. [ 1237.312476][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.641266][T18630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.813732][T30493] netlink: 'syz.3.4667': attribute type 2 has an invalid length. [ 1237.821540][T30493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4667'. [ 1238.022336][T30499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4666'. [ 1238.211658][T30509] FAULT_INJECTION: forcing a failure. [ 1238.211658][T30509] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.225128][T30509] CPU: 0 UID: 0 PID: 30509 Comm: syz.5.4672 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1238.225167][T30509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1238.225180][T30509] Call Trace: [ 1238.225188][T30509] [ 1238.225197][T30509] dump_stack_lvl+0x189/0x250 [ 1238.225235][T30509] ? __pfx____ratelimit+0x10/0x10 [ 1238.225262][T30509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1238.225293][T30509] ? __pfx__printk+0x10/0x10 [ 1238.225322][T30509] ? __pfx___might_resched+0x10/0x10 [ 1238.225347][T30509] should_fail_ex+0x414/0x560 [ 1238.225381][T30509] should_failslab+0xa8/0x100 [ 1238.225407][T30509] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1238.225429][T30509] ? __alloc_skb+0x112/0x2d0 [ 1238.225453][T30509] __alloc_skb+0x112/0x2d0 [ 1238.225478][T30509] pfkey_sendmsg+0xca5/0x1090 [ 1238.225527][T30509] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1238.225587][T30509] ? aa_sock_msg_perm+0x94/0x160 [ 1238.225615][T30509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1238.225642][T30509] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1238.225673][T30509] __sock_sendmsg+0x219/0x270 [ 1238.225704][T30509] ____sys_sendmsg+0x505/0x830 [ 1238.225733][T30509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.225767][T30509] ? import_iovec+0x74/0xa0 [ 1238.225792][T30509] ___sys_sendmsg+0x21f/0x2a0 [ 1238.225817][T30509] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.225881][T30509] ? __fget_files+0x2a/0x420 [ 1238.225904][T30509] ? __fget_files+0x3a0/0x420 [ 1238.225944][T30509] __x64_sys_sendmsg+0x19b/0x260 [ 1238.225970][T30509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1238.226004][T30509] ? __pfx_ksys_write+0x10/0x10 [ 1238.226022][T30509] ? rcu_is_watching+0x15/0xb0 [ 1238.226047][T30509] ? do_syscall_64+0xbe/0x3b0 [ 1238.226079][T30509] do_syscall_64+0xfa/0x3b0 [ 1238.226105][T30509] ? lockdep_hardirqs_on+0x9c/0x150 [ 1238.226130][T30509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.226156][T30509] ? clear_bhb_loop+0x60/0xb0 [ 1238.226181][T30509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.226201][T30509] RIP: 0033:0x7fd2ba78e929 [ 1238.226219][T30509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1238.226236][T30509] RSP: 002b:00007fd2bb5b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.226258][T30509] RAX: ffffffffffffffda RBX: 00007fd2ba9b5fa0 RCX: 00007fd2ba78e929 [ 1238.226273][T30509] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1238.226285][T30509] RBP: 00007fd2bb5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.226297][T30509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.226309][T30509] R13: 0000000000000000 R14: 00007fd2ba9b5fa0 R15: 00007ffe512aafa8 [ 1238.226341][T30509] [ 1238.568730][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.766200][T30503] kthread_run failed with err -4 [ 1238.777293][T30517] IPVS: set_ctl: invalid protocol: 173 172.20.20.54:20004 [ 1238.942742][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.296118][T30535] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1239.304598][T11064] IPVS: starting estimator thread 0... [ 1239.416607][T30542] IPVS: using max 27 ests per chain, 64800 per kthread [ 1239.560138][T30555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.592253][T30555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.622603][T30555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.657635][T30559] sctp: [Deprecated]: syz.0.4687 (pid 30559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1239.657635][T30559] Use struct sctp_sack_info instead [ 1239.692814][T30555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.696274][T30563] FAULT_INJECTION: forcing a failure. [ 1239.696274][T30563] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.739204][T30560] sctp: [Deprecated]: syz.1.4688 (pid 30560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1239.739204][T30560] Use struct sctp_sack_info instead [ 1239.752059][T30563] CPU: 1 UID: 0 PID: 30563 Comm: syz.4.4689 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1239.752095][T30563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1239.752109][T30563] Call Trace: [ 1239.752120][T30563] [ 1239.752131][T30563] dump_stack_lvl+0x189/0x250 [ 1239.752172][T30563] ? __pfx____ratelimit+0x10/0x10 [ 1239.752204][T30563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1239.752238][T30563] ? __pfx__printk+0x10/0x10 [ 1239.752272][T30563] ? __pfx___might_resched+0x10/0x10 [ 1239.752292][T30563] ? fs_reclaim_acquire+0x7d/0x100 [ 1239.752326][T30563] should_fail_ex+0x414/0x560 [ 1239.752371][T30563] should_failslab+0xa8/0x100 [ 1239.752399][T30563] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1239.752425][T30563] ? __alloc_skb+0x112/0x2d0 [ 1239.752451][T30563] __alloc_skb+0x112/0x2d0 [ 1239.752478][T30563] netlink_ack+0x146/0xa50 [ 1239.752497][T30563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1239.752553][T30563] netlink_rcv_skb+0x28c/0x470 [ 1239.752577][T30563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1239.752613][T30563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1239.752653][T30563] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.752674][T30563] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.752703][T30563] netlink_unicast+0x758/0x8d0 [ 1239.752750][T30563] netlink_sendmsg+0x805/0xb30 [ 1239.752786][T30563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.752813][T30563] ? aa_sock_msg_perm+0x94/0x160 [ 1239.752845][T30563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1239.752875][T30563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.752900][T30563] __sock_sendmsg+0x219/0x270 [ 1239.752936][T30563] ____sys_sendmsg+0x505/0x830 [ 1239.752967][T30563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1239.753004][T30563] ? import_iovec+0x74/0xa0 [ 1239.753040][T30563] ___sys_sendmsg+0x21f/0x2a0 [ 1239.753069][T30563] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.753136][T30563] ? __fget_files+0x2a/0x420 [ 1239.753162][T30563] ? __fget_files+0x3a0/0x420 [ 1239.753201][T30563] __x64_sys_sendmsg+0x19b/0x260 [ 1239.753229][T30563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1239.753267][T30563] ? __pfx_ksys_write+0x10/0x10 [ 1239.753293][T30563] ? rcu_is_watching+0x15/0xb0 [ 1239.753322][T30563] ? do_syscall_64+0xbe/0x3b0 [ 1239.753364][T30563] do_syscall_64+0xfa/0x3b0 [ 1239.753395][T30563] ? lockdep_hardirqs_on+0x9c/0x150 [ 1239.753424][T30563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.753448][T30563] ? clear_bhb_loop+0x60/0xb0 [ 1239.753478][T30563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.753502][T30563] RIP: 0033:0x7f2601f8e929 [ 1239.753523][T30563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.753542][T30563] RSP: 002b:00007f2602e46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1239.753568][T30563] RAX: ffffffffffffffda RBX: 00007f26021b5fa0 RCX: 00007f2601f8e929 [ 1239.753585][T30563] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003 [ 1239.753609][T30563] RBP: 00007f2602e46090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.753628][T30563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.753642][T30563] R13: 0000000000000000 R14: 00007f26021b5fa0 R15: 00007ffe609abb78 [ 1239.753688][T30563] [ 1239.789407][T30547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4683'. [ 1240.388257][T30577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4692'. [ 1241.404825][T30581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1241.457856][T30581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1241.465556][T30599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4700'. [ 1241.495085][T30581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4693'. [ 1241.831083][T30607] FAULT_INJECTION: forcing a failure. [ 1241.831083][T30607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1241.862496][T30607] CPU: 1 UID: 0 PID: 30607 Comm: syz.0.4703 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1241.862526][T30607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1241.862538][T30607] Call Trace: [ 1241.862546][T30607] [ 1241.862555][T30607] dump_stack_lvl+0x189/0x250 [ 1241.862592][T30607] ? __pfx____ratelimit+0x10/0x10 [ 1241.862618][T30607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1241.862650][T30607] ? __pfx__printk+0x10/0x10 [ 1241.862684][T30607] should_fail_ex+0x414/0x560 [ 1241.862719][T30607] _copy_to_user+0x31/0xb0 [ 1241.862743][T30607] simple_read_from_buffer+0xe1/0x170 [ 1241.862770][T30607] proc_fail_nth_read+0x1df/0x250 [ 1241.862799][T30607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1241.862827][T30607] ? rw_verify_area+0x258/0x650 [ 1241.862857][T30607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1241.862883][T30607] vfs_read+0x200/0x980 [ 1241.862918][T30607] ? __pfx___mutex_lock+0x10/0x10 [ 1241.862947][T30607] ? __pfx_vfs_read+0x10/0x10 [ 1241.862967][T30607] ? __fget_files+0x2a/0x420 [ 1241.862995][T30607] ? __fget_files+0x3a0/0x420 [ 1241.863017][T30607] ? __fget_files+0x2a/0x420 [ 1241.863051][T30607] ksys_read+0x145/0x250 [ 1241.863068][T30607] ? __fget_files+0x2a/0x420 [ 1241.863093][T30607] ? __pfx_ksys_read+0x10/0x10 [ 1241.863118][T30607] ? do_syscall_64+0xbe/0x3b0 [ 1241.863151][T30607] do_syscall_64+0xfa/0x3b0 [ 1241.863178][T30607] ? lockdep_hardirqs_on+0x9c/0x150 [ 1241.863204][T30607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.863224][T30607] ? clear_bhb_loop+0x60/0xb0 [ 1241.863247][T30607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.863267][T30607] RIP: 0033:0x7f59cbd8d33c [ 1241.863285][T30607] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1241.863302][T30607] RSP: 002b:00007f59ccbb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1241.863322][T30607] RAX: ffffffffffffffda RBX: 00007f59cbfb5fa0 RCX: 00007f59cbd8d33c [ 1241.863337][T30607] RDX: 000000000000000f RSI: 00007f59ccbb40a0 RDI: 0000000000000004 [ 1241.863349][T30607] RBP: 00007f59ccbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.863361][T30607] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.863373][T30607] R13: 0000000000000000 R14: 00007f59cbfb5fa0 R15: 00007fff70e0fba8 [ 1241.863405][T30607] [ 1242.271062][T30613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4704'. [ 1242.466206][T30616] netlink: 'syz.0.4706': attribute type 5 has an invalid length. [ 1242.766465][T30619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.802648][T30619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.822172][T30619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.854557][T30619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.863169][T30619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.871647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.891335][T30619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.900794][T30619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.931193][T30619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.939661][T30619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.067068][T30622] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1244.101253][T30644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4713'. [ 1244.139497][T30644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4713'. [ 1244.819072][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4718'. [ 1245.447294][T30669] FAULT_INJECTION: forcing a failure. [ 1245.447294][T30669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.512513][T30669] CPU: 0 UID: 0 PID: 30669 Comm: syz.5.4724 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1245.512547][T30669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1245.512559][T30669] Call Trace: [ 1245.512568][T30669] [ 1245.512577][T30669] dump_stack_lvl+0x189/0x250 [ 1245.512614][T30669] ? __pfx____ratelimit+0x10/0x10 [ 1245.512642][T30669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1245.512673][T30669] ? __pfx__printk+0x10/0x10 [ 1245.512695][T30669] ? __might_fault+0xb0/0x130 [ 1245.512730][T30669] should_fail_ex+0x414/0x560 [ 1245.512764][T30669] _copy_from_user+0x2d/0xb0 [ 1245.512787][T30669] __sys_connect+0x123/0x440 [ 1245.512820][T30669] ? __fget_files+0x3a0/0x420 [ 1245.512844][T30669] ? __pfx___sys_connect+0x10/0x10 [ 1245.512889][T30669] ? __pfx_ksys_write+0x10/0x10 [ 1245.512918][T30669] __x64_sys_connect+0x7a/0x90 [ 1245.512958][T30669] do_syscall_64+0xfa/0x3b0 [ 1245.512985][T30669] ? lockdep_hardirqs_on+0x9c/0x150 [ 1245.513010][T30669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.513031][T30669] ? clear_bhb_loop+0x60/0xb0 [ 1245.513056][T30669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.513075][T30669] RIP: 0033:0x7fd2ba78e929 [ 1245.513094][T30669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.513111][T30669] RSP: 002b:00007fd2bb5b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1245.513133][T30669] RAX: ffffffffffffffda RBX: 00007fd2ba9b5fa0 RCX: 00007fd2ba78e929 [ 1245.513148][T30669] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 1245.513161][T30669] RBP: 00007fd2bb5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.513174][T30669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.513186][T30669] R13: 0000000000000000 R14: 00007fd2ba9b5fa0 R15: 00007ffe512aafa8 [ 1245.513218][T30669] [ 1245.522407][T30670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4725'. [ 1245.844807][T30674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.884013][T30670] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4725'. [ 1245.916435][T30681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.958050][T30670] netlink: 'syz.4.4725': attribute type 1 has an invalid length. [ 1245.976132][T30670] netlink: 'syz.4.4725': attribute type 3 has an invalid length. [ 1246.002884][T30670] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4725'. [ 1246.067718][T30674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.414792][T30691] netlink: 'syz.1.4733': attribute type 9 has an invalid length. [ 1246.442422][T30691] netlink: 'syz.1.4733': attribute type 7 has an invalid length. [ 1246.493613][T30691] netlink: 'syz.1.4733': attribute type 8 has an invalid length. [ 1246.948953][T30713] sctp: [Deprecated]: syz.0.4738 (pid 30713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1246.948953][T30713] Use struct sctp_sack_info instead [ 1247.006604][T30719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4740'. [ 1247.805920][T30742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4750'. [ 1247.832423][T30742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4750'. [ 1248.060836][T30748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4752'. [ 1248.441499][T30756] net_ratelimit: 473 callbacks suppressed [ 1248.441519][T30756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.010267][T30770] netlink: 'syz.4.4762': attribute type 1 has an invalid length. [ 1249.146709][T30778] __nla_validate_parse: 4 callbacks suppressed [ 1249.146730][T30778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4765'. [ 1249.150717][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1249.195216][T30774] xt_hashlimit: size too large, truncated to 1048576 [ 1249.721484][T30785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4767'. [ 1249.945787][T30790] FAULT_INJECTION: forcing a failure. [ 1249.945787][T30790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1249.990875][T30790] CPU: 1 UID: 0 PID: 30790 Comm: syz.3.4769 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1249.990913][T30790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1249.990926][T30790] Call Trace: [ 1249.990934][T30790] [ 1249.990943][T30790] dump_stack_lvl+0x189/0x250 [ 1249.990980][T30790] ? __pfx____ratelimit+0x10/0x10 [ 1249.991008][T30790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1249.991040][T30790] ? __pfx__printk+0x10/0x10 [ 1249.991062][T30790] ? __might_fault+0xb0/0x130 [ 1249.991095][T30790] should_fail_ex+0x414/0x560 [ 1249.991128][T30790] _copy_from_iter+0x1db/0x16f0 [ 1249.991164][T30790] ? rcu_is_watching+0x15/0xb0 [ 1249.991185][T30790] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1249.991209][T30790] ? __pfx__copy_from_iter+0x10/0x10 [ 1249.991242][T30790] ? __build_skb_around+0x257/0x3e0 [ 1249.991266][T30790] ? netlink_sendmsg+0x642/0xb30 [ 1249.991286][T30790] ? skb_put+0x11b/0x210 [ 1249.991310][T30790] netlink_sendmsg+0x6b2/0xb30 [ 1249.991402][T30790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.991428][T30790] ? aa_sock_msg_perm+0x94/0x160 [ 1249.991458][T30790] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1249.991484][T30790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.991506][T30790] __sock_sendmsg+0x219/0x270 [ 1249.991537][T30790] ____sys_sendmsg+0x505/0x830 [ 1249.991566][T30790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1249.991599][T30790] ? import_iovec+0x74/0xa0 [ 1249.991624][T30790] ___sys_sendmsg+0x21f/0x2a0 [ 1249.991650][T30790] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.991711][T30790] ? __fget_files+0x2a/0x420 [ 1249.991735][T30790] ? __fget_files+0x3a0/0x420 [ 1249.991770][T30790] __x64_sys_sendmsg+0x19b/0x260 [ 1249.991796][T30790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1249.991830][T30790] ? __pfx_ksys_write+0x10/0x10 [ 1249.991848][T30790] ? rcu_is_watching+0x15/0xb0 [ 1249.991872][T30790] ? do_syscall_64+0xbe/0x3b0 [ 1249.991903][T30790] do_syscall_64+0xfa/0x3b0 [ 1249.991929][T30790] ? lockdep_hardirqs_on+0x9c/0x150 [ 1249.991957][T30790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.991977][T30790] ? clear_bhb_loop+0x60/0xb0 [ 1249.992000][T30790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.992020][T30790] RIP: 0033:0x7f40daf8e929 [ 1249.992038][T30790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1249.992055][T30790] RSP: 002b:00007f40dbe76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1249.992077][T30790] RAX: ffffffffffffffda RBX: 00007f40db1b5fa0 RCX: 00007f40daf8e929 [ 1249.992092][T30790] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1249.992104][T30790] RBP: 00007f40dbe76090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.992117][T30790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.992129][T30790] R13: 0000000000000000 R14: 00007f40db1b5fa0 R15: 00007fff6dc7d288 [ 1249.992162][T30790] [ 1250.432164][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1250.654823][T30801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.663256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.686915][T30801] sctp: [Deprecated]: syz.0.4775 (pid 30801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1250.686915][T30801] Use struct sctp_sack_info instead [ 1250.772669][T30808] FAULT_INJECTION: forcing a failure. [ 1250.772669][T30808] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.785943][T30808] CPU: 0 UID: 0 PID: 30808 Comm: syz.4.4778 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1250.785971][T30808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1250.785983][T30808] Call Trace: [ 1250.785992][T30808] [ 1250.786000][T30808] dump_stack_lvl+0x189/0x250 [ 1250.786037][T30808] ? __pfx____ratelimit+0x10/0x10 [ 1250.786065][T30808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.786097][T30808] ? __pfx__printk+0x10/0x10 [ 1250.786123][T30808] ? __pfx___might_resched+0x10/0x10 [ 1250.786142][T30808] ? fs_reclaim_acquire+0x7d/0x100 [ 1250.786172][T30808] should_fail_ex+0x414/0x560 [ 1250.786206][T30808] should_failslab+0xa8/0x100 [ 1250.786230][T30808] __kmalloc_noprof+0xcb/0x4f0 [ 1250.786251][T30808] ? tomoyo_encode+0x28b/0x550 [ 1250.786285][T30808] tomoyo_encode+0x28b/0x550 [ 1250.786357][T30808] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1250.786390][T30808] ? tomoyo_domain+0xd9/0x130 [ 1250.786427][T30808] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1250.786452][T30808] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1250.786480][T30808] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1250.786525][T30808] ? __lock_acquire+0xab9/0xd20 [ 1250.786577][T30808] ? __fget_files+0x2a/0x420 [ 1250.786605][T30808] ? __fget_files+0x2a/0x420 [ 1250.786626][T30808] ? __fget_files+0x3a0/0x420 [ 1250.786647][T30808] ? __fget_files+0x2a/0x420 [ 1250.786676][T30808] security_file_ioctl+0xcb/0x2d0 [ 1250.786702][T30808] __se_sys_ioctl+0x47/0x170 [ 1250.786735][T30808] do_syscall_64+0xfa/0x3b0 [ 1250.786762][T30808] ? lockdep_hardirqs_on+0x9c/0x150 [ 1250.786788][T30808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.786808][T30808] ? clear_bhb_loop+0x60/0xb0 [ 1250.786833][T30808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.786852][T30808] RIP: 0033:0x7f2601f8e929 [ 1250.786870][T30808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.786887][T30808] RSP: 002b:00007f2602e46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.786909][T30808] RAX: ffffffffffffffda RBX: 00007f26021b5fa0 RCX: 00007f2601f8e929 [ 1250.786923][T30808] RDX: 0000200000000180 RSI: 00000000000089eb RDI: 0000000000000004 [ 1250.786936][T30808] RBP: 00007f2602e46090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.786949][T30808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.786960][T30808] R13: 0000000000000000 R14: 00007f26021b5fa0 R15: 00007ffe609abb78 [ 1250.786993][T30808] [ 1250.787082][T30808] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1251.617735][T30828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4786'. [ 1251.653214][T30826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4785'. [ 1251.679665][T30826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4785'. [ 1252.475325][T30864] FAULT_INJECTION: forcing a failure. [ 1252.475325][T30864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1252.475740][T30867] FAULT_INJECTION: forcing a failure. [ 1252.475740][T30867] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.502319][T30864] CPU: 1 UID: 0 PID: 30864 Comm: syz.5.4798 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1252.502347][T30864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1252.502360][T30864] Call Trace: [ 1252.502368][T30864] [ 1252.502376][T30864] dump_stack_lvl+0x189/0x250 [ 1252.502414][T30864] ? __pfx____ratelimit+0x10/0x10 [ 1252.502441][T30864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1252.502474][T30864] ? __pfx__printk+0x10/0x10 [ 1252.502496][T30864] ? __might_fault+0xb0/0x130 [ 1252.502529][T30864] should_fail_ex+0x414/0x560 [ 1252.502561][T30864] _copy_from_user+0x2d/0xb0 [ 1252.502584][T30864] ax25_ioctl+0x92c/0xca0 [ 1252.502616][T30864] ? __pfx_ax25_ioctl+0x10/0x10 [ 1252.502645][T30864] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1252.502671][T30864] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1252.502696][T30864] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1252.502719][T30864] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1252.502761][T30864] sock_do_ioctl+0xd9/0x300 [ 1252.502792][T30864] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1252.502816][T30864] ? __lock_acquire+0xab9/0xd20 [ 1252.502864][T30864] sock_ioctl+0x576/0x790 [ 1252.502893][T30864] ? __pfx_sock_ioctl+0x10/0x10 [ 1252.502919][T30864] ? __fget_files+0x2a/0x420 [ 1252.502942][T30864] ? __fget_files+0x3a0/0x420 [ 1252.502964][T30864] ? __fget_files+0x2a/0x420 [ 1252.502995][T30864] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1252.503025][T30864] ? __pfx_sock_ioctl+0x10/0x10 [ 1252.503050][T30864] __se_sys_ioctl+0xfc/0x170 [ 1252.503083][T30864] do_syscall_64+0xfa/0x3b0 [ 1252.503111][T30864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1252.503137][T30864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.503157][T30864] ? clear_bhb_loop+0x60/0xb0 [ 1252.503195][T30864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.503215][T30864] RIP: 0033:0x7fd2ba78e929 [ 1252.503233][T30864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.503251][T30864] RSP: 002b:00007fd2bb5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.503273][T30864] RAX: ffffffffffffffda RBX: 00007fd2ba9b5fa0 RCX: 00007fd2ba78e929 [ 1252.503288][T30864] RDX: 0000200000000180 RSI: 00000000000089eb RDI: 0000000000000004 [ 1252.503301][T30864] RBP: 00007fd2bb5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.503313][T30864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.503326][T30864] R13: 0000000000000000 R14: 00007fd2ba9b5fa0 R15: 00007ffe512aafa8 [ 1252.503358][T30864] [ 1252.503828][T30867] CPU: 0 UID: 0 PID: 30867 Comm: syz.0.4800 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1252.503853][T30867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1252.503865][T30867] Call Trace: [ 1252.503873][T30867] [ 1252.503881][T30867] dump_stack_lvl+0x189/0x250 [ 1252.503915][T30867] ? __pfx____ratelimit+0x10/0x10 [ 1252.503941][T30867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1252.503973][T30867] ? __pfx__printk+0x10/0x10 [ 1252.504001][T30867] ? __pfx___might_resched+0x10/0x10 [ 1252.504026][T30867] should_fail_ex+0x414/0x560 [ 1252.504060][T30867] should_failslab+0xa8/0x100 [ 1252.504085][T30867] __kmalloc_cache_noprof+0x70/0x3d0 [ 1252.504105][T30867] ? sctp_association_new+0x89/0x25f0 [ 1252.504125][T30867] ? __asan_memcpy+0x40/0x70 [ 1252.504158][T30867] sctp_association_new+0x89/0x25f0 [ 1252.504180][T30867] ? sctp_do_bind+0x65a/0x940 [ 1252.504208][T30867] ? __ipv6_addr_type+0x14d/0x2f0 [ 1252.504238][T30867] sctp_connect_new_asoc+0x2c5/0x690 [ 1252.504265][T30867] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1252.504290][T30867] ? __ipv6_addr_type+0x14d/0x2f0 [ 1252.504319][T30867] ? sctp_inet6_send_verify+0x6e/0x300 [ 1252.504347][T30867] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1252.504373][T30867] __sctp_connect+0x5ba/0xd50 [ 1252.504409][T30867] ? __pfx___sctp_connect+0x10/0x10 [ 1252.504453][T30867] sctp_inet_connect+0x12e/0x1e0 [ 1252.504494][T30867] __sys_connect+0x313/0x440 [ 1252.504526][T30867] ? __fget_files+0x3a0/0x420 [ 1252.504551][T30867] ? __pfx___sys_connect+0x10/0x10 [ 1252.504597][T30867] ? __pfx_ksys_write+0x10/0x10 [ 1252.504614][T30867] ? rcu_is_watching+0x15/0xb0 [ 1252.504643][T30867] __x64_sys_connect+0x7a/0x90 [ 1252.504675][T30867] do_syscall_64+0xfa/0x3b0 [ 1252.504702][T30867] ? lockdep_hardirqs_on+0x9c/0x150 [ 1252.504727][T30867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.504751][T30867] ? clear_bhb_loop+0x60/0xb0 [ 1252.504776][T30867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.504795][T30867] RIP: 0033:0x7f59cbd8e929 [ 1252.504813][T30867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.504829][T30867] RSP: 002b:00007f59ccbb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1252.504849][T30867] RAX: ffffffffffffffda RBX: 00007f59cbfb5fa0 RCX: 00007f59cbd8e929 [ 1252.504864][T30867] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 1252.504876][T30867] RBP: 00007f59ccbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.504888][T30867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.504900][T30867] R13: 0000000000000000 R14: 00007f59cbfb5fa0 R15: 00007fff70e0fba8 [ 1252.504933][T30867] [ 1253.311437][T30874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4802'. [ 1253.522080][T30884] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4807'. [ 1253.549072][T30884] team_slave_0: entered promiscuous mode [ 1253.555186][T30884] team_slave_1: entered promiscuous mode [ 1253.562417][T30884] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1253.571311][T30884] team_slave_0: left promiscuous mode [ 1253.576885][T30884] team_slave_1: left promiscuous mode [ 1254.168567][T30911] vlan3: entered promiscuous mode [ 1254.319028][T30916] FAULT_INJECTION: forcing a failure. [ 1254.319028][T30916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1254.388179][T30919] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4822'. [ 1254.402219][T30916] CPU: 1 UID: 0 PID: 30916 Comm: syz.0.4820 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1254.402249][T30916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1254.402262][T30916] Call Trace: [ 1254.402270][T30916] [ 1254.402279][T30916] dump_stack_lvl+0x189/0x250 [ 1254.402316][T30916] ? __pfx____ratelimit+0x10/0x10 [ 1254.402352][T30916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1254.402384][T30916] ? __pfx__printk+0x10/0x10 [ 1254.402418][T30916] should_fail_ex+0x414/0x560 [ 1254.402452][T30916] _copy_to_user+0x31/0xb0 [ 1254.402477][T30916] simple_read_from_buffer+0xe1/0x170 [ 1254.402505][T30916] proc_fail_nth_read+0x1df/0x250 [ 1254.402535][T30916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1254.402564][T30916] ? rw_verify_area+0x258/0x650 [ 1254.402595][T30916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1254.402623][T30916] vfs_read+0x200/0x980 [ 1254.402648][T30916] ? __pfx___mutex_lock+0x10/0x10 [ 1254.402677][T30916] ? __pfx_vfs_read+0x10/0x10 [ 1254.402698][T30916] ? __fget_files+0x2a/0x420 [ 1254.402727][T30916] ? __fget_files+0x3a0/0x420 [ 1254.402749][T30916] ? __fget_files+0x2a/0x420 [ 1254.402780][T30916] ksys_read+0x145/0x250 [ 1254.402798][T30916] ? __fget_files+0x3a0/0x420 [ 1254.402822][T30916] ? __pfx_ksys_read+0x10/0x10 [ 1254.402859][T30916] ? do_syscall_64+0xbe/0x3b0 [ 1254.402890][T30916] do_syscall_64+0xfa/0x3b0 [ 1254.402915][T30916] ? lockdep_hardirqs_on+0x9c/0x150 [ 1254.402939][T30916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.402959][T30916] ? clear_bhb_loop+0x60/0xb0 [ 1254.402983][T30916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.403002][T30916] RIP: 0033:0x7f59cbd8d33c [ 1254.403020][T30916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1254.403036][T30916] RSP: 002b:00007f59ccbb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1254.403058][T30916] RAX: ffffffffffffffda RBX: 00007f59cbfb5fa0 RCX: 00007f59cbd8d33c [ 1254.403072][T30916] RDX: 000000000000000f RSI: 00007f59ccbb40a0 RDI: 0000000000000003 [ 1254.403086][T30916] RBP: 00007f59ccbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1254.403097][T30916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.403109][T30916] R13: 0000000000000000 R14: 00007f59cbfb5fa0 R15: 00007fff70e0fba8 [ 1254.403140][T30916] [ 1254.727757][T30923] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1254.795022][T30919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4822'. [ 1255.228748][T30942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4830'. [ 1255.260340][T30942] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1255.481604][T30957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4836'. [ 1255.576171][T30958] syz_tun: entered allmulticast mode [ 1255.701771][T30956] syz_tun: left allmulticast mode [ 1255.752757][T30964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4838'. [ 1256.028049][T30979] netlink: 'syz.0.4846': attribute type 3 has an invalid length. [ 1256.038292][T30983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1256.049286][T30984] FAULT_INJECTION: forcing a failure. [ 1256.049286][T30984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.052965][T30979] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4846'. [ 1256.105218][T30984] CPU: 1 UID: 0 PID: 30984 Comm: syz.3.4847 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1256.105248][T30984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1256.105261][T30984] Call Trace: [ 1256.105269][T30984] [ 1256.105278][T30984] dump_stack_lvl+0x189/0x250 [ 1256.105314][T30984] ? __pfx____ratelimit+0x10/0x10 [ 1256.105341][T30984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.105373][T30984] ? __pfx__printk+0x10/0x10 [ 1256.105395][T30984] ? __might_fault+0xb0/0x130 [ 1256.105429][T30984] should_fail_ex+0x414/0x560 [ 1256.105463][T30984] _copy_from_user+0x2d/0xb0 [ 1256.105485][T30984] ___sys_recvmsg+0x12e/0x510 [ 1256.105516][T30984] ? __pfx____sys_recvmsg+0x10/0x10 [ 1256.105568][T30984] ? __fget_files+0x3a0/0x420 [ 1256.105605][T30984] do_recvmmsg+0x307/0x770 [ 1256.105638][T30984] ? __pfx_do_recvmmsg+0x10/0x10 [ 1256.105677][T30984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1256.105720][T30984] __x64_sys_recvmmsg+0x190/0x240 [ 1256.105745][T30984] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1256.105764][T30984] ? rcu_is_watching+0x15/0xb0 [ 1256.105788][T30984] ? do_syscall_64+0xbe/0x3b0 [ 1256.105824][T30984] do_syscall_64+0xfa/0x3b0 [ 1256.105851][T30984] ? lockdep_hardirqs_on+0x9c/0x150 [ 1256.105875][T30984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.105895][T30984] ? clear_bhb_loop+0x60/0xb0 [ 1256.105927][T30984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.105947][T30984] RIP: 0033:0x7f40daf8e929 [ 1256.105966][T30984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.105983][T30984] RSP: 002b:00007f40dbe76038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1256.106005][T30984] RAX: ffffffffffffffda RBX: 00007f40db1b5fa0 RCX: 00007f40daf8e929 [ 1256.106020][T30984] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 1256.106034][T30984] RBP: 00007f40dbe76090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.106045][T30984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.106057][T30984] R13: 0000000000000000 R14: 00007f40db1b5fa0 R15: 00007fff6dc7d288 [ 1256.106091][T30984] [ 1256.410119][T30989] netlink: 'syz.4.4849': attribute type 1 has an invalid length. [ 1256.459238][T30989] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4849'. [ 1256.499229][T30989] netlink: 'syz.4.4849': attribute type 1 has an invalid length. [ 1256.541568][T30989] netlink: 'syz.4.4849': attribute type 2 has an invalid length. [ 1256.550242][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.722566][T30998] syzkaller1: entered promiscuous mode [ 1256.736441][T30998] syzkaller1: entered allmulticast mode [ 1256.767883][T30998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1256.783682][T31003] FAULT_INJECTION: forcing a failure. [ 1256.783682][T31003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.806013][T31003] CPU: 1 UID: 0 PID: 31003 Comm: syz.3.4854 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1256.806044][T31003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1256.806057][T31003] Call Trace: [ 1256.806065][T31003] [ 1256.806074][T31003] dump_stack_lvl+0x189/0x250 [ 1256.806111][T31003] ? __pfx____ratelimit+0x10/0x10 [ 1256.806138][T31003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.806170][T31003] ? __pfx__printk+0x10/0x10 [ 1256.806192][T31003] ? __might_fault+0xb0/0x130 [ 1256.806232][T31003] should_fail_ex+0x414/0x560 [ 1256.806263][T31003] _copy_from_user+0x2d/0xb0 [ 1256.806287][T31003] ___sys_sendmsg+0x158/0x2a0 [ 1256.806312][T31003] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.806375][T31003] ? __fget_files+0x2a/0x420 [ 1256.806398][T31003] ? __fget_files+0x3a0/0x420 [ 1256.806448][T31003] __x64_sys_sendmsg+0x19b/0x260 [ 1256.806474][T31003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1256.806507][T31003] ? __pfx_ksys_write+0x10/0x10 [ 1256.806525][T31003] ? rcu_is_watching+0x15/0xb0 [ 1256.806550][T31003] ? do_syscall_64+0xbe/0x3b0 [ 1256.806582][T31003] do_syscall_64+0xfa/0x3b0 [ 1256.806608][T31003] ? lockdep_hardirqs_on+0x9c/0x150 [ 1256.806633][T31003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.806653][T31003] ? clear_bhb_loop+0x60/0xb0 [ 1256.806679][T31003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.806698][T31003] RIP: 0033:0x7f40daf8e929 [ 1256.806716][T31003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.806733][T31003] RSP: 002b:00007f40dbe76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.806755][T31003] RAX: ffffffffffffffda RBX: 00007f40db1b5fa0 RCX: 00007f40daf8e929 [ 1256.806769][T31003] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1256.806782][T31003] RBP: 00007f40dbe76090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.806795][T31003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.806806][T31003] R13: 0000000000000000 R14: 00007f40db1b5fa0 R15: 00007fff6dc7d288 [ 1256.806839][T31003] [ 1257.042698][T18630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.062221][T18630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.267490][T31013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4858'. [ 1257.472465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.553355][T19187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.209107][T31052] FAULT_INJECTION: forcing a failure. [ 1258.209107][T31052] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.262485][T31052] CPU: 1 UID: 0 PID: 31052 Comm: syz.0.4874 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1258.262517][T31052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1258.262531][T31052] Call Trace: [ 1258.262539][T31052] [ 1258.262548][T31052] dump_stack_lvl+0x189/0x250 [ 1258.262586][T31052] ? __pfx____ratelimit+0x10/0x10 [ 1258.262613][T31052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1258.262644][T31052] ? __pfx__printk+0x10/0x10 [ 1258.262673][T31052] ? __pfx___might_resched+0x10/0x10 [ 1258.262692][T31052] ? fs_reclaim_acquire+0x7d/0x100 [ 1258.262723][T31052] should_fail_ex+0x414/0x560 [ 1258.262757][T31052] should_failslab+0xa8/0x100 [ 1258.262782][T31052] __kmalloc_noprof+0xcb/0x4f0 [ 1258.262811][T31052] ? kfree+0x4d/0x440 [ 1258.262826][T31052] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1258.262862][T31052] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1258.262895][T31052] ? tomoyo_domain+0xd9/0x130 [ 1258.262931][T31052] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1258.262957][T31052] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1258.262985][T31052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1258.263030][T31052] ? __lock_acquire+0xab9/0xd20 [ 1258.263083][T31052] ? __fget_files+0x2a/0x420 [ 1258.263111][T31052] ? __fget_files+0x2a/0x420 [ 1258.263132][T31052] ? __fget_files+0x3a0/0x420 [ 1258.263154][T31052] ? __fget_files+0x2a/0x420 [ 1258.263182][T31052] security_file_ioctl+0xcb/0x2d0 [ 1258.263208][T31052] __se_sys_ioctl+0x47/0x170 [ 1258.263242][T31052] do_syscall_64+0xfa/0x3b0 [ 1258.263268][T31052] ? lockdep_hardirqs_on+0x9c/0x150 [ 1258.263294][T31052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.263315][T31052] ? clear_bhb_loop+0x60/0xb0 [ 1258.263341][T31052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.263360][T31052] RIP: 0033:0x7f59cbd8e929 [ 1258.263379][T31052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1258.263396][T31052] RSP: 002b:00007f59ccbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1258.263417][T31052] RAX: ffffffffffffffda RBX: 00007f59cbfb5fa0 RCX: 00007f59cbd8e929 [ 1258.263432][T31052] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000003 [ 1258.263445][T31052] RBP: 00007f59ccbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.263458][T31052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.263469][T31052] R13: 0000000000000000 R14: 00007f59cbfb5fa0 R15: 00007fff70e0fba8 [ 1258.263502][T31052] [ 1258.263511][T31052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1258.282397][T11064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.592519][T19187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.767209][T31063] FAULT_INJECTION: forcing a failure. [ 1258.767209][T31063] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.800493][T31063] CPU: 0 UID: 0 PID: 31063 Comm: syz.5.4878 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1258.800525][T31063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1258.800538][T31063] Call Trace: [ 1258.800545][T31063] [ 1258.800554][T31063] dump_stack_lvl+0x189/0x250 [ 1258.800590][T31063] ? __pfx____ratelimit+0x10/0x10 [ 1258.800616][T31063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1258.800649][T31063] ? __pfx__printk+0x10/0x10 [ 1258.800678][T31063] ? __pfx___might_resched+0x10/0x10 [ 1258.800703][T31063] should_fail_ex+0x414/0x560 [ 1258.800735][T31063] should_failslab+0xa8/0x100 [ 1258.800761][T31063] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1258.800783][T31063] ? __alloc_skb+0x112/0x2d0 [ 1258.800808][T31063] __alloc_skb+0x112/0x2d0 [ 1258.800832][T31063] netlink_sendmsg+0x5c6/0xb30 [ 1258.800864][T31063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1258.800889][T31063] ? aa_sock_msg_perm+0x94/0x160 [ 1258.800918][T31063] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1258.800945][T31063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1258.800967][T31063] __sock_sendmsg+0x219/0x270 [ 1258.801008][T31063] ____sys_sendmsg+0x505/0x830 [ 1258.801036][T31063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1258.801069][T31063] ? import_iovec+0x74/0xa0 [ 1258.801095][T31063] ___sys_sendmsg+0x21f/0x2a0 [ 1258.801121][T31063] ? __pfx____sys_sendmsg+0x10/0x10 [ 1258.801185][T31063] ? __fget_files+0x2a/0x420 [ 1258.801208][T31063] ? __fget_files+0x3a0/0x420 [ 1258.801244][T31063] __x64_sys_sendmsg+0x19b/0x260 [ 1258.801270][T31063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1258.801304][T31063] ? __pfx_ksys_write+0x10/0x10 [ 1258.801331][T31063] ? do_syscall_64+0xbe/0x3b0 [ 1258.801364][T31063] do_syscall_64+0xfa/0x3b0 [ 1258.801390][T31063] ? lockdep_hardirqs_on+0x9c/0x150 [ 1258.801416][T31063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.801436][T31063] ? clear_bhb_loop+0x60/0xb0 [ 1258.801462][T31063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.801481][T31063] RIP: 0033:0x7fd2ba78e929 [ 1258.801500][T31063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1258.801517][T31063] RSP: 002b:00007fd2bb5b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1258.801539][T31063] RAX: ffffffffffffffda RBX: 00007fd2ba9b5fa0 RCX: 00007fd2ba78e929 [ 1258.801554][T31063] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1258.801568][T31063] RBP: 00007fd2bb5b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.801580][T31063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.801592][T31063] R13: 0000000000000000 R14: 00007fd2ba9b5fa0 R15: 00007ffe512aafa8 [ 1258.801625][T31063] [ 1259.281215][T31026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4864'. [ 1259.634093][T19187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.697735][T31079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.729553][T31079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.743718][T31079] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4884'. [ 1259.808706][T31079] netlink: 'syz.5.4884': attribute type 28 has an invalid length. [ 1259.818736][T31079] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1260.338104][T31086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.352268][T31086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.380000][T31086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.390081][T31086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.572968][T31090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4888'. [ 1261.619995][T31125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4903'. [ 1261.657076][T31124] vlan2: entered allmulticast mode [ 1261.663181][T31124] bond0: entered allmulticast mode [ 1261.668479][T31124] bond_slave_0: entered allmulticast mode [ 1261.675050][T31124] bond_slave_1: entered allmulticast mode [ 1261.720734][T31125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1261.722483][T25680] net_ratelimit: 8 callbacks suppressed [ 1261.722505][T25680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.828283][T31124] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.923150][T31124] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.001718][T31143] sctp: [Deprecated]: syz.1.4906 (pid 31143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1262.001718][T31143] Use struct sctp_sack_info instead [ 1262.035711][T31124] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.107427][T31124] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.260143][T31124] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.334654][T31124] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.389652][T31124] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.434904][T31124] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.521918][T31158] FAULT_INJECTION: forcing a failure. [ 1262.521918][T31158] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.555173][T31158] CPU: 0 UID: 0 PID: 31158 Comm: syz.4.4912 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1262.555206][T31158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1262.555219][T31158] Call Trace: [ 1262.555227][T31158] [ 1262.555236][T31158] dump_stack_lvl+0x189/0x250 [ 1262.555273][T31158] ? __pfx____ratelimit+0x10/0x10 [ 1262.555300][T31158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1262.555331][T31158] ? __pfx__printk+0x10/0x10 [ 1262.555360][T31158] ? __pfx___might_resched+0x10/0x10 [ 1262.555385][T31158] should_fail_ex+0x414/0x560 [ 1262.555419][T31158] should_failslab+0xa8/0x100 [ 1262.555444][T31158] __kmalloc_cache_noprof+0x70/0x3d0 [ 1262.555465][T31158] ? alloc_netdev_mqs+0xbd5/0x11e0 [ 1262.555490][T31158] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 1262.555516][T31158] alloc_netdev_mqs+0xbd5/0x11e0 [ 1262.555550][T31158] br_add_bridge+0x39/0xf0 [ 1262.555582][T31158] br_ioctl_stub+0x526/0xc80 [ 1262.555604][T31158] ? trace_contention_end+0x39/0x120 [ 1262.555630][T31158] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1262.555658][T31158] ? sock_ioctl+0x4b4/0x790 [ 1262.555692][T31158] ? __lock_acquire+0xab9/0xd20 [ 1262.555738][T31158] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1262.555763][T31158] sock_ioctl+0x4d5/0x790 [ 1262.555793][T31158] ? __pfx_sock_ioctl+0x10/0x10 [ 1262.555819][T31158] ? __fget_files+0x2a/0x420 [ 1262.555841][T31158] ? __fget_files+0x3a0/0x420 [ 1262.555863][T31158] ? __fget_files+0x2a/0x420 [ 1262.555890][T31158] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1262.555921][T31158] ? __pfx_sock_ioctl+0x10/0x10 [ 1262.555946][T31158] __se_sys_ioctl+0xfc/0x170 [ 1262.555981][T31158] do_syscall_64+0xfa/0x3b0 [ 1262.556007][T31158] ? lockdep_hardirqs_on+0x9c/0x150 [ 1262.556033][T31158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.556053][T31158] ? clear_bhb_loop+0x60/0xb0 [ 1262.556078][T31158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.556097][T31158] RIP: 0033:0x7f2601f8e929 [ 1262.556115][T31158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1262.556133][T31158] RSP: 002b:00007f2602e46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1262.556155][T31158] RAX: ffffffffffffffda RBX: 00007f26021b5fa0 RCX: 00007f2601f8e929 [ 1262.556170][T31158] RDX: 0000200000000340 RSI: 00000000000089a0 RDI: 0000000000000003 [ 1262.556183][T31158] RBP: 00007f2602e46090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.556195][T31158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.556207][T31158] R13: 0000000000000000 R14: 00007f26021b5fa0 R15: 00007ffe609abb78 [ 1262.556241][T31158] [ 1262.847436][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.229510][T31181] FAULT_INJECTION: forcing a failure. [ 1263.229510][T31181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.233062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.259841][T31181] CPU: 1 UID: 0 PID: 31181 Comm: syz.5.4919 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1263.259872][T31181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1263.259885][T31181] Call Trace: [ 1263.259893][T31181] [ 1263.259902][T31181] dump_stack_lvl+0x189/0x250 [ 1263.259949][T31181] ? __pfx____ratelimit+0x10/0x10 [ 1263.259976][T31181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1263.260005][T31181] ? __pfx__printk+0x10/0x10 [ 1263.260026][T31181] ? __might_fault+0xb0/0x130 [ 1263.260057][T31181] should_fail_ex+0x414/0x560 [ 1263.260089][T31181] _copy_from_iter+0x1db/0x16f0 [ 1263.260124][T31181] ? rcu_is_watching+0x15/0xb0 [ 1263.260143][T31181] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1263.260164][T31181] ? __pfx__copy_from_iter+0x10/0x10 [ 1263.260196][T31181] ? __build_skb_around+0x257/0x3e0 [ 1263.260218][T31181] ? netlink_sendmsg+0x642/0xb30 [ 1263.260236][T31181] ? skb_put+0x11b/0x210 [ 1263.260258][T31181] netlink_sendmsg+0x6b2/0xb30 [ 1263.260307][T31181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.260331][T31181] ? aa_sock_msg_perm+0x94/0x160 [ 1263.260360][T31181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1263.260386][T31181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.260408][T31181] __sock_sendmsg+0x219/0x270 [ 1263.260438][T31181] ____sys_sendmsg+0x505/0x830 [ 1263.260465][T31181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1263.260497][T31181] ? import_iovec+0x74/0xa0 [ 1263.260522][T31181] ___sys_sendmsg+0x21f/0x2a0 [ 1263.260547][T31181] ? __pfx____sys_sendmsg+0x10/0x10 [ 1263.260608][T31181] ? __fget_files+0x2a/0x420 [ 1263.260630][T31181] ? __fget_files+0x3a0/0x420 [ 1263.260664][T31181] __x64_sys_sendmsg+0x19b/0x260 [ 1263.260697][T31181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1263.260729][T31181] ? __pfx_ksys_write+0x10/0x10 [ 1263.260756][T31181] ? do_syscall_64+0xbe/0x3b0 [ 1263.260788][T31181] do_syscall_64+0xfa/0x3b0 [ 1263.260814][T31181] ? lockdep_hardirqs_on+0x9c/0x150 [ 1263.260842][T31181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.260863][T31181] ? clear_bhb_loop+0x60/0xb0 [ 1263.260887][T31181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.260906][T31181] RIP: 0033:0x7fd2ba78e929 [ 1263.260925][T31181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.260953][T31181] RSP: 002b:00007fd2bb596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.260973][T31181] RAX: ffffffffffffffda RBX: 00007fd2ba9b6080 RCX: 00007fd2ba78e929 [ 1263.260987][T31181] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1263.261001][T31181] RBP: 00007fd2bb596090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.261012][T31181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.261022][T31181] R13: 0000000000000001 R14: 00007fd2ba9b6080 R15: 00007ffe512aafa8 [ 1263.261053][T31181] [ 1263.878214][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.893699][T31196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4923'. [ 1263.944753][T31198] FAULT_INJECTION: forcing a failure. [ 1263.944753][T31198] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.972827][T31198] CPU: 1 UID: 0 PID: 31198 Comm: syz.1.4927 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1263.972859][T31198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1263.972871][T31198] Call Trace: [ 1263.972879][T31198] [ 1263.972888][T31198] dump_stack_lvl+0x189/0x250 [ 1263.972925][T31198] ? __pfx____ratelimit+0x10/0x10 [ 1263.972953][T31198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1263.972985][T31198] ? __pfx__printk+0x10/0x10 [ 1263.973024][T31198] should_fail_ex+0x414/0x560 [ 1263.973058][T31198] should_failslab+0xa8/0x100 [ 1263.973083][T31198] __kmalloc_cache_noprof+0x70/0x3d0 [ 1263.973103][T31198] ? sctp_add_bind_addr+0x8c/0x370 [ 1263.973138][T31198] sctp_add_bind_addr+0x8c/0x370 [ 1263.973173][T31198] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1263.973207][T31198] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1263.973237][T31198] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1263.973268][T31198] ? sctp_v6_is_any+0x64/0x80 [ 1263.973289][T31198] ? sctp_copy_one_addr+0x93/0x360 [ 1263.973322][T31198] sctp_bind_addr_copy+0xb3/0x3c0 [ 1263.973352][T31198] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1263.973382][T31198] sctp_connect_new_asoc+0x2e0/0x690 [ 1263.973410][T31198] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1263.973430][T31198] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1263.973471][T31198] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1263.973500][T31198] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1263.973527][T31198] sctp_sendmsg+0x155c/0x2810 [ 1263.973563][T31198] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1263.973588][T31198] ? aa_sk_perm+0x81e/0x950 [ 1263.973620][T31198] ? __pfx_aa_sk_perm+0x10/0x10 [ 1263.973647][T31198] ? sock_rps_record_flow+0x19/0x410 [ 1263.973679][T31198] ? inet_sendmsg+0x2f4/0x370 [ 1263.973718][T31198] __sock_sendmsg+0x19c/0x270 [ 1263.973752][T31198] ____sys_sendmsg+0x52d/0x830 [ 1263.973783][T31198] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1263.973817][T31198] ? import_iovec+0x74/0xa0 [ 1263.973843][T31198] ___sys_sendmsg+0x21f/0x2a0 [ 1263.973873][T31198] ? __pfx____sys_sendmsg+0x10/0x10 [ 1263.973939][T31198] ? __fget_files+0x2a/0x420 [ 1263.973962][T31198] ? __fget_files+0x3a0/0x420 [ 1263.973999][T31198] __sys_sendmmsg+0x227/0x430 [ 1263.974028][T31198] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1263.974047][T31198] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1263.974108][T31198] ? ksys_write+0x22a/0x250 [ 1263.974131][T31198] ? __pfx_ksys_write+0x10/0x10 [ 1263.974147][T31198] ? rcu_is_watching+0x15/0xb0 [ 1263.974175][T31198] __x64_sys_sendmmsg+0xa0/0xc0 [ 1263.974200][T31198] do_syscall_64+0xfa/0x3b0 [ 1263.974227][T31198] ? lockdep_hardirqs_on+0x9c/0x150 [ 1263.974253][T31198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.974273][T31198] ? clear_bhb_loop+0x60/0xb0 [ 1263.974298][T31198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.974318][T31198] RIP: 0033:0x7ffa20f8e929 [ 1263.974336][T31198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.974352][T31198] RSP: 002b:00007ffa21dfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1263.974374][T31198] RAX: ffffffffffffffda RBX: 00007ffa211b5fa0 RCX: 00007ffa20f8e929 [ 1263.974389][T31198] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000003 [ 1263.974402][T31198] RBP: 00007ffa21dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.974415][T31198] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000002 [ 1263.974426][T31198] R13: 0000000000000000 R14: 00007ffa211b5fa0 R15: 00007ffd602ffe98 [ 1263.974460][T31198] [ 1264.473505][T28359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.592904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.683555][T31216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4933'. [ 1264.721183][T31216] netlink: 'syz.3.4933': attribute type 32 has an invalid length. [ 1264.921735][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.100256][T31236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.204865][T31243] bridge0: port 2(batadv53) entered blocking state [ 1265.214084][T31236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.224184][T31243] bridge0: port 2(batadv53) entered disabled state [ 1265.230935][T31243] batadv53: entered allmulticast mode [ 1265.254311][T31243] batadv53: entered promiscuous mode [ 1265.304092][T31236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.419828][T31249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4945'. [ 1265.493268][T31253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.502015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.624964][T31253] sctp: [Deprecated]: syz.0.4947 (pid 31253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1265.624964][T31253] Use struct sctp_sack_info instead [ 1265.700368][T31259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4948'. [ 1265.737779][T31256] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.818497][T31256] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.920968][T31256] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.958850][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.974215][T31263] FAULT_INJECTION: forcing a failure. [ 1265.974215][T31263] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.998339][T31256] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.001394][T31263] CPU: 0 UID: 0 PID: 31263 Comm: syz.4.4951 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1266.001426][T31263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1266.001441][T31263] Call Trace: [ 1266.001451][T31263] [ 1266.001461][T31263] dump_stack_lvl+0x189/0x250 [ 1266.001510][T31263] ? __pfx____ratelimit+0x10/0x10 [ 1266.001541][T31263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1266.001577][T31263] ? __pfx__printk+0x10/0x10 [ 1266.001609][T31263] ? __pfx___might_resched+0x10/0x10 [ 1266.001631][T31263] ? fs_reclaim_acquire+0x7d/0x100 [ 1266.001664][T31263] should_fail_ex+0x414/0x560 [ 1266.001702][T31263] should_failslab+0xa8/0x100 [ 1266.001731][T31263] __kmalloc_noprof+0xcb/0x4f0 [ 1266.001753][T31263] ? kfree+0x4d/0x440 [ 1266.001770][T31263] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1266.001810][T31263] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1266.001846][T31263] ? tomoyo_domain+0xd9/0x130 [ 1266.001886][T31263] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1266.001915][T31263] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1266.001951][T31263] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1266.002002][T31263] ? __lock_acquire+0xab9/0xd20 [ 1266.002060][T31263] ? __fget_files+0x2a/0x420 [ 1266.002091][T31263] ? __fget_files+0x2a/0x420 [ 1266.002115][T31263] ? __fget_files+0x3a0/0x420 [ 1266.002139][T31263] ? __fget_files+0x2a/0x420 [ 1266.002171][T31263] security_file_ioctl+0xcb/0x2d0 [ 1266.002201][T31263] __se_sys_ioctl+0x47/0x170 [ 1266.002238][T31263] do_syscall_64+0xfa/0x3b0 [ 1266.002268][T31263] ? lockdep_hardirqs_on+0x9c/0x150 [ 1266.002297][T31263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.002319][T31263] ? clear_bhb_loop+0x60/0xb0 [ 1266.002347][T31263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.002370][T31263] RIP: 0033:0x7f2601f8e929 [ 1266.002390][T31263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.002409][T31263] RSP: 002b:00007f2602e46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.002434][T31263] RAX: ffffffffffffffda RBX: 00007f26021b5fa0 RCX: 00007f2601f8e929 [ 1266.002450][T31263] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 1266.002466][T31263] RBP: 00007f2602e46090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.002479][T31263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.002498][T31263] R13: 0000000000000000 R14: 00007f26021b5fa0 R15: 00007ffe609abb78 [ 1266.002546][T31263] [ 1266.009682][T31263] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1266.193612][T31267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4953'. [ 1266.208753][ T1140] batman_adv: batadv53: No IGMP Querier present - multicast optimizations disabled [ 1266.282138][ T1140] batman_adv: batadv53: No MLD Querier present - multicast optimizations disabled [ 1266.593040][T30970] Bluetooth: hci2: command 0x0405 tx timeout [ 1266.728768][T31290] FAULT_INJECTION: forcing a failure. [ 1266.728768][T31290] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.741911][T31290] CPU: 1 UID: 0 PID: 31290 Comm: syz.1.4961 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1266.741944][T31290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1266.741957][T31290] Call Trace: [ 1266.741966][T31290] [ 1266.741974][T31290] dump_stack_lvl+0x189/0x250 [ 1266.742011][T31290] ? __pfx____ratelimit+0x10/0x10 [ 1266.742038][T31290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1266.742069][T31290] ? __pfx__printk+0x10/0x10 [ 1266.742108][T31290] should_fail_ex+0x414/0x560 [ 1266.742142][T31290] should_failslab+0xa8/0x100 [ 1266.742167][T31290] __kmalloc_cache_noprof+0x70/0x3d0 [ 1266.742188][T31290] ? sctp_add_bind_addr+0x8c/0x370 [ 1266.742222][T31290] sctp_add_bind_addr+0x8c/0x370 [ 1266.742266][T31290] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1266.742299][T31290] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1266.742329][T31290] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1266.742360][T31290] ? sctp_v6_is_any+0x64/0x80 [ 1266.742381][T31290] ? sctp_copy_one_addr+0x93/0x360 [ 1266.742414][T31290] sctp_bind_addr_copy+0xb3/0x3c0 [ 1266.742445][T31290] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1266.742476][T31290] sctp_connect_new_asoc+0x2e0/0x690 [ 1266.742503][T31290] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1266.742529][T31290] ? __ipv6_addr_type+0x14d/0x2f0 [ 1266.742558][T31290] ? sctp_inet6_send_verify+0x6e/0x300 [ 1266.742586][T31290] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1266.742613][T31290] __sctp_connect+0x5ba/0xd50 [ 1266.742649][T31290] ? __pfx___sctp_connect+0x10/0x10 [ 1266.742683][T31290] sctp_inet_connect+0x12e/0x1e0 [ 1266.742719][T31290] __sys_connect+0x313/0x440 [ 1266.742762][T31290] ? __fget_files+0x3a0/0x420 [ 1266.742785][T31290] ? __pfx___sys_connect+0x10/0x10 [ 1266.742830][T31290] ? __pfx_ksys_write+0x10/0x10 [ 1266.742846][T31290] ? rcu_is_watching+0x15/0xb0 [ 1266.742874][T31290] __x64_sys_connect+0x7a/0x90 [ 1266.742906][T31290] do_syscall_64+0xfa/0x3b0 [ 1266.742931][T31290] ? lockdep_hardirqs_on+0x9c/0x150 [ 1266.742956][T31290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.742975][T31290] ? clear_bhb_loop+0x60/0xb0 [ 1266.742999][T31290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.743018][T31290] RIP: 0033:0x7ffa20f8e929 [ 1266.743036][T31290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.743053][T31290] RSP: 002b:00007ffa21dfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1266.743072][T31290] RAX: ffffffffffffffda RBX: 00007ffa211b5fa0 RCX: 00007ffa20f8e929 [ 1266.743085][T31290] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 1266.743097][T31290] RBP: 00007ffa21dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.743109][T31290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1266.743119][T31290] R13: 0000000000000000 R14: 00007ffa211b5fa0 R15: 00007ffd602ffe98 [ 1266.743148][T31290] [ 1267.043884][T31291] net_ratelimit: 1 callbacks suppressed [ 1267.043903][T31291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.057958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.209647][T31296] FAULT_INJECTION: forcing a failure. [ 1267.209647][T31296] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.251360][T31296] CPU: 0 UID: 0 PID: 31296 Comm: syz.1.4966 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1267.251395][T31296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1267.251408][T31296] Call Trace: [ 1267.251423][T31296] [ 1267.251432][T31296] dump_stack_lvl+0x189/0x250 [ 1267.251468][T31296] ? __pfx____ratelimit+0x10/0x10 [ 1267.251496][T31296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1267.251528][T31296] ? __pfx__printk+0x10/0x10 [ 1267.251557][T31296] ? __pfx___might_resched+0x10/0x10 [ 1267.251575][T31296] ? fs_reclaim_acquire+0x7d/0x100 [ 1267.251606][T31296] should_fail_ex+0x414/0x560 [ 1267.251640][T31296] should_failslab+0xa8/0x100 [ 1267.251664][T31296] __kmalloc_noprof+0xcb/0x4f0 [ 1267.251683][T31296] ? kfree+0x4d/0x440 [ 1267.251699][T31296] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1267.251735][T31296] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1267.251767][T31296] ? tomoyo_domain+0xd9/0x130 [ 1267.251803][T31296] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1267.251828][T31296] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1267.251856][T31296] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1267.251901][T31296] ? __lock_acquire+0xab9/0xd20 [ 1267.251952][T31296] ? __fget_files+0x2a/0x420 [ 1267.251980][T31296] ? __fget_files+0x2a/0x420 [ 1267.252001][T31296] ? __fget_files+0x3a0/0x420 [ 1267.252023][T31296] ? __fget_files+0x2a/0x420 [ 1267.252052][T31296] security_file_ioctl+0xcb/0x2d0 [ 1267.252078][T31296] __se_sys_ioctl+0x47/0x170 [ 1267.252112][T31296] do_syscall_64+0xfa/0x3b0 [ 1267.252138][T31296] ? lockdep_hardirqs_on+0x9c/0x150 [ 1267.252164][T31296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.252184][T31296] ? clear_bhb_loop+0x60/0xb0 [ 1267.252209][T31296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.252228][T31296] RIP: 0033:0x7ffa20f8e929 [ 1267.252247][T31296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1267.252264][T31296] RSP: 002b:00007ffa21dfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1267.252285][T31296] RAX: ffffffffffffffda RBX: 00007ffa211b5fa0 RCX: 00007ffa20f8e929 [ 1267.252300][T31296] RDX: 00002000000000c0 RSI: 0000000000008983 RDI: 0000000000000003 [ 1267.252313][T31296] RBP: 00007ffa21dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.252326][T31296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.252338][T31296] R13: 0000000000000000 R14: 00007ffa211b5fa0 R15: 00007ffd602ffe98 [ 1267.252371][T31296] [ 1267.349178][T25674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.369904][T31298] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4965'. [ 1267.405569][T31296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1267.489086][T31302] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4968'. [ 1267.552783][T18630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.734154][T31311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.743214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.785328][T31311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.795928][ T7537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.847205][T31314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.856295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.083722][T31320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.128599][T31256] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.184489][T31256] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.206047][T31320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.260689][T31256] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.281835][T31320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1268.326897][T31256] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.508104][T31335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4978'. [ 1268.562300][T31340] tipc: Can't bind to reserved service type 0 [ 1268.586880][T31340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4977'. [ 1268.715294][T31349] tipc: Enabling of bearer rejected, already enabled [ 1269.147451][T31366] FAULT_INJECTION: forcing a failure. [ 1269.147451][T31366] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.201481][T31366] CPU: 1 UID: 0 PID: 31366 Comm: syz.3.4989 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1269.201513][T31366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1269.201526][T31366] Call Trace: [ 1269.201535][T31366] [ 1269.201544][T31366] dump_stack_lvl+0x189/0x250 [ 1269.201580][T31366] ? __pfx____ratelimit+0x10/0x10 [ 1269.201608][T31366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1269.201640][T31366] ? __pfx__printk+0x10/0x10 [ 1269.201665][T31366] ? __pfx___might_resched+0x10/0x10 [ 1269.201684][T31366] ? fs_reclaim_acquire+0x7d/0x100 [ 1269.201715][T31366] should_fail_ex+0x414/0x560 [ 1269.201749][T31366] should_failslab+0xa8/0x100 [ 1269.201774][T31366] __kmalloc_noprof+0xcb/0x4f0 [ 1269.201794][T31366] ? tomoyo_encode+0x28b/0x550 [ 1269.201829][T31366] tomoyo_encode+0x28b/0x550 [ 1269.201865][T31366] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1269.201897][T31366] ? tomoyo_domain+0xd9/0x130 [ 1269.201937][T31366] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1269.201961][T31366] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1269.201989][T31366] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1269.202032][T31366] ? __lock_acquire+0xab9/0xd20 [ 1269.202082][T31366] ? __fget_files+0x2a/0x420 [ 1269.202109][T31366] ? __fget_files+0x2a/0x420 [ 1269.202132][T31366] ? __fget_files+0x3a0/0x420 [ 1269.202154][T31366] ? __fget_files+0x2a/0x420 [ 1269.202182][T31366] security_file_ioctl+0xcb/0x2d0 [ 1269.202209][T31366] __se_sys_ioctl+0x47/0x170 [ 1269.202243][T31366] do_syscall_64+0xfa/0x3b0 [ 1269.202270][T31366] ? lockdep_hardirqs_on+0x9c/0x150 [ 1269.202304][T31366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.202324][T31366] ? clear_bhb_loop+0x60/0xb0 [ 1269.202349][T31366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.202369][T31366] RIP: 0033:0x7f40daf8e929 [ 1269.202388][T31366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1269.202405][T31366] RSP: 002b:00007f40dbe76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.202427][T31366] RAX: ffffffffffffffda RBX: 00007f40db1b5fa0 RCX: 00007f40daf8e929 [ 1269.202442][T31366] RDX: 00002000000000c0 RSI: 0000000000008983 RDI: 0000000000000003 [ 1269.202456][T31366] RBP: 00007f40dbe76090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.202468][T31366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.202480][T31366] R13: 0000000000000000 R14: 00007f40db1b5fa0 R15: 00007fff6dc7d288 [ 1269.202514][T31366] [ 1269.453293][T31366] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1269.858234][T31380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4995'. [ 1269.939633][T31383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4996'. [ 1270.117612][T31390] nbd: must specify a size in bytes for the device [ 1270.334543][T31396] sctp: [Deprecated]: syz.5.5001 (pid 31396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1270.334543][T31396] Use struct sctp_sack_info instead [ 1270.865069][T31407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1270.928956][T31407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.023165][T31407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1272.139639][T31444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5013'. [ 1272.214930][T31447] FAULT_INJECTION: forcing a failure. [ 1272.214930][T31447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1272.292130][T31447] CPU: 0 UID: 0 PID: 31447 Comm: syz.1.5014 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1272.292169][T31447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1272.292181][T31447] Call Trace: [ 1272.292190][T31447] [ 1272.292199][T31447] dump_stack_lvl+0x189/0x250 [ 1272.292234][T31447] ? __pfx____ratelimit+0x10/0x10 [ 1272.292263][T31447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1272.292293][T31447] ? __pfx__printk+0x10/0x10 [ 1272.292316][T31447] ? __might_fault+0xb0/0x130 [ 1272.292349][T31447] should_fail_ex+0x414/0x560 [ 1272.292383][T31447] _copy_from_user+0x2d/0xb0 [ 1272.292405][T31447] vlan_ioctl_handler+0x9d/0x650 [ 1272.292428][T31447] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1272.292445][T31447] ? __lock_acquire+0xab9/0xd20 [ 1272.292486][T31447] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1272.292506][T31447] sock_ioctl+0x60d/0x790 [ 1272.292536][T31447] ? __pfx_sock_ioctl+0x10/0x10 [ 1272.292562][T31447] ? __fget_files+0x2a/0x420 [ 1272.292585][T31447] ? __fget_files+0x3a0/0x420 [ 1272.292607][T31447] ? __fget_files+0x2a/0x420 [ 1272.292634][T31447] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1272.292665][T31447] ? __pfx_sock_ioctl+0x10/0x10 [ 1272.292689][T31447] __se_sys_ioctl+0xfc/0x170 [ 1272.292723][T31447] do_syscall_64+0xfa/0x3b0 [ 1272.292750][T31447] ? lockdep_hardirqs_on+0x9c/0x150 [ 1272.292776][T31447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.292797][T31447] ? clear_bhb_loop+0x60/0xb0 [ 1272.292821][T31447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.292841][T31447] RIP: 0033:0x7ffa20f8e929 [ 1272.292859][T31447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.292877][T31447] RSP: 002b:00007ffa21dfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.292898][T31447] RAX: ffffffffffffffda RBX: 00007ffa211b5fa0 RCX: 00007ffa20f8e929 [ 1272.292914][T31447] RDX: 00002000000000c0 RSI: 0000000000008983 RDI: 0000000000000003 [ 1272.292928][T31447] RBP: 00007ffa21dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.292941][T31447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.292953][T31447] R13: 0000000000000000 R14: 00007ffa211b5fa0 R15: 00007ffd602ffe98 [ 1272.292986][T31447] [ 1272.530937][T31450] Cannot find set identified by id 2 to match [ 1272.688136][T31456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5018'. [ 1272.704920][T31456] net_ratelimit: 9 callbacks suppressed [ 1272.704936][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.731407][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.739909][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.748705][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.761255][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.769871][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.778391][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.784697][T31458] sctp: [Deprecated]: syz.1.5018 (pid 31458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1272.784697][T31458] Use struct sctp_sack_info instead [ 1272.787123][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.893840][T31459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5018'. [ 1272.919352][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.992383][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.910633][T31484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.988507][T31484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.093891][T31484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.120482][T31498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5031'. [ 1274.753724][T31526] FAULT_INJECTION: forcing a failure. [ 1274.753724][T31526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.777450][T31526] CPU: 0 UID: 0 PID: 31526 Comm: syz.3.5041 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1274.777481][T31526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1274.777493][T31526] Call Trace: [ 1274.777502][T31526] [ 1274.777511][T31526] dump_stack_lvl+0x189/0x250 [ 1274.777547][T31526] ? __pfx____ratelimit+0x10/0x10 [ 1274.777574][T31526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1274.777606][T31526] ? __pfx__printk+0x10/0x10 [ 1274.777628][T31526] ? __might_fault+0xb0/0x130 [ 1274.777662][T31526] should_fail_ex+0x414/0x560 [ 1274.777702][T31526] _copy_from_user+0x2d/0xb0 [ 1274.777725][T31526] ___sys_recvmsg+0x12e/0x510 [ 1274.777756][T31526] ? __pfx____sys_recvmsg+0x10/0x10 [ 1274.777815][T31526] ? __might_fault+0xb0/0x130 [ 1274.777840][T31526] do_recvmmsg+0x307/0x770 [ 1274.777873][T31526] ? __pfx_do_recvmmsg+0x10/0x10 [ 1274.777910][T31526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1274.777960][T31526] __x64_sys_recvmmsg+0x190/0x240 [ 1274.777986][T31526] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1274.778008][T31526] ? rcu_is_watching+0x15/0xb0 [ 1274.778033][T31526] ? do_syscall_64+0xbe/0x3b0 [ 1274.778065][T31526] do_syscall_64+0xfa/0x3b0 [ 1274.778091][T31526] ? lockdep_hardirqs_on+0x9c/0x150 [ 1274.778117][T31526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.778137][T31526] ? clear_bhb_loop+0x60/0xb0 [ 1274.778162][T31526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.778182][T31526] RIP: 0033:0x7f40daf8e929 [ 1274.778200][T31526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1274.778219][T31526] RSP: 002b:00007f40dbe76038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1274.778241][T31526] RAX: ffffffffffffffda RBX: 00007f40db1b5fa0 RCX: 00007f40daf8e929 [ 1274.778256][T31526] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 1274.778270][T31526] RBP: 00007f40dbe76090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.778283][T31526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1274.778294][T31526] R13: 0000000000000000 R14: 00007f40db1b5fa0 R15: 00007fff6dc7d288 [ 1274.778327][T31526] [ 1275.282225][T31532] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5043'. [ 1276.237735][T31573] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1276.433645][T31577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1276.518332][T31583] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5060'. [ 1276.543508][T31581] netlink: 'syz.5.5059': attribute type 16 has an invalid length. [ 1276.548843][T31580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5058'. [ 1276.551601][T31581] netlink: 'syz.5.5059': attribute type 17 has an invalid length. [ 1276.561056][T31584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1276.700242][T31577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1276.919888][T31585] pim6reg1: entered promiscuous mode [ 1276.945341][T31585] pim6reg1: entered allmulticast mode [ 1279.372588][T31612] netlink: 'syz.1.5069': attribute type 13 has an invalid length. [ 1279.657740][T31622] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.788931][T31622] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.861384][T31630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5076'. [ 1279.917172][T31622] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.040121][T31622] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.340057][T31622] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.370461][T31622] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.396086][T31622] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.412385][T31641] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5078'. [ 1280.424008][T31640] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5078'. [ 1280.434885][T31644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5079'. [ 1280.512186][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1280.572552][T31622] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.907829][T31649] netlink: 410 bytes leftover after parsing attributes in process `syz.1.5080'. [ 1281.468340][T31672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5091'. [ 1281.538384][T31678] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5090'. [ 1281.599698][T31679] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5088'. [ 1281.620713][T31683] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.5092'. [ 1282.419662][T31713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5103'. [ 1282.495979][T31715] ------------[ cut here ]------------ [ 1282.501502][T31715] DEBUG_LOCKS_WARN_ON(1) [ 1282.501640][T31715] WARNING: CPU: 1 PID: 31715 at kernel/locking/lockdep.c:238 __lock_acquire+0x379/0xd20 [ 1282.501722][T31717] net_ratelimit: 264 callbacks suppressed [ 1282.501738][T31717] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1282.505951][T31715] Modules linked in: [ 1282.505972][T31715] CPU: 1 UID: 0 PID: 31715 Comm: syz.0.5104 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1282.505997][T31715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1282.506011][T31715] RIP: 0010:__lock_acquire+0x379/0xd20 [ 1282.506043][T31715] Code: eb 33 90 e8 19 99 1f 03 85 c0 74 22 83 3d 62 f7 02 0e 00 75 19 90 48 c7 c7 6c 85 b6 8d 48 c7 c6 57 03 a6 8d e8 18 ce e5 ff 90 <0f> 0b 90 90 90 31 c0 48 8b 3c 24 0f b6 98 c4 00 00 00 41 8b 46 20 [ 1282.506061][T31715] RSP: 0018:ffffc9000411f870 EFLAGS: 00010046 [ 1282.530723][T31717] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1282.533649][T31715] [ 1282.533659][T31715] RAX: 125df0eeed72d200 RBX: ffff8880588d9468 RCX: 0000000000080000 [ 1282.533676][T31715] RDX: ffffc9000c8d9000 RSI: 000000000000163a RDI: 000000000000163b [ 1282.533691][T31715] RBP: 000000000000190a R08: 0000000000000003 R09: 0000000000000004 [ 1282.533703][T31715] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: 0000000000000000 [ 1282.533719][T31715] R13: 0000000000000000 R14: ffff888079374718 R15: ffff8880793746f0 [ 1282.533735][T31715] FS: 00007f59ccbb46c0(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 [ 1282.533754][T31715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1282.533768][T31715] CR2: 0000001b3060fff8 CR3: 000000007fa08000 CR4: 00000000003526f0 [ 1282.533788][T31715] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1282.533801][T31715] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1282.533814][T31715] Call Trace: [ 1282.533823][T31715] [ 1282.533836][T31715] ? skb_queue_tail+0x30/0xf0 [ 1282.533869][T31715] lock_acquire+0x120/0x360 [ 1282.533899][T31715] ? skb_queue_tail+0x30/0xf0 [ 1282.533933][T31715] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1282.702276][T31715] ? skb_queue_tail+0x30/0xf0 [ 1282.706979][T31715] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1282.712880][T31715] ? do_raw_spin_unlock+0x122/0x240 [ 1282.718178][T31715] ? ax25_find_cb+0x308/0x3a0 [ 1282.722875][T31715] skb_queue_tail+0x30/0xf0 [ 1282.727394][T31715] ? rose_transmit_link+0x2b9/0x740 [ 1282.732603][T31715] rose_transmit_link+0x2ea/0x740 [ 1282.737641][T31715] rose_write_internal+0x11dc/0x1ac0 [ 1282.742953][T31715] ? lockdep_hardirqs_on+0x9c/0x150 [ 1282.748171][T31715] ? __pfx_rose_write_internal+0x10/0x10 [ 1282.753824][T31715] ? rose_route_free_lci+0x140/0x170 [ 1282.759131][T31715] ? rose_connect+0x822/0x10a0 [ 1282.763974][T31715] rose_connect+0x8ee/0x10a0 [ 1282.768575][T31715] ? __pfx_current_check_access_socket+0x10/0x10 [ 1282.774920][T31715] ? aa_sk_perm+0x81e/0x950 [ 1282.779435][T31715] ? __pfx_rose_connect+0x10/0x10 [ 1282.784468][T31715] ? aa_af_perm+0x270/0x2b0 [ 1282.788983][T31715] ? tomoyo_socket_connect_permission+0x164/0x290 [ 1282.795423][T31715] ? bpf_lsm_socket_connect+0x9/0x20 [ 1282.800724][T31715] __sys_connect+0x313/0x440 [ 1282.805337][T31715] ? __pfx___sys_connect+0x10/0x10 [ 1282.810486][T31715] ? rcu_is_watching+0x15/0xb0 [ 1282.815259][T31715] __x64_sys_connect+0x7a/0x90 [ 1282.820048][T31715] do_syscall_64+0xfa/0x3b0 [ 1282.824571][T31715] ? lockdep_hardirqs_on+0x9c/0x150 [ 1282.829784][T31715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.835862][T31715] ? clear_bhb_loop+0x60/0xb0 [ 1282.840552][T31715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.846453][T31715] RIP: 0033:0x7f59cbd8e929 [ 1282.850882][T31715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1282.870499][T31715] RSP: 002b:00007f59ccbb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1282.878924][T31715] RAX: ffffffffffffffda RBX: 00007f59cbfb5fa0 RCX: 00007f59cbd8e929 [ 1282.886920][T31715] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 000000000000000d [ 1282.894916][T31715] RBP: 00007f59cbe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1282.902919][T31715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1282.910926][T31715] R13: 0000000000000000 R14: 00007f59cbfb5fa0 R15: 00007fff70e0fba8 [ 1282.918947][T31715] [ 1282.921988][T31715] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1282.929287][T31715] CPU: 1 UID: 0 PID: 31715 Comm: syz.0.5104 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 1282.941019][T31715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1282.951089][T31715] Call Trace: [ 1282.954384][T31715] [ 1282.957329][T31715] dump_stack_lvl+0x99/0x250 [ 1282.961946][T31715] ? __asan_memcpy+0x40/0x70 [ 1282.966553][T31715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1282.971770][T31715] ? __pfx__printk+0x10/0x10 [ 1282.976376][T31715] panic+0x2db/0x790 [ 1282.980292][T31715] ? __pfx_panic+0x10/0x10 [ 1282.984742][T31715] __warn+0x31b/0x4b0 [ 1282.988738][T31715] ? __lock_acquire+0x379/0xd20 [ 1282.993605][T31715] ? __lock_acquire+0x379/0xd20 [ 1282.998474][T31715] report_bug+0x2be/0x4f0 [ 1283.002822][T31715] ? __lock_acquire+0x379/0xd20 [ 1283.007688][T31715] ? __lock_acquire+0x379/0xd20 [ 1283.012556][T31715] ? __lock_acquire+0x37b/0xd20 [ 1283.017421][T31715] handle_bug+0x84/0x160 [ 1283.021684][T31715] exc_invalid_op+0x1a/0x50 [ 1283.026207][T31715] asm_exc_invalid_op+0x1a/0x20 [ 1283.031072][T31715] RIP: 0010:__lock_acquire+0x379/0xd20 [ 1283.036551][T31715] Code: eb 33 90 e8 19 99 1f 03 85 c0 74 22 83 3d 62 f7 02 0e 00 75 19 90 48 c7 c7 6c 85 b6 8d 48 c7 c6 57 03 a6 8d e8 18 ce e5 ff 90 <0f> 0b 90 90 90 31 c0 48 8b 3c 24 0f b6 98 c4 00 00 00 41 8b 46 20 [ 1283.056185][T31715] RSP: 0018:ffffc9000411f870 EFLAGS: 00010046 [ 1283.062280][T31715] RAX: 125df0eeed72d200 RBX: ffff8880588d9468 RCX: 0000000000080000 [ 1283.070274][T31715] RDX: ffffc9000c8d9000 RSI: 000000000000163a RDI: 000000000000163b [ 1283.078263][T31715] RBP: 000000000000190a R08: 0000000000000003 R09: 0000000000000004 [ 1283.086262][T31715] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: 0000000000000000 [ 1283.094275][T31715] R13: 0000000000000000 R14: ffff888079374718 R15: ffff8880793746f0 [ 1283.102302][T31715] ? skb_queue_tail+0x30/0xf0 [ 1283.107011][T31715] lock_acquire+0x120/0x360 [ 1283.111534][T31715] ? skb_queue_tail+0x30/0xf0 [ 1283.116303][T31715] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1283.121529][T31715] ? skb_queue_tail+0x30/0xf0 [ 1283.126226][T31715] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1283.132140][T31715] ? do_raw_spin_unlock+0x122/0x240 [ 1283.137360][T31715] ? ax25_find_cb+0x308/0x3a0 [ 1283.142054][T31715] skb_queue_tail+0x30/0xf0 [ 1283.146600][T31715] ? rose_transmit_link+0x2b9/0x740 [ 1283.151810][T31715] rose_transmit_link+0x2ea/0x740 [ 1283.156851][T31715] rose_write_internal+0x11dc/0x1ac0 [ 1283.162160][T31715] ? lockdep_hardirqs_on+0x9c/0x150 [ 1283.167388][T31715] ? __pfx_rose_write_internal+0x10/0x10 [ 1283.173047][T31715] ? rose_route_free_lci+0x140/0x170 [ 1283.178352][T31715] ? rose_connect+0x822/0x10a0 [ 1283.183129][T31715] rose_connect+0x8ee/0x10a0 [ 1283.187735][T31715] ? __pfx_current_check_access_socket+0x10/0x10 [ 1283.194090][T31715] ? aa_sk_perm+0x81e/0x950 [ 1283.198607][T31715] ? __pfx_rose_connect+0x10/0x10 [ 1283.203644][T31715] ? aa_af_perm+0x270/0x2b0 [ 1283.208163][T31715] ? tomoyo_socket_connect_permission+0x164/0x290 [ 1283.214600][T31715] ? bpf_lsm_socket_connect+0x9/0x20 [ 1283.219904][T31715] __sys_connect+0x313/0x440 [ 1283.224518][T31715] ? __pfx___sys_connect+0x10/0x10 [ 1283.229654][T31715] ? rcu_is_watching+0x15/0xb0 [ 1283.234430][T31715] __x64_sys_connect+0x7a/0x90 [ 1283.239213][T31715] do_syscall_64+0xfa/0x3b0 [ 1283.243733][T31715] ? lockdep_hardirqs_on+0x9c/0x150 [ 1283.248943][T31715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.255021][T31715] ? clear_bhb_loop+0x60/0xb0 [ 1283.259717][T31715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.265621][T31715] RIP: 0033:0x7f59cbd8e929 [ 1283.270053][T31715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1283.289679][T31715] RSP: 002b:00007f59ccbb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1283.298118][T31715] RAX: ffffffffffffffda RBX: 00007f59cbfb5fa0 RCX: 00007f59cbd8e929 [ 1283.306107][T31715] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 000000000000000d [ 1283.314087][T31715] RBP: 00007f59cbe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1283.322065][T31715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.330049][T31715] R13: 0000000000000000 R14: 00007f59cbfb5fa0 R15: 00007fff70e0fba8 [ 1283.338058][T31715] [ 1283.341420][T31715] Kernel Offset: disabled [ 1283.345753][T31715] Rebooting in 86400 seconds..