last executing test programs: 2.875931877s ago: executing program 2 (id=3317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0xfffffffe, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.673236964s ago: executing program 4 (id=3319): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x402, 0x1002, @empty}, 0x1c) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) (rerun: 64) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x1a, &(0x7f0000000440)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0xb, 0xa, 0x1, 0x10, 0xfffffffffffffffc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000000c0)='GPL\x00', 0x9, 0x39, &(0x7f00000001c0)=""/57, 0x41100, 0x4, '\x00', 0x0, @fallback=0x12, r1, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xe, 0xfffffff9, 0x1}, 0x10, 0x0, r2, 0x8, &(0x7f0000000540)=[r1, r2, r1, r2, r1], &(0x7f00000005c0)=[{0x0, 0x3, 0x3, 0x5}, {0x3, 0x1, 0x8, 0x8}, {0x4, 0x2, 0x3, 0x8}, {0x5, 0x1, 0xd, 0x3}, {0x3, 0x2, 0x2, 0x7}, {0x5, 0x5, 0x8, 0x9}, {0x5, 0x4, 0x6, 0xb}, {0x4, 0x4, 0xe, 0x5}], 0x10, 0xffffff80}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xfffffffe, 0x0, 0x4, 0x0, &(0x7f0000000080)="36e1010a", 0x0}, 0x50) (async, rerun: 32) socket$kcm(0x2, 0x2, 0x73) (async, rerun: 32) r4 = socket$kcm(0x2, 0x2, 0x73) close(r4) (async) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r6) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) (async, rerun: 32) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000080)) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) (async) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r8, 0xffffffff) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) (async, rerun: 64) r12 = accept4(r8, 0x0, 0x0, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f0000000380), &(0x7f0000000580)=0x8) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x9300}, @val={0x1, 0x80, 0x5, 0x8, 0xb33, 0xa0}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="e2ef2b7a4e17", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@arp={0x806, @generic={0x339, 0x6007, 0x6, 0x0, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}}}}}, 0x34) 2.596899851s ago: executing program 4 (id=3320): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x70b, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x324, 0x4000051}, 0x40000a0) 1.308562455s ago: executing program 4 (id=3323): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000c4c0000000c0a010300000000000000000100000008000440000000000900010073797a300000000024000380200b00000000018018000b801400018010000100636f756e7465720004000280140000001000010000000000000000000000000a"], 0xd0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xffff}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000019c0)=""/4084, 0xff4}, {&(0x7f0000000a40)=""/193, 0xc1}], 0x2}}], 0x1, 0x10000, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x58) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) 1.188063853s ago: executing program 2 (id=3327): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) 1.05834956s ago: executing program 4 (id=3331): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) 990.504147ms ago: executing program 0 (id=3332): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000008000000911181000000903e946f5f3cba8a46757cba0000e3a40800000000000000af7618211483213cf8d6d0953c560578fdee5842822e7eccb2ef05344376adfa9bc612fe6290e71f20445762724da9cb7caff0f1ff3bb0ed2054e0f8214645dca6ac2b3e40f249370c35e6a477d77a003b579cb098efae632f197c0194d480161adcb1faaed625b8ba165827f875c5caaae3b32269b6df3f91f8e56fc3023ba1b6d8766e91e87e8f2a2684904cb0d9eb8e9da8361f4318646bf0023b08603268c1ffd78fc40ed8da2127803f8b85a77a191082f19eb716b812c1c1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 984.182329ms ago: executing program 3 (id=3333): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4081008000000006110800000000000a60000000000000095000000000000002708bf5d6df57e4036e97f802a67fdc2ee21b92ca9f507707dd754479a8dcf28b7ce595ab47e7a5396f780ee222b42395b5664f0c435febc86e01cd2cf1190b290320885b36f24493454294552dfaa3a17a7462612e5f8980fd439b09ee96e4c0ca8581e36cc8acfdfdd08b7856e8cf498d2d7ff6abd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 887.235341ms ago: executing program 3 (id=3334): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000b0102000000000000000003000001080002400000000208000340000001000f0001007368"], 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x41840) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000200)="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", 0x1a1, 0x0, 0x0, 0x0) 887.033213ms ago: executing program 2 (id=3335): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(r0, 0x8b1a, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) 854.435779ms ago: executing program 0 (id=3337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x0, 0x82, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r0], 0x74}, 0x1, 0x0, 0x0, 0x30040083}, 0x20000004) setsockopt(r0, 0x6, 0x8, &(0x7f0000000080)="74a66a58cee887f1f42a51a265f714b653282d06a8c66de54c2ed7092f3c29120799b41f6c8a4d7dcdb60b09e4d935fef16cecde86588064528581fcb7714718a77a64c1e201a733d65788ddeb6dca7b78a27ab21d4b0b2c05fd9204eef2f874c7476d2aa6fb25c6474e59048bf5eec332fc873eb3ce72203afcb03ef724e0534108db747adfcfdf245713dce9fe261f649911ea2119eaf9b732dbc59ea40a2a928d620bcc89676adb4fcaaf4d6d4246964079d8c1f739ef5247219a46b06534083dcfec946ffa7522a8ffae85d3f101cd7bd6916b45bdaa6d131e26ec7cb82209", 0xe1) 781.221658ms ago: executing program 1 (id=3338): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x7c, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x294}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x86a, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x90}}, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) close(0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) socket(0x400000000010, 0x3, 0x0) 702.77531ms ago: executing program 0 (id=3339): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000003200)=""/4031, 0xfbf}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f0000002180)=""/100, 0x64}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000800)=""/150, 0x96}, {&(0x7f0000000240)=""/159, 0x9f}], 0xa}, 0x40002002) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gre0\x00'}) 702.095104ms ago: executing program 1 (id=3340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0xfed, 0x0, [0x0, 0x80, 0x9, 0x4, 0x2], [0xffffffffffff9b75, 0xbf, 0x9, 0x100, 0x4, 0x40000000000000, 0x0, 0x5, 0x1, 0x8000000000000001, 0xb, 0x6, 0x4, 0x37, 0x4, 0x100, 0xff, 0x0, 0x100000001, 0x6, 0x10, 0x5, 0x7fffffffffffffff, 0x3, 0x1, 0x2cee, 0x2, 0xf, 0x6, 0x2, 0x2, 0x2, 0x0, 0x2, 0x6, 0x401, 0x9, 0x4, 0x81, 0x1, 0x8, 0x2, 0x8, 0x3, 0x6, 0x3, 0xfffffffffffffffe, 0x2, 0x592d, 0x1, 0x40, 0xe, 0x5, 0x7, 0xf6dd, 0x800, 0x4, 0xa, 0x4, 0xffffffffffff9a07, 0x1000, 0x9c1e, 0xe0b, 0x3, 0x9ce1, 0xcd, 0xd, 0x5, 0xdd07, 0x4, 0xffffffff, 0x0, 0x7, 0x2a, 0x5, 0x7, 0x3ff, 0xdf4, 0x7, 0x2, 0x0, 0x8000000000000000, 0xbf7b, 0x3, 0x2, 0x5, 0x7, 0x6e7, 0x8, 0x3, 0xffff, 0x49b, 0x2, 0x401, 0x80000001, 0xe, 0x40, 0x101, 0x5, 0x0, 0x3d18, 0x80000001, 0x8, 0x0, 0xfffffffffffffffa, 0x3, 0x5, 0x7, 0x9, 0x40, 0x4, 0x4, 0x1, 0x4, 0x80, 0x1, 0x7, 0x0, 0x400, 0x4, 0x5]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={r1, 0x1, 0x1, [0x1ff, 0x3ff, 0xf, 0xe, 0x3], [0xfff, 0xf7, 0x1, 0xb, 0x4fc3, 0x9, 0xfffffffffffffffd, 0x0, 0x7, 0xfffffffffffffc9b, 0x1120, 0xffffffffffffff7f, 0x9, 0x6, 0x2, 0x9, 0x4, 0x8, 0xe, 0x8, 0x7fffffffffffffff, 0x6, 0x3, 0x1, 0x3, 0xdcf, 0x8000000000000001, 0x7, 0x8, 0x100, 0x3, 0x8001, 0x9, 0x3, 0x1, 0x9, 0x7, 0x0, 0x7, 0x85, 0xf2c, 0x6, 0x1, 0x2c, 0x2, 0x0, 0xc, 0x4, 0x101, 0x0, 0x7, 0x3, 0x10, 0x5, 0x35eea89a, 0xfffffffffffffff0, 0x5, 0x7b15, 0x100, 0x5, 0x7fffffffffffffff, 0x7, 0x6, 0x6, 0x5fd5, 0x0, 0x98, 0x1000, 0x10, 0x4, 0x10001, 0x10001, 0x3, 0x9, 0x3, 0xfffffffffffffff9, 0x401, 0x4, 0x40, 0x10001, 0x5, 0x2, 0xd2db, 0x2, 0x1, 0x9, 0x6, 0xc4, 0x6, 0x4, 0x200, 0x784, 0x1, 0x0, 0x7, 0x10, 0xff, 0xd, 0x8, 0x1c0000, 0x7, 0x6be, 0x3, 0x7f, 0x8, 0xffffffffffffffff, 0x7, 0x8a4a, 0x3, 0xd, 0x81, 0x6, 0x0, 0x9, 0x8, 0x3ff, 0x3, 0x30000000000, 0x10, 0xffffffffffffe3fc, 0x6]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@generic="5839c3c709"]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404cc05}, 0xc000) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x51}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002b40)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c497a306a282d2e8718c20be643f662657b785368fc869fa03daceec68f4637f7f8e135eabbf72444b91a3e35a2a13ac2b2921d5e7", 0x35}], 0x1, &(0x7f0000000140), 0x0, 0x81}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="f806434881264b96407fdd389a8cb18af3ddad1c83d4e17f1a20c8510d275fbbb852a2b58b7c0eb42a51a7a0a2fc7cb961d0c891078a9bda01a850d71ead00c35e5eb0d0f004ed6ec943c46c8954b7ccfc702b", 0x53}, {&(0x7f00000002c0)="697de45358f59449c136c46eed4e391532867b7a325d011d45a15f6cbcf4603ced788e5f7d115516f7d38a9b09d57032a0833a27cfaecd145f004e7b7c6a17ae65f2e093d680926a0770bc122e2ab2faf406d9e5e7c552792478b58ddb54dcd4d91a2cb16a8693534b01dd3da11c761b98568d36be377849c2a8e3b954030cbbc4248469fcd50ed90e6bcddd2a6a768162fc3a088202c010", 0x98}, {&(0x7f0000000380)="094695b8a9531a1db84c0f46030a6e4471cf1317fdbf63e909bacea8aeef22db10024c5c59cf1b38fa3c23bd03052eb0dca33aaf4af42e9b59a860cdf05f1b720ea30d623041117fc103f58aae5d16c2e2139b80a98a594ede2e67df52940fbf2b19b4a1be6da0f37a", 0x69}, {&(0x7f0000000cc0)="0a48063a62dc30a4eddeacf5384be53f5702f49f1cd9e053bede9976c3663e758bc957b1178594baeb2cf6099bff28a13c28544290afdc4377ea8b4887056c99d2c4d8023d1beb099ef698fbe48d8ea21221bb02ec0878996989720a14364c180412d657ee2fd0c6c25c441f2d50df1a0692cb78ba93f9ca00364d3d70ed203e1e7a30c38e5f3b16cabd4c512015adf10ed7640775b86cc3ca38f3b1e02aaa37f62e7b2f2a", 0xa5}], 0x4, &(0x7f0000000d80)=[@assoc={0x18, 0x117, 0x4, 0xe3}], 0x18, 0x8000}, {0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="ee99aea05dd54a30c10a4d9c230ac199364190b2c25a4dcc6e28b3b67227173e57ae1ae8bbbe79b0d25fbe9f46f0bd5a55beabeb24cb7213f5272ea401ca7ab48ac3a039a76255a68d1502749bdaec54ae20d1b2f87e57943be3e77f6004866df9ccbd89580c9f13bb4641d2655c627309eb1d63083bf1452a277aa98c1e56c52e9e59731dd5a20087b2f3609fe130e6b3cf0df38fc1519ec0492ee248", 0x9d}], 0x1, &(0x7f0000000ec0)=[@assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x100, 0x117, 0x2, 0xec, "3d7137695da6724314e3900db33beaa49c3ea6f612d91d66828f042b6b8470740d1ebb349d1fc9ac3ff976e97cbd9de027a0a718f87e9477369f6b66b7d112d999a57c245c6fe3080b7f95195820795a5529fccdabe48103daebb09f460e2a2557e518a698f2147b5f50a9decee51e9f3d65c09b68b8994c521e2df389147960311ca9ccf6ae19dba55458f044d7780d0aba3127d5e05866f741bbfe89dd9e937d6fe2565277819e174ed1f4a9078ca85df56ffb8485441887212fabf9b40852741e57496cba85c9e94f34959e74f3caee12eeb79908070c3b152a36a8af130dccc052706ab1bfb3cca7015d"}, @op={0x18}], 0x160, 0x10}, {0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="9241072b51ae46fc5afcf31e43832a214a4c44108b6398d8328a989e094f354180d4202aaff931a2a498685d3cafd83dc22b0835e96f0008d8c102ae3df08fe08404d8131d93119bad670a1134232a48ad42951835301e3695967b1906574628f9657dbd2245f73d6ad57eae44ba49948e0f963e64f3e50cb81f8f10cc0b5e70c6e4107e68fced58ac73f85f5e10d9a0", 0x90}, {&(0x7f0000002100)="adc144eb891f45a69c0617e2365b37af587fbc8c02d614e8fcc9205bc8730ddac7bfbafd64aad2861912eb925eedd09255b28bb9354fbd8fc619252ce7d800a7951f6b140d5ead6f8ae98dc7d3d58cbbf5d064c30df538d32b77267f1f32126b6614dec0aa987018e57172137e0fcba0e82718fd475f5b33c8f3e49a53160e72e850d6a82b4c86c62355737d8857", 0x8e}, {&(0x7f00000021c0)="dfa38043", 0x4}, {&(0x7f0000002200)="9d32be930de42ec88b97e9a211613e8b4eb67f6ea7d8e770912a7f0488a3c0c988e0ee65678474be79f3797ad13c63b530622dcccb642c0ce71d729c29e3e2ab1c35a0bbdb4a5938d512a687861f8eb2e6bcad131bbe9c2213518bc8ee1be2", 0x5f}, {&(0x7f0000002280)="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", 0xfe}, {&(0x7f0000002380)="ead546c6d20b825194a1b01e91a4858d256de3301ebd25121366bd9bfd318b86e6146cb718eb78b61f39b90601ba7f953e61db7f2dc396be8a1f94050b100ff8455066c655e9f76c1582cb580324f4ab3a645a6e02d771d22c888a77c9ecd019ce47adc7c19c3dc77d96284b3eb21b3a71cfc946b322bbc288f360c4a395c64336232de9c757f2b5d7230eadd28bc10c85898102", 0x94}, {&(0x7f0000002440)="c773554f2ee4fdfd6edc04cdcf6a95d1e6b704b37c595d397f35d5c5a116e5ab83879eba81ce7457ec26f1756d34714fac1d390687fdfcdb392b5f6bf3a9f59d090a3fb7d5e0bc55313e95061b73efe6d065c15b9354d86d3114a5907cad1c3bcbf92cef1219b373ff79c66a77f71cd17155aa6aaad6a16e043cc2bcb757fc8b87d938617aa67192ebf5aae1a2a91136a0e450ca73cb5f5f57514a40789f355e15df021c6523375b3a7188ba13553f6a1e45aaad46ecc7bd221303ed88daa775c05b316532ee0169de8a916ffb00044f2a29bc7388de25893743f148630f5985e1ea087edc738dc782b073", 0xeb}, {&(0x7f0000002540)="7a7071800f502c195246889a673bb2ed4e61bd61a01666961f556081e20df077ed44c7dff2bfddee252b764a1419a8c8468947c85ca65e80b198ad11cc3068a04c6bc8cf63458626b6e2070c34f10da4ece5c9e844f3805d762377eb9b112a53b733a29ca95d9bad21b081fe666a7c80449a8bd57290cf400b396d6bfac7a5c36d96e44da6cfed4385ba32627a93c7e8e38f7307c4c2f613", 0x98}, {&(0x7f0000002600)="a490838b3c64bf6ae47c4f2aea3d5c12e49d3581b2d14bab75b2814d6c7febad6e6af37c11eaeba9e3937e9d1a8fa23c7620f43ffc2484b24a64329935825ca8f759c9bf945cf809610b4ff6d6748f8f4b6dc18db926176391e65771ba6aab6f4cafa9604e8810a41ba40f7f97f32306e48bf36b2d2e39fa9015155c3d284a8bd8002d919be5ba763f2df9198a8aca8fc4dc500fc7e9c0704f6a6a89c9bf3efabdf8dcda44050e06ddf1a7e4109beb0a7cda12e38b5c0ff3bc2f28e91c", 0xbd}], 0xa, 0x0, 0x0, 0x20000080}, {0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002780)="ab908c86cb36d511512a519088eeea2d798a6f43309bdd8a6ff01d8308279d619a72e123d8e8c8393890adad0e4cbff3ee377a1c10842d81d96dcaaa9c5130e6406f9ba7ebb9a97198a1b16dd145d625dab10053fee6a0994cb6e5d5d3a697518e8f1c02e098eb5bce95d95db50e093ba387996bb41021bc1fe4d241c385f668696084392d0f6a9fefc6fbb45c5a23d119c1fdba8d284996ac", 0x99}, {&(0x7f0000002840)}, {&(0x7f0000002880)="b6f22e948e9e9f49ab984c7ea53e5b0124fb4b5e8fc689083811a516a8a55fe81bf468542034d751141714e92dc3f249af52f7", 0x33}], 0x3, &(0x7f0000002c80)=ANY=[@ANYBLOB="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"], 0x210, 0x4}], 0x5, 0x4) 600.789386ms ago: executing program 3 (id=3341): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1000000, 0x0, 0x3, 0x1}, 0x8) 599.954199ms ago: executing program 2 (id=3342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x90) 528.006291ms ago: executing program 1 (id=3343): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x158, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "78ea41250ffb79208518f15af695b9b9b2615997e1714641f8b64295a6da3351"}}, @TIPC_NLA_NODE_ID={0xe, 0x3, "fa9b561314e11db84ad2"}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3d}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff6fbc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 507.094379ms ago: executing program 3 (id=3344): socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) 498.731067ms ago: executing program 1 (id=3345): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x124, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0x3b}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x811}, 0x4000040) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r4 = socket$inet(0x2, 0xa, 0x9) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x48, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c0000001000030526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=r11, @ANYBLOB="6800128009000100766c616e000000005800028e78000100020000000600090081000000100004800c0001000900000181000000340003800c00010008000000030000000c00010003000000080000000c00deff09000000040000000c00010000000000010000800a0d0200aaaaaaaaaaaa0000"], 0x9c}}, 0x0) (async) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, r11}, 0xc) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 460.956303ms ago: executing program 0 (id=3346): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) 392.770473ms ago: executing program 2 (id=3347): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xafda, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(anubis-generic)\x00'}, 0x58) 392.584766ms ago: executing program 3 (id=3348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) 320.923713ms ago: executing program 3 (id=3349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xce}, @TCA_TBF_PRATE64={0xc, 0x5, 0x2018b0106dc6f663}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 237.909349ms ago: executing program 2 (id=3350): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x7c, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x294}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x86a, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x90}}, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1}, 0xc) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) close(0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) socket(0x400000000010, 0x3, 0x0) 184.978075ms ago: executing program 1 (id=3351): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000480)="96bc14585c62", 0x6}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x64000000, 0x34}}], 0x18, 0x1000000}, 0x0) 156.797944ms ago: executing program 4 (id=3352): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x423c, 0x8}, 0xc) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000001c0)={{r0}, "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"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9404, 0xc574450d1af3b5bc}}, 0x20}, 0x1, 0x0, 0x0, 0x2004c000}, 0x44800) listen(r1, 0x1) 93.827907ms ago: executing program 1 (id=3353): sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (fail_nth: 30) 37.002819ms ago: executing program 0 (id=3354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0060002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}}, 0x0) 35.875011ms ago: executing program 4 (id=3355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) gettid() sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x10b85, 0x49060}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0xd}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=@delchain={0xf80, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0x9}, {0xb, 0x9}, {0xffff, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x6fc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x9}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x370, 0x2, [@m_sample={0xfc, 0x20, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x0, 0x5, 0x2, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x79}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffffffc0}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0xa, 0x4, 0x1, 0x30000}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x400, 0x8, 0x5, 0x3, 0x81}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x800}]}, {0x4f, 0x6, "102ac2ba77fa28cfd79e110702ed23ef349e77260d1740166f6f14552a45c67b27b10023decd09bf0e923e8d095a88b7ce7a82221069a2ae94c953866c93398ed438fe33a4780810b07533"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0xdc, 0x13, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xde2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0xee, 0x2, 0x81, 0x4}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x359}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4c, 0x6, "7ff7ab7e18bb93c7811785094733cfd05733d16be9896d1c3b4fe4289c6874dc7b8623a432ee56dedc418c4e8b4e5f7cac1d6d2fed58f863f3011b4e4e25335957d09f5f598e9a10"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xc4, 0x4, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xa4}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa2}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2a0c}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_PRIO={0x8, 0x3, @val=0x400}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x2a, 0x6, "8377cf08260a6906dc27a5080778578c04d9ee21e7e0f40c3eead27d52c9d1883c53b090157d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0xd0, 0x1f, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "417a2f5de83694e834a01a09a145cea0"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010102}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "ae2dbc0b5413145418e49b5392e3944b"}]}, {0x3a, 0x6, "06609b1df5e76097daf2fe150d6c019aa6c1223d9f21ce01a0d102ef21805a555f86c800cbb178549d4dff0c331dcddc6948b1145bc6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xb}}, @TCA_MATCHALL_ACT={0x358, 0x2, [@m_ct={0x78, 0x1b, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_MARK={0x8, 0x5, 0x2319}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}]}, {0x23, 0x6, "11063f0b80bb708444b656abe40bdbc6d68b7ef64a2e935aeffabd902e172e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xd0, 0x15, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3bde}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x79, 0x6, "3c6bbb352db48c9b8edaaf89820c7c65494ad6f42111fd645ec8364bb948dd198aecfc215873f04889039102134bd31cfc044c015bc35b7bff3f9e78ee838c16323401d702e20d50f6bfd510c849d73bb1d24a2f23753159206b8123740159149711c923e46dbed82ddfa1a17a11d741a9ba5b7430"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x5c, 0xe, 0x0, 0x0, {{0xd}, {0x4}, {0x2c, 0x6, "4629f0f902a808d6a44d7ec3fa39d4748900f142ab5fcfb6ca921a644028475afde8accf38e66f27"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x8c, 0x17, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x5c, 0x6, "e9b220e43d1bbb9a799c34233e5e03d3b7199d0a38afc988ba5c5f2b0c06ad51f7425d82315545eb726c893228b80f0d3d716429dd054ae8296805e7a71de6981a210da018bf867c37b38f563788ab0d1ba7372aad1648e4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_ctinfo={0x124, 0x6, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffff8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffc}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0xc0, 0x6, "099e9a20b1ad8c10549490db13ad46b2ddf5e9af029ae8384dcac97df8c611719f05285b49d78acdecb7cae538aa301822df0301989ae82d54ab65ed2370d0deb322d1f0246733a6d0b3726c30daa03059c6a67ae1ad595d74e40823002e9c60ad98bbde4e622aeb590322b9bdbfd22dc9ea150ca755567e87dfa1412b52d6eb8126b9caf8c6b68bf08cb666e134c2e7f2e9bc0bc32439e7cb31ba372a7c922f45c3c03797d0860deb31a9a85a8ebb474eda43b2edf42dee66e3bf8d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x6}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x838, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x9f8}, @TCA_U32_HASH={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_SEL={0x1e4, 0x5, {0xd, 0x3, 0x2, 0x0, 0x3, 0x26f6, 0x8, 0x4, [{0xc, 0x4000000, 0x2, 0x8b}, {0x7fffffff, 0x40, 0x0, 0x6}, {0x3323a4c8, 0x3, 0x10c, 0x9}, {0x7, 0x2fc, 0x6a, 0xc03ce637}, {0x7ff, 0x6, 0x8, 0x1ff}, {0x2, 0x9a, 0x3, 0x80000001}, {0x1, 0x7ff, 0x6, 0xfffff000}, {0x8, 0xf2e, 0x8, 0x7fffffff}, {0x1, 0x10, 0x3, 0xfff}, {0x3, 0x3, 0x7, 0x7}, {0x3, 0x41, 0x5, 0x9}, {0x1, 0x1, 0x7, 0x8}, {0xfffffff7, 0x81, 0x7, 0x8}, {0x7f, 0x9, 0xe, 0x1f}, {0x1, 0x3, 0x8, 0x9504}, {0x3f8, 0x6, 0xfffffffa, 0x3}, {0x1, 0xfa5, 0xf1, 0x6}, {0x0, 0x9, 0x6, 0x1e}, {0x6a, 0x0, 0x8, 0xfffffffd}, {0xa, 0x5, 0x5, 0x6}, {0x0, 0x4, 0x6, 0x5}, {0x6, 0xe38, 0x6, 0x7}, {0x5, 0x5, 0x8b, 0x6}, {0x10000, 0x3, 0xa5a7, 0x8}, {0x3, 0x9, 0xfffffffd, 0x800}, {0x6, 0x4, 0x7}, {0x3f0, 0x0, 0x80000001, 0x800}, {0x101, 0x4, 0x1, 0x5}, {0x7f, 0x0, 0x2, 0xcb92}]}}, @TCA_U32_ACT={0x630, 0x7, [@m_tunnel_key={0x114, 0xf, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffc, 0x2, 0x10000000, 0x9, 0xd6fec10}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0xa7, 0x6, "8d00979af482ccfa1e9b8b6e85055144965d291860940e8a0278596947fe4143ec9621ab8d30e60ddae323655d3bc99e97e58bac8ee2fe79a2ff0a08abda090b6e356ae0224f71c5352052dff0852900db3cbf74452e1f06905328f4312f0b3c286cac8aead35a801454a46ecbdba65a7ccc74ec2745401dd79d700d50774fd699f1d8ce720637075fc4b94ab49214a6f40d40aa35e58fd82a9230f74c0edb9f93edcd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1c4, 0x6, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x101, 0x8, 0x267, 0x3}, @local, @empty, 0xffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0x2, 0x3, 0x1, 0x5}, @rand_addr=0x64010100, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x3, 0x5, 0x8, 0x8}, @loopback, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x6, 0x5, 0x2, 0x10000}, @multicast2, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x0, 0x401, 0x6000}, @remote, @broadcast, 0x0, 0x1}}]}, {0xd1, 0x6, "520b43d36ac1cb109209ac33eb16410c27f2da678b001012d201b4e29c9813f5dce7181571905b809ea776638fc39fa7b68a2a64146a80bfebb2162ea99e5b2ffaff7c603f3df7ae636d5cb20a759002c08f3ada4e4fc201015b7ab84181a9cdcfc72360e52a19abb4788b2ebd3de8e5cb61dedb1fd629199d4cc383d518fddbb12eb68ca5a66a4dd5c50ec1186e7be96a81e9d78456eb2e1b7528f0d0b589493470d1fcf4ccb97092b4f71bc7a6272d0feaa1fd375a6ba69fe99cfc3daeef9eca1b7f9ac855ddb7a1c3e44c1f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x124, 0x19, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xcd8f, 0xf1, 0x2, 0x1, 0xfffffffc}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x7, 0x2, 0x7fffffff, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}]}, {0xa5, 0x6, "b77706d3241b5936edb985644fc8aa468b7ef76aada4a5f0fb6cce9fa2422411e01f09b68c3ecf40934bed89fd3d27e9136a853e343ce4f3e412d54b306382c13256975dbc2edd193e6dec22178f14be61a4e23f04536448f5760317b3239fd752bd492e08c147a352667e52fbde4c7df268632f520f110019895de9e86b06fc7813929bc1d45286429829d54d0669b9e60b34b7568a1aff7856f76f1bad15ac64"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0xd4, 0x1a, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x41ea}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x200}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x401}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_PRIO={0x8, 0x3, @val=0xf6}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x19, 0x6, "038f52b8dcc287d4aa0a3dbebd082c70ae2c383585"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x15c, 0x4, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x100, 0x6}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1, 0xe80}, @empty, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xfffffffb, 0x10000000, 0x800, 0x7}, @remote, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0xe6, 0x10000000, 0x7, 0x5}, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6d6, 0xffffffffffffffff, 0x8001, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffffff}}]}, {0x6a, 0x6, "aa89c94a0f9ab30850d2fa27765a955559231037999c8558ac9a4b331c41bec9dc9d088d96ef336656587b642363fb22e7b23b52f33f38f78648b116a1395363774b9071779a223f6d664e9a0d4d0a8883408fa43a2b3640860b409fa526431a8691ca2f6a6a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xb54e}]}, 0xf80}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$tun(r8, &(0x7f0000000100)={@val={0x0, 0x18}, @void, @llc={@llc={0x8e, 0xf0, "8c"}}}, 0x7) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, 0x140e, 0x300, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x200000c0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) setsockopt$sock_linger(r10, 0x1, 0x3d, &(0x7f00000002c0)={0x1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b7000000000095f1ff0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 0s ago: executing program 0 (id=3356): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @local, 0x0}, &(0x7f0000000180)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x4, 0x1, 0x1, 0x1, 0x1, 0xfffffffffffffff8, 0xffffffffffffffff}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x5c, '\x00', r0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) connect(r1, &(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) kernel console output (not intermixed with test programs): 892211][T12979] RDX: 00000000040000a0 RSI: 00002000000003c0 RDI: 0000000000000004 [ 260.892222][T12979] RBP: 00007f631747e090 R08: 0000000000000000 R09: 0000000000000000 [ 260.892232][T12979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.892242][T12979] R13: 00007f63167e6038 R14: 00007f63167e5fa0 R15: 00007ffc7442ab68 [ 260.892274][T12979] [ 261.516272][T12996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2492'. [ 261.818291][T12966] bond0: (slave netdevsim0): Releasing backup interface [ 261.902995][T12994] tipc: Enabling of bearer rejected, failed to enable media [ 262.043132][T12996] bond10 (unregistering): Released all slaves [ 262.144395][T12998] syzkaller0: entered promiscuous mode [ 262.150116][T12998] syzkaller0: entered allmulticast mode [ 262.249094][T13026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2494'. [ 262.285603][T13022] syzkaller0: entered promiscuous mode [ 262.348320][T13022] syzkaller0: entered allmulticast mode [ 262.452817][T13035] tipc: Enabling of bearer rejected, failed to enable media [ 262.509443][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.527593][T13038] netlink: 'syz.2.2499': attribute type 19 has an invalid length. [ 262.569528][ T5999] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.588949][ T5999] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.668222][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2501'. [ 262.687183][T13050] veth0: Caught tx_queue_len zero misconfig [ 262.754953][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.940352][T13066] tipc: Enabling of bearer rejected, failed to enable media [ 262.981704][T13066] syzkaller0: entered promiscuous mode [ 262.997037][T13066] syzkaller0: entered allmulticast mode [ 263.037123][T13066] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 263.063351][T13073] syzkaller0: entered promiscuous mode [ 263.098395][T13073] syzkaller0: entered allmulticast mode [ 263.178658][T13082] syzkaller0: entered promiscuous mode [ 263.184162][T13082] syzkaller0: entered allmulticast mode [ 263.193597][T13084] syzkaller1: entered promiscuous mode [ 263.199226][T13084] syzkaller1: entered allmulticast mode [ 263.537780][T13100] syzkaller0: entered promiscuous mode [ 263.543401][T13100] syzkaller0: entered allmulticast mode [ 263.552751][T13111] FAULT_INJECTION: forcing a failure. [ 263.552751][T13111] name failslab, interval 1, probability 0, space 0, times 0 [ 263.556545][T13107] tipc: Enabling of bearer rejected, failed to enable media [ 263.585923][T13111] CPU: 1 UID: 0 PID: 13111 Comm: syz.4.2520 Not tainted syzkaller #0 PREEMPT(full) [ 263.585946][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.585957][T13111] Call Trace: [ 263.585963][T13111] [ 263.585972][T13111] dump_stack_lvl+0x189/0x250 [ 263.585998][T13111] ? __pfx____ratelimit+0x10/0x10 [ 263.586019][T13111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.586042][T13111] ? __pfx__printk+0x10/0x10 [ 263.586064][T13111] ? __lock_acquire+0xab9/0xd20 [ 263.586090][T13111] should_fail_ex+0x414/0x560 [ 263.586120][T13111] should_failslab+0xa8/0x100 [ 263.586140][T13111] kmem_cache_alloc_noprof+0x74/0x6e0 [ 263.586164][T13111] ? skb_clone+0x212/0x3a0 [ 263.586198][T13111] skb_clone+0x212/0x3a0 [ 263.586220][T13111] __netlink_deliver_tap+0x404/0x850 [ 263.586258][T13111] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.586283][T13111] netlink_deliver_tap+0x19c/0x1b0 [ 263.586308][T13111] netlink_unicast+0x7fa/0x9e0 [ 263.586338][T13111] ? __pfx_netlink_unicast+0x10/0x10 [ 263.586362][T13111] ? netlink_sendmsg+0x642/0xb30 [ 263.586384][T13111] ? skb_put+0x11b/0x210 [ 263.586410][T13111] netlink_sendmsg+0x805/0xb30 [ 263.586441][T13111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.586466][T13111] ? aa_sock_msg_perm+0xf1/0x1d0 [ 263.586492][T13111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.586507][T13111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.586531][T13111] __sock_sendmsg+0x21c/0x270 [ 263.586555][T13111] ____sys_sendmsg+0x505/0x830 [ 263.586579][T13111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.586607][T13111] ? import_iovec+0x74/0xa0 [ 263.586628][T13111] ___sys_sendmsg+0x21f/0x2a0 [ 263.586646][T13111] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.586700][T13111] ? __fget_files+0x2a/0x420 [ 263.586716][T13111] ? __fget_files+0x3a0/0x420 [ 263.586744][T13111] __x64_sys_sendmsg+0x19b/0x260 [ 263.586764][T13111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.586793][T13111] ? __pfx_ksys_write+0x10/0x10 [ 263.586821][T13111] ? do_syscall_64+0xbe/0xfa0 [ 263.586845][T13111] do_syscall_64+0xfa/0xfa0 [ 263.586865][T13111] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.586885][T13111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.586903][T13111] ? clear_bhb_loop+0x60/0xb0 [ 263.586925][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.586942][T13111] RIP: 0033:0x7fb40958efc9 [ 263.586957][T13111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.586970][T13111] RSP: 002b:00007fb40a3a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.586990][T13111] RAX: ffffffffffffffda RBX: 00007fb4097e6090 RCX: 00007fb40958efc9 [ 263.587003][T13111] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 263.587014][T13111] RBP: 00007fb40a3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 263.587025][T13111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.587036][T13111] R13: 00007fb4097e6128 R14: 00007fb4097e6090 R15: 00007ffdbcfd82e8 [ 263.587065][T13111] [ 263.589271][T13104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.463257][T13127] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2522'. [ 264.542955][ T5828] IPVS: starting estimator thread 0... [ 264.635631][T13130] IPVS: using max 29 ests per chain, 69600 per kthread [ 265.166449][T13136] FAULT_INJECTION: forcing a failure. [ 265.166449][T13136] name failslab, interval 1, probability 0, space 0, times 0 [ 265.204975][T13136] CPU: 0 UID: 0 PID: 13136 Comm: syz.4.2525 Not tainted syzkaller #0 PREEMPT(full) [ 265.205012][T13136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.205024][T13136] Call Trace: [ 265.205032][T13136] [ 265.205040][T13136] dump_stack_lvl+0x189/0x250 [ 265.205068][T13136] ? __pfx____ratelimit+0x10/0x10 [ 265.205090][T13136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.205113][T13136] ? __pfx__printk+0x10/0x10 [ 265.205135][T13136] ? __pfx___might_resched+0x10/0x10 [ 265.205155][T13136] ? fs_reclaim_acquire+0x7d/0x100 [ 265.205186][T13136] should_fail_ex+0x414/0x560 [ 265.205216][T13136] should_failslab+0xa8/0x100 [ 265.205237][T13136] __kmalloc_cache_noprof+0x6f/0x6f0 [ 265.205261][T13136] ? nf_tables_newtable+0x435/0x1890 [ 265.205279][T13136] ? nla_strcmp+0x106/0x140 [ 265.205301][T13136] nf_tables_newtable+0x435/0x1890 [ 265.205342][T13136] nfnetlink_rcv+0x11d9/0x2590 [ 265.205404][T13136] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 265.205443][T13136] ? ref_tracker_free+0x63a/0x7d0 [ 265.205492][T13136] ? __netlink_deliver_tap+0x807/0x850 [ 265.205517][T13136] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.205560][T13136] netlink_unicast+0x82f/0x9e0 [ 265.205593][T13136] ? __pfx_netlink_unicast+0x10/0x10 [ 265.205618][T13136] ? netlink_sendmsg+0x642/0xb30 [ 265.205640][T13136] ? skb_put+0x11b/0x210 [ 265.205669][T13136] netlink_sendmsg+0x805/0xb30 [ 265.205704][T13136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.205732][T13136] ? aa_sock_msg_perm+0xf1/0x1d0 [ 265.205759][T13136] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.205777][T13136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.205802][T13136] __sock_sendmsg+0x21c/0x270 [ 265.205827][T13136] ____sys_sendmsg+0x505/0x830 [ 265.205852][T13136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.205880][T13136] ? import_iovec+0x74/0xa0 [ 265.205905][T13136] ___sys_sendmsg+0x21f/0x2a0 [ 265.205926][T13136] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.205985][T13136] ? __fget_files+0x2a/0x420 [ 265.206006][T13136] ? __fget_files+0x3a0/0x420 [ 265.206034][T13136] __x64_sys_sendmsg+0x19b/0x260 [ 265.206055][T13136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.206084][T13136] ? __pfx_ksys_write+0x10/0x10 [ 265.206113][T13136] ? do_syscall_64+0xbe/0xfa0 [ 265.206138][T13136] do_syscall_64+0xfa/0xfa0 [ 265.206157][T13136] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.206177][T13136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.206195][T13136] ? clear_bhb_loop+0x60/0xb0 [ 265.206218][T13136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.206235][T13136] RIP: 0033:0x7fb40958efc9 [ 265.206252][T13136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.206268][T13136] RSP: 002b:00007fb40a3c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.206288][T13136] RAX: ffffffffffffffda RBX: 00007fb4097e5fa0 RCX: 00007fb40958efc9 [ 265.206301][T13136] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 265.206313][T13136] RBP: 00007fb40a3c5090 R08: 0000000000000000 R09: 0000000000000000 [ 265.206324][T13136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.206335][T13136] R13: 00007fb4097e6038 R14: 00007fb4097e5fa0 R15: 00007ffdbcfd82e8 [ 265.206368][T13136] [ 265.257481][T13142] syzkaller0: entered promiscuous mode [ 265.531879][T13142] syzkaller0: entered allmulticast mode [ 265.664556][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2531'. [ 265.857319][T13166] syzkaller0: entered promiscuous mode [ 265.862840][T13166] syzkaller0: entered allmulticast mode [ 265.911050][T13171] tipc: Enabling of bearer rejected, failed to enable media [ 266.246912][T13181] syzkaller0: entered promiscuous mode [ 266.252417][T13181] syzkaller0: entered allmulticast mode [ 266.321981][T13195] FAULT_INJECTION: forcing a failure. [ 266.321981][T13195] name failslab, interval 1, probability 0, space 0, times 0 [ 266.369520][T13195] CPU: 1 UID: 0 PID: 13195 Comm: syz.4.2538 Not tainted syzkaller #0 PREEMPT(full) [ 266.369546][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.369558][T13195] Call Trace: [ 266.369565][T13195] [ 266.369573][T13195] dump_stack_lvl+0x189/0x250 [ 266.369601][T13195] ? __pfx____ratelimit+0x10/0x10 [ 266.369622][T13195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.369644][T13195] ? __pfx__printk+0x10/0x10 [ 266.369669][T13195] ? __pfx___might_resched+0x10/0x10 [ 266.369694][T13195] should_fail_ex+0x414/0x560 [ 266.369725][T13195] should_failslab+0xa8/0x100 [ 266.369745][T13195] kmem_cache_alloc_node_noprof+0x77/0x710 [ 266.369769][T13195] ? __alloc_skb+0x112/0x2d0 [ 266.369800][T13195] __alloc_skb+0x112/0x2d0 [ 266.369828][T13195] netlink_ack+0x146/0xa50 [ 266.369849][T13195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.369873][T13195] ? __asan_memcpy+0x40/0x70 [ 266.369895][T13195] ? __pfx_ref_tracker_free+0x10/0x10 [ 266.369921][T13195] netlink_rcv_skb+0x28c/0x470 [ 266.369943][T13195] ? __lock_acquire+0xab9/0xd20 [ 266.369961][T13195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.369983][T13195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.370027][T13195] ? down_read+0x1ad/0x2e0 [ 266.370054][T13195] genl_rcv+0x28/0x40 [ 266.370071][T13195] netlink_unicast+0x82f/0x9e0 [ 266.370103][T13195] ? __pfx_netlink_unicast+0x10/0x10 [ 266.370127][T13195] ? netlink_sendmsg+0x642/0xb30 [ 266.370156][T13195] ? skb_put+0x11b/0x210 [ 266.370184][T13195] netlink_sendmsg+0x805/0xb30 [ 266.370219][T13195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.370247][T13195] ? aa_sock_msg_perm+0xf1/0x1d0 [ 266.370274][T13195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.370291][T13195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.370317][T13195] __sock_sendmsg+0x21c/0x270 [ 266.370342][T13195] ____sys_sendmsg+0x505/0x830 [ 266.370367][T13195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.370395][T13195] ? import_iovec+0x74/0xa0 [ 266.370424][T13195] ___sys_sendmsg+0x21f/0x2a0 [ 266.370444][T13195] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.370499][T13195] ? __fget_files+0x2a/0x420 [ 266.370514][T13195] ? __fget_files+0x3a0/0x420 [ 266.370543][T13195] __x64_sys_sendmsg+0x19b/0x260 [ 266.370563][T13195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.370591][T13195] ? __pfx_ksys_write+0x10/0x10 [ 266.370619][T13195] ? do_syscall_64+0xbe/0xfa0 [ 266.370645][T13195] do_syscall_64+0xfa/0xfa0 [ 266.370664][T13195] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.370685][T13195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.370703][T13195] ? clear_bhb_loop+0x60/0xb0 [ 266.370725][T13195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.370742][T13195] RIP: 0033:0x7fb40958efc9 [ 266.370758][T13195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.370773][T13195] RSP: 002b:00007fb40a3c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.370792][T13195] RAX: ffffffffffffffda RBX: 00007fb4097e5fa0 RCX: 00007fb40958efc9 [ 266.370806][T13195] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 266.370817][T13195] RBP: 00007fb40a3c5090 R08: 0000000000000000 R09: 0000000000000000 [ 266.370829][T13195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.370839][T13195] R13: 00007fb4097e6038 R14: 00007fb4097e5fa0 R15: 00007ffdbcfd82e8 [ 266.370871][T13195] [ 266.803529][T13203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2540'. [ 266.813859][T13203] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2540'. [ 266.823787][T13203] netlink: 'syz.1.2540': attribute type 6 has an invalid length. [ 266.835154][T13203] netlink: 'syz.1.2540': attribute type 5 has an invalid length. [ 266.842985][T13203] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2540'. [ 267.905569][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'. [ 268.004544][T13213] syzkaller0: entered promiscuous mode [ 268.015936][T13213] syzkaller0: entered allmulticast mode [ 268.063609][T13212] syzkaller0: entered promiscuous mode [ 268.070271][T13212] syzkaller0: entered allmulticast mode [ 268.218388][T13224] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.219089][T13226] syzkaller0: entered promiscuous mode [ 268.231922][T13226] syzkaller0: entered allmulticast mode [ 268.256755][T13226] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 268.325074][T13230] FAULT_INJECTION: forcing a failure. [ 268.325074][T13230] name failslab, interval 1, probability 0, space 0, times 0 [ 268.339068][T13230] CPU: 1 UID: 0 PID: 13230 Comm: syz.4.2552 Not tainted syzkaller #0 PREEMPT(full) [ 268.339094][T13230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.339104][T13230] Call Trace: [ 268.339112][T13230] [ 268.339120][T13230] dump_stack_lvl+0x189/0x250 [ 268.339153][T13230] ? __pfx____ratelimit+0x10/0x10 [ 268.339174][T13230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.339198][T13230] ? __pfx__printk+0x10/0x10 [ 268.339219][T13230] ? __pfx___might_resched+0x10/0x10 [ 268.339239][T13230] ? fs_reclaim_acquire+0x7d/0x100 [ 268.339276][T13230] should_fail_ex+0x414/0x560 [ 268.339306][T13230] should_failslab+0xa8/0x100 [ 268.339326][T13230] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 268.339351][T13230] ? tcf_bpf_init_from_ops+0x174/0x340 [ 268.339373][T13230] ? pcpu_alloc_noprof+0xf85/0x1720 [ 268.339403][T13230] kmemdup_noprof+0x2b/0x70 [ 268.339423][T13230] tcf_bpf_init_from_ops+0x174/0x340 [ 268.339450][T13230] ? __pfx_tcf_bpf_init_from_ops+0x10/0x10 [ 268.339476][T13230] ? tcf_idr_create+0x4b7/0x6b0 [ 268.339505][T13230] tcf_bpf_init+0x431/0x8a0 [ 268.339540][T13230] ? __pfx_tcf_bpf_init+0x10/0x10 [ 268.339581][T13230] ? nla_memcpy+0x5b/0xc0 [ 268.339609][T13230] tcf_action_init_1+0x463/0x6d0 [ 268.339638][T13230] ? __pfx_tcf_action_init_1+0x10/0x10 [ 268.339658][T13230] ? _raw_read_unlock+0x28/0x50 [ 268.339676][T13230] ? tc_action_load_ops+0x214/0x4e0 [ 268.339713][T13230] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 268.339740][T13230] ? __nla_parse+0x40/0x60 [ 268.339762][T13230] tcf_action_init+0x2cf/0xab0 [ 268.339794][T13230] ? __pfx_tcf_action_init+0x10/0x10 [ 268.339847][T13230] ? __pfx___nla_validate_parse+0x10/0x10 [ 268.339865][T13230] ? trace_sched_exit_tp+0x36/0x110 [ 268.339888][T13230] ? __schedule+0x17ae/0x4cc0 [ 268.339944][T13230] tc_ctl_action+0x430/0xbd0 [ 268.339982][T13230] ? __pfx_tc_ctl_action+0x10/0x10 [ 268.340008][T13230] ? rcu_is_watching+0x15/0xb0 [ 268.340077][T13230] ? __pfx_tc_ctl_action+0x10/0x10 [ 268.340098][T13230] rtnetlink_rcv_msg+0x77c/0xb70 [ 268.340126][T13230] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 268.340149][T13230] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 268.340170][T13230] ? ref_tracker_free+0x63a/0x7d0 [ 268.340187][T13230] ? __asan_memcpy+0x40/0x70 [ 268.340209][T13230] ? __pfx_ref_tracker_free+0x10/0x10 [ 268.340238][T13230] netlink_rcv_skb+0x208/0x470 [ 268.340264][T13230] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 268.340289][T13230] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.340326][T13230] ? netlink_deliver_tap+0x2e/0x1b0 [ 268.340373][T13230] netlink_unicast+0x82f/0x9e0 [ 268.340406][T13230] ? __pfx_netlink_unicast+0x10/0x10 [ 268.340430][T13230] ? netlink_sendmsg+0x642/0xb30 [ 268.340453][T13230] ? skb_put+0x11b/0x210 [ 268.340482][T13230] netlink_sendmsg+0x805/0xb30 [ 268.340516][T13230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.340545][T13230] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.340570][T13230] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.340588][T13230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.340613][T13230] __sock_sendmsg+0x21c/0x270 [ 268.340639][T13230] ____sys_sendmsg+0x505/0x830 [ 268.340663][T13230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.340691][T13230] ? import_iovec+0x74/0xa0 [ 268.340716][T13230] ___sys_sendmsg+0x21f/0x2a0 [ 268.340737][T13230] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.340793][T13230] ? __fget_files+0x2a/0x420 [ 268.340809][T13230] ? __fget_files+0x3a0/0x420 [ 268.340838][T13230] __x64_sys_sendmsg+0x19b/0x260 [ 268.340858][T13230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.340888][T13230] ? __pfx_ksys_write+0x10/0x10 [ 268.340916][T13230] ? do_syscall_64+0xbe/0xfa0 [ 268.340942][T13230] do_syscall_64+0xfa/0xfa0 [ 268.340967][T13230] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.340987][T13230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.341005][T13230] ? clear_bhb_loop+0x60/0xb0 [ 268.341027][T13230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.341044][T13230] RIP: 0033:0x7fb40958efc9 [ 268.341061][T13230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.341077][T13230] RSP: 002b:00007fb40a3c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.341096][T13230] RAX: ffffffffffffffda RBX: 00007fb4097e5fa0 RCX: 00007fb40958efc9 [ 268.341110][T13230] RDX: 0000000000000000 RSI: 0000200000005c40 RDI: 0000000000000003 [ 268.341121][T13230] RBP: 00007fb40a3c5090 R08: 0000000000000000 R09: 0000000000000000 [ 268.341132][T13230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.341143][T13230] R13: 00007fb4097e6038 R14: 00007fb4097e5fa0 R15: 00007ffdbcfd82e8 [ 268.341176][T13230] [ 268.804979][T13232] FAULT_INJECTION: forcing a failure. [ 268.804979][T13232] name failslab, interval 1, probability 0, space 0, times 0 [ 268.817677][T13232] CPU: 1 UID: 0 PID: 13232 Comm: syz.3.2554 Not tainted syzkaller #0 PREEMPT(full) [ 268.817701][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.817712][T13232] Call Trace: [ 268.817720][T13232] [ 268.817727][T13232] dump_stack_lvl+0x189/0x250 [ 268.817755][T13232] ? __pfx____ratelimit+0x10/0x10 [ 268.817776][T13232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.817799][T13232] ? __pfx__printk+0x10/0x10 [ 268.817824][T13232] ? __pfx___might_resched+0x10/0x10 [ 268.817849][T13232] should_fail_ex+0x414/0x560 [ 268.817887][T13232] should_failslab+0xa8/0x100 [ 268.817906][T13232] kmem_cache_alloc_node_noprof+0x77/0x710 [ 268.817931][T13232] ? __alloc_skb+0x112/0x2d0 [ 268.817961][T13232] __alloc_skb+0x112/0x2d0 [ 268.817989][T13232] netlink_ack+0x146/0xa50 [ 268.818011][T13232] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.818029][T13232] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 268.818046][T13232] ? __pfx_nl80211_post_doit+0x10/0x10 [ 268.818066][T13232] ? __asan_memcpy+0x40/0x70 [ 268.818087][T13232] ? __pfx_ref_tracker_free+0x10/0x10 [ 268.818111][T13232] netlink_rcv_skb+0x28c/0x470 [ 268.818133][T13232] ? __lock_acquire+0xab9/0xd20 [ 268.818151][T13232] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.818172][T13232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.818216][T13232] ? down_read+0x1ad/0x2e0 [ 268.818243][T13232] genl_rcv+0x28/0x40 [ 268.818261][T13232] netlink_unicast+0x82f/0x9e0 [ 268.818293][T13232] ? __pfx_netlink_unicast+0x10/0x10 [ 268.818317][T13232] ? netlink_sendmsg+0x642/0xb30 [ 268.818340][T13232] ? skb_put+0x11b/0x210 [ 268.818367][T13232] netlink_sendmsg+0x805/0xb30 [ 268.818403][T13232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.818432][T13232] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.818458][T13232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.818474][T13232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.818499][T13232] __sock_sendmsg+0x21c/0x270 [ 268.818525][T13232] ____sys_sendmsg+0x505/0x830 [ 268.818550][T13232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.818578][T13232] ? import_iovec+0x74/0xa0 [ 268.818603][T13232] ___sys_sendmsg+0x21f/0x2a0 [ 268.818623][T13232] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.818681][T13232] ? __fget_files+0x2a/0x420 [ 268.818697][T13232] ? __fget_files+0x3a0/0x420 [ 268.818726][T13232] __x64_sys_sendmsg+0x19b/0x260 [ 268.818747][T13232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.818775][T13232] ? __pfx_ksys_write+0x10/0x10 [ 268.818804][T13232] ? do_syscall_64+0xbe/0xfa0 [ 268.818829][T13232] do_syscall_64+0xfa/0xfa0 [ 268.818849][T13232] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.818875][T13232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.818892][T13232] ? clear_bhb_loop+0x60/0xb0 [ 268.818913][T13232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.818930][T13232] RIP: 0033:0x7f8cad98efc9 [ 268.818946][T13232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.818960][T13232] RSP: 002b:00007f8cae79e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.818978][T13232] RAX: ffffffffffffffda RBX: 00007f8cadbe5fa0 RCX: 00007f8cad98efc9 [ 268.818990][T13232] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 268.819000][T13232] RBP: 00007f8cae79e090 R08: 0000000000000000 R09: 0000000000000000 [ 268.819010][T13232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.819020][T13232] R13: 00007f8cadbe6038 R14: 00007f8cadbe5fa0 R15: 00007ffcea312068 [ 268.819051][T13232] [ 268.820724][T13232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.865966][T13236] tipc: Enabling of bearer rejected, failed to enable media [ 269.271240][T13237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.368677][T13252] syzkaller0: entered promiscuous mode [ 269.374177][T13252] syzkaller0: entered allmulticast mode [ 269.467795][T13256] FAULT_INJECTION: forcing a failure. [ 269.467795][T13256] name failslab, interval 1, probability 0, space 0, times 0 [ 269.481012][T13256] CPU: 1 UID: 0 PID: 13256 Comm: syz.1.2560 Not tainted syzkaller #0 PREEMPT(full) [ 269.481035][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.481045][T13256] Call Trace: [ 269.481053][T13256] [ 269.481060][T13256] dump_stack_lvl+0x189/0x250 [ 269.481087][T13256] ? __pfx____ratelimit+0x10/0x10 [ 269.481108][T13256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.481131][T13256] ? __pfx__printk+0x10/0x10 [ 269.481155][T13256] ? __pfx___might_resched+0x10/0x10 [ 269.481179][T13256] should_fail_ex+0x414/0x560 [ 269.481209][T13256] should_failslab+0xa8/0x100 [ 269.481228][T13256] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 269.481252][T13256] ? __d_alloc+0x36/0x7a0 [ 269.481277][T13256] __d_alloc+0x36/0x7a0 [ 269.481302][T13256] d_alloc_parallel+0xe1/0x1610 [ 269.481338][T13256] ? __d_lookup+0x66/0x780 [ 269.481360][T13256] ? __pfx_d_alloc_parallel+0x10/0x10 [ 269.481394][T13256] path_openat+0xa3b/0x3830 [ 269.481443][T13256] ? __pfx_path_openat+0x10/0x10 [ 269.481481][T13256] do_filp_open+0x1fa/0x410 [ 269.481499][T13256] ? __lock_acquire+0xab9/0xd20 [ 269.481516][T13256] ? __pfx_do_filp_open+0x10/0x10 [ 269.481543][T13256] ? __pfx_kfree_link+0x10/0x10 [ 269.481586][T13256] ? _raw_spin_unlock+0x28/0x50 [ 269.481605][T13256] ? alloc_fd+0x64c/0x6c0 [ 269.481641][T13256] do_sys_openat2+0x121/0x1c0 [ 269.481664][T13256] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.481688][T13256] ? ksys_write+0x22a/0x250 [ 269.481713][T13256] ? __pfx_ksys_write+0x10/0x10 [ 269.481738][T13256] __x64_sys_openat+0x138/0x170 [ 269.481764][T13256] do_syscall_64+0xfa/0xfa0 [ 269.481783][T13256] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.481801][T13256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.481818][T13256] ? clear_bhb_loop+0x60/0xb0 [ 269.481840][T13256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.481857][T13256] RIP: 0033:0x7f631658d810 [ 269.481873][T13256] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 269.481888][T13256] RSP: 002b:00007f631747df60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 269.481911][T13256] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f631658d810 [ 269.481924][T13256] RDX: 0000000000000000 RSI: 00007f631661207e RDI: 00000000ffffff9c [ 269.481935][T13256] RBP: 00007f631661207e R08: 0000000000000000 R09: 0000000000000000 [ 269.481946][T13256] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 269.481956][T13256] R13: 00007f63167e6038 R14: 00007f63167e5fa0 R15: 00007ffc7442ab68 [ 269.481988][T13256] [ 269.887211][T13268] syzkaller0: entered promiscuous mode [ 269.901760][T13268] syzkaller0: entered allmulticast mode [ 270.003665][T13276] syzkaller0: entered promiscuous mode [ 270.009189][T13276] syzkaller0: entered allmulticast mode [ 270.020034][T13276] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 270.155608][T13280] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2569'. [ 270.460121][T13299] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 270.469656][T13299] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 270.800473][T13317] syzkaller0: entered promiscuous mode [ 270.806102][T13317] syzkaller0: entered allmulticast mode [ 270.820492][T13318] syzkaller0: entered promiscuous mode [ 270.826850][T13318] syzkaller0: entered allmulticast mode [ 270.835269][T13319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.852728][T13319] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 270.873478][T13318] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 270.937937][T13321] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2582'. [ 271.053378][T13328] syzkaller0: entered promiscuous mode [ 271.059216][T13328] syzkaller0: entered allmulticast mode [ 271.228823][T13330] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 271.309944][T13345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.393786][T13351] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.472982][T13353] syzkaller0: entered promiscuous mode [ 271.480114][T13353] syzkaller0: entered allmulticast mode [ 271.515193][T13355] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2593'. [ 271.564859][T13361] netlink: 'syz.1.2596': attribute type 1 has an invalid length. [ 271.576555][T13360] netlink: 'syz.2.2594': attribute type 11 has an invalid length. [ 271.616521][T13361] 8021q: adding VLAN 0 to HW filter on device bond10 [ 271.624484][T13360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2594'. [ 271.948570][T13391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2606'. [ 272.064711][T13396] syzkaller0: entered promiscuous mode [ 272.070337][T13396] syzkaller0: entered allmulticast mode [ 272.176624][T13402] syzkaller0: entered promiscuous mode [ 272.182120][T13402] syzkaller0: entered allmulticast mode [ 272.202902][T13404] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 272.382164][T13413] tipc: Enabling of bearer rejected, failed to enable media [ 272.391416][T13413] syzkaller0: entered promiscuous mode [ 272.396993][T13413] syzkaller0: entered allmulticast mode [ 272.481715][T13419] FAULT_INJECTION: forcing a failure. [ 272.481715][T13419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.496620][T13419] CPU: 1 UID: 0 PID: 13419 Comm: syz.3.2619 Not tainted syzkaller #0 PREEMPT(full) [ 272.496645][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.496656][T13419] Call Trace: [ 272.496664][T13419] [ 272.496672][T13419] dump_stack_lvl+0x189/0x250 [ 272.496700][T13419] ? __pfx____ratelimit+0x10/0x10 [ 272.496722][T13419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.496744][T13419] ? __pfx__printk+0x10/0x10 [ 272.496777][T13419] should_fail_ex+0x414/0x560 [ 272.496807][T13419] _copy_to_user+0x31/0xb0 [ 272.496831][T13419] simple_read_from_buffer+0xe1/0x170 [ 272.496862][T13419] proc_fail_nth_read+0x1b3/0x220 [ 272.496888][T13419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.496913][T13419] ? rw_verify_area+0x2a6/0x4d0 [ 272.496935][T13419] ? __lock_acquire+0xab9/0xd20 [ 272.496952][T13419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.496975][T13419] vfs_read+0x200/0xa30 [ 272.496997][T13419] ? fdget_pos+0x247/0x320 [ 272.497019][T13419] ? __pfx___mutex_lock+0x10/0x10 [ 272.497042][T13419] ? __pfx_vfs_read+0x10/0x10 [ 272.497066][T13419] ? __fget_files+0x2a/0x420 [ 272.497088][T13419] ? __fget_files+0x3a0/0x420 [ 272.497103][T13419] ? __fget_files+0x2a/0x420 [ 272.497129][T13419] ksys_read+0x145/0x250 [ 272.497156][T13419] ? __pfx_ksys_read+0x10/0x10 [ 272.497182][T13419] ? do_syscall_64+0xbe/0xfa0 [ 272.497208][T13419] do_syscall_64+0xfa/0xfa0 [ 272.497227][T13419] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.497248][T13419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.497266][T13419] ? clear_bhb_loop+0x60/0xb0 [ 272.497295][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.497312][T13419] RIP: 0033:0x7f8cad98d9dc [ 272.497329][T13419] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 272.497342][T13419] RSP: 002b:00007f8cae79e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.497358][T13419] RAX: ffffffffffffffda RBX: 00007f8cadbe5fa0 RCX: 00007f8cad98d9dc [ 272.497370][T13419] RDX: 000000000000000f RSI: 00007f8cae79e0a0 RDI: 0000000000000004 [ 272.497381][T13419] RBP: 00007f8cae79e090 R08: 0000000000000000 R09: 0000000000000000 [ 272.497392][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.497402][T13419] R13: 00007f8cadbe6038 R14: 00007f8cadbe5fa0 R15: 00007ffcea312068 [ 272.497434][T13419] [ 272.857509][T13430] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 272.893711][T13429] syzkaller0: entered promiscuous mode [ 272.918275][T13429] syzkaller0: entered allmulticast mode [ 272.933350][T13439] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.949787][T13440] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 273.083271][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2629'. [ 273.096002][T13445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2628'. [ 273.106386][T13445] ip6t_srh: unknown srh match flags 5F28 [ 273.229425][T13457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2633'. [ 273.304542][T13461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2633'. [ 273.452937][T13469] tipc: Enabling of bearer rejected, failed to enable media [ 273.458181][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'. [ 273.469539][T13469] syzkaller0: entered promiscuous mode [ 273.487666][T13469] syzkaller0: entered allmulticast mode [ 273.499959][T13468] netlink: 'syz.1.2636': attribute type 83 has an invalid length. [ 273.590421][T13474] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 273.597892][T13474] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 273.669690][T13477] FAULT_INJECTION: forcing a failure. [ 273.669690][T13477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.685297][T13477] CPU: 1 UID: 0 PID: 13477 Comm: syz.1.2639 Not tainted syzkaller #0 PREEMPT(full) [ 273.685323][T13477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.685333][T13477] Call Trace: [ 273.685341][T13477] [ 273.685349][T13477] dump_stack_lvl+0x189/0x250 [ 273.685387][T13477] ? __pfx____ratelimit+0x10/0x10 [ 273.685410][T13477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.685431][T13477] ? __pfx__printk+0x10/0x10 [ 273.685449][T13477] ? __might_fault+0xb0/0x130 [ 273.685482][T13477] should_fail_ex+0x414/0x560 [ 273.685510][T13477] _copy_from_iter+0x1de/0x1790 [ 273.685541][T13477] ? __pfx__copy_from_iter+0x10/0x10 [ 273.685558][T13477] ? __local_bh_enable_ip+0x12d/0x1c0 [ 273.685575][T13477] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 273.685596][T13477] ? skb_put+0x11b/0x210 [ 273.685625][T13477] raw_sendmsg+0x431/0x8d0 [ 273.685648][T13477] ? __pfx_raw_sendmsg+0x10/0x10 [ 273.685665][T13477] ? aa_sock_msg_perm+0xf1/0x1d0 [ 273.685691][T13477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.685709][T13477] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 273.685728][T13477] __sock_sendmsg+0x21c/0x270 [ 273.685751][T13477] ____sys_sendmsg+0x52d/0x830 [ 273.685775][T13477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.685803][T13477] ? import_iovec+0x74/0xa0 [ 273.685826][T13477] ___sys_sendmsg+0x21f/0x2a0 [ 273.685846][T13477] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.685892][T13477] ? __fget_files+0x2a/0x420 [ 273.685906][T13477] ? __fget_files+0x3a0/0x420 [ 273.685931][T13477] __sys_sendmmsg+0x227/0x430 [ 273.685953][T13477] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.685979][T13477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 273.686016][T13477] ? ksys_write+0x22a/0x250 [ 273.686043][T13477] ? __pfx_ksys_write+0x10/0x10 [ 273.686070][T13477] __x64_sys_sendmmsg+0xa0/0xc0 [ 273.686089][T13477] do_syscall_64+0xfa/0xfa0 [ 273.686110][T13477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.686127][T13477] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.686144][T13477] ? clear_bhb_loop+0x60/0xb0 [ 273.686164][T13477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.686181][T13477] RIP: 0033:0x7f631658efc9 [ 273.686198][T13477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.686213][T13477] RSP: 002b:00007f631747e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.686232][T13477] RAX: ffffffffffffffda RBX: 00007f63167e5fa0 RCX: 00007f631658efc9 [ 273.686244][T13477] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 273.686255][T13477] RBP: 00007f631747e090 R08: 0000000000000000 R09: 0000000000000000 [ 273.686265][T13477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.686276][T13477] R13: 00007f63167e6038 R14: 00007f63167e5fa0 R15: 00007ffc7442ab68 [ 273.686308][T13477] [ 273.995772][T13479] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 274.066941][T13481] syzkaller0: entered promiscuous mode [ 274.072545][T13481] syzkaller0: entered allmulticast mode [ 274.219675][T13485] syzkaller0: entered promiscuous mode [ 274.253709][T13485] syzkaller0: entered allmulticast mode [ 274.261276][T13488] syzkaller0: entered promiscuous mode [ 274.266816][T13488] syzkaller0: entered allmulticast mode [ 274.319324][T13485] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 274.423708][T13491] tipc: Enabled bearer , priority 0 [ 274.524145][T13502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2647'. [ 274.924774][T13503] tipc: Resetting bearer [ 274.941101][T13489] tipc: Disabling bearer [ 275.343396][T13528] tipc: Enabled bearer , priority 0 [ 275.356837][T13528] syzkaller0: entered promiscuous mode [ 275.367609][T13528] syzkaller0: entered allmulticast mode [ 275.388243][T13537] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 275.396572][T13537] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 275.436039][T13527] tipc: Resetting bearer [ 275.489465][T13527] tipc: Disabling bearer [ 276.217149][T13559] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 276.224499][T13559] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 276.479087][T13573] syzkaller1: entered promiscuous mode [ 276.498198][T13573] syzkaller1: entered allmulticast mode [ 276.814081][T13579] __nla_validate_parse: 4 callbacks suppressed [ 276.814099][T13579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2674'. [ 276.854337][T13582] syzkaller0: entered promiscuous mode [ 276.860120][T13582] syzkaller0: entered allmulticast mode [ 276.947929][T13569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2669'. [ 277.082136][T13586] syzkaller0: entered promiscuous mode [ 277.089979][T13586] syzkaller0: entered allmulticast mode [ 277.096274][T13591] netlink: 436 bytes leftover after parsing attributes in process `syz.0.2679'. [ 277.112315][T13586] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 277.254401][T13601] FAULT_INJECTION: forcing a failure. [ 277.254401][T13601] name failslab, interval 1, probability 0, space 0, times 0 [ 277.269864][T13601] CPU: 0 UID: 0 PID: 13601 Comm: syz.2.2682 Not tainted syzkaller #0 PREEMPT(full) [ 277.269890][T13601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 277.269901][T13601] Call Trace: [ 277.269909][T13601] [ 277.269917][T13601] dump_stack_lvl+0x189/0x250 [ 277.269945][T13601] ? __pfx____ratelimit+0x10/0x10 [ 277.269965][T13601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.269989][T13601] ? __pfx__printk+0x10/0x10 [ 277.270014][T13601] ? __pfx___might_resched+0x10/0x10 [ 277.270038][T13601] should_fail_ex+0x414/0x560 [ 277.270080][T13601] should_failslab+0xa8/0x100 [ 277.270100][T13601] kmem_cache_alloc_noprof+0x74/0x6e0 [ 277.270124][T13601] ? security_inode_alloc+0x39/0x330 [ 277.270154][T13601] security_inode_alloc+0x39/0x330 [ 277.270179][T13601] inode_init_always_gfp+0x9ed/0xdc0 [ 277.270213][T13601] alloc_inode+0x82/0x1b0 [ 277.270238][T13601] path_from_stashed+0x200/0x5c0 [ 277.270257][T13601] ? netns_get+0xc7/0x110 [ 277.270285][T13601] proc_ns_get_link+0xec/0x210 [ 277.270306][T13601] ? __pfx_proc_ns_get_link+0x10/0x10 [ 277.270332][T13601] ? atime_needs_update+0x3ac/0x6d0 [ 277.270351][T13601] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 277.270370][T13601] ? __pfx_proc_ns_get_link+0x10/0x10 [ 277.270392][T13601] pick_link+0x636/0xe80 [ 277.270419][T13601] step_into+0xbc9/0xe80 [ 277.270448][T13601] ? __up_read+0x280/0x680 [ 277.270472][T13601] ? __pfx_step_into+0x10/0x10 [ 277.270501][T13601] path_openat+0x1bc6/0x3830 [ 277.270563][T13601] ? __pfx_path_openat+0x10/0x10 [ 277.270606][T13601] do_filp_open+0x1fa/0x410 [ 277.270625][T13601] ? __lock_acquire+0xab9/0xd20 [ 277.270644][T13601] ? __pfx_do_filp_open+0x10/0x10 [ 277.270690][T13601] ? _raw_spin_unlock+0x28/0x50 [ 277.270707][T13601] ? alloc_fd+0x64c/0x6c0 [ 277.270744][T13601] do_sys_openat2+0x121/0x1c0 [ 277.270773][T13601] ? __pfx_do_sys_openat2+0x10/0x10 [ 277.270797][T13601] ? ksys_write+0x22a/0x250 [ 277.270822][T13601] ? __pfx_ksys_write+0x10/0x10 [ 277.270847][T13601] __x64_sys_openat+0x138/0x170 [ 277.270878][T13601] do_syscall_64+0xfa/0xfa0 [ 277.270898][T13601] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.270918][T13601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.270936][T13601] ? clear_bhb_loop+0x60/0xb0 [ 277.270958][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.270975][T13601] RIP: 0033:0x7f1bce58d810 [ 277.270992][T13601] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 277.271007][T13601] RSP: 002b:00007f1bcf3dff60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 277.271026][T13601] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1bce58d810 [ 277.271039][T13601] RDX: 0000000000000000 RSI: 00007f1bce61207e RDI: 00000000ffffff9c [ 277.271058][T13601] RBP: 00007f1bce61207e R08: 0000000000000000 R09: 0000000000000000 [ 277.271069][T13601] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 277.271080][T13601] R13: 00007f1bce7e6038 R14: 00007f1bce7e5fa0 R15: 00007ffd8ff81e28 [ 277.271112][T13601] [ 277.760613][T13612] netlink: 'syz.0.2688': attribute type 1 has an invalid length. [ 277.768980][T13612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2688'. [ 277.787193][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 277.813927][T13616] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2689'. [ 277.980654][T13628] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2694'. [ 278.448913][T13645] syzkaller1: entered promiscuous mode [ 278.465269][T13645] syzkaller1: entered allmulticast mode [ 278.829771][T13667] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.882725][T13671] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.040546][T13679] xt_socket: unknown flags 0x50 [ 279.045664][T13683] FAULT_INJECTION: forcing a failure. [ 279.045664][T13683] name failslab, interval 1, probability 0, space 0, times 0 [ 279.060052][T13683] CPU: 1 UID: 0 PID: 13683 Comm: syz.1.2714 Not tainted syzkaller #0 PREEMPT(full) [ 279.060076][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.060086][T13683] Call Trace: [ 279.060093][T13683] [ 279.060100][T13683] dump_stack_lvl+0x189/0x250 [ 279.060130][T13683] ? __pfx____ratelimit+0x10/0x10 [ 279.060150][T13683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.060172][T13683] ? __pfx__printk+0x10/0x10 [ 279.060195][T13683] ? __pfx___might_resched+0x10/0x10 [ 279.060213][T13683] ? fs_reclaim_acquire+0x7d/0x100 [ 279.060242][T13683] should_fail_ex+0x414/0x560 [ 279.060270][T13683] should_failslab+0xa8/0x100 [ 279.060289][T13683] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 279.060313][T13683] ? __d_alloc+0x36/0x7a0 [ 279.060330][T13683] ? inode_init_always_gfp+0xa03/0xdc0 [ 279.060358][T13683] __d_alloc+0x36/0x7a0 [ 279.060383][T13683] path_from_stashed+0x384/0x5c0 [ 279.060410][T13683] proc_ns_get_link+0xec/0x210 [ 279.060432][T13683] ? __pfx_proc_ns_get_link+0x10/0x10 [ 279.060457][T13683] ? atime_needs_update+0x3ac/0x6d0 [ 279.060476][T13683] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 279.060495][T13683] ? __pfx_proc_ns_get_link+0x10/0x10 [ 279.060517][T13683] pick_link+0x636/0xe80 [ 279.060544][T13683] step_into+0xbc9/0xe80 [ 279.060577][T13683] ? __up_read+0x280/0x680 [ 279.060601][T13683] ? __pfx_step_into+0x10/0x10 [ 279.060629][T13683] path_openat+0x1bc6/0x3830 [ 279.060687][T13683] ? __pfx_path_openat+0x10/0x10 [ 279.060729][T13683] do_filp_open+0x1fa/0x410 [ 279.060747][T13683] ? __lock_acquire+0xab9/0xd20 [ 279.060764][T13683] ? __pfx_do_filp_open+0x10/0x10 [ 279.060806][T13683] ? _raw_spin_unlock+0x28/0x50 [ 279.060825][T13683] ? alloc_fd+0x64c/0x6c0 [ 279.060860][T13683] do_sys_openat2+0x121/0x1c0 [ 279.060884][T13683] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.060908][T13683] ? ksys_write+0x22a/0x250 [ 279.060933][T13683] ? __pfx_ksys_write+0x10/0x10 [ 279.060959][T13683] __x64_sys_openat+0x138/0x170 [ 279.060985][T13683] do_syscall_64+0xfa/0xfa0 [ 279.061004][T13683] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.061025][T13683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.061043][T13683] ? clear_bhb_loop+0x60/0xb0 [ 279.061065][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.061082][T13683] RIP: 0033:0x7f631658d810 [ 279.061098][T13683] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 279.061113][T13683] RSP: 002b:00007f631747df60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 279.061133][T13683] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f631658d810 [ 279.061146][T13683] RDX: 0000000000000000 RSI: 00007f631661207e RDI: 00000000ffffff9c [ 279.061157][T13683] RBP: 00007f631661207e R08: 0000000000000000 R09: 0000000000000000 [ 279.061169][T13683] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 279.061179][T13683] R13: 00007f63167e6038 R14: 00007f63167e5fa0 R15: 00007ffc7442ab68 [ 279.061211][T13683] [ 279.501837][T13689] syzkaller0: entered promiscuous mode [ 279.543760][T13689] syzkaller0: entered allmulticast mode [ 279.831801][T13712] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2724'. [ 279.953007][T13717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.069365][T13721] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2725'. [ 280.108230][T13708] tipc: Enabled bearer , priority 0 [ 280.117243][T13701] syzkaller0: entered promiscuous mode [ 280.125596][T13701] syzkaller0: entered allmulticast mode [ 280.133639][T13718] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 280.142050][T13718] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 280.176514][T13700] tipc: Resetting bearer [ 280.238820][T13700] tipc: Disabling bearer [ 280.281229][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2727'. [ 280.643377][T13745] netlink: 'syz.0.2735': attribute type 21 has an invalid length. [ 280.679008][T13744] tipc: Enabled bearer , priority 0 [ 280.698496][T13744] syzkaller0: entered promiscuous mode [ 280.721594][T13749] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.725521][T13744] syzkaller0: entered allmulticast mode [ 280.742545][T13744] tipc: Resetting bearer [ 280.765756][T13743] tipc: Resetting bearer [ 280.815579][T13743] tipc: Disabling bearer [ 281.188622][T13782] netlink: zone id is out of range [ 281.201932][T13782] netlink: zone id is out of range [ 281.215601][T13782] netlink: zone id is out of range [ 281.225475][T13782] netlink: zone id is out of range [ 281.230606][T13782] netlink: zone id is out of range [ 281.236700][T13782] netlink: zone id is out of range [ 281.241822][T13782] netlink: zone id is out of range [ 281.247071][T13782] netlink: zone id is out of range [ 281.252267][T13782] netlink: zone id is out of range [ 281.319261][T13788] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.416694][T13794] syzkaller0: entered promiscuous mode [ 281.427222][ T898] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 181 sec [ 281.430081][T13794] syzkaller0: entered allmulticast mode [ 281.448667][T13794] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 281.468562][T13797] FAULT_INJECTION: forcing a failure. [ 281.468562][T13797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.487134][T13797] CPU: 0 UID: 0 PID: 13797 Comm: syz.2.2756 Not tainted syzkaller #0 PREEMPT(full) [ 281.487159][T13797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.487170][T13797] Call Trace: [ 281.487178][T13797] [ 281.487185][T13797] dump_stack_lvl+0x189/0x250 [ 281.487213][T13797] ? __pfx____ratelimit+0x10/0x10 [ 281.487233][T13797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.487255][T13797] ? __pfx__printk+0x10/0x10 [ 281.487287][T13797] should_fail_ex+0x414/0x560 [ 281.487315][T13797] _copy_to_user+0x31/0xb0 [ 281.487338][T13797] simple_read_from_buffer+0xe1/0x170 [ 281.487376][T13797] proc_fail_nth_read+0x1b3/0x220 [ 281.487440][T13797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.487462][T13797] ? rw_verify_area+0x2a6/0x4d0 [ 281.487482][T13797] ? __lock_acquire+0xab9/0xd20 [ 281.487498][T13797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.487520][T13797] vfs_read+0x200/0xa30 [ 281.487541][T13797] ? fdget_pos+0x247/0x320 [ 281.487563][T13797] ? __pfx___mutex_lock+0x10/0x10 [ 281.487585][T13797] ? __pfx_vfs_read+0x10/0x10 [ 281.487609][T13797] ? __fget_files+0x2a/0x420 [ 281.487629][T13797] ? __fget_files+0x3a0/0x420 [ 281.487644][T13797] ? __fget_files+0x2a/0x420 [ 281.487669][T13797] ksys_read+0x145/0x250 [ 281.487695][T13797] ? __pfx_ksys_read+0x10/0x10 [ 281.487722][T13797] ? do_syscall_64+0xbe/0xfa0 [ 281.487747][T13797] do_syscall_64+0xfa/0xfa0 [ 281.487765][T13797] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.487786][T13797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.487804][T13797] ? clear_bhb_loop+0x60/0xb0 [ 281.487826][T13797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.487843][T13797] RIP: 0033:0x7f1bce58d9dc [ 281.487860][T13797] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 281.487875][T13797] RSP: 002b:00007f1bcf3e0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.487894][T13797] RAX: ffffffffffffffda RBX: 00007f1bce7e5fa0 RCX: 00007f1bce58d9dc [ 281.487908][T13797] RDX: 000000000000000f RSI: 00007f1bcf3e00a0 RDI: 0000000000000004 [ 281.487918][T13797] RBP: 00007f1bcf3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 281.487932][T13797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.487941][T13797] R13: 00007f1bce7e6038 R14: 00007f1bce7e5fa0 R15: 00007ffd8ff81e28 [ 281.487972][T13797] [ 281.736029][T13806] tipc: Enabled bearer , priority 0 [ 281.787176][T13804] tipc: Resetting bearer [ 281.818269][T13814] FAULT_INJECTION: forcing a failure. [ 281.818269][T13814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.833047][T13814] CPU: 0 UID: 0 PID: 13814 Comm: syz.3.2760 Not tainted syzkaller #0 PREEMPT(full) [ 281.833073][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.833085][T13814] Call Trace: [ 281.833092][T13814] [ 281.833100][T13814] dump_stack_lvl+0x189/0x250 [ 281.833147][T13814] ? __pfx____ratelimit+0x10/0x10 [ 281.833167][T13814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.833189][T13814] ? __pfx__printk+0x10/0x10 [ 281.833209][T13814] ? fs_reclaim_acquire+0x7d/0x100 [ 281.833245][T13814] should_fail_ex+0x414/0x560 [ 281.833276][T13814] prepare_alloc_pages+0x213/0x610 [ 281.833302][T13814] __alloc_frozen_pages_noprof+0x123/0x370 [ 281.833333][T13814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 281.833364][T13814] ? policy_nodemask+0x27c/0x720 [ 281.833387][T13814] ? do_raw_spin_lock+0x121/0x290 [ 281.833416][T13814] alloc_pages_mpol+0x232/0x4a0 [ 281.833441][T13814] alloc_pages_noprof+0xa9/0x190 [ 281.833461][T13814] __pmd_alloc+0x3a/0x540 [ 281.833491][T13814] huge_pte_alloc+0x517/0x620 [ 281.833508][T13814] ? down_read+0x1ad/0x2e0 [ 281.833536][T13814] hugetlb_fault+0x508/0x2970 [ 281.833553][T13814] ? mt_find+0x15c/0x5e0 [ 281.833588][T13814] ? __pfx_hugetlb_fault+0x10/0x10 [ 281.833625][T13814] ? __up_read+0x280/0x680 [ 281.833651][T13814] handle_mm_fault+0x740/0x8e0 [ 281.833687][T13814] __get_user_pages+0x165c/0x2a00 [ 281.833747][T13814] populate_vma_page_range+0x29f/0x3a0 [ 281.833772][T13814] ? __pfx_populate_vma_page_range+0x10/0x10 [ 281.833791][T13814] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 281.833823][T13814] ? down_read+0x1ad/0x2e0 [ 281.833848][T13814] __mm_populate+0x24c/0x380 [ 281.833872][T13814] ? __pfx___mm_populate+0x10/0x10 [ 281.833896][T13814] ? up_write+0x1c4/0x420 [ 281.833923][T13814] vm_mmap_pgoff+0x387/0x4d0 [ 281.833951][T13814] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 281.833983][T13814] ? hugetlb_file_setup+0x42c/0x630 [ 281.834012][T13814] ksys_mmap_pgoff+0x587/0x760 [ 281.834043][T13814] do_syscall_64+0xfa/0xfa0 [ 281.834063][T13814] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.834083][T13814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.834102][T13814] ? clear_bhb_loop+0x60/0xb0 [ 281.834123][T13814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.834140][T13814] RIP: 0033:0x7f8cad98efc9 [ 281.834157][T13814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.834172][T13814] RSP: 002b:00007f8cae79e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 281.834191][T13814] RAX: ffffffffffffffda RBX: 00007f8cadbe5fa0 RCX: 00007f8cad98efc9 [ 281.834204][T13814] RDX: 0000000007000001 RSI: 0000000000800006 RDI: 0000200000800000 [ 281.834216][T13814] RBP: 00007f8cae79e090 R08: ffffffffffffffff R09: 0000000000000000 [ 281.834228][T13814] R10: 000000000006e073 R11: 0000000000000246 R12: 0000000000000002 [ 281.834239][T13814] R13: 00007f8cadbe6038 R14: 00007f8cadbe5fa0 R15: 00007ffcea312068 [ 281.834271][T13814] [ 282.171318][T13820] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.585532][T13845] __nla_validate_parse: 7 callbacks suppressed [ 282.585550][T13845] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2772'. [ 282.681100][T13847] tipc: Enabling of bearer rejected, failed to enable media [ 282.728304][T13847] syzkaller0: entered promiscuous mode [ 282.733982][T13847] syzkaller0: entered allmulticast mode [ 282.759063][T13847] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 282.785244][T13857] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.893958][T13863] syzkaller0: entered promiscuous mode [ 282.899700][T13863] syzkaller0: entered allmulticast mode [ 282.966279][T13866] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.009938][T13866] FAULT_INJECTION: forcing a failure. [ 283.009938][T13866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.026285][T13872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.030871][T13866] CPU: 1 UID: 0 PID: 13866 Comm: syz.1.2780 Not tainted syzkaller #0 PREEMPT(full) [ 283.030894][T13866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.030905][T13866] Call Trace: [ 283.030912][T13866] [ 283.030919][T13866] dump_stack_lvl+0x189/0x250 [ 283.030948][T13866] ? __pfx____ratelimit+0x10/0x10 [ 283.030968][T13866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.030990][T13866] ? __pfx__printk+0x10/0x10 [ 283.031008][T13866] ? __might_fault+0xb0/0x130 [ 283.031042][T13866] should_fail_ex+0x414/0x560 [ 283.031070][T13866] _copy_from_user+0x2d/0xb0 [ 283.031091][T13866] ___sys_sendmsg+0x158/0x2a0 [ 283.031111][T13866] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.031172][T13866] ? __might_fault+0xb0/0x130 [ 283.031198][T13866] __sys_sendmmsg+0x227/0x430 [ 283.031228][T13866] ? __pfx___sys_sendmmsg+0x10/0x10 [ 283.031255][T13866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.031293][T13866] ? ksys_write+0x22a/0x250 [ 283.031319][T13866] ? __pfx_ksys_write+0x10/0x10 [ 283.031346][T13866] __x64_sys_sendmmsg+0xa0/0xc0 [ 283.031366][T13866] do_syscall_64+0xfa/0xfa0 [ 283.031384][T13866] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.031404][T13866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.031421][T13866] ? clear_bhb_loop+0x60/0xb0 [ 283.031443][T13866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.031459][T13866] RIP: 0033:0x7f631658efc9 [ 283.031474][T13866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.031488][T13866] RSP: 002b:00007f631747e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 283.031507][T13866] RAX: ffffffffffffffda RBX: 00007f63167e5fa0 RCX: 00007f631658efc9 [ 283.031520][T13866] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 283.031531][T13866] RBP: 00007f631747e090 R08: 0000000000000000 R09: 0000000000000000 [ 283.031542][T13866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 283.031552][T13866] R13: 00007f63167e6038 R14: 00007f63167e5fa0 R15: 00007ffc7442ab68 [ 283.031582][T13866] [ 283.272886][T13875] tipc: Enabled bearer , priority 0 [ 283.280768][T13875] syzkaller0: entered promiscuous mode [ 283.286439][T13875] syzkaller0: entered allmulticast mode [ 283.293310][T13882] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2786'. [ 283.298364][T13875] tipc: Resetting bearer [ 283.314361][T13874] tipc: Resetting bearer [ 283.357271][T13874] tipc: Disabling bearer [ 283.438268][T13889] tipc: Enabled bearer , priority 0 [ 283.455975][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 283.465295][T13889] syzkaller0: entered promiscuous mode [ 283.476371][T13889] syzkaller0: entered allmulticast mode [ 283.551512][T13898] FAULT_INJECTION: forcing a failure. [ 283.551512][T13898] name failslab, interval 1, probability 0, space 0, times 0 [ 283.564494][T13898] CPU: 1 UID: 0 PID: 13898 Comm: syz.4.2792 Not tainted syzkaller #0 PREEMPT(full) [ 283.564520][T13898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.564530][T13898] Call Trace: [ 283.564538][T13898] [ 283.564547][T13898] dump_stack_lvl+0x189/0x250 [ 283.564574][T13898] ? __pfx____ratelimit+0x10/0x10 [ 283.564596][T13898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.564619][T13898] ? __pfx__printk+0x10/0x10 [ 283.564645][T13898] ? __pfx___might_resched+0x10/0x10 [ 283.564664][T13898] ? fs_reclaim_acquire+0x7d/0x100 [ 283.564695][T13898] should_fail_ex+0x414/0x560 [ 283.564726][T13898] should_failslab+0xa8/0x100 [ 283.564746][T13898] kmem_cache_alloc_noprof+0x74/0x6e0 [ 283.564769][T13898] ? __pmd_alloc+0xc2/0x540 [ 283.564796][T13898] __pmd_alloc+0xc2/0x540 [ 283.564825][T13898] huge_pte_alloc+0x517/0x620 [ 283.564842][T13898] ? down_read+0x1ad/0x2e0 [ 283.564868][T13898] hugetlb_fault+0x508/0x2970 [ 283.564887][T13898] ? mt_find+0x15c/0x5e0 [ 283.564922][T13898] ? __pfx_hugetlb_fault+0x10/0x10 [ 283.564960][T13898] ? __up_read+0x280/0x680 [ 283.564986][T13898] handle_mm_fault+0x740/0x8e0 [ 283.565022][T13898] __get_user_pages+0x165c/0x2a00 [ 283.565091][T13898] populate_vma_page_range+0x29f/0x3a0 [ 283.565117][T13898] ? __pfx_populate_vma_page_range+0x10/0x10 [ 283.565136][T13898] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 283.565168][T13898] ? down_read+0x1ad/0x2e0 [ 283.565193][T13898] __mm_populate+0x24c/0x380 [ 283.565217][T13898] ? __pfx___mm_populate+0x10/0x10 [ 283.565241][T13898] ? up_write+0x1c4/0x420 [ 283.565267][T13898] vm_mmap_pgoff+0x387/0x4d0 [ 283.565296][T13898] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 283.565329][T13898] ? hugetlb_file_setup+0x42c/0x630 [ 283.565359][T13898] ksys_mmap_pgoff+0x587/0x760 [ 283.565390][T13898] do_syscall_64+0xfa/0xfa0 [ 283.565413][T13898] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.565432][T13898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.565449][T13898] ? clear_bhb_loop+0x60/0xb0 [ 283.565469][T13898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.565485][T13898] RIP: 0033:0x7fb40958efc9 [ 283.565501][T13898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.565514][T13898] RSP: 002b:00007fb40a3c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 283.565533][T13898] RAX: ffffffffffffffda RBX: 00007fb4097e5fa0 RCX: 00007fb40958efc9 [ 283.565546][T13898] RDX: 0000000007000001 RSI: 0000000000800006 RDI: 0000200000800000 [ 283.565559][T13898] RBP: 00007fb40a3c5090 R08: ffffffffffffffff R09: 0000000000000000 [ 283.565571][T13898] R10: 000000000006e073 R11: 0000000000000246 R12: 0000000000000002 [ 283.565581][T13898] R13: 00007fb4097e6038 R14: 00007fb4097e5fa0 R15: 00007ffdbcfd82e8 [ 283.565614][T13898] [ 283.887756][T13900] tipc: Resetting bearer [ 283.938761][T13888] tipc: Resetting bearer [ 284.020489][T13888] tipc: Disabling bearer [ 284.028535][T13914] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2797'. [ 284.079117][T13918] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2798'. [ 284.108586][T13911] netlink: 'syz.3.2796': attribute type 13 has an invalid length. [ 284.289655][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2799'. [ 284.369901][T13933] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.403321][T13938] netlink: 'syz.1.2806': attribute type 1 has an invalid length. [ 284.411505][T13937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.474145][T13938] 8021q: adding VLAN 0 to HW filter on device bond11 [ 284.507833][T13938] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 284.517022][T13938] bond11: (slave macvlan5): making interface the new active one [ 284.525692][T13938] bond11: (slave macvlan5): Enslaving as an active interface with an up link [ 284.652999][T13953] syzkaller0: entered promiscuous mode [ 284.658723][T13953] syzkaller0: entered allmulticast mode [ 284.672125][T13951] syzkaller0: entered promiscuous mode [ 284.678782][T13951] syzkaller0: entered allmulticast mode [ 284.744599][T13958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2812'. [ 284.817112][T13960] sch_tbf: burst 206 is lower than device syzkaller0 mtu (313) ! [ 284.983985][T13967] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.997232][T13972] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 285.084755][T13977] tipc: Enabling of bearer rejected, failed to enable media [ 285.094261][T13977] syzkaller0: entered promiscuous mode [ 285.099845][T13977] syzkaller0: entered allmulticast mode [ 285.109757][T13977] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 285.233096][T13985] syzkaller0: entered promiscuous mode [ 285.239327][T13985] syzkaller0: entered allmulticast mode [ 285.366475][T13992] net_ratelimit: 48 callbacks suppressed [ 285.366495][T13992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.392386][T13994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.437737][T13994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.530297][T14002] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2831'. [ 285.602172][T14006] netlink: 'syz.4.2834': attribute type 1 has an invalid length. [ 285.676983][T14006] 8021q: adding VLAN 0 to HW filter on device bond10 [ 285.776838][T14006] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 285.786550][T14006] bond10: (slave macvlan4): making interface the new active one [ 285.795166][T14006] bond10: (slave macvlan4): Enslaving as an active interface with an up link [ 285.852067][T14021] syzkaller0: entered promiscuous mode [ 285.865590][T14021] syzkaller0: entered allmulticast mode [ 285.888396][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 285.912766][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 285.943046][T14026] syzkaller0: entered promiscuous mode [ 285.949158][T14026] syzkaller0: entered allmulticast mode [ 286.203202][T14042] tipc: Enabling of bearer rejected, already enabled [ 286.254308][T14044] syzkaller0: entered promiscuous mode [ 286.268113][T14044] syzkaller0: entered allmulticast mode [ 286.517750][T14064] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.526728][T14060] tipc: Enabling of bearer rejected, already enabled [ 286.680412][T14072] syzkaller0: entered promiscuous mode [ 286.699220][T14072] syzkaller0: entered allmulticast mode [ 286.706628][T14074] netlink: 'syz.4.2857': attribute type 1 has an invalid length. [ 286.751301][T14074] 8021q: adding VLAN 0 to HW filter on device bond11 [ 286.816121][T14080] tipc: Enabled bearer , priority 0 [ 286.834665][T14080] syzkaller0: entered promiscuous mode [ 286.860460][T14080] syzkaller0: entered allmulticast mode [ 286.886165][T14080] tipc: Resetting bearer [ 286.908261][T14078] tipc: Resetting bearer [ 286.957325][T14078] tipc: Disabling bearer [ 287.095849][T14100] netlink: 'syz.4.2867': attribute type 10 has an invalid length. [ 287.124555][T14100] bridge_slave_1: entered promiscuous mode [ 287.157784][T14100] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 287.206818][T14107] tipc: Enabled bearer , priority 0 [ 287.232165][T14103] syzkaller0: entered promiscuous mode [ 287.238054][T14103] syzkaller0: entered allmulticast mode [ 287.289068][T14103] tipc: Resetting bearer [ 287.397077][T14101] tipc: Resetting bearer [ 287.427521][T14101] tipc: Disabling bearer [ 287.541091][T14132] netlink: 'syz.1.2875': attribute type 1 has an invalid length. [ 287.592111][T14132] 8021q: adding VLAN 0 to HW filter on device bond12 [ 287.703473][T14141] __nla_validate_parse: 4 callbacks suppressed [ 287.703493][T14141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2877'. [ 287.784747][T14145] tipc: Enabled bearer , priority 0 [ 287.808119][T14145] syzkaller0: entered promiscuous mode [ 287.814685][T14145] syzkaller0: entered allmulticast mode [ 287.822095][T14148] tipc: Enabling of bearer rejected, failed to enable media [ 287.840716][T14149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.851458][T14145] tipc: Resetting bearer [ 287.859244][T14144] tipc: Resetting bearer [ 287.865314][T14149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.897175][T14144] tipc: Disabling bearer [ 288.068920][T14157] syzkaller0: entered promiscuous mode [ 288.074602][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'. [ 288.084717][T14157] syzkaller0: entered allmulticast mode [ 288.159724][T14165] syzkaller0: entered promiscuous mode [ 288.165219][T14165] syzkaller0: entered allmulticast mode [ 288.176113][T14165] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 288.262348][T14172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2891'. [ 288.464055][T14186] netlink: 'syz.0.2896': attribute type 1 has an invalid length. [ 288.466653][T14188] FAULT_INJECTION: forcing a failure. [ 288.466653][T14188] name failslab, interval 1, probability 0, space 0, times 0 [ 288.523296][T14186] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.532669][T14188] CPU: 0 UID: 0 PID: 14188 Comm: syz.1.2898 Not tainted syzkaller #0 PREEMPT(full) [ 288.532693][T14188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.532704][T14188] Call Trace: [ 288.532711][T14188] [ 288.532718][T14188] dump_stack_lvl+0x189/0x250 [ 288.532747][T14188] ? __pfx____ratelimit+0x10/0x10 [ 288.532768][T14188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.532790][T14188] ? __pfx__printk+0x10/0x10 [ 288.532819][T14188] ? __pfx___might_resched+0x10/0x10 [ 288.532839][T14188] ? fs_reclaim_acquire+0x7d/0x100 [ 288.532869][T14188] should_fail_ex+0x414/0x560 [ 288.532897][T14188] should_failslab+0xa8/0x100 [ 288.532917][T14188] __kmalloc_cache_noprof+0x6f/0x6f0 [ 288.532941][T14188] ? allocate_file_region_entries+0x1e7/0x5a0 [ 288.532963][T14188] ? do_raw_spin_unlock+0x122/0x240 [ 288.532990][T14188] allocate_file_region_entries+0x1e7/0x5a0 [ 288.533024][T14188] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 288.533058][T14188] region_chg+0x2c4/0x3c0 [ 288.533082][T14188] __vma_reservation_common+0x328/0x6e0 [ 288.533110][T14188] alloc_hugetlb_folio+0x2d2/0x16a0 [ 288.533138][T14188] ? filemap_get_entry+0xad/0x2f0 [ 288.533163][T14188] ? filemap_get_entry+0xad/0x2f0 [ 288.533188][T14188] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 288.533218][T14188] ? hugetlb_fault+0x4a9/0x2970 [ 288.533244][T14188] ? __filemap_get_folio+0x9a6/0xaf0 [ 288.533261][T14188] ? huge_pte_alloc+0x3f3/0x620 [ 288.533283][T14188] hugetlb_fault+0x1dc2/0x2970 [ 288.533301][T14188] ? mt_find+0x15c/0x5e0 [ 288.533336][T14188] ? __pfx_hugetlb_fault+0x10/0x10 [ 288.533371][T14188] ? __up_read+0x280/0x680 [ 288.533396][T14188] handle_mm_fault+0x740/0x8e0 [ 288.533432][T14188] __get_user_pages+0x165c/0x2a00 [ 288.533494][T14188] populate_vma_page_range+0x29f/0x3a0 [ 288.533519][T14188] ? __pfx_populate_vma_page_range+0x10/0x10 [ 288.533538][T14188] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 288.533570][T14188] ? down_read+0x1ad/0x2e0 [ 288.533597][T14188] __mm_populate+0x24c/0x380 [ 288.533621][T14188] ? __pfx___mm_populate+0x10/0x10 [ 288.533644][T14188] ? up_write+0x1c4/0x420 [ 288.533668][T14188] vm_mmap_pgoff+0x387/0x4d0 [ 288.533695][T14188] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 288.533729][T14188] ? hugetlb_file_setup+0x42c/0x630 [ 288.533758][T14188] ksys_mmap_pgoff+0x587/0x760 [ 288.533790][T14188] do_syscall_64+0xfa/0xfa0 [ 288.533817][T14188] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.533837][T14188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.533856][T14188] ? clear_bhb_loop+0x60/0xb0 [ 288.533878][T14188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.533895][T14188] RIP: 0033:0x7f631658efc9 [ 288.533912][T14188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.533926][T14188] RSP: 002b:00007f631747e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 288.533945][T14188] RAX: ffffffffffffffda RBX: 00007f63167e5fa0 RCX: 00007f631658efc9 [ 288.533958][T14188] RDX: 0000000007000001 RSI: 0000000000800006 RDI: 0000200000800000 [ 288.533970][T14188] RBP: 00007f631747e090 R08: ffffffffffffffff R09: 0000000000000000 [ 288.533982][T14188] R10: 000000000006e073 R11: 0000000000000246 R12: 0000000000000002 [ 288.533992][T14188] R13: 00007f63167e6038 R14: 00007f63167e5fa0 R15: 00007ffc7442ab68 [ 288.534026][T14188] [ 289.117816][T14211] tipc: Enabled bearer , priority 0 [ 289.126404][T14211] syzkaller0: entered promiscuous mode [ 289.131896][T14211] syzkaller0: entered allmulticast mode [ 289.141893][T14208] tipc: Resetting bearer [ 289.180958][T14208] tipc: Disabling bearer [ 289.317619][T14222] netlink: 'syz.3.2912': attribute type 1 has an invalid length. [ 289.364019][T14222] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.383595][T14225] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2913'. [ 289.417007][T14222] bond_slave_0: entered promiscuous mode [ 289.423222][T14222] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 289.451385][T14222] bond7: (slave macvlan3): making interface the new active one [ 289.463789][T14222] bond7: (slave macvlan3): Enslaving as an active interface with an up link [ 289.660025][T14241] FAULT_INJECTION: forcing a failure. [ 289.660025][T14241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.707608][T14241] CPU: 0 UID: 0 PID: 14241 Comm: syz.2.2919 Not tainted syzkaller #0 PREEMPT(full) [ 289.707634][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.707644][T14241] Call Trace: [ 289.707651][T14241] [ 289.707659][T14241] dump_stack_lvl+0x189/0x250 [ 289.707697][T14241] ? __pfx____ratelimit+0x10/0x10 [ 289.707719][T14241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.707741][T14241] ? __pfx__printk+0x10/0x10 [ 289.707760][T14241] ? __might_fault+0xb0/0x130 [ 289.707795][T14241] should_fail_ex+0x414/0x560 [ 289.707825][T14241] _copy_from_iter+0x1de/0x1790 [ 289.707851][T14241] ? rcu_is_watching+0x15/0xb0 [ 289.707875][T14241] ? kmalloc_reserve+0xbd/0x290 [ 289.707901][T14241] ? __pfx__copy_from_iter+0x10/0x10 [ 289.707922][T14241] ? __build_skb_around+0x262/0x3f0 [ 289.707948][T14241] ? netlink_sendmsg+0x642/0xb30 [ 289.707971][T14241] ? skb_put+0x11b/0x210 [ 289.707999][T14241] netlink_sendmsg+0x6b2/0xb30 [ 289.708032][T14241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.708057][T14241] ? aa_sock_msg_perm+0xf1/0x1d0 [ 289.708081][T14241] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.708098][T14241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.708122][T14241] __sock_sendmsg+0x21c/0x270 [ 289.708148][T14241] ____sys_sendmsg+0x505/0x830 [ 289.708171][T14241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.708198][T14241] ? import_iovec+0x74/0xa0 [ 289.708223][T14241] ___sys_sendmsg+0x21f/0x2a0 [ 289.708244][T14241] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.708300][T14241] ? __fget_files+0x2a/0x420 [ 289.708316][T14241] ? __fget_files+0x3a0/0x420 [ 289.708344][T14241] __x64_sys_sendmsg+0x19b/0x260 [ 289.708364][T14241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.708392][T14241] ? __pfx_ksys_write+0x10/0x10 [ 289.708419][T14241] ? do_syscall_64+0xbe/0xfa0 [ 289.708444][T14241] do_syscall_64+0xfa/0xfa0 [ 289.708464][T14241] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.708485][T14241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.708503][T14241] ? clear_bhb_loop+0x60/0xb0 [ 289.708525][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.708542][T14241] RIP: 0033:0x7f1bce58efc9 [ 289.708560][T14241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.708575][T14241] RSP: 002b:00007f1bcf3e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.708593][T14241] RAX: ffffffffffffffda RBX: 00007f1bce7e5fa0 RCX: 00007f1bce58efc9 [ 289.708605][T14241] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 289.708615][T14241] RBP: 00007f1bcf3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 289.708624][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.708634][T14241] R13: 00007f1bce7e6038 R14: 00007f1bce7e5fa0 R15: 00007ffd8ff81e28 [ 289.708665][T14241] [ 289.725112][T14245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2920'. [ 289.887984][T14252] tipc: Enabled bearer , priority 0 [ 289.899137][T14247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2921'. [ 289.906031][T14252] syzkaller0: entered promiscuous mode [ 290.025060][T14252] syzkaller0: entered allmulticast mode [ 290.060411][T14247] bridge_slave_0: entered promiscuous mode [ 290.068333][T14254] tipc: Enabled bearer , priority 0 [ 290.090944][T14251] tipc: Resetting bearer [ 290.131306][T14251] tipc: Disabling bearer [ 290.145963][T14250] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 290.187088][T14250] tipc: Resetting bearer [ 290.237394][T14249] tipc: Disabling bearer [ 290.251318][T14266] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 290.383620][T14273] syzkaller0: entered promiscuous mode [ 290.407048][T14273] syzkaller0: entered allmulticast mode [ 290.424258][T14273] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 290.629999][T14289] netlink: 'syz.2.2937': attribute type 1 has an invalid length. [ 290.702660][T14295] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2942'. [ 290.722799][T14295] netlink: 'syz.1.2942': attribute type 11 has an invalid length. [ 290.794123][T14304] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.816390][T14304] FAULT_INJECTION: forcing a failure. [ 290.816390][T14304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.843782][T14304] CPU: 1 UID: 0 PID: 14304 Comm: syz.0.2945 Not tainted syzkaller #0 PREEMPT(full) [ 290.843813][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.843824][T14304] Call Trace: [ 290.843832][T14304] [ 290.843839][T14304] dump_stack_lvl+0x189/0x250 [ 290.843868][T14304] ? __pfx____ratelimit+0x10/0x10 [ 290.843889][T14304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.843912][T14304] ? __pfx__printk+0x10/0x10 [ 290.843931][T14304] ? __might_fault+0xb0/0x130 [ 290.843966][T14304] should_fail_ex+0x414/0x560 [ 290.843996][T14304] _copy_from_user+0x2d/0xb0 [ 290.844018][T14304] ___sys_sendmsg+0x158/0x2a0 [ 290.844041][T14304] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.844103][T14304] ? __might_fault+0xb0/0x130 [ 290.844131][T14304] __sys_sendmmsg+0x227/0x430 [ 290.844155][T14304] ? __pfx___sys_sendmmsg+0x10/0x10 [ 290.844183][T14304] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 290.844225][T14304] ? ksys_write+0x22a/0x250 [ 290.844251][T14304] ? __pfx_ksys_write+0x10/0x10 [ 290.844277][T14304] __x64_sys_sendmmsg+0xa0/0xc0 [ 290.844297][T14304] do_syscall_64+0xfa/0xfa0 [ 290.844315][T14304] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.844330][T14304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.844344][T14304] ? clear_bhb_loop+0x60/0xb0 [ 290.844363][T14304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.844379][T14304] RIP: 0033:0x7f99ca98efc9 [ 290.844396][T14304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.844411][T14304] RSP: 002b:00007f99cb8a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 290.844431][T14304] RAX: ffffffffffffffda RBX: 00007f99cabe5fa0 RCX: 00007f99ca98efc9 [ 290.844445][T14304] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 290.844456][T14304] RBP: 00007f99cb8a5090 R08: 0000000000000000 R09: 0000000000000000 [ 290.844467][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.844478][T14304] R13: 00007f99cabe6038 R14: 00007f99cabe5fa0 R15: 00007ffe0c6b19a8 [ 290.844510][T14304] [ 291.140175][T14311] tipc: Enabling of bearer rejected, already enabled [ 291.512795][T14339] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.697279][T14354] netlink: 'syz.3.2963': attribute type 1 has an invalid length. [ 291.802826][T14354] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.830687][T14360] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 291.839977][T14360] bond8: (slave macvlan4): making interface the new active one [ 291.848660][T14360] bond8: (slave macvlan4): Enslaving as an active interface with an up link [ 291.906226][T14361] syzkaller0: entered promiscuous mode [ 291.911724][T14361] syzkaller0: entered allmulticast mode [ 291.952547][T14361] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 292.094220][T14369] syzkaller0: entered promiscuous mode [ 292.106568][T14369] syzkaller0: entered allmulticast mode [ 292.163060][T14373] FAULT_INJECTION: forcing a failure. [ 292.163060][T14373] name failslab, interval 1, probability 0, space 0, times 0 [ 292.230216][T14373] CPU: 1 UID: 0 PID: 14373 Comm: syz.1.2971 Not tainted syzkaller #0 PREEMPT(full) [ 292.230243][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 292.230254][T14373] Call Trace: [ 292.230261][T14373] [ 292.230270][T14373] dump_stack_lvl+0x189/0x250 [ 292.230298][T14373] ? __pfx____ratelimit+0x10/0x10 [ 292.230320][T14373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.230343][T14373] ? __pfx__printk+0x10/0x10 [ 292.230366][T14373] ? __pfx___might_resched+0x10/0x10 [ 292.230386][T14373] ? fs_reclaim_acquire+0x7d/0x100 [ 292.230415][T14373] should_fail_ex+0x414/0x560 [ 292.230446][T14373] should_failslab+0xa8/0x100 [ 292.230466][T14373] __kmalloc_cache_noprof+0x6f/0x6f0 [ 292.230490][T14373] ? allocate_file_region_entries+0x1e7/0x5a0 [ 292.230512][T14373] ? do_raw_spin_unlock+0x122/0x240 [ 292.230540][T14373] allocate_file_region_entries+0x1e7/0x5a0 [ 292.230574][T14373] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 292.230610][T14373] region_chg+0x2c4/0x3c0 [ 292.230638][T14373] __vma_reservation_common+0x328/0x6e0 [ 292.230669][T14373] alloc_hugetlb_folio+0x2d2/0x16a0 [ 292.230697][T14373] ? filemap_get_entry+0xad/0x2f0 [ 292.230722][T14373] ? filemap_get_entry+0xad/0x2f0 [ 292.230752][T14373] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 292.230785][T14373] ? hugetlb_fault+0x4a9/0x2970 [ 292.230813][T14373] ? __filemap_get_folio+0x9a6/0xaf0 [ 292.230831][T14373] ? huge_pte_alloc+0x3f3/0x620 [ 292.230854][T14373] hugetlb_fault+0x1dc2/0x2970 [ 292.230872][T14373] ? mt_find+0x15c/0x5e0 [ 292.230908][T14373] ? __pfx_hugetlb_fault+0x10/0x10 [ 292.230945][T14373] ? __up_read+0x280/0x680 [ 292.230971][T14373] handle_mm_fault+0x740/0x8e0 [ 292.231006][T14373] __get_user_pages+0x165c/0x2a00 [ 292.231070][T14373] populate_vma_page_range+0x29f/0x3a0 [ 292.231096][T14373] ? __pfx_populate_vma_page_range+0x10/0x10 [ 292.231115][T14373] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 292.231146][T14373] ? down_read+0x1ad/0x2e0 [ 292.231178][T14373] __mm_populate+0x24c/0x380 [ 292.231202][T14373] ? __pfx___mm_populate+0x10/0x10 [ 292.231226][T14373] ? up_write+0x1c4/0x420 [ 292.231252][T14373] vm_mmap_pgoff+0x387/0x4d0 [ 292.231279][T14373] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 292.231307][T14373] ? hugetlb_file_setup+0x42c/0x630 [ 292.231335][T14373] ksys_mmap_pgoff+0x587/0x760 [ 292.231364][T14373] do_syscall_64+0xfa/0xfa0 [ 292.231384][T14373] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.231404][T14373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.231422][T14373] ? clear_bhb_loop+0x60/0xb0 [ 292.231444][T14373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.231462][T14373] RIP: 0033:0x7f631658efc9 [ 292.231478][T14373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.231494][T14373] RSP: 002b:00007f631747e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 292.231514][T14373] RAX: ffffffffffffffda RBX: 00007f63167e5fa0 RCX: 00007f631658efc9 [ 292.231527][T14373] RDX: 0000000007000001 RSI: 0000000000800006 RDI: 0000200000800000 [ 292.231539][T14373] RBP: 00007f631747e090 R08: ffffffffffffffff R09: 0000000000000000 [ 292.231552][T14373] R10: 000000000006e073 R11: 0000000000000246 R12: 0000000000000002 [ 292.231563][T14373] R13: 00007f63167e6038 R14: 00007f63167e5fa0 R15: 00007ffc7442ab68 [ 292.231598][T14373] [ 292.572530][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2972'. [ 292.658737][T14382] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.801204][T14391] netlink: 'syz.4.2978': attribute type 1 has an invalid length. [ 292.873010][T14391] 8021q: adding VLAN 0 to HW filter on device bond12 [ 293.141242][T14411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.171821][T14411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.323655][T14424] tipc: Enabled bearer , priority 0 [ 293.369596][T14423] tipc: Disabling bearer [ 293.503760][T14437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2995'. [ 293.515379][T14436] netlink: 'syz.2.2996': attribute type 1 has an invalid length. [ 293.561190][T14440] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.568819][T14436] 8021q: adding VLAN 0 to HW filter on device bond10 [ 293.612988][T14441] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 293.649901][T14441] bond10: (slave macvlan1): making interface the new active one [ 293.661582][T14441] bond10: (slave macvlan1): Enslaving as an active interface with an up link [ 293.684579][ T3553] tipc: Resetting bearer [ 293.750463][T14446] syzkaller0: entered promiscuous mode [ 293.767343][T14446] syzkaller0: entered allmulticast mode [ 293.792186][T14451] syzkaller0: entered promiscuous mode [ 293.798436][T14451] syzkaller0: entered allmulticast mode [ 293.857897][T14451] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 293.935050][T14456] syzkaller1: entered promiscuous mode [ 293.943542][T14456] syzkaller1: entered allmulticast mode [ 293.944634][T14460] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3006'. [ 294.409299][T14478] syzkaller0: entered promiscuous mode [ 294.414805][T14478] syzkaller0: entered allmulticast mode [ 294.432791][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3012'. [ 294.453629][T14488] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3017'. [ 295.576475][T14524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3028'. [ 295.623247][T14526] netlink: 'syz.3.3029': attribute type 1 has an invalid length. [ 296.003711][T14526] 8021q: adding VLAN 0 to HW filter on device bond9 [ 296.051912][T14529] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 296.072337][T14535] netlink: 'syz.4.3032': attribute type 1 has an invalid length. [ 296.089143][T14529] bond9: (slave macvlan5): making interface the new active one [ 296.114976][T14529] bond9: (slave macvlan5): Enslaving as an active interface with an up link [ 296.196753][T14535] 8021q: adding VLAN 0 to HW filter on device bond13 [ 296.285719][T14544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3034'. [ 296.353019][T14552] tipc: Enabled bearer , priority 0 [ 296.404433][T14552] tipc: Resetting bearer [ 296.431352][T14556] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3039'. [ 296.462435][T14551] tipc: Disabling bearer [ 296.473292][T14556] Bluetooth: MGMT ver 1.23 [ 296.473402][T14558] tipc: Resetting bearer [ 296.480582][T14556] sctp: [Deprecated]: syz.0.3039 (pid 14556) Use of int in maxseg socket option. [ 296.480582][T14556] Use struct sctp_assoc_value instead [ 296.512688][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3037'. [ 296.593697][T14564] tipc: Enabling of bearer rejected, already enabled [ 296.934313][T14589] tipc: Enabled bearer , priority 0 [ 296.949936][T14592] tipc: Enabled bearer , priority 0 [ 296.959627][T14592] syzkaller0: entered promiscuous mode [ 296.965334][T14592] syzkaller0: entered allmulticast mode [ 296.973665][T14589] tipc: Resetting bearer [ 296.993195][T14588] tipc: Disabling bearer [ 297.007670][T14592] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 297.026229][T14592] tipc: Resetting bearer [ 297.034432][T14590] tipc: Resetting bearer [ 297.056305][T14590] tipc: Disabling bearer [ 297.358228][T14612] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3061'. [ 297.382008][T14613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'. [ 297.395088][T14619] FAULT_INJECTION: forcing a failure. [ 297.395088][T14619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.437578][T14619] CPU: 1 UID: 0 PID: 14619 Comm: syz.0.3062 Not tainted syzkaller #0 PREEMPT(full) [ 297.437611][T14619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.437622][T14619] Call Trace: [ 297.437630][T14619] [ 297.437637][T14619] dump_stack_lvl+0x189/0x250 [ 297.437664][T14619] ? __pfx____ratelimit+0x10/0x10 [ 297.437684][T14619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.437705][T14619] ? __pfx__printk+0x10/0x10 [ 297.437731][T14619] should_fail_ex+0x414/0x560 [ 297.437758][T14619] _copy_to_user+0x31/0xb0 [ 297.437782][T14619] simple_read_from_buffer+0xe1/0x170 [ 297.437810][T14619] proc_fail_nth_read+0x1b3/0x220 [ 297.437831][T14619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.437854][T14619] ? rw_verify_area+0x2a6/0x4d0 [ 297.437874][T14619] ? __lock_acquire+0xab9/0xd20 [ 297.437890][T14619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.437910][T14619] vfs_read+0x200/0xa30 [ 297.437930][T14619] ? fdget_pos+0x247/0x320 [ 297.437948][T14619] ? __pfx___mutex_lock+0x10/0x10 [ 297.437967][T14619] ? __pfx_vfs_read+0x10/0x10 [ 297.437988][T14619] ? __fget_files+0x2a/0x420 [ 297.438009][T14619] ? __fget_files+0x3a0/0x420 [ 297.438024][T14619] ? __fget_files+0x2a/0x420 [ 297.438047][T14619] ksys_read+0x145/0x250 [ 297.438071][T14619] ? __pfx_ksys_read+0x10/0x10 [ 297.438097][T14619] ? do_syscall_64+0xbe/0xfa0 [ 297.438121][T14619] do_syscall_64+0xfa/0xfa0 [ 297.438139][T14619] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.438159][T14619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.438175][T14619] ? clear_bhb_loop+0x60/0xb0 [ 297.438194][T14619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.438210][T14619] RIP: 0033:0x7f99ca98d9dc [ 297.438226][T14619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 297.438241][T14619] RSP: 002b:00007f99cb8a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.438259][T14619] RAX: ffffffffffffffda RBX: 00007f99cabe5fa0 RCX: 00007f99ca98d9dc [ 297.438271][T14619] RDX: 000000000000000f RSI: 00007f99cb8a50a0 RDI: 0000000000000003 [ 297.438280][T14619] RBP: 00007f99cb8a5090 R08: 0000000000000000 R09: 0000000000000000 [ 297.438289][T14619] R10: 000000000006e073 R11: 0000000000000246 R12: 0000000000000002 [ 297.438299][T14619] R13: 00007f99cabe6038 R14: 00007f99cabe5fa0 R15: 00007ffe0c6b19a8 [ 297.438330][T14619] [ 297.737683][T14631] tipc: Enabled bearer , priority 0 [ 297.745262][T14631] syzkaller0: entered promiscuous mode [ 297.751280][T14631] syzkaller0: entered allmulticast mode [ 297.772091][T14631] tipc: Resetting bearer [ 297.849704][T14630] tipc: Resetting bearer [ 297.923919][T14630] tipc: Disabling bearer [ 298.056611][T14649] netlink: zone id is out of range [ 298.115762][T14649] netlink: zone id is out of range [ 298.131172][T14649] netlink: zone id is out of range [ 298.216285][T14653] syzkaller0: entered promiscuous mode [ 298.221999][T14653] syzkaller0: entered allmulticast mode [ 298.275695][T14649] netlink: zone id is out of range [ 298.280990][T14649] netlink: zone id is out of range [ 298.286443][T14649] netlink: zone id is out of range [ 298.291678][T14649] netlink: zone id is out of range [ 298.303980][T14649] netlink: zone id is out of range [ 298.324348][T14649] netlink: zone id is out of range [ 298.335247][T14649] netlink: zone id is out of range [ 298.773674][T14674] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.792026][T14677] netlink: 'syz.4.3080': attribute type 1 has an invalid length. [ 298.957162][T14686] tipc: Enabled bearer , priority 0 [ 298.985685][T14686] syzkaller0: entered promiscuous mode [ 299.014921][T14686] syzkaller0: entered allmulticast mode [ 299.067708][T14686] tipc: Resetting bearer [ 299.104083][T14683] tipc: Resetting bearer [ 299.166389][T14683] tipc: Disabling bearer [ 299.221516][T14705] tipc: Enabled bearer , priority 0 [ 299.236954][T14705] syzkaller0: entered promiscuous mode [ 299.242458][T14705] syzkaller0: entered allmulticast mode [ 299.342240][T14705] tipc: Resetting bearer [ 299.362872][T14704] tipc: Resetting bearer [ 299.388468][T14704] tipc: Disabling bearer [ 299.402014][T14717] tipc: Enabling of bearer rejected, already enabled [ 299.411521][T14716] tipc: Enabled bearer , priority 0 [ 299.511478][T14714] tipc: Disabling bearer [ 300.189674][T14733] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 300.411676][T14748] tipc: Enabled bearer , priority 0 [ 300.420043][T14748] syzkaller0: entered promiscuous mode [ 300.426022][T14748] syzkaller0: entered allmulticast mode [ 300.436071][T14750] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 300.437059][T14748] tipc: Resetting bearer [ 300.483755][T14747] tipc: Resetting bearer [ 300.526868][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3107'. [ 300.538026][T14747] tipc: Disabling bearer [ 300.660178][T14758] netlink: 'syz.0.3109': attribute type 39 has an invalid length. [ 300.680163][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'. [ 300.774408][T14777] netlink: 'syz.0.3114': attribute type 1 has an invalid length. [ 300.828130][T14777] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.839403][T14770] syzkaller0: entered promiscuous mode [ 300.844894][T14770] syzkaller0: entered allmulticast mode [ 300.864270][T14770] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 300.897758][T14779] tipc: Enabling of bearer rejected, already enabled [ 301.030758][T14793] netlink: 'syz.1.3120': attribute type 1 has an invalid length. [ 301.119383][T14797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3123'. [ 301.165049][T14799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3122'. [ 301.265847][T14807] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3127'. [ 301.369863][T14815] tipc: Enabled bearer , priority 0 [ 301.392991][T14816] tipc: Enabled bearer , priority 0 [ 301.421442][T14810] tipc: Disabling bearer [ 301.439691][T14816] syzkaller0: entered promiscuous mode [ 301.445271][T14816] syzkaller0: entered allmulticast mode [ 301.456841][T14816] tipc: Resetting bearer [ 301.469977][T14814] tipc: Resetting bearer [ 301.512246][T14814] tipc: Disabling bearer [ 301.529484][T14820] syzkaller1: entered promiscuous mode [ 301.537508][T14820] syzkaller1: entered allmulticast mode [ 301.823467][T14840] ieee802154 phy1 wpan1: encryption failed: -22 [ 301.842198][T14840] FAULT_INJECTION: forcing a failure. [ 301.842198][T14840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.885619][T14840] CPU: 0 UID: 0 PID: 14840 Comm: syz.2.3141 Not tainted syzkaller #0 PREEMPT(full) [ 301.885647][T14840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.885658][T14840] Call Trace: [ 301.885668][T14840] [ 301.885677][T14840] dump_stack_lvl+0x189/0x250 [ 301.885704][T14840] ? __pfx____ratelimit+0x10/0x10 [ 301.885724][T14840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.885745][T14840] ? __pfx__printk+0x10/0x10 [ 301.885762][T14840] ? __might_fault+0xb0/0x130 [ 301.885794][T14840] should_fail_ex+0x414/0x560 [ 301.885825][T14840] _copy_from_user+0x2d/0xb0 [ 301.885847][T14840] ___sys_sendmsg+0x158/0x2a0 [ 301.885869][T14840] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.885931][T14840] ? __might_fault+0xb0/0x130 [ 301.885958][T14840] __sys_sendmmsg+0x227/0x430 [ 301.885981][T14840] ? __pfx___sys_sendmmsg+0x10/0x10 [ 301.886008][T14840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.886048][T14840] ? ksys_write+0x22a/0x250 [ 301.886075][T14840] ? __pfx_ksys_write+0x10/0x10 [ 301.886103][T14840] __x64_sys_sendmmsg+0xa0/0xc0 [ 301.886123][T14840] do_syscall_64+0xfa/0xfa0 [ 301.886143][T14840] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.886176][T14840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.886194][T14840] ? clear_bhb_loop+0x60/0xb0 [ 301.886215][T14840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.886233][T14840] RIP: 0033:0x7f1bce58efc9 [ 301.886249][T14840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.886264][T14840] RSP: 002b:00007f1bcf3e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 301.886284][T14840] RAX: ffffffffffffffda RBX: 00007f1bce7e5fa0 RCX: 00007f1bce58efc9 [ 301.886297][T14840] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 301.886308][T14840] RBP: 00007f1bcf3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 301.886318][T14840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.886328][T14840] R13: 00007f1bce7e6038 R14: 00007f1bce7e5fa0 R15: 00007ffd8ff81e28 [ 301.886358][T14840] [ 302.247186][T14857] syzkaller0: entered promiscuous mode [ 302.261692][T14857] syzkaller0: entered allmulticast mode [ 302.352694][T14870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3145'. [ 302.370046][T14857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.686182][T14885] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.701419][T14883] syzkaller0: entered promiscuous mode [ 302.719635][T14883] syzkaller0: entered allmulticast mode [ 302.743093][T14883] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 302.864525][T14892] FAULT_INJECTION: forcing a failure. [ 302.864525][T14892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.894309][T14892] CPU: 1 UID: 0 PID: 14892 Comm: syz.0.3159 Not tainted syzkaller #0 PREEMPT(full) [ 302.894336][T14892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.894346][T14892] Call Trace: [ 302.894354][T14892] [ 302.894361][T14892] dump_stack_lvl+0x189/0x250 [ 302.894390][T14892] ? __pfx____ratelimit+0x10/0x10 [ 302.894411][T14892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.894434][T14892] ? __pfx__printk+0x10/0x10 [ 302.894478][T14892] should_fail_ex+0x414/0x560 [ 302.894507][T14892] _copy_from_user+0x2d/0xb0 [ 302.894528][T14892] alg_setkey+0xb8/0x190 [ 302.894551][T14892] alg_setsockopt+0x3da/0x4a0 [ 302.894572][T14892] ? __pfx_alg_setsockopt+0x10/0x10 [ 302.894595][T14892] do_sock_setsockopt+0x17c/0x1b0 [ 302.894625][T14892] __x64_sys_setsockopt+0x13f/0x1b0 [ 302.894657][T14892] do_syscall_64+0xfa/0xfa0 [ 302.894676][T14892] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.894696][T14892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.894714][T14892] ? clear_bhb_loop+0x60/0xb0 [ 302.894736][T14892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.894753][T14892] RIP: 0033:0x7f99ca98efc9 [ 302.894769][T14892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.894784][T14892] RSP: 002b:00007f99cb8a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.894802][T14892] RAX: ffffffffffffffda RBX: 00007f99cabe5fa0 RCX: 00007f99ca98efc9 [ 302.894816][T14892] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 302.894827][T14892] RBP: 00007f99cb8a5090 R08: 0000000000000000 R09: 0000000000000000 [ 302.894838][T14892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.894848][T14892] R13: 00007f99cabe6038 R14: 00007f99cabe5fa0 R15: 00007ffe0c6b19a8 [ 302.894882][T14892] [ 303.157759][T14896] tipc: Enabling of bearer rejected, already enabled [ 303.241301][T14901] FAULT_INJECTION: forcing a failure. [ 303.241301][T14901] name failslab, interval 1, probability 0, space 0, times 0 [ 303.269371][T14906] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3165'. [ 303.309220][T14909] syzkaller0: entered promiscuous mode [ 303.314835][T14909] syzkaller0: entered allmulticast mode [ 303.320525][T14901] CPU: 0 UID: 0 PID: 14901 Comm: syz.2.3164 Not tainted syzkaller #0 PREEMPT(full) [ 303.320546][T14901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.320556][T14901] Call Trace: [ 303.320563][T14901] [ 303.320571][T14901] dump_stack_lvl+0x189/0x250 [ 303.320597][T14901] ? __pfx____ratelimit+0x10/0x10 [ 303.320617][T14901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.320639][T14901] ? __pfx__printk+0x10/0x10 [ 303.320663][T14901] ? __pfx___might_resched+0x10/0x10 [ 303.320679][T14901] ? fs_reclaim_acquire+0x7d/0x100 [ 303.320707][T14901] should_fail_ex+0x414/0x560 [ 303.320735][T14901] should_failslab+0xa8/0x100 [ 303.320754][T14901] __kmalloc_noprof+0xcb/0x7f0 [ 303.320774][T14901] ? tomoyo_encode+0x28b/0x550 [ 303.320803][T14901] tomoyo_encode+0x28b/0x550 [ 303.320829][T14901] tomoyo_realpath_from_path+0x58d/0x5d0 [ 303.320855][T14901] ? tomoyo_domain+0xd9/0x130 [ 303.320882][T14901] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 303.320903][T14901] tomoyo_path_number_perm+0x1e8/0x5a0 [ 303.320927][T14901] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 303.320986][T14901] ? __fget_files+0x2a/0x420 [ 303.321004][T14901] ? __fget_files+0x3a0/0x420 [ 303.321017][T14901] ? __fget_files+0x2a/0x420 [ 303.321037][T14901] security_file_ioctl+0xcb/0x2d0 [ 303.321059][T14901] __se_sys_ioctl+0x47/0x170 [ 303.321082][T14901] do_syscall_64+0xfa/0xfa0 [ 303.321100][T14901] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.321118][T14901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.321134][T14901] ? clear_bhb_loop+0x60/0xb0 [ 303.321156][T14901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.321172][T14901] RIP: 0033:0x7f1bce58efc9 [ 303.321188][T14901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.321203][T14901] RSP: 002b:00007f1bcf3e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.321221][T14901] RAX: ffffffffffffffda RBX: 00007f1bce7e5fa0 RCX: 00007f1bce58efc9 [ 303.321234][T14901] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 303.321246][T14901] RBP: 00007f1bcf3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 303.321257][T14901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.321268][T14901] R13: 00007f1bce7e6038 R14: 00007f1bce7e5fa0 R15: 00007ffd8ff81e28 [ 303.321300][T14901] [ 303.321329][T14901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.463115][T14916] FAULT_INJECTION: forcing a failure. [ 303.463115][T14916] name failslab, interval 1, probability 0, space 0, times 0 [ 303.510432][T14917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3170'. [ 303.586037][T14916] CPU: 0 UID: 0 PID: 14916 Comm: syz.0.3169 Not tainted syzkaller #0 PREEMPT(full) [ 303.586064][T14916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.586074][T14916] Call Trace: [ 303.586082][T14916] [ 303.586090][T14916] dump_stack_lvl+0x189/0x250 [ 303.586118][T14916] ? __pfx____ratelimit+0x10/0x10 [ 303.586139][T14916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.586162][T14916] ? __pfx__printk+0x10/0x10 [ 303.586187][T14916] ? __lock_acquire+0xab9/0xd20 [ 303.586212][T14916] should_fail_ex+0x414/0x560 [ 303.586243][T14916] should_failslab+0xa8/0x100 [ 303.586270][T14916] kmem_cache_alloc_noprof+0x74/0x6e0 [ 303.586294][T14916] ? skb_clone+0x212/0x3a0 [ 303.586318][T14916] skb_clone+0x212/0x3a0 [ 303.586340][T14916] __netlink_deliver_tap+0x404/0x850 [ 303.586379][T14916] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.586404][T14916] netlink_deliver_tap+0x19c/0x1b0 [ 303.586430][T14916] netlink_unicast+0x7fa/0x9e0 [ 303.586462][T14916] ? __pfx_netlink_unicast+0x10/0x10 [ 303.586487][T14916] ? netlink_sendmsg+0x642/0xb30 [ 303.586509][T14916] ? skb_put+0x11b/0x210 [ 303.586537][T14916] netlink_sendmsg+0x805/0xb30 [ 303.586572][T14916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.586601][T14916] ? aa_sock_msg_perm+0xf1/0x1d0 [ 303.586627][T14916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.586644][T14916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.586669][T14916] __sock_sendmsg+0x21c/0x270 [ 303.586694][T14916] ____sys_sendmsg+0x505/0x830 [ 303.586719][T14916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.586747][T14916] ? import_iovec+0x74/0xa0 [ 303.586772][T14916] ___sys_sendmsg+0x21f/0x2a0 [ 303.586793][T14916] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.586850][T14916] ? __fget_files+0x2a/0x420 [ 303.586866][T14916] ? __fget_files+0x3a0/0x420 [ 303.586894][T14916] __x64_sys_sendmsg+0x19b/0x260 [ 303.586915][T14916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.586944][T14916] ? __pfx_ksys_write+0x10/0x10 [ 303.586971][T14916] ? do_syscall_64+0xbe/0xfa0 [ 303.586996][T14916] do_syscall_64+0xfa/0xfa0 [ 303.587015][T14916] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.587036][T14916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.587053][T14916] ? clear_bhb_loop+0x60/0xb0 [ 303.587080][T14916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.587098][T14916] RIP: 0033:0x7f99ca98efc9 [ 303.587114][T14916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.587129][T14916] RSP: 002b:00007f99cb8a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.587148][T14916] RAX: ffffffffffffffda RBX: 00007f99cabe5fa0 RCX: 00007f99ca98efc9 [ 303.587162][T14916] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 303.587173][T14916] RBP: 00007f99cb8a5090 R08: 0000000000000000 R09: 0000000000000000 [ 303.587185][T14916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.587195][T14916] R13: 00007f99cabe6038 R14: 00007f99cabe5fa0 R15: 00007ffe0c6b19a8 [ 303.587229][T14916] [ 303.587310][T14916] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3169'. [ 304.046675][T14936] netlink: 'syz.0.3174': attribute type 9 has an invalid length. [ 304.293389][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'. [ 304.460581][T14962] syzkaller1: entered promiscuous mode [ 304.466489][T14962] syzkaller1: entered allmulticast mode [ 304.495738][T14958] tipc: Enabled bearer , priority 0 [ 304.508442][T14958] syzkaller0: entered promiscuous mode [ 304.514530][T14958] syzkaller0: entered allmulticast mode [ 304.581014][T14958] tipc: Resetting bearer [ 304.612464][T14956] tipc: Resetting bearer [ 304.703436][T14956] tipc: Disabling bearer [ 304.826707][T14985] FAULT_INJECTION: forcing a failure. [ 304.826707][T14985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.840259][T14985] CPU: 1 UID: 0 PID: 14985 Comm: syz.1.3194 Not tainted syzkaller #0 PREEMPT(full) [ 304.840284][T14985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 304.840307][T14985] Call Trace: [ 304.840314][T14985] [ 304.840322][T14985] dump_stack_lvl+0x189/0x250 [ 304.840350][T14985] ? __pfx____ratelimit+0x10/0x10 [ 304.840371][T14985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.840392][T14985] ? __pfx__printk+0x10/0x10 [ 304.840410][T14985] ? __might_fault+0xb0/0x130 [ 304.840444][T14985] should_fail_ex+0x414/0x560 [ 304.840473][T14985] _copy_from_user+0x2d/0xb0 [ 304.840495][T14985] nr_rt_ioctl+0x74f/0xd50 [ 304.840528][T14985] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 304.840545][T14985] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.840577][T14985] ? apparmor_capable+0x137/0x1b0 [ 304.840603][T14985] ? capable+0x89/0xe0 [ 304.840621][T14985] ? nr_ioctl+0x1b1/0x3b0 [ 304.840648][T14985] sock_do_ioctl+0xdc/0x300 [ 304.840671][T14985] ? __pfx_sock_do_ioctl+0x10/0x10 [ 304.840709][T14985] sock_ioctl+0x576/0x790 [ 304.840731][T14985] ? __pfx_sock_ioctl+0x10/0x10 [ 304.840754][T14985] ? __fget_files+0x3a0/0x420 [ 304.840769][T14985] ? __fget_files+0x2a/0x420 [ 304.840788][T14985] ? bpf_lsm_file_ioctl+0x9/0x20 [ 304.840808][T14985] ? __pfx_sock_ioctl+0x10/0x10 [ 304.840827][T14985] __se_sys_ioctl+0xfc/0x170 [ 304.840851][T14985] do_syscall_64+0xfa/0xfa0 [ 304.840869][T14985] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.840888][T14985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.840904][T14985] ? clear_bhb_loop+0x60/0xb0 [ 304.840926][T14985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.840942][T14985] RIP: 0033:0x7f631658efc9 [ 304.840959][T14985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.840973][T14985] RSP: 002b:00007f631747e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.840993][T14985] RAX: ffffffffffffffda RBX: 00007f63167e5fa0 RCX: 00007f631658efc9 [ 304.841006][T14985] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 304.841018][T14985] RBP: 00007f631747e090 R08: 0000000000000000 R09: 0000000000000000 [ 304.841029][T14985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.841040][T14985] R13: 00007f63167e6038 R14: 00007f63167e5fa0 R15: 00007ffc7442ab68 [ 304.841071][T14985] [ 305.134657][T14993] tipc: Enabled bearer , priority 0 [ 305.146008][T14993] syzkaller0: entered promiscuous mode [ 305.151774][T14993] syzkaller0: entered allmulticast mode [ 305.216100][T14983] tipc: Resetting bearer [ 305.237427][T14980] tipc: Resetting bearer [ 305.365693][T14980] tipc: Disabling bearer [ 305.368523][T15008] netlink: 'syz.0.3199': attribute type 2 has an invalid length. [ 305.576317][T15019] syzkaller1: entered promiscuous mode [ 305.581819][T15019] syzkaller1: entered allmulticast mode [ 305.668679][T15026] __nla_validate_parse: 4 callbacks suppressed [ 305.668696][T15026] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3205'. [ 305.867179][T15039] tipc: Enabling of bearer rejected, failed to enable media [ 305.967410][T15045] tipc: Enabling of bearer rejected, already enabled [ 306.008717][T15050] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3216'. [ 306.062338][T15052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3217'. [ 306.075782][T15052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3217'. [ 306.128981][T15056] FAULT_INJECTION: forcing a failure. [ 306.128981][T15056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.159791][T15056] CPU: 0 UID: 0 PID: 15056 Comm: syz.0.3219 Not tainted syzkaller #0 PREEMPT(full) [ 306.159817][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.159828][T15056] Call Trace: [ 306.159835][T15056] [ 306.159843][T15056] dump_stack_lvl+0x189/0x250 [ 306.159871][T15056] ? __pfx____ratelimit+0x10/0x10 [ 306.159893][T15056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.159916][T15056] ? __pfx__printk+0x10/0x10 [ 306.159948][T15056] should_fail_ex+0x414/0x560 [ 306.159978][T15056] _copy_to_user+0x31/0xb0 [ 306.160002][T15056] simple_read_from_buffer+0xe1/0x170 [ 306.160036][T15056] proc_fail_nth_read+0x1b3/0x220 [ 306.160060][T15056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.160084][T15056] ? rw_verify_area+0x2a6/0x4d0 [ 306.160105][T15056] ? __lock_acquire+0xab9/0xd20 [ 306.160121][T15056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.160144][T15056] vfs_read+0x200/0xa30 [ 306.160166][T15056] ? fdget_pos+0x247/0x320 [ 306.160187][T15056] ? __pfx___mutex_lock+0x10/0x10 [ 306.160211][T15056] ? __pfx_vfs_read+0x10/0x10 [ 306.160235][T15056] ? __fget_files+0x2a/0x420 [ 306.160257][T15056] ? __fget_files+0x3a0/0x420 [ 306.160272][T15056] ? __fget_files+0x2a/0x420 [ 306.160298][T15056] ksys_read+0x145/0x250 [ 306.160320][T15056] ? __fget_files+0x2a/0x420 [ 306.160338][T15056] ? __pfx_ksys_read+0x10/0x10 [ 306.160365][T15056] ? do_syscall_64+0xbe/0xfa0 [ 306.160390][T15056] do_syscall_64+0xfa/0xfa0 [ 306.160409][T15056] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.160430][T15056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.160448][T15056] ? clear_bhb_loop+0x60/0xb0 [ 306.160470][T15056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.160487][T15056] RIP: 0033:0x7f99ca98d9dc [ 306.160504][T15056] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 306.160519][T15056] RSP: 002b:00007f99cb8a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.160538][T15056] RAX: ffffffffffffffda RBX: 00007f99cabe5fa0 RCX: 00007f99ca98d9dc [ 306.160552][T15056] RDX: 000000000000000f RSI: 00007f99cb8a50a0 RDI: 0000000000000003 [ 306.160563][T15056] RBP: 00007f99cb8a5090 R08: 0000000000000000 R09: 0000000000000000 [ 306.160574][T15056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.160584][T15056] R13: 00007f99cabe6038 R14: 00007f99cabe5fa0 R15: 00007ffe0c6b19a8 [ 306.160617][T15056] [ 306.487957][T15066] tipc: Enabling of bearer rejected, failed to enable media [ 306.516642][T15066] syzkaller0: entered promiscuous mode [ 306.522142][T15066] syzkaller0: entered allmulticast mode [ 306.544412][T15066] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 306.680958][T15074] tipc: Enabling of bearer rejected, already enabled [ 306.760503][T15080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3232'. [ 306.760950][T15082] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.862816][T15088] netlink: 'syz.0.3235': attribute type 3 has an invalid length. [ 306.886632][T15088] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3235'. [ 307.054883][T15088] bond0 (unregistering): Released all slaves [ 307.299589][T15107] netlink: 'syz.0.3240': attribute type 1 has an invalid length. [ 307.331713][T15109] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3241'. [ 307.382474][T15111] tipc: Enabling of bearer rejected, already enabled [ 307.445370][T15116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.581477][T15123] syzkaller0: entered promiscuous mode [ 307.589650][T15123] syzkaller0: entered allmulticast mode [ 307.720653][T15131] net_ratelimit: 20 callbacks suppressed [ 307.720674][T15131] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 307.814324][T15140] netlink: 'syz.0.3252': attribute type 2 has an invalid length. [ 307.818762][T15139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3254'. [ 307.838969][T15140] : entered promiscuous mode [ 307.918563][T15146] tipc: Enabling of bearer rejected, already enabled [ 307.937263][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3252'. [ 308.320252][T15168] syzkaller1: entered promiscuous mode [ 308.326434][T15168] syzkaller1: entered allmulticast mode [ 308.336947][T15171] syzkaller0: entered promiscuous mode [ 308.342549][T15171] syzkaller0: entered allmulticast mode [ 308.393605][T15174] tipc: Enabling of bearer rejected, failed to enable media [ 308.413888][T15174] syzkaller0: entered promiscuous mode [ 308.422726][T15174] syzkaller0: entered allmulticast mode [ 308.432217][T15174] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 308.628068][T15183] FAULT_INJECTION: forcing a failure. [ 308.628068][T15183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.644752][T15183] CPU: 0 UID: 0 PID: 15183 Comm: syz.4.3270 Not tainted syzkaller #0 PREEMPT(full) [ 308.644779][T15183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.644790][T15183] Call Trace: [ 308.644798][T15183] [ 308.644806][T15183] dump_stack_lvl+0x189/0x250 [ 308.644835][T15183] ? __pfx____ratelimit+0x10/0x10 [ 308.644857][T15183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.644880][T15183] ? __pfx__printk+0x10/0x10 [ 308.644912][T15183] should_fail_ex+0x414/0x560 [ 308.644940][T15183] _copy_to_user+0x31/0xb0 [ 308.644963][T15183] simple_read_from_buffer+0xe1/0x170 [ 308.644994][T15183] proc_fail_nth_read+0x1b3/0x220 [ 308.645019][T15183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.645044][T15183] ? rw_verify_area+0x2a6/0x4d0 [ 308.645066][T15183] ? __lock_acquire+0xab9/0xd20 [ 308.645082][T15183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.645105][T15183] vfs_read+0x200/0xa30 [ 308.645127][T15183] ? fdget_pos+0x247/0x320 [ 308.645149][T15183] ? __pfx___mutex_lock+0x10/0x10 [ 308.645172][T15183] ? __pfx_vfs_read+0x10/0x10 [ 308.645196][T15183] ? __fget_files+0x2a/0x420 [ 308.645218][T15183] ? __fget_files+0x3a0/0x420 [ 308.645233][T15183] ? __fget_files+0x2a/0x420 [ 308.645260][T15183] ksys_read+0x145/0x250 [ 308.645286][T15183] ? __pfx_ksys_read+0x10/0x10 [ 308.645313][T15183] ? do_syscall_64+0xbe/0xfa0 [ 308.645339][T15183] do_syscall_64+0xfa/0xfa0 [ 308.645358][T15183] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.645378][T15183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.645400][T15183] ? clear_bhb_loop+0x60/0xb0 [ 308.645420][T15183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.645436][T15183] RIP: 0033:0x7fb40958d9dc [ 308.645453][T15183] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 308.645468][T15183] RSP: 002b:00007fb40a3c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.645488][T15183] RAX: ffffffffffffffda RBX: 00007fb4097e5fa0 RCX: 00007fb40958d9dc [ 308.645501][T15183] RDX: 000000000000000f RSI: 00007fb40a3c50a0 RDI: 0000000000000004 [ 308.645512][T15183] RBP: 00007fb40a3c5090 R08: 0000000000000000 R09: 0000000000000000 [ 308.645523][T15183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.645534][T15183] R13: 00007fb4097e6038 R14: 00007fb4097e5fa0 R15: 00007ffdbcfd82e8 [ 308.645567][T15183] [ 309.009133][T15191] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 309.055903][T15194] sctp: [Deprecated]: syz.1.3274 (pid 15194) Use of int in maxseg socket option. [ 309.055903][T15194] Use struct sctp_assoc_value instead [ 309.099676][T15191] 8021q: adding VLAN 0 to HW filter on device bond10 [ 309.198760][T15201] vlan2: entered promiscuous mode [ 309.211897][T15201] bond10: entered promiscuous mode [ 309.219951][T15201] vlan2: entered allmulticast mode [ 309.225091][T15201] bond10: entered allmulticast mode [ 309.368182][T15214] tipc: Enabling of bearer rejected, failed to enable media [ 309.424202][T15214] syzkaller0: entered promiscuous mode [ 309.431880][T15214] syzkaller0: entered allmulticast mode [ 309.486647][T15214] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 309.524040][T15229] netlink: zone id is out of range [ 309.530561][T15229] netlink: zone id is out of range [ 309.536218][T15229] netlink: zone id is out of range [ 309.541501][T15229] netlink: zone id is out of range [ 309.547502][T15229] netlink: zone id is out of range [ 309.552734][T15229] netlink: zone id is out of range [ 309.562238][T15229] netlink: zone id is out of range [ 309.568682][T15229] netlink: zone id is out of range [ 309.574290][T15229] netlink: zone id is out of range [ 310.008236][T15255] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 310.068731][T15255] 8021q: adding VLAN 0 to HW filter on device bond11 [ 310.083853][T15259] vlan0: entered promiscuous mode [ 310.090112][T15259] bond11: entered promiscuous mode [ 310.095963][T15259] vlan0: entered allmulticast mode [ 310.101374][T15259] bond11: entered allmulticast mode [ 310.387061][T15275] tipc: Enabling of bearer rejected, failed to enable media [ 310.409532][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3299'. [ 310.431338][T15276] tipc: Enabled bearer , priority 0 [ 310.439310][T15276] syzkaller0: entered promiscuous mode [ 310.452575][T15276] syzkaller0: entered allmulticast mode [ 310.477654][T15276] tipc: Resetting bearer [ 310.549400][T15272] tipc: Resetting bearer [ 310.565742][T15272] tipc: Disabling bearer [ 310.703520][T15292] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.711199][T15290] tipc: Enabled bearer , priority 0 [ 310.721548][T15290] syzkaller0: entered promiscuous mode [ 310.727347][T15290] syzkaller0: entered allmulticast mode [ 310.740242][T15290] tipc: Resetting bearer [ 310.751627][T15289] tipc: Resetting bearer [ 310.782816][T15289] tipc: Disabling bearer [ 310.991657][T15304] tipc: Enabled bearer , priority 0 [ 311.038230][T15304] syzkaller0: entered promiscuous mode [ 311.056898][T15304] syzkaller0: entered allmulticast mode [ 311.083220][T15304] tipc: Resetting bearer [ 311.111448][T15301] tipc: Resetting bearer [ 312.528888][T15301] tipc: Disabling bearer [ 312.538209][T15317] syzkaller0: entered promiscuous mode [ 312.563012][T15317] syzkaller0: entered allmulticast mode [ 312.707151][T15345] __nla_validate_parse: 1 callbacks suppressed [ 312.707169][T15345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 312.773372][T15345] net_ratelimit: 46 callbacks suppressed [ 312.773391][T15345] openvswitch: netlink: Missing key (keys=40, expected=80) [ 312.818996][T15354] netlink: 'syz.2.3327': attribute type 1 has an invalid length. [ 312.872317][T15358] tipc: Enabling of bearer rejected, already enabled [ 312.881604][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3329'. [ 312.969754][T15354] 8021q: adding VLAN 0 to HW filter on device bond12 [ 313.264029][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 313.273994][T15387] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 313.333968][T15389] netlink: 'syz.0.3339': attribute type 29 has an invalid length. [ 313.368214][T15389] netlink: 'syz.0.3339': attribute type 29 has an invalid length. [ 313.382714][T15393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3343'. [ 313.403179][T15389] bond0: (slave gre0): Error: Device type is different from other slaves [ 313.581259][T15410] netlink: 'syz.0.3346': attribute type 1 has an invalid length. [ 313.650966][T15408] netlink: 'syz.2.3347': attribute type 83 has an invalid length. [ 313.672111][T15410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.700164][T15413] tipc: Enabled bearer , priority 0 [ 313.732383][T15404] vlan3: entered promiscuous mode [ 313.738692][T15404] bond0: entered promiscuous mode [ 313.749075][T15404] vlan3: entered allmulticast mode [ 313.754218][T15404] bond0: entered allmulticast mode [ 313.802464][T15413] syzkaller0: entered promiscuous mode [ 313.809085][T15413] syzkaller0: entered allmulticast mode [ 313.826613][T15413] tipc: Resetting bearer [ 313.850912][T15412] tipc: Resetting bearer [ 313.909580][T15412] tipc: Disabling bearer [ 313.916020][T15431] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.927717][T15431] FAULT_INJECTION: forcing a failure. [ 313.927717][T15431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.928428][T15429] netlink: 'syz.4.3355': attribute type 1 has an invalid length. [ 313.941505][T15431] CPU: 1 UID: 0 PID: 15431 Comm: syz.1.3353 Not tainted syzkaller #0 PREEMPT(full) [ 313.941529][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.941540][T15431] Call Trace: [ 313.941550][T15431] [ 313.941559][T15431] dump_stack_lvl+0x189/0x250 [ 313.941587][T15431] ? __pfx____ratelimit+0x10/0x10 [ 313.941607][T15431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.941630][T15431] ? __pfx__printk+0x10/0x10 [ 313.941648][T15431] ? __might_fault+0xb0/0x130 [ 313.941682][T15431] should_fail_ex+0x414/0x560 [ 313.941712][T15431] _copy_from_user+0x2d/0xb0 [ 313.941733][T15431] ___sys_sendmsg+0x158/0x2a0 [ 313.941755][T15431] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.941815][T15431] ? __might_fault+0xb0/0x130 [ 313.941842][T15431] __sys_sendmmsg+0x227/0x430 [ 313.941865][T15431] ? __pfx___sys_sendmmsg+0x10/0x10 [ 313.941891][T15431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 313.941932][T15431] ? ksys_write+0x22a/0x250 [ 313.941958][T15431] ? __pfx_ksys_write+0x10/0x10 [ 313.941990][T15431] __x64_sys_sendmmsg+0xa0/0xc0 [ 313.942009][T15431] do_syscall_64+0xfa/0xfa0 [ 313.942029][T15431] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.942049][T15431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.942066][T15431] ? clear_bhb_loop+0x60/0xb0 [ 313.942087][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.942104][T15431] RIP: 0033:0x7f631658efc9 [ 313.942121][T15431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.942136][T15431] RSP: 002b:00007f631747e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 313.942155][T15431] RAX: ffffffffffffffda RBX: 00007f63167e5fa0 RCX: 00007f631658efc9 [ 313.942167][T15431] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 313.942178][T15431] RBP: 00007f631747e090 R08: 0000000000000000 R09: 0000000000000000 [ 313.942188][T15431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.942199][T15431] R13: 00007f63167e6038 R14: 00007f63167e5fa0 R15: 00007ffc7442ab68 [ 313.942235][T15431] [ 314.115261][T15435] [ 314.159658][T15435] ====================================================== [ 314.166656][T15435] WARNING: possible circular locking dependency detected [ 314.173663][T15435] syzkaller #0 Not tainted [ 314.178054][T15435] ------------------------------------------------------ [ 314.185046][T15435] syz.0.3356/15435 is trying to acquire lock: [ 314.191087][T15435] ffffffff8f4271d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 314.200227][T15435] [ 314.200227][T15435] but task is already holding lock: [ 314.207582][T15435] ffff888027e03770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 314.216802][T15435] [ 314.216802][T15435] which lock already depends on the new lock. [ 314.216802][T15435] [ 314.227193][T15435] [ 314.227193][T15435] the existing dependency chain (in reverse order) is: [ 314.236187][T15435] [ 314.236187][T15435] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 314.244165][T15435] lock_acquire+0x120/0x360 [ 314.249180][T15435] _raw_spin_lock_bh+0x36/0x50 [ 314.254451][T15435] nr_rt_device_down+0x12a/0x720 [ 314.259895][T15435] nr_device_event+0x137/0x150 [ 314.265175][T15435] notifier_call_chain+0x1b6/0x3e0 [ 314.270791][T15435] __dev_notify_flags+0x18d/0x2e0 [ 314.276321][T15435] netif_change_flags+0xe8/0x1a0 [ 314.281766][T15435] dev_change_flags+0x130/0x260 [ 314.287127][T15435] dev_ioctl+0x7b4/0x1150 [ 314.291961][T15435] sock_do_ioctl+0x22c/0x300 [ 314.297055][T15435] sock_ioctl+0x576/0x790 [ 314.301893][T15435] __se_sys_ioctl+0xfc/0x170 [ 314.306992][T15435] do_syscall_64+0xfa/0xfa0 [ 314.312002][T15435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.318396][T15435] [ 314.318396][T15435] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 314.326201][T15435] lock_acquire+0x120/0x360 [ 314.331208][T15435] _raw_spin_lock_bh+0x36/0x50 [ 314.336473][T15435] nr_rt_device_down+0xa9/0x720 [ 314.341827][T15435] nr_device_event+0x137/0x150 [ 314.347095][T15435] notifier_call_chain+0x1b6/0x3e0 [ 314.352710][T15435] __dev_notify_flags+0x18d/0x2e0 [ 314.358242][T15435] netif_change_flags+0xe8/0x1a0 [ 314.363689][T15435] dev_change_flags+0x130/0x260 [ 314.369050][T15435] dev_ioctl+0x7b4/0x1150 [ 314.373895][T15435] sock_do_ioctl+0x22c/0x300 [ 314.378986][T15435] sock_ioctl+0x576/0x790 [ 314.383819][T15435] __se_sys_ioctl+0xfc/0x170 [ 314.388916][T15435] do_syscall_64+0xfa/0xfa0 [ 314.393928][T15435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.400320][T15435] [ 314.400320][T15435] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 314.408208][T15435] validate_chain+0xb9b/0x2140 [ 314.413479][T15435] __lock_acquire+0xab9/0xd20 [ 314.418657][T15435] lock_acquire+0x120/0x360 [ 314.423659][T15435] _raw_spin_lock_bh+0x36/0x50 [ 314.428925][T15435] nr_rt_ioctl+0x390/0xd50 [ 314.433846][T15435] sock_do_ioctl+0xdc/0x300 [ 314.438858][T15435] sock_ioctl+0x576/0x790 [ 314.443692][T15435] __se_sys_ioctl+0xfc/0x170 [ 314.448788][T15435] do_syscall_64+0xfa/0xfa0 [ 314.453800][T15435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.460194][T15435] [ 314.460194][T15435] other info that might help us debug this: [ 314.460194][T15435] [ 314.470403][T15435] Chain exists of: [ 314.470403][T15435] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 314.470403][T15435] [ 314.484208][T15435] Possible unsafe locking scenario: [ 314.484208][T15435] [ 314.491641][T15435] CPU0 CPU1 [ 314.496984][T15435] ---- ---- [ 314.502330][T15435] lock(&nr_node->node_lock); [ 314.507079][T15435] lock(nr_node_list_lock); [ 314.514170][T15435] lock(&nr_node->node_lock); [ 314.521441][T15435] lock(nr_neigh_list_lock); [ 314.526102][T15435] [ 314.526102][T15435] *** DEADLOCK *** [ 314.526102][T15435] [ 314.534227][T15435] 2 locks held by syz.0.3356/15435: [ 314.539405][T15435] #0: ffffffff8f427238 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 314.548879][T15435] #1: ffff888027e03770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 314.558519][T15435] [ 314.558519][T15435] stack backtrace: [ 314.564388][T15435] CPU: 1 UID: 0 PID: 15435 Comm: syz.0.3356 Not tainted syzkaller #0 PREEMPT(full) [ 314.564405][T15435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.564414][T15435] Call Trace: [ 314.564422][T15435] [ 314.564430][T15435] dump_stack_lvl+0x189/0x250 [ 314.564453][T15435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.564472][T15435] ? __pfx__printk+0x10/0x10 [ 314.564484][T15435] ? stack_trace_save+0x9c/0xe0 [ 314.564507][T15435] print_circular_bug+0x2ee/0x310 [ 314.564527][T15435] check_noncircular+0x134/0x160 [ 314.564546][T15435] validate_chain+0xb9b/0x2140 [ 314.564571][T15435] __lock_acquire+0xab9/0xd20 [ 314.564586][T15435] ? nr_rt_ioctl+0x390/0xd50 [ 314.564600][T15435] lock_acquire+0x120/0x360 [ 314.564612][T15435] ? nr_rt_ioctl+0x390/0xd50 [ 314.564628][T15435] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 314.564648][T15435] ? nr_rt_ioctl+0x390/0xd50 [ 314.564662][T15435] _raw_spin_lock_bh+0x36/0x50 [ 314.564677][T15435] ? nr_rt_ioctl+0x390/0xd50 [ 314.564691][T15435] nr_rt_ioctl+0x390/0xd50 [ 314.564709][T15435] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 314.564723][T15435] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.564743][T15435] ? apparmor_capable+0x137/0x1b0 [ 314.564762][T15435] ? capable+0x89/0xe0 [ 314.564776][T15435] ? nr_ioctl+0x1b1/0x3b0 [ 314.564796][T15435] sock_do_ioctl+0xdc/0x300 [ 314.564815][T15435] ? __pfx_sock_do_ioctl+0x10/0x10 [ 314.564837][T15435] sock_ioctl+0x576/0x790 [ 314.564853][T15435] ? __pfx_sock_ioctl+0x10/0x10 [ 314.564869][T15435] ? __fget_files+0x3a0/0x420 [ 314.564882][T15435] ? __fget_files+0x2a/0x420 [ 314.564896][T15435] ? bpf_lsm_file_ioctl+0x9/0x20 [ 314.564911][T15435] ? __pfx_sock_ioctl+0x10/0x10 [ 314.564926][T15435] __se_sys_ioctl+0xfc/0x170 [ 314.564944][T15435] do_syscall_64+0xfa/0xfa0 [ 314.564960][T15435] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.564976][T15435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.564989][T15435] ? clear_bhb_loop+0x60/0xb0 [ 314.565005][T15435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.565019][T15435] RIP: 0033:0x7f99ca98efc9 [ 314.565032][T15435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.565045][T15435] RSP: 002b:00007f99cb8a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.565065][T15435] RAX: ffffffffffffffda RBX: 00007f99cabe5fa0 RCX: 00007f99ca98efc9 [ 314.565076][T15435] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 314.565085][T15435] RBP: 00007f99caa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.565094][T15435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.565102][T15435] R13: 00007f99cabe6038 R14: 00007f99cabe5fa0 R15: 00007ffe0c6b19a8 [ 314.565120][T15435] [ 314.890779][T15429] syzkaller0: entered promiscuous mode [ 314.896969][T15429] syzkaller0: entered allmulticast mode [ 317.108323][ T1297] ieee802154 phy1 wpan1: encryption failed: -22