last executing test programs: 6.129968683s ago: executing program 2 (id=2651): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}], 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) 6.106456924s ago: executing program 2 (id=2652): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x1554, 0x2c, 0xf27, 0x70bd28, 0xffffeffd, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1524, 0x2, [@TCA_CGROUP_EMATCHES={0x304, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x56, 0x8, 0xff}, {0x3, 0x0, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xbd, 0x73, 0x2}, {0xc891}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x8, 0x1}, {0x200, 0x6e, 0x1}}}]}}, @TCF_EM_META={0x7c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR='l', @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="1002c606d2d4747526d5", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="4ac6a707", @TCF_META_TYPE_VAR="c58a", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="e331e7dc9086288e68d0"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff, 0x7f, 0x1}, {0x0, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x4, 0x1}, {0x1a97, 0x8}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1ff, 0x7, 0x5}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x8}, {0x7, 0x3, 0x1, "aa8701"}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x4742, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x3e, 0x2}, {0x0, 0x4}}}]}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0xe4, 0x4, 0x1000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7}, {0x2ff, 0x4}}}, @TCA_EM_META_LVALUE={0x2b, 0x2, [@TCF_META_TYPE_VAR="45321855b8fac57f16ac", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="d88290a8fc4673", @TCF_META_TYPE_VAR="a320c43e4eed", @TCF_META_TYPE_VAR='v@', @TCF_META_TYPE_VAR="1b8f95f2e6260f4a1cc0"]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xdd, 0x1, 0x5}, {0x7, 0xa9d, 0x4, 0x2, 0x5, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6d}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffc, 0x7, 0x77}, {{0x1, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0xfd4f}, {0x2, 0x9, 0x100, 0x4}}}, @TCF_EM_CONTAINER={0xd4, 0x2, 0x0, 0x0, {{0x6}, "2900e69f14be8e57ec84d0930f46f9ba8f09b08acd77c284205b1d195d626cd6cebb9a8dc4909ff63eeb8d36052fa3372dea2e2d3da7bff3909001e2b2583a2174bd37e384d9b812c9700055905295375e691beaf3b692191f1ed63e062247b0dfa314015e56b5d5adf88b625ac1fe7a7d03afd96597bc54508df38d616db750861e2c776f29bc70f78fd9ea5f8cfcfb433d97a7f158fc969c1d0ca2f43806d331619864c9caba1b747eb395bcaba716fd45f0144a142a75883ab099041929f3f747d6958a"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x9}, {0x0, 0x955d, 0x5, 0xd}}}]}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x81, 0x2, 0xc}, {0xe, 0x1, 0x1, '\a'}}}, @TCF_EM_META={0x40, 0x3, 0x0, 0x0, {{0xffff, 0x4, 0x8001}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x6, 0x1}, {0x3, 0xe, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x9, 0x1}, {0x1, 0x5, 0x3}}}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR="26516522b378a9f8", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="e5e01762012b54710e", @TCF_META_TYPE_VAR="94fe"]}]}}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}, @TCA_CGROUP_POLICE={0x410, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0xb4, 0x7, 0x3, 0xc, 0x0, 0x5, 0x7fff, 0x7, 0x2, 0x2, 0x2, 0x5805, 0x2, 0x5, 0x1551, 0x8, 0x3, 0x5, 0x3, 0xe, 0xfffff9a5, 0x6, 0x0, 0x597c, 0x6, 0x80000001, 0x4, 0x5, 0xd5, 0x4, 0x4, 0x200, 0x4, 0x3, 0xa9000, 0x5ccf, 0xbf, 0x1000, 0x40, 0x1, 0x6, 0x9, 0xd, 0x2, 0x80000001, 0x7, 0xfffff111, 0x36, 0xfff, 0x7, 0xfff, 0x3, 0x1, 0xfa, 0x5, 0xc, 0x6, 0x6, 0x7fff, 0x6, 0x4431, 0x7, 0x7, 0x5, 0xd38, 0x9af, 0x466, 0x9, 0x6, 0x80000001, 0x9, 0x10000, 0x23c877b3, 0x88e, 0x3e2, 0xbe, 0x4, 0x5, 0x9, 0x9, 0xeffa, 0x4, 0x3, 0xff, 0xffffffff, 0xaa45, 0xff, 0xfff, 0x80, 0x2, 0x3, 0x6, 0x2, 0xf91, 0xa7c, 0xffffffff, 0x9bdd, 0x1ff, 0x1ff, 0x1000, 0x10, 0x400, 0x3, 0x200, 0x8, 0x100, 0x2, 0x0, 0x7d, 0xf8fd, 0x70, 0x9, 0xffffff80, 0x26, 0x9c8, 0x3, 0x9, 0x40, 0xe6, 0x1, 0x202, 0x0, 0xd, 0xe752, 0x3, 0x62, 0x8, 0x9, 0xde, 0x5, 0xe, 0x101, 0x7, 0x9, 0x4, 0xa9, 0x1, 0x4, 0x9, 0x2, 0x9, 0x0, 0x7, 0x0, 0x6116dbe3, 0x5, 0x32c1, 0x1, 0x1, 0x2, 0xfffffffa, 0x7, 0x3, 0x0, 0x7, 0x8b6, 0x4000, 0x401, 0x9, 0x3, 0x75, 0x5, 0x1, 0x5, 0x0, 0x0, 0x200, 0x7fff, 0x4, 0x2, 0x3, 0xffff, 0x10, 0x9a, 0x3, 0x3, 0x1, 0x8d, 0xffff, 0x3, 0x3, 0x7, 0x81, 0x4, 0x40, 0x3, 0x5, 0x8, 0x0, 0xc0e, 0x4a17, 0x9, 0x7, 0x9, 0x606, 0xfffffff9, 0x400, 0x8, 0x401, 0x3, 0x2, 0xffffffff, 0x200, 0xde7f, 0x3, 0x100, 0x2, 0x9, 0x8, 0x7, 0x2, 0x400, 0x100, 0x3ff, 0x6, 0x689, 0x1b3, 0xdca, 0x2, 0x6, 0x7, 0x80000001, 0x8, 0x10001, 0x8, 0xd5, 0x2, 0xaa, 0x3, 0x9, 0x3, 0xffff, 0x7, 0x340000, 0xfffffffc, 0x182, 0x1, 0x7fffffff, 0x9, 0x1, 0x2, 0x93, 0x33cd, 0x3, 0x9, 0x6a0d, 0x8000000, 0xb61, 0x5, 0x38000, 0x5, 0x3, 0x0, 0x81]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_CGROUP_ACT={0xdfc, 0x1, [@m_police={0x914, 0xf, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x48000000, 0x5beaf2f8, 0x3, 0xffffffff, 0x4, 0x80000000, 0x101, 0x1, 0x1000, 0x5590, 0x3, 0x1ff, 0x0, 0x6, 0x2, 0x8, 0x0, 0x1, 0x29bd, 0x4e2, 0x5, 0x1, 0x80000000, 0xc0, 0x0, 0x10001, 0x9, 0x5, 0x2a, 0x2, 0x40, 0x7, 0x6, 0x8, 0x7fff, 0x763d, 0x1000, 0x8, 0x1, 0x64, 0x8, 0x44, 0x83, 0x90c7, 0x1, 0x200, 0x5, 0x0, 0x3, 0x6, 0x6c0f08a9, 0x5fe, 0x7, 0x43, 0x7, 0xfff, 0x9, 0x6, 0x2f, 0x5, 0x6, 0x5, 0x8, 0x80000000, 0x3, 0x4, 0x200, 0x0, 0x2, 0x6, 0x0, 0xf, 0x8001, 0x4, 0x2, 0x4, 0x7, 0x7ff, 0x8, 0xdb, 0x7, 0x64, 0x2, 0x628d0ec0, 0x7, 0x8, 0x2, 0xfa, 0x17, 0x9, 0x2, 0x2, 0x8e2, 0x6, 0x9, 0x7f, 0x8, 0x8, 0x0, 0x5, 0x3, 0x9, 0x4, 0x4, 0xf00, 0x0, 0xe9, 0x80000000, 0x10000, 0x0, 0x52d, 0x3, 0x40, 0x2, 0x1, 0x1, 0x8, 0x8, 0x6, 0x4, 0x263, 0x80, 0x8, 0x4, 0x9, 0x1, 0x800, 0xb, 0xd52e, 0x3, 0xd, 0x5a, 0x9, 0x4f16b2d6, 0x0, 0x8, 0x3, 0x10000, 0x9, 0x849f, 0x3, 0x20, 0x80000000, 0xff6f, 0x8, 0x6, 0x4, 0x6, 0x9, 0x5336, 0x80000000, 0x0, 0x6, 0x10001, 0x101, 0x10001, 0x52ea, 0x3, 0x9, 0x7f, 0x3, 0x4, 0x0, 0x3ff, 0x7d5cf57d, 0x1, 0x0, 0x2, 0x7, 0xfffffff8, 0x2, 0xff, 0x1, 0x331, 0x5, 0x7f, 0x9, 0x0, 0x595, 0x88d, 0x8, 0x1, 0x5, 0x80000001, 0x10, 0x6, 0x5, 0x1, 0x40, 0x1000, 0xfffffffe, 0x9, 0x0, 0x3, 0x5, 0x3, 0x2, 0xfffffffc, 0x2, 0x7, 0x8, 0x61e096f5, 0x8, 0x3, 0x1, 0x4, 0x7, 0x7fff, 0x8, 0x4107, 0x5, 0x81, 0x3, 0x2, 0x6, 0x6, 0x0, 0x80000000, 0x400000, 0x9, 0x5, 0xfffffffc, 0x9, 0x400, 0x4, 0x2, 0x0, 0x1, 0x4, 0x0, 0x519, 0x7d1b, 0x4, 0x3, 0x9, 0x4, 0x2, 0x8, 0x7, 0x5, 0x6a0f, 0x10, 0x80000001, 0x0, 0x3, 0x7, 0x124, 0xfffffffd, 0x8, 0x80, 0x100, 0x6, 0x6, 0x1b9, 0x3]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0xedeb, 0x7, 0x7, 0x81, 0x887, 0x4, 0xc2ad, 0x6, 0x4, 0x6, 0x10, 0x7, 0x1, 0xf9, 0x3ff, 0x101, 0x8, 0xc, 0xc6d, 0xe, 0x7, 0x6, 0x6, 0x0, 0x1ff, 0xc0000000, 0xd, 0x8, 0x8001, 0x7, 0x4, 0x7, 0x0, 0x8001, 0x4, 0x7, 0x0, 0x850, 0x5, 0x1ff, 0xff, 0x1, 0xde, 0x9, 0xfffffff8, 0x6, 0x4, 0x1, 0x26, 0x10, 0x8, 0xfffffff7, 0x400, 0x7, 0x10000, 0x0, 0x2, 0x3630, 0x92c, 0x0, 0x0, 0xb, 0x0, 0x200, 0x200, 0x4, 0xfa6, 0x7, 0x1, 0x8, 0x9, 0x6, 0xd2, 0x1, 0xffffff7f, 0x0, 0x1, 0x6, 0x510, 0x7fff, 0xffffffff, 0xab8, 0x291, 0x0, 0xffff87f1, 0x8, 0x4, 0x0, 0x4, 0x51, 0x3, 0x3, 0x9, 0x7b, 0x5, 0x0, 0x6, 0x8, 0x100, 0x2, 0xea71, 0x6d, 0x400, 0xfffffff4, 0x3, 0x1, 0x9, 0xe81, 0x4, 0x4, 0x40b6be83, 0x8000, 0x4, 0x6, 0x80000000, 0x8e, 0x7, 0xc38, 0xff, 0x9, 0xf6, 0xb959, 0x9, 0x1, 0x1000, 0x2, 0x4, 0x10001, 0x0, 0x6, 0x9, 0x1, 0x7, 0x2, 0xabfd, 0x5145, 0x1, 0x1000000, 0xffffff1a, 0xd, 0xa5, 0x6, 0x68, 0x7ff, 0x0, 0x9, 0x0, 0x5, 0x7f, 0x4, 0x0, 0x401, 0x2, 0x7, 0x4, 0x7fffffff, 0x9, 0x9, 0x2, 0x6, 0x2, 0xa235, 0xcff9, 0xfffffffc, 0x2, 0x0, 0xe77, 0x9, 0x957, 0x7fffffff, 0x401, 0x3, 0x5, 0xfff, 0x8b2, 0xd31, 0x5, 0x64, 0x5, 0x34c, 0x2, 0x94, 0x2, 0x7, 0x9, 0x9, 0x6, 0x586d, 0xa, 0xcd, 0x4, 0x100, 0x0, 0x7, 0x2, 0x7, 0xfffffff9, 0x10000, 0xffff, 0xcd0, 0xffff8001, 0x21b7, 0x8001, 0x9, 0x5, 0xa9, 0x1, 0x5, 0xfffffffa, 0x2, 0x987, 0xedf9, 0x4000000, 0x4, 0x128d, 0x5, 0x10001, 0x1000, 0x51, 0x5, 0x9, 0x2, 0x6, 0x0, 0xca6, 0xa, 0x5, 0x0, 0x81, 0xfffffffd, 0x8, 0x200, 0x6, 0xe4000000, 0x5, 0x5, 0x9, 0x3, 0x6, 0xe, 0x6, 0xf, 0x1, 0xfffffffe, 0x8, 0x0, 0x52, 0x475, 0x0, 0x3ff, 0x5, 0xfffffffe, 0x4, 0x8, 0x0, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]]}, {0x86, 0x6, "6911b6b520e3489b3a6c6377a70d6c6cbd628d614581d5174fdb3abde25df5946705acac60d8760ba597f53a6e6557fd82f1d7637b4964e95e176422c1578d4e20ac2316119abac2dec67d6598fb846920121e4bb8f069e38124d9eb4723ec60e6c7d530c6d87bb3a8df9ecaee4553498aaa59dfd73fdb497713cc4ede06a23ed27e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x120, 0x5, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0xdf, 0x6, "0d8f370cf9959c1d1b04feadb396d735696581562704cefa542213c9772050a6c461ee4986804cc8060bea8818e247769fbe8ae9aa1393ad0904fce41bc2a32881219225483e6cc0ba1f0fb490882262cb93412a39034bf8a54b3d544aa6f1b08aec7073bb026dec4dbe91ade29cf63325215d9563cac85a193c6ea0f7f56d7f5d3870e3cd2f4286378b396f2602f82b22ef8ba45ac02d46114acaed9bb6d889976ea6aa5ade1a42e7d073e732243d7ea4482216d0bdd9f3e3a5882aeffca382b08ce7ea85140e202231b0aa2331e4b295774301aa23174cf2980f"}, {0xc}, {0xc, 0x8, {0x8feae3beece6e527}}}}, @m_csum={0x128, 0x0, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0xb, 0x4543f943, 0xbe0}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb90, 0x3ff, 0x2, 0x10000, 0x8}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x20000001, 0x6, 0x8}, 0x69}}]}, {0xa8, 0x6, "c7a61980e93d62d8a80c5a6d158dc9a52d465b9187080ca3894a60bfdb881783f3a9076d8e1e87556f8491f047eeef6c289b3142958c4bbad2ff9646fed6329643c2f4d4eb8d9e6866f06d623b7e35f607fca45fc6108c1531cffc1c2cd681d72ac97f53de256d4bb7c886a7d3f06bd880db50c9aba89affbc44b2f5e26cd59367c3e5d89433af6b4c98b34c4ffb00e58b0b747bf28096a3d61a4c9cb504b6c97c92b971"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_simple={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'gtp\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'route\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'route\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x2, 0x200, 0x7}}]}, {0xd3, 0x6, "eeec6dae3e3c908562de28184eda39c789ed3a47f36ab083ee3620efee6bb21b4ba618c134116dc38a6ec942bdf6f50012d95cdc9f1575417b335f62272b081e8f541df99c6ef5c96c2033c7fa0d8b4eed28fb3e5f5c5eedbf74ee18c4373e2b965249fc3b34c7283f1b612632ebf6c56528ef5ae76da10f3f419616325ff592b17c1b8231e181319a2a8fec64259cd9bc39bbd95b493b36fddce2eb6ba01a949e243041c608ffff312c48b873a0aa0663c0aef9a987bf2c379b34284b5564823ff92db7e90057dca427bd4f91b856"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0xd8, 0x1, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x62, 0x2, 0x3}, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7836, 0x20000000, 0x3, 0x2}, @multicast2, @rand_addr=0x64010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8, 0x6, 0x5, 0x3}, @local, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff8000, 0xff, 0x6, 0xc, 0x10000}, @local, @multicast1, 0xffffff00, 0x1}}]}, {0x10, 0x6, "65c22f2f931da274b4039c1f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x8c, 0x19, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x10}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0xb7, 0x8, 0x3300000, 0x7}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x400}]}, {0x2f, 0x6, "7bd8068f179acef71f1dd04bea3e37b47fb4a89109aed051fc3c3fabca0afd01d60d64b8b3d23293f38fb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1554}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffd, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r2, 0x0, 0x40) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000020901030000000000000005100002000c000280050001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x84) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 4.823619852s ago: executing program 2 (id=2661): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x700, 0x0, 0x0, 0x4000}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 4.629751534s ago: executing program 2 (id=2663): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x822) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000002c000000030a01080000000000000000010000000900010073797a30000000000900030073797a320000000014000000060a0104000000000000000001000000146b0100000011"], 0x88}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a00000000000000", @ANYRES32=r4], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000f6f7a5057f46ae9fb5d14cb722272088a03812622cf866079fbfef9921ebd266f6bd09feb77d2ea1f440bdc450adb878", @ANYRES16=r6, @ANYBLOB="e6252bbd7000fcdbdf253b00000004008700"], 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x40000000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000540)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r8, 0x0, 0x0, 0x42, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) recvfrom$packet(r2, &(0x7f0000000440)=""/161, 0xa1, 0xc0002160, &(0x7f0000000500)={0x11, 0x6, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r11, &(0x7f0000000100), &(0x7f00000001c0)=@udp6, 0x900}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r12, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x0, 0x5, 0xdbc, r10}, 0x10) 4.337572634s ago: executing program 1 (id=2665): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe4ffffff}, 0x80) 4.088471329s ago: executing program 1 (id=2667): r0 = socket(0x10, 0x3, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8920, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000480)={0x1ff, 0x1799, 0x7, 0x7}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x2000c0c4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4, 0x4, 0x1, &(0x7f0000000140)=""/206, 0xce}, &(0x7f0000000080)=0x40) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@private1, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 3.740978992s ago: executing program 2 (id=2672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, 0x2, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, @CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffff9}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040141) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x140, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xfe}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "6fc307"}}]}, 0x140}}, 0x804) (async, rerun: 64) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) (rerun: 64) write$cgroup_pid(r2, &(0x7f0000000040)=r5, 0x12) 3.509878078s ago: executing program 2 (id=2675): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e7", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0xffffffff, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') unshare(0x6a040000) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40000) sendmsg$nl_route(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100}, 0x28) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68010000100001000000000000000000ac1414bb000000000000000000000000ac14142600000000000000000000000000000000000000000000300000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000ff01dba100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001007368613235362d61736d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040001004e224e240000fe80000000000000000000000000003814000e00"], 0x168}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, 0x0) shutdown(r6, 0x0) 2.922008724s ago: executing program 4 (id=2680): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c0400001000010400000000000000000048001f", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x0) 2.856636014s ago: executing program 0 (id=2681): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000204e0000", 0x58}], 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r1, 0x13, "8fcc41a458f26e54ebd995c948766a47bec980"}, &(0x7f0000000300)=0x1b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88000000000801040000000000007572729e0008050003000100000006000240000400000900010073797a3100000000050003001100000006000240dada00000900010073797a3000000000340004800800054060000000080001400000000408000640fffffffb080001400000bbed080004400000000008000540000004010600024080f30000"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4040010) socket$inet6(0xa, 0x3, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x655}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x14040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000cc0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) shutdown(r6, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x1d, &(0x7f0000000680)=0x1, 0x4) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 2.793314682s ago: executing program 3 (id=2683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) 2.621907846s ago: executing program 3 (id=2684): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r3, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e20, 0x1, @local, 0x388}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000f3ffffffff1300000000000000290000000b00"], 0x30}, 0x4) sendmmsg$unix(r0, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000801}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="620ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f0000000480)='GPL\x00', 0xffff6248, 0x0, 0x0, 0x41100}, 0x94) 2.621643815s ago: executing program 4 (id=2685): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x400, 0x101, 0x1, 0x9, 0x6, 0x5, 0x8f2, {r5, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0xffff, 0x11a, 0x0, 0x874, 0x80000000}}, &(0x7f0000000140)=0xb0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x148, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0e8d1ba030f44657e9ec8f97f13823cfcbb22d4349b23731e0abf16a72261ad13302b28f90c0c212ab1b31fcff68fb9e51c2c094fa90eaf6cee81af55967cc64623107ff171861a39d290f29ac6fb69f61125a8177d87d9409650e5bd6400b28f04cbf81cc5c445b6abd2bd7ca26bc89a23c02f2a29b3b01e1faf4713b416cced4d2fb4ccfd7a85cdb9930d8c36cd3f008c1f26e26e0f2b797957a4d039ba73f77fa55615802d1cbd1e122d9f2b12289215d7179084bf11cefd2ac8d34a971d0db980e5cf685e3a5b25c7a01fe60e9840cdb8600a2ff738705871d8ca0a44fc3a81606ef9d673dd65a26d8519a3d5515d2d56899c6f7e2d82126a479468cce22"}, @TCA_RED_PARMS={0x14, 0x1, {0x6, 0x8, 0x8, 0x2, 0x15, 0xe, 0x1}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x1000004, 0x0, {0x80}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000680)={0x0, 0x6, [0xacb, 0x5, 0x5, 0x1, 0x9, 0x2]}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), 0xffffffffffffffff) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) 2.498852696s ago: executing program 3 (id=2686): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84c0}, 0x8010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000280)={r5, r6/1000+10000}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000580)={r7, 0x800, 0x6, "3983cf5e5725"}, 0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r7, @in={{0x2, 0x4e21, @broadcast}}, 0xf, 0x96}, &(0x7f0000000140)=0x90) listen(r0, 0x0) socket(0x2, 0x805, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r8, 0x0) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 2.438963784s ago: executing program 4 (id=2687): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r3, 0x0, 0x20000f2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff3, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x10001, '\x00', r7, r2, 0x0, 0x2, 0x4}, 0x50) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r4, 0x6, 0x8, 0x3}, 0x10) 2.257764397s ago: executing program 4 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000005c000000030a01080000000000000000010000000900030073797a30000000001400048008000240fffffffe08000f40000000040900010073797a30000000001c0008800c000240fffffffffffffffa0c000140000000000000000214000000060a01040000000000000000010000021400000011000100"/183], 0xb8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20002820}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xb9, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'tunl0\x00', r4, 0x8, 0x40, 0x3, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x68, 0x0, 0x7, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x600, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xac}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffffb}]}, 0x68}, 0x1, 0x0, 0x0, 0x4880}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300058c9528b0180090001007866726d000000001c0002800800024000000001080001400000000f05000300020000000900010000020073792fcd579700001400000011000100000000dd3730f7110000000a"], 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10, 0x17}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x10}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x4000) 2.192398529s ago: executing program 4 (id=2689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfffffe00}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40900}, 0x20040084) 2.114081249s ago: executing program 4 (id=2690): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509", 0x4e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0xffffffff, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') unshare(0x6a040000) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40000) sendmsg$nl_route(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100}, 0x28) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68010000100001000000000000000000ac1414bb000000000000000000000000ac14142600000000000000000000000000000000000000000000300000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000ff01dba100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001007368613235362d61736d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040001004e224e240000fe80000000000000000000000000003814000e00"], 0x168}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, 0x0) shutdown(r6, 0x0) 1.889858769s ago: executing program 0 (id=2691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000"], 0x84}}, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x81}, 0x8) close(r4) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000009c0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x20000000, 0x200, 0xff, 0x4, {0x9, 0x1, 0x1c50, 0x7fff, 0x9, 0x5}, {0xa, 0x1, 0x1, 0x6, 0xd, 0x2}, 0x2, 0x0, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) getsockopt(r5, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000002c0)={r8, @in6={{0xa, 0x4e24, 0x2c97, @mcast1, 0x7ff}}}, &(0x7f0000000080)=0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x17c, 0x0, &(0x7f0000000100)="b5e379a5389bcfd05ad9ca72d507e6e0688b7c506a00a01c348c550212de4daa38cf670772b6abd2974d46b4e674752de5c84c7835b7b88c1ccc195dd39eb9ef33931feddc803c9877e2002eb439e498bf8f5eb92abdd10662a22df9a1f34ed96f12e703e687e56acb4b65aa5bf6e7d39eec3ac926a725e9e253c6d841d0417a5f0498dc978293724ee79db71d3776977d61b94ac864d7b619c195fe1bd1927b0d2745978a70dff02742a37201604628bf93388dd0f03aaca0e3c9598056a6135664bc275a5a42f3fa6476e16bbff6983694a1340d03d03018d285ea92fa021dafc787fc5f3d290746da13c580072ea126c3ab8f0630045061cfaa287d93a65249af2d985bfe67c306a9acfee17f836b8c0867dd49609008a694ccbf7efa77529148270b18ed042dec0f10ae86e71dee33ac4bc52a86ffcf4a196428af90728b6e5e7178b04d9af1a5c354ea27489f521c2d4342fde9017fabb24c75e78c657f2887a0c7e1ef73c3786eac8fde5f88754b40acd6a6a8a8d7f2174b8e", 0x0, 0x500, 0x0, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x1, 0x9}, 0x24) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.777878589s ago: executing program 3 (id=2692): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x23c2, &(0x7f00000003c0)={@broadcast, @random="6c7621d3cc94", @val={@void}, {@ipv6={0x86dd, @generic={0x4, 0x6, "7981ce", 0x2388, 0x62, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, @empty, {[@dstopts={0x62, 0x202, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x40000}, @generic={0x6, 0x1000, "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"}, @ra={0x5, 0x2, 0x7}]}, @fragment={0x29, 0x0, 0xa, 0x0, 0x0, 0x1, 0x64}, @hopopts={0x2c, 0xf, '\x00', [@generic={0xa, 0x6b, "d8f6586f4783e4bdfee220d2044cf9474278c5e4835395f8d49ec5e4eaf6622321d0abc7d64e6e831ce1b09ddc68d4426c40dc4947ec7f54510fcd54e95d8066f55825a7d82a3483eaf28fd5079bace86c8d18fe3059cb29441c17f356e42b64a6c846c1adc63f4e36d4d4"}, @hao={0xc9, 0x10, @mcast2}]}, @hopopts={0x21, 0x36, '\x00', [@pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x9, [0xa8, 0x9]}}, @pad1, @generic={0x2, 0xfe, "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"}, @pad1, @calipso={0x7, 0x50, {0x2, 0x12, 0x6, 0x0, [0x2, 0x3, 0x100000000, 0x2, 0x9, 0x8, 0x9, 0x80000000, 0x5]}}, @calipso={0x7, 0x40, {0x3, 0xe, 0x9, 0x7ff, [0xd, 0x26d5, 0xffffffffffffc2e5, 0x40, 0x101, 0x4, 0x1]}}]}, @routing={0x4, 0x14, 0x2, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0, @private2, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x89, 0x0, 0x81, 0x0, 0x0, 0x2, 0x67}, @routing={0x29, 0xc, 0x0, 0x9, 0x0, [@loopback, @mcast1, @private1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, @private0={0xfc, 0x0, '\x00', 0x1}]}], "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"}}}}}, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000204e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) 1.77517081s ago: executing program 0 (id=2693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20002844}, 0x8090) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xfffffffffffffff0) 1.643691746s ago: executing program 3 (id=2694): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (fail_nth: 9) 971.152214ms ago: executing program 1 (id=2695): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x46}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r1, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff01ac420640853fb284b326853d05589c909a340e78235dfeb63a8fb67873d7c7a96649559f431eeef5f018b3239fade45db2684abf4e728f12dad2cc280e4ed4fd506d584fb688d49830de4d799c8234057dbabfc4dcb68105576bd9048a5087fe0c4fcf3c7f6ee00d6617d66b328e9f4641f765d5"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x46}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r1, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff01ac420640853fb284b326853d05589c909a340e78235dfeb63a8fb67873d7c7a96649559f431eeef5f018b3239fade45db2684abf4e728f12dad2cc280e4ed4fd506d584fb688d49830de4d799c8234057dbabfc4dcb68105576bd9048a5087fe0c4fcf3c7f6ee00d6617d66b328e9f4641f765d5"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) 873.820712ms ago: executing program 3 (id=2696): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$packet(0x11, 0x0, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, 0x0) unshare(0x6a040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x24000080) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000100)={0x0, 0x1}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) accept4$nfc_llcp(r5, &(0x7f0000000000), &(0x7f0000000280)=0x60, 0x80800) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f00000002c0)=""/145, &(0x7f00000003c0)=0x91) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) sendmsg$nl_route_sched(r1, 0x0, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 789.266388ms ago: executing program 0 (id=2697): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@getspdinfo={0x14, 0x25, 0x10, 0x70bd2b, 0x25dfdbfe, 0x8001, ["", "", "", ""]}, 0x14}}, 0x20000000) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x2070, 0x15, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x45, 0x1, "b94f4c9b229bd118453e7a6fc5dda4411b7f29fb65fcb9cb9db361576f8114fce63c8ea0a5c390c139ba42db3ebb2fc9070f59ef0b19f688f3a642aca1ef74cc06"}, @INET_DIAG_REQ_BYTECODE={0x1001, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "9e34fd5a2a4e3cd98efd4fe21ab4d6852a58319ce0ad5c51a979021df3883a1f65efcdfeea1d4634faa3ce4aeb452d58e9a0ac19286affdcacf3e2e65539c52b22ab0efc3454648a047ba4c3bb140f07f93adbea734e05cf5567713704443d335acfe651725a86b14afc42e5b8d112da0f5c15fa17ae0485e24c79abb5e11eefceda3ec92945d2a6b96987495372144ab417d6dca953d45a3b98f397f95c340b3d97b5098ba85bcea60db44637cfb77ef4"}, @INET_DIAG_REQ_BYTECODE={0xf55, 0x1, "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"}]}, 0x2070}, 0x1, 0x0, 0x0, 0x80}, 0x20845) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)={'a', ' *:* ', 'rwm\x00'}, 0xa) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r4, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="090725dbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000661a1769dea65a0b800000015000400000000000900020073797a3100000000050005000a00000016000300686173683a6e6574"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 614.326053ms ago: executing program 1 (id=2698): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4c044, &(0x7f0000000000)={0x2, 0x4e1c, @multicast1}, 0x10) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}, 0x4000}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r3, 0xef, 0x6}, 0xc) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x85, 0x0, 0x0) 517.664425ms ago: executing program 0 (id=2699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000005c000000030a01080000000000000000010000000900030073797a30000000001400048008000240fffffffe08000f40000000040900010073797a30000000001c0008800c000240fffffffffffffffa0c000140000000000000000214000000060a01040000000000000000010000021400000011000100"/183], 0xb8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20002820}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xb9, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000740)={'tunl0\x00', r4, 0x8, 0x40, 0x3, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x68, 0x0, 0x7, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x600, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xac}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffffb}]}, 0x68}, 0x1, 0x0, 0x0, 0x4880}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300058c9528b0180090001007866726d000000001c0002800800024000000001080001400000000f05000300020000000900010000020073792fcd579700001400000011000100000000dd3730f7110000000a"], 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10, 0x17}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x10}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x4000) 110.622636ms ago: executing program 0 (id=2700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') unshare(0x6a040000) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) unshare(0x10000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair(0x14, 0x5, 0x87f8, &(0x7f0000000000)) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000000901040000000000000000010000000900010033797a3000000000080003400000e87a"], 0x28}}, 0x0) 84.666574ms ago: executing program 1 (id=2701): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x180, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff0001f200ac1e0101000000000000000000000000fc01000000000000ffffff8000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000008bcc3e6f0000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}}, 0x844) 0s ago: executing program 1 (id=2702): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x1000, 0x0, 0x0, 0x0, 0x1000000}, [@TCA_NETEM_ECN={0x8}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x0, [0xc66, 0x48, 0x7]}, &(0x7f00000002c0)=0x44) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) tee(r4, r6, 0x8f5, 0x100000000000000) write$cgroup_type(r6, &(0x7f0000000180), 0x9) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(r9) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r10, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r11, 0x810, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x28}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.1.1728'. [ 211.346538][T11277] netlink: 'syz.0.1730': attribute type 4 has an invalid length. [ 211.449118][T11288] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.527192][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1734'. [ 211.563901][T11292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1733'. [ 211.624525][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1736'. [ 211.866919][T11306] netlink: 'syz.4.1739': attribute type 3 has an invalid length. [ 211.880060][T11306] netlink: 'syz.4.1739': attribute type 2 has an invalid length. [ 211.888527][T11306] netlink: 'syz.4.1739': attribute type 1 has an invalid length. [ 211.897503][T11306] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1739'. [ 211.951391][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1741'. [ 213.110667][T11363] netlink: 'syz.1.1753': attribute type 3 has an invalid length. [ 213.118829][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 213.132701][T11363] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1753'. [ 213.329222][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 213.664232][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1764'. [ 213.758836][T11398] ieee802154 phy1 wpan1: encryption failed: -90 [ 213.765467][T11398] FAULT_INJECTION: forcing a failure. [ 213.765467][T11398] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 213.791023][T11398] CPU: 1 UID: 0 PID: 11398 Comm: syz.1.1765 Not tainted syzkaller #0 PREEMPT(full) [ 213.791048][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 213.791058][T11398] Call Trace: [ 213.791065][T11398] [ 213.791073][T11398] dump_stack_lvl+0xe8/0x150 [ 213.791100][T11398] should_fail_ex+0x412/0x560 [ 213.791128][T11398] prepare_alloc_pages+0x22a/0x650 [ 213.791155][T11398] __alloc_frozen_pages_noprof+0x12f/0x380 [ 213.791179][T11398] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 213.791204][T11398] ? count_memcg_event_mm+0x21/0x260 [ 213.791227][T11398] ? policy_nodemask+0x27c/0x710 [ 213.791252][T11398] alloc_pages_mpol+0x232/0x4a0 [ 213.791278][T11398] vma_alloc_folio_noprof+0xea/0x210 [ 213.791301][T11398] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 213.791333][T11398] folio_prealloc+0x30/0x170 [ 213.791358][T11398] do_wp_page+0x1243/0x57b0 [ 213.791393][T11398] ? ___pte_offset_map+0x29/0x240 [ 213.791421][T11398] ? __pfx_do_wp_page+0x10/0x10 [ 213.791441][T11398] ? do_raw_spin_lock+0x12b/0x2f0 [ 213.791464][T11398] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 213.791496][T11398] handle_mm_fault+0x1520/0x32a0 [ 213.791531][T11398] ? handle_mm_fault+0xee/0x32a0 [ 213.791561][T11398] ? __pfx_handle_mm_fault+0x10/0x10 [ 213.791597][T11398] ? __lock_acquire+0x6b5/0x2cf0 [ 213.791619][T11398] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 213.791639][T11398] do_user_addr_fault+0x75b/0x1360 [ 213.791673][T11398] exc_page_fault+0x6a/0xc0 [ 213.791700][T11398] asm_exc_page_fault+0x26/0x30 [ 213.791716][T11398] RIP: 0010:__put_user_4+0xd/0x20 [ 213.791733][T11398] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 213.791747][T11398] RSP: 0018:ffffc90003647c98 EFLAGS: 00050202 [ 213.791763][T11398] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000008038 [ 213.791775][T11398] RDX: 0000000000000000 RSI: ffffffff8dd3acc2 RDI: ffffffff8be73880 [ 213.791786][T11398] RBP: ffffc90003647eb0 R08: ffffffff8210cfbf R09: ffff88807e4bccc0 [ 213.791799][T11398] R10: dffffc0000000000 R11: ffffed10050848c4 R12: 1ffff920006c8f9c [ 213.791811][T11398] R13: 0000000020044014 R14: 0000200000008000 R15: 000000000000002f [ 213.791830][T11398] ? __might_fault+0xaf/0x130 [ 213.791860][T11398] __sys_sendmmsg+0x2b0/0x4e0 [ 213.791885][T11398] ? __pfx___sys_sendmmsg+0x10/0x10 [ 213.791901][T11398] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 213.791943][T11398] ? ksys_write+0x242/0x270 [ 213.791963][T11398] ? __pfx_ksys_write+0x10/0x10 [ 213.791986][T11398] __x64_sys_sendmmsg+0xa0/0xc0 [ 213.792006][T11398] do_syscall_64+0xe2/0xf80 [ 213.792023][T11398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.792039][T11398] ? trace_irq_disable+0x37/0x100 [ 213.792060][T11398] ? clear_bhb_loop+0x60/0xb0 [ 213.792081][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.792098][T11398] RIP: 0033:0x7fe4c119acb9 [ 213.792112][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.792127][T11398] RSP: 002b:00007fe4c1fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 213.792143][T11398] RAX: ffffffffffffffda RBX: 00007fe4c1415fa0 RCX: 00007fe4c119acb9 [ 213.792155][T11398] RDX: 0000000000000030 RSI: 0000200000007cc0 RDI: 0000000000000004 [ 213.792167][T11398] RBP: 00007fe4c1fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 213.792178][T11398] R10: 0000000020004014 R11: 0000000000000246 R12: 0000000000000002 [ 213.792188][T11398] R13: 00007fe4c1416038 R14: 00007fe4c1415fa0 R15: 00007fff5ff690c8 [ 213.792217][T11398] [ 214.394760][T11412] syzkaller1: entered promiscuous mode [ 214.401065][T11412] syzkaller1: entered allmulticast mode [ 214.703476][T11426] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 214.837411][T11437] FAULT_INJECTION: forcing a failure. [ 214.837411][T11437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.861993][T11437] CPU: 0 UID: 0 PID: 11437 Comm: syz.3.1775 Not tainted syzkaller #0 PREEMPT(full) [ 214.862019][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 214.862028][T11437] Call Trace: [ 214.862035][T11437] [ 214.862042][T11437] dump_stack_lvl+0xe8/0x150 [ 214.862068][T11437] should_fail_ex+0x412/0x560 [ 214.862092][T11437] _copy_to_user+0x31/0xb0 [ 214.862110][T11437] bpf_test_finish+0x53c/0x6b0 [ 214.862138][T11437] ? __pfx_bpf_test_finish+0x10/0x10 [ 214.862164][T11437] ? _copy_from_user+0x94/0xb0 [ 214.862181][T11437] ? bpf_test_init+0x113/0x150 [ 214.862202][T11437] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 214.862237][T11437] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.862260][T11437] ? __fget_files+0x2a/0x420 [ 214.862282][T11437] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.862303][T11437] bpf_prog_test_run+0x2c7/0x340 [ 214.862332][T11437] __sys_bpf+0x5cb/0x920 [ 214.862356][T11437] ? __pfx___sys_bpf+0x10/0x10 [ 214.862390][T11437] ? ksys_write+0x242/0x270 [ 214.862409][T11437] ? __pfx_ksys_write+0x10/0x10 [ 214.862433][T11437] __x64_sys_bpf+0x7c/0x90 [ 214.862453][T11437] do_syscall_64+0xe2/0xf80 [ 214.862471][T11437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.862487][T11437] ? trace_irq_disable+0x37/0x100 [ 214.862508][T11437] ? clear_bhb_loop+0x60/0xb0 [ 214.862529][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.862545][T11437] RIP: 0033:0x7f0e5539acb9 [ 214.862562][T11437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.862575][T11437] RSP: 002b:00007f0e56280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.862593][T11437] RAX: ffffffffffffffda RBX: 00007f0e55615fa0 RCX: 00007f0e5539acb9 [ 214.862605][T11437] RDX: 0000000000000024 RSI: 0000200000000600 RDI: 000000000000000a [ 214.862616][T11437] RBP: 00007f0e56280090 R08: 0000000000000000 R09: 0000000000000000 [ 214.862627][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.862638][T11437] R13: 00007f0e55616038 R14: 00007f0e55615fa0 R15: 00007ffea3f8feb8 [ 214.862666][T11437] [ 215.352276][T11454] netlink: 'syz.3.1777': attribute type 4 has an invalid length. [ 215.383544][T11454] netlink: 'syz.3.1777': attribute type 4 has an invalid length. [ 215.547997][T11465] ieee802154 phy1 wpan1: encryption failed: -90 [ 215.684819][T11474] netlink: 'syz.2.1784': attribute type 4 has an invalid length. [ 216.540222][T11506] syzkaller0: entered promiscuous mode [ 216.566038][T11506] syzkaller0: entered allmulticast mode [ 217.117194][T11537] netlink: 'syz.1.1800': attribute type 4 has an invalid length. [ 217.135672][T11537] netlink: 'syz.1.1800': attribute type 4 has an invalid length. [ 217.340352][T11549] __nla_validate_parse: 5 callbacks suppressed [ 217.340369][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'. [ 217.529275][T11556] tipc: Started in network mode [ 217.534184][T11556] tipc: Node identity 361f643a291e, cluster identity 4711 [ 217.573465][T11556] tipc: Enabled bearer , priority 0 [ 217.589829][T11561] syzkaller0: entered promiscuous mode [ 217.595332][T11561] syzkaller0: entered allmulticast mode [ 217.651452][T11556] tipc: Resetting bearer [ 217.661881][T11555] tipc: Resetting bearer [ 217.681036][T11555] tipc: Disabling bearer [ 217.747503][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1811'. [ 217.765876][T11569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1811'. [ 217.796067][T11573] FAULT_INJECTION: forcing a failure. [ 217.796067][T11573] name failslab, interval 1, probability 0, space 0, times 0 [ 217.819152][T11574] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1813'. [ 217.856095][T11573] CPU: 0 UID: 0 PID: 11573 Comm: syz.4.1814 Not tainted syzkaller #0 PREEMPT(full) [ 217.856120][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 217.856131][T11573] Call Trace: [ 217.856138][T11573] [ 217.856145][T11573] dump_stack_lvl+0xe8/0x150 [ 217.856172][T11573] should_fail_ex+0x412/0x560 [ 217.856200][T11573] should_failslab+0xa8/0x100 [ 217.856222][T11573] __kmalloc_cache_node_noprof+0x87/0x6d0 [ 217.856240][T11573] ? page_pool_create_percpu+0x76/0xb80 [ 217.856361][T11573] page_pool_create_percpu+0x76/0xb80 [ 217.856382][T11573] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 217.856409][T11573] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 217.856428][T11573] ? arch_stack_walk+0xfb/0x150 [ 217.856460][T11573] ? __pfx_stack_trace_save+0x10/0x10 [ 217.856489][T11573] ? __lock_acquire+0x6b5/0x2cf0 [ 217.856508][T11573] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 217.856526][T11573] ? __kasan_kmalloc+0x93/0xb0 [ 217.856543][T11573] ? __kmalloc_noprof+0x40c/0x7e0 [ 217.856556][T11573] ? bpf_test_init+0x9f/0x150 [ 217.856571][T11573] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 217.856588][T11573] ? bpf_prog_test_run+0x2c7/0x340 [ 217.856639][T11573] ? __might_fault+0xaf/0x130 [ 217.856664][T11573] ? __might_fault+0xaf/0x130 [ 217.856690][T11573] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 217.856720][T11573] ? _copy_from_user+0x94/0xb0 [ 217.856738][T11573] ? bpf_test_init+0x113/0x150 [ 217.856756][T11573] ? xdp_convert_md_to_buff+0x5b/0x330 [ 217.856777][T11573] bpf_prog_test_run_xdp+0x81c/0x1160 [ 217.856811][T11573] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 217.856836][T11573] ? __fget_files+0x2a/0x420 [ 217.856860][T11573] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 217.856881][T11573] bpf_prog_test_run+0x2c7/0x340 [ 217.856907][T11573] __sys_bpf+0x5cb/0x920 [ 217.856930][T11573] ? __pfx___sys_bpf+0x10/0x10 [ 217.856965][T11573] ? ksys_write+0x242/0x270 [ 217.856983][T11573] ? __pfx_ksys_write+0x10/0x10 [ 217.857004][T11573] __x64_sys_bpf+0x7c/0x90 [ 217.857025][T11573] do_syscall_64+0xe2/0xf80 [ 217.857041][T11573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.857058][T11573] ? trace_irq_disable+0x37/0x100 [ 217.857077][T11573] ? clear_bhb_loop+0x60/0xb0 [ 217.857097][T11573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.857113][T11573] RIP: 0033:0x7f3da459acb9 [ 217.857129][T11573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.857143][T11573] RSP: 002b:00007f3da53d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.857161][T11573] RAX: ffffffffffffffda RBX: 00007f3da4815fa0 RCX: 00007f3da459acb9 [ 217.857173][T11573] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 217.857185][T11573] RBP: 00007f3da53d8090 R08: 0000000000000000 R09: 0000000000000000 [ 217.857195][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.857206][T11573] R13: 00007f3da4816038 R14: 00007f3da4815fa0 R15: 00007fff6082ff08 [ 217.857234][T11573] [ 218.178618][T11576] geneve2: entered promiscuous mode [ 218.368294][T11596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1821'. [ 218.444273][T11597] netlink: 'syz.4.1818': attribute type 2 has an invalid length. [ 218.472240][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1821'. [ 218.524892][T11600] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 218.613900][T11605] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1823'. [ 218.662376][T11602] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 218.670531][T11602] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1823'. [ 218.770627][T11612] netlink: 'syz.3.1825': attribute type 29 has an invalid length. [ 218.779678][T11612] netlink: 'syz.3.1825': attribute type 29 has an invalid length. [ 218.804965][T11612] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1825'. [ 218.843074][T11615] netlink: 'syz.2.1826': attribute type 12 has an invalid length. [ 218.851856][T11615] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1826'. [ 219.003939][T11624] netlink: 'syz.3.1827': attribute type 4 has an invalid length. [ 219.130856][T11629] netlink: 'syz.1.1830': attribute type 9 has an invalid length. [ 219.241249][T11636] netlink: 'syz.2.1832': attribute type 4 has an invalid length. [ 219.364746][T11644] FAULT_INJECTION: forcing a failure. [ 219.364746][T11644] name failslab, interval 1, probability 0, space 0, times 0 [ 219.380979][T11644] CPU: 1 UID: 0 PID: 11644 Comm: syz.1.1837 Not tainted syzkaller #0 PREEMPT(full) [ 219.381008][T11644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 219.381019][T11644] Call Trace: [ 219.381026][T11644] [ 219.381033][T11644] dump_stack_lvl+0xe8/0x150 [ 219.381057][T11644] should_fail_ex+0x412/0x560 [ 219.381085][T11644] should_failslab+0xa8/0x100 [ 219.381106][T11644] __kmalloc_node_track_caller_noprof+0xe1/0x7f0 [ 219.381126][T11644] ? kasprintf+0xe2/0x140 [ 219.381149][T11644] kvasprintf+0xeb/0x1a0 [ 219.381165][T11644] ? get_random_u32+0x497/0x8b0 [ 219.381183][T11644] ? __pfx_kvasprintf+0x10/0x10 [ 219.381215][T11644] kasprintf+0xe2/0x140 [ 219.381233][T11644] ? pcpu_alloc+0x10/0x360 [ 219.381260][T11644] ? __pfx_kasprintf+0x10/0x10 [ 219.381285][T11644] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.381316][T11644] ieee80211_alloc_led_names+0x1de/0x2b0 [ 219.381340][T11644] ieee80211_alloc_hw_nm+0x18f2/0x1f60 [ 219.381370][T11644] mac80211_hwsim_new_radio+0x1dc/0x5330 [ 219.381408][T11644] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.381448][T11644] ? rcu_is_watching+0x15/0xb0 [ 219.381469][T11644] ? do_trace_netlink_extack+0x7e/0x1b0 [ 219.381488][T11644] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 219.381504][T11644] ? __nla_validate_parse+0x258e/0x2dc0 [ 219.381521][T11644] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 219.381548][T11644] hwsim_new_radio_nl+0xf85/0x1c30 [ 219.381572][T11644] ? __pfx___nla_validate_parse+0x10/0x10 [ 219.381603][T11644] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 219.381628][T11644] ? rcu_is_watching+0x15/0xb0 [ 219.381652][T11644] ? __nla_parse+0x40/0x60 [ 219.381671][T11644] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 219.381702][T11644] genl_family_rcv_msg_doit+0x22a/0x330 [ 219.381734][T11644] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 219.381769][T11644] ? bpf_lsm_capable+0x9/0x20 [ 219.381787][T11644] ? security_capable+0x7e/0x2c0 [ 219.381813][T11644] genl_rcv_msg+0x61c/0x7a0 [ 219.381843][T11644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.381866][T11644] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 219.381898][T11644] netlink_rcv_skb+0x232/0x4b0 [ 219.381919][T11644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.381944][T11644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.381962][T11644] ? genl_rcv+0x19/0x40 [ 219.382001][T11644] ? down_read+0x272/0x2e0 [ 219.382018][T11644] ? genl_rcv+0xd/0x40 [ 219.382042][T11644] genl_rcv+0x28/0x40 [ 219.382063][T11644] netlink_unicast+0x80f/0x9b0 [ 219.382090][T11644] ? __pfx_netlink_unicast+0x10/0x10 [ 219.382110][T11644] ? netlink_sendmsg+0x650/0xb40 [ 219.382129][T11644] ? skb_put+0x11b/0x210 [ 219.382149][T11644] netlink_sendmsg+0x813/0xb40 [ 219.382178][T11644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.382202][T11644] ? aa_file_perm+0x12d/0x1630 [ 219.382224][T11644] ? aa_sock_msg_perm+0xf1/0x1b0 [ 219.382248][T11644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.382264][T11644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.382285][T11644] __sock_sendmsg+0x21c/0x270 [ 219.382311][T11644] ____sys_sendmsg+0x4d7/0x810 [ 219.382329][T11644] ? __might_fault+0xaf/0x130 [ 219.382359][T11644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.382386][T11644] ? import_iovec+0x73/0xa0 [ 219.382409][T11644] ___sys_sendmsg+0x2a5/0x360 [ 219.382432][T11644] ? __lock_acquire+0x6b5/0x2cf0 [ 219.382455][T11644] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.382509][T11644] ? __fget_files+0x2a/0x420 [ 219.382529][T11644] ? __fget_files+0x3a0/0x420 [ 219.382559][T11644] __x64_sys_sendmsg+0x1bd/0x2a0 [ 219.382581][T11644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.382609][T11644] ? __pfx_ksys_write+0x10/0x10 [ 219.382638][T11644] do_syscall_64+0xe2/0xf80 [ 219.382655][T11644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.382672][T11644] ? trace_irq_disable+0x37/0x100 [ 219.382692][T11644] ? clear_bhb_loop+0x60/0xb0 [ 219.382713][T11644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.382730][T11644] RIP: 0033:0x7fe4c119acb9 [ 219.382747][T11644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.382761][T11644] RSP: 002b:00007fe4c1fd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.382780][T11644] RAX: ffffffffffffffda RBX: 00007fe4c1415fa0 RCX: 00007fe4c119acb9 [ 219.382793][T11644] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 219.382805][T11644] RBP: 00007fe4c1fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 219.382816][T11644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.382826][T11644] R13: 00007fe4c1416038 R14: 00007fe4c1415fa0 R15: 00007fff5ff690c8 [ 219.382855][T11644] [ 220.033583][T11650] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.201933][T11671] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.230207][T11674] ieee802154 phy1 wpan1: encryption failed: -90 [ 220.582753][T11697] vti0: entered promiscuous mode [ 220.858801][T11715] ip6tnl0: Caught tx_queue_len zero misconfig [ 220.896347][T11715] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 221.815086][T11745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.827617][T11747] FAULT_INJECTION: forcing a failure. [ 221.827617][T11747] name failslab, interval 1, probability 0, space 0, times 0 [ 221.845469][T11747] CPU: 0 UID: 0 PID: 11747 Comm: syz.3.1878 Not tainted syzkaller #0 PREEMPT(full) [ 221.845494][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 221.845505][T11747] Call Trace: [ 221.845513][T11747] [ 221.845520][T11747] dump_stack_lvl+0xe8/0x150 [ 221.845547][T11747] should_fail_ex+0x412/0x560 [ 221.845576][T11747] should_failslab+0xa8/0x100 [ 221.845598][T11747] __kmalloc_node_track_caller_noprof+0xe1/0x7f0 [ 221.845618][T11747] ? kasprintf+0xe2/0x140 [ 221.845642][T11747] kvasprintf+0xeb/0x1a0 [ 221.845660][T11747] ? get_random_u32+0x497/0x8b0 [ 221.845681][T11747] ? __pfx_kvasprintf+0x10/0x10 [ 221.845713][T11747] kasprintf+0xe2/0x140 [ 221.845729][T11747] ? pcpu_alloc+0x10/0x360 [ 221.845753][T11747] ? __pfx_kasprintf+0x10/0x10 [ 221.845773][T11747] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 221.845805][T11747] ieee80211_alloc_led_names+0x27a/0x2b0 [ 221.845827][T11747] ieee80211_alloc_hw_nm+0x18f2/0x1f60 [ 221.845854][T11747] mac80211_hwsim_new_radio+0x1dc/0x5330 [ 221.845883][T11747] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 221.845913][T11747] ? rcu_is_watching+0x15/0xb0 [ 221.845935][T11747] ? do_trace_netlink_extack+0x7e/0x1b0 [ 221.845953][T11747] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 221.845968][T11747] ? __nla_validate_parse+0x258e/0x2dc0 [ 221.845985][T11747] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 221.846011][T11747] hwsim_new_radio_nl+0xf85/0x1c30 [ 221.846035][T11747] ? __pfx___nla_validate_parse+0x10/0x10 [ 221.846064][T11747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.846102][T11747] ? rcu_is_watching+0x15/0xb0 [ 221.846132][T11747] ? __nla_parse+0x40/0x60 [ 221.846151][T11747] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 221.846190][T11747] genl_family_rcv_msg_doit+0x22a/0x330 [ 221.846218][T11747] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 221.846253][T11747] ? bpf_lsm_capable+0x9/0x20 [ 221.846272][T11747] ? security_capable+0x7e/0x2c0 [ 221.846297][T11747] genl_rcv_msg+0x61c/0x7a0 [ 221.846325][T11747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.846346][T11747] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.846377][T11747] netlink_rcv_skb+0x232/0x4b0 [ 221.846397][T11747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.846422][T11747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.846444][T11747] ? genl_rcv+0x19/0x40 [ 221.846482][T11747] ? down_read+0x272/0x2e0 [ 221.846498][T11747] ? genl_rcv+0xd/0x40 [ 221.846522][T11747] genl_rcv+0x28/0x40 [ 221.846543][T11747] netlink_unicast+0x80f/0x9b0 [ 221.846569][T11747] ? __pfx_netlink_unicast+0x10/0x10 [ 221.846588][T11747] ? netlink_sendmsg+0x650/0xb40 [ 221.846606][T11747] ? skb_put+0x11b/0x210 [ 221.846625][T11747] netlink_sendmsg+0x813/0xb40 [ 221.846654][T11747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.846677][T11747] ? aa_file_perm+0x12d/0x1630 [ 221.846699][T11747] ? aa_sock_msg_perm+0xf1/0x1b0 [ 221.846723][T11747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.846738][T11747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.846759][T11747] __sock_sendmsg+0x21c/0x270 [ 221.846784][T11747] ____sys_sendmsg+0x4d7/0x810 [ 221.846801][T11747] ? __might_fault+0xaf/0x130 [ 221.846830][T11747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.846858][T11747] ? import_iovec+0x73/0xa0 [ 221.846879][T11747] ___sys_sendmsg+0x2a5/0x360 [ 221.846896][T11747] ? __lock_acquire+0x6b5/0x2cf0 [ 221.846919][T11747] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.846973][T11747] ? __fget_files+0x2a/0x420 [ 221.846992][T11747] ? __fget_files+0x3a0/0x420 [ 221.847022][T11747] __x64_sys_sendmsg+0x1bd/0x2a0 [ 221.847043][T11747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.847071][T11747] ? __pfx_ksys_write+0x10/0x10 [ 221.847099][T11747] do_syscall_64+0xe2/0xf80 [ 221.847121][T11747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.847136][T11747] ? trace_irq_disable+0x37/0x100 [ 221.847155][T11747] ? clear_bhb_loop+0x60/0xb0 [ 221.847177][T11747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.847193][T11747] RIP: 0033:0x7f0e5539acb9 [ 221.847209][T11747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.847222][T11747] RSP: 002b:00007f0e56280028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.847241][T11747] RAX: ffffffffffffffda RBX: 00007f0e55615fa0 RCX: 00007f0e5539acb9 [ 221.847253][T11747] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 221.847263][T11747] RBP: 00007f0e56280090 R08: 0000000000000000 R09: 0000000000000000 [ 221.847273][T11747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.847284][T11747] R13: 00007f0e55616038 R14: 00007f0e55615fa0 R15: 00007ffea3f8feb8 [ 221.847310][T11747] [ 222.361784][T11753] validate_nla: 70 callbacks suppressed [ 222.361802][T11753] netlink: 'syz.4.1880': attribute type 3 has an invalid length. [ 222.368216][T11744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.381461][T11753] netlink: 'syz.4.1880': attribute type 2 has an invalid length. [ 222.386628][T11754] netlink: 'syz.1.1879': attribute type 4 has an invalid length. [ 222.395554][T11753] netlink: 'syz.4.1880': attribute type 1 has an invalid length. [ 222.411662][T11753] __nla_validate_parse: 8 callbacks suppressed [ 222.411679][T11753] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1880'. [ 223.031804][T11782] syzkaller0: entered promiscuous mode [ 223.039226][T11782] syzkaller0: entered allmulticast mode [ 223.198129][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 223.393639][T11797] syzkaller0: entered promiscuous mode [ 223.407927][T11797] syzkaller0: entered allmulticast mode [ 223.761654][T11812] netlink: 'syz.4.1903': attribute type 9 has an invalid length. [ 223.790101][T11812] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1903'. [ 223.799455][T11812] netlink: 560 bytes leftover after parsing attributes in process `syz.4.1903'. [ 223.882281][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1905'. [ 223.899726][T11818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1904'. [ 224.104866][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1910'. [ 224.128632][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1910'. [ 224.515267][T11847] lo: Caught tx_queue_len zero misconfig [ 224.547950][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1915'. [ 224.641962][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1916'. [ 224.855229][T11863] sctp: [Deprecated]: syz.0.1919 (pid 11863) Use of int in max_burst socket option. [ 224.855229][T11863] Use struct sctp_assoc_value instead [ 224.899493][T11864] tipc: Started in network mode [ 224.909622][T11864] tipc: Node identity , cluster identity 4711 [ 224.915737][T11864] tipc: Failed to obtain node identity [ 224.922161][T11864] tipc: Enabling of bearer rejected, failed to enable media [ 225.345147][T11888] nbd: must specify a device to reconfigure [ 225.435314][T11892] netlink: 'syz.4.1930': attribute type 3 has an invalid length. [ 225.447950][T11892] netlink: 'syz.4.1930': attribute type 2 has an invalid length. [ 225.456492][T11892] netlink: 'syz.4.1930': attribute type 1 has an invalid length. [ 225.968418][T11916] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 226.839668][T11954] netlink: 'syz.1.1948': attribute type 9 has an invalid length. [ 226.873235][T11954] FAULT_INJECTION: forcing a failure. [ 226.873235][T11954] name failslab, interval 1, probability 0, space 0, times 0 [ 226.889042][T11954] CPU: 1 UID: 0 PID: 11954 Comm: syz.1.1948 Not tainted syzkaller #0 PREEMPT(full) [ 226.889065][T11954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 226.889076][T11954] Call Trace: [ 226.889083][T11954] [ 226.889090][T11954] dump_stack_lvl+0xe8/0x150 [ 226.889118][T11954] should_fail_ex+0x412/0x560 [ 226.889147][T11954] should_failslab+0xa8/0x100 [ 226.889169][T11954] __kvmalloc_node_noprof+0x166/0x8d0 [ 226.889194][T11954] ? alloc_netdev_mqs+0xa4b/0x11b0 [ 226.889222][T11954] alloc_netdev_mqs+0xa4b/0x11b0 [ 226.889249][T11954] rtnl_create_link+0x31f/0xd70 [ 226.889277][T11954] rtnl_newlink_create+0x277/0xb70 [ 226.889301][T11954] ? __mutex_lock+0x5ac/0x1300 [ 226.889325][T11954] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 226.889347][T11954] ? __pfx___mutex_lock+0x10/0x10 [ 226.889375][T11954] ? ns_capable+0x89/0xe0 [ 226.889404][T11954] rtnl_newlink+0x1666/0x1be0 [ 226.889435][T11954] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.889453][T11954] ? unwind_next_frame+0xa5/0x23c0 [ 226.889479][T11954] ? __lock_acquire+0x6b5/0x2cf0 [ 226.889504][T11954] ? __lock_acquire+0x6b5/0x2cf0 [ 226.889524][T11954] ? __lock_acquire+0x6b5/0x2cf0 [ 226.889551][T11954] ? unwind_next_frame+0xa5/0x23c0 [ 226.889578][T11954] ? unwind_next_frame+0xa5/0x23c0 [ 226.889601][T11954] ? is_bpf_text_address+0x26/0x2b0 [ 226.889632][T11954] ? __lock_acquire+0x6b5/0x2cf0 [ 226.889657][T11954] ? is_bpf_text_address+0x292/0x2b0 [ 226.889679][T11954] ? is_bpf_text_address+0x26/0x2b0 [ 226.889714][T11954] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 226.889753][T11954] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.889769][T11954] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 226.889797][T11954] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 226.889820][T11954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.889845][T11954] ? __lock_acquire+0x6b5/0x2cf0 [ 226.889876][T11954] netlink_rcv_skb+0x232/0x4b0 [ 226.889899][T11954] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.889925][T11954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.889956][T11954] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.889983][T11954] netlink_unicast+0x80f/0x9b0 [ 226.890010][T11954] ? __pfx_netlink_unicast+0x10/0x10 [ 226.890030][T11954] ? netlink_sendmsg+0x650/0xb40 [ 226.890048][T11954] ? skb_put+0x11b/0x210 [ 226.890068][T11954] netlink_sendmsg+0x813/0xb40 [ 226.890097][T11954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.890119][T11954] ? aa_file_perm+0x12d/0x1630 [ 226.890140][T11954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 226.890163][T11954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.890178][T11954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.890200][T11954] __sock_sendmsg+0x21c/0x270 [ 226.890225][T11954] ____sys_sendmsg+0x4d7/0x810 [ 226.890242][T11954] ? __might_fault+0xaf/0x130 [ 226.890273][T11954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.890299][T11954] ? import_iovec+0x73/0xa0 [ 226.890322][T11954] ___sys_sendmsg+0x2a5/0x360 [ 226.890338][T11954] ? __lock_acquire+0x6b5/0x2cf0 [ 226.890360][T11954] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.890427][T11954] ? __fget_files+0x2a/0x420 [ 226.890447][T11954] ? __fget_files+0x3a0/0x420 [ 226.890475][T11954] __x64_sys_sendmsg+0x1bd/0x2a0 [ 226.890496][T11954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.890524][T11954] ? __pfx_ksys_write+0x10/0x10 [ 226.890552][T11954] do_syscall_64+0xe2/0xf80 [ 226.890569][T11954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.890585][T11954] ? trace_irq_disable+0x37/0x100 [ 226.890606][T11954] ? clear_bhb_loop+0x60/0xb0 [ 226.890626][T11954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.890643][T11954] RIP: 0033:0x7fe4c119acb9 [ 226.890660][T11954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.890672][T11954] RSP: 002b:00007fe4c1fd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.890691][T11954] RAX: ffffffffffffffda RBX: 00007fe4c1415fa0 RCX: 00007fe4c119acb9 [ 226.890703][T11954] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000004 [ 226.890715][T11954] RBP: 00007fe4c1fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 226.890725][T11954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.890735][T11954] R13: 00007fe4c1416038 R14: 00007fe4c1415fa0 R15: 00007fff5ff690c8 [ 226.890765][T11954] [ 227.725319][T11972] __nla_validate_parse: 8 callbacks suppressed [ 227.725335][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1957'. [ 227.786606][T11972] FAULT_INJECTION: forcing a failure. [ 227.786606][T11972] name failslab, interval 1, probability 0, space 0, times 0 [ 227.826005][T11972] CPU: 0 UID: 0 PID: 11972 Comm: syz.1.1957 Not tainted syzkaller #0 PREEMPT(full) [ 227.826032][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 227.826043][T11972] Call Trace: [ 227.826050][T11972] [ 227.826058][T11972] dump_stack_lvl+0xe8/0x150 [ 227.826085][T11972] should_fail_ex+0x412/0x560 [ 227.826114][T11972] should_failslab+0xa8/0x100 [ 227.826136][T11972] __kmalloc_cache_noprof+0x83/0x6e0 [ 227.826155][T11972] ? device_create+0x13d/0x300 [ 227.826177][T11972] device_create+0x13d/0x300 [ 227.826198][T11972] ? timer_init_key+0x161/0x2b0 [ 227.826225][T11972] ? __pfx_device_create+0x10/0x10 [ 227.826244][T11972] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 227.826273][T11972] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 227.826305][T11972] ? __pfx__printk+0x10/0x10 [ 227.826338][T11972] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 227.826365][T11972] ? rcu_is_watching+0x15/0xb0 [ 227.826387][T11972] ? do_trace_netlink_extack+0x7e/0x1b0 [ 227.826404][T11972] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 227.826420][T11972] ? __nla_validate_parse+0x258e/0x2dc0 [ 227.826437][T11972] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 227.826463][T11972] hwsim_new_radio_nl+0xf85/0x1c30 [ 227.826487][T11972] ? __pfx___nla_validate_parse+0x10/0x10 [ 227.826517][T11972] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 227.826541][T11972] ? rcu_is_watching+0x15/0xb0 [ 227.826564][T11972] ? __nla_parse+0x40/0x60 [ 227.826585][T11972] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 227.826617][T11972] genl_family_rcv_msg_doit+0x22a/0x330 [ 227.826648][T11972] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 227.826685][T11972] ? bpf_lsm_capable+0x9/0x20 [ 227.826703][T11972] ? security_capable+0x7e/0x2c0 [ 227.826730][T11972] genl_rcv_msg+0x61c/0x7a0 [ 227.826760][T11972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.826782][T11972] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 227.826814][T11972] netlink_rcv_skb+0x232/0x4b0 [ 227.826833][T11972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.826852][T11972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.826865][T11972] ? genl_rcv+0x19/0x40 [ 227.826894][T11972] ? down_read+0x272/0x2e0 [ 227.826906][T11972] ? genl_rcv+0xd/0x40 [ 227.826924][T11972] genl_rcv+0x28/0x40 [ 227.826940][T11972] netlink_unicast+0x80f/0x9b0 [ 227.826960][T11972] ? __pfx_netlink_unicast+0x10/0x10 [ 227.826975][T11972] ? netlink_sendmsg+0x650/0xb40 [ 227.826989][T11972] ? skb_put+0x11b/0x210 [ 227.827004][T11972] netlink_sendmsg+0x813/0xb40 [ 227.827026][T11972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.827047][T11972] ? aa_file_perm+0x12d/0x1630 [ 227.827064][T11972] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.827082][T11972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.827094][T11972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.827110][T11972] __sock_sendmsg+0x21c/0x270 [ 227.827129][T11972] ____sys_sendmsg+0x4d7/0x810 [ 227.827142][T11972] ? __might_fault+0xaf/0x130 [ 227.827165][T11972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.827185][T11972] ? import_iovec+0x73/0xa0 [ 227.827202][T11972] ___sys_sendmsg+0x2a5/0x360 [ 227.827214][T11972] ? __lock_acquire+0x6b5/0x2cf0 [ 227.827231][T11972] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.827270][T11972] ? __fget_files+0x2a/0x420 [ 227.827285][T11972] ? __fget_files+0x3a0/0x420 [ 227.827308][T11972] __x64_sys_sendmsg+0x1bd/0x2a0 [ 227.827329][T11972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.827350][T11972] ? __pfx_ksys_write+0x10/0x10 [ 227.827371][T11972] do_syscall_64+0xe2/0xf80 [ 227.827384][T11972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.827396][T11972] ? trace_irq_disable+0x37/0x100 [ 227.827413][T11972] ? clear_bhb_loop+0x60/0xb0 [ 227.827428][T11972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.827440][T11972] RIP: 0033:0x7fe4c119acb9 [ 227.827453][T11972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.827464][T11972] RSP: 002b:00007fe4c1fd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.827480][T11972] RAX: ffffffffffffffda RBX: 00007fe4c1415fa0 RCX: 00007fe4c119acb9 [ 227.827491][T11972] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 227.827500][T11972] RBP: 00007fe4c1fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 227.827511][T11972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.827520][T11972] R13: 00007fe4c1416038 R14: 00007fe4c1415fa0 R15: 00007fff5ff690c8 [ 227.827548][T11972] [ 227.908069][T11980] netlink: 'syz.3.1961': attribute type 29 has an invalid length. [ 227.922640][T11971] nbd: must specify a device to reconfigure [ 227.930873][T11980] netlink: 'syz.3.1961': attribute type 29 has an invalid length. [ 227.985431][T11982] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1961'. [ 228.719180][T12007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1972'. [ 228.846984][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1972'. [ 228.903740][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1977'. [ 228.914352][T12019] FAULT_INJECTION: forcing a failure. [ 228.914352][T12019] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 228.929432][T12019] CPU: 0 UID: 0 PID: 12019 Comm: syz.0.1975 Not tainted syzkaller #0 PREEMPT(full) [ 228.929456][T12019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 228.929467][T12019] Call Trace: [ 228.929474][T12019] [ 228.929481][T12019] dump_stack_lvl+0xe8/0x150 [ 228.929507][T12019] should_fail_ex+0x412/0x560 [ 228.929533][T12019] prepare_alloc_pages+0x22a/0x650 [ 228.929559][T12019] __alloc_frozen_pages_noprof+0x12f/0x380 [ 228.929578][T12019] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 228.929604][T12019] ? policy_nodemask+0x27c/0x710 [ 228.929621][T12019] ? trace_kmalloc+0x1f/0xb0 [ 228.929634][T12019] ? __kmalloc_node_track_caller_noprof+0x577/0x7f0 [ 228.929654][T12019] alloc_pages_mpol+0x232/0x4a0 [ 228.929679][T12019] alloc_pages_noprof+0xa8/0x190 [ 228.929700][T12019] alloc_skb_with_frags+0x233/0x890 [ 228.929732][T12019] sock_alloc_send_pskb+0x878/0x990 [ 228.929769][T12019] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 228.929795][T12019] ? __lock_acquire+0x6b5/0x2cf0 [ 228.929819][T12019] tun_get_user+0x92d/0x3dd0 [ 228.929851][T12019] ? aa_file_perm+0x12d/0x1630 [ 228.929877][T12019] ? aa_file_perm+0x440/0x1630 [ 228.929899][T12019] ? __pfx_tun_get_user+0x10/0x10 [ 228.929920][T12019] ? __lock_acquire+0x6b5/0x2cf0 [ 228.929939][T12019] ? kstrtoull+0x12f/0x1d0 [ 228.929968][T12019] ? ref_tracker_alloc+0x363/0x4d0 [ 228.929993][T12019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 228.930017][T12019] ? tun_get+0x1c/0x2f0 [ 228.930037][T12019] ? tun_get+0x1c/0x2f0 [ 228.930060][T12019] ? tun_get+0x1c/0x2f0 [ 228.930079][T12019] ? tun_get+0x1c/0x2f0 [ 228.930102][T12019] tun_chr_write_iter+0x113/0x200 [ 228.930124][T12019] vfs_write+0x61d/0xb90 [ 228.930148][T12019] ? __pfx_vfs_write+0x10/0x10 [ 228.930173][T12019] ? __fget_files+0x2a/0x420 [ 228.930202][T12019] ksys_write+0x150/0x270 [ 228.930220][T12019] ? __pfx_ksys_write+0x10/0x10 [ 228.930243][T12019] do_syscall_64+0xe2/0xf80 [ 228.930257][T12019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.930270][T12019] ? trace_irq_disable+0x37/0x100 [ 228.930285][T12019] ? clear_bhb_loop+0x60/0xb0 [ 228.930299][T12019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.930312][T12019] RIP: 0033:0x7fea8255b58e [ 228.930328][T12019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.930343][T12019] RSP: 002b:00007fea834a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.930361][T12019] RAX: ffffffffffffffda RBX: 00007fea834a56c0 RCX: 00007fea8255b58e [ 228.930374][T12019] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 228.930385][T12019] RBP: 00007fea834a5090 R08: 0000000000000000 R09: 0000000000000000 [ 228.930395][T12019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.930406][T12019] R13: 00007fea82816038 R14: 00007fea82815fa0 R15: 00007ffd92c78f78 [ 228.930438][T12019] [ 229.026983][T12024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1977'. [ 229.055914][T12007] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 229.256486][T12033] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1976'. [ 229.363379][T12017] bond0: Caught tx_queue_len zero misconfig [ 229.529783][T12036] syzkaller0: entered promiscuous mode [ 229.535292][T12036] syzkaller0: entered allmulticast mode [ 229.638072][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 229.650364][T12061] netlink: 'syz.2.1988': attribute type 9 has an invalid length. [ 229.730264][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1989'. [ 230.449689][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1991'. [ 231.030462][T12067] syzkaller0: entered promiscuous mode [ 231.036707][T12067] syzkaller0: entered allmulticast mode [ 232.378753][T12114] netlink: 'syz.1.2003': attribute type 4 has an invalid length. [ 232.400435][T12112] netlink: 'syz.2.2002': attribute type 1 has an invalid length. [ 232.409514][T12117] FAULT_INJECTION: forcing a failure. [ 232.409514][T12117] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 232.430325][T12114] netlink: 'syz.1.2003': attribute type 4 has an invalid length. [ 232.431825][T12117] CPU: 1 UID: 0 PID: 12117 Comm: syz.4.2004 Not tainted syzkaller #0 PREEMPT(full) [ 232.431846][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 232.431857][T12117] Call Trace: [ 232.431864][T12117] [ 232.431871][T12117] dump_stack_lvl+0xe8/0x150 [ 232.431898][T12117] should_fail_ex+0x412/0x560 [ 232.431925][T12117] prepare_alloc_pages+0x22a/0x650 [ 232.431951][T12117] __alloc_frozen_pages_noprof+0x12f/0x380 [ 232.431973][T12117] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.432001][T12117] ? policy_nodemask+0x27c/0x710 [ 232.432019][T12117] ? trace_kmalloc+0x1f/0xb0 [ 232.432033][T12117] ? __kmalloc_node_track_caller_noprof+0x577/0x7f0 [ 232.432053][T12117] alloc_pages_mpol+0x232/0x4a0 [ 232.432084][T12117] alloc_pages_noprof+0xa8/0x190 [ 232.432105][T12117] alloc_skb_with_frags+0x233/0x890 [ 232.432135][T12117] sock_alloc_send_pskb+0x878/0x990 [ 232.432170][T12117] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 232.432196][T12117] ? __lock_acquire+0x6b5/0x2cf0 [ 232.432219][T12117] tun_get_user+0x92d/0x3dd0 [ 232.432250][T12117] ? aa_file_perm+0x12d/0x1630 [ 232.432276][T12117] ? aa_file_perm+0x440/0x1630 [ 232.432298][T12117] ? __pfx_tun_get_user+0x10/0x10 [ 232.432319][T12117] ? __lock_acquire+0x6b5/0x2cf0 [ 232.432338][T12117] ? kstrtoull+0x12f/0x1d0 [ 232.432366][T12117] ? ref_tracker_alloc+0x363/0x4d0 [ 232.432392][T12117] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 232.432415][T12117] ? tun_get+0x1c/0x2f0 [ 232.432434][T12117] ? tun_get+0x1c/0x2f0 [ 232.432457][T12117] ? tun_get+0x1c/0x2f0 [ 232.432475][T12117] ? tun_get+0x1c/0x2f0 [ 232.432497][T12117] tun_chr_write_iter+0x113/0x200 [ 232.432519][T12117] vfs_write+0x61d/0xb90 [ 232.432543][T12117] ? __pfx_vfs_write+0x10/0x10 [ 232.432568][T12117] ? __fget_files+0x2a/0x420 [ 232.432595][T12117] ksys_write+0x150/0x270 [ 232.432613][T12117] ? __pfx_ksys_write+0x10/0x10 [ 232.432639][T12117] do_syscall_64+0xe2/0xf80 [ 232.432656][T12117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.432672][T12117] ? trace_irq_disable+0x37/0x100 [ 232.432693][T12117] ? clear_bhb_loop+0x60/0xb0 [ 232.432712][T12117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.432728][T12117] RIP: 0033:0x7f3da455b58e [ 232.432744][T12117] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 232.432758][T12117] RSP: 002b:00007f3da53d7fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.432776][T12117] RAX: ffffffffffffffda RBX: 00007f3da53d86c0 RCX: 00007f3da455b58e [ 232.432789][T12117] RDX: 000000000000fdef RSI: 0000200000000400 RDI: 00000000000000c8 [ 232.432800][T12117] RBP: 00007f3da53d8090 R08: 0000000000000000 R09: 0000000000000000 [ 232.432810][T12117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.432820][T12117] R13: 00007f3da4816038 R14: 00007f3da4815fa0 R15: 00007fff6082ff08 [ 232.432846][T12117] [ 232.486207][T12123] netlink: 'syz.0.2007': attribute type 9 has an invalid length. [ 232.759339][T12123] FAULT_INJECTION: forcing a failure. [ 232.759339][T12123] name failslab, interval 1, probability 0, space 0, times 0 [ 232.787923][T12123] CPU: 1 UID: 0 PID: 12123 Comm: syz.0.2007 Not tainted syzkaller #0 PREEMPT(full) [ 232.787950][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 232.787960][T12123] Call Trace: [ 232.787967][T12123] [ 232.787974][T12123] dump_stack_lvl+0xe8/0x150 [ 232.788000][T12123] should_fail_ex+0x412/0x560 [ 232.788029][T12123] should_failslab+0xa8/0x100 [ 232.788050][T12123] __kvmalloc_node_noprof+0x166/0x8d0 [ 232.788070][T12123] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 232.788090][T12123] ? __asan_memset+0x22/0x50 [ 232.788116][T12123] alloc_netdev_mqs+0x8a6/0x11b0 [ 232.788142][T12123] rtnl_create_link+0x31f/0xd70 [ 232.788169][T12123] rtnl_newlink_create+0x277/0xb70 [ 232.788191][T12123] ? __mutex_lock+0x5ac/0x1300 [ 232.788214][T12123] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 232.788235][T12123] ? __pfx___mutex_lock+0x10/0x10 [ 232.788262][T12123] ? ns_capable+0x89/0xe0 [ 232.788282][T12123] rtnl_newlink+0x1666/0x1be0 [ 232.788314][T12123] ? __pfx_rtnl_newlink+0x10/0x10 [ 232.788327][T12123] ? do_syscall_64+0xe2/0xf80 [ 232.788342][T12123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.788392][T12123] ? kasan_quarantine_put+0xbb/0x1f0 [ 232.788409][T12123] ? lockdep_hardirqs_on+0x7a/0x110 [ 232.788429][T12123] ? kmem_cache_free+0x195/0x610 [ 232.788445][T12123] ? nlmon_xmit+0xb0/0x100 [ 232.788475][T12123] ? __lock_acquire+0x6b5/0x2cf0 [ 232.788502][T12123] ? __local_bh_enable_ip+0xd0/0x130 [ 232.788520][T12123] ? lockdep_hardirqs_on+0x7a/0x110 [ 232.788534][T12123] ? __dev_queue_xmit+0x2a7/0x32b0 [ 232.788551][T12123] ? __local_bh_enable_ip+0xd0/0x130 [ 232.788565][T12123] ? __dev_queue_xmit+0x2a7/0x32b0 [ 232.788591][T12123] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 232.788629][T12123] ? __pfx_rtnl_newlink+0x10/0x10 [ 232.788644][T12123] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 232.788672][T12123] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 232.788693][T12123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 232.788712][T12123] ? ref_tracker_free+0x693/0x840 [ 232.788732][T12123] ? __copy_skb_header+0xa3/0x4a0 [ 232.788751][T12123] ? __pfx_ref_tracker_free+0x10/0x10 [ 232.788785][T12123] netlink_rcv_skb+0x232/0x4b0 [ 232.788806][T12123] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 232.788837][T12123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.788866][T12123] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.788900][T12123] netlink_unicast+0x80f/0x9b0 [ 232.788928][T12123] ? __pfx_netlink_unicast+0x10/0x10 [ 232.788948][T12123] ? netlink_sendmsg+0x650/0xb40 [ 232.788966][T12123] ? skb_put+0x11b/0x210 [ 232.788986][T12123] netlink_sendmsg+0x813/0xb40 [ 232.789016][T12123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.789038][T12123] ? aa_file_perm+0x12d/0x1630 [ 232.789061][T12123] ? aa_sock_msg_perm+0xf1/0x1b0 [ 232.789084][T12123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.789099][T12123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.789119][T12123] __sock_sendmsg+0x21c/0x270 [ 232.789142][T12123] ____sys_sendmsg+0x4d7/0x810 [ 232.789159][T12123] ? __might_fault+0xaf/0x130 [ 232.789187][T12123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.789212][T12123] ? import_iovec+0x73/0xa0 [ 232.789234][T12123] ___sys_sendmsg+0x2a5/0x360 [ 232.789249][T12123] ? __lock_acquire+0x6b5/0x2cf0 [ 232.789269][T12123] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.789319][T12123] ? __fget_files+0x2a/0x420 [ 232.789338][T12123] ? __fget_files+0x3a0/0x420 [ 232.789366][T12123] __x64_sys_sendmsg+0x1bd/0x2a0 [ 232.789386][T12123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.789411][T12123] ? __pfx_ksys_write+0x10/0x10 [ 232.789437][T12123] do_syscall_64+0xe2/0xf80 [ 232.789454][T12123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.789469][T12123] ? trace_irq_disable+0x37/0x100 [ 232.789488][T12123] ? clear_bhb_loop+0x60/0xb0 [ 232.789508][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.789525][T12123] RIP: 0033:0x7fea8259acb9 [ 232.789541][T12123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.789554][T12123] RSP: 002b:00007fea834a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.789573][T12123] RAX: ffffffffffffffda RBX: 00007fea82815fa0 RCX: 00007fea8259acb9 [ 232.789586][T12123] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000004 [ 232.789597][T12123] RBP: 00007fea834a5090 R08: 0000000000000000 R09: 0000000000000000 [ 232.789607][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.789617][T12123] R13: 00007fea82816038 R14: 00007fea82815fa0 R15: 00007ffd92c78f78 [ 232.789643][T12123] [ 233.401140][T12141] netlink: 'syz.1.2010': attribute type 29 has an invalid length. [ 233.434279][T12141] netlink: 'syz.1.2010': attribute type 29 has an invalid length. [ 233.499475][T12150] __nla_validate_parse: 6 callbacks suppressed [ 233.499491][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2016'. [ 233.515073][T12150] FAULT_INJECTION: forcing a failure. [ 233.515073][T12150] name failslab, interval 1, probability 0, space 0, times 0 [ 233.527920][T12150] CPU: 1 UID: 0 PID: 12150 Comm: syz.0.2016 Not tainted syzkaller #0 PREEMPT(full) [ 233.527942][T12150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 233.527952][T12150] Call Trace: [ 233.527959][T12150] [ 233.527966][T12150] dump_stack_lvl+0xe8/0x150 [ 233.528000][T12150] should_fail_ex+0x412/0x560 [ 233.528027][T12150] should_failslab+0xa8/0x100 [ 233.528047][T12150] __kmalloc_cache_noprof+0x83/0x6e0 [ 233.528064][T12150] ? device_add+0xbe/0xb70 [ 233.528093][T12150] device_add+0xbe/0xb70 [ 233.528122][T12150] device_create+0x269/0x300 [ 233.528142][T12150] ? timer_init_key+0x161/0x2b0 [ 233.528170][T12150] ? __pfx_device_create+0x10/0x10 [ 233.528189][T12150] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 233.528219][T12150] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 233.528252][T12150] ? __pfx__printk+0x10/0x10 [ 233.528278][T12150] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 233.528305][T12150] ? rcu_is_watching+0x15/0xb0 [ 233.528327][T12150] ? do_trace_netlink_extack+0x7e/0x1b0 [ 233.528346][T12150] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 233.528362][T12150] ? __nla_validate_parse+0x258e/0x2dc0 [ 233.528379][T12150] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 233.528405][T12150] hwsim_new_radio_nl+0xf85/0x1c30 [ 233.528430][T12150] ? __pfx___nla_validate_parse+0x10/0x10 [ 233.528461][T12150] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 233.528485][T12150] ? rcu_is_watching+0x15/0xb0 [ 233.528508][T12150] ? __nla_parse+0x40/0x60 [ 233.528529][T12150] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 233.528563][T12150] genl_family_rcv_msg_doit+0x22a/0x330 [ 233.528594][T12150] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.528631][T12150] ? bpf_lsm_capable+0x9/0x20 [ 233.528650][T12150] ? security_capable+0x7e/0x2c0 [ 233.528677][T12150] genl_rcv_msg+0x61c/0x7a0 [ 233.528707][T12150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.528730][T12150] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 233.528751][T12150] ? __pfx_ref_tracker_free+0x10/0x10 [ 233.528782][T12150] netlink_rcv_skb+0x232/0x4b0 [ 233.528804][T12150] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.528828][T12150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.528844][T12150] ? genl_rcv+0x19/0x40 [ 233.528882][T12150] ? down_read+0x272/0x2e0 [ 233.528898][T12150] ? genl_rcv+0xd/0x40 [ 233.528932][T12150] genl_rcv+0x28/0x40 [ 233.528954][T12150] netlink_unicast+0x80f/0x9b0 [ 233.528987][T12150] ? __pfx_netlink_unicast+0x10/0x10 [ 233.529007][T12150] ? netlink_sendmsg+0x650/0xb40 [ 233.529026][T12150] ? skb_put+0x11b/0x210 [ 233.529046][T12150] netlink_sendmsg+0x813/0xb40 [ 233.529076][T12150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.529099][T12150] ? aa_file_perm+0x12d/0x1630 [ 233.529121][T12150] ? aa_sock_msg_perm+0xf1/0x1b0 [ 233.529144][T12150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.529161][T12150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.529182][T12150] __sock_sendmsg+0x21c/0x270 [ 233.529207][T12150] ____sys_sendmsg+0x4d7/0x810 [ 233.529226][T12150] ? __might_fault+0xaf/0x130 [ 233.529256][T12150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.529284][T12150] ? import_iovec+0x73/0xa0 [ 233.529307][T12150] ___sys_sendmsg+0x2a5/0x360 [ 233.529323][T12150] ? __lock_acquire+0x6b5/0x2cf0 [ 233.529346][T12150] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.529400][T12150] ? __fget_files+0x2a/0x420 [ 233.529420][T12150] ? __fget_files+0x3a0/0x420 [ 233.529451][T12150] __x64_sys_sendmsg+0x1bd/0x2a0 [ 233.529473][T12150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.529501][T12150] ? __pfx_ksys_write+0x10/0x10 [ 233.529530][T12150] do_syscall_64+0xe2/0xf80 [ 233.529547][T12150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.529563][T12150] ? trace_irq_disable+0x37/0x100 [ 233.529585][T12150] ? clear_bhb_loop+0x60/0xb0 [ 233.529606][T12150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.529624][T12150] RIP: 0033:0x7fea8259acb9 [ 233.529640][T12150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.529655][T12150] RSP: 002b:00007fea834a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.529673][T12150] RAX: ffffffffffffffda RBX: 00007fea82815fa0 RCX: 00007fea8259acb9 [ 233.529686][T12150] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 233.529698][T12150] RBP: 00007fea834a5090 R08: 0000000000000000 R09: 0000000000000000 [ 233.529709][T12150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.529720][T12150] R13: 00007fea82816038 R14: 00007fea82815fa0 R15: 00007ffd92c78f78 [ 233.529749][T12150] [ 234.079409][T12160] bond1: left promiscuous mode [ 234.100374][T12160] bond2: left promiscuous mode [ 234.108589][T12160] vti0: left promiscuous mode [ 234.216679][T12177] netlink: 'syz.1.2024': attribute type 4 has an invalid length. [ 234.248514][T12177] netlink: 'syz.1.2024': attribute type 4 has an invalid length. [ 234.275703][T12180] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2025'. [ 234.396061][T12186] netlink: 532 bytes leftover after parsing attributes in process `syz.0.2027'. [ 234.413975][T12184] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2026'. [ 234.454364][ T3649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.505838][ T3649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.641550][T12195] netlink: 'syz.4.2030': attribute type 29 has an invalid length. [ 234.678992][T12197] netlink: 'syz.0.2031': attribute type 9 has an invalid length. [ 234.720433][T12195] netlink: 'syz.4.2030': attribute type 29 has an invalid length. [ 235.152746][T12201] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2033'. [ 235.211121][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2035'. [ 235.306535][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 235.338984][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 235.367297][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 235.410939][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 236.017800][T12238] batadv_slave_1: entered promiscuous mode [ 236.111837][T12238] batadv_slave_1 (unregistering): left promiscuous mode [ 236.135175][T12238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.441791][T12250] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 236.470485][T12250] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 236.636793][T12252] syzkaller0: entered promiscuous mode [ 236.642359][T12252] syzkaller0: entered allmulticast mode [ 236.790436][T12271] FAULT_INJECTION: forcing a failure. [ 236.790436][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 236.855924][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.4.2053 Not tainted syzkaller #0 PREEMPT(full) [ 236.855949][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 236.855960][T12271] Call Trace: [ 236.855967][T12271] [ 236.855974][T12271] dump_stack_lvl+0xe8/0x150 [ 236.856002][T12271] should_fail_ex+0x412/0x560 [ 236.856031][T12271] should_failslab+0xa8/0x100 [ 236.856053][T12271] kmem_cache_alloc_noprof+0x87/0x6e0 [ 236.856077][T12271] ? __asan_memcpy+0x40/0x70 [ 236.856099][T12271] ? __kernfs_new_node+0xe9/0x8e0 [ 236.856123][T12271] __kernfs_new_node+0xe9/0x8e0 [ 236.856148][T12271] ? __pfx___kernfs_new_node+0x10/0x10 [ 236.856168][T12271] ? kernfs_root+0x1c/0x230 [ 236.856192][T12271] ? kernfs_root+0x1c/0x230 [ 236.856209][T12271] ? kernfs_root+0x1c/0x230 [ 236.856223][T12271] ? kernfs_root+0x1c/0x230 [ 236.856245][T12271] kernfs_new_node+0x102/0x210 [ 236.856269][T12271] kernfs_create_dir_ns+0x44/0x130 [ 236.856293][T12271] sysfs_create_dir_ns+0x12f/0x2a0 [ 236.856314][T12271] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 236.856335][T12271] ? do_raw_spin_unlock+0xf5/0x210 [ 236.856362][T12271] kobject_add_internal+0x62b/0xd00 [ 236.856391][T12271] kobject_add+0x163/0x240 [ 236.856415][T12271] ? __pfx_kobject_add+0x10/0x10 [ 236.856432][T12271] ? do_raw_spin_unlock+0xf5/0x210 [ 236.856458][T12271] ? get_device_parent+0x366/0x3a0 [ 236.856488][T12271] device_add+0x408/0xb70 [ 236.856516][T12271] device_create+0x269/0x300 [ 236.856537][T12271] ? timer_init_key+0x161/0x2b0 [ 236.856564][T12271] ? __pfx_device_create+0x10/0x10 [ 236.856584][T12271] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 236.856611][T12271] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 236.856643][T12271] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 236.856681][T12271] ? rcu_is_watching+0x15/0xb0 [ 236.856702][T12271] ? do_trace_netlink_extack+0x7e/0x1b0 [ 236.856720][T12271] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 236.856736][T12271] ? __nla_validate_parse+0x258e/0x2dc0 [ 236.856753][T12271] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 236.856779][T12271] hwsim_new_radio_nl+0xf85/0x1c30 [ 236.856803][T12271] ? __pfx___nla_validate_parse+0x10/0x10 [ 236.856833][T12271] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 236.856858][T12271] ? rcu_is_watching+0x15/0xb0 [ 236.856881][T12271] ? __nla_parse+0x40/0x60 [ 236.856901][T12271] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 236.856934][T12271] genl_family_rcv_msg_doit+0x22a/0x330 [ 236.856964][T12271] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 236.857001][T12271] ? bpf_lsm_capable+0x9/0x20 [ 236.857019][T12271] ? security_capable+0x7e/0x2c0 [ 236.857047][T12271] genl_rcv_msg+0x61c/0x7a0 [ 236.857077][T12271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.857099][T12271] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 236.857132][T12271] netlink_rcv_skb+0x232/0x4b0 [ 236.857153][T12271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.857178][T12271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.857196][T12271] ? genl_rcv+0x19/0x40 [ 236.857235][T12271] ? down_read+0x272/0x2e0 [ 236.857251][T12271] ? genl_rcv+0xd/0x40 [ 236.857275][T12271] genl_rcv+0x28/0x40 [ 236.857296][T12271] netlink_unicast+0x80f/0x9b0 [ 236.857323][T12271] ? __pfx_netlink_unicast+0x10/0x10 [ 236.857343][T12271] ? netlink_sendmsg+0x650/0xb40 [ 236.857361][T12271] ? skb_put+0x11b/0x210 [ 236.857380][T12271] netlink_sendmsg+0x813/0xb40 [ 236.857410][T12271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.857430][T12271] ? aa_file_perm+0x12d/0x1630 [ 236.857448][T12271] ? aa_sock_msg_perm+0xf1/0x1b0 [ 236.857470][T12271] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.857485][T12271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.857506][T12271] __sock_sendmsg+0x21c/0x270 [ 236.857531][T12271] ____sys_sendmsg+0x4d7/0x810 [ 236.857549][T12271] ? __might_fault+0xaf/0x130 [ 236.857579][T12271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.857607][T12271] ? import_iovec+0x73/0xa0 [ 236.857629][T12271] ___sys_sendmsg+0x2a5/0x360 [ 236.857645][T12271] ? __lock_acquire+0x6b5/0x2cf0 [ 236.857667][T12271] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.857726][T12271] ? __fget_files+0x2a/0x420 [ 236.857745][T12271] ? __fget_files+0x3a0/0x420 [ 236.857776][T12271] __x64_sys_sendmsg+0x1bd/0x2a0 [ 236.857797][T12271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.857825][T12271] ? __pfx_ksys_write+0x10/0x10 [ 236.857850][T12271] do_syscall_64+0xe2/0xf80 [ 236.857867][T12271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.857883][T12271] ? trace_irq_disable+0x37/0x100 [ 236.857904][T12271] ? clear_bhb_loop+0x60/0xb0 [ 236.857924][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.857941][T12271] RIP: 0033:0x7f3da459acb9 [ 236.857956][T12271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.857970][T12271] RSP: 002b:00007f3da53d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.857986][T12271] RAX: ffffffffffffffda RBX: 00007f3da4815fa0 RCX: 00007f3da459acb9 [ 236.857998][T12271] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 236.858008][T12271] RBP: 00007f3da53d8090 R08: 0000000000000000 R09: 0000000000000000 [ 236.858017][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.858026][T12271] R13: 00007f3da4816038 R14: 00007f3da4815fa0 R15: 00007fff6082ff08 [ 236.858052][T12271] [ 236.858083][T12271] kobject: kobject_add_internal failed for hwsim37 (error: -12 parent: mac80211_hwsim) [ 238.796549][T12298] bond0: (slave team0): Releasing backup interface [ 238.835202][T12298] bridge_slave_0: left allmulticast mode [ 238.847129][T12298] bridge_slave_0: left promiscuous mode [ 238.870783][T12310] __nla_validate_parse: 35 callbacks suppressed [ 238.870802][T12310] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2064'. [ 238.877011][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.902075][T12298] bridge_slave_1: left allmulticast mode [ 238.910056][T12298] bridge_slave_1: left promiscuous mode [ 238.916894][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.917746][T12311] netlink: 'syz.3.2063': attribute type 3 has an invalid length. [ 238.940280][T12312] netlink: 'syz.2.2064': attribute type 1 has an invalid length. [ 238.963719][T12312] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2064'. [ 238.973811][T12298] bond0: (slave bond_slave_0): Releasing backup interface [ 238.982675][T12298] bond0: (slave bond_slave_1): Releasing backup interface [ 239.001695][T12298] team0: Port device team_slave_0 removed [ 239.019168][T12323] netlink: 'syz.3.2063': attribute type 2 has an invalid length. [ 239.027482][T12323] netlink: 'syz.3.2063': attribute type 1 has an invalid length. [ 239.029484][T12298] team0: Port device team_slave_1 removed [ 239.037079][T12323] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2063'. [ 239.056668][T12298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.064883][T12298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.073526][T12298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.244058][T12332] netlink: 'syz.3.2071': attribute type 9 has an invalid length. [ 239.292077][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2070'. [ 239.454600][T12341] netlink: 'syz.3.2074': attribute type 29 has an invalid length. [ 239.461962][T12336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2072'. [ 239.497117][T12341] netlink: 'syz.3.2074': attribute type 29 has an invalid length. [ 239.510785][T12341] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2074'. [ 239.810314][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'. [ 240.030867][T12364] netlink: 'syz.0.2083': attribute type 9 has an invalid length. [ 240.081590][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2084'. [ 240.163410][T12372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2087'. [ 240.554442][T12400] netlink: 'syz.2.2096': attribute type 9 has an invalid length. [ 240.588727][T12398] nbd: must specify a device to reconfigure [ 241.309319][T12434] netlink: 'syz.3.2107': attribute type 3 has an invalid length. [ 241.318184][T12434] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2107'. [ 241.486003][T12434] veth1_vlan: left allmulticast mode [ 241.637130][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 241.673221][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 241.692612][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 241.702242][ T5835] Bluetooth: hci4: link tx timeout [ 241.712709][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 241.726277][ T5835] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 241.938381][T12459] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 241.954064][T12454] team0: Port device bond0 removed [ 241.969539][T12454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.983383][T12454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.004903][T12454] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 242.018304][T12454] bond0 (unregistering): Released all slaves [ 242.155677][ T5835] Bluetooth: hci4: link tx timeout [ 242.160949][ T5835] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 242.175712][T12470] FAULT_INJECTION: forcing a failure. [ 242.175712][T12470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.210550][T12470] CPU: 1 UID: 0 PID: 12470 Comm: syz.4.2120 Not tainted syzkaller #0 PREEMPT(full) [ 242.210575][T12470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 242.210598][T12470] Call Trace: [ 242.210605][T12470] [ 242.210612][T12470] dump_stack_lvl+0xe8/0x150 [ 242.210640][T12470] should_fail_ex+0x412/0x560 [ 242.210666][T12470] _copy_from_user+0x2d/0xb0 [ 242.210689][T12470] ___sys_sendmsg+0x1c6/0x360 [ 242.210707][T12470] ? __lock_acquire+0x6b5/0x2cf0 [ 242.210727][T12470] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.210742][T12470] ? __lock_acquire+0x6b5/0x2cf0 [ 242.210763][T12470] ? kstrtouint+0x6e/0xe0 [ 242.210825][T12470] __sys_sendmmsg+0x27c/0x4e0 [ 242.210845][T12470] ? __pfx___sys_sendmmsg+0x10/0x10 [ 242.210860][T12470] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 242.210903][T12470] ? ksys_write+0x242/0x270 [ 242.210919][T12470] ? __pfx_ksys_write+0x10/0x10 [ 242.210936][T12470] __x64_sys_sendmmsg+0xa0/0xc0 [ 242.210951][T12470] do_syscall_64+0xe2/0xf80 [ 242.210968][T12470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.210984][T12470] ? trace_irq_disable+0x37/0x100 [ 242.211004][T12470] ? clear_bhb_loop+0x60/0xb0 [ 242.211028][T12470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.211044][T12470] RIP: 0033:0x7f3da459acb9 [ 242.211060][T12470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.211074][T12470] RSP: 002b:00007f3da53d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 242.211093][T12470] RAX: ffffffffffffffda RBX: 00007f3da4815fa0 RCX: 00007f3da459acb9 [ 242.211105][T12470] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004 [ 242.211116][T12470] RBP: 00007f3da53d8090 R08: 0000000000000000 R09: 0000000000000000 [ 242.211126][T12470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.211135][T12470] R13: 00007f3da4816038 R14: 00007f3da4815fa0 R15: 00007fff6082ff08 [ 242.211168][T12470] [ 242.799938][T12506] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 242.923989][T12513] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 242.963781][T12515] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 242.976486][T12515] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 243.253561][T12531] dummy0: mtu less than device minimum [ 243.727592][T12549] nbd: must specify a device to reconfigure [ 243.797145][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 244.030580][T12575] __nla_validate_parse: 15 callbacks suppressed [ 244.030659][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2155'. [ 244.204428][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 244.409687][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2162'. [ 244.785555][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2166'. [ 244.885515][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2168'. [ 245.318752][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 245.654630][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 245.666518][T12662] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2181'. [ 245.779301][T12663] tipc: Started in network mode [ 245.784257][T12663] tipc: Node identity , cluster identity 4711 [ 245.790897][T12663] tipc: Failed to obtain node identity [ 245.791002][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2183'. [ 245.798662][T12663] tipc: Enabling of bearer rejected, failed to enable media [ 245.841582][T12670] validate_nla: 1 callbacks suppressed [ 245.841599][T12670] netlink: 'syz.2.2184': attribute type 1 has an invalid length. [ 245.860083][T12671] netlink: 'syz.2.2184': attribute type 1 has an invalid length. [ 245.868525][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 245.893910][T12670] bond5: entered promiscuous mode [ 245.899304][T12670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.907621][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2184'. [ 245.932747][T12670] bond5: (slave bridge7): making interface the new active one [ 245.940580][T12670] bridge7: entered promiscuous mode [ 245.947590][T12670] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 246.049650][T12676] netlink: 'syz.3.2186': attribute type 29 has an invalid length. [ 246.059565][T12676] netlink: 'syz.3.2186': attribute type 29 has an invalid length. [ 246.131720][T12681] netlink: 'syz.2.2187': attribute type 4 has an invalid length. [ 246.151369][T12681] netlink: 'syz.2.2187': attribute type 4 has an invalid length. [ 247.205059][T12733] netlink: 'syz.2.2209': attribute type 3 has an invalid length. [ 247.230856][T12733] netlink: 'syz.2.2209': attribute type 2 has an invalid length. [ 247.246348][T12733] netlink: 'syz.2.2209': attribute type 1 has an invalid length. [ 247.694801][T12751] bond5: left promiscuous mode [ 247.700215][T12751] bridge7: left promiscuous mode [ 248.033221][T12774] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 248.276783][T12791] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 248.451044][T12800] netlink: 'syz.1.2230': attribute type 9 has an invalid length. [ 249.547960][T12853] __nla_validate_parse: 28 callbacks suppressed [ 249.547977][T12853] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2242'. [ 249.880026][T12875] tipc: Enabling of bearer rejected, failed to enable media [ 249.972119][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2254'. [ 250.233534][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2260'. [ 250.292583][T12901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2261'. [ 250.329854][T12903] tipc: Can't bind to reserved service type 2 [ 250.707471][T12916] ieee802154 phy1 wpan1: encryption failed: -90 [ 251.162315][T12941] syzkaller0: entered promiscuous mode [ 251.169151][T12941] syzkaller0: entered allmulticast mode [ 251.460717][T12966] ieee802154 phy1 wpan1: encryption failed: -90 [ 251.467618][T12965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2287'. [ 251.477103][T12966] FAULT_INJECTION: forcing a failure. [ 251.477103][T12966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.492093][T12966] CPU: 1 UID: 0 PID: 12966 Comm: syz.2.2288 Not tainted syzkaller #0 PREEMPT(full) [ 251.492112][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 251.492120][T12966] Call Trace: [ 251.492126][T12966] [ 251.492131][T12966] dump_stack_lvl+0xe8/0x150 [ 251.492153][T12966] should_fail_ex+0x412/0x560 [ 251.492174][T12966] _copy_from_user+0x2d/0xb0 [ 251.492188][T12966] ___sys_sendmsg+0x1c6/0x360 [ 251.492206][T12966] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.492217][T12966] ? __lock_acquire+0x6b5/0x2cf0 [ 251.492270][T12966] __sys_sendmmsg+0x27c/0x4e0 [ 251.492287][T12966] ? __pfx___sys_sendmmsg+0x10/0x10 [ 251.492298][T12966] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 251.492330][T12966] ? ksys_write+0x242/0x270 [ 251.492344][T12966] ? __pfx_ksys_write+0x10/0x10 [ 251.492361][T12966] __x64_sys_sendmmsg+0xa0/0xc0 [ 251.492375][T12966] do_syscall_64+0xe2/0xf80 [ 251.492387][T12966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.492399][T12966] ? trace_irq_disable+0x37/0x100 [ 251.492414][T12966] ? clear_bhb_loop+0x60/0xb0 [ 251.492429][T12966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.492442][T12966] RIP: 0033:0x7f970719acb9 [ 251.492455][T12966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.492466][T12966] RSP: 002b:00007f97080f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 251.492481][T12966] RAX: ffffffffffffffda RBX: 00007f9707415fa0 RCX: 00007f970719acb9 [ 251.492491][T12966] RDX: 0000000000000030 RSI: 0000200000007cc0 RDI: 0000000000000004 [ 251.492499][T12966] RBP: 00007f97080f4090 R08: 0000000000000000 R09: 0000000000000000 [ 251.492508][T12966] R10: 0000000020004014 R11: 0000000000000246 R12: 0000000000000002 [ 251.492516][T12966] R13: 00007f9707416038 R14: 00007f9707415fa0 R15: 00007ffc29f3d3a8 [ 251.492539][T12966] [ 251.833262][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 251.863483][T12978] validate_nla: 6 callbacks suppressed [ 251.863500][T12978] netlink: 'syz.2.2292': attribute type 9 has an invalid length. [ 252.229583][T12995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.490994][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 252.500131][T13019] netlink: 'syz.4.2307': attribute type 4 has an invalid length. [ 252.515922][T13016] netlink: 'syz.2.2305': attribute type 9 has an invalid length. [ 252.543166][T13022] netlink: 'syz.4.2307': attribute type 4 has an invalid length. [ 253.343599][T13053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2319'. [ 253.790497][T13068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2324'. [ 253.962015][T13071] FAULT_INJECTION: forcing a failure. [ 253.962015][T13071] name failslab, interval 1, probability 0, space 0, times 0 [ 253.982001][T13071] CPU: 0 UID: 0 PID: 13071 Comm: syz.3.2325 Not tainted syzkaller #0 PREEMPT(full) [ 253.982026][T13071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 253.982037][T13071] Call Trace: [ 253.982044][T13071] [ 253.982051][T13071] dump_stack_lvl+0xe8/0x150 [ 253.982077][T13071] should_fail_ex+0x412/0x560 [ 253.982105][T13071] should_failslab+0xa8/0x100 [ 253.982126][T13071] __kmalloc_noprof+0xde/0x7e0 [ 253.982142][T13071] ? kfree+0x4d/0x650 [ 253.982161][T13071] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 253.982189][T13071] tomoyo_realpath_from_path+0xe3/0x5d0 [ 253.982213][T13071] ? tomoyo_domain+0xd7/0x130 [ 253.982240][T13071] ? tomoyo_path_number_perm+0x219/0x630 [ 253.982261][T13071] tomoyo_path_number_perm+0x246/0x630 [ 253.982283][T13071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 253.982301][T13071] ? __lock_acquire+0x6b5/0x2cf0 [ 253.982334][T13071] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 253.982371][T13071] ? __fget_files+0x2a/0x420 [ 253.982393][T13071] ? __fget_files+0x2a/0x420 [ 253.982411][T13071] ? __fget_files+0x3a0/0x420 [ 253.982430][T13071] ? __fget_files+0x2a/0x420 [ 253.982453][T13071] security_file_ioctl+0xc3/0x2a0 [ 253.982473][T13071] __se_sys_ioctl+0x47/0x170 [ 253.982500][T13071] do_syscall_64+0xe2/0xf80 [ 253.982516][T13071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.982532][T13071] ? trace_irq_disable+0x37/0x100 [ 253.982553][T13071] ? clear_bhb_loop+0x60/0xb0 [ 253.982573][T13071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.982589][T13071] RIP: 0033:0x7f0e5539acb9 [ 253.982605][T13071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.982618][T13071] RSP: 002b:00007f0e56280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.982636][T13071] RAX: ffffffffffffffda RBX: 00007f0e55615fa0 RCX: 00007f0e5539acb9 [ 253.982648][T13071] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004 [ 253.982658][T13071] RBP: 00007f0e56280090 R08: 0000000000000000 R09: 0000000000000000 [ 253.982669][T13071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.982678][T13071] R13: 00007f0e55616038 R14: 00007f0e55615fa0 R15: 00007ffea3f8feb8 [ 253.982707][T13071] [ 253.982715][T13071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 254.742705][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2330'. [ 254.851697][T13060] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 254.869982][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2330'. [ 254.961264][T13087] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 255.001226][T13089] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2331'. [ 255.097667][T13101] netlink: 'syz.2.2336': attribute type 8 has an invalid length. [ 255.185500][T13101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2336'. [ 255.289962][T13111] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2337'. [ 255.492362][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2342'. [ 255.563793][T13129] FAULT_INJECTION: forcing a failure. [ 255.563793][T13129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.581067][T13129] CPU: 0 UID: 0 PID: 13129 Comm: syz.2.2344 Not tainted syzkaller #0 PREEMPT(full) [ 255.581083][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 255.581090][T13129] Call Trace: [ 255.581094][T13129] [ 255.581099][T13129] dump_stack_lvl+0xe8/0x150 [ 255.581117][T13129] should_fail_ex+0x412/0x560 [ 255.581133][T13129] _copy_from_user+0x2d/0xb0 [ 255.581145][T13129] ___sys_sendmsg+0x1c6/0x360 [ 255.581155][T13129] ? __lock_acquire+0x6b5/0x2cf0 [ 255.581168][T13129] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.581194][T13129] ? __fget_files+0x2a/0x420 [ 255.581206][T13129] ? __fget_files+0x3a0/0x420 [ 255.581222][T13129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 255.581233][T13129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.581247][T13129] ? __pfx_ksys_write+0x10/0x10 [ 255.581263][T13129] do_syscall_64+0xe2/0xf80 [ 255.581272][T13129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.581281][T13129] ? trace_irq_disable+0x37/0x100 [ 255.581294][T13129] ? clear_bhb_loop+0x60/0xb0 [ 255.581305][T13129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.581315][T13129] RIP: 0033:0x7f970719acb9 [ 255.581328][T13129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.581341][T13129] RSP: 002b:00007f97080f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.581358][T13129] RAX: ffffffffffffffda RBX: 00007f9707415fa0 RCX: 00007f970719acb9 [ 255.581370][T13129] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 255.581380][T13129] RBP: 00007f97080f4090 R08: 0000000000000000 R09: 0000000000000000 [ 255.581390][T13129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.581399][T13129] R13: 00007f9707416038 R14: 00007f9707415fa0 R15: 00007ffc29f3d3a8 [ 255.581416][T13129] [ 255.770927][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.890465][T13133] netlink: 'syz.3.2347': attribute type 29 has an invalid length. [ 255.977894][T13140] netlink: 'syz.3.2347': attribute type 29 has an invalid length. [ 256.020328][T13133] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2347'. [ 256.109360][T13147] netlink: 'syz.1.2350': attribute type 9 has an invalid length. [ 256.119199][T13145] nbd: must specify a device to reconfigure [ 256.307487][T13157] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2356'. [ 256.555517][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'. [ 256.563323][T13167] netlink: 548 bytes leftover after parsing attributes in process `syz.3.2355'. [ 257.223980][T13184] netlink: 'syz.4.2361': attribute type 9 has an invalid length. [ 257.279221][T13188] netlink: 'syz.1.2363': attribute type 9 has an invalid length. [ 257.712577][T13207] ieee802154 phy1 wpan1: encryption failed: -90 [ 258.742499][T13238] netlink: 'syz.0.2379': attribute type 9 has an invalid length. [ 258.794826][T13239] nbd: must specify a device to reconfigure [ 258.895629][T13245] netlink: 'syz.0.2381': attribute type 4 has an invalid length. [ 258.904179][T13245] netlink: 'syz.0.2381': attribute type 4 has an invalid length. [ 259.501931][T13262] syzkaller1: entered promiscuous mode [ 259.508482][T13262] syzkaller1: entered allmulticast mode [ 259.894240][T13275] __nla_validate_parse: 4 callbacks suppressed [ 259.894258][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2394'. [ 259.959855][T13275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2394'. [ 260.037383][T13277] vlan2: entered promiscuous mode [ 260.064477][T13277] geneve1: entered promiscuous mode [ 260.084990][T13277] vlan2: entered allmulticast mode [ 260.092199][T13289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.103800][T13277] geneve1: entered allmulticast mode [ 260.207759][T13295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2401'. [ 260.210682][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'. [ 260.227046][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 260.283168][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 260.573555][T13317] nbd: must specify a device to reconfigure [ 260.758899][T13323] netlink: 'syz.1.2412': attribute type 4 has an invalid length. [ 260.823884][T13328] ieee802154 phy1 wpan1: encryption failed: -90 [ 260.831679][T13328] FAULT_INJECTION: forcing a failure. [ 260.831679][T13328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.845355][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.2.2413 Not tainted syzkaller #0 PREEMPT(full) [ 260.845389][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 260.845400][T13328] Call Trace: [ 260.845413][T13328] [ 260.845419][T13328] dump_stack_lvl+0xe8/0x150 [ 260.845450][T13328] should_fail_ex+0x412/0x560 [ 260.845477][T13328] _copy_from_user+0x2d/0xb0 [ 260.845497][T13328] ___sys_sendmsg+0x1c6/0x360 [ 260.845520][T13328] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.845535][T13328] ? __lock_acquire+0x6b5/0x2cf0 [ 260.845597][T13328] __sys_sendmmsg+0x27c/0x4e0 [ 260.845620][T13328] ? __pfx___sys_sendmmsg+0x10/0x10 [ 260.845635][T13328] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 260.845677][T13328] ? ksys_write+0x242/0x270 [ 260.845696][T13328] ? __pfx_ksys_write+0x10/0x10 [ 260.845717][T13328] __x64_sys_sendmmsg+0xa0/0xc0 [ 260.845736][T13328] do_syscall_64+0xe2/0xf80 [ 260.845754][T13328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.845769][T13328] ? trace_irq_disable+0x37/0x100 [ 260.845788][T13328] ? clear_bhb_loop+0x60/0xb0 [ 260.845806][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.845821][T13328] RIP: 0033:0x7f970719acb9 [ 260.845836][T13328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.845849][T13328] RSP: 002b:00007f97080f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 260.845868][T13328] RAX: ffffffffffffffda RBX: 00007f9707415fa0 RCX: 00007f970719acb9 [ 260.845880][T13328] RDX: 0000000000000030 RSI: 0000200000007cc0 RDI: 0000000000000004 [ 260.845890][T13328] RBP: 00007f97080f4090 R08: 0000000000000000 R09: 0000000000000000 [ 260.845900][T13328] R10: 0000000020004014 R11: 0000000000000246 R12: 0000000000000002 [ 260.845910][T13328] R13: 00007f9707416038 R14: 00007f9707415fa0 R15: 00007ffc29f3d3a8 [ 260.845935][T13328] [ 261.038767][T13326] netlink: 'syz.1.2412': attribute type 4 has an invalid length. [ 261.443998][T13351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.506558][T13359] nbd: must specify a device to reconfigure [ 261.513624][T13362] netlink: 'syz.2.2423': attribute type 4 has an invalid length. [ 261.559593][T13354] netlink: 'syz.2.2423': attribute type 4 has an invalid length. [ 261.874202][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 262.147234][T13387] tipc: Started in network mode [ 262.156472][T13387] tipc: Node identity , cluster identity 4711 [ 262.162786][T13387] tipc: Failed to obtain node identity [ 262.169302][T13387] tipc: Enabling of bearer rejected, failed to enable media [ 262.351936][T13397] nbd: must specify a device to reconfigure [ 262.561754][T13405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2441'. [ 262.754113][T13418] FAULT_INJECTION: forcing a failure. [ 262.754113][T13418] name failslab, interval 1, probability 0, space 0, times 0 [ 262.765054][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2447'. [ 262.767358][T13418] CPU: 1 UID: 0 PID: 13418 Comm: syz.4.2448 Not tainted syzkaller #0 PREEMPT(full) [ 262.767380][T13418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 262.767390][T13418] Call Trace: [ 262.767397][T13418] [ 262.767404][T13418] dump_stack_lvl+0xe8/0x150 [ 262.767431][T13418] should_fail_ex+0x412/0x560 [ 262.767459][T13418] should_failslab+0xa8/0x100 [ 262.767480][T13418] __kmalloc_noprof+0xde/0x7e0 [ 262.767496][T13418] ? kfree+0x4d/0x650 [ 262.767516][T13418] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 262.767545][T13418] tomoyo_realpath_from_path+0xe3/0x5d0 [ 262.767568][T13418] ? tomoyo_domain+0xd7/0x130 [ 262.767595][T13418] ? tomoyo_path_number_perm+0x219/0x630 [ 262.767615][T13418] tomoyo_path_number_perm+0x246/0x630 [ 262.767636][T13418] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 262.767654][T13418] ? __lock_acquire+0x6b5/0x2cf0 [ 262.767685][T13418] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 262.767722][T13418] ? __fget_files+0x2a/0x420 [ 262.767743][T13418] ? __fget_files+0x2a/0x420 [ 262.767761][T13418] ? __fget_files+0x3a0/0x420 [ 262.767778][T13418] ? __fget_files+0x2a/0x420 [ 262.767802][T13418] security_file_ioctl+0xc3/0x2a0 [ 262.767823][T13418] __se_sys_ioctl+0x47/0x170 [ 262.767848][T13418] do_syscall_64+0xe2/0xf80 [ 262.767864][T13418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.767887][T13418] ? trace_irq_disable+0x37/0x100 [ 262.767907][T13418] ? clear_bhb_loop+0x60/0xb0 [ 262.767927][T13418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.767942][T13418] RIP: 0033:0x7f3da459acb9 [ 262.768007][T13418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.768021][T13418] RSP: 002b:00007f3da53d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.768039][T13418] RAX: ffffffffffffffda RBX: 00007f3da4815fa0 RCX: 00007f3da459acb9 [ 262.768051][T13418] RDX: 000000110c2300fe RSI: 00000000c040ff0b RDI: 0000000000000005 [ 262.768061][T13418] RBP: 00007f3da53d8090 R08: 0000000000000000 R09: 0000000000000000 [ 262.768072][T13418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.768081][T13418] R13: 00007f3da4816038 R14: 00007f3da4815fa0 R15: 00007fff6082ff08 [ 262.768109][T13418] [ 262.768117][T13418] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.901257][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 263.022521][T13421] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 263.414738][T13449] ieee802154 phy1 wpan1: encryption failed: -90 [ 263.426410][T13449] FAULT_INJECTION: forcing a failure. [ 263.426410][T13449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.439806][T13449] CPU: 0 UID: 0 PID: 13449 Comm: syz.0.2462 Not tainted syzkaller #0 PREEMPT(full) [ 263.439828][T13449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 263.439839][T13449] Call Trace: [ 263.439846][T13449] [ 263.439860][T13449] dump_stack_lvl+0xe8/0x150 [ 263.439886][T13449] should_fail_ex+0x412/0x560 [ 263.439914][T13449] _copy_from_user+0x2d/0xb0 [ 263.439932][T13449] ___sys_sendmsg+0x1c6/0x360 [ 263.439954][T13449] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.439969][T13449] ? __lock_acquire+0x6b5/0x2cf0 [ 263.440028][T13449] __sys_sendmmsg+0x27c/0x4e0 [ 263.440050][T13449] ? __pfx___sys_sendmmsg+0x10/0x10 [ 263.440061][T13449] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 263.440084][T13449] ? ksys_write+0x242/0x270 [ 263.440096][T13449] ? __pfx_ksys_write+0x10/0x10 [ 263.440110][T13449] __x64_sys_sendmmsg+0xa0/0xc0 [ 263.440121][T13449] do_syscall_64+0xe2/0xf80 [ 263.440130][T13449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.440139][T13449] ? trace_irq_disable+0x37/0x100 [ 263.440151][T13449] ? clear_bhb_loop+0x60/0xb0 [ 263.440162][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.440171][T13449] RIP: 0033:0x7fea8259acb9 [ 263.440182][T13449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.440190][T13449] RSP: 002b:00007fea834a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.440201][T13449] RAX: ffffffffffffffda RBX: 00007fea82815fa0 RCX: 00007fea8259acb9 [ 263.440208][T13449] RDX: 0000000000000030 RSI: 0000200000007cc0 RDI: 0000000000000004 [ 263.440214][T13449] RBP: 00007fea834a5090 R08: 0000000000000000 R09: 0000000000000000 [ 263.440220][T13449] R10: 0000000020004014 R11: 0000000000000246 R12: 0000000000000002 [ 263.440226][T13449] R13: 00007fea82816038 R14: 00007fea82815fa0 R15: 00007ffd92c78f78 [ 263.440240][T13449] [ 263.773792][T13462] gre0: entered promiscuous mode [ 263.778971][T13462] gre0: entered allmulticast mode [ 263.810251][T13463] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 264.275543][T13486] FAULT_INJECTION: forcing a failure. [ 264.275543][T13486] name failslab, interval 1, probability 0, space 0, times 0 [ 264.324104][T13486] CPU: 1 UID: 0 PID: 13486 Comm: syz.2.2472 Not tainted syzkaller #0 PREEMPT(full) [ 264.324131][T13486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 264.324141][T13486] Call Trace: [ 264.324148][T13486] [ 264.324155][T13486] dump_stack_lvl+0xe8/0x150 [ 264.324182][T13486] should_fail_ex+0x412/0x560 [ 264.324209][T13486] should_failslab+0xa8/0x100 [ 264.324232][T13486] __kmalloc_node_track_caller_noprof+0xe1/0x7f0 [ 264.324264][T13486] ? kobject_set_name_vargs+0x61/0x110 [ 264.324299][T13486] kvasprintf+0xeb/0x1a0 [ 264.324323][T13486] ? __lock_acquire+0x6b5/0x2cf0 [ 264.324346][T13486] ? __pfx_kvasprintf+0x10/0x10 [ 264.324361][T13486] ? lruvec_stat_mod_folio+0x6f/0x2d0 [ 264.324389][T13486] ? lruvec_stat_mod_folio+0x6f/0x2d0 [ 264.324420][T13486] ? kvasprintf_const+0xe1/0x240 [ 264.324449][T13486] kobject_set_name_vargs+0x61/0x110 [ 264.324477][T13486] dev_set_name+0xe2/0x140 [ 264.324513][T13486] ? __pfx_dev_set_name+0x10/0x10 [ 264.324541][T13486] ? trace_kmalloc+0x1f/0xb0 [ 264.324554][T13486] ? __kmalloc_noprof+0x42d/0x7e0 [ 264.324570][T13486] ? wiphy_new_nm+0x625/0x19e0 [ 264.324596][T13486] wiphy_new_nm+0x7a1/0x19e0 [ 264.324615][T13486] ? ieee80211_alloc_hw_nm+0x912/0x1f60 [ 264.324637][T13486] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 264.324653][T13486] ieee80211_alloc_hw_nm+0x3f3/0x1f60 [ 264.324673][T13486] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 264.324699][T13486] mac80211_hwsim_new_radio+0x1dc/0x5330 [ 264.324729][T13486] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 264.324776][T13486] ? rcu_is_watching+0x15/0xb0 [ 264.324798][T13486] ? do_trace_netlink_extack+0x7e/0x1b0 [ 264.324816][T13486] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 264.324832][T13486] ? __nla_validate_parse+0x258e/0x2dc0 [ 264.324848][T13486] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 264.324875][T13486] hwsim_new_radio_nl+0xf85/0x1c30 [ 264.324905][T13486] ? __pfx___nla_validate_parse+0x10/0x10 [ 264.324934][T13486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 264.324962][T13486] ? rcu_is_watching+0x15/0xb0 [ 264.324992][T13486] ? __nla_parse+0x40/0x60 [ 264.325013][T13486] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 264.325044][T13486] genl_family_rcv_msg_doit+0x22a/0x330 [ 264.325075][T13486] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 264.325111][T13486] ? bpf_lsm_capable+0x9/0x20 [ 264.325129][T13486] ? security_capable+0x7e/0x2c0 [ 264.325156][T13486] genl_rcv_msg+0x61c/0x7a0 [ 264.325185][T13486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.325206][T13486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 264.325234][T13486] netlink_rcv_skb+0x232/0x4b0 [ 264.325254][T13486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 264.325278][T13486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.325294][T13486] ? genl_rcv+0x19/0x40 [ 264.325330][T13486] ? down_read+0x272/0x2e0 [ 264.325346][T13486] ? genl_rcv+0xd/0x40 [ 264.325369][T13486] genl_rcv+0x28/0x40 [ 264.325386][T13486] netlink_unicast+0x80f/0x9b0 [ 264.325410][T13486] ? __pfx_netlink_unicast+0x10/0x10 [ 264.325428][T13486] ? netlink_sendmsg+0x650/0xb40 [ 264.325446][T13486] ? skb_put+0x11b/0x210 [ 264.325465][T13486] netlink_sendmsg+0x813/0xb40 [ 264.325493][T13486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.325514][T13486] ? aa_file_perm+0x12d/0x1630 [ 264.325535][T13486] ? aa_sock_msg_perm+0xf1/0x1b0 [ 264.325556][T13486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.325570][T13486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.325589][T13486] __sock_sendmsg+0x21c/0x270 [ 264.325614][T13486] ____sys_sendmsg+0x4d7/0x810 [ 264.325630][T13486] ? __might_fault+0xaf/0x130 [ 264.325671][T13486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.325698][T13486] ? import_iovec+0x73/0xa0 [ 264.325718][T13486] ___sys_sendmsg+0x2a5/0x360 [ 264.325734][T13486] ? __lock_acquire+0x6b5/0x2cf0 [ 264.325754][T13486] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.325797][T13486] ? __fget_files+0x2a/0x420 [ 264.325814][T13486] ? __fget_files+0x3a0/0x420 [ 264.325841][T13486] __x64_sys_sendmsg+0x1bd/0x2a0 [ 264.325861][T13486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.325887][T13486] ? __pfx_ksys_write+0x10/0x10 [ 264.325912][T13486] do_syscall_64+0xe2/0xf80 [ 264.325926][T13486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.325941][T13486] ? trace_irq_disable+0x37/0x100 [ 264.325960][T13486] ? clear_bhb_loop+0x60/0xb0 [ 264.325988][T13486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.326004][T13486] RIP: 0033:0x7f970719acb9 [ 264.326021][T13486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.326035][T13486] RSP: 002b:00007f97080f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.326054][T13486] RAX: ffffffffffffffda RBX: 00007f9707415fa0 RCX: 00007f970719acb9 [ 264.326066][T13486] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 264.326077][T13486] RBP: 00007f97080f4090 R08: 0000000000000000 R09: 0000000000000000 [ 264.326088][T13486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.326098][T13486] R13: 00007f9707416038 R14: 00007f9707415fa0 R15: 00007ffc29f3d3a8 [ 264.326128][T13486] [ 264.858401][T13488] netlink: 'syz.1.2473': attribute type 3 has an invalid length. [ 264.869214][T13488] netlink: 'syz.1.2473': attribute type 13 has an invalid length. [ 265.050885][T13503] __nla_validate_parse: 6 callbacks suppressed [ 265.050904][T13503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2478'. [ 265.105362][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2478'. [ 265.160449][T13513] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 265.452657][T13536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2492'. [ 265.791912][T13558] netlink: 'syz.2.2499': attribute type 4 has an invalid length. [ 265.815700][T13558] netlink: 'syz.2.2499': attribute type 4 has an invalid length. [ 265.915530][T13563] tipc: Started in network mode [ 265.928997][T13563] tipc: Node identity 76df0a2e8455, cluster identity 4711 [ 265.939775][T13563] tipc: Enabled bearer , priority 0 [ 265.964758][T13563] syzkaller0: entered promiscuous mode [ 265.983094][T13563] syzkaller0: entered allmulticast mode [ 265.987780][T13566] FAULT_INJECTION: forcing a failure. [ 265.987780][T13566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.019439][T13566] CPU: 0 UID: 0 PID: 13566 Comm: syz.1.2503 Not tainted syzkaller #0 PREEMPT(full) [ 266.019465][T13566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 266.019475][T13566] Call Trace: [ 266.019483][T13566] [ 266.019491][T13566] dump_stack_lvl+0xe8/0x150 [ 266.019517][T13566] should_fail_ex+0x412/0x560 [ 266.019546][T13566] _copy_from_user+0x2d/0xb0 [ 266.019565][T13566] ___sys_sendmsg+0x1c6/0x360 [ 266.019584][T13566] ? __lock_acquire+0x6b5/0x2cf0 [ 266.019605][T13566] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.019656][T13566] ? __fget_files+0x2a/0x420 [ 266.019675][T13566] ? __fget_files+0x3a0/0x420 [ 266.019705][T13566] __x64_sys_sendmsg+0x1bd/0x2a0 [ 266.019725][T13566] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.019752][T13566] ? __pfx_ksys_write+0x10/0x10 [ 266.019780][T13566] do_syscall_64+0xe2/0xf80 [ 266.019796][T13566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.019813][T13566] ? trace_irq_disable+0x37/0x100 [ 266.019834][T13566] ? clear_bhb_loop+0x60/0xb0 [ 266.019860][T13566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.019877][T13566] RIP: 0033:0x7fe4c119acb9 [ 266.019893][T13566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.019908][T13566] RSP: 002b:00007fe4c1fd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.019927][T13566] RAX: ffffffffffffffda RBX: 00007fe4c1415fa0 RCX: 00007fe4c119acb9 [ 266.019940][T13566] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 266.019951][T13566] RBP: 00007fe4c1fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 266.019962][T13566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.019972][T13566] R13: 00007fe4c1416038 R14: 00007fe4c1415fa0 R15: 00007fff5ff690c8 [ 266.020001][T13566] [ 266.315207][T13568] tipc: Resetting bearer [ 266.386060][T13561] tipc: Resetting bearer [ 266.457236][T13561] tipc: Disabling bearer [ 266.726227][T13582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2507'. [ 266.846799][T13590] tipc: Enabling of bearer rejected, failed to enable media [ 267.077614][T13599] ieee802154 phy1 wpan1: encryption failed: -90 [ 267.444650][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2518'. [ 267.466497][T13612] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.492572][T13610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2518'. [ 267.495034][T13612] netlink: 'syz.2.2520': attribute type 2 has an invalid length. [ 267.551414][T13612] : entered promiscuous mode [ 267.557691][T13613] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.584515][T13613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2520'. [ 267.610905][T13615] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 267.727421][T13619] tipc: Enabling of bearer rejected, failed to enable media [ 267.960264][T13625] gre0: left promiscuous mode [ 267.993754][T13625] vlan2: left promiscuous mode [ 268.009718][T13625] geneve1: left promiscuous mode [ 268.044168][T13612] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 268.073566][T13612] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 268.094854][T13612] bridge0: port 4(netdevsim0) entered disabled state [ 268.111616][T13612] bridge0: mtu less than device minimum [ 268.498938][T13639] syzkaller0: entered promiscuous mode [ 268.504450][T13639] syzkaller0: entered allmulticast mode [ 269.492045][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 270.153179][T13666] tipc: Enabling of bearer rejected, failed to enable media [ 270.283168][T13673] netlink: 'syz.1.2537': attribute type 29 has an invalid length. [ 270.323755][T13673] netlink: 'syz.1.2537': attribute type 29 has an invalid length. [ 270.337144][T13673] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2537'. [ 270.466350][T13683] netlink: 548 bytes leftover after parsing attributes in process `syz.3.2542'. [ 270.493115][T13681] netlink: 'syz.3.2542': attribute type 29 has an invalid length. [ 270.634269][T13692] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 270.942620][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2548'. [ 270.972509][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2550'. [ 271.037881][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 271.057600][T13707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2552'. [ 271.089947][T13709] bridge9: port 1(veth9) entered blocking state [ 271.101853][T13709] bridge9: port 1(veth9) entered disabled state [ 271.106862][T13714] sctp: [Deprecated]: syz.3.2555 (pid 13714) Use of int in max_burst socket option. [ 271.106862][T13714] Use struct sctp_assoc_value instead [ 271.112984][T13709] veth9: entered allmulticast mode [ 271.157831][T13709] veth9: entered promiscuous mode [ 271.181331][T13705] bridge9: port 2(veth0_to_bond) entered blocking state [ 271.192034][T13705] bridge9: port 2(veth0_to_bond) entered disabled state [ 271.199382][T13705] veth0_to_bond: entered allmulticast mode [ 271.207256][T13705] veth0_to_bond: entered promiscuous mode [ 271.247983][T13716] bridge9: port 3(veth11) entered blocking state [ 271.254443][T13716] bridge9: port 3(veth11) entered disabled state [ 271.261489][T13716] veth11: entered allmulticast mode [ 271.268409][T13716] veth11: entered promiscuous mode [ 271.409257][T13724] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2559'. [ 271.699079][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'. [ 271.871986][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2567'. [ 271.892717][T13753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2566'. [ 272.081979][T13764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.379492][T13771] syzkaller0: entered promiscuous mode [ 272.385118][T13771] syzkaller0: entered allmulticast mode [ 272.643887][T13791] ieee802154 phy1 wpan1: encryption failed: -90 [ 274.450210][T13817] netlink: 'syz.2.2587': attribute type 1 has an invalid length. [ 274.550940][T13820] netlink: 'syz.3.2588': attribute type 10 has an invalid length. [ 274.599333][T13831] netlink: 'syz.1.2591': attribute type 15 has an invalid length. [ 274.662557][T13831] netlink: 'syz.1.2591': attribute type 15 has an invalid length. [ 274.670616][ T50] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 274.681695][ T50] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 274.690452][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 274.702744][ T50] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 275.007672][T13847] FAULT_INJECTION: forcing a failure. [ 275.007672][T13847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.035845][T13847] CPU: 1 UID: 0 PID: 13847 Comm: syz.1.2595 Not tainted syzkaller #0 PREEMPT(full) [ 275.035872][T13847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 275.035883][T13847] Call Trace: [ 275.035890][T13847] [ 275.035898][T13847] dump_stack_lvl+0xe8/0x150 [ 275.035932][T13847] should_fail_ex+0x412/0x560 [ 275.035961][T13847] _copy_from_user+0x2d/0xb0 [ 275.035981][T13847] pidfd_ioctl+0x385/0x32d0 [ 275.036008][T13847] ? __pfx_pidfd_ioctl+0x10/0x10 [ 275.036034][T13847] ? __fget_files+0x2a/0x420 [ 275.036054][T13847] ? __fget_files+0x3a0/0x420 [ 275.036073][T13847] ? __fget_files+0x2a/0x420 [ 275.036096][T13847] ? bpf_lsm_file_ioctl+0x9/0x20 [ 275.036115][T13847] ? __pfx_pidfd_ioctl+0x10/0x10 [ 275.036135][T13847] __se_sys_ioctl+0xfc/0x170 [ 275.036161][T13847] do_syscall_64+0xe2/0xf80 [ 275.036178][T13847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.036195][T13847] ? trace_irq_disable+0x37/0x100 [ 275.036215][T13847] ? clear_bhb_loop+0x60/0xb0 [ 275.036236][T13847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.036253][T13847] RIP: 0033:0x7fe4c119acb9 [ 275.036270][T13847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.036285][T13847] RSP: 002b:00007fe4c1fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.036304][T13847] RAX: ffffffffffffffda RBX: 00007fe4c1415fa0 RCX: 00007fe4c119acb9 [ 275.036317][T13847] RDX: 000000110c2300fe RSI: 00000000c040ff0b RDI: 0000000000000005 [ 275.036328][T13847] RBP: 00007fe4c1fd2090 R08: 0000000000000000 R09: 0000000000000000 [ 275.036339][T13847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.036349][T13847] R13: 00007fe4c1416038 R14: 00007fe4c1415fa0 R15: 00007fff5ff690c8 [ 275.036378][T13847] [ 275.495048][T13872] __nla_validate_parse: 12 callbacks suppressed [ 275.495065][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2604'. [ 275.579996][T13872] FAULT_INJECTION: forcing a failure. [ 275.579996][T13872] name failslab, interval 1, probability 0, space 0, times 0 [ 275.613155][T13872] CPU: 1 UID: 0 PID: 13872 Comm: syz.3.2604 Not tainted syzkaller #0 PREEMPT(full) [ 275.613194][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 275.613204][T13872] Call Trace: [ 275.613211][T13872] [ 275.613219][T13872] dump_stack_lvl+0xe8/0x150 [ 275.613244][T13872] should_fail_ex+0x412/0x560 [ 275.613271][T13872] should_failslab+0xa8/0x100 [ 275.613292][T13872] __kvmalloc_node_noprof+0x166/0x8d0 [ 275.613312][T13872] ? rhashtable_init_noprof+0x52e/0xa70 [ 275.613327][T13872] ? rhashtable_init_noprof+0x12d/0xa70 [ 275.613347][T13872] rhashtable_init_noprof+0x52e/0xa70 [ 275.613363][T13872] ? __init_waitqueue_head+0xa9/0x150 [ 275.613391][T13872] rhltable_init_noprof+0x1e/0x60 [ 275.613410][T13872] sta_info_init+0x28/0x130 [ 275.613432][T13872] ieee80211_alloc_hw_nm+0x818/0x1f60 [ 275.613451][T13872] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 275.613476][T13872] mac80211_hwsim_new_radio+0x1dc/0x5330 [ 275.613499][T13872] ? _printk+0xdd/0x130 [ 275.613532][T13872] ? __pfx__printk+0x10/0x10 [ 275.613554][T13872] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 275.613580][T13872] ? rcu_is_watching+0x15/0xb0 [ 275.613600][T13872] ? do_trace_netlink_extack+0x7e/0x1b0 [ 275.613619][T13872] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 275.613633][T13872] ? __nla_validate_parse+0x258e/0x2dc0 [ 275.613650][T13872] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 275.613675][T13872] hwsim_new_radio_nl+0xf85/0x1c30 [ 275.613698][T13872] ? __pfx___nla_validate_parse+0x10/0x10 [ 275.613726][T13872] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 275.613750][T13872] ? rcu_is_watching+0x15/0xb0 [ 275.613772][T13872] ? __nla_parse+0x40/0x60 [ 275.613791][T13872] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 275.613823][T13872] genl_family_rcv_msg_doit+0x22a/0x330 [ 275.613854][T13872] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 275.613888][T13872] ? bpf_lsm_capable+0x9/0x20 [ 275.613906][T13872] ? security_capable+0x7e/0x2c0 [ 275.613941][T13872] genl_rcv_msg+0x61c/0x7a0 [ 275.613971][T13872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.613994][T13872] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 275.614026][T13872] netlink_rcv_skb+0x232/0x4b0 [ 275.614047][T13872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.614072][T13872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.614089][T13872] ? genl_rcv+0x19/0x40 [ 275.614125][T13872] ? down_read+0x272/0x2e0 [ 275.614140][T13872] ? genl_rcv+0xd/0x40 [ 275.614163][T13872] genl_rcv+0x28/0x40 [ 275.614189][T13872] netlink_unicast+0x80f/0x9b0 [ 275.614215][T13872] ? __pfx_netlink_unicast+0x10/0x10 [ 275.614236][T13872] ? netlink_sendmsg+0x650/0xb40 [ 275.614254][T13872] ? skb_put+0x11b/0x210 [ 275.614275][T13872] netlink_sendmsg+0x813/0xb40 [ 275.614302][T13872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.614325][T13872] ? aa_file_perm+0x12d/0x1630 [ 275.614347][T13872] ? aa_sock_msg_perm+0xf1/0x1b0 [ 275.614371][T13872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.614388][T13872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.614406][T13872] __sock_sendmsg+0x21c/0x270 [ 275.614429][T13872] ____sys_sendmsg+0x4d7/0x810 [ 275.614446][T13872] ? __might_fault+0xaf/0x130 [ 275.614472][T13872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.614498][T13872] ? import_iovec+0x73/0xa0 [ 275.614521][T13872] ___sys_sendmsg+0x2a5/0x360 [ 275.614537][T13872] ? __lock_acquire+0x6b5/0x2cf0 [ 275.614558][T13872] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.614610][T13872] ? __fget_files+0x2a/0x420 [ 275.614628][T13872] ? __fget_files+0x3a0/0x420 [ 275.614658][T13872] __x64_sys_sendmsg+0x1bd/0x2a0 [ 275.614678][T13872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.614702][T13872] ? __pfx_ksys_write+0x10/0x10 [ 275.614731][T13872] do_syscall_64+0xe2/0xf80 [ 275.614747][T13872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.614763][T13872] ? trace_irq_disable+0x37/0x100 [ 275.614781][T13872] ? clear_bhb_loop+0x60/0xb0 [ 275.614801][T13872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.614817][T13872] RIP: 0033:0x7f0e5539acb9 [ 275.614832][T13872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.614847][T13872] RSP: 002b:00007f0e56280028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.614865][T13872] RAX: ffffffffffffffda RBX: 00007f0e55615fa0 RCX: 00007f0e5539acb9 [ 275.614878][T13872] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 275.614889][T13872] RBP: 00007f0e56280090 R08: 0000000000000000 R09: 0000000000000000 [ 275.614901][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.614911][T13872] R13: 00007f0e55616038 R14: 00007f0e55615fa0 R15: 00007ffea3f8feb8 [ 275.614949][T13872] [ 276.387130][T13906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.801749][T13933] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2614'. [ 276.826201][T13933] netlink: 175 bytes leftover after parsing attributes in process `syz.4.2614'. [ 277.242454][T13951] netlink: 'syz.0.2619': attribute type 28 has an invalid length. [ 277.447112][T13963] dummy0: mtu less than device minimum [ 277.458023][T13966] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 277.469060][T13966] bridge0: port 3(netdevsim0) entered disabled state [ 277.489024][T13966] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 277.538354][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 277.580480][T13974] netlink: 'syz.1.2627': attribute type 3 has an invalid length. [ 277.601535][T13974] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2627'. [ 277.660774][T13974] netlink: 'syz.1.2627': attribute type 13 has an invalid length. [ 277.674215][ T143] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 277.685831][ T143] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 277.696978][ T143] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 277.705704][ T143] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 278.930909][T14018] dummy0: mtu less than device minimum [ 279.010595][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'. [ 279.110593][T14030] netlink: 'syz.2.2640': attribute type 2 has an invalid length. [ 279.110728][T14032] netlink: 'syz.2.2640': attribute type 2 has an invalid length. [ 279.126906][T14033] ip6t_srh: unknown srh invflags BA61 [ 279.552677][T14059] netlink: 592 bytes leftover after parsing attributes in process `syz.0.2645'. [ 279.614571][T14052] netlink: 'syz.0.2645': attribute type 1 has an invalid length. [ 279.652400][T14052] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2645'. [ 279.709463][T14066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2648'. [ 280.597306][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 280.851701][T14103] FAULT_INJECTION: forcing a failure. [ 280.851701][T14103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.870391][T14103] CPU: 1 UID: 0 PID: 14103 Comm: syz.0.2654 Not tainted syzkaller #0 PREEMPT(full) [ 280.870416][T14103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 280.870427][T14103] Call Trace: [ 280.870434][T14103] [ 280.870443][T14103] dump_stack_lvl+0xe8/0x150 [ 280.870470][T14103] should_fail_ex+0x412/0x560 [ 280.870491][T14103] _copy_to_user+0x31/0xb0 [ 280.870504][T14103] simple_read_from_buffer+0xe1/0x170 [ 280.870524][T14103] proc_fail_nth_read+0x1bb/0x230 [ 280.870536][T14103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.870548][T14103] ? rw_verify_area+0x2a6/0x4d0 [ 280.870564][T14103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.870575][T14103] vfs_read+0x20c/0xa70 [ 280.870583][T14103] ? fdget_pos+0x246/0x320 [ 280.870596][T14103] ? __pfx___mutex_lock+0x10/0x10 [ 280.870607][T14103] ? __pfx_vfs_read+0x10/0x10 [ 280.870617][T14103] ? __fget_files+0x2a/0x420 [ 280.870633][T14103] ? __fget_files+0x3a0/0x420 [ 280.870643][T14103] ? __fget_files+0x2a/0x420 [ 280.870661][T14103] ksys_read+0x150/0x270 [ 280.870671][T14103] ? __pfx_ksys_read+0x10/0x10 [ 280.870686][T14103] do_syscall_64+0xe2/0xf80 [ 280.870695][T14103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.870705][T14103] ? trace_irq_disable+0x37/0x100 [ 280.870717][T14103] ? clear_bhb_loop+0x60/0xb0 [ 280.870728][T14103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.870738][T14103] RIP: 0033:0x7fea8255b58e [ 280.870748][T14103] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 280.870756][T14103] RSP: 002b:00007fea834a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.870768][T14103] RAX: ffffffffffffffda RBX: 00007fea834a56c0 RCX: 00007fea8255b58e [ 280.870775][T14103] RDX: 000000000000000f RSI: 00007fea834a50a0 RDI: 0000000000000003 [ 280.870781][T14103] RBP: 00007fea834a5090 R08: 0000000000000000 R09: 0000000000000000 [ 280.870787][T14103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.870792][T14103] R13: 00007fea82816038 R14: 00007fea82815fa0 R15: 00007ffd92c78f78 [ 280.870807][T14103] [ 281.390091][T14121] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2660'. [ 281.408849][T14124] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 281.437781][T14124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2662'. [ 281.448941][T14126] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2663'. [ 281.488533][T14126] netlink: 'syz.2.2663': attribute type 1 has an invalid length. [ 281.512855][T14126] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2663'. [ 281.523400][T14117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2660'. [ 281.532564][T14117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2660'. [ 281.788740][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 282.109163][T14156] ipvlan2: entered promiscuous mode [ 282.489506][T14166] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 282.665028][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'. [ 282.701319][T14189] FAULT_INJECTION: forcing a failure. [ 282.701319][T14189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.724441][T14184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2676'. [ 282.750474][T14189] CPU: 1 UID: 0 PID: 14189 Comm: syz.3.2677 Not tainted syzkaller #0 PREEMPT(full) [ 282.750501][T14189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 282.750511][T14189] Call Trace: [ 282.750518][T14189] [ 282.750525][T14189] dump_stack_lvl+0xe8/0x150 [ 282.750552][T14189] should_fail_ex+0x412/0x560 [ 282.750580][T14189] _copy_from_user+0x2d/0xb0 [ 282.750601][T14189] ___sys_sendmsg+0x1c6/0x360 [ 282.750619][T14189] ? __lock_acquire+0x6b5/0x2cf0 [ 282.750640][T14189] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.750690][T14189] ? __fget_files+0x2a/0x420 [ 282.750709][T14189] ? __fget_files+0x3a0/0x420 [ 282.750736][T14189] __x64_sys_sendmsg+0x1bd/0x2a0 [ 282.750756][T14189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.750780][T14189] ? __pfx_ksys_write+0x10/0x10 [ 282.750811][T14189] do_syscall_64+0xe2/0xf80 [ 282.750826][T14189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.750840][T14189] ? trace_irq_disable+0x37/0x100 [ 282.750859][T14189] ? clear_bhb_loop+0x60/0xb0 [ 282.750879][T14189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.750894][T14189] RIP: 0033:0x7f0e5539acb9 [ 282.750911][T14189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.750924][T14189] RSP: 002b:00007f0e56280028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.750940][T14189] RAX: ffffffffffffffda RBX: 00007f0e55615fa0 RCX: 00007f0e5539acb9 [ 282.750952][T14189] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008 [ 282.750961][T14189] RBP: 00007f0e56280090 R08: 0000000000000000 R09: 0000000000000000 [ 282.750972][T14189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.750980][T14189] R13: 00007f0e55616038 R14: 00007f0e55615fa0 R15: 00007ffea3f8feb8 [ 282.751007][T14189] [ 283.184667][T14201] can: request_module (can-proto-3) failed. [ 283.329139][T14208] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 284.492165][T14248] FAULT_INJECTION: forcing a failure. [ 284.492165][T14248] name failslab, interval 1, probability 0, space 0, times 0 [ 284.535438][T14248] CPU: 0 UID: 0 PID: 14248 Comm: syz.3.2694 Not tainted syzkaller #0 PREEMPT(full) [ 284.535464][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 284.535474][T14248] Call Trace: [ 284.535481][T14248] [ 284.535488][T14248] dump_stack_lvl+0xe8/0x150 [ 284.535515][T14248] should_fail_ex+0x412/0x560 [ 284.535543][T14248] should_failslab+0xa8/0x100 [ 284.535565][T14248] __kvmalloc_node_noprof+0x166/0x8d0 [ 284.535585][T14248] ? rhashtable_init_noprof+0x52e/0xa70 [ 284.535600][T14248] ? rhashtable_init_noprof+0x12d/0xa70 [ 284.535622][T14248] rhashtable_init_noprof+0x52e/0xa70 [ 284.535639][T14248] ? __init_waitqueue_head+0xa9/0x150 [ 284.535667][T14248] rhltable_init_noprof+0x1e/0x60 [ 284.535685][T14248] sta_info_init+0x54/0x130 [ 284.535710][T14248] ieee80211_alloc_hw_nm+0x818/0x1f60 [ 284.535730][T14248] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 284.535758][T14248] mac80211_hwsim_new_radio+0x1dc/0x5330 [ 284.535788][T14248] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 284.535815][T14248] ? rcu_is_watching+0x15/0xb0 [ 284.535834][T14248] ? do_trace_netlink_extack+0x7e/0x1b0 [ 284.535853][T14248] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 284.535869][T14248] ? __nla_validate_parse+0x258e/0x2dc0 [ 284.535885][T14248] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 284.535918][T14248] hwsim_new_radio_nl+0xf85/0x1c30 [ 284.535945][T14248] ? __pfx___nla_validate_parse+0x10/0x10 [ 284.535976][T14248] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 284.536007][T14248] ? rcu_is_watching+0x15/0xb0 [ 284.536032][T14248] ? __nla_parse+0x40/0x60 [ 284.536052][T14248] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 284.536085][T14248] genl_family_rcv_msg_doit+0x22a/0x330 [ 284.536116][T14248] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 284.536152][T14248] ? bpf_lsm_capable+0x9/0x20 [ 284.536169][T14248] ? security_capable+0x7e/0x2c0 [ 284.536194][T14248] genl_rcv_msg+0x61c/0x7a0 [ 284.536222][T14248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.536242][T14248] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 284.536270][T14248] netlink_rcv_skb+0x232/0x4b0 [ 284.536290][T14248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.536314][T14248] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.536332][T14248] ? genl_rcv+0x19/0x40 [ 284.536372][T14248] ? down_read+0x272/0x2e0 [ 284.536388][T14248] ? genl_rcv+0xd/0x40 [ 284.536412][T14248] genl_rcv+0x28/0x40 [ 284.536434][T14248] netlink_unicast+0x80f/0x9b0 [ 284.536461][T14248] ? __pfx_netlink_unicast+0x10/0x10 [ 284.536481][T14248] ? netlink_sendmsg+0x650/0xb40 [ 284.536499][T14248] ? skb_put+0x11b/0x210 [ 284.536520][T14248] netlink_sendmsg+0x813/0xb40 [ 284.536549][T14248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.536573][T14248] ? aa_file_perm+0x12d/0x1630 [ 284.536594][T14248] ? aa_sock_msg_perm+0xf1/0x1b0 [ 284.536618][T14248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.536633][T14248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.536654][T14248] __sock_sendmsg+0x21c/0x270 [ 284.536679][T14248] ____sys_sendmsg+0x4d7/0x810 [ 284.536697][T14248] ? __might_fault+0xaf/0x130 [ 284.536727][T14248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.536753][T14248] ? import_iovec+0x73/0xa0 [ 284.536776][T14248] ___sys_sendmsg+0x2a5/0x360 [ 284.536792][T14248] ? __lock_acquire+0x6b5/0x2cf0 [ 284.536814][T14248] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.536866][T14248] ? __fget_files+0x2a/0x420 [ 284.536886][T14248] ? __fget_files+0x3a0/0x420 [ 284.536917][T14248] __x64_sys_sendmsg+0x1bd/0x2a0 [ 284.536938][T14248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.536966][T14248] ? __pfx_ksys_write+0x10/0x10 [ 284.537006][T14248] do_syscall_64+0xe2/0xf80 [ 284.537023][T14248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.537040][T14248] ? trace_irq_disable+0x37/0x100 [ 284.537061][T14248] ? clear_bhb_loop+0x60/0xb0 [ 284.537081][T14248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.537098][T14248] RIP: 0033:0x7f0e5539acb9 [ 284.537115][T14248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.537130][T14248] RSP: 002b:00007f0e56280028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.537149][T14248] RAX: ffffffffffffffda RBX: 00007f0e55615fa0 RCX: 00007f0e5539acb9 [ 284.537161][T14248] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 284.537173][T14248] RBP: 00007f0e56280090 R08: 0000000000000000 R09: 0000000000000000 [ 284.537183][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.537193][T14248] R13: 00007f0e55616038 R14: 00007f0e55615fa0 R15: 00007ffea3f8feb8 [ 284.537223][T14248] [ 285.839380][T14267] __nla_validate_parse: 9 callbacks suppressed [ 285.839396][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2699'. [ 285.849611][T14265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2699'. [ 286.426899][ C1] ================================================================== [ 286.435088][ C1] BUG: KASAN: slab-use-after-free in timer_is_static_object+0x35/0x80 [ 286.443258][ C1] Read of size 8 at addr ffff888057fd0098 by task syz.1.2702/14277 [ 286.451157][ C1] [ 286.453491][ C1] CPU: 1 UID: 0 PID: 14277 Comm: syz.1.2702 Not tainted syzkaller #0 PREEMPT(full) [ 286.453514][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 286.453526][ C1] Call Trace: [ 286.453533][ C1] [ 286.453540][ C1] dump_stack_lvl+0xe8/0x150 [ 286.453568][ C1] print_report+0xba/0x230 [ 286.453588][ C1] ? timer_is_static_object+0x35/0x80 [ 286.453609][ C1] kasan_report+0x117/0x150 [ 286.453632][ C1] ? timer_is_static_object+0x35/0x80 [ 286.453655][ C1] timer_is_static_object+0x35/0x80 [ 286.453677][ C1] debug_object_activate+0x141/0x580 [ 286.453705][ C1] __mod_timer+0xa4f/0xf30 [ 286.453737][ C1] call_timer_fn+0x192/0x5a0 [ 286.453759][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 286.453786][ C1] ? call_timer_fn+0xd4/0x5a0 [ 286.453813][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 286.453838][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.453865][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 286.453893][ C1] __run_timer_base+0x652/0x8b0 [ 286.453918][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 286.453936][ C1] ? clockevents_program_event+0x247/0x350 [ 286.453959][ C1] ? sched_clock_cpu+0x74/0x440 [ 286.453980][ C1] run_timer_softirq+0xb7/0x170 [ 286.453999][ C1] handle_softirqs+0x22a/0x7c0 [ 286.454020][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 286.454041][ C1] __irq_exit_rcu+0x5f/0x150 [ 286.454058][ C1] irq_exit_rcu+0x9/0x30 [ 286.454074][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 286.454102][ C1] [ 286.454108][ C1] [ 286.454115][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.454137][ C1] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 286.454160][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 286.454178][ C1] RSP: 0018:ffffc9001c1e74f0 EFLAGS: 00000246 [ 286.454197][ C1] RAX: ffffffff81fb9601 RBX: ffffffffffffffff RCX: ffffffff81fb969b [ 286.454211][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea0001b090b4 [ 286.454223][ C1] RBP: 0000000000000001 R08: ffffea0001b090b7 R09: 1ffffd4000361216 [ 286.454235][ C1] R10: dffffc0000000000 R11: fffff94000361216 R12: 0000000000000001 [ 286.454248][ C1] R13: dffffc0000000000 R14: fffff94000361217 R15: 1ffffd4000361216 [ 286.454264][ C1] ? folio_try_get+0x41/0x340 [ 286.454281][ C1] ? folio_try_get+0xdb/0x340 [ 286.454299][ C1] ? folio_try_get+0x1c/0x340 [ 286.454317][ C1] folio_try_get+0xdb/0x340 [ 286.454335][ C1] next_uptodate_folio+0xcb/0x5d0 [ 286.454358][ C1] filemap_map_pages+0x14fc/0x2000 [ 286.454386][ C1] ? filemap_map_pages+0x185/0x2000 [ 286.454408][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 286.454431][ C1] ? ___pte_offset_map+0x29/0x240 [ 286.454458][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 286.454478][ C1] ? do_pte_missing+0x11a9/0x3310 [ 286.454496][ C1] do_pte_missing+0x20b0/0x3310 [ 286.454520][ C1] ? handle_mm_fault+0xee/0x32a0 [ 286.454547][ C1] handle_mm_fault+0x1b8c/0x32a0 [ 286.454578][ C1] ? handle_mm_fault+0xee/0x32a0 [ 286.454607][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 286.454633][ C1] ? follow_page_pte+0x825/0x1460 [ 286.454661][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 286.454690][ C1] __get_user_pages+0x165b/0x29d0 [ 286.454726][ C1] populate_vma_page_range+0x2be/0x3c0 [ 286.454750][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 286.454776][ C1] ? down_read+0x272/0x2e0 [ 286.454801][ C1] ? __mm_populate+0x173/0x390 [ 286.454825][ C1] __mm_populate+0x25f/0x390 [ 286.454849][ C1] ? __pfx___mm_populate+0x10/0x10 [ 286.454876][ C1] vm_mmap_pgoff+0x3aa/0x4f0 [ 286.454905][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 286.454931][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 286.454956][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 286.454978][ C1] do_syscall_64+0xe2/0xf80 [ 286.454995][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.455014][ C1] ? trace_irq_disable+0x37/0x100 [ 286.455038][ C1] ? clear_bhb_loop+0x60/0xb0 [ 286.455059][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.455077][ C1] RIP: 0033:0x7fe4c119acb9 [ 286.455094][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.455110][ C1] RSP: 002b:00007fe4c1fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 286.455127][ C1] RAX: ffffffffffffffda RBX: 00007fe4c1415fa0 RCX: 00007fe4c119acb9 [ 286.455140][ C1] RDX: 0000000000000005 RSI: 0000000000c00000 RDI: 0000200000001000 [ 286.455151][ C1] RBP: 00007fe4c1208bf7 R08: ffffffffffffffff R09: 0000000000000000 [ 286.455163][ C1] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000000 [ 286.455174][ C1] R13: 00007fe4c1416038 R14: 00007fe4c1415fa0 R15: 00007fff5ff690c8 [ 286.455194][ C1] [ 286.455200][ C1] [ 286.931346][ C1] Allocated by task 6188: [ 286.935746][ C1] kasan_save_track+0x3e/0x80 [ 286.940599][ C1] __kasan_kmalloc+0x93/0xb0 [ 286.945179][ C1] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 286.950535][ C1] rose_add_node+0x23c/0xf00 [ 286.955109][ C1] rose_rt_ioctl+0xd35/0x12a0 [ 286.959768][ C1] rose_ioctl+0x3fb/0x8f0 [ 286.964087][ C1] sock_do_ioctl+0x101/0x320 [ 286.968676][ C1] sock_ioctl+0x5c6/0x7f0 [ 286.973013][ C1] __se_sys_ioctl+0xfc/0x170 [ 286.977611][ C1] do_syscall_64+0xe2/0xf80 [ 286.982106][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.988072][ C1] [ 286.990380][ C1] Freed by task 14259: [ 286.994427][ C1] kasan_save_track+0x3e/0x80 [ 286.999089][ C1] kasan_save_free_info+0x46/0x50 [ 287.004101][ C1] __kasan_slab_free+0x5c/0x80 [ 287.008852][ C1] kfree+0x1be/0x650 [ 287.012734][ C1] rose_timer_expiry+0x4cb/0x600 [ 287.017655][ C1] call_timer_fn+0x192/0x5a0 [ 287.022226][ C1] __run_timer_base+0x652/0x8b0 [ 287.027144][ C1] run_timer_softirq+0xb7/0x170 [ 287.031976][ C1] handle_softirqs+0x22a/0x7c0 [ 287.036730][ C1] __irq_exit_rcu+0x5f/0x150 [ 287.041301][ C1] irq_exit_rcu+0x9/0x30 [ 287.045525][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 287.051149][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.057111][ C1] [ 287.059417][ C1] The buggy address belongs to the object at ffff888057fd0000 [ 287.059417][ C1] which belongs to the cache kmalloc-512 of size 512 [ 287.073631][ C1] The buggy address is located 152 bytes inside of [ 287.073631][ C1] freed 512-byte region [ffff888057fd0000, ffff888057fd0200) [ 287.087409][ C1] [ 287.089720][ C1] The buggy address belongs to the physical page: [ 287.096127][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57fd0 [ 287.104990][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 287.113470][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 287.121011][ C1] page_type: f5(slab) [ 287.124978][ C1] raw: 00fff00000000040 ffff88813ff26c80 ffffea0000ccad00 dead000000000002 [ 287.133552][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.142211][ C1] head: 00fff00000000040 ffff88813ff26c80 ffffea0000ccad00 dead000000000002 [ 287.150952][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.159617][ C1] head: 00fff00000000002 ffffea00015ff401 00000000ffffffff 00000000ffffffff [ 287.168276][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 287.176920][ C1] page dumped because: kasan: bad access detected [ 287.183319][ C1] page_owner tracks the page as allocated [ 287.189011][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5110, tgid 5110 (kworker/u8:14), ts 74905067352, free_ts 21475223859 [ 287.210437][ C1] post_alloc_hook+0x228/0x280 [ 287.215186][ C1] get_page_from_freelist+0x24dc/0x2580 [ 287.220715][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 287.226506][ C1] alloc_pages_mpol+0x232/0x4a0 [ 287.231341][ C1] allocate_slab+0x86/0x3a0 [ 287.235829][ C1] ___slab_alloc+0xd82/0x1760 [ 287.240500][ C1] __slab_alloc+0x65/0x100 [ 287.245003][ C1] __kmalloc_noprof+0x46c/0x7e0 [ 287.249918][ C1] fib6_info_alloc+0x30/0xf0 [ 287.254499][ C1] ip6_route_info_create+0x142/0x860 [ 287.259771][ C1] addrconf_f6i_alloc+0x200/0x490 [ 287.264793][ C1] ipv6_add_addr+0x59c/0x10d0 [ 287.269508][ C1] addrconf_add_linklocal+0x276/0x6d0 [ 287.274857][ C1] addrconf_addr_gen+0x4f2/0x610 [ 287.279778][ C1] addrconf_init_auto_addrs+0x641/0xa80 [ 287.285305][ C1] addrconf_notify+0xb1e/0x1050 [ 287.290137][ C1] page last free pid 1 tgid 1 stack trace: [ 287.295919][ C1] __free_frozen_pages+0xbb0/0xd10 [ 287.301011][ C1] free_contig_range+0x1bd/0x480 [ 287.305938][ C1] destroy_args+0x69/0x630 [ 287.310344][ C1] debug_vm_pgtable+0x3f8/0x410 [ 287.315174][ C1] do_one_initcall+0x250/0x840 [ 287.319922][ C1] do_initcall_level+0x104/0x190 [ 287.324849][ C1] do_initcalls+0x59/0xa0 [ 287.329163][ C1] kernel_init_freeable+0x2a6/0x3d0 [ 287.334344][ C1] kernel_init+0x1d/0x1d0 [ 287.338656][ C1] ret_from_fork+0x51b/0xa40 [ 287.343227][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.347992][ C1] [ 287.350296][ C1] Memory state around the buggy address: [ 287.355996][ C1] ffff888057fcff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.364036][ C1] ffff888057fd0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.372080][ C1] >ffff888057fd0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.380117][ C1] ^ [ 287.384940][ C1] ffff888057fd0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.392984][ C1] ffff888057fd0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.401026][ C1] ================================================================== [ 287.409086][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.416263][ C1] CPU: 1 UID: 0 PID: 14277 Comm: syz.1.2702 Not tainted syzkaller #0 PREEMPT(full) [ 287.425620][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 287.435658][ C1] Call Trace: [ 287.438920][ C1] [ 287.441761][ C1] vpanic+0x1e0/0x670 [ 287.445729][ C1] panic+0xc5/0xd0 [ 287.449464][ C1] ? __pfx_panic+0x10/0x10 [ 287.453864][ C1] ? timer_is_static_object+0x35/0x80 [ 287.459228][ C1] ? rcu_is_watching+0x15/0xb0 [ 287.463977][ C1] ? timer_is_static_object+0x35/0x80 [ 287.469330][ C1] ? timer_is_static_object+0x35/0x80 [ 287.474682][ C1] check_panic_on_warn+0x89/0xb0 [ 287.479605][ C1] ? timer_is_static_object+0x35/0x80 [ 287.485043][ C1] end_report+0x6f/0x140 [ 287.489271][ C1] kasan_report+0x128/0x150 [ 287.493763][ C1] ? timer_is_static_object+0x35/0x80 [ 287.499206][ C1] timer_is_static_object+0x35/0x80 [ 287.504387][ C1] debug_object_activate+0x141/0x580 [ 287.509660][ C1] __mod_timer+0xa4f/0xf30 [ 287.514068][ C1] call_timer_fn+0x192/0x5a0 [ 287.518642][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 287.524355][ C1] ? call_timer_fn+0xd4/0x5a0 [ 287.529015][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 287.534111][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.539297][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 287.544927][ C1] __run_timer_base+0x652/0x8b0 [ 287.549768][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 287.555138][ C1] ? clockevents_program_event+0x247/0x350 [ 287.560931][ C1] ? sched_clock_cpu+0x74/0x440 [ 287.565772][ C1] run_timer_softirq+0xb7/0x170 [ 287.570610][ C1] handle_softirqs+0x22a/0x7c0 [ 287.575362][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 287.580112][ C1] __irq_exit_rcu+0x5f/0x150 [ 287.584691][ C1] irq_exit_rcu+0x9/0x30 [ 287.588922][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 287.594545][ C1] [ 287.597460][ C1] [ 287.600372][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.606337][ C1] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 287.611957][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 287.631555][ C1] RSP: 0018:ffffc9001c1e74f0 EFLAGS: 00000246 [ 287.637622][ C1] RAX: ffffffff81fb9601 RBX: ffffffffffffffff RCX: ffffffff81fb969b [ 287.645679][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea0001b090b4 [ 287.653653][ C1] RBP: 0000000000000001 R08: ffffea0001b090b7 R09: 1ffffd4000361216 [ 287.661632][ C1] R10: dffffc0000000000 R11: fffff94000361216 R12: 0000000000000001 [ 287.669611][ C1] R13: dffffc0000000000 R14: fffff94000361217 R15: 1ffffd4000361216 [ 287.677581][ C1] ? folio_try_get+0x41/0x340 [ 287.682250][ C1] ? folio_try_get+0xdb/0x340 [ 287.686915][ C1] ? folio_try_get+0x1c/0x340 [ 287.691609][ C1] folio_try_get+0xdb/0x340 [ 287.696094][ C1] next_uptodate_folio+0xcb/0x5d0 [ 287.701118][ C1] filemap_map_pages+0x14fc/0x2000 [ 287.706220][ C1] ? filemap_map_pages+0x185/0x2000 [ 287.711423][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 287.716893][ C1] ? ___pte_offset_map+0x29/0x240 [ 287.721926][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 287.727389][ C1] ? do_pte_missing+0x11a9/0x3310 [ 287.732420][ C1] do_pte_missing+0x20b0/0x3310 [ 287.737282][ C1] ? handle_mm_fault+0xee/0x32a0 [ 287.742414][ C1] handle_mm_fault+0x1b8c/0x32a0 [ 287.747364][ C1] ? handle_mm_fault+0xee/0x32a0 [ 287.752657][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 287.757949][ C1] ? follow_page_pte+0x825/0x1460 [ 287.762971][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 287.768249][ C1] __get_user_pages+0x165b/0x29d0 [ 287.773268][ C1] populate_vma_page_range+0x2be/0x3c0 [ 287.778716][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 287.784873][ C1] ? down_read+0x272/0x2e0 [ 287.789302][ C1] ? __mm_populate+0x173/0x390 [ 287.794064][ C1] __mm_populate+0x25f/0x390 [ 287.798647][ C1] ? __pfx___mm_populate+0x10/0x10 [ 287.803758][ C1] vm_mmap_pgoff+0x3aa/0x4f0 [ 287.808338][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 287.813470][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 287.818307][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 287.823054][ C1] do_syscall_64+0xe2/0xf80 [ 287.827540][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.833681][ C1] ? trace_irq_disable+0x37/0x100 [ 287.838691][ C1] ? clear_bhb_loop+0x60/0xb0 [ 287.843352][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.849226][ C1] RIP: 0033:0x7fe4c119acb9 [ 287.853623][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.873211][ C1] RSP: 002b:00007fe4c1fd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 287.881619][ C1] RAX: ffffffffffffffda RBX: 00007fe4c1415fa0 RCX: 00007fe4c119acb9 [ 287.889573][ C1] RDX: 0000000000000005 RSI: 0000000000c00000 RDI: 0000200000001000 [ 287.897529][ C1] RBP: 00007fe4c1208bf7 R08: ffffffffffffffff R09: 0000000000000000 [ 287.905495][ C1] R10: 000000000003b071 R11: 0000000000000246 R12: 0000000000000000 [ 287.913580][ C1] R13: 00007fe4c1416038 R14: 00007fe4c1415fa0 R15: 00007fff5ff690c8 [ 287.921665][ C1] [ 287.924817][ C1] Kernel Offset: disabled [ 287.929122][ C1] Rebooting in 86400 seconds..