last executing test programs: 5.903882113s ago: executing program 1 (id=1227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000400)=[{r2, 0x201}], 0x1, 0x4) getsockopt(r3, 0x401, 0x80000000, &(0x7f00000000c0)=""/42, &(0x7f0000000100)=0x2a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x1, 0x1, [{0xe, 0x0, 0x5}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x9}, 0x28) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="38cf0000000000002800128008000100767469001c0002800800030006000095d5000600ffffffff080003000500000062fac5bd86af74a2383f07376e9b7f90405552952188d28c6b88b8fb337ad5aece38d8971756cb8225983f9003"], 0x48}, 0x1, 0x0, 0x0, 0x240500c0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) pipe(&(0x7f0000000080)) (async) poll(&(0x7f0000000400)=[{r2, 0x201}], 0x1, 0x4) (async) getsockopt(r3, 0x401, 0x80000000, &(0x7f00000000c0)=""/42, &(0x7f0000000100)=0x2a) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x1, 0x1, [{0xe, 0x0, 0x5}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x9}, 0x28) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="38cf0000000000002800128008000100767469001c0002800800030006000095d5000600ffffffff080003000500000062fac5bd86af74a2383f07376e9b7f90405552952188d28c6b88b8fb337ad5aece38d8971756cb8225983f9003"], 0x48}, 0x1, 0x0, 0x0, 0x240500c0}, 0x20000000) (async) 5.800871271s ago: executing program 0 (id=1228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711082000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0xc}, 0x94) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@cgroup, 0xffffffffffffffff, 0x2e, 0x3}, 0x20) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x9}, 0x4d) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 5.741325384s ago: executing program 1 (id=1230): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="0f539af21094aaaaaaaaaabb86dd601200b000383a0000000000000000000000000000000000ff02000000000000000000000000000104039078000000006000000000002c00fc0100000000000000000000000000002001000000000000"], 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b32, &(0x7f0000000080)="95e1230b572728c7a0cdb2f372c2c50341d2da52e23851518e7ddce9336444b3ca94d5c0e3bf52a164ada56f2f55a692eb86f03e0ce5bb8f1d1b83000000010000000092edf2") r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x80000000, 0x0, 0x3, 0xa, 0x5, 0x9}, 0x20) 5.552949087s ago: executing program 3 (id=1232): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000013c0)="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", 0x145}], 0x2, &(0x7f0000001540)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r2, @private=0xa010101, @empty}}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x57, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) socketpair(0x8, 0x1, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r5, 0x89fd, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001140)={r4}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080025bd7000fbdbdf25140000000500190001000400080005000a0000000800160008000000080004000000000008000900ae000000080005000100000008000a00050000000800160008000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000200001302000000010000000000000000270d000000fdffffff0000000000000000002e00"], 0x0, 0x3f}, 0x20) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000500"}}}]}, 0x48}}, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r10, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r12, &(0x7f0000000280)="89cf3111c321c8533556d0809ee3277e71", &(0x7f00000002c0)=""/157, 0x4}, 0x20) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) 5.41156506s ago: executing program 3 (id=1234): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4000000}, 0x1c) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000008e809000000ff0000f03ac7308b330000ffffffffffffffffffe70000000016000200000000000000", 0x58}], 0x1) 5.269359865s ago: executing program 3 (id=1236): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="040100001c0007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0], 0x104}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x800, 0x40, 0x3}) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000003080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.18790427s ago: executing program 1 (id=1237): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket(0x1e, 0x4, 0x0) unshare(0x8000400) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 5.12932262s ago: executing program 1 (id=1238): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28) 4.779437803s ago: executing program 0 (id=1240): unshare(0x22020400) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="e8da0b70de94907ea28b5cdc8243fb3fec642d3711198d0d84213f66b570d96ff4aebb8727c68030d8d35b13ba3de50c9ef4d7f27adec635ffe292", 0x3b}], 0x20, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x4000) unshare(0x26060300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0x2}, 0x18) 4.63716723s ago: executing program 0 (id=1243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000009969b54000008000300", @ANYRES32, @ANYBLOB="080026006c090000050019010900000005001801360000000800270000000000"], 0x3c}}, 0x40) 4.42733707s ago: executing program 0 (id=1245): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 4.238956149s ago: executing program 0 (id=1246): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1403, 0x100, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48011}, 0x8800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}]}, 0x1c}], 0x1}, 0x300) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000021401"], 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x20000000) socket$nl_crypto(0x10, 0x3, 0x15) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(0x4) write$cgroup_int(r4, &(0x7f0000000100)=0x3, 0x12) 4.199515282s ago: executing program 3 (id=1247): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x28) 1.982211096s ago: executing program 4 (id=1256): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 1.783294934s ago: executing program 4 (id=1257): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="040100001c0007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0], 0x104}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x800, 0x40, 0x3}) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000003080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.405221681s ago: executing program 1 (id=1258): syz_emit_ethernet(0x10f, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xd9, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0x7, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x5, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a3"}, {0x3}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {}, {0x0, 0x2, "d5170000dce9674a36da018dff16e70b8b"}]}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2023, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8000800) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000003c0)=0x1, 0x4) r9 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000002b00)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x7, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x0, 0x38dc5865}}) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @local, @multicast, @dev={0xac, 0x14, 0x14, 0x17}}}}}, &(0x7f00000001c0)={0x0, 0x3, [0xbe7, 0x97a, 0x310, 0x9e5]}) 1.236907669s ago: executing program 2 (id=1259): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1e, 0x4, 0x0) unshare(0x8000400) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 1.153116328s ago: executing program 2 (id=1260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2501000000000000000009000000040003800400018050000380060007004e22000008000300040000001400020077673000000000000000000000000000080001000000000008"], 0x6c}}, 0x0) (fail_nth: 5) 679.325626ms ago: executing program 2 (id=1261): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a556a3bec507b7d826f"], 0x38}}, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'bond0\x00', 0x8}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100000000001400048005000300070000000500030001000000080002"], 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r11) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, r12, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40111}, 0x20000004) (async) r13 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @struct={0xb, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x4c}, 0x28) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e80)=ANY=[], 0x18c0}, 0x1, 0x0, 0x0, 0x10000015}, 0x0) openat$cgroup_ro(r6, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x80040, 0x408) 603.096994ms ago: executing program 2 (id=1262): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x81ff}, 0xe) 556.998946ms ago: executing program 4 (id=1263): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c133264c8569fe0d86c2f6a2bf9138aa5b4cfca2440ab2739cb20200ca00117ceee63786dee5608c4b6ce06f0523fe0287ef05665be6ee584eca2926e3d0880547ce686155080000001830b5a064aa8c8b24af5c9a6f808f8132c56c9aad821a372e9d000000"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1803000000000020000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffb0b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9a000000000000b70200"], &(0x7f0000000000)='GPL\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000)=0xffffff80, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x2, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f", 0x23) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000380)={@initdev, 0x0}, &(0x7f0000000400)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000440)={@mcast1, 0x0}, &(0x7f0000000480)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x9c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 470.449922ms ago: executing program 1 (id=1264): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000008021100000108021100000008021100000020000100000001100128828450"], 0x28) 400.051316ms ago: executing program 2 (id=1265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0xffa6, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) 305.093886ms ago: executing program 3 (id=1266): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000009969b54000008000300", @ANYRES32=r0, @ANYBLOB="080026006c090000050019010900000005001801360000000800270000000000"], 0x3c}}, 0x40) 242.625648ms ago: executing program 4 (id=1267): socket$inet6_udplite(0xa, 0x2, 0x88) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, 0x0, 0x1, 0x20, 0x6, @local}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'veth1_macvtap\x00', {}, 0xc00}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 88.608428ms ago: executing program 3 (id=1268): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xfffffffffffffda4, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x400}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x421, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11400}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2b8, 0x258, 0x258, 0x2b8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0x0, 0xff], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11, 0x0, 0x0, 0x77}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x3e8) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @rand_addr=0x64010102}, 0x10) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 87.826366ms ago: executing program 2 (id=1269): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001180), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000828a2007fdf"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000014c0)=@newqdisc={0x70, 0x24, 0xc07, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x40, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x2a}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6d}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x51}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffca}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}]}, 0x70}}, 0x4008810) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x80, 0x0, 0x0) accept$unix(r4, &(0x7f0000001340), &(0x7f00000013c0)=0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001240)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e80)="cc", 0x1}], 0x1}}], 0x2, 0x0) 86.966823ms ago: executing program 4 (id=1270): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1e, 0x4, 0x0) unshare(0x8000400) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 65.625999ms ago: executing program 0 (id=1271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) pipe(&(0x7f0000000000)) 0s ago: executing program 4 (id=1272): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (fail_nth: 9) kernel console output (not intermixed with test programs): 009][ T8853] ? __nla_parse+0x40/0x60 [ 221.032037][ T8853] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 221.032087][ T8853] genl_family_rcv_msg_doit+0x212/0x300 [ 221.032120][ T8853] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 221.032169][ T8853] ? bpf_lsm_capable+0x9/0x20 [ 221.032192][ T8853] ? security_capable+0x7e/0x2e0 [ 221.032227][ T8853] genl_rcv_msg+0x60e/0x790 [ 221.032254][ T8853] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.032272][ T8853] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.032315][ T8853] netlink_rcv_skb+0x205/0x470 [ 221.032343][ T8853] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.032364][ T8853] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.032409][ T8853] ? down_read+0x1ad/0x2e0 [ 221.032439][ T8853] genl_rcv+0x28/0x40 [ 221.032456][ T8853] netlink_unicast+0x758/0x8d0 [ 221.032491][ T8853] netlink_sendmsg+0x805/0xb30 [ 221.032528][ T8853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.032559][ T8853] ? aa_sock_msg_perm+0x94/0x160 [ 221.032591][ T8853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.032608][ T8853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.032636][ T8853] __sock_sendmsg+0x219/0x270 [ 221.032662][ T8853] ____sys_sendmsg+0x505/0x830 [ 221.032699][ T8853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.032740][ T8853] ? import_iovec+0x74/0xa0 [ 221.032768][ T8853] ___sys_sendmsg+0x21f/0x2a0 [ 221.032801][ T8853] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.032871][ T8853] ? __fget_files+0x2a/0x420 [ 221.032896][ T8853] ? __fget_files+0x3a0/0x420 [ 221.032935][ T8853] __x64_sys_sendmsg+0x19b/0x260 [ 221.032957][ T8853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.032999][ T8853] ? rcu_is_watching+0x15/0xb0 [ 221.033028][ T8853] ? do_syscall_64+0xbe/0x3b0 [ 221.033064][ T8853] do_syscall_64+0xfa/0x3b0 [ 221.033089][ T8853] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.033113][ T8853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.033133][ T8853] ? clear_bhb_loop+0x60/0xb0 [ 221.033158][ T8853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.033177][ T8853] RIP: 0033:0x7fba3798e929 [ 221.033194][ T8853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.033211][ T8853] RSP: 002b:00007fba387c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.033231][ T8853] RAX: ffffffffffffffda RBX: 00007fba37bb5fa0 RCX: 00007fba3798e929 [ 221.033246][ T8853] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 221.033258][ T8853] RBP: 00007fba37a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 221.033270][ T8853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.033282][ T8853] R13: 0000000000000000 R14: 00007fba37bb5fa0 R15: 00007ffdfcf96218 [ 221.033312][ T8853] [ 221.482072][ T8851] CPU: 0 UID: 0 PID: 8851 Comm: syz.1.797 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 221.482102][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.482115][ T8851] Call Trace: [ 221.482123][ T8851] [ 221.482131][ T8851] dump_stack_lvl+0x189/0x250 [ 221.482168][ T8851] ? __pfx____ratelimit+0x10/0x10 [ 221.482192][ T8851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.482215][ T8851] ? __pfx__printk+0x10/0x10 [ 221.482246][ T8851] ? __pfx___might_resched+0x10/0x10 [ 221.482267][ T8851] ? fs_reclaim_acquire+0x7d/0x100 [ 221.482299][ T8851] should_fail_ex+0x414/0x560 [ 221.482331][ T8851] should_failslab+0xa8/0x100 [ 221.482357][ T8851] __kmalloc_noprof+0xcb/0x4f0 [ 221.482379][ T8851] ? kfree+0x4d/0x440 [ 221.482396][ T8851] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 221.482421][ T8851] tomoyo_realpath_from_path+0xe3/0x5d0 [ 221.482442][ T8851] ? tomoyo_domain+0xd9/0x130 [ 221.482466][ T8851] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 221.482492][ T8851] tomoyo_path_number_perm+0x1e8/0x5a0 [ 221.482521][ T8851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.482564][ T8851] ? __lock_acquire+0xab9/0xd20 [ 221.482603][ T8851] ? __fget_files+0x2a/0x420 [ 221.482631][ T8851] ? __fget_files+0x2a/0x420 [ 221.482655][ T8851] ? __fget_files+0x3a0/0x420 [ 221.482678][ T8851] ? __fget_files+0x2a/0x420 [ 221.482708][ T8851] security_file_ioctl+0xcb/0x2d0 [ 221.482734][ T8851] __se_sys_ioctl+0x47/0x170 [ 221.482757][ T8851] do_syscall_64+0xfa/0x3b0 [ 221.482781][ T8851] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.482803][ T8851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.482821][ T8851] ? clear_bhb_loop+0x60/0xb0 [ 221.482844][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.482861][ T8851] RIP: 0033:0x7f01dbd8e929 [ 221.482878][ T8851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.482894][ T8851] RSP: 002b:00007f01d9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.482913][ T8851] RAX: ffffffffffffffda RBX: 00007f01dbfb5fa0 RCX: 00007f01dbd8e929 [ 221.482927][ T8851] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000004 [ 221.482939][ T8851] RBP: 00007f01d9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.482951][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.482962][ T8851] R13: 0000000000000000 R14: 00007f01dbfb5fa0 R15: 00007ffc9f36a418 [ 221.482991][ T8851] [ 221.482999][ T8851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.917499][ T8864] FAULT_INJECTION: forcing a failure. [ 221.917499][ T8864] name failslab, interval 1, probability 0, space 0, times 0 [ 221.930404][ T8864] CPU: 0 UID: 0 PID: 8864 Comm: syz.0.802 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 221.930429][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.930442][ T8864] Call Trace: [ 221.930449][ T8864] [ 221.930457][ T8864] dump_stack_lvl+0x189/0x250 [ 221.930484][ T8864] ? __pfx____ratelimit+0x10/0x10 [ 221.930509][ T8864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.930531][ T8864] ? __pfx__printk+0x10/0x10 [ 221.930563][ T8864] ? __pfx___might_resched+0x10/0x10 [ 221.930590][ T8864] should_fail_ex+0x414/0x560 [ 221.930623][ T8864] should_failslab+0xa8/0x100 [ 221.930649][ T8864] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 221.930673][ T8864] ? __alloc_skb+0x112/0x2d0 [ 221.930704][ T8864] __alloc_skb+0x112/0x2d0 [ 221.930733][ T8864] netlink_dump+0x22b/0xe20 [ 221.930770][ T8864] ? __pfx_netlink_dump+0x10/0x10 [ 221.930809][ T8864] ? kmem_cache_free+0x18f/0x400 [ 221.930837][ T8864] netlink_recvmsg+0x676/0xa30 [ 221.930872][ T8864] ? __pfx_netlink_recvmsg+0x10/0x10 [ 221.930907][ T8864] ? __lock_acquire+0xab9/0xd20 [ 221.930928][ T8864] ? aa_sock_msg_perm+0x94/0x160 [ 221.930988][ T8864] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 221.931008][ T8864] ? security_socket_recvmsg+0x7e/0x2e0 [ 221.931036][ T8864] ? __pfx_netlink_recvmsg+0x10/0x10 [ 221.931068][ T8864] sock_recvmsg+0x229/0x270 [ 221.931107][ T8864] ____sys_recvmsg+0x1c9/0x460 [ 221.931140][ T8864] ? __pfx_____sys_recvmsg+0x10/0x10 [ 221.931179][ T8864] ? import_iovec+0x74/0xa0 [ 221.931209][ T8864] ___sys_recvmsg+0x1b5/0x510 [ 221.931238][ T8864] ? __pfx____sys_recvmsg+0x10/0x10 [ 221.931287][ T8864] ? __fget_files+0x3a0/0x420 [ 221.931330][ T8864] do_recvmmsg+0x307/0x770 [ 221.931361][ T8864] ? __pfx_do_recvmmsg+0x10/0x10 [ 221.931397][ T8864] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.931448][ T8864] __x64_sys_recvmmsg+0x190/0x240 [ 221.931474][ T8864] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 221.931492][ T8864] ? rcu_is_watching+0x15/0xb0 [ 221.931523][ T8864] ? do_syscall_64+0xbe/0x3b0 [ 221.931555][ T8864] do_syscall_64+0xfa/0x3b0 [ 221.931581][ T8864] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.931606][ T8864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.931628][ T8864] ? clear_bhb_loop+0x60/0xb0 [ 221.931655][ T8864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.931677][ T8864] RIP: 0033:0x7f441f38e929 [ 221.931697][ T8864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.931715][ T8864] RSP: 002b:00007f44201ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 221.931737][ T8864] RAX: ffffffffffffffda RBX: 00007f441f5b5fa0 RCX: 00007f441f38e929 [ 221.931753][ T8864] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 221.931767][ T8864] RBP: 00007f44201ff090 R08: 0000000000000000 R09: 0000000000000000 [ 221.931781][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.931794][ T8864] R13: 0000000000000000 R14: 00007f441f5b5fa0 R15: 00007fff20e956b8 [ 221.931829][ T8864] [ 222.322219][ T8872] netlink: 5 bytes leftover after parsing attributes in process `syz.1.803'. [ 222.402463][ T8875] netlink: 10 bytes leftover after parsing attributes in process `syz.0.808'. [ 222.447802][ T8873] netlink: 'syz.2.807': attribute type 13 has an invalid length. [ 222.456208][ T8873] netlink: 'syz.2.807': attribute type 17 has an invalid length. [ 222.471299][ T8873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.542988][ T8873] lo speed is unknown, defaulting to 1000 [ 222.574946][ T8881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.582779][ T8882] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 222.688629][ T8881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.740340][ T8888] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 222.898223][ T8889] lo speed is unknown, defaulting to 1000 [ 223.025689][ T8895] netlink: 'syz.1.815': attribute type 2 has an invalid length. [ 223.072829][ T8871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.404004][ T8908] FAULT_INJECTION: forcing a failure. [ 223.404004][ T8908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.417162][ T8908] CPU: 0 UID: 0 PID: 8908 Comm: syz.1.821 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 223.417190][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.417202][ T8908] Call Trace: [ 223.417210][ T8908] [ 223.417219][ T8908] dump_stack_lvl+0x189/0x250 [ 223.417248][ T8908] ? __pfx____ratelimit+0x10/0x10 [ 223.417274][ T8908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.417308][ T8908] ? __pfx__printk+0x10/0x10 [ 223.417334][ T8908] ? __might_fault+0xb0/0x130 [ 223.417368][ T8908] should_fail_ex+0x414/0x560 [ 223.417401][ T8908] _copy_from_iter+0x1db/0x16f0 [ 223.417425][ T8908] ? rcu_is_watching+0x15/0xb0 [ 223.417448][ T8908] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 223.417474][ T8908] ? __pfx__copy_from_iter+0x10/0x10 [ 223.417495][ T8908] ? __build_skb_around+0x257/0x3e0 [ 223.417525][ T8908] ? netlink_sendmsg+0x642/0xb30 [ 223.417549][ T8908] ? skb_put+0x11b/0x210 [ 223.417579][ T8908] netlink_sendmsg+0x6b2/0xb30 [ 223.417613][ T8908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.417641][ T8908] ? aa_sock_msg_perm+0x94/0x160 [ 223.417672][ T8908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.417689][ T8908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.417714][ T8908] __sock_sendmsg+0x219/0x270 [ 223.417739][ T8908] ____sys_sendmsg+0x505/0x830 [ 223.417773][ T8908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.417811][ T8908] ? import_iovec+0x74/0xa0 [ 223.417837][ T8908] ___sys_sendmsg+0x21f/0x2a0 [ 223.417876][ T8908] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.417939][ T8908] ? __fget_files+0x2a/0x420 [ 223.417964][ T8908] ? __fget_files+0x3a0/0x420 [ 223.418000][ T8908] __x64_sys_sendmsg+0x19b/0x260 [ 223.418020][ T8908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.418058][ T8908] ? __pfx_ksys_write+0x10/0x10 [ 223.418078][ T8908] ? rcu_is_watching+0x15/0xb0 [ 223.418105][ T8908] ? do_syscall_64+0xbe/0x3b0 [ 223.418133][ T8908] do_syscall_64+0xfa/0x3b0 [ 223.418158][ T8908] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.418181][ T8908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.418199][ T8908] ? clear_bhb_loop+0x60/0xb0 [ 223.418222][ T8908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.418240][ T8908] RIP: 0033:0x7f01dbd8e929 [ 223.418256][ T8908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.418272][ T8908] RSP: 002b:00007f01d9bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.418292][ T8908] RAX: ffffffffffffffda RBX: 00007f01dbfb5fa0 RCX: 00007f01dbd8e929 [ 223.418306][ T8908] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 223.418318][ T8908] RBP: 00007f01d9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.418329][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.418340][ T8908] R13: 0000000000000000 R14: 00007f01dbfb5fa0 R15: 00007ffc9f36a418 [ 223.418369][ T8908] [ 223.729535][ T8906] netlink: zone id is out of range [ 223.734802][ T8906] netlink: zone id is out of range [ 223.744320][ T8906] netlink: zone id is out of range [ 223.749450][ T8906] netlink: zone id is out of range [ 223.768232][ T8906] netlink: zone id is out of range [ 223.777485][ T8906] netlink: zone id is out of range [ 223.786011][ T8906] netlink: zone id is out of range [ 223.791339][ T8906] netlink: get zone limit has 8 unknown bytes [ 223.822605][ T8915] __nla_validate_parse: 5 callbacks suppressed [ 223.822621][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 224.115286][ T8927] netlink: 'syz.4.826': attribute type 10 has an invalid length. [ 224.123419][ T8927] batman_adv: batadv0: Interface deactivated: dummy0 [ 224.133568][ T8927] batman_adv: batadv0: Removing interface: dummy0 [ 224.176473][ T8927] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 224.229184][ T8935] netlink: 240 bytes leftover after parsing attributes in process `syz.1.829'. [ 224.286995][ T8937] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 224.298760][ T8937] netlink: 208 bytes leftover after parsing attributes in process `syz.0.828'. [ 224.399302][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 225.179145][ T8978] netlink: 'syz.0.843': attribute type 7 has an invalid length. [ 225.193238][ T8978] netlink: 'syz.0.843': attribute type 8 has an invalid length. [ 225.211596][ T8978] netlink: 'syz.0.843': attribute type 15 has an invalid length. [ 225.226395][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'. [ 225.324846][ T8982] netlink: 72 bytes leftover after parsing attributes in process `syz.0.845'. [ 225.333890][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880357ff800: rx timeout, send abort [ 225.349961][ T8984] FAULT_INJECTION: forcing a failure. [ 225.349961][ T8984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.357890][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.845'. [ 225.381273][ T8984] CPU: 1 UID: 0 PID: 8984 Comm: syz.1.846 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 225.381303][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.381317][ T8984] Call Trace: [ 225.381326][ T8984] [ 225.381335][ T8984] dump_stack_lvl+0x189/0x250 [ 225.381368][ T8984] ? __pfx____ratelimit+0x10/0x10 [ 225.381397][ T8984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.381424][ T8984] ? __pfx__printk+0x10/0x10 [ 225.381455][ T8984] ? __might_fault+0xb0/0x130 [ 225.381496][ T8984] should_fail_ex+0x414/0x560 [ 225.381534][ T8984] _copy_from_user+0x2d/0xb0 [ 225.381562][ T8984] inet6_ioctl+0x180/0x280 [ 225.381590][ T8984] ? __pfx_inet6_ioctl+0x10/0x10 [ 225.381613][ T8984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 225.381651][ T8984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 225.381704][ T8984] sock_do_ioctl+0xd9/0x300 [ 225.381733][ T8984] ? __pfx_sock_do_ioctl+0x10/0x10 [ 225.381756][ T8984] ? __lock_acquire+0xab9/0xd20 [ 225.381798][ T8984] sock_ioctl+0x576/0x790 [ 225.381824][ T8984] ? __pfx_sock_ioctl+0x10/0x10 [ 225.381849][ T8984] ? __fget_files+0x2a/0x420 [ 225.381878][ T8984] ? __fget_files+0x3a0/0x420 [ 225.381907][ T8984] ? __fget_files+0x2a/0x420 [ 225.381941][ T8984] ? bpf_lsm_file_ioctl+0x9/0x20 [ 225.381965][ T8984] ? __pfx_sock_ioctl+0x10/0x10 [ 225.381989][ T8984] __se_sys_ioctl+0xf9/0x170 [ 225.382016][ T8984] do_syscall_64+0xfa/0x3b0 [ 225.382044][ T8984] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.382083][ T8984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.382113][ T8984] ? clear_bhb_loop+0x60/0xb0 [ 225.382138][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.382157][ T8984] RIP: 0033:0x7f01dbd8e929 [ 225.382175][ T8984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.382201][ T8984] RSP: 002b:00007f01d9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.382222][ T8984] RAX: ffffffffffffffda RBX: 00007f01dbfb5fa0 RCX: 00007f01dbd8e929 [ 225.382235][ T8984] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 225.382248][ T8984] RBP: 00007f01d9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.382260][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.382271][ T8984] R13: 0000000000000000 R14: 00007f01dbfb5fa0 R15: 00007ffc9f36a418 [ 225.382300][ T8984] [ 225.724363][ T8993] FAULT_INJECTION: forcing a failure. [ 225.724363][ T8993] name failslab, interval 1, probability 0, space 0, times 0 [ 225.739961][ T8993] CPU: 1 UID: 0 PID: 8993 Comm: syz.3.850 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 225.739985][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.739997][ T8993] Call Trace: [ 225.740005][ T8993] [ 225.740012][ T8993] dump_stack_lvl+0x189/0x250 [ 225.740038][ T8993] ? __pfx____ratelimit+0x10/0x10 [ 225.740061][ T8993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.740083][ T8993] ? __pfx__printk+0x10/0x10 [ 225.740114][ T8993] ? __pfx___might_resched+0x10/0x10 [ 225.740141][ T8993] should_fail_ex+0x414/0x560 [ 225.740174][ T8993] should_failslab+0xa8/0x100 [ 225.740202][ T8993] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 225.740227][ T8993] ? __alloc_skb+0x112/0x2d0 [ 225.740258][ T8993] __alloc_skb+0x112/0x2d0 [ 225.740288][ T8993] netlink_dump+0x22b/0xe20 [ 225.740325][ T8993] ? __pfx_netlink_dump+0x10/0x10 [ 225.740362][ T8993] ? genl_start+0x499/0x6c0 [ 225.740388][ T8993] __netlink_dump_start+0x5cb/0x7e0 [ 225.740421][ T8993] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 225.740444][ T8993] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 225.740470][ T8993] ? rcu_is_watching+0x15/0xb0 [ 225.740492][ T8993] ? __pfx_genl_start+0x10/0x10 [ 225.740507][ T8993] ? __pfx_genl_dumpit+0x10/0x10 [ 225.740523][ T8993] ? __pfx_genl_done+0x10/0x10 [ 225.740546][ T8993] ? bpf_lsm_capable+0x9/0x20 [ 225.740568][ T8993] ? security_capable+0x7e/0x2e0 [ 225.740603][ T8993] genl_rcv_msg+0x5da/0x790 [ 225.740628][ T8993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.740647][ T8993] ? __pfx_batadv_dat_cache_dump+0x10/0x10 [ 225.740681][ T8993] netlink_rcv_skb+0x205/0x470 [ 225.740707][ T8993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.740727][ T8993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.740770][ T8993] ? down_read+0x1ad/0x2e0 [ 225.740800][ T8993] genl_rcv+0x28/0x40 [ 225.740816][ T8993] netlink_unicast+0x758/0x8d0 [ 225.740849][ T8993] netlink_sendmsg+0x805/0xb30 [ 225.740884][ T8993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.740923][ T8993] ? aa_sock_msg_perm+0x94/0x160 [ 225.740979][ T8993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.740999][ T8993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.741030][ T8993] __sock_sendmsg+0x219/0x270 [ 225.741061][ T8993] ____sys_sendmsg+0x505/0x830 [ 225.741102][ T8993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.741147][ T8993] ? import_iovec+0x74/0xa0 [ 225.741177][ T8993] ___sys_sendmsg+0x21f/0x2a0 [ 225.741215][ T8993] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.741293][ T8993] ? __fget_files+0x2a/0x420 [ 225.741323][ T8993] ? __fget_files+0x3a0/0x420 [ 225.741366][ T8993] __x64_sys_sendmsg+0x19b/0x260 [ 225.741391][ T8993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.741437][ T8993] ? __pfx_ksys_write+0x10/0x10 [ 225.741460][ T8993] ? rcu_is_watching+0x15/0xb0 [ 225.741492][ T8993] ? do_syscall_64+0xbe/0x3b0 [ 225.741526][ T8993] do_syscall_64+0xfa/0x3b0 [ 225.741554][ T8993] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.741581][ T8993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.741604][ T8993] ? clear_bhb_loop+0x60/0xb0 [ 225.741631][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.741653][ T8993] RIP: 0033:0x7f8e5818e929 [ 225.741672][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.741691][ T8993] RSP: 002b:00007f8e58fec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.741714][ T8993] RAX: ffffffffffffffda RBX: 00007f8e583b5fa0 RCX: 00007f8e5818e929 [ 225.741731][ T8993] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 225.741745][ T8993] RBP: 00007f8e58fec090 R08: 0000000000000000 R09: 0000000000000000 [ 225.741758][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.741771][ T8993] R13: 0000000000000000 R14: 00007f8e583b5fa0 R15: 00007fff920e1bb8 [ 225.741806][ T8993] [ 225.833941][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880357ff800: abort rx timeout. Force session deactivation [ 225.969006][ T8991] netlink: 'syz.0.849': attribute type 13 has an invalid length. [ 226.074783][ T8990] lo speed is unknown, defaulting to 1000 [ 226.174359][ T8991] netlink: 'syz.0.849': attribute type 17 has an invalid length. [ 226.219654][ T9003] netlink: 136 bytes leftover after parsing attributes in process `syz.3.852'. [ 226.253229][ T9006] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 226.258045][ T9003] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 226.265204][ T9006] netlink: 208 bytes leftover after parsing attributes in process `syz.2.853'. [ 226.338112][ T9004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.360552][ T8991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.411959][ T9004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.505808][ T8991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.775650][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 226.789029][ T8994] lo speed is unknown, defaulting to 1000 [ 227.351997][ T9035] batadv_slave_1: entered promiscuous mode [ 227.899897][ T9047] FAULT_INJECTION: forcing a failure. [ 227.899897][ T9047] name failslab, interval 1, probability 0, space 0, times 0 [ 227.932149][ T9047] CPU: 0 UID: 0 PID: 9047 Comm: syz.1.865 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 227.932189][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.932212][ T9047] Call Trace: [ 227.932219][ T9047] [ 227.932227][ T9047] dump_stack_lvl+0x189/0x250 [ 227.932254][ T9047] ? __pfx____ratelimit+0x10/0x10 [ 227.932278][ T9047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.932301][ T9047] ? __pfx__printk+0x10/0x10 [ 227.932328][ T9047] ? __pfx___might_resched+0x10/0x10 [ 227.932351][ T9047] ? fs_reclaim_acquire+0x7d/0x100 [ 227.932383][ T9047] should_fail_ex+0x414/0x560 [ 227.932415][ T9047] should_failslab+0xa8/0x100 [ 227.932442][ T9047] __kmalloc_noprof+0xcb/0x4f0 [ 227.932465][ T9047] ? tomoyo_encode+0x28b/0x550 [ 227.932488][ T9047] tomoyo_encode+0x28b/0x550 [ 227.932512][ T9047] tomoyo_realpath_from_path+0x58d/0x5d0 [ 227.932534][ T9047] ? tomoyo_domain+0xd9/0x130 [ 227.932559][ T9047] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 227.932585][ T9047] tomoyo_path_number_perm+0x1e8/0x5a0 [ 227.932614][ T9047] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 227.932658][ T9047] ? __lock_acquire+0xab9/0xd20 [ 227.932697][ T9047] ? __fget_files+0x2a/0x420 [ 227.932726][ T9047] ? __fget_files+0x2a/0x420 [ 227.932756][ T9047] ? __fget_files+0x3a0/0x420 [ 227.932780][ T9047] ? __fget_files+0x2a/0x420 [ 227.932810][ T9047] security_file_ioctl+0xcb/0x2d0 [ 227.932837][ T9047] __se_sys_ioctl+0x47/0x170 [ 227.932861][ T9047] do_syscall_64+0xfa/0x3b0 [ 227.932884][ T9047] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.932907][ T9047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.932926][ T9047] ? clear_bhb_loop+0x60/0xb0 [ 227.932948][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.932966][ T9047] RIP: 0033:0x7f01dbd8e929 [ 227.932982][ T9047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.932998][ T9047] RSP: 002b:00007f01d9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.933018][ T9047] RAX: ffffffffffffffda RBX: 00007f01dbfb5fa0 RCX: 00007f01dbd8e929 [ 227.933032][ T9047] RDX: 0000200000000100 RSI: 0000000000008982 RDI: 0000000000000003 [ 227.933044][ T9047] RBP: 00007f01d9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.933056][ T9047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.933067][ T9047] R13: 0000000000000000 R14: 00007f01dbfb5fa0 R15: 00007ffc9f36a418 [ 227.933100][ T9047] [ 227.934074][ T9047] ERROR: Out of memory at tomoyo_realpath_from_path. [ 228.207968][ T9029] batadv_slave_1: left promiscuous mode [ 228.415251][ T9060] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 228.562126][ T9068] FAULT_INJECTION: forcing a failure. [ 228.562126][ T9068] name failslab, interval 1, probability 0, space 0, times 0 [ 228.587492][ T9068] CPU: 1 UID: 0 PID: 9068 Comm: syz.0.874 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 228.587517][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.587529][ T9068] Call Trace: [ 228.587537][ T9068] [ 228.587545][ T9068] dump_stack_lvl+0x189/0x250 [ 228.587572][ T9068] ? __pfx____ratelimit+0x10/0x10 [ 228.587597][ T9068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.587619][ T9068] ? __pfx__printk+0x10/0x10 [ 228.587647][ T9068] ? __pfx___might_resched+0x10/0x10 [ 228.587669][ T9068] ? fs_reclaim_acquire+0x7d/0x100 [ 228.587701][ T9068] should_fail_ex+0x414/0x560 [ 228.587734][ T9068] should_failslab+0xa8/0x100 [ 228.587760][ T9068] __kmalloc_noprof+0xcb/0x4f0 [ 228.587783][ T9068] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 228.587809][ T9068] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 228.587837][ T9068] genl_family_rcv_msg_doit+0xb8/0x300 [ 228.587863][ T9068] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 228.587884][ T9068] ? __pfx___mutex_lock+0x10/0x10 [ 228.587909][ T9068] ? __pfx_genl_get_cmd+0x10/0x10 [ 228.587926][ T9068] ? __pfx_nl802154_get_wpan_phy+0x10/0x10 [ 228.587948][ T9068] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 228.587970][ T9068] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 228.588007][ T9068] genl_rcv_msg+0x60e/0x790 [ 228.588032][ T9068] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.588048][ T9068] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 228.588068][ T9068] ? __pfx_nl802154_get_wpan_phy+0x10/0x10 [ 228.588088][ T9068] ? __pfx_nl802154_post_doit+0x10/0x10 [ 228.588125][ T9068] netlink_rcv_skb+0x205/0x470 [ 228.588152][ T9068] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.588171][ T9068] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.588213][ T9068] ? down_read+0x1ad/0x2e0 [ 228.588241][ T9068] genl_rcv+0x28/0x40 [ 228.588257][ T9068] netlink_unicast+0x758/0x8d0 [ 228.588289][ T9068] netlink_sendmsg+0x805/0xb30 [ 228.588324][ T9068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.588352][ T9068] ? aa_sock_msg_perm+0x94/0x160 [ 228.588383][ T9068] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.588400][ T9068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.588435][ T9068] __sock_sendmsg+0x219/0x270 [ 228.588461][ T9068] ____sys_sendmsg+0x505/0x830 [ 228.588496][ T9068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.588535][ T9068] ? import_iovec+0x74/0xa0 [ 228.588561][ T9068] ___sys_sendmsg+0x21f/0x2a0 [ 228.588591][ T9068] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.588656][ T9068] ? __fget_files+0x2a/0x420 [ 228.588682][ T9068] ? __fget_files+0x3a0/0x420 [ 228.588719][ T9068] __x64_sys_sendmsg+0x19b/0x260 [ 228.588739][ T9068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.588778][ T9068] ? __pfx_ksys_write+0x10/0x10 [ 228.588798][ T9068] ? rcu_is_watching+0x15/0xb0 [ 228.588825][ T9068] ? do_syscall_64+0xbe/0x3b0 [ 228.588854][ T9068] do_syscall_64+0xfa/0x3b0 [ 228.588877][ T9068] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.588900][ T9068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.588918][ T9068] ? clear_bhb_loop+0x60/0xb0 [ 228.588941][ T9068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.588959][ T9068] RIP: 0033:0x7f441f38e929 [ 228.588976][ T9068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.588993][ T9068] RSP: 002b:00007f44201ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.589012][ T9068] RAX: ffffffffffffffda RBX: 00007f441f5b5fa0 RCX: 00007f441f38e929 [ 228.589025][ T9068] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000004 [ 228.589037][ T9068] RBP: 00007f44201ff090 R08: 0000000000000000 R09: 0000000000000000 [ 228.589048][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.589058][ T9068] R13: 0000000000000000 R14: 00007f441f5b5fa0 R15: 00007fff20e956b8 [ 228.589086][ T9068] [ 228.975161][ T9077] __nla_validate_parse: 6 callbacks suppressed [ 228.975177][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 229.398295][ T9090] netlink: 'syz.2.882': attribute type 13 has an invalid length. [ 229.429904][ T9090] netlink: 'syz.2.882': attribute type 17 has an invalid length. [ 229.503270][ T9090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.573283][ T9104] netlink: 'syz.3.888': attribute type 13 has an invalid length. [ 229.598087][ T9102] lo speed is unknown, defaulting to 1000 [ 229.720232][ T9104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.756518][ T9113] tipc: Enabled bearer , priority 0 [ 229.771709][ T9105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.863262][ T9120] syzkaller0: entered promiscuous mode [ 229.869096][ T9120] syzkaller0: entered allmulticast mode [ 229.869573][ T9090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.994204][ T9105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.030675][ T9125] netlink: 208 bytes leftover after parsing attributes in process `syz.4.893'. [ 230.334168][ T9103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.506069][ T9129] set match dimension is over the limit! [ 230.593843][ T9131] validate_nla: 2 callbacks suppressed [ 230.593860][ T9131] netlink: 'syz.1.896': attribute type 13 has an invalid length. [ 230.607557][ T9131] netlink: 'syz.1.896': attribute type 17 has an invalid length. [ 231.213258][ T9114] lo speed is unknown, defaulting to 1000 [ 231.237591][ T9131] tipc: Resetting bearer [ 231.248993][ T9131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.399161][ T9130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.502181][ T9140] netlink: 'syz.4.898': attribute type 13 has an invalid length. [ 231.530518][ T9140] netlink: 'syz.4.898': attribute type 17 has an invalid length. [ 231.559452][ T9140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.620175][ T9143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.900'. [ 231.639313][ T9143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.900'. [ 231.646208][ T9132] lo speed is unknown, defaulting to 1000 [ 231.654795][ T9143] erspan0: entered promiscuous mode [ 231.661564][ T9143] gretap0: entered promiscuous mode [ 231.850553][ T9148] netlink: 180 bytes leftover after parsing attributes in process `syz.3.902'. [ 232.092231][ T9140] lo speed is unknown, defaulting to 1000 [ 232.119954][ T9152] veth1_macvtap: left promiscuous mode [ 232.141509][ T9152] macsec0: entered promiscuous mode [ 232.149979][ T9152] macsec0: entered allmulticast mode [ 232.281361][ T9157] veth1_macvtap: entered promiscuous mode [ 232.287123][ T9157] veth1_macvtap: entered allmulticast mode [ 232.290318][ T9137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.318483][ T9157] macsec0: left promiscuous mode [ 232.334554][ T9157] macsec0: left allmulticast mode [ 232.339812][ T9157] veth1_macvtap: left allmulticast mode [ 233.137072][ T9180] lo speed is unknown, defaulting to 1000 [ 233.177918][ T9180] lo speed is unknown, defaulting to 1000 [ 233.188196][ T9180] lo speed is unknown, defaulting to 1000 [ 233.212302][ T9180] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 233.221826][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.915'. [ 233.241162][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.915'. [ 233.259732][ T9180] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 233.316217][ T9183] erspan0: entered promiscuous mode [ 233.350764][ T9183] gretap0: entered promiscuous mode [ 233.360160][ T9183] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 233.371724][ T9183] Cannot create hsr debugfs directory [ 233.390665][ T9180] lo speed is unknown, defaulting to 1000 [ 233.458571][ T9180] lo speed is unknown, defaulting to 1000 [ 233.490408][ T9180] lo speed is unknown, defaulting to 1000 [ 233.499876][ T9180] lo speed is unknown, defaulting to 1000 [ 233.507341][ T9180] lo speed is unknown, defaulting to 1000 [ 233.618761][ T9192] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.919'. [ 234.137909][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 234.264985][ T9225] FAULT_INJECTION: forcing a failure. [ 234.264985][ T9225] name failslab, interval 1, probability 0, space 0, times 0 [ 234.277949][ T9225] CPU: 1 UID: 0 PID: 9225 Comm: syz.0.934 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 234.277972][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.277983][ T9225] Call Trace: [ 234.277991][ T9225] [ 234.277998][ T9225] dump_stack_lvl+0x189/0x250 [ 234.278023][ T9225] ? __pfx____ratelimit+0x10/0x10 [ 234.278044][ T9225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.278063][ T9225] ? __pfx__printk+0x10/0x10 [ 234.278088][ T9225] ? __lock_acquire+0xab9/0xd20 [ 234.278112][ T9225] should_fail_ex+0x414/0x560 [ 234.278140][ T9225] should_failslab+0xa8/0x100 [ 234.278162][ T9225] kmem_cache_alloc_noprof+0x73/0x3c0 [ 234.278181][ T9225] ? skb_clone+0x212/0x3a0 [ 234.278196][ T9225] ? __pfx_skb_network_protocol+0x10/0x10 [ 234.278215][ T9225] skb_clone+0x212/0x3a0 [ 234.278229][ T9225] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 234.278260][ T9225] dev_queue_xmit_nit+0x416/0xcc0 [ 234.278283][ T9225] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 234.278316][ T9225] dev_hard_start_xmit+0x1be/0x830 [ 234.278347][ T9225] __dev_queue_xmit+0x1adf/0x3a70 [ 234.278368][ T9225] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 234.278390][ T9225] ? __dev_queue_xmit+0x27e/0x3a70 [ 234.278407][ T9225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.278435][ T9225] ? __pfx___dev_queue_xmit+0x10/0x10 [ 234.278464][ T9225] ? __copy_skb_header+0xa7/0x550 [ 234.278481][ T9225] ? __asan_memcpy+0x40/0x70 [ 234.278497][ T9225] ? __skb_clone+0x63/0x7a0 [ 234.278515][ T9225] ? __skb_clone+0x483/0x7a0 [ 234.278536][ T9225] ? skb_clone+0x246/0x3a0 [ 234.278554][ T9225] __netlink_deliver_tap+0x5ad/0x850 [ 234.278586][ T9225] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.278608][ T9225] netlink_deliver_tap+0x19c/0x1b0 [ 234.278629][ T9225] netlink_unicast+0x72f/0x8d0 [ 234.278658][ T9225] netlink_sendmsg+0x805/0xb30 [ 234.278687][ T9225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.278711][ T9225] ? aa_sock_msg_perm+0x94/0x160 [ 234.278737][ T9225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.278751][ T9225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.278774][ T9225] __sock_sendmsg+0x219/0x270 [ 234.278796][ T9225] ____sys_sendmsg+0x505/0x830 [ 234.278825][ T9225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.278858][ T9225] ? import_iovec+0x74/0xa0 [ 234.278881][ T9225] ___sys_sendmsg+0x21f/0x2a0 [ 234.278907][ T9225] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.278964][ T9225] ? __fget_files+0x2a/0x420 [ 234.278986][ T9225] ? __fget_files+0x3a0/0x420 [ 234.279017][ T9225] __x64_sys_sendmsg+0x19b/0x260 [ 234.279035][ T9225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.279069][ T9225] ? __pfx_ksys_write+0x10/0x10 [ 234.279085][ T9225] ? rcu_is_watching+0x15/0xb0 [ 234.279109][ T9225] ? do_syscall_64+0xbe/0x3b0 [ 234.279133][ T9225] do_syscall_64+0xfa/0x3b0 [ 234.279152][ T9225] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.279172][ T9225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.279187][ T9225] ? clear_bhb_loop+0x60/0xb0 [ 234.279206][ T9225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.279222][ T9225] RIP: 0033:0x7f441f38e929 [ 234.279243][ T9225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.279258][ T9225] RSP: 002b:00007f44201ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.279275][ T9225] RAX: ffffffffffffffda RBX: 00007f441f5b5fa0 RCX: 00007f441f38e929 [ 234.279287][ T9225] RDX: 0000000020040040 RSI: 0000200000000040 RDI: 0000000000000004 [ 234.279298][ T9225] RBP: 00007f44201ff090 R08: 0000000000000000 R09: 0000000000000000 [ 234.279308][ T9225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.279317][ T9225] R13: 0000000000000000 R14: 00007f441f5b5fa0 R15: 00007fff20e956b8 [ 234.279343][ T9225] [ 234.291086][ T9223] netlink: 'syz.3.932': attribute type 13 has an invalid length. [ 234.600724][ T9236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.698947][ T9223] netlink: 'syz.3.932': attribute type 17 has an invalid length. [ 234.700286][ T9234] xt_CT: No such helper "pptp" [ 234.801473][ T9236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.851710][ T9223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.913886][ T9236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.939277][ T9233] lo speed is unknown, defaulting to 1000 [ 235.479301][ T9233] lo speed is unknown, defaulting to 1000 [ 236.062289][ T9275] netlink: 'syz.2.948': attribute type 1 has an invalid length. [ 236.070083][ T9275] netlink: 208 bytes leftover after parsing attributes in process `syz.2.948'. [ 236.107193][ T9279] netlink: 'syz.1.952': attribute type 5 has an invalid length. [ 236.334655][ T9293] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 236.344883][ T9293] netlink: 666 bytes leftover after parsing attributes in process `syz.1.956'. [ 236.744653][ T9302] FAULT_INJECTION: forcing a failure. [ 236.744653][ T9302] name failslab, interval 1, probability 0, space 0, times 0 [ 236.764857][ T9302] CPU: 0 UID: 0 PID: 9302 Comm: syz.1.960 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 236.764883][ T9302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.764895][ T9302] Call Trace: [ 236.764902][ T9302] [ 236.764910][ T9302] dump_stack_lvl+0x189/0x250 [ 236.764936][ T9302] ? __pfx____ratelimit+0x10/0x10 [ 236.764961][ T9302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.764984][ T9302] ? __pfx__printk+0x10/0x10 [ 236.765020][ T9302] ? __pfx___might_resched+0x10/0x10 [ 236.765042][ T9302] ? fs_reclaim_acquire+0x7d/0x100 [ 236.765074][ T9302] should_fail_ex+0x414/0x560 [ 236.765107][ T9302] should_failslab+0xa8/0x100 [ 236.765134][ T9302] __kmalloc_noprof+0xcb/0x4f0 [ 236.765156][ T9302] ? iter_file_splice_write+0x1cb/0x1000 [ 236.765185][ T9302] iter_file_splice_write+0x1cb/0x1000 [ 236.765209][ T9302] ? __pfx_current_time+0x10/0x10 [ 236.765262][ T9302] ? __pfx_iter_file_splice_write+0x10/0x10 [ 236.765290][ T9302] ? rcu_read_lock_any_held+0xb3/0x120 [ 236.765314][ T9302] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 236.765348][ T9302] ? __pfx_iter_file_splice_write+0x10/0x10 [ 236.765374][ T9302] direct_splice_actor+0xfe/0x160 [ 236.765402][ T9302] splice_direct_to_actor+0x5a8/0xcc0 [ 236.765447][ T9302] ? __pfx_direct_splice_actor+0x10/0x10 [ 236.765471][ T9302] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 236.765496][ T9302] ? __pfx_aa_file_perm+0x10/0x10 [ 236.765522][ T9302] do_splice_direct+0x181/0x270 [ 236.765548][ T9302] ? __pfx_do_splice_direct+0x10/0x10 [ 236.765574][ T9302] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 236.765606][ T9302] ? rw_verify_area+0x258/0x650 [ 236.765632][ T9302] do_sendfile+0x4da/0x7e0 [ 236.765659][ T9302] ? __pfx_vfs_write+0x10/0x10 [ 236.765687][ T9302] ? __pfx_do_sendfile+0x10/0x10 [ 236.765714][ T9302] ? __fget_files+0x3a0/0x420 [ 236.765751][ T9302] __se_sys_sendfile64+0x13e/0x190 [ 236.765780][ T9302] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 236.765809][ T9302] ? rcu_is_watching+0x15/0xb0 [ 236.765837][ T9302] ? do_syscall_64+0xbe/0x3b0 [ 236.765865][ T9302] do_syscall_64+0xfa/0x3b0 [ 236.765888][ T9302] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.765911][ T9302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.765929][ T9302] ? clear_bhb_loop+0x60/0xb0 [ 236.765952][ T9302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.765969][ T9302] RIP: 0033:0x7f01dbd8e929 [ 236.765986][ T9302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.766007][ T9302] RSP: 002b:00007f01d9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 236.766026][ T9302] RAX: ffffffffffffffda RBX: 00007f01dbfb5fa0 RCX: 00007f01dbd8e929 [ 236.766040][ T9302] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 236.766051][ T9302] RBP: 00007f01d9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.766063][ T9302] R10: 00000000f03a0005 R11: 0000000000000246 R12: 0000000000000002 [ 236.766074][ T9302] R13: 0000000000000000 R14: 00007f01dbfb5fa0 R15: 00007ffc9f36a418 [ 236.766104][ T9302] [ 237.192775][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880592c8c00: rx timeout, send abort [ 237.197687][ T9311] --map-set only usable from mangle table [ 237.249887][ T9314] netlink: 240 bytes leftover after parsing attributes in process `syz.2.966'. [ 237.318851][ T9310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.400641][ T9319] netlink: 'syz.1.967': attribute type 21 has an invalid length. [ 237.410512][ T9319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.967'. [ 237.695284][ T9332] lo speed is unknown, defaulting to 1000 [ 237.701094][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880592c8c00: abort rx timeout. Force session deactivation [ 238.107148][ T9353] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 238.139882][ T9353] CPU: 1 UID: 0 PID: 9353 Comm: syz.1.979 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 238.139910][ T9353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.139923][ T9353] Call Trace: [ 238.139931][ T9353] [ 238.139939][ T9353] dump_stack_lvl+0x189/0x250 [ 238.139971][ T9353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.139996][ T9353] ? __pfx__printk+0x10/0x10 [ 238.140023][ T9353] ? kernfs_path_from_node+0x2c/0x260 [ 238.140052][ T9353] ? kernfs_path_from_node+0x2c/0x260 [ 238.140079][ T9353] ? kernfs_path_from_node+0x2c/0x260 [ 238.140108][ T9353] ? kernfs_path_from_node+0x22c/0x260 [ 238.140134][ T9353] ? kernfs_path_from_node+0x2c/0x260 [ 238.140165][ T9353] sysfs_warn_dup+0x8e/0xa0 [ 238.140193][ T9353] sysfs_do_create_link_sd+0xc0/0x110 [ 238.140223][ T9353] device_add_class_symlinks+0x1cf/0x240 [ 238.140254][ T9353] device_add+0x475/0xb50 [ 238.140283][ T9353] wiphy_register+0x1ba6/0x28d0 [ 238.140327][ T9353] ? __pfx_wiphy_register+0x10/0x10 [ 238.140352][ T9353] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 238.140391][ T9353] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 238.140426][ T9353] ieee80211_register_hw+0x33e1/0x4120 [ 238.140462][ T9353] ? ieee80211_register_hw+0x1431/0x4120 [ 238.140490][ T9353] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 238.140515][ T9353] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.140546][ T9353] ? __hrtimer_setup+0x187/0x210 [ 238.140569][ T9353] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 238.140604][ T9353] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 238.140674][ T9353] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 238.140703][ T9353] ? trace_kmalloc+0x1f/0xd0 [ 238.140725][ T9353] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 238.140751][ T9353] ? kstrndup+0xbf/0x160 [ 238.140791][ T9353] hwsim_new_radio_nl+0xea4/0x1b10 [ 238.140823][ T9353] ? __pfx___nla_validate_parse+0x10/0x10 [ 238.140859][ T9353] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 238.140892][ T9353] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 238.140926][ T9353] ? __nla_parse+0x40/0x60 [ 238.140968][ T9353] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 238.141002][ T9353] genl_family_rcv_msg_doit+0x212/0x300 [ 238.141035][ T9353] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 238.141076][ T9353] ? bpf_lsm_capable+0x9/0x20 [ 238.141104][ T9353] ? security_capable+0x7e/0x2e0 [ 238.141147][ T9353] genl_rcv_msg+0x60e/0x790 [ 238.141179][ T9353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.141202][ T9353] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 238.141253][ T9353] netlink_rcv_skb+0x205/0x470 [ 238.141285][ T9353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 238.141311][ T9353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 238.141363][ T9353] ? down_read+0x1ad/0x2e0 [ 238.141400][ T9353] genl_rcv+0x28/0x40 [ 238.141420][ T9353] netlink_unicast+0x758/0x8d0 [ 238.141461][ T9353] netlink_sendmsg+0x805/0xb30 [ 238.141506][ T9353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.141543][ T9353] ? aa_sock_msg_perm+0x94/0x160 [ 238.141581][ T9353] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.141601][ T9353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.141643][ T9353] __sock_sendmsg+0x219/0x270 [ 238.141675][ T9353] ____sys_sendmsg+0x505/0x830 [ 238.141719][ T9353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.141768][ T9353] ? import_iovec+0x74/0xa0 [ 238.141801][ T9353] ___sys_sendmsg+0x21f/0x2a0 [ 238.141864][ T9353] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.141968][ T9353] ? __fget_files+0x2a/0x420 [ 238.142000][ T9353] ? __fget_files+0x3a0/0x420 [ 238.142047][ T9353] __x64_sys_sendmsg+0x19b/0x260 [ 238.142072][ T9353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.142123][ T9353] ? rcu_is_watching+0x15/0xb0 [ 238.142165][ T9353] ? do_syscall_64+0xbe/0x3b0 [ 238.142196][ T9353] do_syscall_64+0xfa/0x3b0 [ 238.142221][ T9353] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.142245][ T9353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.142264][ T9353] ? clear_bhb_loop+0x60/0xb0 [ 238.142288][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.142307][ T9353] RIP: 0033:0x7f01dbd8e929 [ 238.142324][ T9353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.142342][ T9353] RSP: 002b:00007f01d9bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.142363][ T9353] RAX: ffffffffffffffda RBX: 00007f01dbfb5fa0 RCX: 00007f01dbd8e929 [ 238.142378][ T9353] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 238.142390][ T9353] RBP: 00007f01dbe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 238.142402][ T9353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.142414][ T9353] R13: 0000000000000000 R14: 00007f01dbfb5fa0 R15: 00007ffc9f36a418 [ 238.142446][ T9353] [ 238.644297][ T9332] lo speed is unknown, defaulting to 1000 [ 238.772233][ T9359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.981'. [ 238.781293][ T9359] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 239.042293][ T9367] netlink: 'syz.2.984': attribute type 13 has an invalid length. [ 239.050047][ T9367] netlink: 'syz.2.984': attribute type 17 has an invalid length. [ 239.091356][ T9367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.324726][ T9375] netlink: 'syz.4.987': attribute type 5 has an invalid length. [ 239.335624][ T9370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.395562][ T9371] netlink: 'syz.0.985': attribute type 13 has an invalid length. [ 239.424666][ T9371] netlink: 'syz.0.985': attribute type 17 has an invalid length. [ 239.451436][ T9370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.558849][ T9370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.669417][ T9371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.725147][ T9367] lo speed is unknown, defaulting to 1000 [ 239.725274][ T5911] lo speed is unknown, defaulting to 1000 [ 239.886651][ T9381] netlink: 240 bytes leftover after parsing attributes in process `syz.4.990'. [ 239.933083][ T9368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.089995][ T9378] lo speed is unknown, defaulting to 1000 [ 240.099046][ T9367] lo speed is unknown, defaulting to 1000 [ 240.176697][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 240.464125][ T9406] Bluetooth: MGMT ver 1.23 [ 240.537999][ T9406] geneve2: entered promiscuous mode [ 240.570534][ T9378] lo speed is unknown, defaulting to 1000 [ 240.585779][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 240.725537][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 241.097749][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 241.685483][ T9439] validate_nla: 33 callbacks suppressed [ 241.685502][ T9439] netlink: 'syz.2.1009': attribute type 13 has an invalid length. [ 241.707199][ T9439] netlink: 'syz.2.1009': attribute type 17 has an invalid length. [ 241.743726][ T9439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.744129][ T9440] netlink: 'syz.3.1010': attribute type 13 has an invalid length. [ 241.769249][ T9440] netlink: 'syz.3.1010': attribute type 17 has an invalid length. [ 241.790678][ T9440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.840220][ T9442] netlink: 'syz.1.1011': attribute type 13 has an invalid length. [ 241.850714][ T9442] netlink: 'syz.1.1011': attribute type 17 has an invalid length. [ 241.871987][ T9442] tipc: Resetting bearer [ 241.890820][ T9442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.972378][ T9440] lo speed is unknown, defaulting to 1000 [ 242.006515][ T9446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.086644][ T9446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.166289][ T9446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.412264][ T9445] lo speed is unknown, defaulting to 1000 [ 242.412951][ T9440] lo speed is unknown, defaulting to 1000 [ 242.519348][ T9441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.586760][ T9438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.777920][ T9439] lo speed is unknown, defaulting to 1000 [ 242.792798][ T9445] lo speed is unknown, defaulting to 1000 [ 242.860054][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 242.872242][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1013'. [ 243.026111][ T9439] lo speed is unknown, defaulting to 1000 [ 243.370084][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 243.385839][ T9470] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1018'. [ 244.026080][ T9487] netlink: 'syz.4.1024': attribute type 13 has an invalid length. [ 244.040259][ T9487] netlink: 'syz.4.1024': attribute type 17 has an invalid length. [ 244.089189][ T9487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.208367][ T9487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.311243][ T9493] lo speed is unknown, defaulting to 1000 [ 244.343064][ T9487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.424415][ T9506] FAULT_INJECTION: forcing a failure. [ 244.424415][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 244.441551][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.461717][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.0.1032 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 244.461753][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.461766][ T9506] Call Trace: [ 244.461775][ T9506] [ 244.461784][ T9506] dump_stack_lvl+0x189/0x250 [ 244.461816][ T9506] ? __pfx____ratelimit+0x10/0x10 [ 244.461844][ T9506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.461871][ T9506] ? __pfx__printk+0x10/0x10 [ 244.461908][ T9506] ? __pfx___might_resched+0x10/0x10 [ 244.461933][ T9506] ? fs_reclaim_acquire+0x7d/0x100 [ 244.461970][ T9506] should_fail_ex+0x414/0x560 [ 244.462010][ T9506] should_failslab+0xa8/0x100 [ 244.462041][ T9506] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 244.462070][ T9506] ? __alloc_skb+0x112/0x2d0 [ 244.462121][ T9506] __alloc_skb+0x112/0x2d0 [ 244.462166][ T9506] netlink_ack+0x146/0xa50 [ 244.462187][ T9506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.462205][ T9506] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 244.462227][ T9506] ? __pfx_nl802154_post_doit+0x10/0x10 [ 244.462264][ T9506] netlink_rcv_skb+0x28c/0x470 [ 244.462289][ T9506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.462309][ T9506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.462358][ T9506] ? down_read+0x1ad/0x2e0 [ 244.462388][ T9506] genl_rcv+0x28/0x40 [ 244.462404][ T9506] netlink_unicast+0x758/0x8d0 [ 244.462438][ T9506] netlink_sendmsg+0x805/0xb30 [ 244.462473][ T9506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.462502][ T9506] ? aa_sock_msg_perm+0x94/0x160 [ 244.462533][ T9506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.462550][ T9506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.462576][ T9506] __sock_sendmsg+0x219/0x270 [ 244.462602][ T9506] ____sys_sendmsg+0x505/0x830 [ 244.462637][ T9506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.462676][ T9506] ? import_iovec+0x74/0xa0 [ 244.462703][ T9506] ___sys_sendmsg+0x21f/0x2a0 [ 244.462735][ T9506] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.462802][ T9506] ? __fget_files+0x2a/0x420 [ 244.462827][ T9506] ? __fget_files+0x3a0/0x420 [ 244.462863][ T9506] __x64_sys_sendmsg+0x19b/0x260 [ 244.462884][ T9506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.462923][ T9506] ? __pfx_ksys_write+0x10/0x10 [ 244.462943][ T9506] ? rcu_is_watching+0x15/0xb0 [ 244.462970][ T9506] ? do_syscall_64+0xbe/0x3b0 [ 244.462999][ T9506] do_syscall_64+0xfa/0x3b0 [ 244.463022][ T9506] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.463045][ T9506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.463063][ T9506] ? clear_bhb_loop+0x60/0xb0 [ 244.463086][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.463104][ T9506] RIP: 0033:0x7f441f38e929 [ 244.463120][ T9506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.463136][ T9506] RSP: 002b:00007f44201ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.463155][ T9506] RAX: ffffffffffffffda RBX: 00007f441f5b5fa0 RCX: 00007f441f38e929 [ 244.463169][ T9506] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000004 [ 244.463181][ T9506] RBP: 00007f44201ff090 R08: 0000000000000000 R09: 0000000000000000 [ 244.463192][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.463203][ T9506] R13: 0000000000000000 R14: 00007f441f5b5fa0 R15: 00007fff20e956b8 [ 244.463233][ T9506] [ 244.855392][ T9504] netlink: 'syz.2.1031': attribute type 13 has an invalid length. [ 244.912408][ T9504] netlink: 'syz.2.1031': attribute type 17 has an invalid length. [ 245.098446][ T9504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.124603][ T9493] lo speed is unknown, defaulting to 1000 [ 245.244125][ T9523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.356362][ T9504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.370277][ T9524] tipc: Resetting bearer [ 245.378553][ T9524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.515115][ T9504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.542632][ T9508] lo speed is unknown, defaulting to 1000 [ 245.574083][ T9521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.968264][ T9525] lo speed is unknown, defaulting to 1000 [ 246.041622][ T9519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.078360][ T9522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.156476][ T9524] lo speed is unknown, defaulting to 1000 [ 246.290841][ T9524] lo speed is unknown, defaulting to 1000 [ 246.313373][ T9508] lo speed is unknown, defaulting to 1000 [ 246.358537][ T9525] lo speed is unknown, defaulting to 1000 [ 246.589217][ T9532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.821418][ T9532] lo speed is unknown, defaulting to 1000 [ 247.124026][ T9540] batadv_slave_1: entered promiscuous mode [ 247.206688][ T9543] set match dimension is over the limit! [ 247.305801][ T9531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.448968][ T9550] validate_nla: 6 callbacks suppressed [ 247.448987][ T9550] netlink: 'syz.2.1046': attribute type 13 has an invalid length. [ 247.470381][ T9550] netlink: 'syz.2.1046': attribute type 17 has an invalid length. [ 247.479946][ T9548] veth3: entered promiscuous mode [ 247.491689][ T9532] lo speed is unknown, defaulting to 1000 [ 247.543431][ T9550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.739626][ T9554] netlink: 'syz.1.1048': attribute type 13 has an invalid length. [ 247.764515][ T9550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.777554][ T9554] netlink: 'syz.1.1048': attribute type 17 has an invalid length. [ 247.851736][ T9550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.934654][ T9550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.014616][ T9554] tipc: Resetting bearer [ 248.032611][ T9554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.092641][ T9551] lo speed is unknown, defaulting to 1000 [ 248.423483][ T9569] tipc: Started in network mode [ 248.428472][ T9569] tipc: Node identity ac14140f, cluster identity 4711 [ 248.465867][ T9569] tipc: New replicast peer: 255.255.255.255 [ 248.473642][ T9569] tipc: Enabled bearer , priority 10 [ 248.480222][ T9558] lo speed is unknown, defaulting to 1000 [ 248.503792][ T9552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.532271][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 248.754228][ T9551] lo speed is unknown, defaulting to 1000 [ 248.762203][ T9558] lo speed is unknown, defaulting to 1000 [ 249.601436][ T10] tipc: Node number set to 2886997007 [ 249.662429][ T9579] set match dimension is over the limit! [ 249.809894][ T9582] netlink: 'syz.0.1057': attribute type 13 has an invalid length. [ 249.818922][ T9580] netlink: 'syz.4.1056': attribute type 13 has an invalid length. [ 249.822537][ T9582] netlink: 'syz.0.1057': attribute type 17 has an invalid length. [ 249.849841][ T9580] netlink: 'syz.4.1056': attribute type 17 has an invalid length. [ 249.862879][ T9582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.927356][ T9580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.983929][ T9588] lo speed is unknown, defaulting to 1000 [ 250.035469][ T9580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.316315][ T9596] netlink: 'syz.1.1061': attribute type 13 has an invalid length. [ 250.336373][ T9596] netlink: 'syz.1.1061': attribute type 17 has an invalid length. [ 250.367972][ T9596] tipc: Resetting bearer [ 250.477360][ T9596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.518348][ T9577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.545192][ T9588] lo speed is unknown, defaulting to 1000 [ 250.545916][ T9583] lo speed is unknown, defaulting to 1000 [ 250.555929][ T9581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.805621][ T9598] lo speed is unknown, defaulting to 1000 [ 250.806410][ T9583] lo speed is unknown, defaulting to 1000 [ 251.088991][ T9595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.364941][ T9614] set match dimension is over the limit! [ 251.499514][ T9619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.586781][ T9621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.660303][ T9619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.364246][ T9598] lo speed is unknown, defaulting to 1000 [ 252.376669][ T9610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.548933][ T9612] lo speed is unknown, defaulting to 1000 [ 252.586550][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 252.878088][ T9612] lo speed is unknown, defaulting to 1000 [ 253.719759][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1080'. [ 253.965459][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1086'. [ 254.007195][ T9669] IPVS: Unknown mcast interface: wg0 [ 254.054012][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 254.194439][ T9674] validate_nla: 2 callbacks suppressed [ 254.194487][ T9674] netlink: 'syz.0.1089': attribute type 13 has an invalid length. [ 254.211992][ T9674] netlink: 'syz.0.1089': attribute type 17 has an invalid length. [ 254.244688][ T9674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.388540][ T9674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.511391][ T9674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.576810][ T9685] lo speed is unknown, defaulting to 1000 [ 254.593203][ T9674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.614968][ T9689] veth0: entered promiscuous mode [ 254.640426][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 254.853237][ T9685] lo speed is unknown, defaulting to 1000 [ 255.007188][ T9701] FAULT_INJECTION: forcing a failure. [ 255.007188][ T9701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.032561][ T9701] CPU: 1 UID: 0 PID: 9701 Comm: syz.4.1096 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 255.032589][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.032600][ T9701] Call Trace: [ 255.032608][ T9701] [ 255.032616][ T9701] dump_stack_lvl+0x189/0x250 [ 255.032643][ T9701] ? __pfx____ratelimit+0x10/0x10 [ 255.032668][ T9701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.032691][ T9701] ? __pfx__printk+0x10/0x10 [ 255.032716][ T9701] ? __might_fault+0xb0/0x130 [ 255.032750][ T9701] should_fail_ex+0x414/0x560 [ 255.032782][ T9701] _copy_from_user+0x2d/0xb0 [ 255.032806][ T9701] inet6_ioctl+0x180/0x280 [ 255.032828][ T9701] ? __pfx_inet6_ioctl+0x10/0x10 [ 255.032848][ T9701] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 255.032880][ T9701] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 255.032916][ T9701] sock_do_ioctl+0xd9/0x300 [ 255.032941][ T9701] ? __pfx_sock_do_ioctl+0x10/0x10 [ 255.032960][ T9701] ? __lock_acquire+0xab9/0xd20 [ 255.032995][ T9701] sock_ioctl+0x576/0x790 [ 255.033018][ T9701] ? __pfx_sock_ioctl+0x10/0x10 [ 255.033038][ T9701] ? __fget_files+0x2a/0x420 [ 255.033063][ T9701] ? __fget_files+0x3a0/0x420 [ 255.033087][ T9701] ? __fget_files+0x2a/0x420 [ 255.033116][ T9701] ? bpf_lsm_file_ioctl+0x9/0x20 [ 255.033136][ T9701] ? __pfx_sock_ioctl+0x10/0x10 [ 255.033156][ T9701] __se_sys_ioctl+0xf9/0x170 [ 255.033179][ T9701] do_syscall_64+0xfa/0x3b0 [ 255.033202][ T9701] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.033225][ T9701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.033243][ T9701] ? clear_bhb_loop+0x60/0xb0 [ 255.033266][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.033284][ T9701] RIP: 0033:0x7fba3798e929 [ 255.033300][ T9701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.033316][ T9701] RSP: 002b:00007fba387c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.033342][ T9701] RAX: ffffffffffffffda RBX: 00007fba37bb5fa0 RCX: 00007fba3798e929 [ 255.033355][ T9701] RDX: 0000200000000180 RSI: 000000000000890c RDI: 0000000000000003 [ 255.033367][ T9701] RBP: 00007fba387c1090 R08: 0000000000000000 R09: 0000000000000000 [ 255.033378][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.033389][ T9701] R13: 0000000000000000 R14: 00007fba37bb5fa0 R15: 00007ffdfcf96218 [ 255.033418][ T9701] [ 255.388396][ T9688] veth0: left promiscuous mode [ 255.425496][ T9708] netlink: 'syz.4.1098': attribute type 13 has an invalid length. [ 255.439855][ T9708] netlink: 'syz.4.1098': attribute type 17 has an invalid length. [ 255.458165][ T9708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.506602][ T9708] lo speed is unknown, defaulting to 1000 [ 255.823044][ T9717] netlink: 'syz.1.1101': attribute type 13 has an invalid length. [ 255.857412][ T9717] netlink: 'syz.1.1101': attribute type 17 has an invalid length. [ 255.973726][ T9717] tipc: Resetting bearer [ 255.996081][ T9717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.031562][ T9725] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 256.077839][ T9725] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1102'. [ 256.186279][ T9711] lo speed is unknown, defaulting to 1000 [ 256.205985][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.236410][ T9707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.262482][ T9727] netlink: 'syz.3.1103': attribute type 13 has an invalid length. [ 256.270329][ T9727] netlink: 'syz.3.1103': attribute type 17 has an invalid length. [ 256.295218][ T9724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.305367][ T9727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.384497][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.465153][ T9732] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1100'. [ 256.536819][ T9711] lo speed is unknown, defaulting to 1000 [ 256.600360][ T9727] lo speed is unknown, defaulting to 1000 [ 256.611635][ T9708] lo speed is unknown, defaulting to 1000 [ 256.836789][ T9734] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1104'. [ 256.858435][ T9734] openvswitch: netlink: Flow key attr not present in new flow. [ 256.952962][ T9726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.105667][ T9719] lo speed is unknown, defaulting to 1000 [ 257.247986][ T9719] lo speed is unknown, defaulting to 1000 [ 257.289384][ T9727] lo speed is unknown, defaulting to 1000 [ 258.006983][ T9741] netlink: 'syz.4.1107': attribute type 13 has an invalid length. [ 258.079867][ T9741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.207699][ T9744] lo speed is unknown, defaulting to 1000 [ 258.566873][ T9756] wireguard0: entered promiscuous mode [ 258.585309][ T9756] wireguard0: entered allmulticast mode [ 258.723560][ T9765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.798500][ T9740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.860185][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.914081][ T9765] lo speed is unknown, defaulting to 1000 [ 258.920838][ T9744] lo speed is unknown, defaulting to 1000 [ 258.948644][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.048824][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.246190][ T9773] validate_nla: 3 callbacks suppressed [ 259.246210][ T9773] netlink: 'syz.0.1116': attribute type 13 has an invalid length. [ 259.247403][ T9765] lo speed is unknown, defaulting to 1000 [ 259.276085][ T9773] netlink: 'syz.0.1116': attribute type 17 has an invalid length. [ 259.294440][ T9776] netlink: 'syz.1.1117': attribute type 13 has an invalid length. [ 259.312167][ T9776] netlink: 'syz.1.1117': attribute type 17 has an invalid length. [ 259.335915][ T9773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.484356][ T9776] tipc: Resetting bearer [ 259.497549][ T9776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.714211][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1120'. [ 259.743102][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 259.765384][ T9777] lo speed is unknown, defaulting to 1000 [ 259.779537][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1120'. [ 259.900133][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'. [ 259.936552][ T9772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.955085][ T9775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.130583][ T9780] lo speed is unknown, defaulting to 1000 [ 260.180401][ T9800] FAULT_INJECTION: forcing a failure. [ 260.180401][ T9800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.215983][ T9800] CPU: 1 UID: 0 PID: 9800 Comm: syz.4.1123 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 260.216009][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.216021][ T9800] Call Trace: [ 260.216028][ T9800] [ 260.216036][ T9800] dump_stack_lvl+0x189/0x250 [ 260.216065][ T9800] ? __pfx____ratelimit+0x10/0x10 [ 260.216089][ T9800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.216112][ T9800] ? __pfx__printk+0x10/0x10 [ 260.216137][ T9800] ? __might_fault+0xb0/0x130 [ 260.216171][ T9800] should_fail_ex+0x414/0x560 [ 260.216204][ T9800] _copy_from_iter+0x1db/0x16f0 [ 260.216228][ T9800] ? rcu_is_watching+0x15/0xb0 [ 260.216252][ T9800] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 260.216278][ T9800] ? __pfx__copy_from_iter+0x10/0x10 [ 260.216299][ T9800] ? __build_skb_around+0x257/0x3e0 [ 260.216330][ T9800] ? netlink_sendmsg+0x642/0xb30 [ 260.216353][ T9800] ? skb_put+0x11b/0x210 [ 260.216384][ T9800] netlink_sendmsg+0x6b2/0xb30 [ 260.216418][ T9800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.216447][ T9800] ? aa_sock_msg_perm+0x94/0x160 [ 260.216477][ T9800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.216494][ T9800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.216519][ T9800] __sock_sendmsg+0x219/0x270 [ 260.216545][ T9800] ____sys_sendmsg+0x505/0x830 [ 260.216598][ T9800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.216638][ T9800] ? import_iovec+0x74/0xa0 [ 260.216666][ T9800] ___sys_sendmsg+0x21f/0x2a0 [ 260.216700][ T9800] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.216767][ T9800] ? __fget_files+0x2a/0x420 [ 260.216801][ T9800] ? __fget_files+0x3a0/0x420 [ 260.216839][ T9800] __x64_sys_sendmsg+0x19b/0x260 [ 260.216861][ T9800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.216902][ T9800] ? __pfx_ksys_write+0x10/0x10 [ 260.216924][ T9800] ? rcu_is_watching+0x15/0xb0 [ 260.216952][ T9800] ? do_syscall_64+0xbe/0x3b0 [ 260.216982][ T9800] do_syscall_64+0xfa/0x3b0 [ 260.217006][ T9800] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.217031][ T9800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.217051][ T9800] ? clear_bhb_loop+0x60/0xb0 [ 260.217075][ T9800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.217093][ T9800] RIP: 0033:0x7fba3798e929 [ 260.217111][ T9800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.217128][ T9800] RSP: 002b:00007fba387c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.217149][ T9800] RAX: ffffffffffffffda RBX: 00007fba37bb5fa0 RCX: 00007fba3798e929 [ 260.217163][ T9800] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000006 [ 260.217175][ T9800] RBP: 00007fba387c1090 R08: 0000000000000000 R09: 0000000000000000 [ 260.217188][ T9800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.217199][ T9800] R13: 0000000000000000 R14: 00007fba37bb5fa0 R15: 00007ffdfcf96218 [ 260.217229][ T9800] [ 260.574666][ T9780] lo speed is unknown, defaulting to 1000 [ 260.587066][ T9777] lo speed is unknown, defaulting to 1000 [ 260.603049][ T9802] lo speed is unknown, defaulting to 1000 [ 260.828696][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1126'. [ 261.074857][ T9820] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1128'. [ 261.084024][ T9821] netlink: 'syz.4.1129': attribute type 4 has an invalid length. [ 261.095558][ T9802] lo speed is unknown, defaulting to 1000 [ 261.287978][ T9828] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1131'. [ 261.356921][ T9826] veth0: entered promiscuous mode [ 261.477303][ T9830] netlink: 'syz.4.1132': attribute type 13 has an invalid length. [ 261.499747][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 261.509360][ T9830] netlink: 'syz.4.1132': attribute type 17 has an invalid length. [ 261.823983][ T9838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.876419][ T9830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.940816][ T9830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.026790][ T9832] lo speed is unknown, defaulting to 1000 [ 262.046558][ T9830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.308794][ T9845] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.326755][ T9846] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1135'. [ 262.447916][ T9848] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1137'. [ 262.479536][ T9845] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.568338][ T9845] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.686459][ T9845] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.735050][ T9832] lo speed is unknown, defaulting to 1000 [ 262.850607][ T9858] FAULT_INJECTION: forcing a failure. [ 262.850607][ T9858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.864577][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.881188][ T9858] CPU: 0 UID: 0 PID: 9858 Comm: syz.2.1141 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 262.881218][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.881232][ T9858] Call Trace: [ 262.881241][ T9858] [ 262.881250][ T9858] dump_stack_lvl+0x189/0x250 [ 262.881282][ T9858] ? __pfx____ratelimit+0x10/0x10 [ 262.881310][ T9858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.881337][ T9858] ? __pfx__printk+0x10/0x10 [ 262.881368][ T9858] ? __might_fault+0xb0/0x130 [ 262.881408][ T9858] should_fail_ex+0x414/0x560 [ 262.881448][ T9858] _copy_from_user+0x2d/0xb0 [ 262.881476][ T9858] kstrtouint_from_user+0xc4/0x170 [ 262.881501][ T9858] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 262.881543][ T9858] proc_fail_nth_write+0x88/0x240 [ 262.881576][ T9858] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 262.881614][ T9858] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 262.881648][ T9858] vfs_write+0x27e/0xa90 [ 262.881685][ T9858] ? __pfx_vfs_write+0x10/0x10 [ 262.881713][ T9858] ? __fget_files+0x2a/0x420 [ 262.881750][ T9858] ? __fget_files+0x3a0/0x420 [ 262.881778][ T9858] ? __fget_files+0x2a/0x420 [ 262.881827][ T9858] ksys_write+0x145/0x250 [ 262.881850][ T9858] ? __fget_files+0x2a/0x420 [ 262.881883][ T9858] ? __pfx_ksys_write+0x10/0x10 [ 262.881915][ T9858] ? do_syscall_64+0xbe/0x3b0 [ 262.881950][ T9858] do_syscall_64+0xfa/0x3b0 [ 262.881977][ T9858] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.882005][ T9858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.882026][ T9858] ? clear_bhb_loop+0x60/0xb0 [ 262.882054][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.882075][ T9858] RIP: 0033:0x7fa78ad8d3df [ 262.882094][ T9858] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 262.882124][ T9858] RSP: 002b:00007fa78bc77030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 262.882145][ T9858] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa78ad8d3df [ 262.882169][ T9858] RDX: 0000000000000001 RSI: 00007fa78bc770a0 RDI: 0000000000000004 [ 262.882181][ T9858] RBP: 00007fa78bc77090 R08: 0000000000000000 R09: 0000000000000000 [ 262.882192][ T9858] R10: 0000200000000240 R11: 0000000000000293 R12: 0000000000000001 [ 262.882204][ T9858] R13: 0000000000000000 R14: 00007fa78afb5fa0 R15: 00007ffcfb116c08 [ 262.882233][ T9858] [ 263.180268][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.188868][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.206302][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.361743][ T9871] FAULT_INJECTION: forcing a failure. [ 263.361743][ T9871] name failslab, interval 1, probability 0, space 0, times 0 [ 263.411357][ T9871] CPU: 1 UID: 0 PID: 9871 Comm: syz.3.1144 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 263.411392][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.411406][ T9871] Call Trace: [ 263.411414][ T9871] [ 263.411423][ T9871] dump_stack_lvl+0x189/0x250 [ 263.411454][ T9871] ? __pfx____ratelimit+0x10/0x10 [ 263.411482][ T9871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.411519][ T9871] ? __pfx__printk+0x10/0x10 [ 263.411557][ T9871] ? ref_tracker_alloc+0x318/0x460 [ 263.411583][ T9871] should_fail_ex+0x414/0x560 [ 263.411620][ T9871] should_failslab+0xa8/0x100 [ 263.411650][ T9871] kmem_cache_alloc_noprof+0x73/0x3c0 [ 263.411671][ T9871] ? skb_clone+0x212/0x3a0 [ 263.411692][ T9871] skb_clone+0x212/0x3a0 [ 263.411712][ T9871] __netlink_deliver_tap+0x404/0x850 [ 263.411746][ T9871] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.411772][ T9871] netlink_deliver_tap+0x19c/0x1b0 [ 263.411796][ T9871] netlink_unicast+0x72f/0x8d0 [ 263.411827][ T9871] netlink_sendmsg+0x805/0xb30 [ 263.411858][ T9871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.411885][ T9871] ? aa_sock_msg_perm+0x94/0x160 [ 263.411912][ T9871] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.411928][ T9871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.411952][ T9871] __sock_sendmsg+0x219/0x270 [ 263.411975][ T9871] ____sys_sendmsg+0x505/0x830 [ 263.412007][ T9871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.412042][ T9871] ? import_iovec+0x74/0xa0 [ 263.412065][ T9871] ___sys_sendmsg+0x21f/0x2a0 [ 263.412108][ T9871] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.412174][ T9871] ? __fget_files+0x2a/0x420 [ 263.412193][ T9871] ? __fget_files+0x3a0/0x420 [ 263.412221][ T9871] __x64_sys_sendmsg+0x19b/0x260 [ 263.412236][ T9871] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.412266][ T9871] ? __pfx_ksys_write+0x10/0x10 [ 263.412282][ T9871] ? rcu_is_watching+0x15/0xb0 [ 263.412303][ T9871] ? do_syscall_64+0xbe/0x3b0 [ 263.412325][ T9871] do_syscall_64+0xfa/0x3b0 [ 263.412343][ T9871] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.412360][ T9871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.412374][ T9871] ? clear_bhb_loop+0x60/0xb0 [ 263.412392][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.412406][ T9871] RIP: 0033:0x7f8e5818e929 [ 263.412419][ T9871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.412432][ T9871] RSP: 002b:00007f8e58fec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.412447][ T9871] RAX: ffffffffffffffda RBX: 00007f8e583b5fa0 RCX: 00007f8e5818e929 [ 263.412457][ T9871] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 263.412467][ T9871] RBP: 00007f8e58fec090 R08: 0000000000000000 R09: 0000000000000000 [ 263.412476][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.412484][ T9871] R13: 0000000000000000 R14: 00007f8e583b5fa0 R15: 00007fff920e1bb8 [ 263.412507][ T9871] [ 263.805828][ T9873] netlink: 'syz.2.1145': attribute type 13 has an invalid length. [ 263.814779][ T9873] netlink: 'syz.2.1145': attribute type 17 has an invalid length. [ 263.849296][ T9873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.960731][ T9873] lo speed is unknown, defaulting to 1000 [ 263.977494][ T9885] FAULT_INJECTION: forcing a failure. [ 263.977494][ T9885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.061609][ T9885] CPU: 0 UID: 0 PID: 9885 Comm: syz.0.1150 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 264.061641][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.061654][ T9885] Call Trace: [ 264.061663][ T9885] [ 264.061673][ T9885] dump_stack_lvl+0x189/0x250 [ 264.061704][ T9885] ? __pfx____ratelimit+0x10/0x10 [ 264.061734][ T9885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.061760][ T9885] ? __pfx__printk+0x10/0x10 [ 264.061805][ T9885] should_fail_ex+0x414/0x560 [ 264.061844][ T9885] _copy_to_user+0x31/0xb0 [ 264.061874][ T9885] simple_read_from_buffer+0xe1/0x170 [ 264.061910][ T9885] proc_fail_nth_read+0x1df/0x250 [ 264.061946][ T9885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.061982][ T9885] ? rw_verify_area+0x258/0x650 [ 264.062006][ T9885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.062040][ T9885] vfs_read+0x200/0x980 [ 264.062082][ T9885] ? __pfx___mutex_lock+0x10/0x10 [ 264.062122][ T9885] ? __pfx_vfs_read+0x10/0x10 [ 264.062146][ T9885] ? __fget_files+0x2a/0x420 [ 264.062187][ T9885] ? __fget_files+0x3a0/0x420 [ 264.062210][ T9885] ? __fget_files+0x2a/0x420 [ 264.062244][ T9885] ksys_read+0x145/0x250 [ 264.062269][ T9885] ? __pfx_ksys_read+0x10/0x10 [ 264.062288][ T9885] ? rcu_is_watching+0x15/0xb0 [ 264.062322][ T9885] ? do_syscall_64+0xbe/0x3b0 [ 264.062352][ T9885] do_syscall_64+0xfa/0x3b0 [ 264.062376][ T9885] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.062399][ T9885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.062418][ T9885] ? clear_bhb_loop+0x60/0xb0 [ 264.062441][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.062466][ T9885] RIP: 0033:0x7f441f38d33c [ 264.062483][ T9885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 264.062499][ T9885] RSP: 002b:00007f44201ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.062519][ T9885] RAX: ffffffffffffffda RBX: 00007f441f5b5fa0 RCX: 00007f441f38d33c [ 264.062533][ T9885] RDX: 000000000000000f RSI: 00007f44201ff0a0 RDI: 0000000000000004 [ 264.062546][ T9885] RBP: 00007f44201ff090 R08: 0000000000000000 R09: 0000000000000000 [ 264.062558][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.062569][ T9885] R13: 0000000000000000 R14: 00007f441f5b5fa0 R15: 00007fff20e956b8 [ 264.062598][ T9885] [ 264.356299][ T9872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.539239][ T9900] FAULT_INJECTION: forcing a failure. [ 264.539239][ T9900] name failslab, interval 1, probability 0, space 0, times 0 [ 264.546404][ T9873] lo speed is unknown, defaulting to 1000 [ 264.563761][ T9900] CPU: 1 UID: 0 PID: 9900 Comm: syz.3.1156 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 264.563786][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.563797][ T9900] Call Trace: [ 264.563804][ T9900] [ 264.563812][ T9900] dump_stack_lvl+0x189/0x250 [ 264.563839][ T9900] ? __pfx____ratelimit+0x10/0x10 [ 264.563864][ T9900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.563885][ T9900] ? __pfx__printk+0x10/0x10 [ 264.563918][ T9900] ? ref_tracker_alloc+0x318/0x460 [ 264.563938][ T9900] should_fail_ex+0x414/0x560 [ 264.563974][ T9900] should_failslab+0xa8/0x100 [ 264.564000][ T9900] kmem_cache_alloc_noprof+0x73/0x3c0 [ 264.564023][ T9900] ? skb_clone+0x212/0x3a0 [ 264.564046][ T9900] skb_clone+0x212/0x3a0 [ 264.564068][ T9900] __netlink_deliver_tap+0x404/0x850 [ 264.564104][ T9900] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.564130][ T9900] netlink_deliver_tap+0x19c/0x1b0 [ 264.564157][ T9900] netlink_unicast+0x72f/0x8d0 [ 264.564190][ T9900] netlink_sendmsg+0x805/0xb30 [ 264.564224][ T9900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.564253][ T9900] ? aa_sock_msg_perm+0x94/0x160 [ 264.564282][ T9900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.564300][ T9900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.564326][ T9900] __sock_sendmsg+0x219/0x270 [ 264.564352][ T9900] ____sys_sendmsg+0x505/0x830 [ 264.564386][ T9900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.564424][ T9900] ? import_iovec+0x74/0xa0 [ 264.564450][ T9900] ___sys_sendmsg+0x21f/0x2a0 [ 264.564481][ T9900] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.564545][ T9900] ? __fget_files+0x2a/0x420 [ 264.564570][ T9900] ? __fget_files+0x3a0/0x420 [ 264.564605][ T9900] __x64_sys_sendmsg+0x19b/0x260 [ 264.564625][ T9900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.564672][ T9900] ? __pfx_ksys_write+0x10/0x10 [ 264.564692][ T9900] ? rcu_is_watching+0x15/0xb0 [ 264.564719][ T9900] ? do_syscall_64+0xbe/0x3b0 [ 264.564748][ T9900] do_syscall_64+0xfa/0x3b0 [ 264.564771][ T9900] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.564795][ T9900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.564813][ T9900] ? clear_bhb_loop+0x60/0xb0 [ 264.564835][ T9900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.564853][ T9900] RIP: 0033:0x7f8e5818e929 [ 264.564870][ T9900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.564886][ T9900] RSP: 002b:00007f8e58fec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.564905][ T9900] RAX: ffffffffffffffda RBX: 00007f8e583b5fa0 RCX: 00007f8e5818e929 [ 264.564919][ T9900] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000004 [ 264.564931][ T9900] RBP: 00007f8e58fec090 R08: 0000000000000000 R09: 0000000000000000 [ 264.564942][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.564953][ T9900] R13: 0000000000000000 R14: 00007f8e583b5fa0 R15: 00007fff920e1bb8 [ 264.564982][ T9900] [ 264.870994][ T9901] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 264.878908][ T9901] __nla_validate_parse: 2 callbacks suppressed [ 264.878921][ T9901] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1154'. [ 264.927889][ T9904] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1157'. [ 265.015345][ T9906] netlink: 'syz.3.1158': attribute type 13 has an invalid length. [ 265.024685][ T9906] netlink: 'syz.3.1158': attribute type 17 has an invalid length. [ 265.039474][ T9906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.108382][ T9906] lo speed is unknown, defaulting to 1000 [ 265.141687][ T9908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.252597][ T9909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.477180][ T9917] gretap1: entered promiscuous mode [ 265.637424][ T9906] lo speed is unknown, defaulting to 1000 [ 265.795752][ T9924] syzkaller0: entered promiscuous mode [ 265.802734][ T9924] syzkaller0: entered allmulticast mode [ 266.021481][ T9930] FAULT_INJECTION: forcing a failure. [ 266.021481][ T9930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.038911][ T9930] CPU: 0 UID: 0 PID: 9930 Comm: syz.0.1166 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 266.038940][ T9930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.038951][ T9930] Call Trace: [ 266.038958][ T9930] [ 266.038966][ T9930] dump_stack_lvl+0x189/0x250 [ 266.038992][ T9930] ? __pfx____ratelimit+0x10/0x10 [ 266.039018][ T9930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.039041][ T9930] ? __pfx__printk+0x10/0x10 [ 266.039068][ T9930] ? __might_fault+0xb0/0x130 [ 266.039101][ T9930] should_fail_ex+0x414/0x560 [ 266.039135][ T9930] _copy_from_user+0x2d/0xb0 [ 266.039158][ T9930] do_ipv6_setsockopt+0x32d/0x2fb0 [ 266.039187][ T9930] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 266.039203][ T9930] ? __might_fault+0xb0/0x130 [ 266.039226][ T9930] ? _parse_integer_limit+0x1ae/0x1f0 [ 266.039258][ T9930] ? aa_label_sk_perm+0x413/0x560 [ 266.039290][ T9930] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 266.039346][ T9930] ? __pfx___might_resched+0x10/0x10 [ 266.039368][ T9930] ? rcu_read_lock_any_held+0xb3/0x120 [ 266.039390][ T9930] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 266.039416][ T9930] ? vfs_write+0x8d8/0xa90 [ 266.039444][ T9930] ipv6_setsockopt+0x59/0x170 [ 266.039465][ T9930] rawv6_setsockopt+0x23b/0x5b0 [ 266.039483][ T9930] ? __lock_acquire+0xab9/0xd20 [ 266.039504][ T9930] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 266.039521][ T9930] ? aa_sock_opt_perm+0x74/0x110 [ 266.039556][ T9930] ? sock_common_setsockopt+0x36/0xc0 [ 266.039577][ T9930] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 266.039602][ T9930] do_sock_setsockopt+0x257/0x3e0 [ 266.039631][ T9930] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 266.039662][ T9930] ? __fget_files+0x2a/0x420 [ 266.039693][ T9930] __x64_sys_setsockopt+0x18b/0x220 [ 266.039725][ T9930] do_syscall_64+0xfa/0x3b0 [ 266.039748][ T9930] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.039770][ T9930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.039787][ T9930] ? clear_bhb_loop+0x60/0xb0 [ 266.039807][ T9930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.039823][ T9930] RIP: 0033:0x7f441f38e929 [ 266.039840][ T9930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.039855][ T9930] RSP: 002b:00007f44201ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 266.039874][ T9930] RAX: ffffffffffffffda RBX: 00007f441f5b5fa0 RCX: 00007f441f38e929 [ 266.039887][ T9930] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 266.039897][ T9930] RBP: 00007f44201ff090 R08: 0000000000000520 R09: 0000000000000000 [ 266.039908][ T9930] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 266.039919][ T9930] R13: 0000000000000000 R14: 00007f441f5b5fa0 R15: 00007fff20e956b8 [ 266.039947][ T9930] [ 266.477674][ T9935] netlink: 'syz.0.1168': attribute type 13 has an invalid length. [ 266.485871][ T9935] netlink: 'syz.0.1168': attribute type 17 has an invalid length. [ 267.260339][ T9934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.480394][ T9935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.577527][ T9939] lo speed is unknown, defaulting to 1000 [ 267.688069][ T9944] netlink: 'syz.2.1169': attribute type 13 has an invalid length. [ 267.701769][ T9944] netlink: 'syz.2.1169': attribute type 17 has an invalid length. [ 267.739446][ T9944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.993119][ T9939] lo speed is unknown, defaulting to 1000 [ 267.999569][ T9944] lo speed is unknown, defaulting to 1000 [ 268.297520][ T9964] netlink: 'syz.1.1176': attribute type 10 has an invalid length. [ 268.327776][ T9964] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.378286][ T9969] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1177'. [ 268.483909][ T9972] netlink: 'syz.1.1178': attribute type 10 has an invalid length. [ 268.488077][ T9943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.767996][ T9944] lo speed is unknown, defaulting to 1000 [ 269.152927][ T9985] netlink: 'syz.2.1182': attribute type 11 has an invalid length. [ 269.376145][ T9994] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1185'. [ 269.423353][ T9994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1185'. [ 269.445836][ T9994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1185'. [ 269.876337][T10019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1194'. [ 269.911352][T10019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1194'. [ 269.934612][T10008] netlink: 'syz.3.1191': attribute type 13 has an invalid length. [ 269.939572][T10019] FAULT_INJECTION: forcing a failure. [ 269.939572][T10019] name failslab, interval 1, probability 0, space 0, times 0 [ 269.955958][T10008] netlink: 'syz.3.1191': attribute type 17 has an invalid length. [ 269.956662][T10016] netlink: 'syz.0.1193': attribute type 13 has an invalid length. [ 269.976449][T10016] netlink: 'syz.0.1193': attribute type 17 has an invalid length. [ 269.985222][T10019] CPU: 0 UID: 0 PID: 10019 Comm: syz.2.1194 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 269.985248][T10019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.985261][T10019] Call Trace: [ 269.985268][T10019] [ 269.985276][T10019] dump_stack_lvl+0x189/0x250 [ 269.985303][T10019] ? __pfx____ratelimit+0x10/0x10 [ 269.985328][T10019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.985351][T10019] ? __pfx__printk+0x10/0x10 [ 269.985382][T10019] ? __pfx___might_resched+0x10/0x10 [ 269.985403][T10019] ? fs_reclaim_acquire+0x7d/0x100 [ 269.985437][T10019] should_fail_ex+0x414/0x560 [ 269.985470][T10019] ? alloc_netdev_mqs+0xa3/0x1170 [ 269.985489][T10019] should_failslab+0xa8/0x100 [ 269.985516][T10019] __kvmalloc_node_noprof+0x161/0x5f0 [ 269.985541][T10019] ? alloc_netdev_mqs+0xa3/0x1170 [ 269.985559][T10019] ? snprintf+0xda/0x120 [ 269.985582][T10019] alloc_netdev_mqs+0xa3/0x1170 [ 269.985601][T10019] ? __pfx_hsr_dev_setup+0x10/0x10 [ 269.985619][T10019] ? __mutex_trylock_common+0x153/0x260 [ 269.985649][T10019] rtnl_create_link+0x31f/0xd10 [ 269.985677][T10019] rtnl_newlink_create+0x25c/0xb00 [ 269.985711][T10019] ? __pfx_aa_get_newest_label+0x10/0x10 [ 269.985744][T10019] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 269.985769][T10019] ? rtnl_newlink+0x8db/0x1c70 [ 269.985796][T10019] ? __pfx___mutex_lock+0x10/0x10 [ 269.985832][T10019] ? ns_capable+0x8a/0xf0 [ 269.985857][T10019] rtnl_newlink+0x16d6/0x1c70 [ 269.985884][T10019] ? netlink_sendmsg+0x805/0xb30 [ 269.985922][T10019] ? __pfx_rtnl_newlink+0x10/0x10 [ 269.985970][T10019] ? kasan_quarantine_put+0xdd/0x220 [ 269.985991][T10019] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.986021][T10019] ? nlmon_xmit+0xb0/0x100 [ 269.986042][T10019] ? kmem_cache_free+0x18f/0x400 [ 269.986073][T10019] ? __local_bh_enable_ip+0x12d/0x1c0 [ 269.986099][T10019] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.986124][T10019] ? __local_bh_enable_ip+0x12d/0x1c0 [ 269.986145][T10019] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 269.986170][T10019] ? __dev_queue_xmit+0x27e/0x3a70 [ 269.986203][T10019] ? __lock_acquire+0xab9/0xd20 [ 269.986254][T10019] ? __pfx_rtnl_newlink+0x10/0x10 [ 269.986278][T10019] rtnetlink_rcv_msg+0x7cf/0xb70 [ 269.986307][T10019] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 269.986330][T10019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.986353][T10019] ? ref_tracker_free+0x63a/0x7d0 [ 269.986368][T10019] ? __copy_skb_header+0xa7/0x550 [ 269.986388][T10019] ? __pfx_ref_tracker_free+0x10/0x10 [ 269.986405][T10019] ? __skb_clone+0x63/0x7a0 [ 269.986431][T10019] netlink_rcv_skb+0x205/0x470 [ 269.986457][T10019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.986484][T10019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.986522][T10019] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.986547][T10019] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.986578][T10019] netlink_unicast+0x758/0x8d0 [ 269.986611][T10019] netlink_sendmsg+0x805/0xb30 [ 269.986646][T10019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.986676][T10019] ? aa_sock_msg_perm+0x94/0x160 [ 269.986706][T10019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.986723][T10019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.986750][T10019] __sock_sendmsg+0x219/0x270 [ 269.986775][T10019] ____sys_sendmsg+0x505/0x830 [ 269.986811][T10019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.986849][T10019] ? import_iovec+0x74/0xa0 [ 269.986875][T10019] ___sys_sendmsg+0x21f/0x2a0 [ 269.986907][T10019] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.986972][T10019] ? __fget_files+0x2a/0x420 [ 269.986998][T10019] ? __fget_files+0x3a0/0x420 [ 269.987035][T10019] __x64_sys_sendmsg+0x19b/0x260 [ 269.987055][T10019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.987095][T10019] ? __pfx_ksys_write+0x10/0x10 [ 269.987116][T10019] ? rcu_is_watching+0x15/0xb0 [ 269.987144][T10019] ? do_syscall_64+0xbe/0x3b0 [ 269.987173][T10019] do_syscall_64+0xfa/0x3b0 [ 269.987196][T10019] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.987226][T10019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.987245][T10019] ? clear_bhb_loop+0x60/0xb0 [ 269.987269][T10019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.987287][T10019] RIP: 0033:0x7fa78ad8e929 [ 269.987304][T10019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.987321][T10019] RSP: 002b:00007fa78bc77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.987341][T10019] RAX: ffffffffffffffda RBX: 00007fa78afb5fa0 RCX: 00007fa78ad8e929 [ 269.987355][T10019] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 269.987368][T10019] RBP: 00007fa78bc77090 R08: 0000000000000000 R09: 0000000000000000 [ 269.987379][T10019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.987391][T10019] R13: 0000000000000000 R14: 00007fa78afb5fa0 R15: 00007ffcfb116c08 [ 269.987421][T10019] [ 270.557656][T10008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.601972][T10016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.645088][T10008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.698314][T10023] lo speed is unknown, defaulting to 1000 [ 270.728552][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.767796][T10031] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1197'. [ 270.794549][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.808892][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.829024][T10030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.868161][T10033] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 271.159559][T10045] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1200'. [ 271.182748][T10045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1200'. [ 271.199097][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1200'. [ 271.214965][T10007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.245827][T10023] lo speed is unknown, defaulting to 1000 [ 271.265067][T10022] lo speed is unknown, defaulting to 1000 [ 271.373323][T10047] netlink: 'syz.4.1201': attribute type 21 has an invalid length. [ 271.417250][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 271.440837][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 271.569415][T10054] FAULT_INJECTION: forcing a failure. [ 271.569415][T10054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.626505][T10054] CPU: 1 UID: 0 PID: 10054 Comm: syz.4.1203 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 271.626532][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.626545][T10054] Call Trace: [ 271.626552][T10054] [ 271.626560][T10054] dump_stack_lvl+0x189/0x250 [ 271.626587][T10054] ? __pfx____ratelimit+0x10/0x10 [ 271.626612][T10054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.626635][T10054] ? __pfx__printk+0x10/0x10 [ 271.626673][T10054] should_fail_ex+0x414/0x560 [ 271.626707][T10054] _copy_to_user+0x31/0xb0 [ 271.626731][T10054] simple_read_from_buffer+0xe1/0x170 [ 271.626761][T10054] proc_fail_nth_read+0x1df/0x250 [ 271.626792][T10054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.626823][T10054] ? rw_verify_area+0x258/0x650 [ 271.626844][T10054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.626874][T10054] vfs_read+0x200/0x980 [ 271.626901][T10054] ? __pfx___mutex_lock+0x10/0x10 [ 271.626927][T10054] ? __pfx_vfs_read+0x10/0x10 [ 271.626950][T10054] ? __fget_files+0x2a/0x420 [ 271.626981][T10054] ? __fget_files+0x3a0/0x420 [ 271.627005][T10054] ? __fget_files+0x2a/0x420 [ 271.627039][T10054] ksys_read+0x145/0x250 [ 271.627059][T10054] ? __fget_files+0x3a0/0x420 [ 271.627092][T10054] ? __pfx_ksys_read+0x10/0x10 [ 271.627119][T10054] ? do_syscall_64+0xbe/0x3b0 [ 271.627147][T10054] do_syscall_64+0xfa/0x3b0 [ 271.627170][T10054] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.627193][T10054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.627211][T10054] ? clear_bhb_loop+0x60/0xb0 [ 271.627234][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.627253][T10054] RIP: 0033:0x7fba3798d33c [ 271.627269][T10054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 271.627285][T10054] RSP: 002b:00007fba387c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.627306][T10054] RAX: ffffffffffffffda RBX: 00007fba37bb5fa0 RCX: 00007fba3798d33c [ 271.627319][T10054] RDX: 000000000000000f RSI: 00007fba387c10a0 RDI: 0000000000000004 [ 271.627331][T10054] RBP: 00007fba387c1090 R08: 0000000000000000 R09: 0000000000000000 [ 271.627343][T10054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.627353][T10054] R13: 0000000000000000 R14: 00007fba37bb5fa0 R15: 00007ffdfcf96218 [ 271.627383][T10054] [ 272.126199][T10022] lo speed is unknown, defaulting to 1000 [ 272.310247][T10068] netlink: 'syz.1.1209': attribute type 13 has an invalid length. [ 272.344963][T10068] netlink: 'syz.1.1209': attribute type 17 has an invalid length. [ 272.384643][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 272.396765][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'. [ 272.428360][T10068] tipc: Resetting bearer [ 272.446088][T10068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.613284][T10081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.719818][T10071] lo speed is unknown, defaulting to 1000 [ 272.758197][T10068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.909728][T10068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.093558][T10083] syzkaller0: entered promiscuous mode [ 273.107458][T10083] syzkaller0: entered allmulticast mode [ 273.232302][T10095] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1216'. [ 274.319444][T10071] lo speed is unknown, defaulting to 1000 [ 274.549950][T10107] netlink: 'syz.3.1219': attribute type 13 has an invalid length. [ 274.559192][T10107] netlink: 'syz.3.1219': attribute type 17 has an invalid length. [ 274.579175][T10108] netlink: 'syz.4.1220': attribute type 13 has an invalid length. [ 274.619200][T10107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.654074][T10108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.835486][T10112] lo speed is unknown, defaulting to 1000 [ 274.865609][T10115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.023992][T10108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.170677][T10124] FAULT_INJECTION: forcing a failure. [ 275.170677][T10124] name failslab, interval 1, probability 0, space 0, times 0 [ 275.185190][T10124] CPU: 1 UID: 0 PID: 10124 Comm: syz.0.1223 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 275.185220][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.185234][T10124] Call Trace: [ 275.185243][T10124] [ 275.185252][T10124] dump_stack_lvl+0x189/0x250 [ 275.185284][T10124] ? __pfx____ratelimit+0x10/0x10 [ 275.185312][T10124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.185340][T10124] ? __pfx__printk+0x10/0x10 [ 275.185377][T10124] ? __pfx___might_resched+0x10/0x10 [ 275.185409][T10124] should_fail_ex+0x414/0x560 [ 275.185447][T10124] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 275.185477][T10124] should_failslab+0xa8/0x100 [ 275.185508][T10124] __kvmalloc_node_noprof+0x161/0x5f0 [ 275.185539][T10124] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 275.185575][T10124] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 275.185610][T10124] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 275.185648][T10124] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.185690][T10124] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 275.185724][T10124] ? 0xffffffffa0205540 [ 275.185745][T10124] ? 0xffffffffa0205540 [ 275.185817][T10124] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 275.185864][T10124] ? _copy_from_user+0x94/0xb0 [ 275.185891][T10124] ? bpf_test_init+0x133/0x170 [ 275.185916][T10124] ? xdp_convert_md_to_buff+0x5b/0x330 [ 275.185949][T10124] bpf_prog_test_run_xdp+0x713/0x1000 [ 275.185997][T10124] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 275.186033][T10124] ? __fget_files+0x2a/0x420 [ 275.186070][T10124] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 275.186101][T10124] bpf_prog_test_run+0x2c4/0x340 [ 275.186129][T10124] __sys_bpf+0x4a4/0x860 [ 275.186152][T10124] ? __pfx___sys_bpf+0x10/0x10 [ 275.186188][T10124] ? ksys_write+0x22a/0x250 [ 275.186217][T10124] ? __pfx_ksys_write+0x10/0x10 [ 275.186240][T10124] ? rcu_is_watching+0x15/0xb0 [ 275.186276][T10124] __x64_sys_bpf+0x7c/0x90 [ 275.186309][T10124] do_syscall_64+0xfa/0x3b0 [ 275.186336][T10124] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.186362][T10124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.186384][T10124] ? clear_bhb_loop+0x60/0xb0 [ 275.186411][T10124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.186431][T10124] RIP: 0033:0x7f441f38e929 [ 275.186449][T10124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.186468][T10124] RSP: 002b:00007f44201ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.186491][T10124] RAX: ffffffffffffffda RBX: 00007f441f5b5fa0 RCX: 00007f441f38e929 [ 275.186507][T10124] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 275.186522][T10124] RBP: 00007f44201ff090 R08: 0000000000000000 R09: 0000000000000000 [ 275.186535][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.186548][T10124] R13: 0000000000000000 R14: 00007f441f5b5fa0 R15: 00007fff20e956b8 [ 275.186582][T10124] [ 275.491433][T10105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.506400][T10106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.644884][T10113] lo speed is unknown, defaulting to 1000 [ 275.644895][T10112] lo speed is unknown, defaulting to 1000 [ 275.681540][T10126] __nla_validate_parse: 3 callbacks suppressed [ 275.681569][T10126] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1224'. [ 275.950901][T10113] lo speed is unknown, defaulting to 1000 [ 276.544336][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 276.558652][T10159] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1236'. [ 276.566265][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 276.589102][T10157] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1235'. [ 276.704288][T10165] validate_nla: 1 callbacks suppressed [ 276.704308][T10165] netlink: 'syz.1.1238': attribute type 13 has an invalid length. [ 276.724677][T10165] netlink: 'syz.1.1238': attribute type 17 has an invalid length. [ 276.748380][T10165] tipc: Resetting bearer [ 276.756913][T10165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.005320][T10165] lo speed is unknown, defaulting to 1000 [ 277.015724][T10167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.152850][T10167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.201566][ T120] IPVS: starting estimator thread 0... [ 277.309481][T10175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.331707][T10188] IPVS: using max 26 ests per chain, 62400 per kthread [ 277.865030][T10165] lo speed is unknown, defaulting to 1000 [ 277.868333][T10177] lo speed is unknown, defaulting to 1000 [ 277.886127][T10198] netlink: 'syz.3.1247': attribute type 13 has an invalid length. [ 277.930709][T10198] netlink: 'syz.3.1247': attribute type 17 has an invalid length. [ 278.001451][T10198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.266145][T10199] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 278.288808][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz.0.1246 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 278.288839][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.288853][T10199] Call Trace: [ 278.288862][T10199] [ 278.288871][T10199] dump_stack_lvl+0x189/0x250 [ 278.288908][T10199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.288936][T10199] ? __pfx__printk+0x10/0x10 [ 278.288967][T10199] ? kernfs_path_from_node+0x2c/0x260 [ 278.289000][T10199] ? kernfs_path_from_node+0x2c/0x260 [ 278.289030][T10199] ? kernfs_path_from_node+0x2c/0x260 [ 278.289064][T10199] ? kernfs_path_from_node+0x22c/0x260 [ 278.289094][T10199] ? kernfs_path_from_node+0x2c/0x260 [ 278.289130][T10199] sysfs_warn_dup+0x8e/0xa0 [ 278.289161][T10199] sysfs_do_create_link_sd+0xc0/0x110 [ 278.289196][T10199] device_add_class_symlinks+0x1cf/0x240 [ 278.289231][T10199] device_add+0x475/0xb50 [ 278.289264][T10199] wiphy_register+0x1ba6/0x28d0 [ 278.289331][T10199] ? __pfx_wiphy_register+0x10/0x10 [ 278.289360][T10199] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 278.289403][T10199] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 278.289444][T10199] ieee80211_register_hw+0x33e1/0x4120 [ 278.289486][T10199] ? ieee80211_register_hw+0x1431/0x4120 [ 278.289519][T10199] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 278.289546][T10199] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 278.289582][T10199] ? __hrtimer_setup+0x187/0x210 [ 278.289610][T10199] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 278.289655][T10199] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 278.289722][T10199] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 278.289752][T10199] ? trace_kmalloc+0x1f/0xd0 [ 278.289776][T10199] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 278.289804][T10199] ? kstrndup+0xbf/0x160 [ 278.289849][T10199] hwsim_new_radio_nl+0xea4/0x1b10 [ 278.289884][T10199] ? __pfx___nla_validate_parse+0x10/0x10 [ 278.289924][T10199] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 278.289971][T10199] ? __nla_parse+0x40/0x60 [ 278.289998][T10199] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 278.290033][T10199] genl_family_rcv_msg_doit+0x212/0x300 [ 278.290064][T10199] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 278.290103][T10199] ? bpf_lsm_capable+0x9/0x20 [ 278.290128][T10199] ? security_capable+0x7e/0x2e0 [ 278.290168][T10199] genl_rcv_msg+0x60e/0x790 [ 278.290198][T10199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.290219][T10199] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 278.290268][T10199] netlink_rcv_skb+0x205/0x470 [ 278.290306][T10199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.290330][T10199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.290381][T10199] ? down_read+0x1ad/0x2e0 [ 278.290416][T10199] genl_rcv+0x28/0x40 [ 278.290434][T10199] netlink_unicast+0x758/0x8d0 [ 278.290474][T10199] netlink_sendmsg+0x805/0xb30 [ 278.290516][T10199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.290551][T10199] ? aa_sock_msg_perm+0x94/0x160 [ 278.290587][T10199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.290607][T10199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.290638][T10199] __sock_sendmsg+0x219/0x270 [ 278.290669][T10199] ____sys_sendmsg+0x505/0x830 [ 278.290710][T10199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.290757][T10199] ? import_iovec+0x74/0xa0 [ 278.290788][T10199] ___sys_sendmsg+0x21f/0x2a0 [ 278.290826][T10199] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.290904][T10199] ? __fget_files+0x2a/0x420 [ 278.290938][T10199] ? __fget_files+0x3a0/0x420 [ 278.290999][T10199] __x64_sys_sendmsg+0x19b/0x260 [ 278.291024][T10199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.291074][T10199] ? rcu_is_watching+0x15/0xb0 [ 278.291108][T10199] ? do_syscall_64+0xbe/0x3b0 [ 278.291144][T10199] do_syscall_64+0xfa/0x3b0 [ 278.291173][T10199] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.291201][T10199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.291225][T10199] ? clear_bhb_loop+0x60/0xb0 [ 278.291255][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.291277][T10199] RIP: 0033:0x7f441f38e929 [ 278.291305][T10199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.291324][T10199] RSP: 002b:00007f44201de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.291348][T10199] RAX: ffffffffffffffda RBX: 00007f441f5b6080 RCX: 00007f441f38e929 [ 278.291364][T10199] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 278.291379][T10199] RBP: 00007f441f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 278.291393][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.291406][T10199] R13: 0000000000000000 R14: 00007f441f5b6080 R15: 00007fff20e956b8 [ 278.291443][T10199] [ 278.749307][T10197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.777976][T10177] lo speed is unknown, defaulting to 1000 [ 278.786189][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 278.831347][T10202] netlink: 'syz.0.1246': attribute type 11 has an invalid length. [ 278.858659][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1246'. [ 278.871145][T10202] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1246'. [ 278.910165][T10196] lo speed is unknown, defaulting to 1000 [ 279.045834][T10211] netlink: 'syz.2.1250': attribute type 13 has an invalid length. [ 279.053905][T10211] netlink: 'syz.2.1250': attribute type 17 has an invalid length. [ 279.087523][T10211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.151690][T10202] pim6reg1: entered promiscuous mode [ 279.171253][T10202] pim6reg1: entered allmulticast mode [ 279.254792][T10200] lo speed is unknown, defaulting to 1000 [ 279.536186][T10200] lo speed is unknown, defaulting to 1000 [ 279.552365][T10211] lo speed is unknown, defaulting to 1000 [ 279.631320][T10196] lo speed is unknown, defaulting to 1000 [ 279.909358][T10210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.987765][T10229] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1257'. [ 280.229813][T10211] lo speed is unknown, defaulting to 1000 [ 280.642931][T10239] FAULT_INJECTION: forcing a failure. [ 280.642931][T10239] name failslab, interval 1, probability 0, space 0, times 0 [ 280.659079][T10239] CPU: 1 UID: 0 PID: 10239 Comm: syz.2.1260 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 280.659110][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.659123][T10239] Call Trace: [ 280.659131][T10239] [ 280.659140][T10239] dump_stack_lvl+0x189/0x250 [ 280.659170][T10239] ? __pfx____ratelimit+0x10/0x10 [ 280.659197][T10239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.659222][T10239] ? __pfx__printk+0x10/0x10 [ 280.659258][T10239] ? ref_tracker_alloc+0x318/0x460 [ 280.659281][T10239] should_fail_ex+0x414/0x560 [ 280.659317][T10239] should_failslab+0xa8/0x100 [ 280.659356][T10239] kmem_cache_alloc_noprof+0x73/0x3c0 [ 280.659381][T10239] ? skb_clone+0x212/0x3a0 [ 280.659408][T10239] skb_clone+0x212/0x3a0 [ 280.659433][T10239] __netlink_deliver_tap+0x404/0x850 [ 280.659475][T10239] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.659505][T10239] netlink_deliver_tap+0x19c/0x1b0 [ 280.659535][T10239] netlink_unicast+0x72f/0x8d0 [ 280.659573][T10239] netlink_sendmsg+0x805/0xb30 [ 280.659613][T10239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.659645][T10239] ? aa_sock_msg_perm+0x94/0x160 [ 280.659678][T10239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.659696][T10239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.659725][T10239] __sock_sendmsg+0x219/0x270 [ 280.659754][T10239] ____sys_sendmsg+0x505/0x830 [ 280.659793][T10239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.659834][T10239] ? import_iovec+0x74/0xa0 [ 280.659863][T10239] ___sys_sendmsg+0x21f/0x2a0 [ 280.659898][T10239] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.659968][T10239] ? __fget_files+0x2a/0x420 [ 280.659995][T10239] ? __fget_files+0x3a0/0x420 [ 280.660034][T10239] __x64_sys_sendmsg+0x19b/0x260 [ 280.660055][T10239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.660102][T10239] ? __pfx_ksys_write+0x10/0x10 [ 280.660124][T10239] ? rcu_is_watching+0x15/0xb0 [ 280.660155][T10239] ? do_syscall_64+0xbe/0x3b0 [ 280.660188][T10239] do_syscall_64+0xfa/0x3b0 [ 280.660212][T10239] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.660238][T10239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.660258][T10239] ? clear_bhb_loop+0x60/0xb0 [ 280.660285][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.660316][T10239] RIP: 0033:0x7fa78ad8e929 [ 280.660340][T10239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.660357][T10239] RSP: 002b:00007fa78bc77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.660377][T10239] RAX: ffffffffffffffda RBX: 00007fa78afb5fa0 RCX: 00007fa78ad8e929 [ 280.660392][T10239] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 280.660405][T10239] RBP: 00007fa78bc77090 R08: 0000000000000000 R09: 0000000000000000 [ 280.660417][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.660429][T10239] R13: 0000000000000000 R14: 00007fa78afb5fa0 R15: 00007ffcfb116c08 [ 280.660460][T10239] [ 280.949361][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1260'. [ 281.421684][T10249] netlink: 'syz.1.1264': attribute type 13 has an invalid length. [ 281.429547][T10249] netlink: 'syz.1.1264': attribute type 17 has an invalid length. [ 281.526496][T10249] tipc: Resetting bearer [ 281.556220][T10249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.622879][T10251] lo speed is unknown, defaulting to 1000 [ 281.659281][T10249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.708255][T10261] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1268'. [ 281.740588][T10261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.780403][T10249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.784892][T10261] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN PTI [ 281.802019][T10261] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 281.810451][T10261] CPU: 0 UID: 0 PID: 10261 Comm: syz.3.1268 Not tainted 6.16.0-rc4-syzkaller-00993-g59f44c9ccc3b #0 PREEMPT(full) [ 281.822528][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.832594][T10261] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 281.838438][T10261] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cb b9 27 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 ac b9 27 f8 4d 8b 24 24 e8 e3 48 [ 281.858057][T10261] RSP: 0018:ffffc90002ed72f0 EFLAGS: 00010202 [ 281.864141][T10261] RAX: 0000000000000083 RBX: ffff88802c648e20 RCX: 0000000000000002 [ 281.872151][T10261] RDX: ffff88806c8e9e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.880135][T10261] RBP: ffff88802c648e37 R08: 0000000000000000 R09: ffffffff89dd40a6 [ 281.888113][T10261] R10: ffffc90002ed75c0 R11: fffff520005daebe R12: 0000000000000418 [ 281.896095][T10261] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff110058c91c6 [ 281.904071][T10261] FS: 00007f8e58fec6c0(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 281.913020][T10261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.919611][T10261] CR2: 00007f44201fef98 CR3: 000000007d808000 CR4: 00000000003526f0 [ 281.927605][T10261] Call Trace: [ 281.930890][T10261] [ 281.933832][T10261] nexthop_get_nhc_lookup+0x1af/0x400 [ 281.939235][T10261] fib_table_lookup+0xf26/0x16e0 [ 281.944209][T10261] fib_lookup+0x1c5/0x440 [ 281.948552][T10261] ? fib_lookup+0x76/0x440 [ 281.952978][T10261] ip_route_output_key_hash_rcu+0x2fb/0x23a0 [ 281.958986][T10261] ? ip_route_output_key_hash+0xde/0x2e0 [ 281.964626][T10261] ? ip_route_output_key_hash+0xde/0x2e0 [ 281.970268][T10261] ip_route_output_key_hash+0x1b9/0x2e0 [ 281.975836][T10261] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 281.981909][T10261] ? register_netdevice+0x1712/0x1ae0 [ 281.987290][T10261] ? __asan_memset+0x22/0x50 [ 281.991889][T10261] ip_route_output_flow+0x2a/0x150 [ 281.997025][T10261] ip_tunnel_bind_dev+0x281/0x7f0 [ 282.002062][T10261] ? alloc_netdev_mqs+0xe07/0x1170 [ 282.007183][T10261] ? __ip_tunnel_create+0x3ba/0x560 [ 282.012397][T10261] ? __pfx_ip_tunnel_bind_dev+0x10/0x10 [ 282.017954][T10261] ? __ip_tunnel_create+0x41b/0x560 [ 282.023170][T10261] ? bpf_lsm_capable+0x9/0x20 [ 282.027865][T10261] ip_tunnel_ctl+0x58f/0xc30 [ 282.032459][T10261] vif_add+0x335/0x1420 [ 282.036626][T10261] ? __lock_acquire+0xab9/0xd20 [ 282.041484][T10261] ? __pfx_vif_add+0x10/0x10 [ 282.046102][T10261] ip_mroute_setsockopt+0xe12/0xf60 [ 282.051322][T10261] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 282.057062][T10261] do_ip_setsockopt+0xf11/0x2d00 [ 282.062012][T10261] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 282.067396][T10261] ? aa_sk_perm+0x81e/0x950 [ 282.071919][T10261] ? __pfx_aa_sk_perm+0x10/0x10 [ 282.076787][T10261] ? __lock_acquire+0xab9/0xd20 [ 282.081648][T10261] ip_setsockopt+0x66/0x110 [ 282.086161][T10261] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 282.092060][T10261] do_sock_setsockopt+0x257/0x3e0 [ 282.097102][T10261] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 282.102653][T10261] ? __fget_files+0x2a/0x420 [ 282.107256][T10261] __x64_sys_setsockopt+0x18b/0x220 [ 282.112478][T10261] do_syscall_64+0xfa/0x3b0 [ 282.116992][T10261] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.122203][T10261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.128273][T10261] ? clear_bhb_loop+0x60/0xb0 [ 282.132950][T10261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.138844][T10261] RIP: 0033:0x7f8e5818e929 [ 282.143272][T10261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.162893][T10261] RSP: 002b:00007f8e58fec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.171309][T10261] RAX: ffffffffffffffda RBX: 00007f8e583b5fa0 RCX: 00007f8e5818e929 [ 282.179283][T10261] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000009 [ 282.187253][T10261] RBP: 00007f8e58210b39 R08: 0000000000000010 R09: 0000000000000000 [ 282.195229][T10261] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 282.203204][T10261] R13: 0000000000000000 R14: 00007f8e583b5fa0 R15: 00007fff920e1bb8 [ 282.211188][T10261] [ 282.214220][T10261] Modules linked in: [ 282.219896][T10261] ---[ end trace 0000000000000000 ]--- [ 282.237489][T10261] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 282.268141][T10261] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cb b9 27 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 ac b9 27 f8 4d 8b 24 24 e8 e3 48 [ 282.288010][T10261] RSP: 0018:ffffc90002ed72f0 EFLAGS: 00010202 [ 282.289076][T10249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.296273][T10261] RAX: 0000000000000083 RBX: ffff88802c648e20 RCX: 0000000000000002 [ 282.313276][T10261] RDX: ffff88806c8e9e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.321283][T10261] RBP: ffff88802c648e37 R08: 0000000000000000 R09: ffffffff89dd40a6 [ 282.329259][T10261] R10: ffffc90002ed75c0 R11: fffff520005daebe R12: 0000000000000418 [ 282.338421][T10261] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff110058c91c6 [ 282.346669][T10261] FS: 00007f8e58fec6c0(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 282.356252][T10261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.362996][T10261] CR2: 00007fba37b84338 CR3: 000000007d808000 CR4: 00000000003526f0 [ 282.371600][T10261] Kernel panic - not syncing: Fatal exception [ 282.377995][T10261] Kernel Offset: disabled [ 282.382317][T10261] Rebooting in 86400 seconds..