last executing test programs: 3.979300418s ago: executing program 3 (id=2429): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000180100"/20, @ANYRES32, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, r3, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x10c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xac, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x8, 0x7b, 0x1}, {0xa1e, 0x5, 0xe9, 0xca0}, {0x5, 0xc, 0x8, 0x7f}, {0x8, 0x5, 0xfd, 0x3ff}, {0x2, 0x0, 0x1, 0x1}, {0x5, 0x8, 0x3, 0x6122}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}]}, 0x10c}}, 0x4810) 3.751417259s ago: executing program 1 (id=2430): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff000000007e0000000c0099006d910000"], 0x20}}, 0x4000054) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (fail_nth: 5) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.278084153s ago: executing program 3 (id=2433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000020, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.187475638s ago: executing program 3 (id=2435): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x15, 0x4006}, 0x20) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xdf505db1a3d84e25}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) 2.990944982s ago: executing program 1 (id=2441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d4376084acb350290000000ff0700a2608cc74a", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7, 0x2, 0x0, 0x0, r0, 0xffffffff, '\x00', 0x0, r1, 0x5, 0x2, 0x1, 0xe}, 0x50) r5 = socket(0x10, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) getsockopt$netlink(r5, 0x10e, 0xa, 0x0, &(0x7f0000000000)) 2.875439657s ago: executing program 1 (id=2442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000180)=0x2, 0x96ef4a69167161c5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0df25"], 0x10}, 0x1, 0x0, 0x0, 0x140000c4}, 0x4000004) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)='\t', 0x1}], 0x1}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xfff3}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0x4, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4ee0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r11, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) sendfile(r11, r12, 0x0, 0xffffffff000) connect$llc(r11, &(0x7f0000000600)={0x1a, 0x204, 0x7, 0x5, 0x7, 0x8, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.291493184s ago: executing program 3 (id=2445): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='xen_mmu_flush_tlb_multi\x00', r4, 0x0, 0x53ec}, 0x18) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffd8ee, @hyper}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000c}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x4000400) r8 = epoll_create(0xfff) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$packet_int(r9, 0x107, 0xe, &(0x7f0000000080)=0xfff, 0x4) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) 2.290920614s ago: executing program 2 (id=2446): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x68, 0x1, {{'rmd160\x00'}, 0x100, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52b9fbdc"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) (fail_nth: 5) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) 2.238355014s ago: executing program 4 (id=2447): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) (fail_nth: 5) 1.402682792s ago: executing program 1 (id=2448): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000040)=@udp=r2, 0x1}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x6, 0x0, 0x4e, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_key={0x9, 0x9, 0x1f8, 0x0, "b195a674878ced2e78762551fbb264e342d9763a8a025ac4ab212a546f3a8f76faffeedfa729f61ebc593c6ac6d8e741bb38dcf0155a6603e4c9431c21886e"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_sec_ctx={0x1f, 0x18, 0x0, 0x1f, 0xea, "a68c7c541df4ec905c6e429167fadd9e4ddf8382975f94ae8559c0fde751f56d654fe233870c09de69a5ff97d2f44fa23df3cbe200ea890eedcb1326e88d4d6f205c6b971b4fe538e59c6284b0608823821c48325637210b63a78363e6c69982c55ad80799a1da04a2907b7c9c4407662fb78fea3d02bf55452b6c8af2042cbaac942af9e33e62a0f37fa9bf69013cbbf98d16c3415a5628055b57e8a42767b09c9e01817c145fcefa099965fbc652ad7595a7a1565fc9a424762427f42ae6329a7c44b45ec279615eeb5e0037f4b95ab4e97b7178f50f6503f81f47a6c71be0d023ee5242dda0fd24b3"}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_filter={0x5, 0x1a, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x26, 0x14, 0x10}, @sadb_x_sec_ctx={0x19, 0x18, 0x5, 0x81, 0xb9, "2812b72215d74943426275b6c3aadc020cb8c27fd58e409d71bdbb91a2ddc53fe1769a76000622cb31be9d083ea102374112e8140d4e39ac70ee4f4207ec412bc624d6bffbd5085e97660d18e2820561cb60711c1c9ac0c27f0efb74ee371061539bd1d09e22d3c8d06bf3a49916fbeba2569cc22f38ebbf8087ecbacc65476439f1952a4e042390382e7969a2f45350c979566dfb0cfa14000593985cfe2ded61c652e5a591ff2827c15bc9ca5e11cdc2de7fb29ebcdd0c9f"}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_x_nat_t_type={0x1, 0x14, 0xe}]}, 0x270}}, 0x8000) socket$kcm(0x11, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000005c0)={0x0, 0x0, 0x10}, &(0x7f0000000600)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000640)={r6, @in={{0x2, 0x4e22, @loopback}}, 0x28000000, 0x9, 0x800, 0x7f, 0x5b, 0xbc0f, 0x9}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x36}, 0x28) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r8, 0x1, 0x70bd2a, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040080) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x5, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x3aa, &(0x7f0000002080)=""/4102}, 0x94) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r8, 0x10, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) write(r3, &(0x7f00000002c0)="23000000010006", 0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r7) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r12, &(0x7f0000009580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000000000000060000000800000010000200000000a40000fa0f5a393600000092040000"], 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008140)=ANY=[@ANYBLOB="10000000000000003a00000004000000105c7b00000000000100000003000000"], 0x20}}], 0x2, 0x40840) 1.401876079s ago: executing program 4 (id=2449): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x4000, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES32=0x0, @ANYBLOB="0000000000b47d619900000000000014000100fc000000000000000000000000000001000000000000000000"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x6e566000) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000e00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) socket$tipc(0x1e, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$int_out(r5, 0x5460, &(0x7f0000000080)) unshare(0x2a020400) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.311622142s ago: executing program 2 (id=2450): socket$kcm(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x7d, "5b8c33f38d491de19fea6f635f08d3a6efcec501481ec7e84ae3687c593ec12b245156267c9b13790458dec44b7058fac74d04f76c424226ac2c5f258aa3726e5d881208bd77357e717d95ee74cf1787cd01336b69e9ee1f9ab96e8ae32ba0bacbaee44f91c7ff1aad62cf55538ef077be5bc92419a876d051d53b80f4"}, &(0x7f0000000100)=0x85) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r0, 0x200}, 0x8) r1 = socket$kcm(0x29, 0x9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x28}], 0x1}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="140000000b63d2030000000001000724dc60", 0x12}], 0x1}, 0x2000c000) 1.294038665s ago: executing program 2 (id=2452): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e20, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18001b010000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xa8, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f00000001c0)=0x4, 0x4) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) (async) clock_gettime(0x0, &(0x7f0000000200)) (async) ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) (async) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 1.215545723s ago: executing program 0 (id=2453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@ptr={0x10}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x4}]}]}, {0x0, [0x61, 0x0, 0x61, 0x196a988a17bc0558, 0x30, 0x61]}}, &(0x7f0000000140)=""/114, 0x50, 0x72, 0x0, 0x1c8, 0x10000}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0xfe97, [{0x40105, 0x1, 0x5}], 'M6U'}, @datasec={0x7, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000001b00)=""/3, 0x45, 0x3, 0x1, 0x5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000981885af249e09dcaf554256b0faa503000000000000003d093cd9417741f9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f00000001c0)="571d", &(0x7f0000000280)=""/49}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b06b8ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000600)="a39de0103385", 0x6}], 0x2}, 0xc000) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = epoll_create1(0x0) r7 = socket$unix(0x1, 0x1, 0x0) close(r7) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x8002a000}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000008c0)={'filter\x00', 0x1000, "a35fda58e40541b77679609bd8bc8d9f2e1092c2e022c5fe3ae3e792278abdf996bed8074182f8be09b432e897ab241f0ce59673e3eab03435a572770c915bbf592d5863dee919da06a71d0470528e2d56648bc826cc827a2e7630eae69f7c0a20f2b2de18dc8cbf9471f59ee978ecd8cd9e4fe365952e024834bd2beb083c34bd2ad3a485a4dac07af66dbace7e2bc9332b1f55e852488fa8f2898f3e84a7171b6ed7ce78aa6ff5304e7c985e65c7838b71ddca3cd3432ecabf529b8eda9a89ed034efdb91447602a3f0b06b8f08f238233be861aac64d0134122f6e0d0b0fe002ea8d867ee2b4e4863998279ea880fcc13386aaf7175070ba32c41aa3eabf477dfbd3cbbb046fc89b38a7d7b388017c6f4153ac460c2423214dfd21676a64856360f6679a0b995380826c7bfceae7cf527c4d810ccd43ea650aff8fc42d015e45d2dfbcdcc29392953d23365564ff3ea696c74eb4c4d6e07a1617978fec03373b538e2efb8e2a98920760ff286f58ff0aa3654dbc4454d2fb0b8066456db5d6f6df9ca0447aedf849c2b2d1cfb518504b05ff72c97f9cc7996980da8ec7ae2105f804871740ad66c8c07fe064ad428f94e50b3965925f5c90e33af57e90304e4d8c43c76f973033212b3c97f06292e984676266618294fa930ecc467a108984bcc4ddfb862b932ae56fba005c2a1837ef1bfb39642f9fcfed0940b5f14790767fdd931a055dc0b2cdbeeea53fae36b7f1ffba9f3165f5034ec9559830c8b5ff672f865e3b3cbb1ee164b289090fbcedd68770105d3f5764729dab1eeef385c1aa9c3997037f0e12f2f4c848a32ebf2cfacbd7f7bc228389e917210cb93c8f352c5c251792d04c4e8683c3935069def4405771804b4b71d8c70b39d99af7f8c4ec9b178d6d3824e0262984fb28976e74206e0dcb4b47be484f71338be77bbaab25d133de04671ff73969a085f3719d0469b27a714f4ee384c9d77ee9e8255f41aac2d69902219b966bfac1c2744c2d1a333bc29d1a4fbbb37f03e9ed1bb3ae6586beafccb40d8a34516eabb43926a3cc46b21353200f1622538e63a24add9bdf156bf385e06382a4a7a69f2702698057845c81605e484a7ca7f777cc4ed84d06fce1db4bd3a768a8f3ff24d49132f0d93b4f812114884dff3110d2cf8408efbfc8641deef30223ddae0ac549c76fe056f5213730ae53efb845b71f6c3352762d18de9782fc1bfb2eb290eee494caa8fe767ff86b13c6f37d9c83a52afdc4ff425546cf1b9bd49ef25b238726b472c75b313a2c244ab11299fb25a9491829e5b446f01aea8deeda538572a798f0e6aa5141fd1ff8a2eb579a0d5101307206b8d857e7d1660f79d7859c2ac69749312469e5100092dd56f486a1ec5117302a1313e9cfdc07180838057631d5a9923403f97b8631793c40d5139de2493a7bd757b9b44b392a93cd65eee2c37ec84f9d5d30b4209559283fb01397d29c0dc742b7cdd3d813e0f78e8b6ba7e49f683ee1b1c16e5f583cce68920ba7c045aee52ac7bd9e093b074cb7b3236efb112ee99c30dedbc3ad821e92c200e6eeb0b69167d66034984b4c8e7f16ad67346c4f0a7a1a781cd36dc8e8f11f39f808292fad4aba001dfcde2397ded5e4d25f0cbe3abaa2d5c9c5571c4ae34911800642661a4a4471f77ac12f9348c4158eb36e5c77c756d0802ee7d71d1168c36aa68f60c5701bc6ad6704b2d8ff39de1dd0e461aa40fb093fd9782cb171429e90c5f4519f420600f50c9d7dcb02472aa026e779be9eae4381f79b274ed6408776a9cdcd254cef39cabf6445d05c481e8d4e784cac08ebb16c2ecc887987523fb651bd56edaedf08039ab9977ab3d61c1e59951059e45ceaf996652e20a3420a6f81c1bb2bed5748801e2c0c4a58acf37a43747ed598e70e6fb16c5b0662da06b1c29d6c0c856b563acf499de5914769a77605c32011bf6abcb5f89994d8ebcea4eef0bb1747711759f81f3170519a13392cecca629e13f55f9f2df2bbd5de16f5a51e80c72a7a6b39d7b45a1e6ec0f72c555009c5fa9139932eab7f8372f109ccae1fa1befdf47fbf17b1e3f308302b54598b142b7e6e9246a5c22879cc6cc651c30be2269983504ffee504015073adb217fcb8d456ad373b1120d82eed9c3240597fffa3a442f5439ce219161929c60a2e32bea3df9e2126eaa8073127e6556f9e8eea4364e143994d94dbf2411cfe5a7ce8f6980208c418042d86fe7f4a78086f70c54a7cf846bad5ad7d2668a8b84c453b53ef3fd6c2ceb197584d1f6c3ad5b37df0562d429b5998ec00287c51ccda208adcf969c62f76c02871cd95b4df4c4383dd15d7ef9332c0a6e028103483a334473f9cd918ef76a224ddaa025d31d37ecbc1f52a5bb20e9a966aaa6f093d0216d4081cf7f9463ee769c2fcd07fb7d5ed0bf171ac6ac5c1ee7b39fe9a20684e38ed2a1bc96611431ce0aad5024238338d79286ee58e7c9f24d96a075fb13f155e7136acc96f5d15a71b3ff75a6203b3f48e06f318d894a20c40b420e3032ae5bea5f7c6fa84d3142b63ff3a8eec847c899f082ecfa64b883bad80f66b06042653f0293b4e6e111d017a464d44dfadc45ede78389e12fdc0b571f89935a9faaeefe92f63e8b07a4e460cec4376f02f620a0250a0de69a182230767a4852df9895df029f931deaeca162155978aac081e8787788bd861c9ba2067a325a3a1c338d153edb172c2e939a7fed7936a1aa41564ef731cf411990d92ae7f364705d78557fda16aec28bb636ae5acdd8465cb0f9f82d09d884e241588754f64344a173deba02c132117178bca780002ea68d5474ee404719ce0b009524e50fc7f257b551057dbc682dade0bbd17854fd576a6d433ef38511734a934ca01299eb8418e59040e540194526bc35d8bc43721fccfc9056064f5cb7a33eac61f57077aaa30edf7adba768d61fce14a54274d633167d7223616c2ce9eae1002157b96b0e291c5b117a2dee5c55e1ee19d90e63567fa442eef8cc3b6ddf417206f13056d4cfa5da4b8b6303eff909c3a3a389f9aea9d880838438eea8577ec5ee22396b4890685078e1f7a849c89dde7b75622701bba32a9a6ae5aa9b98dbed71515304c2256f940c8dea2f3c6e05a94eafb8ea281db8af34853cebd7782544f7b1e292f413ffb9a7c8c3a63b7c4f43dfa32d51913866ab1b8c603f2b449d822aaa020477e0c099e7e80ed8a8c57623e3ff86359a108fa20e24d062234d968a227b1e4491278cdb84c0c305a5d73909e9cfe0a0e70276b55057ff06c6a245a3e877a6e579a3af8b63f7c3e5bdcbd40db70f46949a2edce57200caff509f111bab45b770e9256c64868d2e0322bb4552b320cd608b4969643c80abba77a776a5fa5ce83e9505da8fa26b6874889f22f7b2f9991e1f1c983ecbce785d68a87cc39bb30a3a59f00e188317391ecfb927956a53f6876624d65538fc6ad9d825d4f4fd0408bcc6aca9a1bd90a871b2407c3bbb3689c306b9460fb9169ad1c954913520c9f80bc9c0b398b2d41859d5c4198759512a8d5375fc77302f854ac3d71e56bd11fe686ec4c67ce9f6a38d6dbede1d6fa3e0a3afb8370f9018b750f1389ea10ad663f69212650f7c25d293edd98445e5ef5364a1422084088e9848e8e62fc05edf1324425ae131b8118910783e5eed24e8a54c73cd179eccaa1191f1be61f8f2c7d639ec5080e2632f68f7ad315be393ff430edb5768aa580c9fa24eb507e5654d0c527871daa9497d9af0e133dc4e623dce070b92963096f1c71f17c74c84ed227143c22dfb121973374f7d36bd220510893d51d663327af0442209b1ba49ed24bf04b08280e7d065eac72eb914edce0b675f3b6bef98998acc1651f3b2832cec8d5e92ac93929b1d1a89cbd31735d9aac2a6b4a241371deac2c0b1548a08a993bc721ebbc6745928d7ce1260b599cb2039ff2311ef60e6cfa13f2549ac506fc3a8a3c91e4c439c7b47f3bef7e1ed50c3c08b144bc29a94b910aa0b121e7cf7c8824778a0fbc84ccc34d4c4372a0e648b31a55ca806fcbd1851b55516c1899726ed1c2d3367fe86da82b95668e145f879fc70497cf38f0633918b4543bb7d5eb144d5366732ed6a1c11447987bff0b545eef355ef262b014984609326d7c5c6082347aabb1df92859d685ebebd4039334b70b729f136e12e47387ef8f526868bd807363bd3beabfa9f366dd4e036d69bb844b4e1ae7bd687b20616fa45e0f49b649fd6516fb910301ff54b574eb647dc60aac7a2aea5f60147b82314896b2e9e3e41c96c3bbc44e5609927ad9eaf55c9f1a2397f411fe70c401b0f4e755b29ed4dcffaccdb3adf18f40547fa2856787f887ae5c0f2d0659364c1147502c02b748cf8a4cc7e4746fad13e56f259a77ce2155d5bd75172bf7d216f8abe38de82062f49f692225eff361a5bf743333312c78ca9cd56443f7173d2a74f1f509ec1c5b708f83af8b70b4d9c67f65ca88a16db216e51757ec3a7b0365f92ba8481dd0c969304d3620de3c8b5afc9ff113fbad6c559615c259e9a339eac8444de4c7ca6a6da45cf281779e7bdc20b94a72e567accc5bcacc6894f65f4b421ce53469ba750efcbc29c4313a036c01954cf3c04c18be5490fb479182cb21161c02f8d987ee0acdda763d04d29864f8b9ef6a9cc2722135f2faf535b5927913433422d8191ba4cba617dce1645b8c306909d424be0634186a9b654c37bda592483225b2531457195bf0a1c92374c017e45e8506ac79ee842d8efe015f316ec43af92e440b8a94739183e97054cfa12959617c5908596217b159830bbf95a1ca092084a2f5d41b93ba21a8df725e30e86cd3e259b0dde784db46492029c484d29283477f69f0fa8f85121f3907b0d82a3155b7aca9016ec6d95332def78e41af12607aab229a8982ca7cc0dfc426f241302693dd40c7dbb6204f8188ab3006226374c8d097ab8102c3fdb9d3b107a4c5cadbd6e9aea86863ece254c57bbe63ff286c11bac9705f680faef470ea59510d02f0058c0d3efa7c6cede54fe8452053870b57d35a43e684f32ee4b5dea9f9576247a28b939d67f3e58dd5455d84bcfbd5c8181edb07039a2f662c694e36125b063496a3785ec1d144454f02de9ef6f25f7b116ee990958547e8534d5769c4e89d24ee8ae425ae2b68a2825a35567f9510af141b2ee4580ee56406749bffe9206c8e880b9b7c8378a3e8280116bf70783898d599a28068344cbfbbb9cd3caaf3f72cfb15a1bfc5b8049d3e170b1da8840dbf3dd70f9da0d8e9ff4326409c4db5e34591a723ec375ee70d74d71dee9be4363912af38b0575e66acc0366172af6cecec163683ae90985aaf3834d71601cf6e12f9a6b218d9b6990cc19151d5bb02f13c68bf261f07752a699798aad521955ae7b7d0f67be3566fed6483cac466d99ef9f1be7f269eb1505cc2da142aeb153d96b15d00a19a231da9bf0f48c9865248c8886536995c939577f7ae35704d2e5dff0d1d91822b9c488149229a4297afe1ca17d4e10bc6887f3c1d08e0d17d081dbffc08a689f054434583e6b5c186e99fe5d3d22162fdc3aa4bb13d31409132529240dc20f295de6845b14b75d6d754d7be9f8213900495c24bc01beb3b01e4ed257106a03533563cee0e93e7ac4601e58a18463071b552316c0a02bbe16757d567e8867c3f80f1808fede7364dd707b81993c38d203532a5b0cde9fae54441f0336b80267e3d16ab79e83fe5af41322525bfa2a821dfb30accebb8209284cd636b"}, &(0x7f0000000000)=0x1024) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x20000000000000cd, &(0x7f00000026c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) 1.159677396s ago: executing program 2 (id=2454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r1, 0xe985e4df3848afb5, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x24}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.143018367s ago: executing program 2 (id=2455): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x15, 0x4006}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xdf505db1a3d84e25}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) 1.081596421s ago: executing program 1 (id=2456): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@dellinkprop={0x20, 0x6d, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x1, 0x2}}, 0x20}}, 0x0) accept4$netrom(r1, &(0x7f0000000080)={{}, [@netrom, @remote, @rose, @remote, @netrom, @default, @netrom]}, 0x0, 0x0) 1.027496239s ago: executing program 0 (id=2457): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x20000000}) (async) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) (async) getsockopt$netlink(r3, 0x10e, 0xa, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a80100001900010000000000000000001d010900500011"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async, rerun: 32) close(r4) (async, rerun: 32) shutdown(r3, 0x0) close(r2) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@local, @broadcast}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x439, 0x0, 0x2, {}, [@IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x28}}, 0x0) 901.791026ms ago: executing program 4 (id=2458): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e0004000280080005", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close(r6) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 900.275657ms ago: executing program 0 (id=2459): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002e40)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {}, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (fail_nth: 6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000001e568af11e00", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) 781.077507ms ago: executing program 0 (id=2460): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x15, 0xa, 0x5, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200020c0}, 0x48000) r1 = socket(0x2, 0x3, 0xff) r2 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r3, 0x3}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r4, 0xd3) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r6, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r5, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000dc0)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYRES32=r5, @ANYBLOB="038a69934e8306ea2baec25cac89465849c8ff7ea8cdd60b25d5910ac602b9f297d50a00000000000000000000d42c2a1318574b44", @ANYRES32=r8, @ANYRES64=r7], 0x20) shutdown(r1, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x44881}, 0xc4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="189500"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe8) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r12, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r12, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) sendmsg$802154_raw(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000400)={&(0x7f0000000300)="dcad37f62253e725418ad1ccb91690023f3532a76348ae4b7fe730e57f30dfeeb080c6efdfe339f67e19fdc2d55e506d19e6a222f217db61531e438774a438254163e52638c23f3a9a12aeb52a0e21a21f25f477ac290071adf2ce6d51c0f09282061c3adee16d0b1e7ff8193e3bf6c91b586bccdd7ca31c7c596f82d645844bf9ff78f7b079691cd06dad92ce", 0x8d}, 0x1, 0x0, 0x0, 0x4000}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r10}, 0x10) 780.187495ms ago: executing program 1 (id=2461): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept4$netrom(r1, &(0x7f0000000080)={{}, [@netrom, @remote, @rose, @remote, @netrom, @default, @netrom]}, 0x0, 0x0) (fail_nth: 6) 572.691566ms ago: executing program 3 (id=2462): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (fail_nth: 7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9f21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0x0, 0x80}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xd4, &(0x7f0000000440)=""/212, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 506.276181ms ago: executing program 0 (id=2463): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffe8, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000008020"], 0x24}}, 0x4008001) 458.176865ms ago: executing program 3 (id=2464): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="06000000040000000200000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000005000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='tlb_flush\x00', r2, 0x0, 0xfffffffffffffdfc}, 0x18) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x24) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x6c014) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 455.711287ms ago: executing program 4 (id=2465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400c6f2fc6d09"], 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 454.815906ms ago: executing program 2 (id=2466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = accept(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000000c0)=0x80) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) 108.773409ms ago: executing program 0 (id=2467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001a40)={0x34, r2, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 64.020878ms ago: executing program 4 (id=2468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0xfc, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 0s ago: executing program 4 (id=2469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000600)="a39de0103385", 0x6}], 0x2}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): : Opcode 0x0c1a failed: -110 [ 397.923004][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 398.763403][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1185'. [ 399.969250][T11411] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1188'. [ 401.438802][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 402.490572][T11465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 402.937010][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 403.018287][T11456] mpoa:mpoad_close: () going down [ 403.215499][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 409.660600][T11584] mpoa:mpoad_close: () going down [ 412.488275][T11634] mpoa:mpoad_close: () going down [ 412.720008][T11650] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.727544][T11650] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.052759][T11650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.114077][T11650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.542484][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.558359][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.654721][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.664362][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.556396][T11703] mpoa:mpoad_close: () going down [ 416.692948][T11718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1254'. [ 419.448371][T11772] mpoa:mpoad_close: () going down [ 419.928202][T11778] mpoa:mpoad_close: () going down [ 420.532172][T11804] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1271'. [ 422.397322][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 423.014707][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 425.413696][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 427.111258][T11950] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1306'. [ 427.134074][T11952] syz.0.1307 uses obsolete (PF_INET,SOCK_PACKET) [ 427.609305][T11954] mpoa:mpoad_close: () going down [ 428.286280][T11976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1310'. [ 430.595493][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 430.771926][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 430.923968][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 432.178253][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 432.801204][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 434.864334][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1337'. [ 436.005967][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1341'. [ 436.070214][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 436.235565][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1343'. [ 437.053691][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 437.587964][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 437.590099][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 437.707746][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 437.845806][T12206] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1360'. [ 438.075362][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1363'. [ 439.932373][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.942158][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.912326][T12259] __nla_validate_parse: 1 callbacks suppressed [ 440.912344][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1375'. [ 441.930299][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1381'. [ 443.488835][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1385'. [ 446.249557][T12354] mpoa:mpoad_close: () going down [ 446.458373][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 447.975613][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 448.640091][T12416] mpoa:mpoad_close: () going down [ 449.209283][T12447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1413'. [ 449.218957][T12447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1413'. [ 449.237732][T12447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1413'. [ 449.257034][T12447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1413'. [ 450.321327][T12467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1417'. [ 452.123527][T12509] syzkaller0: entered promiscuous mode [ 452.151265][T12509] syzkaller0: entered allmulticast mode [ 452.468511][T12500] mpoa:mpoad_close: () going down [ 452.877131][T12524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1428'. [ 454.708083][T12545] mpoa:mpoad_close: () going down [ 454.908113][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'. [ 455.429696][T12567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1439'. [ 458.681736][T12629] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1455'. [ 458.974613][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 459.048397][T12633] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1456'. [ 459.281135][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1459'. [ 459.765752][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'. [ 460.835002][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1464'. [ 461.084412][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1465'. [ 461.373646][T12690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1470'. [ 461.443577][T12695] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1471'. [ 461.452933][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1471'. [ 464.332627][T12749] __nla_validate_parse: 3 callbacks suppressed [ 464.332646][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 471.699490][T12843] mpoa:mpoad_close: () going down [ 472.187478][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1509'. [ 475.098366][T12916] mpoa:mpoad_close: () going down [ 475.469449][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1523'. [ 476.072377][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 476.560062][T12973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1527'. [ 477.111059][T12981] mpoa:mpoad_close: () going down [ 478.160984][T12998] mpoa:mpoad_close: () going down [ 479.728921][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 481.546917][T13064] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1546'. [ 481.557318][T13047] mpoa:mpoad_close: () going down [ 482.114709][T13077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'. [ 483.849615][T13112] mpoa:mpoad_close: () going down [ 484.278716][T13133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1559'. [ 488.978827][T13199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1573'. [ 489.038215][T13198] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1574'. [ 490.209841][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1578'. [ 490.836092][T13234] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1581'. [ 490.855409][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1581'. [ 490.885458][T13234] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1581'. [ 490.905925][T13234] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1581'. [ 493.148159][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'. [ 494.364409][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1593'. [ 501.372071][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.391615][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.586684][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 502.563851][T13430] mpoa:mpoad_close: () going down [ 503.508967][T13461] mpoa:mpoad_close: () going down [ 504.379603][T13498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1631'. [ 506.000418][T13530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1637'. [ 507.153658][T13540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1639'. [ 507.979519][T13550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1641'. [ 512.319333][T13580] mpoa:mpoad_close: () going down [ 512.621803][T13595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1649'. [ 513.403177][T13605] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1652'. [ 515.042179][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 516.444944][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'. [ 520.022213][T13700] mpoa:mpoad_close: () going down [ 520.269947][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1673'. [ 521.389254][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'. [ 525.711799][T13823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1697'. [ 526.152140][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1699'. [ 530.154495][T13869] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1707'. [ 530.797734][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1710'. [ 533.067228][T13943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1723'. [ 533.428824][T13944] mpoa:mpoad_close: () going down [ 533.790051][T13965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1727'. [ 534.669809][T13973] mpoa:mpoad_close: () going down [ 536.015457][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1735'. [ 539.169584][T14040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1741'. [ 540.565014][T14059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1745'. [ 543.047789][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 548.907891][T14155] mpoa:mpoad_close: () going down [ 549.299837][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'. [ 549.379419][T14169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'. [ 552.371837][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 552.555900][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'. [ 553.726039][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 554.032736][T14264] mpoa:mpoad_close: () going down [ 558.677590][T14377] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1804'. [ 559.110477][T14375] mpoa:mpoad_close: () going down [ 562.290427][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 562.825012][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.832296][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.262354][T14572] mpoa:atm_mpoa_mpoad_attach: mpoad is already present for itf 0 [ 568.359981][T14556] mpoa:mpoad_close: () going down [ 572.541557][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 573.057517][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1860'. [ 573.136901][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 573.299362][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'. [ 576.170088][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'. [ 579.108717][T14819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1892'. [ 582.239184][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 583.012247][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 583.455893][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1905'. [ 585.783079][T14910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'. [ 587.960826][T14940] mpoa:mpoad_close: () going down [ 592.629357][T15039] mpoa:mpoad_close: () going down [ 599.127095][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1961'. [ 601.842914][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1966'. [ 602.225299][T15196] mpoa:mpoad_close: () going down [ 604.111033][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 604.412350][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1976'. [ 604.449669][T15241] mpoa:mpoad_close: () going down [ 607.285649][T15302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1988'. [ 608.388445][T15307] mpoa:mpoad_close: () going down [ 609.828247][T15337] mpoa:mpoad_close: () going down [ 613.749165][T15403] mpoa:mpoad_close: () going down [ 614.358128][T15429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 616.893969][T15468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2020'. [ 617.137543][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 619.173259][T15499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 619.724785][T15503] mpoa:mpoad_close: () going down [ 620.448471][T15518] mpoa:mpoad_close: () going down [ 622.785674][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2040'. [ 624.258215][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.264719][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.348057][T15666] mpoa:mpoad_close: () going down [ 629.559519][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 629.697904][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2063'. [ 630.508688][T15697] mpoa:mpoad_close: () going down [ 630.862773][T15733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2073'. [ 631.340049][T15741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2077'. [ 631.857654][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2076'. [ 632.501933][T15764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2081'. [ 633.108935][T15771] mpoa:mpoad_close: () going down [ 633.784115][T15786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2087'. [ 637.428325][T15860] mpoa:mpoad_close: () going down [ 637.822071][T15892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2106'. [ 639.706359][T15917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2113'. [ 639.974248][T15925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2115'. [ 642.773034][T15965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2124'. [ 642.900148][T15945] mpoa:mpoad_close: () going down [ 644.520681][T15993] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2130'. [ 644.670923][T15992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2130'. [ 645.522144][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2132'. [ 646.818302][T16011] mpoa:mpoad_close: () going down [ 649.750262][T16080] mpoa:mpoad_close: () going down [ 649.965978][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2153'. [ 650.985862][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2157'. [ 654.370646][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2166'. [ 654.709980][T16160] mpoa:mpoad_close: () going down [ 657.178201][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2177'. [ 657.415961][T16210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2179'. [ 658.798672][T16224] mpoa:mpoad_close: () going down [ 658.933857][T16234] warn_alloc: 1 callbacks suppressed [ 658.933878][T16234] syz.3.2183: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 658.995389][T16234] CPU: 1 UID: 0 PID: 16234 Comm: syz.3.2183 Not tainted syzkaller #0 PREEMPT(full) [ 658.995417][T16234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 658.995433][T16234] Call Trace: [ 658.995445][T16234] [ 658.995454][T16234] dump_stack_lvl+0x189/0x250 [ 658.995487][T16234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.995510][T16234] ? __pfx__printk+0x10/0x10 [ 658.995537][T16234] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 658.995558][T16234] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 658.995581][T16234] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 658.995606][T16234] warn_alloc+0x214/0x310 [ 658.995642][T16234] ? __pfx_warn_alloc+0x10/0x10 [ 658.995681][T16234] ? __get_vm_area_node+0x28f/0x300 [ 658.995708][T16234] ? hash_ipportip_create+0x358/0xfe0 [ 658.995739][T16234] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 658.995766][T16234] ? do_syscall_64+0xfa/0x3b0 [ 658.995821][T16234] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 658.995856][T16234] ? rcu_is_watching+0x15/0xb0 [ 658.995875][T16234] ? hash_ipportip_create+0x358/0xfe0 [ 658.995900][T16234] ? hash_ipportip_create+0x358/0xfe0 [ 658.995924][T16234] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 658.995950][T16234] ? hash_ipportip_create+0x358/0xfe0 [ 658.995977][T16234] ? hash_ipportip_create+0x2fe/0xfe0 [ 658.996007][T16234] hash_ipportip_create+0x358/0xfe0 [ 658.996042][T16234] ? __nla_parse+0x40/0x60 [ 658.996062][T16234] ? __pfx_hash_ipportip_create+0x10/0x10 [ 658.996091][T16234] ip_set_create+0xa94/0x1940 [ 658.996122][T16234] ? ip_set_create+0x4a2/0x1940 [ 658.996172][T16234] ? __pfx_ip_set_create+0x10/0x10 [ 658.996241][T16234] nfnetlink_rcv_msg+0xb4a/0x1130 [ 658.996262][T16234] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 658.996299][T16234] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 658.996348][T16234] ? __lock_acquire+0xab9/0xd20 [ 658.996388][T16234] netlink_rcv_skb+0x205/0x470 [ 658.996410][T16234] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 658.996431][T16234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 658.996463][T16234] ? bpf_lsm_capable+0x9/0x20 [ 658.996486][T16234] ? security_capable+0x7e/0x2e0 [ 658.996521][T16234] nfnetlink_rcv+0x282/0x2590 [ 658.996542][T16234] ? is_bpf_text_address+0x26/0x2b0 [ 658.996575][T16234] ? __kernel_text_address+0xd/0x40 [ 658.996598][T16234] ? unwind_get_return_address+0x4d/0x90 [ 658.996618][T16234] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 658.996640][T16234] ? arch_stack_walk+0xfc/0x150 [ 658.996674][T16234] ? stack_trace_save+0x9c/0xe0 [ 658.996693][T16234] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 658.996713][T16234] ? stack_depot_save_flags+0x40/0x860 [ 658.996742][T16234] ? __lock_acquire+0xab9/0xd20 [ 658.996796][T16234] ? __lock_acquire+0xab9/0xd20 [ 658.996833][T16234] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.996861][T16234] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.996889][T16234] netlink_unicast+0x82f/0x9e0 [ 658.996918][T16234] ? __pfx_netlink_unicast+0x10/0x10 [ 658.996939][T16234] ? netlink_sendmsg+0x642/0xb30 [ 658.996959][T16234] ? skb_put+0x11b/0x210 [ 658.996987][T16234] netlink_sendmsg+0x805/0xb30 [ 658.997021][T16234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.997048][T16234] ? aa_sock_msg_perm+0xf1/0x1d0 [ 658.997080][T16234] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.997098][T16234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.997122][T16234] __sock_sendmsg+0x21c/0x270 [ 658.997168][T16234] ____sys_sendmsg+0x505/0x830 [ 658.997202][T16234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.997237][T16234] ? import_iovec+0x74/0xa0 [ 658.997268][T16234] ___sys_sendmsg+0x21f/0x2a0 [ 658.997293][T16234] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.997351][T16234] ? __fget_files+0x2a/0x420 [ 658.997377][T16234] ? __fget_files+0x3a0/0x420 [ 658.997413][T16234] __x64_sys_sendmsg+0x19b/0x260 [ 658.997438][T16234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.997471][T16234] ? rcu_is_watching+0x15/0xb0 [ 658.997492][T16234] ? do_syscall_64+0xbe/0x3b0 [ 658.997518][T16234] do_syscall_64+0xfa/0x3b0 [ 658.997540][T16234] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.997562][T16234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.997581][T16234] ? clear_bhb_loop+0x60/0xb0 [ 658.997604][T16234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.997622][T16234] RIP: 0033:0x7ff8eb38eec9 [ 658.997640][T16234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.997657][T16234] RSP: 002b:00007ff8ec1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.997678][T16234] RAX: ffffffffffffffda RBX: 00007ff8eb5e6090 RCX: 00007ff8eb38eec9 [ 658.997693][T16234] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000008 [ 658.997705][T16234] RBP: 00007ff8eb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 658.997716][T16234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.997727][T16234] R13: 00007ff8eb5e6128 R14: 00007ff8eb5e6090 R15: 00007ffd1bb7e6e8 [ 658.997758][T16234] [ 659.507655][T16234] Mem-Info: [ 659.510798][T16234] active_anon:14857 inactive_anon:0 isolated_anon:0 [ 659.510798][T16234] active_file:3076 inactive_file:40103 isolated_file:0 [ 659.510798][T16234] unevictable:768 dirty:320 writeback:0 [ 659.510798][T16234] slab_reclaimable:11576 slab_unreclaimable:102061 [ 659.510798][T16234] mapped:29457 shmem:7155 pagetables:1151 [ 659.510798][T16234] sec_pagetables:0 bounce:0 [ 659.510798][T16234] kernel_misc_reclaimable:0 [ 659.510798][T16234] free:1306380 free_pcp:11358 free_cma:0 [ 659.708032][T16234] Node 0 active_anon:55628kB inactive_anon:0kB active_file:12304kB inactive_file:160208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117828kB dirty:1280kB writeback:0kB shmem:21684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11520kB pagetables:4372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 659.797938][T16244] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2185'. [ 659.870181][T16234] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 659.997608][T16234] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 660.063077][T16234] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 660.127185][T16234] Node 0 DMA32 free:1332200kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45780kB inactive_anon:0kB active_file:12304kB inactive_file:158388kB unevictable:1536kB writepending:1288kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:31444kB local_pcp:17868kB free_cma:0kB [ 660.164135][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2185'. [ 660.171334][T16234] lowmem_reserve[]: 0 0 1 1 1 [ 660.178078][T16234] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 660.207224][T16234] lowmem_reserve[]: 0 0 0 0 0 [ 660.212188][T16234] Node 1 Normal free:3890164kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14056kB local_pcp:8516kB free_cma:0kB [ 660.352592][T16234] lowmem_reserve[]: 0 0 0 0 0 [ 660.362708][T16234] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 660.406082][T16234] Node 0 DMA32: 2667*4kB (UE) 3166*8kB (UM) 1505*16kB (UME) 987*32kB (UME) 653*64kB (UME) 358*128kB (UME) 267*256kB (UM) 150*512kB (UME) 92*1024kB (UM) 5*2048kB (M) 219*4096kB (M) = 1325900kB [ 660.446711][T16234] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 660.487568][T16234] Node 1 Normal: 179*4kB (UME) 47*8kB (UME) 57*16kB (UME) 173*32kB (UME) 54*64kB (UME) 10*128kB (UME) 4*256kB (UM) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3890164kB [ 660.526285][T16234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 660.556707][T16234] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 660.566166][T16234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 660.576293][T16234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 660.585718][T16234] 55908 total pagecache pages [ 660.590563][T16234] 0 pages in swap cache [ 660.594722][T16234] Free swap = 124996kB [ 660.599067][T16234] Total swap = 124996kB [ 660.603361][T16234] 2097051 pages RAM [ 660.607162][T16234] 0 pages HighMem/MovableOnly [ 660.611963][T16234] 424998 pages reserved [ 660.616242][T16234] 0 pages cma reserved [ 661.175566][T16273] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2193'. [ 661.184986][T16273] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2193'. [ 661.211673][T16273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2193'. [ 661.214172][T16279] netlink: 'syz.2.2192': attribute type 10 has an invalid length. [ 661.251276][T16273] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2193'. [ 661.270619][T16273] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2193'. [ 661.322923][T16279] team0: Cannot enslave team device to itself [ 661.589210][T16267] mpoa:mpoad_close: () going down [ 661.884664][T16294] netlink: 'syz.3.2196': attribute type 27 has an invalid length. [ 661.919331][T16294] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2196'. [ 662.056868][T16299] FAULT_INJECTION: forcing a failure. [ 662.056868][T16299] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 662.087480][T16299] CPU: 1 UID: 0 PID: 16299 Comm: syz.4.2197 Not tainted syzkaller #0 PREEMPT(full) [ 662.087506][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 662.087517][T16299] Call Trace: [ 662.087524][T16299] [ 662.087532][T16299] dump_stack_lvl+0x189/0x250 [ 662.087559][T16299] ? __pfx____ratelimit+0x10/0x10 [ 662.087580][T16299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.087599][T16299] ? __pfx__printk+0x10/0x10 [ 662.087623][T16299] ? __might_fault+0xb0/0x130 [ 662.087659][T16299] should_fail_ex+0x414/0x560 [ 662.087690][T16299] _copy_from_user+0x2d/0xb0 [ 662.087715][T16299] __sys_bpf+0x1ed/0x870 [ 662.087741][T16299] ? __pfx___sys_bpf+0x10/0x10 [ 662.087777][T16299] ? ksys_write+0x22a/0x250 [ 662.087802][T16299] ? __pfx_ksys_write+0x10/0x10 [ 662.087833][T16299] __x64_sys_bpf+0x7c/0x90 [ 662.087854][T16299] do_syscall_64+0xfa/0x3b0 [ 662.087875][T16299] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.087895][T16299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.087913][T16299] ? clear_bhb_loop+0x60/0xb0 [ 662.087936][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.087955][T16299] RIP: 0033:0x7f0ef8f8eec9 [ 662.087972][T16299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.087987][T16299] RSP: 002b:00007f0ef9eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.088035][T16299] RAX: ffffffffffffffda RBX: 00007f0ef91e5fa0 RCX: 00007f0ef8f8eec9 [ 662.088049][T16299] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 662.088061][T16299] RBP: 00007f0ef9eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 662.088072][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.088089][T16299] R13: 00007f0ef91e6038 R14: 00007f0ef91e5fa0 R15: 00007ffe69e501e8 [ 662.088118][T16299] [ 662.812797][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'. [ 662.845674][T16322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2203'. [ 662.865035][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2203'. [ 662.922864][T16326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2202'. [ 663.120673][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2203'. [ 663.186141][T16333] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2206'. [ 663.204005][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'. [ 664.833852][T16379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'. [ 664.902851][T16381] FAULT_INJECTION: forcing a failure. [ 664.902851][T16381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.947657][T16381] CPU: 0 UID: 0 PID: 16381 Comm: syz.3.2219 Not tainted syzkaller #0 PREEMPT(full) [ 664.947690][T16381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 664.947700][T16381] Call Trace: [ 664.947708][T16381] [ 664.947716][T16381] dump_stack_lvl+0x189/0x250 [ 664.947742][T16381] ? __pfx____ratelimit+0x10/0x10 [ 664.947763][T16381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.947784][T16381] ? __pfx__printk+0x10/0x10 [ 664.947822][T16381] should_fail_ex+0x414/0x560 [ 664.947853][T16381] _copy_to_user+0x31/0xb0 [ 664.947879][T16381] simple_read_from_buffer+0xe1/0x170 [ 664.947912][T16381] proc_fail_nth_read+0x1b3/0x220 [ 664.947937][T16381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.947961][T16381] ? rw_verify_area+0x2a6/0x4d0 [ 664.947983][T16381] ? __lock_acquire+0xab9/0xd20 [ 664.948008][T16381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.948030][T16381] vfs_read+0x200/0xa30 [ 664.948052][T16381] ? fdget_pos+0x247/0x320 [ 664.948085][T16381] ? __pfx___mutex_lock+0x10/0x10 [ 664.948107][T16381] ? __pfx_vfs_read+0x10/0x10 [ 664.948133][T16381] ? __fget_files+0x2a/0x420 [ 664.948165][T16381] ? __fget_files+0x3a0/0x420 [ 664.948190][T16381] ? __fget_files+0x2a/0x420 [ 664.948225][T16381] ksys_read+0x145/0x250 [ 664.948251][T16381] ? __pfx_ksys_read+0x10/0x10 [ 664.948271][T16381] ? rcu_is_watching+0x15/0xb0 [ 664.948295][T16381] ? do_syscall_64+0xbe/0x3b0 [ 664.948322][T16381] do_syscall_64+0xfa/0x3b0 [ 664.948342][T16381] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.948363][T16381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.948382][T16381] ? clear_bhb_loop+0x60/0xb0 [ 664.948406][T16381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.948424][T16381] RIP: 0033:0x7ff8eb38d8dc [ 664.948441][T16381] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 664.948457][T16381] RSP: 002b:00007ff8ec217030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 664.948477][T16381] RAX: ffffffffffffffda RBX: 00007ff8eb5e5fa0 RCX: 00007ff8eb38d8dc [ 664.948491][T16381] RDX: 000000000000000f RSI: 00007ff8ec2170a0 RDI: 0000000000000004 [ 664.948503][T16381] RBP: 00007ff8ec217090 R08: 0000000000000000 R09: 0000000000000000 [ 664.948515][T16381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.948526][T16381] R13: 00007ff8eb5e6038 R14: 00007ff8eb5e5fa0 R15: 00007ffd1bb7e6e8 [ 664.948559][T16381] [ 665.391642][T16363] mpoa:mpoad_close: () going down [ 665.604768][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 665.609517][T16397] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2224'. [ 665.738845][T16403] FAULT_INJECTION: forcing a failure. [ 665.738845][T16403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.777453][T16403] CPU: 0 UID: 0 PID: 16403 Comm: syz.1.2226 Not tainted syzkaller #0 PREEMPT(full) [ 665.777480][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 665.777490][T16403] Call Trace: [ 665.777497][T16403] [ 665.777505][T16403] dump_stack_lvl+0x189/0x250 [ 665.777532][T16403] ? __pfx____ratelimit+0x10/0x10 [ 665.777553][T16403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.777573][T16403] ? __pfx__printk+0x10/0x10 [ 665.777596][T16403] ? __might_fault+0xb0/0x130 [ 665.777630][T16403] should_fail_ex+0x414/0x560 [ 665.777663][T16403] _copy_from_user+0x2d/0xb0 [ 665.777689][T16403] __sys_connect+0x123/0x440 [ 665.777710][T16403] ? __fget_files+0x3a0/0x420 [ 665.777738][T16403] ? __pfx___sys_connect+0x10/0x10 [ 665.777772][T16403] ? __pfx_ksys_write+0x10/0x10 [ 665.777794][T16403] ? rcu_is_watching+0x15/0xb0 [ 665.777817][T16403] __x64_sys_connect+0x7a/0x90 [ 665.777840][T16403] do_syscall_64+0xfa/0x3b0 [ 665.777861][T16403] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.777880][T16403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.777899][T16403] ? clear_bhb_loop+0x60/0xb0 [ 665.777922][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.777940][T16403] RIP: 0033:0x7f8d5798eec9 [ 665.777957][T16403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.777972][T16403] RSP: 002b:00007f8d587c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 665.777992][T16403] RAX: ffffffffffffffda RBX: 00007f8d57be5fa0 RCX: 00007f8d5798eec9 [ 665.778006][T16403] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000004 [ 665.778018][T16403] RBP: 00007f8d587c9090 R08: 0000000000000000 R09: 0000000000000000 [ 665.778029][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.778040][T16403] R13: 00007f8d57be6038 R14: 00007f8d57be5fa0 R15: 00007fffbc747a48 [ 665.778071][T16403] [ 665.885457][T16409] FAULT_INJECTION: forcing a failure. [ 665.885457][T16409] name failslab, interval 1, probability 0, space 0, times 1 [ 666.067527][T16409] CPU: 0 UID: 0 PID: 16409 Comm: syz.4.2228 Not tainted syzkaller #0 PREEMPT(full) [ 666.067554][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 666.067565][T16409] Call Trace: [ 666.067574][T16409] [ 666.067582][T16409] dump_stack_lvl+0x189/0x250 [ 666.067607][T16409] ? __pfx____ratelimit+0x10/0x10 [ 666.067628][T16409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.067647][T16409] ? __pfx__printk+0x10/0x10 [ 666.067674][T16409] ? __pfx___might_resched+0x10/0x10 [ 666.067700][T16409] ? fs_reclaim_acquire+0x7d/0x100 [ 666.067731][T16409] should_fail_ex+0x414/0x560 [ 666.067762][T16409] ? __pfx_sock_alloc_inode+0x10/0x10 [ 666.067780][T16409] should_failslab+0xa8/0x100 [ 666.067807][T16409] ? __pfx_sock_alloc_inode+0x10/0x10 [ 666.067823][T16409] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 666.067853][T16409] ? sock_alloc_inode+0x28/0xc0 [ 666.067872][T16409] ? __pfx_sock_alloc_inode+0x10/0x10 [ 666.067889][T16409] sock_alloc_inode+0x28/0xc0 [ 666.067907][T16409] alloc_inode+0x6a/0x1b0 [ 666.067933][T16409] do_accept+0x111/0x680 [ 666.067959][T16409] ? __pfx_do_accept+0x10/0x10 [ 666.068007][T16409] __sys_accept4+0x11c/0x1c0 [ 666.068029][T16409] ? __pfx___sys_accept4+0x10/0x10 [ 666.068047][T16409] ? __pfx_ksys_write+0x10/0x10 [ 666.068067][T16409] ? rcu_is_watching+0x15/0xb0 [ 666.068098][T16409] __x64_sys_accept4+0x9a/0xb0 [ 666.068121][T16409] do_syscall_64+0xfa/0x3b0 [ 666.068138][T16409] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.068156][T16409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.068174][T16409] ? clear_bhb_loop+0x60/0xb0 [ 666.068194][T16409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.068210][T16409] RIP: 0033:0x7f0ef8f8eec9 [ 666.068226][T16409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.068240][T16409] RSP: 002b:00007f0ef9e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 666.068259][T16409] RAX: ffffffffffffffda RBX: 00007f0ef91e6090 RCX: 00007f0ef8f8eec9 [ 666.068272][T16409] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 666.068283][T16409] RBP: 00007f0ef9e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 666.068293][T16409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.068311][T16409] R13: 00007f0ef91e6128 R14: 00007f0ef91e6090 R15: 00007ffe69e501e8 [ 666.068339][T16409] [ 666.418381][T16408] ip6gretap1: entered promiscuous mode [ 666.598695][T16418] FAULT_INJECTION: forcing a failure. [ 666.598695][T16418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.637404][T16418] CPU: 0 UID: 0 PID: 16418 Comm: syz.1.2230 Not tainted syzkaller #0 PREEMPT(full) [ 666.637431][T16418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 666.637442][T16418] Call Trace: [ 666.637449][T16418] [ 666.637457][T16418] dump_stack_lvl+0x189/0x250 [ 666.637492][T16418] ? __pfx____ratelimit+0x10/0x10 [ 666.637515][T16418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.637542][T16418] ? __pfx__printk+0x10/0x10 [ 666.637568][T16418] ? __might_fault+0xb0/0x130 [ 666.637606][T16418] should_fail_ex+0x414/0x560 [ 666.637639][T16418] _copy_from_iter+0x1de/0x1790 [ 666.637667][T16418] ? __lock_acquire+0xab9/0xd20 [ 666.637701][T16418] ? __pfx__copy_from_iter+0x10/0x10 [ 666.637740][T16418] tun_get_user+0x219/0x3e90 [ 666.637784][T16418] ? aa_file_perm+0x44d/0x1550 [ 666.637804][T16418] ? __pfx_tun_get_user+0x10/0x10 [ 666.637824][T16418] ? _parse_integer_limit+0x1ae/0x1f0 [ 666.637864][T16418] ? __lock_acquire+0xab9/0xd20 [ 666.637897][T16418] ? ref_tracker_alloc+0x318/0x460 [ 666.637924][T16418] ? __lock_acquire+0xab9/0xd20 [ 666.637953][T16418] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 666.637988][T16418] ? tun_get+0x1c/0x2f0 [ 666.638015][T16418] ? tun_get+0x1c/0x2f0 [ 666.638036][T16418] ? tun_get+0x1c/0x2f0 [ 666.638062][T16418] tun_chr_write_iter+0x113/0x200 [ 666.638087][T16418] vfs_write+0x5c9/0xb30 [ 666.638116][T16418] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 666.638139][T16418] ? __pfx_vfs_write+0x10/0x10 [ 666.638175][T16418] ? __fget_files+0x2a/0x420 [ 666.638212][T16418] ksys_write+0x145/0x250 [ 666.638237][T16418] ? __pfx_ksys_write+0x10/0x10 [ 666.638258][T16418] ? rcu_is_watching+0x15/0xb0 [ 666.638282][T16418] ? do_syscall_64+0xbe/0x3b0 [ 666.638310][T16418] do_syscall_64+0xfa/0x3b0 [ 666.638331][T16418] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.638351][T16418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.638371][T16418] ? clear_bhb_loop+0x60/0xb0 [ 666.638395][T16418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.638414][T16418] RIP: 0033:0x7f8d5798eec9 [ 666.638432][T16418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.638449][T16418] RSP: 002b:00007f8d587c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.638469][T16418] RAX: ffffffffffffffda RBX: 00007f8d57be5fa0 RCX: 00007f8d5798eec9 [ 666.638490][T16418] RDX: 000000000000fdef RSI: 0000200000000b40 RDI: 0000000000000004 [ 666.638503][T16418] RBP: 00007f8d587c9090 R08: 0000000000000000 R09: 0000000000000000 [ 666.638515][T16418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.638526][T16418] R13: 00007f8d57be6038 R14: 00007f8d57be5fa0 R15: 00007fffbc747a48 [ 666.638558][T16418] [ 667.243254][T16428] FAULT_INJECTION: forcing a failure. [ 667.243254][T16428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.297532][T16428] CPU: 1 UID: 0 PID: 16428 Comm: syz.0.2234 Not tainted syzkaller #0 PREEMPT(full) [ 667.297554][T16428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 667.297563][T16428] Call Trace: [ 667.297570][T16428] [ 667.297577][T16428] dump_stack_lvl+0x189/0x250 [ 667.297603][T16428] ? __pfx____ratelimit+0x10/0x10 [ 667.297622][T16428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.297640][T16428] ? __pfx__printk+0x10/0x10 [ 667.297664][T16428] ? __might_fault+0xb0/0x130 [ 667.297697][T16428] should_fail_ex+0x414/0x560 [ 667.297728][T16428] _copy_from_user+0x2d/0xb0 [ 667.297752][T16428] __x64_sys_epoll_ctl+0x126/0x1a0 [ 667.297782][T16428] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 667.297806][T16428] ? rcu_is_watching+0x15/0xb0 [ 667.297829][T16428] ? do_syscall_64+0xbe/0x3b0 [ 667.297853][T16428] do_syscall_64+0xfa/0x3b0 [ 667.297872][T16428] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.297892][T16428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.297911][T16428] ? clear_bhb_loop+0x60/0xb0 [ 667.297934][T16428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.297952][T16428] RIP: 0033:0x7f054978eec9 [ 667.297969][T16428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.297983][T16428] RSP: 002b:00007f054a5f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 667.298002][T16428] RAX: ffffffffffffffda RBX: 00007f05499e5fa0 RCX: 00007f054978eec9 [ 667.298016][T16428] RDX: 0000000000000006 RSI: 000000000000003f RDI: 0000000000000005 [ 667.298028][T16428] RBP: 00007f054a5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 667.298039][T16428] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 667.298051][T16428] R13: 00007f05499e6038 R14: 00007f05499e5fa0 R15: 00007fff3692f3a8 [ 667.298081][T16428] [ 668.046485][T16437] __nla_validate_parse: 2 callbacks suppressed [ 668.046503][T16437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2237'. [ 668.222865][T16450] FAULT_INJECTION: forcing a failure. [ 668.222865][T16450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.250478][T16450] CPU: 1 UID: 0 PID: 16450 Comm: syz.0.2239 Not tainted syzkaller #0 PREEMPT(full) [ 668.250505][T16450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 668.250516][T16450] Call Trace: [ 668.250524][T16450] [ 668.250533][T16450] dump_stack_lvl+0x189/0x250 [ 668.250559][T16450] ? __pfx____ratelimit+0x10/0x10 [ 668.250581][T16450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.250602][T16450] ? __pfx__printk+0x10/0x10 [ 668.250627][T16450] ? __might_fault+0xb0/0x130 [ 668.250663][T16450] should_fail_ex+0x414/0x560 [ 668.250698][T16450] _copy_from_user+0x2d/0xb0 [ 668.250723][T16450] core_sys_select+0x4b7/0xa20 [ 668.250762][T16450] ? __pfx_core_sys_select+0x10/0x10 [ 668.250814][T16450] ? __pfx_set_user_sigmask+0x10/0x10 [ 668.250845][T16450] __se_sys_pselect6+0x27a/0x300 [ 668.250877][T16450] ? __pfx___se_sys_pselect6+0x10/0x10 [ 668.250903][T16450] ? __pfx_ksys_write+0x10/0x10 [ 668.250925][T16450] ? rcu_is_watching+0x15/0xb0 [ 668.250949][T16450] ? __x64_sys_pselect6+0x21/0xf0 [ 668.250978][T16450] do_syscall_64+0xfa/0x3b0 [ 668.250999][T16450] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.251020][T16450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.251039][T16450] ? clear_bhb_loop+0x60/0xb0 [ 668.251063][T16450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.251081][T16450] RIP: 0033:0x7f054978eec9 [ 668.251098][T16450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.251114][T16450] RSP: 002b:00007f054a5f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 668.251134][T16450] RAX: ffffffffffffffda RBX: 00007f05499e5fa0 RCX: 00007f054978eec9 [ 668.251147][T16450] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 668.251159][T16450] RBP: 00007f054a5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 668.251170][T16450] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 668.251182][T16450] R13: 00007f05499e6038 R14: 00007f05499e5fa0 R15: 00007fff3692f3a8 [ 668.251214][T16450] [ 668.507937][T16431] mpoa:mpoad_close: () going down [ 668.851443][T16458] tipc: Enabling of bearer rejected, failed to enable media [ 669.070115][T16473] netlink: 'syz.1.2245': attribute type 29 has an invalid length. [ 669.092869][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 669.396692][T16477] trusted_key: syz.1.2246 sent an empty control message without MSG_MORE. [ 669.545883][T16480] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2248'. [ 669.640893][T16483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2247'. [ 669.678391][T16483] FAULT_INJECTION: forcing a failure. [ 669.678391][T16483] name failslab, interval 1, probability 0, space 0, times 0 [ 669.707441][T16483] CPU: 1 UID: 0 PID: 16483 Comm: syz.1.2247 Not tainted syzkaller #0 PREEMPT(full) [ 669.707467][T16483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 669.707478][T16483] Call Trace: [ 669.707486][T16483] [ 669.707494][T16483] dump_stack_lvl+0x189/0x250 [ 669.707521][T16483] ? __pfx____ratelimit+0x10/0x10 [ 669.707543][T16483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.707564][T16483] ? __pfx__printk+0x10/0x10 [ 669.707592][T16483] ? __pfx___might_resched+0x10/0x10 [ 669.707619][T16483] ? fs_reclaim_acquire+0x7d/0x100 [ 669.707653][T16483] should_fail_ex+0x414/0x560 [ 669.707687][T16483] should_failslab+0xa8/0x100 [ 669.707716][T16483] kmem_cache_alloc_noprof+0x73/0x3c0 [ 669.707739][T16483] ? copy_fs_struct+0x4f/0x270 [ 669.707767][T16483] copy_fs_struct+0x4f/0x270 [ 669.707792][T16483] ksys_unshare+0x3a2/0x8c0 [ 669.707819][T16483] ? ksys_write+0x22a/0x250 [ 669.707843][T16483] ? __pfx_ksys_unshare+0x10/0x10 [ 669.707865][T16483] ? __pfx_ksys_write+0x10/0x10 [ 669.707886][T16483] ? rcu_is_watching+0x15/0xb0 [ 669.707923][T16483] __x64_sys_unshare+0x38/0x50 [ 669.707945][T16483] do_syscall_64+0xfa/0x3b0 [ 669.707966][T16483] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.707986][T16483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.708005][T16483] ? clear_bhb_loop+0x60/0xb0 [ 669.708029][T16483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.708048][T16483] RIP: 0033:0x7f8d5798eec9 [ 669.708065][T16483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.708081][T16483] RSP: 002b:00007f8d587c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 669.708101][T16483] RAX: ffffffffffffffda RBX: 00007f8d57be5fa0 RCX: 00007f8d5798eec9 [ 669.708116][T16483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 669.708127][T16483] RBP: 00007f8d587c9090 R08: 0000000000000000 R09: 0000000000000000 [ 669.708139][T16483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.708150][T16483] R13: 00007f8d57be6038 R14: 00007f8d57be5fa0 R15: 00007fffbc747a48 [ 669.708184][T16483] [ 670.431857][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 670.442923][T16497] veth0_to_bridge: entered promiscuous mode [ 670.607446][T16503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2255'. [ 670.628348][T16505] FAULT_INJECTION: forcing a failure. [ 670.628348][T16505] name failslab, interval 1, probability 0, space 0, times 0 [ 670.664889][T16495] veth0_to_bridge: left promiscuous mode [ 670.711074][T16505] CPU: 1 UID: 0 PID: 16505 Comm: syz.3.2254 Not tainted syzkaller #0 PREEMPT(full) [ 670.711101][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 670.711112][T16505] Call Trace: [ 670.711120][T16505] [ 670.711129][T16505] dump_stack_lvl+0x189/0x250 [ 670.711156][T16505] ? __pfx____ratelimit+0x10/0x10 [ 670.711177][T16505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.711198][T16505] ? __pfx__printk+0x10/0x10 [ 670.711227][T16505] ? __pfx___might_resched+0x10/0x10 [ 670.711254][T16505] ? fs_reclaim_acquire+0x7d/0x100 [ 670.711286][T16505] should_fail_ex+0x414/0x560 [ 670.711317][T16505] should_failslab+0xa8/0x100 [ 670.711343][T16505] __kmalloc_noprof+0xcb/0x4f0 [ 670.711364][T16505] ? kfree+0x4d/0x440 [ 670.711380][T16505] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 670.711404][T16505] tomoyo_realpath_from_path+0xe3/0x5d0 [ 670.711423][T16505] ? tomoyo_domain+0xd9/0x130 [ 670.711446][T16505] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 670.711470][T16505] tomoyo_path_number_perm+0x1e8/0x5a0 [ 670.711496][T16505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 670.711574][T16505] ? __lock_acquire+0xab9/0xd20 [ 670.711622][T16505] ? __fget_files+0x2a/0x420 [ 670.711652][T16505] ? __fget_files+0x2a/0x420 [ 670.711674][T16505] ? __fget_files+0x3a0/0x420 [ 670.711698][T16505] ? __fget_files+0x2a/0x420 [ 670.711729][T16505] security_file_ioctl+0xcb/0x2d0 [ 670.711755][T16505] __se_sys_ioctl+0x47/0x170 [ 670.711784][T16505] do_syscall_64+0xfa/0x3b0 [ 670.711806][T16505] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.711824][T16505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.711842][T16505] ? clear_bhb_loop+0x60/0xb0 [ 670.711864][T16505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.711882][T16505] RIP: 0033:0x7ff8eb38eec9 [ 670.711898][T16505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.711913][T16505] RSP: 002b:00007ff8ec217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.711931][T16505] RAX: ffffffffffffffda RBX: 00007ff8eb5e5fa0 RCX: 00007ff8eb38eec9 [ 670.711945][T16505] RDX: 0000200000000080 RSI: 0000000000008933 RDI: 0000000000000003 [ 670.711956][T16505] RBP: 00007ff8ec217090 R08: 0000000000000000 R09: 0000000000000000 [ 670.711968][T16505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.711978][T16505] R13: 00007ff8eb5e6038 R14: 00007ff8eb5e5fa0 R15: 00007ffd1bb7e6e8 [ 670.712004][T16505] [ 670.712023][T16505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 671.204941][T16519] FAULT_INJECTION: forcing a failure. [ 671.204941][T16519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.220014][T16519] CPU: 0 UID: 0 PID: 16519 Comm: syz.3.2261 Not tainted syzkaller #0 PREEMPT(full) [ 671.220041][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 671.220052][T16519] Call Trace: [ 671.220060][T16519] [ 671.220068][T16519] dump_stack_lvl+0x189/0x250 [ 671.220095][T16519] ? __pfx____ratelimit+0x10/0x10 [ 671.220117][T16519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.220138][T16519] ? __pfx__printk+0x10/0x10 [ 671.220164][T16519] ? __might_fault+0xb0/0x130 [ 671.220201][T16519] should_fail_ex+0x414/0x560 [ 671.220233][T16519] _copy_from_user+0x2d/0xb0 [ 671.220258][T16519] ___sys_sendmsg+0x158/0x2a0 [ 671.220286][T16519] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.220345][T16519] ? __fget_files+0x2a/0x420 [ 671.220372][T16519] ? __fget_files+0x3a0/0x420 [ 671.220410][T16519] __x64_sys_sendmsg+0x19b/0x260 [ 671.220439][T16519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.220474][T16519] ? __pfx_ksys_write+0x10/0x10 [ 671.220496][T16519] ? rcu_is_watching+0x15/0xb0 [ 671.220519][T16519] ? do_syscall_64+0xbe/0x3b0 [ 671.220545][T16519] do_syscall_64+0xfa/0x3b0 [ 671.220566][T16519] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.220587][T16519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.220606][T16519] ? clear_bhb_loop+0x60/0xb0 [ 671.220629][T16519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.220647][T16519] RIP: 0033:0x7ff8eb38eec9 [ 671.220663][T16519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.220679][T16519] RSP: 002b:00007ff8ec217038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.220698][T16519] RAX: ffffffffffffffda RBX: 00007ff8eb5e5fa0 RCX: 00007ff8eb38eec9 [ 671.220713][T16519] RDX: 0000000020000000 RSI: 0000200000000a80 RDI: 0000000000000006 [ 671.220725][T16519] RBP: 00007ff8ec217090 R08: 0000000000000000 R09: 0000000000000000 [ 671.220737][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.220748][T16519] R13: 00007ff8eb5e6038 R14: 00007ff8eb5e5fa0 R15: 00007ffd1bb7e6e8 [ 671.220779][T16519] [ 671.514037][T16521] FAULT_INJECTION: forcing a failure. [ 671.514037][T16521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.547855][T16523] warning: `syz.0.2260' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 671.583763][T16523] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 671.613308][T16521] CPU: 1 UID: 0 PID: 16521 Comm: syz.3.2263 Not tainted syzkaller #0 PREEMPT(full) [ 671.613333][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 671.613345][T16521] Call Trace: [ 671.613352][T16521] [ 671.613361][T16521] dump_stack_lvl+0x189/0x250 [ 671.613389][T16521] ? __pfx____ratelimit+0x10/0x10 [ 671.613411][T16521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.613432][T16521] ? __pfx__printk+0x10/0x10 [ 671.613457][T16521] ? __might_fault+0xb0/0x130 [ 671.613494][T16521] should_fail_ex+0x414/0x560 [ 671.613527][T16521] _copy_from_user+0x2d/0xb0 [ 671.613552][T16521] __sys_bpf+0x1ed/0x870 [ 671.613578][T16521] ? __pfx___sys_bpf+0x10/0x10 [ 671.613616][T16521] ? ksys_write+0x22a/0x250 [ 671.613650][T16521] ? __pfx_ksys_write+0x10/0x10 [ 671.613671][T16521] ? rcu_is_watching+0x15/0xb0 [ 671.613696][T16521] __x64_sys_bpf+0x7c/0x90 [ 671.613717][T16521] do_syscall_64+0xfa/0x3b0 [ 671.613738][T16521] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.613758][T16521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.613777][T16521] ? clear_bhb_loop+0x60/0xb0 [ 671.613800][T16521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.613824][T16521] RIP: 0033:0x7ff8eb38eec9 [ 671.613841][T16521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.613857][T16521] RSP: 002b:00007ff8ec217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 671.613876][T16521] RAX: ffffffffffffffda RBX: 00007ff8eb5e5fa0 RCX: 00007ff8eb38eec9 [ 671.613890][T16521] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 671.613902][T16521] RBP: 00007ff8ec217090 R08: 0000000000000000 R09: 0000000000000000 [ 671.613914][T16521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.613925][T16521] R13: 00007ff8eb5e6038 R14: 00007ff8eb5e5fa0 R15: 00007ffd1bb7e6e8 [ 671.613956][T16521] [ 672.060478][T16528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2262'. [ 672.404835][T16541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2267'. [ 672.428359][T16527] mpoa:mpoad_close: () going down [ 672.730090][T16554] netlink: 'syz.0.2272': attribute type 1 has an invalid length. [ 672.789525][T16556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2272'. [ 672.916728][T16554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.021446][T16562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2273'. [ 673.113825][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'. [ 673.182433][T16565] netlink: 'syz.2.2274': attribute type 13 has an invalid length. [ 673.190887][T16565] netlink: 'syz.2.2274': attribute type 17 has an invalid length. [ 673.296960][T16565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.306259][T16565] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.335000][T16565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.474652][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 673.514689][T16579] tipc: Started in network mode [ 673.524414][T16579] tipc: Node identity 569ff7f36fd2, cluster identity 4711 [ 673.542693][T16579] tipc: Enabled bearer , priority 0 [ 673.839470][T16587] netlink: 'syz.2.2283': attribute type 9 has an invalid length. [ 673.857437][T16587] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2283'. [ 674.050439][T16594] FAULT_INJECTION: forcing a failure. [ 674.050439][T16594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.135115][T16594] CPU: 1 UID: 0 PID: 16594 Comm: syz.3.2285 Not tainted syzkaller #0 PREEMPT(full) [ 674.135138][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.135148][T16594] Call Trace: [ 674.135155][T16594] [ 674.135161][T16594] dump_stack_lvl+0x189/0x250 [ 674.135184][T16594] ? __pfx____ratelimit+0x10/0x10 [ 674.135203][T16594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.135222][T16594] ? __pfx__printk+0x10/0x10 [ 674.135245][T16594] ? __might_fault+0xb0/0x130 [ 674.135276][T16594] should_fail_ex+0x414/0x560 [ 674.135306][T16594] _copy_from_iter+0x1de/0x1790 [ 674.135323][T16594] ? __lock_acquire+0xab9/0xd20 [ 674.135348][T16594] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 674.135385][T16594] ? policy_nodemask+0x27c/0x720 [ 674.135407][T16594] ? __pfx__copy_from_iter+0x10/0x10 [ 674.135434][T16594] ? set_page_refcounted+0xa0/0x1e0 [ 674.135458][T16594] ? page_copy_sane+0x4e/0x280 [ 674.135480][T16594] copy_page_from_iter+0xdd/0x170 [ 674.135505][T16594] tun_get_user+0x1d7b/0x3e90 [ 674.135534][T16594] ? tun_get_user+0x6f6/0x3e90 [ 674.135561][T16594] ? aa_file_perm+0x44d/0x1550 [ 674.135589][T16594] ? __pfx_tun_get_user+0x10/0x10 [ 674.135608][T16594] ? _parse_integer_limit+0x1ae/0x1f0 [ 674.135645][T16594] ? __lock_acquire+0xab9/0xd20 [ 674.135676][T16594] ? ref_tracker_alloc+0x318/0x460 [ 674.135702][T16594] ? __lock_acquire+0xab9/0xd20 [ 674.135729][T16594] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 674.135761][T16594] ? tun_get+0x1c/0x2f0 [ 674.135785][T16594] ? tun_get+0x1c/0x2f0 [ 674.135804][T16594] ? tun_get+0x1c/0x2f0 [ 674.135829][T16594] tun_chr_write_iter+0x113/0x200 [ 674.135853][T16594] vfs_write+0x5c9/0xb30 [ 674.135883][T16594] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 674.135905][T16594] ? __pfx_vfs_write+0x10/0x10 [ 674.135940][T16594] ? __fget_files+0x2a/0x420 [ 674.135977][T16594] ksys_write+0x145/0x250 [ 674.136004][T16594] ? __pfx_ksys_write+0x10/0x10 [ 674.136026][T16594] ? rcu_is_watching+0x15/0xb0 [ 674.136049][T16594] ? do_syscall_64+0xbe/0x3b0 [ 674.136076][T16594] do_syscall_64+0xfa/0x3b0 [ 674.136097][T16594] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.136117][T16594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.136137][T16594] ? clear_bhb_loop+0x60/0xb0 [ 674.136161][T16594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.136180][T16594] RIP: 0033:0x7ff8eb38d97f [ 674.136199][T16594] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 674.136217][T16594] RSP: 002b:00007ff8ec217000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 674.136237][T16594] RAX: ffffffffffffffda RBX: 00007ff8eb5e5fa0 RCX: 00007ff8eb38d97f [ 674.136252][T16594] RDX: 000000000000002a RSI: 00002000000007c0 RDI: 00000000000000c8 [ 674.136265][T16594] RBP: 00007ff8ec217090 R08: 0000000000000000 R09: 0000000000000000 [ 674.136278][T16594] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 674.136289][T16594] R13: 00007ff8eb5e6038 R14: 00007ff8eb5e5fa0 R15: 00007ffd1bb7e6e8 [ 674.136321][T16594] [ 674.590408][T16608] FAULT_INJECTION: forcing a failure. [ 674.590408][T16608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.650532][T16608] CPU: 0 UID: 0 PID: 16608 Comm: syz.4.2289 Not tainted syzkaller #0 PREEMPT(full) [ 674.650562][T16608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.650575][T16608] Call Trace: [ 674.650583][T16608] [ 674.650592][T16608] dump_stack_lvl+0x189/0x250 [ 674.650620][T16608] ? __pfx____ratelimit+0x10/0x10 [ 674.650641][T16608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.650664][T16608] ? __pfx__printk+0x10/0x10 [ 674.650702][T16608] should_fail_ex+0x414/0x560 [ 674.650734][T16608] _copy_to_user+0x31/0xb0 [ 674.650760][T16608] simple_read_from_buffer+0xe1/0x170 [ 674.650793][T16608] proc_fail_nth_read+0x1b3/0x220 [ 674.650818][T16608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 674.650842][T16608] ? rw_verify_area+0x2a6/0x4d0 [ 674.650865][T16608] ? __lock_acquire+0xab9/0xd20 [ 674.650890][T16608] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 674.650913][T16608] vfs_read+0x200/0xa30 [ 674.650936][T16608] ? fdget_pos+0x247/0x320 [ 674.650968][T16608] ? __pfx___mutex_lock+0x10/0x10 [ 674.650992][T16608] ? __pfx_vfs_read+0x10/0x10 [ 674.651018][T16608] ? __fget_files+0x2a/0x420 [ 674.651050][T16608] ? __fget_files+0x3a0/0x420 [ 674.651076][T16608] ? __fget_files+0x2a/0x420 [ 674.651113][T16608] ksys_read+0x145/0x250 [ 674.651140][T16608] ? __pfx_ksys_read+0x10/0x10 [ 674.651162][T16608] ? rcu_is_watching+0x15/0xb0 [ 674.651185][T16608] ? do_syscall_64+0xbe/0x3b0 [ 674.651211][T16608] do_syscall_64+0xfa/0x3b0 [ 674.651232][T16608] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.651253][T16608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.651278][T16608] ? clear_bhb_loop+0x60/0xb0 [ 674.651303][T16608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.651322][T16608] RIP: 0033:0x7f0ef8f8d8dc [ 674.651339][T16608] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 674.651356][T16608] RSP: 002b:00007f0ef9eb0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 674.651377][T16608] RAX: ffffffffffffffda RBX: 00007f0ef91e5fa0 RCX: 00007f0ef8f8d8dc [ 674.651391][T16608] RDX: 000000000000000f RSI: 00007f0ef9eb00a0 RDI: 0000000000000007 [ 674.651404][T16608] RBP: 00007f0ef9eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 674.651416][T16608] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 674.651428][T16608] R13: 00007f0ef91e6038 R14: 00007f0ef91e5fa0 R15: 00007ffe69e501e8 [ 674.651462][T16608] [ 674.823163][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'. [ 674.843582][ T5924] tipc: Node number set to 961411059 [ 674.995007][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2290'. [ 675.265731][T16626] FAULT_INJECTION: forcing a failure. [ 675.265731][T16626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.286636][T16628] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2297'. [ 675.297109][T16626] CPU: 1 UID: 0 PID: 16626 Comm: syz.3.2298 Not tainted syzkaller #0 PREEMPT(full) [ 675.297136][T16626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 675.297149][T16626] Call Trace: [ 675.297157][T16626] [ 675.297166][T16626] dump_stack_lvl+0x189/0x250 [ 675.297205][T16626] ? __pfx____ratelimit+0x10/0x10 [ 675.297227][T16626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.297252][T16626] ? __pfx__printk+0x10/0x10 [ 675.297286][T16626] should_fail_ex+0x414/0x560 [ 675.297316][T16626] _copy_to_user+0x31/0xb0 [ 675.297342][T16626] simple_read_from_buffer+0xe1/0x170 [ 675.297373][T16626] proc_fail_nth_read+0x1b3/0x220 [ 675.297396][T16626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 675.297419][T16626] ? rw_verify_area+0x2a6/0x4d0 [ 675.297441][T16626] ? __lock_acquire+0xab9/0xd20 [ 675.297466][T16626] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 675.297488][T16626] vfs_read+0x200/0xa30 [ 675.297510][T16626] ? fdget_pos+0x247/0x320 [ 675.297542][T16626] ? __pfx___mutex_lock+0x10/0x10 [ 675.297564][T16626] ? __pfx_vfs_read+0x10/0x10 [ 675.297590][T16626] ? __fget_files+0x2a/0x420 [ 675.297621][T16626] ? __fget_files+0x3a0/0x420 [ 675.297645][T16626] ? __fget_files+0x2a/0x420 [ 675.297682][T16626] ksys_read+0x145/0x250 [ 675.297708][T16626] ? __pfx_ksys_read+0x10/0x10 [ 675.297729][T16626] ? rcu_is_watching+0x15/0xb0 [ 675.297753][T16626] ? do_syscall_64+0xbe/0x3b0 [ 675.297780][T16626] do_syscall_64+0xfa/0x3b0 [ 675.297800][T16626] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.297821][T16626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.297841][T16626] ? clear_bhb_loop+0x60/0xb0 [ 675.297864][T16626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.297883][T16626] RIP: 0033:0x7ff8eb38d8dc [ 675.297901][T16626] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 675.297918][T16626] RSP: 002b:00007ff8ec217030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 675.297938][T16626] RAX: ffffffffffffffda RBX: 00007ff8eb5e5fa0 RCX: 00007ff8eb38d8dc [ 675.297953][T16626] RDX: 000000000000000f RSI: 00007ff8ec2170a0 RDI: 0000000000000004 [ 675.297966][T16626] RBP: 00007ff8ec217090 R08: 0000000000000000 R09: 0000000000000000 [ 675.297978][T16626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.297989][T16626] R13: 00007ff8eb5e6038 R14: 00007ff8eb5e5fa0 R15: 00007ffd1bb7e6e8 [ 675.298021][T16626] [ 675.324540][T16628] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2297'. [ 675.547371][T16628] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2297'. [ 675.642906][T16642] FAULT_INJECTION: forcing a failure. [ 675.642906][T16642] name failslab, interval 1, probability 0, space 0, times 0 [ 675.655840][T16642] CPU: 0 UID: 0 PID: 16642 Comm: syz.4.2301 Not tainted syzkaller #0 PREEMPT(full) [ 675.655865][T16642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 675.655876][T16642] Call Trace: [ 675.655882][T16642] [ 675.655890][T16642] dump_stack_lvl+0x189/0x250 [ 675.655914][T16642] ? __pfx____ratelimit+0x10/0x10 [ 675.655935][T16642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.655955][T16642] ? __pfx__printk+0x10/0x10 [ 675.655983][T16642] ? __pfx___might_resched+0x10/0x10 [ 675.656015][T16642] should_fail_ex+0x414/0x560 [ 675.656045][T16642] should_failslab+0xa8/0x100 [ 675.656073][T16642] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 675.656099][T16642] ? __alloc_skb+0x112/0x2d0 [ 675.656122][T16642] __alloc_skb+0x112/0x2d0 [ 675.656149][T16642] netlink_sendmsg+0x5c6/0xb30 [ 675.656179][T16642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.656201][T16642] ? aa_sock_msg_perm+0xf1/0x1d0 [ 675.656233][T16642] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.656252][T16642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.656275][T16642] __sock_sendmsg+0x21c/0x270 [ 675.656308][T16642] ____sys_sendmsg+0x505/0x830 [ 675.656337][T16642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.656380][T16642] ? import_iovec+0x74/0xa0 [ 675.656405][T16642] ___sys_sendmsg+0x21f/0x2a0 [ 675.656430][T16642] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.656488][T16642] ? __fget_files+0x2a/0x420 [ 675.656515][T16642] ? __fget_files+0x3a0/0x420 [ 675.656549][T16642] __x64_sys_sendmsg+0x19b/0x260 [ 675.656575][T16642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.656609][T16642] ? __pfx_ksys_write+0x10/0x10 [ 675.656630][T16642] ? rcu_is_watching+0x15/0xb0 [ 675.656651][T16642] ? do_syscall_64+0xbe/0x3b0 [ 675.656674][T16642] do_syscall_64+0xfa/0x3b0 [ 675.656692][T16642] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.656711][T16642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.656728][T16642] ? clear_bhb_loop+0x60/0xb0 [ 675.656749][T16642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.656765][T16642] RIP: 0033:0x7f0ef8f8eec9 [ 675.656781][T16642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.656796][T16642] RSP: 002b:00007f0ef9eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.656814][T16642] RAX: ffffffffffffffda RBX: 00007f0ef91e5fa0 RCX: 00007f0ef8f8eec9 [ 675.656828][T16642] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 675.656838][T16642] RBP: 00007f0ef9eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 675.656848][T16642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.656857][T16642] R13: 00007f0ef91e6038 R14: 00007f0ef91e5fa0 R15: 00007ffe69e501e8 [ 675.656886][T16642] [ 675.959573][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 676.431278][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 676.477016][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2305'. [ 676.552586][T16664] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 676.601437][T16664] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 677.124695][T16687] sctp: [Deprecated]: syz.3.2313 (pid 16687) Use of int in max_burst socket option. [ 677.124695][T16687] Use struct sctp_assoc_value instead [ 677.271339][T16695] FAULT_INJECTION: forcing a failure. [ 677.271339][T16695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.284856][T16695] CPU: 1 UID: 0 PID: 16695 Comm: syz.1.2316 Not tainted syzkaller #0 PREEMPT(full) [ 677.284881][T16695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 677.284893][T16695] Call Trace: [ 677.284900][T16695] [ 677.284909][T16695] dump_stack_lvl+0x189/0x250 [ 677.284935][T16695] ? __pfx____ratelimit+0x10/0x10 [ 677.284966][T16695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.284988][T16695] ? __pfx__printk+0x10/0x10 [ 677.285025][T16695] should_fail_ex+0x414/0x560 [ 677.285059][T16695] _copy_to_user+0x31/0xb0 [ 677.285085][T16695] simple_read_from_buffer+0xe1/0x170 [ 677.285118][T16695] proc_fail_nth_read+0x1b3/0x220 [ 677.285142][T16695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.285166][T16695] ? rw_verify_area+0x2a6/0x4d0 [ 677.285188][T16695] ? __lock_acquire+0xab9/0xd20 [ 677.285211][T16695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.285234][T16695] vfs_read+0x200/0xa30 [ 677.285256][T16695] ? fdget_pos+0x247/0x320 [ 677.285288][T16695] ? __pfx___mutex_lock+0x10/0x10 [ 677.285311][T16695] ? __pfx_vfs_read+0x10/0x10 [ 677.285336][T16695] ? __fget_files+0x2a/0x420 [ 677.285368][T16695] ? __fget_files+0x3a0/0x420 [ 677.285402][T16695] ? __fget_files+0x2a/0x420 [ 677.285439][T16695] ksys_read+0x145/0x250 [ 677.285466][T16695] ? __pfx_ksys_read+0x10/0x10 [ 677.285486][T16695] ? rcu_is_watching+0x15/0xb0 [ 677.285510][T16695] ? do_syscall_64+0xbe/0x3b0 [ 677.285537][T16695] do_syscall_64+0xfa/0x3b0 [ 677.285558][T16695] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.285577][T16695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.285595][T16695] ? clear_bhb_loop+0x60/0xb0 [ 677.285617][T16695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.285635][T16695] RIP: 0033:0x7f8d5798d8dc [ 677.285652][T16695] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 677.285669][T16695] RSP: 002b:00007f8d587c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 677.285690][T16695] RAX: ffffffffffffffda RBX: 00007f8d57be5fa0 RCX: 00007f8d5798d8dc [ 677.285705][T16695] RDX: 000000000000000f RSI: 00007f8d587c90a0 RDI: 0000000000000005 [ 677.285720][T16695] RBP: 00007f8d587c9090 R08: 0000000000000000 R09: 0000000000000000 [ 677.285733][T16695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.285744][T16695] R13: 00007f8d57be6038 R14: 00007f8d57be5fa0 R15: 00007fffbc747a48 [ 677.285777][T16695] [ 677.623208][T16700] FAULT_INJECTION: forcing a failure. [ 677.623208][T16700] name failslab, interval 1, probability 0, space 0, times 0 [ 677.639900][T16700] CPU: 1 UID: 0 PID: 16700 Comm: syz.4.2319 Not tainted syzkaller #0 PREEMPT(full) [ 677.639927][T16700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 677.639939][T16700] Call Trace: [ 677.639946][T16700] [ 677.639955][T16700] dump_stack_lvl+0x189/0x250 [ 677.639982][T16700] ? __pfx____ratelimit+0x10/0x10 [ 677.640004][T16700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.640026][T16700] ? __pfx__printk+0x10/0x10 [ 677.640057][T16700] ? __pfx___might_resched+0x10/0x10 [ 677.640090][T16700] should_fail_ex+0x414/0x560 [ 677.640122][T16700] should_failslab+0xa8/0x100 [ 677.640151][T16700] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 677.640177][T16700] ? __alloc_skb+0x112/0x2d0 [ 677.640210][T16700] __alloc_skb+0x112/0x2d0 [ 677.640237][T16700] netlink_sendmsg+0x5c6/0xb30 [ 677.640269][T16700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.640296][T16700] ? aa_sock_msg_perm+0xf1/0x1d0 [ 677.640328][T16700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 677.640348][T16700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.640372][T16700] __sock_sendmsg+0x21c/0x270 [ 677.640405][T16700] ____sys_sendmsg+0x505/0x830 [ 677.640437][T16700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.640472][T16700] ? import_iovec+0x74/0xa0 [ 677.640499][T16700] ___sys_sendmsg+0x21f/0x2a0 [ 677.640526][T16700] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.640589][T16700] ? __fget_files+0x2a/0x420 [ 677.640616][T16700] ? __fget_files+0x3a0/0x420 [ 677.640654][T16700] __x64_sys_sendmsg+0x19b/0x260 [ 677.640682][T16700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.640718][T16700] ? __pfx_ksys_write+0x10/0x10 [ 677.640739][T16700] ? rcu_is_watching+0x15/0xb0 [ 677.640762][T16700] ? do_syscall_64+0xbe/0x3b0 [ 677.640789][T16700] do_syscall_64+0xfa/0x3b0 [ 677.640809][T16700] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.640830][T16700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.640849][T16700] ? clear_bhb_loop+0x60/0xb0 [ 677.640872][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.640891][T16700] RIP: 0033:0x7f0ef8f8eec9 [ 677.640908][T16700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.640926][T16700] RSP: 002b:00007f0ef9eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.640946][T16700] RAX: ffffffffffffffda RBX: 00007f0ef91e5fa0 RCX: 00007f0ef8f8eec9 [ 677.640961][T16700] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 677.640973][T16700] RBP: 00007f0ef9eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 677.640985][T16700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.640997][T16700] R13: 00007f0ef91e6038 R14: 00007f0ef91e5fa0 R15: 00007ffe69e501e8 [ 677.641028][T16700] [ 678.151450][T16701] __nla_validate_parse: 4 callbacks suppressed [ 678.151468][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2318'. [ 678.220294][T16720] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 678.223038][T16719] FAULT_INJECTION: forcing a failure. [ 678.223038][T16719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.257388][T16719] CPU: 1 UID: 0 PID: 16719 Comm: syz.0.2326 Not tainted syzkaller #0 PREEMPT(full) [ 678.257415][T16719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 678.257427][T16719] Call Trace: [ 678.257435][T16719] [ 678.257445][T16719] dump_stack_lvl+0x189/0x250 [ 678.257471][T16719] ? __pfx____ratelimit+0x10/0x10 [ 678.257493][T16719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.257515][T16719] ? __pfx__printk+0x10/0x10 [ 678.257554][T16719] should_fail_ex+0x414/0x560 [ 678.257587][T16719] _copy_to_user+0x31/0xb0 [ 678.257614][T16719] simple_read_from_buffer+0xe1/0x170 [ 678.257647][T16719] proc_fail_nth_read+0x1b3/0x220 [ 678.257671][T16719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 678.257695][T16719] ? rw_verify_area+0x2a6/0x4d0 [ 678.257718][T16719] ? __lock_acquire+0xab9/0xd20 [ 678.257743][T16719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 678.257765][T16719] vfs_read+0x200/0xa30 [ 678.257788][T16719] ? fdget_pos+0x247/0x320 [ 678.257820][T16719] ? __pfx___mutex_lock+0x10/0x10 [ 678.257850][T16719] ? __pfx_vfs_read+0x10/0x10 [ 678.257875][T16719] ? __fget_files+0x2a/0x420 [ 678.257908][T16719] ? __fget_files+0x3a0/0x420 [ 678.257934][T16719] ? __fget_files+0x2a/0x420 [ 678.257971][T16719] ksys_read+0x145/0x250 [ 678.257998][T16719] ? __pfx_ksys_read+0x10/0x10 [ 678.258019][T16719] ? rcu_is_watching+0x15/0xb0 [ 678.258042][T16719] ? do_syscall_64+0xbe/0x3b0 [ 678.258069][T16719] do_syscall_64+0xfa/0x3b0 [ 678.258088][T16719] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.258109][T16719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.258129][T16719] ? clear_bhb_loop+0x60/0xb0 [ 678.258152][T16719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.258169][T16719] RIP: 0033:0x7f054978d8dc [ 678.258185][T16719] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 678.258201][T16719] RSP: 002b:00007f054a5f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 678.258220][T16719] RAX: ffffffffffffffda RBX: 00007f05499e5fa0 RCX: 00007f054978d8dc [ 678.258235][T16719] RDX: 000000000000000f RSI: 00007f054a5f80a0 RDI: 0000000000000004 [ 678.258247][T16719] RBP: 00007f054a5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 678.258259][T16719] R10: 0000000000012000 R11: 0000000000000246 R12: 0000000000000001 [ 678.258271][T16719] R13: 00007f05499e6038 R14: 00007f05499e5fa0 R15: 00007fff3692f3a8 [ 678.258302][T16719] [ 678.662994][T16728] tipc: Enabling of bearer rejected, already enabled [ 678.678923][T16728] syzkaller0: entered promiscuous mode [ 678.684509][T16728] syzkaller0: entered allmulticast mode [ 678.716532][T16728] tipc: Resetting bearer [ 679.042937][T16746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2335'. [ 679.182950][T16751] FAULT_INJECTION: forcing a failure. [ 679.182950][T16751] name failslab, interval 1, probability 0, space 0, times 0 [ 679.197402][T16751] CPU: 1 UID: 0 PID: 16751 Comm: syz.0.2338 Not tainted syzkaller #0 PREEMPT(full) [ 679.197429][T16751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 679.197441][T16751] Call Trace: [ 679.197448][T16751] [ 679.197457][T16751] dump_stack_lvl+0x189/0x250 [ 679.197484][T16751] ? __pfx____ratelimit+0x10/0x10 [ 679.197506][T16751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.197528][T16751] ? __pfx__printk+0x10/0x10 [ 679.197559][T16751] ? __pfx___might_resched+0x10/0x10 [ 679.197585][T16751] ? fs_reclaim_acquire+0x7d/0x100 [ 679.197619][T16751] should_fail_ex+0x414/0x560 [ 679.197652][T16751] should_failslab+0xa8/0x100 [ 679.197681][T16751] kmem_cache_alloc_noprof+0x73/0x3c0 [ 679.197704][T16751] ? vm_area_alloc+0x24/0x140 [ 679.197736][T16751] vm_area_alloc+0x24/0x140 [ 679.197764][T16751] mmap_region+0xdc7/0x20c0 [ 679.197807][T16751] ? __pfx_mmap_region+0x10/0x10 [ 679.197832][T16751] ? __lock_acquire+0xab9/0xd20 [ 679.197874][T16751] ? __lock_acquire+0xab9/0xd20 [ 679.197953][T16751] ? mm_get_unmapped_area+0xa7/0xd0 [ 679.197993][T16751] ? bpf_lsm_mmap_addr+0x9/0x20 [ 679.198018][T16751] ? security_mmap_addr+0x71/0x270 [ 679.198053][T16751] do_mmap+0xc45/0x10d0 [ 679.198090][T16751] ? __pfx_do_mmap+0x10/0x10 [ 679.198113][T16751] ? down_write_killable+0x178/0x230 [ 679.198139][T16751] ? __pfx_vfs_write+0x10/0x10 [ 679.198162][T16751] ? __pfx_down_write_killable+0x10/0x10 [ 679.198188][T16751] ? apparmor_mmap_file+0xc4/0xe0 [ 679.198219][T16751] vm_mmap_pgoff+0x2a6/0x4d0 [ 679.198245][T16751] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 679.198263][T16751] ? ksys_write+0x22a/0x250 [ 679.198289][T16751] ? __pfx_ksys_write+0x10/0x10 [ 679.198314][T16751] ? ksys_mmap_pgoff+0xf4/0x760 [ 679.198338][T16751] ? __x64_sys_mmap+0x7f/0x140 [ 679.198359][T16751] do_syscall_64+0xfa/0x3b0 [ 679.198380][T16751] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.198400][T16751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.198419][T16751] ? clear_bhb_loop+0x60/0xb0 [ 679.198443][T16751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.198461][T16751] RIP: 0033:0x7f054978eec9 [ 679.198478][T16751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.198495][T16751] RSP: 002b:00007f054a5f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 679.198513][T16751] RAX: ffffffffffffffda RBX: 00007f05499e5fa0 RCX: 00007f054978eec9 [ 679.198526][T16751] RDX: 0000000000000000 RSI: 0000000000b36000 RDI: 0000200000000000 [ 679.198538][T16751] RBP: 00007f054a5f8090 R08: ffffffffffffffff R09: 0000000000000000 [ 679.198550][T16751] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 679.198560][T16751] R13: 00007f05499e6038 R14: 00007f05499e5fa0 R15: 00007fff3692f3a8 [ 679.198591][T16751] [ 679.821333][T16767] FAULT_INJECTION: forcing a failure. [ 679.821333][T16767] name failslab, interval 1, probability 0, space 0, times 0 [ 679.843552][T16767] CPU: 0 UID: 0 PID: 16767 Comm: syz.1.2342 Not tainted syzkaller #0 PREEMPT(full) [ 679.843579][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 679.843591][T16767] Call Trace: [ 679.843599][T16767] [ 679.843607][T16767] dump_stack_lvl+0x189/0x250 [ 679.843645][T16767] ? __pfx____ratelimit+0x10/0x10 [ 679.843666][T16767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.843688][T16767] ? __pfx__printk+0x10/0x10 [ 679.843714][T16767] ? __pfx___might_resched+0x10/0x10 [ 679.843740][T16767] ? fs_reclaim_acquire+0x7d/0x100 [ 679.843770][T16767] should_fail_ex+0x414/0x560 [ 679.843802][T16767] should_failslab+0xa8/0x100 [ 679.843829][T16767] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 679.843853][T16767] ? __d_alloc+0x36/0x7a0 [ 679.843877][T16767] __d_alloc+0x36/0x7a0 [ 679.843901][T16767] d_alloc_pseudo+0x21/0xc0 [ 679.843920][T16767] alloc_file_pseudo+0xcc/0x210 [ 679.843943][T16767] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 679.843959][T16767] ? evm_inode_alloc_security+0x40/0xb0 [ 679.843982][T16767] ? security_inode_alloc+0xd5/0x330 [ 679.844010][T16767] sock_alloc_file+0xb8/0x2e0 [ 679.844042][T16767] do_accept+0x34b/0x680 [ 679.844069][T16767] ? __pfx_do_accept+0x10/0x10 [ 679.844112][T16767] __sys_accept4+0x11c/0x1c0 [ 679.844136][T16767] ? __pfx___sys_accept4+0x10/0x10 [ 679.844157][T16767] ? __pfx_ksys_write+0x10/0x10 [ 679.844178][T16767] ? rcu_is_watching+0x15/0xb0 [ 679.844203][T16767] __x64_sys_accept4+0x9a/0xb0 [ 679.844227][T16767] do_syscall_64+0xfa/0x3b0 [ 679.844246][T16767] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.844267][T16767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.844286][T16767] ? clear_bhb_loop+0x60/0xb0 [ 679.844310][T16767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.844330][T16767] RIP: 0033:0x7f8d5798eec9 [ 679.844347][T16767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.844364][T16767] RSP: 002b:00007f8d587a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 679.844384][T16767] RAX: ffffffffffffffda RBX: 00007f8d57be6090 RCX: 00007f8d5798eec9 [ 679.844399][T16767] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 679.844411][T16767] RBP: 00007f8d587a8090 R08: 0000000000000000 R09: 0000000000000000 [ 679.844424][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.844435][T16767] R13: 00007f8d57be6128 R14: 00007f8d57be6090 R15: 00007fffbc747a48 [ 679.844466][T16767] [ 680.421538][T16774] FAULT_INJECTION: forcing a failure. [ 680.421538][T16774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.445625][T16774] CPU: 0 UID: 0 PID: 16774 Comm: syz.1.2345 Not tainted syzkaller #0 PREEMPT(full) [ 680.445651][T16774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 680.445663][T16774] Call Trace: [ 680.445671][T16774] [ 680.445679][T16774] dump_stack_lvl+0x189/0x250 [ 680.445707][T16774] ? __pfx____ratelimit+0x10/0x10 [ 680.445729][T16774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.445752][T16774] ? __pfx__printk+0x10/0x10 [ 680.445777][T16774] ? __might_fault+0xb0/0x130 [ 680.445815][T16774] should_fail_ex+0x414/0x560 [ 680.445848][T16774] _copy_from_iter+0x1de/0x1790 [ 680.445879][T16774] ? rcu_is_watching+0x15/0xb0 [ 680.445906][T16774] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 680.445934][T16774] ? __pfx__copy_from_iter+0x10/0x10 [ 680.445963][T16774] ? __local_bh_enable_ip+0x12d/0x1c0 [ 680.445994][T16774] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.446019][T16774] skb_copy_datagram_from_iter+0xf5/0x720 [ 680.446055][T16774] ? iov_iter_single_seg_count+0xc9/0x2f0 [ 680.446082][T16774] tun_get_user+0x1691/0x3e90 [ 680.446126][T16774] ? aa_file_perm+0x44d/0x1550 [ 680.446145][T16774] ? __pfx_tun_get_user+0x10/0x10 [ 680.446166][T16774] ? _parse_integer_limit+0x1ae/0x1f0 [ 680.446206][T16774] ? __lock_acquire+0xab9/0xd20 [ 680.446240][T16774] ? ref_tracker_alloc+0x318/0x460 [ 680.446266][T16774] ? __lock_acquire+0xab9/0xd20 [ 680.446293][T16774] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 680.446328][T16774] ? tun_get+0x1c/0x2f0 [ 680.446355][T16774] ? tun_get+0x1c/0x2f0 [ 680.446375][T16774] ? tun_get+0x1c/0x2f0 [ 680.446402][T16774] tun_chr_write_iter+0x113/0x200 [ 680.446427][T16774] vfs_write+0x5c9/0xb30 [ 680.446456][T16774] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 680.446479][T16774] ? __pfx_vfs_write+0x10/0x10 [ 680.446513][T16774] ? __fget_files+0x2a/0x420 [ 680.446549][T16774] ksys_write+0x145/0x250 [ 680.446575][T16774] ? __pfx_ksys_write+0x10/0x10 [ 680.446595][T16774] ? rcu_is_watching+0x15/0xb0 [ 680.446618][T16774] ? do_syscall_64+0xbe/0x3b0 [ 680.446644][T16774] do_syscall_64+0xfa/0x3b0 [ 680.446665][T16774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.446682][T16774] ? asm_sysvec_call_function_single+0x1a/0x20 [ 680.446702][T16774] ? clear_bhb_loop+0x60/0xb0 [ 680.446726][T16774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.446744][T16774] RIP: 0033:0x7f8d5798eec9 [ 680.446762][T16774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.446779][T16774] RSP: 002b:00007f8d587c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 680.446800][T16774] RAX: ffffffffffffffda RBX: 00007f8d57be5fa0 RCX: 00007f8d5798eec9 [ 680.446814][T16774] RDX: 0000000000000072 RSI: 0000200000000100 RDI: 0000000000000003 [ 680.446827][T16774] RBP: 00007f8d587c9090 R08: 0000000000000000 R09: 0000000000000000 [ 680.446839][T16774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.446851][T16774] R13: 00007f8d57be6038 R14: 00007f8d57be5fa0 R15: 00007fffbc747a48 [ 680.446883][T16774] [ 680.755062][T16780] syzkaller1: entered allmulticast mode [ 680.885449][T16790] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 680.948817][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'. [ 681.071491][T16787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2349'. [ 681.130068][T16803] netlink: 'syz.0.2353': attribute type 1 has an invalid length. [ 681.335190][T16803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 681.474226][T16806] bond2: (slave geneve2): making interface the new active one [ 681.514643][T16806] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 681.538728][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.548246][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.579742][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.608555][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.663405][T16806] syz.0.2353 (16806) used greatest stack depth: 18360 bytes left [ 682.607684][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 682.674301][T16878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2363'. [ 682.778018][T16886] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2363'. [ 682.793890][T16863] bond1 (unregistering): Released all slaves [ 682.824666][T16876] macsec0: entered promiscuous mode [ 682.853110][T16881] macsec0: left promiscuous mode [ 683.262119][T16909] macsec1: entered promiscuous mode [ 683.276648][T16909] ip6gretap0: entered promiscuous mode [ 683.327780][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 683.432520][T16918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2371'. [ 683.439665][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 683.453564][T16918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2371'. [ 683.481482][T16922] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 684.050694][T16944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2376'. [ 684.117633][T16942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2376'. [ 684.134411][T16942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2376'. [ 684.318545][T16947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2377'. [ 684.375749][T16953] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2380'. [ 684.547945][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2381'. [ 684.990232][T16978] netlink: 'syz.0.2387': attribute type 13 has an invalid length. [ 685.021327][T16978] netlink: 'syz.0.2387': attribute type 17 has an invalid length. [ 685.058251][T16978] erspan0: entered promiscuous mode [ 685.193523][T16978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.215112][T16978] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.242926][T16978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.281016][T16984] tipc: Started in network mode [ 685.297452][T16984] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 685.314812][T16984] tipc: Enabling of bearer rejected, failed to enable media [ 685.692056][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.698667][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.960559][T17002] tipc: Resetting bearer [ 685.986282][T17002] syzkaller0: left promiscuous mode [ 686.009317][T17002] ip6gretap1: left promiscuous mode [ 686.041606][T17002] macsec1: left promiscuous mode [ 686.064636][ T1002] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.082080][ T1002] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.101205][ T1002] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.308723][ T1002] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.930124][T17031] FAULT_INJECTION: forcing a failure. [ 686.930124][T17031] name failslab, interval 1, probability 0, space 0, times 0 [ 687.011707][T17031] CPU: 1 UID: 0 PID: 17031 Comm: syz.0.2399 Not tainted syzkaller #0 PREEMPT(full) [ 687.011736][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.011748][T17031] Call Trace: [ 687.011756][T17031] [ 687.011765][T17031] dump_stack_lvl+0x189/0x250 [ 687.011793][T17031] ? __pfx____ratelimit+0x10/0x10 [ 687.011816][T17031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.011837][T17031] ? __pfx__printk+0x10/0x10 [ 687.011870][T17031] ? __pfx___might_resched+0x10/0x10 [ 687.011904][T17031] should_fail_ex+0x414/0x560 [ 687.011936][T17031] should_failslab+0xa8/0x100 [ 687.011963][T17031] kmem_cache_alloc_noprof+0x73/0x3c0 [ 687.011987][T17031] ? ptlock_alloc+0x20/0x70 [ 687.012016][T17031] ptlock_alloc+0x20/0x70 [ 687.012041][T17031] pte_alloc_one+0x7d/0x170 [ 687.012064][T17031] __pte_alloc+0x25/0x1a0 [ 687.012105][T17031] __handle_mm_fault+0x49b3/0x5440 [ 687.012145][T17031] ? __pfx___handle_mm_fault+0x10/0x10 [ 687.012192][T17031] ? __pfx___might_resched+0x10/0x10 [ 687.012226][T17031] handle_mm_fault+0x40a/0x8e0 [ 687.012263][T17031] __get_user_pages+0x1699/0x2ce0 [ 687.012283][T17031] ? __lock_acquire+0xab9/0xd20 [ 687.012349][T17031] __gup_longterm_locked+0xde9/0x1660 [ 687.012387][T17031] ? sanity_check_pinned_pages+0x1241/0x1300 [ 687.012413][T17031] ? gup_fast_fallback+0x195f/0x2010 [ 687.012440][T17031] gup_fast_fallback+0x1e6a/0x2010 [ 687.012494][T17031] ? lockdep_hardirqs_on+0x9c/0x150 [ 687.012517][T17031] ? __pfx_gup_fast_fallback+0x10/0x10 [ 687.012539][T17031] ? md5_transform+0x26/0xf60 [ 687.012577][T17031] ? pin_user_pages_fast+0x4d/0xb0 [ 687.012602][T17031] iov_iter_extract_pages+0x35a/0x5e0 [ 687.012637][T17031] extract_iter_to_sg+0xe46/0x24e0 [ 687.012666][T17031] ? sanity_check_pinned_pages+0x123a/0x1300 [ 687.012709][T17031] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 687.012730][T17031] ? unpin_user_page+0xc9/0x1d0 [ 687.012750][T17031] ? __pfx_unpin_user_page+0x10/0x10 [ 687.012783][T17031] ? __asan_memset+0x22/0x50 [ 687.012807][T17031] hash_sendmsg+0x4f4/0x11d0 [ 687.012848][T17031] ? __lock_acquire+0xab9/0xd20 [ 687.012880][T17031] ? __pfx_hash_sendmsg+0x10/0x10 [ 687.012907][T17031] __sock_sendmsg+0x21c/0x270 [ 687.012942][T17031] sock_write_iter+0x258/0x330 [ 687.012974][T17031] ? __pfx_sock_write_iter+0x10/0x10 [ 687.013019][T17031] ? bpf_lsm_file_permission+0x9/0x20 [ 687.013040][T17031] ? security_file_permission+0x75/0x290 [ 687.013072][T17031] vfs_write+0x5c9/0xb30 [ 687.013112][T17031] ? __pfx_sock_write_iter+0x10/0x10 [ 687.013141][T17031] ? __pfx_vfs_write+0x10/0x10 [ 687.013177][T17031] ? __fget_files+0x2a/0x420 [ 687.013215][T17031] ksys_write+0x145/0x250 [ 687.013243][T17031] ? __pfx_ksys_write+0x10/0x10 [ 687.013265][T17031] ? rcu_is_watching+0x15/0xb0 [ 687.013289][T17031] ? do_syscall_64+0xbe/0x3b0 [ 687.013316][T17031] do_syscall_64+0xfa/0x3b0 [ 687.013337][T17031] ? lockdep_hardirqs_on+0x9c/0x150 [ 687.013358][T17031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.013378][T17031] ? clear_bhb_loop+0x60/0xb0 [ 687.013402][T17031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.013422][T17031] RIP: 0033:0x7f054978eec9 [ 687.013448][T17031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.013465][T17031] RSP: 002b:00007f054a5f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 687.013487][T17031] RAX: ffffffffffffffda RBX: 00007f05499e5fa0 RCX: 00007f054978eec9 [ 687.013502][T17031] RDX: 00000000fffffdef RSI: 0000200000000040 RDI: 0000000000000004 [ 687.013515][T17031] RBP: 00007f054a5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 687.013528][T17031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.013539][T17031] R13: 00007f05499e6038 R14: 00007f05499e5fa0 R15: 00007fff3692f3a8 [ 687.013572][T17031] [ 687.967924][T17058] FAULT_INJECTION: forcing a failure. [ 687.967924][T17058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.997558][T17058] CPU: 1 UID: 0 PID: 17058 Comm: syz.3.2406 Not tainted syzkaller #0 PREEMPT(full) [ 687.997587][T17058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.997599][T17058] Call Trace: [ 687.997607][T17058] [ 687.997615][T17058] dump_stack_lvl+0x189/0x250 [ 687.997641][T17058] ? __pfx____ratelimit+0x10/0x10 [ 687.997672][T17058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.997692][T17058] ? __pfx__printk+0x10/0x10 [ 687.997715][T17058] ? __might_fault+0xb0/0x130 [ 687.997748][T17058] should_fail_ex+0x414/0x560 [ 687.997777][T17058] _copy_from_iter+0x1de/0x1790 [ 687.997802][T17058] ? rcu_is_watching+0x15/0xb0 [ 687.997822][T17058] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 687.997848][T17058] ? __pfx__copy_from_iter+0x10/0x10 [ 687.997871][T17058] ? __build_skb_around+0x257/0x3e0 [ 687.997896][T17058] ? netlink_sendmsg+0x642/0xb30 [ 687.997916][T17058] ? skb_put+0x11b/0x210 [ 687.997940][T17058] netlink_sendmsg+0x6b2/0xb30 [ 687.997971][T17058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.997997][T17058] ? aa_sock_msg_perm+0xf1/0x1d0 [ 687.998027][T17058] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 687.998045][T17058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.998069][T17058] __sock_sendmsg+0x21c/0x270 [ 687.998102][T17058] ____sys_sendmsg+0x505/0x830 [ 687.998134][T17058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.998168][T17058] ? import_iovec+0x74/0xa0 [ 687.998195][T17058] ___sys_sendmsg+0x21f/0x2a0 [ 687.998224][T17058] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.998288][T17058] ? __fget_files+0x2a/0x420 [ 687.998314][T17058] ? __fget_files+0x3a0/0x420 [ 687.998350][T17058] __x64_sys_sendmsg+0x19b/0x260 [ 687.998378][T17058] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 687.998413][T17058] ? __pfx_ksys_write+0x10/0x10 [ 687.998442][T17058] ? do_syscall_64+0xbe/0x3b0 [ 687.998468][T17058] do_syscall_64+0xfa/0x3b0 [ 687.998487][T17058] ? lockdep_hardirqs_on+0x9c/0x150 [ 687.998506][T17058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.998524][T17058] ? clear_bhb_loop+0x60/0xb0 [ 687.998545][T17058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.998563][T17058] RIP: 0033:0x7ff8eb38eec9 [ 687.998580][T17058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.998598][T17058] RSP: 002b:00007ff8ec1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.998618][T17058] RAX: ffffffffffffffda RBX: 00007ff8eb5e6090 RCX: 00007ff8eb38eec9 [ 687.998633][T17058] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 687.998653][T17058] RBP: 00007ff8ec1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 687.998665][T17058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.998676][T17058] R13: 00007ff8eb5e6128 R14: 00007ff8eb5e6090 R15: 00007ffd1bb7e6e8 [ 687.998706][T17058] [ 688.388084][T17058] __nla_validate_parse: 5 callbacks suppressed [ 688.388103][T17058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2406'. [ 688.524139][T17065] FAULT_INJECTION: forcing a failure. [ 688.524139][T17065] name failslab, interval 1, probability 0, space 0, times 0 [ 688.626616][T17065] CPU: 0 UID: 0 PID: 17065 Comm: syz.0.2409 Not tainted syzkaller #0 PREEMPT(full) [ 688.626646][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 688.626658][T17065] Call Trace: [ 688.626666][T17065] [ 688.626673][T17065] dump_stack_lvl+0x189/0x250 [ 688.626703][T17065] ? __pfx____ratelimit+0x10/0x10 [ 688.626725][T17065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.626746][T17065] ? __pfx__printk+0x10/0x10 [ 688.626779][T17065] ? __pfx___might_resched+0x10/0x10 [ 688.626813][T17065] should_fail_ex+0x414/0x560 [ 688.626846][T17065] should_failslab+0xa8/0x100 [ 688.626876][T17065] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 688.626902][T17065] ? is_bpf_text_address+0x26/0x2b0 [ 688.626927][T17065] ? __alloc_skb+0x112/0x2d0 [ 688.626955][T17065] __alloc_skb+0x112/0x2d0 [ 688.626982][T17065] tipc_nl_compat_dumpit+0x116/0x7b0 [ 688.627011][T17065] tipc_nl_compat_recv+0x802/0xbe0 [ 688.627035][T17065] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 688.627054][T17065] ? __mutex_trylock_common+0x153/0x260 [ 688.627072][T17065] ? __pfx_tipc_nl_compat_name_table_dump_header+0x10/0x10 [ 688.627094][T17065] ? __pfx_tipc_nl_name_table_dump+0x10/0x10 [ 688.627111][T17065] ? __pfx_tipc_nl_compat_name_table_dump+0x10/0x10 [ 688.627135][T17065] ? __pfx___mutex_trylock_common+0x10/0x10 [ 688.627164][T17065] ? trace_contention_end+0x39/0x120 [ 688.627195][T17065] genl_family_rcv_msg_doit+0x215/0x300 [ 688.627233][T17065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 688.627272][T17065] ? stack_trace_save+0x9c/0xe0 [ 688.627297][T17065] genl_rcv_msg+0x60e/0x790 [ 688.627333][T17065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 688.627358][T17065] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 688.627396][T17065] netlink_rcv_skb+0x205/0x470 [ 688.627416][T17065] ? __lock_acquire+0xab9/0xd20 [ 688.627443][T17065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 688.627472][T17065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 688.627516][T17065] ? down_read+0x1ad/0x2e0 [ 688.627560][T17065] genl_rcv+0x28/0x40 [ 688.627585][T17065] netlink_unicast+0x82f/0x9e0 [ 688.627622][T17065] ? __pfx_netlink_unicast+0x10/0x10 [ 688.627649][T17065] ? netlink_sendmsg+0x642/0xb30 [ 688.627670][T17065] ? skb_put+0x11b/0x210 [ 688.627697][T17065] netlink_sendmsg+0x805/0xb30 [ 688.627732][T17065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.627760][T17065] ? aa_sock_msg_perm+0xf1/0x1d0 [ 688.627792][T17065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 688.627812][T17065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.627836][T17065] __sock_sendmsg+0x21c/0x270 [ 688.627870][T17065] ____sys_sendmsg+0x505/0x830 [ 688.627902][T17065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.627938][T17065] ? import_iovec+0x74/0xa0 [ 688.627971][T17065] ___sys_sendmsg+0x21f/0x2a0 [ 688.627999][T17065] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.628067][T17065] ? __fget_files+0x2a/0x420 [ 688.628094][T17065] ? __fget_files+0x3a0/0x420 [ 688.628132][T17065] __x64_sys_sendmsg+0x19b/0x260 [ 688.628161][T17065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 688.628198][T17065] ? __pfx_ksys_write+0x10/0x10 [ 688.628219][T17065] ? rcu_is_watching+0x15/0xb0 [ 688.628243][T17065] ? do_syscall_64+0xbe/0x3b0 [ 688.628270][T17065] do_syscall_64+0xfa/0x3b0 [ 688.628290][T17065] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.628310][T17065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.628329][T17065] ? clear_bhb_loop+0x60/0xb0 [ 688.628354][T17065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.628373][T17065] RIP: 0033:0x7f054978eec9 [ 688.628392][T17065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.628409][T17065] RSP: 002b:00007f054a5f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.628430][T17065] RAX: ffffffffffffffda RBX: 00007f05499e5fa0 RCX: 00007f054978eec9 [ 688.628445][T17065] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 688.628459][T17065] RBP: 00007f054a5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 688.628472][T17065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.628483][T17065] R13: 00007f05499e6038 R14: 00007f05499e5fa0 R15: 00007fff3692f3a8 [ 688.628518][T17065] [ 689.240303][T17072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2411'. [ 689.255355][T17072] FAULT_INJECTION: forcing a failure. [ 689.255355][T17072] name failslab, interval 1, probability 0, space 0, times 0 [ 689.305070][T17072] CPU: 0 UID: 0 PID: 17072 Comm: syz.4.2411 Not tainted syzkaller #0 PREEMPT(full) [ 689.305098][T17072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 689.305110][T17072] Call Trace: [ 689.305119][T17072] [ 689.305127][T17072] dump_stack_lvl+0x189/0x250 [ 689.305153][T17072] ? __pfx____ratelimit+0x10/0x10 [ 689.305175][T17072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.305196][T17072] ? __pfx__printk+0x10/0x10 [ 689.305226][T17072] ? __pfx___might_resched+0x10/0x10 [ 689.305259][T17072] should_fail_ex+0x414/0x560 [ 689.305290][T17072] ? alloc_fdtable+0xfc/0x2c0 [ 689.305314][T17072] should_failslab+0xa8/0x100 [ 689.305342][T17072] __kvmalloc_node_noprof+0x161/0x5f0 [ 689.305369][T17072] ? alloc_fdtable+0xfc/0x2c0 [ 689.305392][T17072] ? alloc_fdtable+0xc0/0x2c0 [ 689.305421][T17072] alloc_fdtable+0xfc/0x2c0 [ 689.305444][T17072] ? dup_fd+0x864/0xb60 [ 689.305471][T17072] dup_fd+0x86c/0xb60 [ 689.305502][T17072] ? _raw_spin_unlock+0x28/0x50 [ 689.305526][T17072] ? copy_fs_struct+0x1c3/0x270 [ 689.305552][T17072] ksys_unshare+0x450/0x8c0 [ 689.305581][T17072] ? __pfx_ksys_unshare+0x10/0x10 [ 689.305604][T17072] ? __pfx_ksys_write+0x10/0x10 [ 689.305625][T17072] ? rcu_is_watching+0x15/0xb0 [ 689.305654][T17072] __x64_sys_unshare+0x38/0x50 [ 689.305675][T17072] do_syscall_64+0xfa/0x3b0 [ 689.305697][T17072] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.305717][T17072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.305736][T17072] ? clear_bhb_loop+0x60/0xb0 [ 689.305760][T17072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.305778][T17072] RIP: 0033:0x7f0ef8f8eec9 [ 689.305795][T17072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.305813][T17072] RSP: 002b:00007f0ef9eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 689.305834][T17072] RAX: ffffffffffffffda RBX: 00007f0ef91e5fa0 RCX: 00007f0ef8f8eec9 [ 689.305849][T17072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 689.305861][T17072] RBP: 00007f0ef9eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 689.305873][T17072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.305885][T17072] R13: 00007f0ef91e6038 R14: 00007f0ef91e5fa0 R15: 00007ffe69e501e8 [ 689.305916][T17072] [ 689.904010][T17098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2422'. [ 689.924066][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'. [ 689.971524][T17096] Illegal XDP return value 837033472 on prog (id 1714) dev N/A, expect packet loss! [ 690.193309][T17105] FAULT_INJECTION: forcing a failure. [ 690.193309][T17105] name failslab, interval 1, probability 0, space 0, times 0 [ 690.208802][T17105] CPU: 1 UID: 0 PID: 17105 Comm: syz.2.2424 Not tainted syzkaller #0 PREEMPT(full) [ 690.208828][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 690.208840][T17105] Call Trace: [ 690.208848][T17105] [ 690.208856][T17105] dump_stack_lvl+0x189/0x250 [ 690.208883][T17105] ? __pfx____ratelimit+0x10/0x10 [ 690.208906][T17105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.208928][T17105] ? __pfx__printk+0x10/0x10 [ 690.208959][T17105] ? __pfx___might_resched+0x10/0x10 [ 690.208993][T17105] should_fail_ex+0x414/0x560 [ 690.209024][T17105] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 690.209046][T17105] should_failslab+0xa8/0x100 [ 690.209074][T17105] __kvmalloc_node_noprof+0x161/0x5f0 [ 690.209101][T17105] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 690.209128][T17105] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 690.209153][T17105] ? __pfx_css_rstat_updated+0x10/0x10 [ 690.209202][T17105] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 690.209226][T17105] ? __up_read+0x280/0x680 [ 690.209274][T17105] ? irqentry_exit+0x74/0x90 [ 690.209295][T17105] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.209316][T17105] ? irqentry_exit+0x74/0x90 [ 690.209335][T17105] ? exc_page_fault+0x9f/0xf0 [ 690.209365][T17105] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 690.209393][T17105] ? rep_movs_alternative+0x4a/0x90 [ 690.209422][T17105] ? _copy_from_user+0x94/0xb0 [ 690.209453][T17105] ? bpf_test_init+0x113/0x150 [ 690.209472][T17105] ? xdp_convert_md_to_buff+0x5b/0x330 [ 690.209497][T17105] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 690.209534][T17105] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 690.209561][T17105] ? __fget_files+0x2a/0x420 [ 690.209594][T17105] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 690.209617][T17105] bpf_prog_test_run+0x2c4/0x340 [ 690.209648][T17105] __sys_bpf+0x581/0x870 [ 690.209673][T17105] ? __pfx___sys_bpf+0x10/0x10 [ 690.209710][T17105] ? ksys_write+0x22a/0x250 [ 690.209736][T17105] ? __pfx_ksys_write+0x10/0x10 [ 690.209758][T17105] ? rcu_is_watching+0x15/0xb0 [ 690.209784][T17105] __x64_sys_bpf+0x7c/0x90 [ 690.209806][T17105] do_syscall_64+0xfa/0x3b0 [ 690.209826][T17105] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.209846][T17105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.209865][T17105] ? clear_bhb_loop+0x60/0xb0 [ 690.209889][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.209908][T17105] RIP: 0033:0x7f97a2b8eec9 [ 690.209924][T17105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.209940][T17105] RSP: 002b:00007f97a396a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 690.209957][T17105] RAX: ffffffffffffffda RBX: 00007f97a2de5fa0 RCX: 00007f97a2b8eec9 [ 690.209968][T17105] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 690.209978][T17105] RBP: 00007f97a396a090 R08: 0000000000000000 R09: 0000000000000000 [ 690.209988][T17105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.210000][T17105] R13: 00007f97a2de6038 R14: 00007f97a2de5fa0 R15: 00007fff38a4c638 [ 690.210031][T17105] [ 690.663812][T17109] netlink: 'syz.2.2426': attribute type 4 has an invalid length. [ 690.671637][T17109] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2426'. [ 690.821044][T17111] syzkaller1: entered promiscuous mode [ 690.826547][T17111] syzkaller1: entered allmulticast mode [ 690.864319][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2429'. [ 690.877976][T17123] bridge_slave_1: left allmulticast mode [ 690.884322][T17123] bridge_slave_1: left promiscuous mode [ 690.891017][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.903702][T17123] bridge_slave_0: left allmulticast mode [ 690.917606][T17123] bridge_slave_0: left promiscuous mode [ 690.924901][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.938352][T17129] netlink: 'syz.2.2431': attribute type 5 has an invalid length. [ 690.957168][T17131] FAULT_INJECTION: forcing a failure. [ 690.957168][T17131] name failslab, interval 1, probability 0, space 0, times 0 [ 690.971642][T17131] CPU: 0 UID: 0 PID: 17131 Comm: syz.1.2430 Not tainted syzkaller #0 PREEMPT(full) [ 690.971667][T17131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 690.971679][T17131] Call Trace: [ 690.971686][T17131] [ 690.971694][T17131] dump_stack_lvl+0x189/0x250 [ 690.971720][T17131] ? __pfx____ratelimit+0x10/0x10 [ 690.971742][T17131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.971764][T17131] ? __pfx__printk+0x10/0x10 [ 690.971793][T17131] ? __pfx___might_resched+0x10/0x10 [ 690.971819][T17131] ? fs_reclaim_acquire+0x7d/0x100 [ 690.971850][T17131] should_fail_ex+0x414/0x560 [ 690.971879][T17131] should_failslab+0xa8/0x100 [ 690.971904][T17131] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 690.971927][T17131] ? __request_module+0x2d1/0x5e0 [ 690.971956][T17131] kstrdup+0x42/0x100 [ 690.971976][T17131] __request_module+0x2d1/0x5e0 [ 690.972008][T17131] ? __pfx___request_module+0x10/0x10 [ 690.972045][T17131] ? bpf_lsm_capable+0x9/0x20 [ 690.972069][T17131] ? security_capable+0x7e/0x2e0 [ 690.972101][T17131] ? dev_load+0x21/0x1f0 [ 690.972121][T17131] dev_load+0x190/0x1f0 [ 690.972142][T17131] devinet_ioctl+0x130/0x1b50 [ 690.972181][T17131] ? __pfx_devinet_ioctl+0x10/0x10 [ 690.972212][T17131] ? get_user_ifreq+0x12c/0x180 [ 690.972241][T17131] inet_ioctl+0x3c0/0x4c0 [ 690.972261][T17131] ? __pfx_inet_ioctl+0x10/0x10 [ 690.972298][T17131] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 690.972319][T17131] ? packet_ioctl+0x254/0x350 [ 690.972338][T17131] sock_do_ioctl+0xd9/0x300 [ 690.972366][T17131] ? __pfx_sock_do_ioctl+0x10/0x10 [ 690.972390][T17131] ? __lock_acquire+0xab9/0xd20 [ 690.972427][T17131] sock_ioctl+0x576/0x790 [ 690.972454][T17131] ? __pfx_sock_ioctl+0x10/0x10 [ 690.972480][T17131] ? __fget_files+0x2a/0x420 [ 690.972503][T17131] ? __fget_files+0x3a0/0x420 [ 690.972527][T17131] ? __fget_files+0x2a/0x420 [ 690.972555][T17131] ? bpf_lsm_file_ioctl+0x9/0x20 [ 690.972585][T17131] ? __pfx_sock_ioctl+0x10/0x10 [ 690.972610][T17131] __se_sys_ioctl+0xfc/0x170 [ 690.972633][T17131] do_syscall_64+0xfa/0x3b0 [ 690.972654][T17131] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.972674][T17131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.972693][T17131] ? clear_bhb_loop+0x60/0xb0 [ 690.972716][T17131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.972735][T17131] RIP: 0033:0x7f8d5798eec9 [ 690.972752][T17131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.972769][T17131] RSP: 002b:00007f8d587a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.972790][T17131] RAX: ffffffffffffffda RBX: 00007f8d57be6090 RCX: 00007f8d5798eec9 [ 690.972804][T17131] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000005 [ 690.972817][T17131] RBP: 00007f8d587a8090 R08: 0000000000000000 R09: 0000000000000000 [ 690.972829][T17131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.972840][T17131] R13: 00007f8d57be6128 R14: 00007f8d57be6090 R15: 00007fffbc747a48 [ 690.972871][T17131] [ 691.444562][T17144] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2434'. [ 691.745200][T17155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2439'. [ 691.756456][T17155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2439'. [ 691.767874][T17155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2439'. [ 692.371612][T17174] FAULT_INJECTION: forcing a failure. [ 692.371612][T17174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.384824][T17174] CPU: 0 UID: 0 PID: 17174 Comm: syz.2.2446 Not tainted syzkaller #0 PREEMPT(full) [ 692.384851][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 692.384863][T17174] Call Trace: [ 692.384870][T17174] [ 692.384878][T17174] dump_stack_lvl+0x189/0x250 [ 692.384905][T17174] ? __pfx____ratelimit+0x10/0x10 [ 692.384927][T17174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.384947][T17174] ? __pfx__printk+0x10/0x10 [ 692.384973][T17174] ? __might_fault+0xb0/0x130 [ 692.385010][T17174] should_fail_ex+0x414/0x560 [ 692.385043][T17174] _copy_from_user+0x2d/0xb0 [ 692.385069][T17174] ___sys_recvmsg+0x12e/0x510 [ 692.385101][T17174] ? __pfx____sys_recvmsg+0x10/0x10 [ 692.385157][T17174] ? __might_fault+0xb0/0x130 [ 692.385186][T17174] do_recvmmsg+0x307/0x770 [ 692.385221][T17174] ? __pfx_do_recvmmsg+0x10/0x10 [ 692.385260][T17174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 692.385301][T17174] __x64_sys_recvmmsg+0x190/0x240 [ 692.385330][T17174] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 692.385354][T17174] ? rcu_is_watching+0x15/0xb0 [ 692.385378][T17174] ? do_syscall_64+0xbe/0x3b0 [ 692.385410][T17174] do_syscall_64+0xfa/0x3b0 [ 692.385430][T17174] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.385450][T17174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.385470][T17174] ? clear_bhb_loop+0x60/0xb0 [ 692.385498][T17174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.385517][T17174] RIP: 0033:0x7f97a2b8eec9 [ 692.385534][T17174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.385555][T17174] RSP: 002b:00007f97a396a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 692.385575][T17174] RAX: ffffffffffffffda RBX: 00007f97a2de5fa0 RCX: 00007f97a2b8eec9 [ 692.385590][T17174] RDX: 0000000003ffffbd RSI: 0000200000001d00 RDI: 0000000000000005 [ 692.385602][T17174] RBP: 00007f97a396a090 R08: 0000000000000000 R09: 0000000000000000 [ 692.385614][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.385625][T17174] R13: 00007f97a2de6038 R14: 00007f97a2de5fa0 R15: 00007fff38a4c638 [ 692.385658][T17174] [ 692.656365][T17176] FAULT_INJECTION: forcing a failure. [ 692.656365][T17176] name failslab, interval 1, probability 0, space 0, times 0 [ 692.712704][T17176] CPU: 1 UID: 0 PID: 17176 Comm: syz.4.2447 Not tainted syzkaller #0 PREEMPT(full) [ 692.712733][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 692.712745][T17176] Call Trace: [ 692.712753][T17176] [ 692.712761][T17176] dump_stack_lvl+0x189/0x250 [ 692.712788][T17176] ? __pfx____ratelimit+0x10/0x10 [ 692.712810][T17176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.712832][T17176] ? __pfx__printk+0x10/0x10 [ 692.712863][T17176] ? __pfx___might_resched+0x10/0x10 [ 692.712897][T17176] should_fail_ex+0x414/0x560 [ 692.712927][T17176] should_failslab+0xa8/0x100 [ 692.712955][T17176] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 692.712981][T17176] ? __alloc_skb+0x112/0x2d0 [ 692.713006][T17176] ? __pfx___mutex_trylock_common+0x10/0x10 [ 692.713031][T17176] __alloc_skb+0x112/0x2d0 [ 692.713057][T17176] netlink_dump+0x1b7/0xe90 [ 692.713093][T17176] ? __netlink_lookup+0xbd/0x810 [ 692.713120][T17176] ? __pfx_netlink_dump+0x10/0x10 [ 692.713139][T17176] ? __netlink_lookup+0x752/0x810 [ 692.713180][T17176] ? netlink_lookup+0x30/0x200 [ 692.713199][T17176] ? netlink_lookup+0x30/0x200 [ 692.713218][T17176] ? netlink_lookup+0x30/0x200 [ 692.713244][T17176] __netlink_dump_start+0x5cb/0x7e0 [ 692.713276][T17176] rtnetlink_rcv_msg+0x9eb/0xb70 [ 692.713300][T17176] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 692.713322][T17176] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 692.713342][T17176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 692.713363][T17176] ? __pfx_rtnl_dumpit+0x10/0x10 [ 692.713384][T17176] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 692.713420][T17176] netlink_rcv_skb+0x205/0x470 [ 692.713440][T17176] ? __lock_acquire+0xab9/0xd20 [ 692.713467][T17176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 692.713490][T17176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 692.713525][T17176] ? netlink_deliver_tap+0x2e/0x1b0 [ 692.713555][T17176] netlink_unicast+0x82f/0x9e0 [ 692.713585][T17176] ? __pfx_netlink_unicast+0x10/0x10 [ 692.713607][T17176] ? netlink_sendmsg+0x642/0xb30 [ 692.713628][T17176] ? skb_put+0x11b/0x210 [ 692.713657][T17176] netlink_sendmsg+0x805/0xb30 [ 692.713691][T17176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.713717][T17176] ? aa_sock_msg_perm+0xf1/0x1d0 [ 692.713749][T17176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 692.713768][T17176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.713792][T17176] __sock_sendmsg+0x21c/0x270 [ 692.713825][T17176] ____sys_sendmsg+0x505/0x830 [ 692.713857][T17176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 692.713893][T17176] ? import_iovec+0x74/0xa0 [ 692.713921][T17176] ___sys_sendmsg+0x21f/0x2a0 [ 692.713950][T17176] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.714016][T17176] ? __fget_files+0x2a/0x420 [ 692.714042][T17176] ? __fget_files+0x3a0/0x420 [ 692.714086][T17176] __x64_sys_sendmsg+0x19b/0x260 [ 692.714115][T17176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 692.714151][T17176] ? __pfx_ksys_write+0x10/0x10 [ 692.714171][T17176] ? rcu_is_watching+0x15/0xb0 [ 692.714195][T17176] ? do_syscall_64+0xbe/0x3b0 [ 692.714222][T17176] do_syscall_64+0xfa/0x3b0 [ 692.714242][T17176] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.714263][T17176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.714282][T17176] ? clear_bhb_loop+0x60/0xb0 [ 692.714306][T17176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.714324][T17176] RIP: 0033:0x7f0ef8f8eec9 [ 692.714342][T17176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.714359][T17176] RSP: 002b:00007f0ef9eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.714379][T17176] RAX: ffffffffffffffda RBX: 00007f0ef91e5fa0 RCX: 00007f0ef8f8eec9 [ 692.714394][T17176] RDX: 0000000000008884 RSI: 00002000000005c0 RDI: 0000000000000003 [ 692.714407][T17176] RBP: 00007f0ef9eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 692.714419][T17176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.714431][T17176] R13: 00007f0ef91e6038 R14: 00007f0ef91e5fa0 R15: 00007ffe69e501e8 [ 692.714464][T17176] [ 693.626903][T17206] __nla_validate_parse: 3 callbacks suppressed [ 693.626921][T17206] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2457'. [ 693.896379][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'. [ 693.926296][T17218] vxcan1: entered allmulticast mode [ 693.940848][T17218] vxcan1: left allmulticast mode [ 694.032044][T17223] raw_sendmsg: syz.0.2460 forgot to set AF_INET. Fix it! [ 694.103230][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2458'. [ 694.267951][T17222] FAULT_INJECTION: forcing a failure. [ 694.267951][T17222] name failslab, interval 1, probability 0, space 0, times 0 [ 694.297393][T17222] CPU: 1 UID: 0 PID: 17222 Comm: syz.1.2461 Not tainted syzkaller #0 PREEMPT(full) [ 694.297419][T17222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 694.297430][T17222] Call Trace: [ 694.297438][T17222] [ 694.297445][T17222] dump_stack_lvl+0x189/0x250 [ 694.297471][T17222] ? __pfx____ratelimit+0x10/0x10 [ 694.297492][T17222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.297513][T17222] ? __pfx__printk+0x10/0x10 [ 694.297540][T17222] ? register_lock_class+0x51/0x320 [ 694.297575][T17222] should_fail_ex+0x414/0x560 [ 694.297609][T17222] should_failslab+0xa8/0x100 [ 694.297636][T17222] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 694.297662][T17222] ? __alloc_skb+0x112/0x2d0 [ 694.297690][T17222] __alloc_skb+0x112/0x2d0 [ 694.297716][T17222] nr_write_internal+0xe2/0xc60 [ 694.297747][T17222] nr_release+0x2bf/0x450 [ 694.297780][T17222] sock_close+0xc0/0x240 [ 694.297809][T17222] ? __pfx_sock_close+0x10/0x10 [ 694.297836][T17222] __fput+0x44c/0xa70 [ 694.297869][T17222] task_work_run+0x1d1/0x260 [ 694.297896][T17222] ? __pfx_task_work_run+0x10/0x10 [ 694.297928][T17222] ? exit_to_user_mode_loop+0x40/0x110 [ 694.297959][T17222] exit_to_user_mode_loop+0xec/0x110 [ 694.297986][T17222] do_syscall_64+0x2bd/0x3b0 [ 694.298008][T17222] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.298029][T17222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.298049][T17222] ? clear_bhb_loop+0x60/0xb0 [ 694.298072][T17222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.298091][T17222] RIP: 0033:0x7f8d5798eec9 [ 694.298108][T17222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.298124][T17222] RSP: 002b:00007f8d587a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 694.298153][T17222] RAX: fffffffffffffff2 RBX: 00007f8d57be6090 RCX: 00007f8d5798eec9 [ 694.298168][T17222] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 694.298181][T17222] RBP: 00007f8d587a8090 R08: 0000000000000000 R09: 0000000000000000 [ 694.298193][T17222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.298205][T17222] R13: 00007f8d57be6128 R14: 00007f8d57be6090 R15: 00007fffbc747a48 [ 694.298239][T17222] [ 694.633379][T17240] tipc: Enabled bearer , priority 24 [ 694.672144][T17243] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2466'. [ 694.691684][T17247] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2469'. [ 694.700847][T17247] FAULT_INJECTION: forcing a failure. [ 694.700847][T17247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.701897][T17247] [ 694.701905][T17247] ====================================================== [ 694.701913][T17247] WARNING: possible circular locking dependency detected [ 694.701926][T17247] syzkaller #0 Not tainted [ 694.701936][T17247] ------------------------------------------------------ [ 694.701944][T17247] syz.4.2469/17247 is trying to acquire lock: [ 694.701954][T17247] ffffffff8e12e320 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 694.702003][T17247] [ 694.702003][T17247] but task is already holding lock: [ 694.702008][T17247] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 694.702048][T17247] [ 694.702048][T17247] which lock already depends on the new lock. [ 694.702048][T17247] [ 694.702053][T17247] [ 694.702053][T17247] the existing dependency chain (in reverse order) is: [ 694.702059][T17247] [ 694.702059][T17247] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 694.702079][T17247] lock_acquire+0x120/0x360 [ 694.702100][T17247] _raw_spin_lock_nested+0x32/0x50 [ 694.702117][T17247] raw_spin_rq_lock_nested+0x2a/0x140 [ 694.702140][T17247] task_rq_lock+0xbc/0x470 [ 694.702162][T17247] cgroup_move_task+0x92/0x2a0 [ 694.702178][T17247] css_set_move_task+0x658/0x9e0 [ 694.702197][T17247] cgroup_post_fork+0x1ef/0x790 [ 694.702215][T17247] copy_process+0x3862/0x3c00 [ 694.702231][T17247] kernel_clone+0x21e/0x840 [ 694.702249][T17247] user_mode_thread+0xdd/0x140 [ 694.702265][T17247] rest_init+0x23/0x300 [ 694.702286][T17247] start_kernel+0x3a9/0x410 [ 694.702308][T17247] x86_64_start_reservations+0x24/0x30 [ 694.702325][T17247] x86_64_start_kernel+0x143/0x1c0 [ 694.702342][T17247] common_startup_64+0x13e/0x147 [ 694.702365][T17247] [ 694.702365][T17247] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 694.702389][T17247] lock_acquire+0x120/0x360 [ 694.702412][T17247] _raw_spin_lock_irqsave+0xa7/0xf0 [ 694.702428][T17247] try_to_wake_up+0x67/0x12b0 [ 694.702446][T17247] __wake_up_common_lock+0x137/0x1f0 [ 694.702467][T17247] tty_port_default_wakeup+0xa2/0xf0 [ 694.702485][T17247] serial8250_tx_chars+0x72e/0x970 [ 694.702502][T17247] serial8250_handle_irq+0x633/0xbb0 [ 694.702517][T17247] serial8250_default_handle_irq+0xbf/0x1e0 [ 694.702537][T17247] serial8250_interrupt+0x8d/0x160 [ 694.702558][T17247] __handle_irq_event_percpu+0x289/0x980 [ 694.702578][T17247] handle_irq_event+0x8b/0x1e0 [ 694.702596][T17247] handle_edge_irq+0x23b/0xa10 [ 694.702612][T17247] __common_interrupt+0x13e/0x1f0 [ 694.702637][T17247] common_interrupt+0xb6/0xe0 [ 694.702660][T17247] asm_common_interrupt+0x26/0x40 [ 694.702677][T17247] iovec_from_user+0x160/0x250 [ 694.702697][T17247] __import_iovec+0x163/0x7f0 [ 694.702717][T17247] import_iovec+0x74/0xa0 [ 694.702736][T17247] vfs_writev+0x1a3/0x960 [ 694.702749][T17247] do_writev+0x14d/0x2d0 [ 694.702762][T17247] do_syscall_64+0xfa/0x3b0 [ 694.702781][T17247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.702797][T17247] [ 694.702797][T17247] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 694.702829][T17247] lock_acquire+0x120/0x360 [ 694.702850][T17247] _raw_spin_lock_irqsave+0xa7/0xf0 [ 694.702864][T17247] __wake_up_common_lock+0x2f/0x1f0 [ 694.702882][T17247] tty_port_default_wakeup+0xa2/0xf0 [ 694.702901][T17247] serial8250_tx_chars+0x72e/0x970 [ 694.702917][T17247] serial8250_handle_irq+0x633/0xbb0 [ 694.702932][T17247] serial8250_default_handle_irq+0xbf/0x1e0 [ 694.702952][T17247] serial8250_interrupt+0x8d/0x160 [ 694.702974][T17247] __handle_irq_event_percpu+0x289/0x980 [ 694.702994][T17247] handle_irq_event+0x8b/0x1e0 [ 694.703013][T17247] handle_edge_irq+0x23b/0xa10 [ 694.703028][T17247] __common_interrupt+0x13e/0x1f0 [ 694.703051][T17247] common_interrupt+0xb6/0xe0 [ 694.703072][T17247] asm_common_interrupt+0x26/0x40 [ 694.703089][T17247] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 694.703106][T17247] uart_port_unlock_deref+0x111/0x2f0 [ 694.703122][T17247] uart_write+0xe8/0x130 [ 694.703135][T17247] n_tty_write+0xd29/0x1200 [ 694.703157][T17247] file_tty_write+0x551/0xa20 [ 694.703183][T17247] vfs_write+0x5c9/0xb30 [ 694.703201][T17247] ksys_write+0x145/0x250 [ 694.703221][T17247] do_syscall_64+0xfa/0x3b0 [ 694.703240][T17247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.703257][T17247] [ 694.703257][T17247] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 694.703283][T17247] lock_acquire+0x120/0x360 [ 694.703306][T17247] _raw_spin_lock_irqsave+0xa7/0xf0 [ 694.703321][T17247] serial8250_console_write+0x17e/0x1ba0 [ 694.703339][T17247] console_flush_all+0x728/0xc40 [ 694.703357][T17247] console_unlock+0xc4/0x270 [ 694.703372][T17247] vprintk_emit+0x5b7/0x7a0 [ 694.703388][T17247] _printk+0xcf/0x120 [ 694.703408][T17247] register_console+0xa8b/0xf90 [ 694.703426][T17247] univ8250_console_init+0x3a/0x70 [ 694.703445][T17247] console_init+0x10e/0x430 [ 694.703461][T17247] start_kernel+0x254/0x410 [ 694.703485][T17247] x86_64_start_reservations+0x24/0x30 [ 694.703504][T17247] x86_64_start_kernel+0x143/0x1c0 [ 694.703522][T17247] common_startup_64+0x13e/0x147 [ 694.703544][T17247] [ 694.703544][T17247] -> #0 (console_owner){-...}-{0:0}: [ 694.703567][T17247] validate_chain+0xb9b/0x2140 [ 694.703583][T17247] __lock_acquire+0xab9/0xd20 [ 694.703605][T17247] lock_acquire+0x120/0x360 [ 694.703628][T17247] console_flush_all+0x6d2/0xc40 [ 694.703646][T17247] console_unlock+0xc4/0x270 [ 694.703662][T17247] vprintk_emit+0x5b7/0x7a0 [ 694.703677][T17247] _printk+0xcf/0x120 [ 694.703697][T17247] should_fail_ex+0x3f5/0x560 [ 694.703720][T17247] strncpy_from_user+0x36/0x290 [ 694.703741][T17247] strncpy_from_user_nofault+0x72/0x150 [ 694.703760][T17247] bpf_probe_read_user_str+0x2a/0x70 [ 694.703787][T17247] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 694.703801][T17247] bpf_trace_run4+0x28b/0x4a0 [ 694.703832][T17247] __bpf_trace_sched_switch+0x17a/0x1e0 [ 694.703854][T17247] __traceiter_sched_switch+0x9d/0xd0 [ 694.703872][T17247] __schedule+0x238f/0x4cc0 [ 694.703887][T17247] preempt_schedule_common+0x83/0xd0 [ 694.703903][T17247] preempt_schedule+0xae/0xc0 [ 694.703918][T17247] preempt_schedule_thunk+0x16/0x30 [ 694.703942][T17247] vprintk_emit+0x69a/0x7a0 [ 694.703958][T17247] _printk+0xcf/0x120 [ 694.703978][T17247] __nla_validate_parse+0x2563/0x2d40 [ 694.703995][T17247] __nla_parse+0x40/0x60 [ 694.704011][T17247] nfnetlink_rcv+0x1177/0x2590 [ 694.704027][T17247] netlink_unicast+0x82f/0x9e0 [ 694.704044][T17247] netlink_sendmsg+0x805/0xb30 [ 694.704063][T17247] __sock_sendmsg+0x21c/0x270 [ 694.704087][T17247] ____sys_sendmsg+0x505/0x830 [ 694.704111][T17247] ___sys_sendmsg+0x21f/0x2a0 [ 694.704132][T17247] __x64_sys_sendmsg+0x19b/0x260 [ 694.704155][T17247] do_syscall_64+0xfa/0x3b0 [ 694.704172][T17247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.704188][T17247] [ 694.704188][T17247] other info that might help us debug this: [ 694.704188][T17247] [ 694.704194][T17247] Chain exists of: [ 694.704194][T17247] console_owner --> &p->pi_lock --> &rq->__lock [ 694.704194][T17247] [ 694.704224][T17247] Possible unsafe locking scenario: [ 694.704224][T17247] [ 694.704230][T17247] CPU0 CPU1 [ 694.704236][T17247] ---- ---- [ 694.704243][T17247] lock(&rq->__lock); [ 694.704254][T17247] lock(&p->pi_lock); [ 694.704268][T17247] lock(&rq->__lock); [ 694.704280][T17247] lock(console_owner); [ 694.704291][T17247] [ 694.704291][T17247] *** DEADLOCK *** [ 694.704291][T17247] [ 694.704303][T17247] 5 locks held by syz.4.2469/17247: [ 694.704314][T17247] #0: ffff8880253790d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 694.704363][T17247] #1: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 694.704410][T17247] #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 694.704454][T17247] #3: ffffffff8e12e380 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 694.704499][T17247] #4: ffffffff8e015c50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 694.704542][T17247] [ 694.704542][T17247] stack backtrace: [ 694.704552][T17247] CPU: 0 UID: 0 PID: 17247 Comm: syz.4.2469 Not tainted syzkaller #0 PREEMPT(full) [ 694.704573][T17247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 694.704584][T17247] Call Trace: [ 694.704592][T17247] [ 694.704599][T17247] dump_stack_lvl+0x189/0x250 [ 694.704621][T17247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.704640][T17247] ? __pfx__printk+0x10/0x10 [ 694.704665][T17247] ? print_lock_name+0xde/0x100 [ 694.704690][T17247] print_circular_bug+0x2ee/0x310 [ 694.704711][T17247] check_noncircular+0x134/0x160 [ 694.704732][T17247] validate_chain+0xb9b/0x2140 [ 694.704762][T17247] __lock_acquire+0xab9/0xd20 [ 694.704789][T17247] ? console_flush_all+0x13a/0xc40 [ 694.704808][T17247] lock_acquire+0x120/0x360 [ 694.704840][T17247] ? console_flush_all+0x13a/0xc40 [ 694.704865][T17247] ? do_raw_spin_unlock+0x122/0x240 [ 694.704885][T17247] ? console_flush_all+0x13a/0xc40 [ 694.704907][T17247] console_flush_all+0x6d2/0xc40 [ 694.704927][T17247] ? console_flush_all+0x13a/0xc40 [ 694.704947][T17247] ? console_flush_all+0x13a/0xc40 [ 694.704970][T17247] ? __pfx_console_flush_all+0x10/0x10 [ 694.704996][T17247] ? is_printk_cpu_sync_owner+0x32/0x40 [ 694.705021][T17247] console_unlock+0xc4/0x270 [ 694.705040][T17247] ? __pfx_console_unlock+0x10/0x10 [ 694.705059][T17247] ? is_printk_cpu_sync_owner+0x32/0x40 [ 694.705084][T17247] vprintk_emit+0x5b7/0x7a0 [ 694.705103][T17247] ? __pfx_vprintk_emit+0x10/0x10 [ 694.705122][T17247] ? number+0xd18/0xf60 [ 694.705150][T17247] ? number+0x41/0xf60 [ 694.705179][T17247] _printk+0xcf/0x120 [ 694.705201][T17247] ? __pfx____ratelimit+0x10/0x10 [ 694.705221][T17247] ? __pfx__printk+0x10/0x10 [ 694.705251][T17247] should_fail_ex+0x3f5/0x560 [ 694.705278][T17247] strncpy_from_user+0x36/0x290 [ 694.705303][T17247] strncpy_from_user_nofault+0x72/0x150 [ 694.705324][T17247] bpf_probe_read_user_str+0x2a/0x70 [ 694.705354][T17247] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 694.705370][T17247] bpf_trace_run4+0x28b/0x4a0 [ 694.705389][T17247] ? this_cpu_in_panic+0x4f/0x80 [ 694.705416][T17247] ? _prb_read_valid+0xa07/0xa90 [ 694.705442][T17247] ? bpf_trace_run4+0x19c/0x4a0 [ 694.705465][T17247] ? __pfx_bpf_trace_run4+0x10/0x10 [ 694.705491][T17247] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 694.705516][T17247] __bpf_trace_sched_switch+0x17a/0x1e0 [ 694.705539][T17247] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 694.705562][T17247] ? psi_group_change+0xab8/0x1050 [ 694.705592][T17247] ? __schedule+0x22e9/0x4cc0 [ 694.705610][T17247] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 694.705632][T17247] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 694.705654][T17247] __traceiter_sched_switch+0x9d/0xd0 [ 694.705678][T17247] __schedule+0x238f/0x4cc0 [ 694.705700][T17247] ? this_cpu_in_panic+0x4f/0x80 [ 694.705727][T17247] ? _prb_read_valid+0xa07/0xa90 [ 694.705755][T17247] ? console_flush_all+0x13a/0xc40 [ 694.705778][T17247] ? __pfx___schedule+0x10/0x10 [ 694.705800][T17247] ? __pfx___console_unlock+0x10/0x10 [ 694.705824][T17247] ? __lock_acquire+0xab9/0xd20 [ 694.705848][T17247] ? preempt_schedule+0xae/0xc0 [ 694.705866][T17247] preempt_schedule_common+0x83/0xd0 [ 694.705884][T17247] preempt_schedule+0xae/0xc0 [ 694.705901][T17247] ? __pfx_preempt_schedule+0x10/0x10 [ 694.705918][T17247] ? console_unlock+0x21b/0x270 [ 694.705937][T17247] ? __pfx_console_unlock+0x10/0x10 [ 694.705954][T17247] preempt_schedule_thunk+0x16/0x30 [ 694.705980][T17247] ? vprintk_emit+0x695/0x7a0 [ 694.706003][T17247] vprintk_emit+0x69a/0x7a0 [ 694.706020][T17247] ? __pfx_vprintk_emit+0x10/0x10 [ 694.706036][T17247] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 694.706053][T17247] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 694.706078][T17247] _printk+0xcf/0x120 [ 694.706099][T17247] ? __pfx____ratelimit+0x10/0x10 [ 694.706118][T17247] ? __pfx__printk+0x10/0x10 [ 694.706142][T17247] ? nla_validate_array+0xfc/0x260 [ 694.706166][T17247] __nla_validate_parse+0x2563/0x2d40 [ 694.706193][T17247] ? __pfx___nla_validate_parse+0x10/0x10 [ 694.706213][T17247] ? __lock_acquire+0xab9/0xd20 [ 694.706242][T17247] ? nfnl_pernet+0x23/0x240 [ 694.706275][T17247] __nla_parse+0x40/0x60 [ 694.706294][T17247] nfnetlink_rcv+0x1177/0x2590 [ 694.706327][T17247] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 694.706367][T17247] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.706396][T17247] netlink_unicast+0x82f/0x9e0 [ 694.706418][T17247] ? __pfx_netlink_unicast+0x10/0x10 [ 694.706438][T17247] ? netlink_sendmsg+0x642/0xb30 [ 694.706459][T17247] ? skb_put+0x11b/0x210 [ 694.706482][T17247] netlink_sendmsg+0x805/0xb30 [ 694.706508][T17247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.706531][T17247] ? aa_sock_msg_perm+0xf1/0x1d0 [ 694.706560][T17247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 694.706579][T17247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.706602][T17247] __sock_sendmsg+0x21c/0x270 [ 694.706631][T17247] ____sys_sendmsg+0x505/0x830 [ 694.706656][T17247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.706685][T17247] ? import_iovec+0x74/0xa0 [ 694.706709][T17247] ___sys_sendmsg+0x21f/0x2a0 [ 694.706734][T17247] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.706774][T17247] ? __fget_files+0x2a/0x420 [ 694.706816][T17247] ? __fget_files+0x3a0/0x420 [ 694.706853][T17247] __x64_sys_sendmsg+0x19b/0x260 [ 694.706879][T17247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.706908][T17247] ? __pfx_ksys_write+0x10/0x10 [ 694.706928][T17247] ? rcu_is_watching+0x15/0xb0 [ 694.706948][T17247] ? do_syscall_64+0xbe/0x3b0 [ 694.706971][T17247] do_syscall_64+0xfa/0x3b0 [ 694.706996][T17247] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.707015][T17247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.707035][T17247] ? clear_bhb_loop+0x60/0xb0 [ 694.707055][T17247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.707073][T17247] RIP: 0033:0x7f0ef8f8eec9 [ 694.707088][T17247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.707104][T17247] RSP: 002b:00007f0ef9eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.707123][T17247] RAX: ffffffffffffffda RBX: 00007f0ef91e5fa0 RCX: 00007f0ef8f8eec9 [ 694.707137][T17247] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 694.707148][T17247] RBP: 00007f0ef9eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 694.707159][T17247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.707170][T17247] R13: 00007f0ef91e6038 R14: 00007f0ef91e5fa0 R15: 00007ffe69e501e8 [ 694.707190][T17247] [ 696.156401][T17247] CPU: 0 UID: 0 PID: 17247 Comm: syz.4.2469 Not tainted syzkaller #0 PREEMPT(full) [ 696.156417][T17247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 696.156424][T17247] Call Trace: [ 696.156431][T17247] [ 696.156438][T17247] dump_stack_lvl+0x189/0x250 [ 696.156454][T17247] ? __pfx____ratelimit+0x10/0x10 [ 696.156465][T17247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.156476][T17247] ? __pfx__printk+0x10/0x10 [ 696.156491][T17247] should_fail_ex+0x414/0x560 [ 696.156507][T17247] strncpy_from_user+0x36/0x290 [ 696.156521][T17247] strncpy_from_user_nofault+0x72/0x150 [ 696.156533][T17247] bpf_probe_read_user_str+0x2a/0x70 [ 696.156549][T17247] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 696.156557][T17247] bpf_trace_run4+0x28b/0x4a0 [ 696.156569][T17247] ? this_cpu_in_panic+0x4f/0x80 [ 696.156583][T17247] ? _prb_read_valid+0xa07/0xa90 [ 696.156597][T17247] ? bpf_trace_run4+0x19c/0x4a0 [ 696.156608][T17247] ? __pfx_bpf_trace_run4+0x10/0x10 [ 696.156621][T17247] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 696.156635][T17247] __bpf_trace_sched_switch+0x17a/0x1e0 [ 696.156647][T17247] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 696.156659][T17247] ? psi_group_change+0xab8/0x1050 [ 696.156676][T17247] ? __schedule+0x22e9/0x4cc0 [ 696.156691][T17247] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 696.156702][T17247] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 696.156714][T17247] __traceiter_sched_switch+0x9d/0xd0 [ 696.156727][T17247] __schedule+0x238f/0x4cc0 [ 696.156740][T17247] ? this_cpu_in_panic+0x4f/0x80 [ 696.156753][T17247] ? _prb_read_valid+0xa07/0xa90 [ 696.156768][T17247] ? console_flush_all+0x13a/0xc40 [ 696.156780][T17247] ? __pfx___schedule+0x10/0x10 [ 696.156792][T17247] ? __pfx___console_unlock+0x10/0x10 [ 696.156801][T17247] ? __lock_acquire+0xab9/0xd20 [ 696.156815][T17247] ? preempt_schedule+0xae/0xc0 [ 696.156825][T17247] preempt_schedule_common+0x83/0xd0 [ 696.156835][T17247] preempt_schedule+0xae/0xc0 [ 696.156844][T17247] ? __pfx_preempt_schedule+0x10/0x10 [ 696.156853][T17247] ? console_unlock+0x21b/0x270 [ 696.156862][T17247] ? __pfx_console_unlock+0x10/0x10 [ 696.156872][T17247] preempt_schedule_thunk+0x16/0x30 [ 696.156887][T17247] ? vprintk_emit+0x695/0x7a0 [ 696.156896][T17247] vprintk_emit+0x69a/0x7a0 [ 696.156906][T17247] ? __pfx_vprintk_emit+0x10/0x10 [ 696.156914][T17247] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 696.156925][T17247] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 696.156938][T17247] _printk+0xcf/0x120 [ 696.156950][T17247] ? __pfx____ratelimit+0x10/0x10 [ 696.156960][T17247] ? __pfx__printk+0x10/0x10 [ 696.156972][T17247] ? nla_validate_array+0xfc/0x260 [ 696.156984][T17247] __nla_validate_parse+0x2563/0x2d40 [ 696.156998][T17247] ? __pfx___nla_validate_parse+0x10/0x10 [ 696.157009][T17247] ? __lock_acquire+0xab9/0xd20 [ 696.157024][T17247] ? nfnl_pernet+0x23/0x240 [ 696.157041][T17247] __nla_parse+0x40/0x60 [ 696.157051][T17247] nfnetlink_rcv+0x1177/0x2590 [ 696.157068][T17247] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 696.157088][T17247] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.157103][T17247] netlink_unicast+0x82f/0x9e0 [ 696.157115][T17247] ? __pfx_netlink_unicast+0x10/0x10 [ 696.157125][T17247] ? netlink_sendmsg+0x642/0xb30 [ 696.157135][T17247] ? skb_put+0x11b/0x210 [ 696.157147][T17247] netlink_sendmsg+0x805/0xb30 [ 696.157160][T17247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.157172][T17247] ? aa_sock_msg_perm+0xf1/0x1d0 [ 696.157187][T17247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.157197][T17247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.157208][T17247] __sock_sendmsg+0x21c/0x270 [ 696.157224][T17247] ____sys_sendmsg+0x505/0x830 [ 696.157238][T17247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.157252][T17247] ? import_iovec+0x74/0xa0 [ 696.157264][T17247] ___sys_sendmsg+0x21f/0x2a0 [ 696.157277][T17247] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.157296][T17247] ? __fget_files+0x2a/0x420 [ 696.157310][T17247] ? __fget_files+0x3a0/0x420 [ 696.157326][T17247] __x64_sys_sendmsg+0x19b/0x260 [ 696.157338][T17247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.157353][T17247] ? __pfx_ksys_write+0x10/0x10 [ 696.157364][T17247] ? rcu_is_watching+0x15/0xb0 [ 696.157374][T17247] ? do_syscall_64+0xbe/0x3b0 [ 696.157386][T17247] do_syscall_64+0xfa/0x3b0 [ 696.157397][T17247] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.157407][T17247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.157417][T17247] ? clear_bhb_loop+0x60/0xb0 [ 696.157427][T17247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.157437][T17247] RIP: 0033:0x7f0ef8f8eec9 [ 696.157447][T17247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.157457][T17247] RSP: 002b:00007f0ef9eb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.157469][T17247] RAX: ffffffffffffffda RBX: 00007f0ef91e5fa0 RCX: 00007f0ef8f8eec9 [ 696.157476][T17247] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 696.157483][T17247] RBP: 00007f0ef9eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 696.157489][T17247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.157495][T17247] R13: 00007f0ef91e6038 R14: 00007f0ef91e5fa0 R15: 00007ffe69e501e8 [ 696.157506][T17247]