last executing test programs: 4.113934072s ago: executing program 1 (id=1105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x6, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (fail_nth: 4) 3.749141687s ago: executing program 1 (id=1108): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 3.450959456s ago: executing program 1 (id=1112): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0007727907800000204080000fe5af989782e00220f2f95447b1cd3e351f40cce23cf00"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0xfffe, 0x7}, 0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @host}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r4, 0x8004b708, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x34004811) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40) r8 = accept$alg(r2, 0x0, 0x0) ioctl$sock_proto_private(r8, 0x89ef, &(0x7f0000000900)="f6bd4f2662465f2ac4fcb920cbcafe77e9f7970a3d89b38a8aa24fb91417adc6fa67eba7f6b99f5ab52197dec315f2ab91f10780162683b5e2253068b156977e3f67a37b56607cc37c09e277ffdb40bbd6cbb3e33d15fd28ac5a412f3bed5a7464634514bfafdde6ae9d27a4cd8240760657f5ef7c4b9820beccc36b4c9ea5ce72ff35c78eea681c97432ba937f0dda7acdcd8e6706f45e8b9e23c693172a042e2ddfa9837cbf1b65edde895e2d036d5261073bf26b537e596955b3c4650949e897198bb3abd0f7f74a304f7a9567bfbda6f7407f3f1453ab5d176aad02e31767b8df51ccbe3b35c7f294fb408782e9e9053cf5cf97c53f2d582c91b0f302aa6fa43e8b8b72df922484ef45301a01f8c76b52cd6133cb6a9948b134ec298f923e3f7afd475d755266080af37d507f4ea635eb3486b7a905eab536ac2dff430e912b509813bb6a55562077d9d0791d79ddcf470226aaa9628a905f0a80e5bc6ece1f43cec30491fa705af0d34895165007ed4cd50e0f93da1c8dd9ceb8bcf3efda491a579b59af9da67d6ac482309e93e21936c215f0ef577d9b4b1a2e3c9e7ff3ce68e12f4e5ac24457a620954cf811138d0b2b7405623f858e482b702f1ff2ad74a762a1cd7775b2c29eb187d3bfd44f52e2acf014e97c1f9cfe50d122785bddbe4bde0df587b4fa85068be5847d1768a723c013d2da42627772521782bcd65cc653526dec10ce37c0508de8490cf58223417f75cb3431b0d8b1b69cc6dd3a980d74f8dde6ebefb966e515b2c3aab09d63bbf3a18d9ef536302072b168c387a73361489123918ed6c16c31633b51ba2d2f507d6e92117c4012082543372d6ce5a2c1ad268cad55b246326bb730cd2afe479ff7a75e3d3a9495569224c36185f67697bc30a7f54f3c360bb5f007d7ad0eeab11bba0394fdbff983e5e9fba8829a6c40ec382dbd27280bb2bb17e2384bdcbf0c9cb28f10d587e86a99df7af43e6747ee572661e3cd1958088503942680681cd3af375b5f73527f09538b6220970432af5b9ba6a6a2f0424791cfeefcf319ab4cb2e5025413532e4b99a30f989b353850b73cd2ee40204100c07f1ae00f47640245cdc15a6a279d7424e2e192f59c9baf052b46c33b7bf1282c4bf4768ad19f5df437f24a974cc0c1921895db12797cc578a1ecc356e7cb2b610a4452bc9ce42920e05652cee703531d3475e5c15e5baadbf04e3445f12f67383f552ff4d8387022e0f1f7369e737b1e8536c30b5a7934e7451cb09342af98c3e2940207bbd1ab2e63e9bdeff462d229a5431678c85f72c4d72458fb2e37d3546f07658641d16e6796e18047b787164390c441066b207dcf914479913078cbb32ef5cafc1ba41cec56ba3bf05af326b131f783f0c972747f08d6f8f5f0bd439b8419f612b04af4b54c7b0e243e3b6c75ce5e5ef0b1729c6c013fc4a86af94ee0e69b20ac184063d4bcaf0273ce786c70ff9f0d9d73fec6a40335370d3cc64efbf8a2c5d2587f48af2a04c2d2c87a42094ec45054492d6d6be9cfa7451c534cb72685bd33c99d3ce95b8c2f25de5a1d32e3b71abf72e046971cf1248a8f47814b66417b67f49fdb10a7247ff52ea2e5f40f0c9fc7f24d315e19dce1a09d83892dd22ff7507f166cd664e401e6c363125a2cb62ba94b2d2a4c42057884a160a4456506fd339828dce166f890990d265d169b9c644b39038e94f44437428df9e2cd746dff4f4e0b28251dce8f1e26870ae076807bb172b3605d845c09782656a926c9199492db7a9e2e729dd4a8ff84a33d873c9c907ef1372ce309a2263ff0f6746806aa3bbfbe1f4eeb12154c90d5932e5bead997e406978a46907c2bcbc6fd7015161f65ba479dfe0f52b8898c3619da6e2939da0507cad445c0a7b325100c11e84bb76a0f85e0426e4dd30a6357ecffc6bf20f27c1a4479bc39cc5f66df2a9c5dd3b6621375260458676b5c17f36c743cf9370803a3a4f6676a5febf646df21f8859771575031795054643e616f15a1c3bd3270cd349f1eb3283af9a1eed41c9e7f62b88d645e0a9294c45f88048dd8bb5ad85b9f42f4cd2fab4e81c8746e9c6bcb814c83b9366f86eb8ac5b609087804477959b872e27d31ce61c1bdcf4afd84789837932dd1c437323c0deb08805e69df826ce25e4f7552cb88f2e0c2d90234fcc2ee61ed68ce0e634159bd46348748a90d155c3d7da09364a345b55c88b21416e6f54bf0e2ee448290c72ef2783f67a916d8e82ec6a6d4f858b936dfc1adf4544bea1509cd175f43f4e5ee9185da70374c78ec9bf1e18222e64df3b248d38ae75b4932dfff0118cead8ac7d3501a2b5b613a50da2939498f74981266ff6516f2db8f775c42cefb2a4d285638501de648d9d09ec4bc2b3907997081be163c2780e0fc0e0a1dea9ae25e1953cf21c7d3b92ee598c3fb6afbc72f5397195fe41a26c2dcfb6a639bf19f907d34ae786da90b838389c517503c788c28594f36ea980ba7e8602559475133b52534d01977a3a021d364bd6a23c9bfc6ed6e8f4de56567132a85cf3fb67de36496293de974aea9480bf1e0726d1235b5df53a013b8f537f84b1074529b7f2272d9ccc04cff429fd869a8ac4e774a4dfac72dd81931590c3bf253865d3934a991483dea0d48ea90e4baeb5c36a010f17a24e6e505edd11a62fc36fbeaed03976f771386e094ce548f4f4fca5a35a194ea7941c54365303ac12b81fed8288c0218f0de3c315d8e50dce0874220889fa2ed6238624a3869adb2d9668f172a790c020cd87eadecfb58736d165273ca145731b4e87e5b7fab8a1b326aced853c267134757038d8cdd512ec6709060cb06518b86c403d060e3307cead3cb3e67a490a6fd877ee10a97da7c752cff340c7f8c2d671418ecb7e71658bf47b2c80cc89e0f4ef1ec67f9404db2a26d8a9c5f51bc752d0a87da55302fe5cbb5385009489d0b7bd86c1827f06e91b0ce02f18469d0f430a917bdc177ead76b878a7085a9764bd5cfae268310db792e40930baff4cdac720b06fc4245ad7f56a8542a4513625b276b1b6c5e96de3fbf29b4ac7e51b6dd24d3ac48f4aba559cb3032b89eb8326c097bca04ab0e4703b94a4895ad10e4bb5fd0afea35b1da4af1ea44598fdc8498dbf3ce3cba6fa6269f656860994d5f49f5cf114238d44691b63d05639c88c1d20988389876db0cb46c1c840821d336ff35be4668a48fa8e09622b35f5bf54379e1cf1421c6a9bd111bbf9ff6677f4e1128abadbb188b88d68a7f4ad9cefedd95812635e0b061160bf183431dc3c3e7f1a66841c08210031abe1cd1268dfef239a9db82e57350c3a37f90dc888c71d4b564bb1f46b023a84701d6175a42c81f062900c28f617199be3c28e1ae4a357063aa551d839bea2405feed704979835963c5bff47b9afb8db971471ab13c8ac931aed77ed451969f2950337c502ba0d490a9f5209b8b94740ef2678eaa02eca30989e1850b5db73a49673f9771da46b22cf939edf8c4c6a685264e20e47a8146a97fb109bc1dd4c2926d9b40457420bcd66d8cafa6009d5385e170974b0521734b23cedbadd8a1ac38366ae4ac9433ec37cd71ff93f7055c9977d8434bff0ed2a5a244194c8b745c96879ac6ba6f73715ae997598aa6610ee5ecece304fe2620828e0f71b58c4a7c5866c05b96e02ae73f48b9f5deadd34ed98b4e7dac2cef7a88fdbdbbe3d8b3cdbe874acf443d2d18d24cd39c19ee9a901d63f11a23d9def5761a41fd7a7687da5905eee0fe76d844cf5596cd06d3d9acd6738989dfab3608866e4d9a49bbbad1496eb9972409d996351a0aef96d4b0285fe75324f0c9fc950539b1a2f213666bef868cd81453892888d92808081c3920688a0a3b477697e334380026203e7235fd2d8a6865f7ecdc7e049b1d5842ec1481bc2237ce972b0de1ba09c59451b5e71ec6143935f3479d8cb6edc376bc2fb555727ef081cd78ff3c086d5c2555c1405e73bc31d3187397bea97070d3ac219afc0be00b5ff7cecd771a0ad9826eed02b522f2407f9dcff83a1ac697f880990ee864fac88d7a271a1ced8f129a5e56c3d4fc3eadd99160596c4801df729d95c4d96e174126b38b3e317dea8ea4a577612a8caedae912a76476ac4022bdeb8c83dbdc590cb4c25ec9fb2797674f26d6f45af344a017de9d6fb261f1330d9a7f6e50ea4b322395ee8efae03951afca7d072a260ead77c8d8f2ce05fc311463bd249808783b1259c3ecd2ede6bba3f2403f2f460a43b4dacffbb8f42c7bb11bbc2bb744483ba4e0c12e8b55836f7eeee21564c53872537f7bbba7d6daa55128d5c4e98654ce4c12a651176e3bf9213de6692c9519f0cad87f95e875e65620ebfc56769c94a0ac546f1d176fa32c9ea87eb408875c357f80b4952b03b9b0ea1fb272f435ba4d55a1110b2c08e66460aa3cc1354359975cb1566ee78edd2319afbae03bbd4f7a9ce874160ba0514e6ae6ea2c5c6424d1a0aa24d627c8d7752515b46d5e077fb3d90f3329f2762e05aef867e4ea9c37fffcdfa99e12a51d66052265a07fa970e0ccf759165d601dd51bb1682de5aba98f7f40beb0cbce8c43403a6a8a7b2b40228746be5f1d0ff376a79c3e063a86f976a1fa9e833269aafd8f8d9f26a2a8cfd9feead3566a068e66377bfd059a60db6c357e76f63896452a343f07320cc7fa293c500470f55989ccb8b794b55b665e6911c53b2f2a4f7644155a5e5ee326d0516762cba3dde89c1694a321f983f1050aa89930ed21a28d0b7f8abd00702abf1adcaa8e965f34c95e02a006d149187ee040ad3eadc209dc6d10906f8233b443eb64d5a0927754eaf278eae00963f7ef1293107022bf7c2124fa8c81e6383c7f84d97f67abe032a259d4121869805057ff5198f77d44b91e169637f74049d564b56a23f9b67b91c7b7c46be64aacbe474a823d50b56e5f4f8062a186318c0cecd032fa8ef03eb65d20f8b79b85171a0629352ebb250b5d32a162342019d28393ae3900c489bad9c0fa246671fa29f758e7a88c4a85b85b498c00b6da5defd5a30f02140d71e661f7e4e4b14631680b7561f21552d286f19a9e3075ec2ccdc39170b2e5a21e1d00fb2a3655897d94ed7a852c375e7497fa645d3240ced93ddc2ca9eb69b7bc32b5020bea519021d5a8ad129a4866367d29da2a86e864e0579dd6baf2f6fe560c0e02fd9b06f98c175db50eb3d46b89086dbb0bee654166a608989b67022d878262a8bfdd69409a6d8471ef058e1482af99e39c7986851caf4a9dad9072a413762b2d7eb0c2f93c93a37cc176c082d14558c4d1577f4c1207ec38e422f6435c55cfadba775cddd2a5b0de9d7a67d0b6c9063b8246ad24f98c86dddf287848adab2962d1a9ca190aa60a73808dd29ed72ed84fd61c8a06f1939ad815df01a2a7e5d630553d68e4cff98955125fb0c4d93062b5381f4f3bb16ca82dfca8a0746fe27a78423a7e7c16b3c74a336b5178e477b7fe8aa7c58c3c2664c7696fff9dc88b16609bc93f46694a09486228626fe05277df363af193acf9cfd1e9729eb95b9ff6f692e21badb046b606f8703e26189582421847e955dca2f7af2c618f883961a4744faf006ed557bb034124a7ef5f2a1f6e183a9a79c0b52caf4e99942463b778f7f64c7067ce251e3ade4adf10662d42884e1f10553cf0d78ed19717530a36305b4dcc4788a009e6fedbf4a32902d886f498370933061f2535a80cd203b0f96b500f946f16b549d4762f782fe58d66b93ff919911a62e01ac") ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2}) 2.689785931s ago: executing program 0 (id=1122): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 2.426521683s ago: executing program 3 (id=1124): r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x700, 0x8, 0x9, 0x5, {{0x7, 0x4, 0x2, 0x9, 0x1c, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast2, @empty, {[@rr={0x7, 0x3, 0xd9}, @noop, @generic={0x44, 0x3, "9e"}, @end]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000100)={@private2, 0x0}, &(0x7f0000000140)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r6, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@mpls_getnetconf={0x44, 0x52, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x46cfa315}, @NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 2.10779581s ago: executing program 0 (id=1127): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x90) (fail_nth: 6) 2.046167927s ago: executing program 1 (id=1128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x9, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x810) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0x18, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x406, 0x1, 0x1, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 2) 1.837626136s ago: executing program 2 (id=1129): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8300, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xa00}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001000100000006000640000000000600"], 0xe4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000d0ff0000000000000000", @ANYRES32, @ANYBLOB="00000000000000003c0880ff0000000018000000000000000000000000000000950000000000000095000000000000006d2df7c797eac6fe006ab7eb4ffb06bb3b0625eedae31bf6b95e6e6f25030fb083c4f22b40d855b8fa68aab42db48ad42aa6b0008a3a2fed058d3bbd46dda98a537ace82de7da0357236e89c376313d96e21515c28610787fe2d51b4c37e0e5ec433e57d519e472549382ed0e7e12bfd4f12c294551141142fe52eeec2e26f1cc5f1a836c16c1043e307b3ce40aaa0bff411e0dc59d99a5e5d6f7254dc5c47387d58674beca4a7b2c7cef6ae21a8484d1f22a1"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) unshare(0x6a040000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x25dfdbff, {{{@in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@loopback, 0x1, 0x32}, @in6=@empty, {0x0, 0x1, 0x10000000, 0x0, 0x8}, {0x2000000000000000}, {}, 0x0, 0x3505, 0x0, 0x0, 0x0, 0x1}}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@remote, 0x2, 0x4}}]}, 0x120}}, 0x0) unshare(0x62040200) (async) mmap(&(0x7f000020a000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) (async) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x3261e) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000680)={0x1000000, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0xa, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 1.836888552s ago: executing program 0 (id=1130): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2040050) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f00000003c0)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f00000003c0)=""/71, 0x47}, 0x9}], 0x1, 0x40010000, 0x0) 1.756575079s ago: executing program 3 (id=1132): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x1, &(0x7f0000000500)="97", 0x6, 0xfe, 0x4f3, 0x5df, 0x5, 0x2, 0x1, 'syz0\x00'}) 1.585229109s ago: executing program 3 (id=1133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x5, 0x8, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r3}, 0x20) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x4e20, 0x2, @mcast2, 0x3}, {0xa, 0x4e21, 0x7, @local, 0x8}, 0x0, {[0x1, 0x75, 0xffffffff, 0x8, 0xffffff80, 0x9, 0x80000000, 0x5]}}, 0x5c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRES16=r4, @ANYRESDEC=r0], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r9, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00>'], 0x78}, 0x4004000) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000001900000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7323}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x810) 1.36963865s ago: executing program 2 (id=1134): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x871a15abc695f91d, 0x800000, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x40, 0x1, 0x4, 0x8, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xce9}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7fee}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xfffffff8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x72}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback={0xff000000}, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f040000004801", 0x1a}], 0x1) socketpair(0x2c, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @multicast}) 1.351347906s ago: executing program 1 (id=1135): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) socket$nl_crypto(0x10, 0x3, 0x15) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) (async) close(0x4) (async) 1.227471557s ago: executing program 4 (id=1136): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xa, 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r0, 0x333, 0x0, 0xfffffffe, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x8880) 1.097449901s ago: executing program 2 (id=1137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x71) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb4}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 1.084548127s ago: executing program 3 (id=1138): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) 980.818112ms ago: executing program 4 (id=1139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x4000, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) 924.141694ms ago: executing program 3 (id=1140): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000100000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140"], 0x140}}, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'veth0_to_team\x00'}}) 847.781124ms ago: executing program 1 (id=1141): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000023aba71c01de45d7e05ce4ebc4c8749648abaf87a9e2750154971721938ff483f240885125f3a041561aaa77c949c16755b71e0287ce5c02d26ccc09bce55f1b242bb7457e00c6018f7cdcf33b07a69355c1989a0e91d3176e4d266f57f0b569f19406c504d78367", @ANYRES16=0x0, @ANYBLOB="170900100000000000000100000006001c0004000000080009000000000008000a00000000000600020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r1, 0x0, 0x0) (async) connect$inet6(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="b82c4969ab0b9fe061f456e5c0b914397c6f1812640a7e7af62ae421261f699cc75cfa321ca6e3c0582fd7b5e5fc0e037e387bbd67306c53b323aa6288b8aef7e0529ebde8748c2036f6cf16ab62500511f4408f8418ab04390f9cc12e664348599e3412fdb0170460a5429234a436303ec51859626f3d80813b606cd25df68e9b99eb1a5d3698413d1076ddad3e963e4bfa6a5eabb0af725786b91a46f3d81d7cf1662754", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYRESOCT=r3], 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) (async) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/225, 0xe1}, {0x0}], 0x2}, 0x80000001}], 0x1, 0x832b, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x125) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00100000000000000000000000000000000000002250b8c8dbb5ff82f24297c4da207a57cbcf73515d1631dbd4e6ff0f0000dc58f65d3d255175699b90990da48ee3aa99db459f12dabdfa03e5bd907589ba42c726b95561f1b0fed399b181474c20132da6506bb5066b1826bbacabf981275451692143017e007815f651", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000cc53407500030000009500000000000000"], &(0x7f00000008c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 847.215413ms ago: executing program 4 (id=1142): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x835a833397d46b71, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x10, 0x3f6, 0x10, 0x70bd28, 0x25dfdbfb, "", ["", "", ""]}, 0x9}, 0x1, 0x0, 0x0, 0x80}, 0x40040) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x1, 0x0, {0xa, 0x4e20, 0xfffffffd, @local, 0xfffffff8}}}, 0x32) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000040) 837.265133ms ago: executing program 0 (id=1143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) (fail_nth: 4) 425.05859ms ago: executing program 3 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0xba, 0x1, 0x6, 0x2, @remote, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x20, 0x8000, 0xf7}}) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="f1291a02ddf9992da075933cf0952a9909a0d354e13a7f77b612c4acd738be856e83b83231371daa7ed35b", 0x2b}], 0x1, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffa908}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x12}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffdf1e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x163}}], 0xe0}, 0x4000) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xbfff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x20008000) sendmsg$rds(r5, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/24, 0x18}], 0xffffffffffffd50, 0x0, 0x0, 0x24048040}, 0x48004) 424.628708ms ago: executing program 4 (id=1145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x6}}}}]}, 0x38}}, 0x0) 305.309751ms ago: executing program 2 (id=1146): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @empty, 0xb}, 0x1c) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000000000f000100000e00"}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 304.426358ms ago: executing program 0 (id=1147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 250.318282ms ago: executing program 4 (id=1148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x110}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) sendto$inet6(r4, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a01010057"], 0x0) sendfile(r3, r2, 0x0, 0xf03a0005) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000000000000f"], 0x0, 0x2b, 0x0, 0x6}, 0x28) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000c40c238083c3ab8c8638d69cda3003fb7f03d40f030ee000000000200ffff200007800c00018008000140e000000208000a40000000028892b02aeda90a14018f95a800064000007a310000d0e4b43a49121f0000050001000700"/104], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 209.376334ms ago: executing program 2 (id=1149): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)=0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140)={0x401, 0x8001, 0x4, 0xc, 0x5}, 0x14) r2 = socket(0x26, 0x6, 0x7) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000001c0), 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x20000001) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xf3, 0x6, "dd4c43d806964fbb1b6eba5cc74695bd39f6aeb345c9164916ee7aa514ee7bd65f7767d6eecd9f1af16f0de5e6adb37caad0a51102fa5ae0c142c464eeb2bb18f627f7b1c2541f4e9897cbc2073d41cf6a4879b4c63cb9445536882f0e94da9dc122c8f6dbde89ed40d65b2b70dcd7b4f9c196a84e11ff58211509b21a65d803740f05b5633bd03172e80cb97b9775d864a74002583d13a65e1fda6facd963a8f2629ba66fc04428882a0769d1ef4bffdb88b7e5294728a8ff09786226b5fcc1bf835f1e83ebb51c2ead2cbb2e70dff74556555eea589ea9609a14325df04d4619793165be9efa7b5f413c32798939"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x93ce397327b7c8e3}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000500)={0x1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x4, 'sh\x00', 0x3c, 0x7, 0x42}, 0x2c) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='freezer.state\x00', 0x0, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000580)="826a33d772807ac02f4fabbccde7233d79f233f48fb68ae3b83f45ac231d4c55d8e56b825af753fb97c6e68e51100b7b5df7c00e6c6f344f7c8e354343e7e2a7e4a26b4a1c68a95cdee215652a2398ab436a2737acf8b0af3582dea706de7c32998eecbfb16aefe6a2b508e1db1e4bab6d3cb371d53588fe5cfefdf697b3a32f07ec74c7c7f8c781a8339110d38b53eb259ead0bc9d0f5fa2c2dbc670dfc619ea0b796657cc80380cb47ba1e7b50d1178598ad35", 0xb4}, {&(0x7f0000000640)="42cdd2b50bc83b190c66f93a447473d16044a3b01c56a556842b4a849cfe81740959fd3dfa6a290836b9426a636c9b81a1a8cc934027a25c07f2e567595795cbea5a4ba57145a35c008c28a24fabf5b8a0d86311121eaf770d14f9d209c63f1f95b29e5d91a27b9a9fe8499844f689116ba4fa04a99ad6d8654b00dc1c44ae17a1932e91a8958f51dbe5a67175d4a82879a4b3176552d7c1806906", 0x9b}], 0x2) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000740)=0xfffffffc, 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x6b24067f8886a3a) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000008c0)={0x77359400}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1ac, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf2, 0xa8, @random="70d8e183cf800c9d172b6a9d1011bdd862898c44ea9cdedce2a0bb22e648710c27f9447440d8f8908610a1b04816f7afad0fc18e65122aee9976e7d1e63e1913d269eef11ccf22e825fe61c5be92bf1c548519fbed8db4a483dfe41bd21f38661f7a6f1abcede5038be5c12e21d8ddacfd0af591b14ae3c81fd74e20d4b75a509498979d050f4dc241a8746744a05d7e9b0ce88f4c99a7f298ca9415805296b46ee9ca043ac2e98194059347f6000f97a8d32aa2585ad4408d6c0667e78c6f2da66f9b615d987f9e4c2d5a58e479fa8f5bed83395d3abf045608f19c466f1e228dd437a3b330b9d1bf246e924e9b"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x240488c1}, 0x8000) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x80) write(r2, &(0x7f0000000cc0)="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", 0x1000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r3) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001e00)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001e40)=0x18) bind$inet6(r3, &(0x7f0000001e80)={0xa, 0x4e21, 0x6, @local, 0xfff}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001f40)={'ip6_vti0\x00', &(0x7f0000001ec0)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x7, 0x5561842a, 0x4, @empty, @loopback, 0x7, 0x7, 0x5, 0x417}}) 109.733273ms ago: executing program 0 (id=1150): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0x20948, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r3}, 0x38) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) r5 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @bcast, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x80800) write(r5, &(0x7f0000000080)="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", 0xff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r6) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r7, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r3, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x28, &(0x7f0000000280)=ANY=[@ANYBLOB="180000421db71a5ea5b500"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000184700000400000000000000000000008500000032000000852000000200000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000183200000100000000000000000000002795e0ff10000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x86, &(0x7f00000004c0)=""/134, 0x1e00, 0x64, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0x4, 0xa2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r8, r10, 0x1], 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) 89.398132ms ago: executing program 4 (id=1151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) write$ppp(r1, &(0x7f0000000480)="ac4a", 0x2) (fail_nth: 4) 0s ago: executing program 2 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) (fail_nth: 6) kernel console output (not intermixed with test programs): RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 170.058666][ T8624] RBP: 00007f5c4abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.058676][ T8624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.058685][ T8624] R13: 00007f5c4cbe6128 R14: 00007f5c4cbe6090 R15: 00007ffd9ed22e48 [ 170.058713][ T8624] [ 170.145727][ T62] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.356928][ T62] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.500727][ T8637] pim6reg1: entered promiscuous mode [ 170.512765][ T8637] pim6reg1: entered allmulticast mode [ 170.532911][ T8637] batadv_slave_1: entered promiscuous mode [ 170.552801][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 170.563044][ T8637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.631514][ T8637] batadv_slave_1 (unregistering): left promiscuous mode [ 170.638776][ T8637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.803852][ T8642] FAULT_INJECTION: forcing a failure. [ 170.803852][ T8642] name failslab, interval 1, probability 0, space 0, times 0 [ 170.857949][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.4.875 Not tainted syzkaller #0 PREEMPT(full) [ 170.857975][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.857985][ T8642] Call Trace: [ 170.857993][ T8642] [ 170.858000][ T8642] dump_stack_lvl+0x189/0x250 [ 170.858028][ T8642] ? __pfx____ratelimit+0x10/0x10 [ 170.858051][ T8642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.858072][ T8642] ? __pfx__printk+0x10/0x10 [ 170.858096][ T8642] ? __lock_acquire+0xab9/0xd20 [ 170.858120][ T8642] should_fail_ex+0x414/0x560 [ 170.858151][ T8642] should_failslab+0xa8/0x100 [ 170.858172][ T8642] kmem_cache_alloc_noprof+0x74/0x6e0 [ 170.858196][ T8642] ? skb_clone+0x212/0x3a0 [ 170.858223][ T8642] skb_clone+0x212/0x3a0 [ 170.858247][ T8642] __netlink_deliver_tap+0x404/0x850 [ 170.858279][ T8642] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.858305][ T8642] netlink_deliver_tap+0x19c/0x1b0 [ 170.858323][ T8642] netlink_unicast+0x7fa/0x9e0 [ 170.858352][ T8642] ? __pfx_netlink_unicast+0x10/0x10 [ 170.858375][ T8642] ? netlink_sendmsg+0x642/0xb30 [ 170.858391][ T8642] ? skb_put+0x11b/0x210 [ 170.858409][ T8642] netlink_sendmsg+0x805/0xb30 [ 170.858433][ T8642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.858452][ T8642] ? aa_sock_msg_perm+0xf1/0x1d0 [ 170.858477][ T8642] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.858494][ T8642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.858512][ T8642] __sock_sendmsg+0x21c/0x270 [ 170.858539][ T8642] ____sys_sendmsg+0x505/0x830 [ 170.858564][ T8642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.858591][ T8642] ? import_iovec+0x74/0xa0 [ 170.858616][ T8642] ___sys_sendmsg+0x21f/0x2a0 [ 170.858633][ T8642] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.858686][ T8642] ? __fget_files+0x2a/0x420 [ 170.858701][ T8642] ? __fget_files+0x3a0/0x420 [ 170.858725][ T8642] __x64_sys_sendmsg+0x19b/0x260 [ 170.858747][ T8642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.858774][ T8642] ? __pfx_ksys_write+0x10/0x10 [ 170.858800][ T8642] ? do_syscall_64+0xbe/0xfa0 [ 170.858819][ T8642] do_syscall_64+0xfa/0xfa0 [ 170.858843][ T8642] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.858859][ T8642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.858875][ T8642] ? clear_bhb_loop+0x60/0xb0 [ 170.858895][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.858910][ T8642] RIP: 0033:0x7f571cb8f6c9 [ 170.858925][ T8642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.858938][ T8642] RSP: 002b:00007f571adf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.858955][ T8642] RAX: ffffffffffffffda RBX: 00007f571cde6090 RCX: 00007f571cb8f6c9 [ 170.858967][ T8642] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 170.858978][ T8642] RBP: 00007f571adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.858989][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.858999][ T8642] R13: 00007f571cde6128 R14: 00007f571cde6090 R15: 00007ffdda5c3fc8 [ 170.859030][ T8642] [ 171.187665][ T8647] Bluetooth: MGMT ver 1.23 [ 171.204501][ T8647] syzkaller0: entered promiscuous mode [ 171.210074][ T8647] syzkaller0: entered allmulticast mode [ 171.249569][ T8650] tipc: Started in network mode [ 171.251117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.254668][ T8650] tipc: Node identity ac14140f, cluster identity 4711 [ 171.274031][ T8650] tipc: New replicast peer: 255.255.255.255 [ 171.289979][ T8650] tipc: Enabled bearer , priority 10 [ 171.521249][ T8660] netlink: zone id is out of range [ 171.526527][ T8660] netlink: zone id is out of range [ 171.532498][ T8660] netlink: set zone limit has 8 unknown bytes [ 171.554768][ T8661] tipc: Started in network mode [ 171.560736][ T8661] tipc: Node identity 525b67ab5728, cluster identity 4711 [ 171.568605][ T8661] tipc: Enabled bearer , priority 0 [ 171.577528][ T8661] syzkaller0: entered promiscuous mode [ 171.589297][ T8661] syzkaller0: entered allmulticast mode [ 171.611936][ T8662] bridge2: entered promiscuous mode [ 171.617197][ T8662] bridge2: entered allmulticast mode [ 171.687168][ T8661] tipc: Resetting bearer [ 171.697208][ T8659] tipc: Resetting bearer [ 171.741728][ T8659] tipc: Disabling bearer [ 171.839061][ T8670] FAULT_INJECTION: forcing a failure. [ 171.839061][ T8670] name failslab, interval 1, probability 0, space 0, times 0 [ 171.852166][ T8670] CPU: 0 UID: 0 PID: 8670 Comm: syz.0.886 Not tainted syzkaller #0 PREEMPT(full) [ 171.852199][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.852209][ T8670] Call Trace: [ 171.852217][ T8670] [ 171.852225][ T8670] dump_stack_lvl+0x189/0x250 [ 171.852252][ T8670] ? __pfx____ratelimit+0x10/0x10 [ 171.852277][ T8670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.852299][ T8670] ? __pfx__printk+0x10/0x10 [ 171.852322][ T8670] ? __pfx___might_resched+0x10/0x10 [ 171.852344][ T8670] should_fail_ex+0x414/0x560 [ 171.852372][ T8670] should_failslab+0xa8/0x100 [ 171.852392][ T8670] kmem_cache_alloc_node_noprof+0x77/0x710 [ 171.852415][ T8670] ? __alloc_skb+0x112/0x2d0 [ 171.852437][ T8670] __alloc_skb+0x112/0x2d0 [ 171.852455][ T8670] netlink_ack+0x146/0xa50 [ 171.852471][ T8670] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.852502][ T8670] netlink_rcv_skb+0x28c/0x470 [ 171.852518][ T8670] ? __lock_acquire+0xab9/0xd20 [ 171.852535][ T8670] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.852554][ T8670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.852582][ T8670] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.852606][ T8670] netlink_unicast+0x82f/0x9e0 [ 171.852638][ T8670] ? __pfx_netlink_unicast+0x10/0x10 [ 171.852663][ T8670] ? netlink_sendmsg+0x642/0xb30 [ 171.852679][ T8670] ? skb_put+0x11b/0x210 [ 171.852700][ T8670] netlink_sendmsg+0x805/0xb30 [ 171.852727][ T8670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.852750][ T8670] ? aa_sock_msg_perm+0xf1/0x1d0 [ 171.852776][ T8670] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.852794][ T8670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.852812][ T8670] __sock_sendmsg+0x21c/0x270 [ 171.852839][ T8670] ____sys_sendmsg+0x505/0x830 [ 171.852864][ T8670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.852892][ T8670] ? import_iovec+0x74/0xa0 [ 171.852918][ T8670] ___sys_sendmsg+0x21f/0x2a0 [ 171.852939][ T8670] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.852994][ T8670] ? __fget_files+0x2a/0x420 [ 171.853011][ T8670] ? __fget_files+0x3a0/0x420 [ 171.853038][ T8670] __x64_sys_sendmsg+0x19b/0x260 [ 171.853060][ T8670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.853093][ T8670] ? __pfx_ksys_write+0x10/0x10 [ 171.853120][ T8670] ? do_syscall_64+0xbe/0xfa0 [ 171.853140][ T8670] do_syscall_64+0xfa/0xfa0 [ 171.853156][ T8670] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.853173][ T8670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.853197][ T8670] ? clear_bhb_loop+0x60/0xb0 [ 171.853218][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.853235][ T8670] RIP: 0033:0x7f81fcf8f6c9 [ 171.853251][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.853266][ T8670] RSP: 002b:00007f81fdebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.853286][ T8670] RAX: ffffffffffffffda RBX: 00007f81fd1e5fa0 RCX: 00007f81fcf8f6c9 [ 171.853300][ T8670] RDX: 000000000000c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 171.853313][ T8670] RBP: 00007f81fdebf090 R08: 0000000000000000 R09: 0000000000000000 [ 171.853325][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.853336][ T8670] R13: 00007f81fd1e6038 R14: 00007f81fd1e5fa0 R15: 00007ffc62180c28 [ 171.853366][ T8670] [ 172.289533][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 172.389840][ T5877] tipc: Node number set to 2886997007 [ 172.575590][ T8688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.630620][ T8700] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 172.717172][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 172.763438][ T8705] lo speed is unknown, defaulting to 1000 [ 172.864324][ T8711] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 173.144196][ T8720] FAULT_INJECTION: forcing a failure. [ 173.144196][ T8720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.157664][ T8720] CPU: 0 UID: 0 PID: 8720 Comm: syz.1.904 Not tainted syzkaller #0 PREEMPT(full) [ 173.157680][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.157687][ T8720] Call Trace: [ 173.157691][ T8720] [ 173.157696][ T8720] dump_stack_lvl+0x189/0x250 [ 173.157713][ T8720] ? __pfx____ratelimit+0x10/0x10 [ 173.157728][ T8720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.157758][ T8720] ? __pfx__printk+0x10/0x10 [ 173.157776][ T8720] ? __might_fault+0xb0/0x130 [ 173.157807][ T8720] should_fail_ex+0x414/0x560 [ 173.157835][ T8720] _copy_from_user+0x2d/0xb0 [ 173.157856][ T8720] ppp_write+0x186/0x400 [ 173.157876][ T8720] ? __pfx_ppp_write+0x10/0x10 [ 173.157899][ T8720] vfs_write+0x27e/0xb30 [ 173.157922][ T8720] ? __pfx_vfs_write+0x10/0x10 [ 173.157936][ T8720] ? __fget_files+0x2a/0x420 [ 173.157948][ T8720] ? __fget_files+0x2a/0x420 [ 173.157956][ T8720] ? __fget_files+0x3a0/0x420 [ 173.157965][ T8720] ? __fget_files+0x2a/0x420 [ 173.157978][ T8720] ksys_write+0x145/0x250 [ 173.157993][ T8720] ? __pfx_ksys_write+0x10/0x10 [ 173.158010][ T8720] ? do_syscall_64+0xbe/0xfa0 [ 173.158022][ T8720] do_syscall_64+0xfa/0xfa0 [ 173.158031][ T8720] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.158041][ T8720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.158050][ T8720] ? clear_bhb_loop+0x60/0xb0 [ 173.158062][ T8720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.158072][ T8720] RIP: 0033:0x7f5c4c98f6c9 [ 173.158082][ T8720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.158091][ T8720] RSP: 002b:00007f5c4abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.158104][ T8720] RAX: ffffffffffffffda RBX: 00007f5c4cbe6090 RCX: 00007f5c4c98f6c9 [ 173.158111][ T8720] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000005 [ 173.158117][ T8720] RBP: 00007f5c4abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 173.158124][ T8720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.158130][ T8720] R13: 00007f5c4cbe6128 R14: 00007f5c4cbe6090 R15: 00007ffd9ed22e48 [ 173.158147][ T8720] [ 173.445312][ T8722] FAULT_INJECTION: forcing a failure. [ 173.445312][ T8722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.460125][ T8722] CPU: 1 UID: 0 PID: 8722 Comm: syz.4.905 Not tainted syzkaller #0 PREEMPT(full) [ 173.460151][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.460161][ T8722] Call Trace: [ 173.460169][ T8722] [ 173.460177][ T8722] dump_stack_lvl+0x189/0x250 [ 173.460204][ T8722] ? __pfx____ratelimit+0x10/0x10 [ 173.460230][ T8722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.460252][ T8722] ? __pfx__printk+0x10/0x10 [ 173.460275][ T8722] ? __might_fault+0xb0/0x130 [ 173.460310][ T8722] should_fail_ex+0x414/0x560 [ 173.460340][ T8722] _copy_from_iter+0x1de/0x1790 [ 173.460367][ T8722] ? rcu_is_watching+0x15/0xb0 [ 173.460390][ T8722] ? kmalloc_reserve+0xbd/0x290 [ 173.460409][ T8722] ? __pfx__copy_from_iter+0x10/0x10 [ 173.460429][ T8722] ? __build_skb_around+0x262/0x3f0 [ 173.460448][ T8722] ? netlink_sendmsg+0x642/0xb30 [ 173.460465][ T8722] ? skb_put+0x11b/0x210 [ 173.460487][ T8722] netlink_sendmsg+0x6b2/0xb30 [ 173.460515][ T8722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.460536][ T8722] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.460562][ T8722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.460578][ T8722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.460598][ T8722] __sock_sendmsg+0x21c/0x270 [ 173.460623][ T8722] ____sys_sendmsg+0x505/0x830 [ 173.460649][ T8722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.460678][ T8722] ? import_iovec+0x74/0xa0 [ 173.460703][ T8722] ___sys_sendmsg+0x21f/0x2a0 [ 173.460735][ T8722] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.460789][ T8722] ? __fget_files+0x2a/0x420 [ 173.460806][ T8722] ? __fget_files+0x3a0/0x420 [ 173.460834][ T8722] __x64_sys_sendmsg+0x19b/0x260 [ 173.460858][ T8722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.460887][ T8722] ? __pfx_ksys_write+0x10/0x10 [ 173.460915][ T8722] ? do_syscall_64+0xbe/0xfa0 [ 173.460936][ T8722] do_syscall_64+0xfa/0xfa0 [ 173.460953][ T8722] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.460970][ T8722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.460989][ T8722] ? clear_bhb_loop+0x60/0xb0 [ 173.461017][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.461034][ T8722] RIP: 0033:0x7f571cb8f6c9 [ 173.461051][ T8722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.461067][ T8722] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.461088][ T8722] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 173.461102][ T8722] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 173.461113][ T8722] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 173.461124][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.461135][ T8722] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 173.461167][ T8722] [ 173.754641][ T8724] FAULT_INJECTION: forcing a failure. [ 173.754641][ T8724] name failslab, interval 1, probability 0, space 0, times 0 [ 173.770930][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.0.906 Not tainted syzkaller #0 PREEMPT(full) [ 173.770956][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.770966][ T8724] Call Trace: [ 173.770974][ T8724] [ 173.770982][ T8724] dump_stack_lvl+0x189/0x250 [ 173.771009][ T8724] ? __pfx____ratelimit+0x10/0x10 [ 173.771034][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.771056][ T8724] ? __pfx__printk+0x10/0x10 [ 173.771078][ T8724] ? __pfx___might_resched+0x10/0x10 [ 173.771102][ T8724] should_fail_ex+0x414/0x560 [ 173.771132][ T8724] should_failslab+0xa8/0x100 [ 173.771152][ T8724] kmem_cache_alloc_node_noprof+0x77/0x710 [ 173.771176][ T8724] ? __alloc_skb+0x112/0x2d0 [ 173.771199][ T8724] __alloc_skb+0x112/0x2d0 [ 173.771220][ T8724] netlink_ack+0x146/0xa50 [ 173.771242][ T8724] ? is_bpf_text_address+0x26/0x2b0 [ 173.771271][ T8724] netlink_rcv_skb+0x28c/0x470 [ 173.771291][ T8724] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 173.771311][ T8724] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.771342][ T8724] ? bpf_lsm_capable+0x9/0x20 [ 173.771362][ T8724] ? security_capable+0x7e/0x2e0 [ 173.771393][ T8724] nfnetlink_rcv+0x282/0x2590 [ 173.771422][ T8724] ? is_bpf_text_address+0x26/0x2b0 [ 173.771447][ T8724] ? __kernel_text_address+0xd/0x40 [ 173.771471][ T8724] ? unwind_get_return_address+0x4d/0x90 [ 173.771489][ T8724] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 173.771512][ T8724] ? arch_stack_walk+0xfc/0x150 [ 173.771544][ T8724] ? stack_trace_save+0x9c/0xe0 [ 173.771564][ T8724] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 173.771588][ T8724] ? stack_depot_save_flags+0x40/0x860 [ 173.771616][ T8724] ? __lock_acquire+0xab9/0xd20 [ 173.771655][ T8724] ? __lock_acquire+0xab9/0xd20 [ 173.771681][ T8724] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.771714][ T8724] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.771740][ T8724] netlink_unicast+0x82f/0x9e0 [ 173.771773][ T8724] ? __pfx_netlink_unicast+0x10/0x10 [ 173.771799][ T8724] ? netlink_sendmsg+0x642/0xb30 [ 173.771815][ T8724] ? skb_put+0x11b/0x210 [ 173.771834][ T8724] netlink_sendmsg+0x805/0xb30 [ 173.771862][ T8724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.771884][ T8724] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.771907][ T8724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.771923][ T8724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.771940][ T8724] __sock_sendmsg+0x21c/0x270 [ 173.771965][ T8724] ____sys_sendmsg+0x505/0x830 [ 173.771990][ T8724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.772016][ T8724] ? import_iovec+0x74/0xa0 [ 173.772042][ T8724] ___sys_sendmsg+0x21f/0x2a0 [ 173.772064][ T8724] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.772117][ T8724] ? __fget_files+0x2a/0x420 [ 173.772134][ T8724] ? __fget_files+0x3a0/0x420 [ 173.772160][ T8724] __x64_sys_sendmsg+0x19b/0x260 [ 173.772183][ T8724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.772212][ T8724] ? __pfx_ksys_write+0x10/0x10 [ 173.772240][ T8724] ? do_syscall_64+0xbe/0xfa0 [ 173.772261][ T8724] do_syscall_64+0xfa/0xfa0 [ 173.772277][ T8724] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.772294][ T8724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.772311][ T8724] ? clear_bhb_loop+0x60/0xb0 [ 173.772332][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.772346][ T8724] RIP: 0033:0x7f81fcf8f6c9 [ 173.772362][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.772375][ T8724] RSP: 002b:00007f81fdebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.772392][ T8724] RAX: ffffffffffffffda RBX: 00007f81fd1e5fa0 RCX: 00007f81fcf8f6c9 [ 173.772405][ T8724] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 173.772417][ T8724] RBP: 00007f81fdebf090 R08: 0000000000000000 R09: 0000000000000000 [ 173.772428][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.772439][ T8724] R13: 00007f81fd1e6038 R14: 00007f81fd1e5fa0 R15: 00007ffc62180c28 [ 173.772465][ T8724] [ 174.302224][ T8735] Bluetooth: MGMT ver 1.23 [ 174.402514][ T8741] netlink: 196 bytes leftover after parsing attributes in process `syz.2.908'. [ 174.788495][ T8762] FAULT_INJECTION: forcing a failure. [ 174.788495][ T8762] name failslab, interval 1, probability 0, space 0, times 0 [ 174.801478][ T8762] CPU: 0 UID: 0 PID: 8762 Comm: syz.4.913 Not tainted syzkaller #0 PREEMPT(full) [ 174.801502][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.801513][ T8762] Call Trace: [ 174.801520][ T8762] [ 174.801528][ T8762] dump_stack_lvl+0x189/0x250 [ 174.801556][ T8762] ? __pfx____ratelimit+0x10/0x10 [ 174.801580][ T8762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.801601][ T8762] ? __pfx__printk+0x10/0x10 [ 174.801622][ T8762] ? __pfx___might_resched+0x10/0x10 [ 174.801640][ T8762] ? fs_reclaim_acquire+0x7d/0x100 [ 174.801660][ T8762] should_fail_ex+0x414/0x560 [ 174.801690][ T8762] should_failslab+0xa8/0x100 [ 174.801710][ T8762] __kvmalloc_node_noprof+0x158/0x910 [ 174.801734][ T8762] ? bpf_test_run_xdp_live+0x1ba/0x1b10 [ 174.801752][ T8762] ? unwind_get_return_address+0x4d/0x90 [ 174.801779][ T8762] bpf_test_run_xdp_live+0x1ba/0x1b10 [ 174.801804][ T8762] ? stack_trace_save+0x9c/0xe0 [ 174.801826][ T8762] ? __pfx_stack_trace_save+0x10/0x10 [ 174.801849][ T8762] ? stack_depot_save_flags+0x40/0x860 [ 174.801879][ T8762] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 174.801896][ T8762] ? __kasan_kmalloc+0x93/0xb0 [ 174.801911][ T8762] ? __kmalloc_noprof+0x411/0x7f0 [ 174.801939][ T8762] ? bpf_test_init+0x9f/0x150 [ 174.801952][ T8762] ? bpf_prog_test_run_xdp+0x503/0x10e0 [ 174.801994][ T8762] ? __lock_acquire+0xab9/0xd20 [ 174.802022][ T8762] ? __might_fault+0xb0/0x130 [ 174.802051][ T8762] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 174.802081][ T8762] ? _copy_from_user+0x94/0xb0 [ 174.802102][ T8762] ? bpf_test_init+0x113/0x150 [ 174.802117][ T8762] ? xdp_convert_md_to_buff+0x5b/0x330 [ 174.802138][ T8762] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 174.802172][ T8762] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 174.802195][ T8762] ? __fget_files+0x2a/0x420 [ 174.802218][ T8762] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 174.802238][ T8762] bpf_prog_test_run+0x2c7/0x340 [ 174.802262][ T8762] __sys_bpf+0x562/0x860 [ 174.802282][ T8762] ? __pfx___sys_bpf+0x10/0x10 [ 174.802314][ T8762] ? ksys_write+0x22a/0x250 [ 174.802339][ T8762] ? __pfx_ksys_write+0x10/0x10 [ 174.802368][ T8762] __x64_sys_bpf+0x7c/0x90 [ 174.802395][ T8762] do_syscall_64+0xfa/0xfa0 [ 174.802413][ T8762] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.802431][ T8762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.802449][ T8762] ? clear_bhb_loop+0x60/0xb0 [ 174.802472][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.802489][ T8762] RIP: 0033:0x7f571cb8f6c9 [ 174.802506][ T8762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.802521][ T8762] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.802541][ T8762] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 174.802555][ T8762] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 174.802566][ T8762] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 174.802599][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.802610][ T8762] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 174.802641][ T8762] [ 175.322371][ T8767] pim6reg: entered allmulticast mode [ 175.536782][ T8785] syzkaller0: entered allmulticast mode [ 175.865523][ T8805] FAULT_INJECTION: forcing a failure. [ 175.865523][ T8805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.884729][ T8805] CPU: 0 UID: 0 PID: 8805 Comm: syz.3.925 Not tainted syzkaller #0 PREEMPT(full) [ 175.884755][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.884764][ T8805] Call Trace: [ 175.884772][ T8805] [ 175.884780][ T8805] dump_stack_lvl+0x189/0x250 [ 175.884818][ T8805] ? __pfx____ratelimit+0x10/0x10 [ 175.884842][ T8805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.884862][ T8805] ? __pfx__printk+0x10/0x10 [ 175.884879][ T8805] ? __might_fault+0xb0/0x130 [ 175.884912][ T8805] should_fail_ex+0x414/0x560 [ 175.884942][ T8805] _copy_from_iter+0x1de/0x1790 [ 175.884969][ T8805] ? rcu_is_watching+0x15/0xb0 [ 175.884992][ T8805] ? kmalloc_reserve+0xbd/0x290 [ 175.885010][ T8805] ? __pfx__copy_from_iter+0x10/0x10 [ 175.885029][ T8805] ? __build_skb_around+0x262/0x3f0 [ 175.885051][ T8805] ? netlink_sendmsg+0x642/0xb30 [ 175.885069][ T8805] ? skb_put+0x11b/0x210 [ 175.885089][ T8805] netlink_sendmsg+0x6b2/0xb30 [ 175.885116][ T8805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.885138][ T8805] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.885162][ T8805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.885179][ T8805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.885196][ T8805] __sock_sendmsg+0x21c/0x270 [ 175.885221][ T8805] ____sys_sendmsg+0x505/0x830 [ 175.885246][ T8805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.885274][ T8805] ? import_iovec+0x74/0xa0 [ 175.885298][ T8805] ___sys_sendmsg+0x21f/0x2a0 [ 175.885321][ T8805] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.885376][ T8805] ? __fget_files+0x2a/0x420 [ 175.885393][ T8805] ? __fget_files+0x3a0/0x420 [ 175.885421][ T8805] __x64_sys_sendmsg+0x19b/0x260 [ 175.885444][ T8805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.885473][ T8805] ? __pfx_ksys_write+0x10/0x10 [ 175.885501][ T8805] ? do_syscall_64+0xbe/0xfa0 [ 175.885523][ T8805] do_syscall_64+0xfa/0xfa0 [ 175.885539][ T8805] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.885556][ T8805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.885574][ T8805] ? clear_bhb_loop+0x60/0xb0 [ 175.885596][ T8805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.885613][ T8805] RIP: 0033:0x7fda5658f6c9 [ 175.885631][ T8805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.885645][ T8805] RSP: 002b:00007fda57401038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.885665][ T8805] RAX: ffffffffffffffda RBX: 00007fda567e5fa0 RCX: 00007fda5658f6c9 [ 175.885679][ T8805] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 175.885690][ T8805] RBP: 00007fda57401090 R08: 0000000000000000 R09: 0000000000000000 [ 175.885702][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.885713][ T8805] R13: 00007fda567e6038 R14: 00007fda567e5fa0 R15: 00007fff4e214578 [ 175.885744][ T8805] [ 176.076404][ T8764] pim6reg: left allmulticast mode [ 176.428600][ T8827] FAULT_INJECTION: forcing a failure. [ 176.428600][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 176.478090][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.4.931 Not tainted syzkaller #0 PREEMPT(full) [ 176.478113][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.478123][ T8827] Call Trace: [ 176.478131][ T8827] [ 176.478138][ T8827] dump_stack_lvl+0x189/0x250 [ 176.478166][ T8827] ? __pfx____ratelimit+0x10/0x10 [ 176.478192][ T8827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.478214][ T8827] ? __pfx__printk+0x10/0x10 [ 176.478235][ T8827] ? __lock_acquire+0xab9/0xd20 [ 176.478260][ T8827] should_fail_ex+0x414/0x560 [ 176.478287][ T8827] should_failslab+0xa8/0x100 [ 176.478305][ T8827] kmem_cache_alloc_noprof+0x74/0x6e0 [ 176.478329][ T8827] ? skb_clone+0x212/0x3a0 [ 176.478354][ T8827] skb_clone+0x212/0x3a0 [ 176.478377][ T8827] __netlink_deliver_tap+0x404/0x850 [ 176.478408][ T8827] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.478428][ T8827] netlink_deliver_tap+0x19c/0x1b0 [ 176.478447][ T8827] netlink_unicast+0x7fa/0x9e0 [ 176.478482][ T8827] ? __pfx_netlink_unicast+0x10/0x10 [ 176.478505][ T8827] ? netlink_sendmsg+0x642/0xb30 [ 176.478520][ T8827] ? skb_put+0x11b/0x210 [ 176.478541][ T8827] netlink_sendmsg+0x805/0xb30 [ 176.478568][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.478590][ T8827] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.478612][ T8827] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.478629][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.478649][ T8827] __sock_sendmsg+0x21c/0x270 [ 176.478676][ T8827] ____sys_sendmsg+0x505/0x830 [ 176.478701][ T8827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.478727][ T8827] ? import_iovec+0x74/0xa0 [ 176.478752][ T8827] ___sys_sendmsg+0x21f/0x2a0 [ 176.478781][ T8827] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.478835][ T8827] ? __fget_files+0x2a/0x420 [ 176.478851][ T8827] ? __fget_files+0x3a0/0x420 [ 176.478876][ T8827] __x64_sys_sendmsg+0x19b/0x260 [ 176.478900][ T8827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.478929][ T8827] ? __pfx_ksys_write+0x10/0x10 [ 176.478953][ T8827] ? do_syscall_64+0xbe/0xfa0 [ 176.478975][ T8827] do_syscall_64+0xfa/0xfa0 [ 176.478991][ T8827] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.479010][ T8827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.479027][ T8827] ? clear_bhb_loop+0x60/0xb0 [ 176.479047][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.479063][ T8827] RIP: 0033:0x7f571cb8f6c9 [ 176.479080][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.479093][ T8827] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.479112][ T8827] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 176.479122][ T8827] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 176.479132][ T8827] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 176.479142][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.479151][ T8827] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 176.479178][ T8827] [ 177.092295][ T8849] FAULT_INJECTION: forcing a failure. [ 177.092295][ T8849] name failslab, interval 1, probability 0, space 0, times 0 [ 177.108174][ T8849] CPU: 1 UID: 0 PID: 8849 Comm: syz.4.936 Not tainted syzkaller #0 PREEMPT(full) [ 177.108198][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.108209][ T8849] Call Trace: [ 177.108216][ T8849] [ 177.108223][ T8849] dump_stack_lvl+0x189/0x250 [ 177.108251][ T8849] ? __pfx____ratelimit+0x10/0x10 [ 177.108272][ T8849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.108290][ T8849] ? __pfx__printk+0x10/0x10 [ 177.108307][ T8849] ? __lock_acquire+0xab9/0xd20 [ 177.108327][ T8849] should_fail_ex+0x414/0x560 [ 177.108350][ T8849] should_failslab+0xa8/0x100 [ 177.108366][ T8849] kmem_cache_alloc_noprof+0x74/0x6e0 [ 177.108386][ T8849] ? skb_clone+0x212/0x3a0 [ 177.108406][ T8849] skb_clone+0x212/0x3a0 [ 177.108425][ T8849] __netlink_deliver_tap+0x404/0x850 [ 177.108449][ T8849] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.108465][ T8849] netlink_deliver_tap+0x19c/0x1b0 [ 177.108480][ T8849] netlink_unicast+0x7fa/0x9e0 [ 177.108507][ T8849] ? __pfx_netlink_unicast+0x10/0x10 [ 177.108528][ T8849] ? netlink_sendmsg+0x642/0xb30 [ 177.108541][ T8849] ? skb_put+0x11b/0x210 [ 177.108557][ T8849] netlink_sendmsg+0x805/0xb30 [ 177.108579][ T8849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.108596][ T8849] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.108617][ T8849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.108637][ T8849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.108652][ T8849] __sock_sendmsg+0x21c/0x270 [ 177.108673][ T8849] ____sys_sendmsg+0x52d/0x830 [ 177.108692][ T8849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.108715][ T8849] ? import_iovec+0x74/0xa0 [ 177.108735][ T8849] ___sys_sendmsg+0x21f/0x2a0 [ 177.108751][ T8849] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.108794][ T8849] ? __fget_files+0x2a/0x420 [ 177.108807][ T8849] ? __fget_files+0x3a0/0x420 [ 177.108828][ T8849] __sys_sendmmsg+0x227/0x430 [ 177.108847][ T8849] ? __pfx___sys_sendmmsg+0x10/0x10 [ 177.108869][ T8849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 177.108898][ T8849] ? ksys_write+0x22a/0x250 [ 177.108917][ T8849] ? __pfx_ksys_write+0x10/0x10 [ 177.108939][ T8849] __x64_sys_sendmmsg+0xa0/0xc0 [ 177.108956][ T8849] do_syscall_64+0xfa/0xfa0 [ 177.108968][ T8849] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.108981][ T8849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.108994][ T8849] ? clear_bhb_loop+0x60/0xb0 [ 177.109011][ T8849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.109024][ T8849] RIP: 0033:0x7f571cb8f6c9 [ 177.109037][ T8849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.109049][ T8849] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 177.109064][ T8849] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 177.109074][ T8849] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 177.109083][ T8849] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 177.109092][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.109100][ T8849] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 177.109123][ T8849] [ 177.711534][ T8860] lo speed is unknown, defaulting to 1000 [ 177.797095][ T8875] FAULT_INJECTION: forcing a failure. [ 177.797095][ T8875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.869407][ T8875] CPU: 0 UID: 0 PID: 8875 Comm: syz.2.942 Not tainted syzkaller #0 PREEMPT(full) [ 177.869433][ T8875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.869445][ T8875] Call Trace: [ 177.869453][ T8875] [ 177.869462][ T8875] dump_stack_lvl+0x189/0x250 [ 177.869490][ T8875] ? __pfx____ratelimit+0x10/0x10 [ 177.869516][ T8875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.869539][ T8875] ? __pfx__printk+0x10/0x10 [ 177.869558][ T8875] ? __might_fault+0xb0/0x130 [ 177.869594][ T8875] should_fail_ex+0x414/0x560 [ 177.869625][ T8875] _copy_from_user+0x2d/0xb0 [ 177.869648][ T8875] kstrtouint_from_user+0xc4/0x170 [ 177.869671][ T8875] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 177.869708][ T8875] proc_fail_nth_write+0x88/0x200 [ 177.869730][ T8875] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 177.869759][ T8875] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 177.869783][ T8875] vfs_write+0x27e/0xb30 [ 177.869815][ T8875] ? __pfx_vfs_write+0x10/0x10 [ 177.869840][ T8875] ? __fget_files+0x2a/0x420 [ 177.869862][ T8875] ? __fget_files+0x3a0/0x420 [ 177.869878][ T8875] ? __fget_files+0x2a/0x420 [ 177.869904][ T8875] ksys_write+0x145/0x250 [ 177.869931][ T8875] ? __pfx_ksys_write+0x10/0x10 [ 177.869957][ T8875] ? do_syscall_64+0xbe/0xfa0 [ 177.869980][ T8875] do_syscall_64+0xfa/0xfa0 [ 177.869996][ T8875] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.870013][ T8875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.870031][ T8875] ? clear_bhb_loop+0x60/0xb0 [ 177.870053][ T8875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.870070][ T8875] RIP: 0033:0x7f512258e17f [ 177.870086][ T8875] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 177.870101][ T8875] RSP: 002b:00007f51234dd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 177.870121][ T8875] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f512258e17f [ 177.870133][ T8875] RDX: 0000000000000001 RSI: 00007f51234dd0a0 RDI: 0000000000000004 [ 177.870144][ T8875] RBP: 00007f51234dd090 R08: 0000000000000000 R09: 0000000000000000 [ 177.870156][ T8875] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 177.870167][ T8875] R13: 00007f51227e6038 R14: 00007f51227e5fa0 R15: 00007ffdcc2c3d58 [ 177.870200][ T8875] [ 178.107057][ T8878] FAULT_INJECTION: forcing a failure. [ 178.107057][ T8878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.120441][ T8878] CPU: 0 UID: 0 PID: 8878 Comm: syz.4.944 Not tainted syzkaller #0 PREEMPT(full) [ 178.120467][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.120478][ T8878] Call Trace: [ 178.120486][ T8878] [ 178.120494][ T8878] dump_stack_lvl+0x189/0x250 [ 178.120522][ T8878] ? __pfx____ratelimit+0x10/0x10 [ 178.120548][ T8878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.120570][ T8878] ? __pfx__printk+0x10/0x10 [ 178.120599][ T8878] should_fail_ex+0x414/0x560 [ 178.120629][ T8878] _copy_to_user+0x31/0xb0 [ 178.120652][ T8878] bpf_test_finish+0x24e/0x700 [ 178.120680][ T8878] ? __pfx_bpf_test_finish+0x10/0x10 [ 178.120700][ T8878] ? bpf_test_timer_leave+0xbe/0x290 [ 178.120729][ T8878] bpf_prog_test_run_flow_dissector+0x44e/0x5c0 [ 178.120762][ T8878] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 178.120785][ T8878] ? __fget_files+0x2a/0x420 [ 178.120808][ T8878] ? __fget_files+0x2a/0x420 [ 178.120831][ T8878] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 178.120851][ T8878] bpf_prog_test_run+0x2c7/0x340 [ 178.120875][ T8878] __sys_bpf+0x562/0x860 [ 178.120895][ T8878] ? __pfx___sys_bpf+0x10/0x10 [ 178.120928][ T8878] ? ksys_write+0x22a/0x250 [ 178.120954][ T8878] ? __pfx_ksys_write+0x10/0x10 [ 178.120983][ T8878] __x64_sys_bpf+0x7c/0x90 [ 178.121007][ T8878] do_syscall_64+0xfa/0xfa0 [ 178.121023][ T8878] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.121041][ T8878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.121059][ T8878] ? clear_bhb_loop+0x60/0xb0 [ 178.121080][ T8878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.121097][ T8878] RIP: 0033:0x7f571cb8f6c9 [ 178.121114][ T8878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.121129][ T8878] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.121149][ T8878] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 178.121162][ T8878] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 178.121174][ T8878] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 178.121185][ T8878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.121196][ T8878] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 178.121227][ T8878] [ 178.876975][ T8890] netlink: 'syz.4.947': attribute type 1 has an invalid length. [ 179.058491][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.947'. [ 179.189392][ T8890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.916743][ T8924] netlink: 52 bytes leftover after parsing attributes in process `syz.0.954'. [ 179.994727][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 180.244449][ T8936] FAULT_INJECTION: forcing a failure. [ 180.244449][ T8936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.280515][ T8936] CPU: 1 UID: 0 PID: 8936 Comm: syz.1.956 Not tainted syzkaller #0 PREEMPT(full) [ 180.280541][ T8936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.280556][ T8936] Call Trace: [ 180.280564][ T8936] [ 180.280573][ T8936] dump_stack_lvl+0x189/0x250 [ 180.280611][ T8936] ? __pfx____ratelimit+0x10/0x10 [ 180.280637][ T8936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.280660][ T8936] ? __pfx__printk+0x10/0x10 [ 180.280678][ T8936] ? __might_fault+0xb0/0x130 [ 180.280715][ T8936] should_fail_ex+0x414/0x560 [ 180.280746][ T8936] _copy_from_user+0x2d/0xb0 [ 180.280769][ T8936] kstrtouint_from_user+0xc4/0x170 [ 180.280792][ T8936] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 180.280829][ T8936] proc_fail_nth_write+0x88/0x200 [ 180.280852][ T8936] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.280880][ T8936] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.280903][ T8936] vfs_write+0x27e/0xb30 [ 180.280936][ T8936] ? __pfx_vfs_write+0x10/0x10 [ 180.280962][ T8936] ? __fget_files+0x2a/0x420 [ 180.280984][ T8936] ? __fget_files+0x3a0/0x420 [ 180.281000][ T8936] ? __fget_files+0x2a/0x420 [ 180.281027][ T8936] ksys_write+0x145/0x250 [ 180.281054][ T8936] ? __pfx_ksys_write+0x10/0x10 [ 180.281081][ T8936] ? do_syscall_64+0xbe/0xfa0 [ 180.281104][ T8936] do_syscall_64+0xfa/0xfa0 [ 180.281120][ T8936] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.281138][ T8936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.281155][ T8936] ? clear_bhb_loop+0x60/0xb0 [ 180.281177][ T8936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.281194][ T8936] RIP: 0033:0x7f5c4c98e17f [ 180.281217][ T8936] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 180.281232][ T8936] RSP: 002b:00007f5c4d750030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 180.281257][ T8936] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c4c98e17f [ 180.281270][ T8936] RDX: 0000000000000001 RSI: 00007f5c4d7500a0 RDI: 0000000000000004 [ 180.281281][ T8936] RBP: 00007f5c4d750090 R08: 0000000000000000 R09: 0000000000000000 [ 180.281293][ T8936] R10: 000000002000c000 R11: 0000000000000293 R12: 0000000000000001 [ 180.281304][ T8936] R13: 00007f5c4cbe6038 R14: 00007f5c4cbe5fa0 R15: 00007ffd9ed22e48 [ 180.281337][ T8936] [ 180.822031][ T8957] FAULT_INJECTION: forcing a failure. [ 180.822031][ T8957] name failslab, interval 1, probability 0, space 0, times 0 [ 180.858513][ T8957] CPU: 1 UID: 0 PID: 8957 Comm: syz.2.962 Not tainted syzkaller #0 PREEMPT(full) [ 180.858538][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.858549][ T8957] Call Trace: [ 180.858557][ T8957] [ 180.858565][ T8957] dump_stack_lvl+0x189/0x250 [ 180.858593][ T8957] ? __pfx____ratelimit+0x10/0x10 [ 180.858618][ T8957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.858640][ T8957] ? __pfx__printk+0x10/0x10 [ 180.858666][ T8957] ? __pfx___might_resched+0x10/0x10 [ 180.858684][ T8957] ? fs_reclaim_acquire+0x7d/0x100 [ 180.858706][ T8957] should_fail_ex+0x414/0x560 [ 180.858737][ T8957] should_failslab+0xa8/0x100 [ 180.858757][ T8957] __kmalloc_noprof+0xcb/0x7f0 [ 180.858780][ T8957] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 180.858812][ T8957] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 180.858843][ T8957] genl_family_rcv_msg_doit+0xb8/0x300 [ 180.858873][ T8957] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 180.858904][ T8957] ? apparmor_capable+0x137/0x1b0 [ 180.858924][ T8957] ? bpf_lsm_capable+0x9/0x20 [ 180.858942][ T8957] ? security_capable+0x7e/0x2e0 [ 180.858971][ T8957] genl_rcv_msg+0x60e/0x790 [ 180.859000][ T8957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.859022][ T8957] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 180.859042][ T8957] ? __pfx_nl80211_connect+0x10/0x10 [ 180.859056][ T8957] ? __pfx_nl80211_post_doit+0x10/0x10 [ 180.859092][ T8957] netlink_rcv_skb+0x208/0x470 [ 180.859121][ T8957] ? __lock_acquire+0xab9/0xd20 [ 180.859139][ T8957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.859163][ T8957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.859201][ T8957] ? down_read+0x1ad/0x2e0 [ 180.859225][ T8957] genl_rcv+0x28/0x40 [ 180.859245][ T8957] netlink_unicast+0x82f/0x9e0 [ 180.859279][ T8957] ? __pfx_netlink_unicast+0x10/0x10 [ 180.859306][ T8957] ? netlink_sendmsg+0x642/0xb30 [ 180.859323][ T8957] ? skb_put+0x11b/0x210 [ 180.859346][ T8957] netlink_sendmsg+0x805/0xb30 [ 180.859375][ T8957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.859398][ T8957] ? aa_sock_msg_perm+0xf1/0x1d0 [ 180.859423][ T8957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.859440][ T8957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.859460][ T8957] __sock_sendmsg+0x21c/0x270 [ 180.859488][ T8957] ____sys_sendmsg+0x505/0x830 [ 180.859514][ T8957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.859544][ T8957] ? import_iovec+0x74/0xa0 [ 180.859569][ T8957] ___sys_sendmsg+0x21f/0x2a0 [ 180.859590][ T8957] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.859646][ T8957] ? __fget_files+0x2a/0x420 [ 180.859662][ T8957] ? __fget_files+0x3a0/0x420 [ 180.859689][ T8957] __x64_sys_sendmsg+0x19b/0x260 [ 180.859712][ T8957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.859742][ T8957] ? __pfx_ksys_write+0x10/0x10 [ 180.859769][ T8957] ? do_syscall_64+0xbe/0xfa0 [ 180.859791][ T8957] do_syscall_64+0xfa/0xfa0 [ 180.859806][ T8957] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.859824][ T8957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.859841][ T8957] ? clear_bhb_loop+0x60/0xb0 [ 180.859863][ T8957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.859880][ T8957] RIP: 0033:0x7f512258f6c9 [ 180.859896][ T8957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.859912][ T8957] RSP: 002b:00007f51234dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.859931][ T8957] RAX: ffffffffffffffda RBX: 00007f51227e5fa0 RCX: 00007f512258f6c9 [ 180.859945][ T8957] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 180.859957][ T8957] RBP: 00007f51234dd090 R08: 0000000000000000 R09: 0000000000000000 [ 180.859968][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.859979][ T8957] R13: 00007f51227e6038 R14: 00007f51227e5fa0 R15: 00007ffdcc2c3d58 [ 180.860011][ T8957] [ 181.234503][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a898000: rx timeout, send abort [ 181.743699][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a898000: abort rx timeout. Force session deactivation [ 181.854908][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 181.898496][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 182.050360][ T8994] FAULT_INJECTION: forcing a failure. [ 182.050360][ T8994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.083222][ T8996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.971'. [ 182.105357][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.0.970 Not tainted syzkaller #0 PREEMPT(full) [ 182.105382][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.105391][ T8994] Call Trace: [ 182.105396][ T8994] [ 182.105402][ T8994] dump_stack_lvl+0x189/0x250 [ 182.105426][ T8994] ? __pfx____ratelimit+0x10/0x10 [ 182.105450][ T8994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.105471][ T8994] ? __pfx__printk+0x10/0x10 [ 182.105498][ T8994] should_fail_ex+0x414/0x560 [ 182.105526][ T8994] _copy_to_user+0x31/0xb0 [ 182.105549][ T8994] simple_read_from_buffer+0xe1/0x170 [ 182.105578][ T8994] proc_fail_nth_read+0x1b3/0x220 [ 182.105602][ T8994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.105625][ T8994] ? rw_verify_area+0x2a6/0x4d0 [ 182.105646][ T8994] ? __lock_acquire+0xab9/0xd20 [ 182.105661][ T8994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.105683][ T8994] vfs_read+0x200/0xa30 [ 182.105705][ T8994] ? fdget_pos+0x247/0x320 [ 182.105725][ T8994] ? __pfx___mutex_lock+0x10/0x10 [ 182.105744][ T8994] ? __pfx_vfs_read+0x10/0x10 [ 182.105767][ T8994] ? __fget_files+0x2a/0x420 [ 182.105787][ T8994] ? __fget_files+0x3a0/0x420 [ 182.105802][ T8994] ? __fget_files+0x2a/0x420 [ 182.105827][ T8994] ksys_read+0x145/0x250 [ 182.105848][ T8994] ? __fget_files+0x2a/0x420 [ 182.105865][ T8994] ? __pfx_ksys_read+0x10/0x10 [ 182.105891][ T8994] ? do_syscall_64+0xbe/0xfa0 [ 182.105912][ T8994] do_syscall_64+0xfa/0xfa0 [ 182.105926][ T8994] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.105944][ T8994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.105961][ T8994] ? clear_bhb_loop+0x60/0xb0 [ 182.105982][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.105998][ T8994] RIP: 0033:0x7f81fcf8e0dc [ 182.106015][ T8994] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.106030][ T8994] RSP: 002b:00007f81fdebf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.106049][ T8994] RAX: ffffffffffffffda RBX: 00007f81fd1e5fa0 RCX: 00007f81fcf8e0dc [ 182.106062][ T8994] RDX: 000000000000000f RSI: 00007f81fdebf0a0 RDI: 0000000000000005 [ 182.106074][ T8994] RBP: 00007f81fdebf090 R08: 0000000000000000 R09: 0000000000000000 [ 182.106086][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.106096][ T8994] R13: 00007f81fd1e6038 R14: 00007f81fd1e5fa0 R15: 00007ffc62180c28 [ 182.106128][ T8994] [ 182.107410][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 182.217365][ T9004] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 182.259935][ T8998] geneve2: entered promiscuous mode [ 182.298850][ T9004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.973'. [ 182.307127][ T8998] geneve2: entered allmulticast mode [ 182.393074][ T9013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.973'. [ 182.439561][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.449092][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.481029][ T9009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.532929][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 182.583971][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.630667][ T9004] pim6reg: entered allmulticast mode [ 182.664310][ T9008] pim6reg: left allmulticast mode [ 182.797844][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.044051][ T9048] ipt_rpfilter: unknown options [ 183.049352][ T9047] FAULT_INJECTION: forcing a failure. [ 183.049352][ T9047] name failslab, interval 1, probability 0, space 0, times 0 [ 183.079212][ T9047] CPU: 1 UID: 0 PID: 9047 Comm: syz.3.980 Not tainted syzkaller #0 PREEMPT(full) [ 183.079237][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.079247][ T9047] Call Trace: [ 183.079254][ T9047] [ 183.079261][ T9047] dump_stack_lvl+0x189/0x250 [ 183.079290][ T9047] ? __pfx____ratelimit+0x10/0x10 [ 183.079314][ T9047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.079334][ T9047] ? __pfx__printk+0x10/0x10 [ 183.079357][ T9047] ? __pfx___might_resched+0x10/0x10 [ 183.079375][ T9047] ? fs_reclaim_acquire+0x7d/0x100 [ 183.079397][ T9047] should_fail_ex+0x414/0x560 [ 183.079427][ T9047] should_failslab+0xa8/0x100 [ 183.079446][ T9047] kmem_cache_alloc_node_noprof+0x77/0x710 [ 183.079470][ T9047] ? __alloc_skb+0x112/0x2d0 [ 183.079485][ T9047] ? netlink_autobind+0xdb/0x300 [ 183.079509][ T9047] __alloc_skb+0x112/0x2d0 [ 183.079530][ T9047] netlink_sendmsg+0x5c6/0xb30 [ 183.079557][ T9047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.079577][ T9047] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.079601][ T9047] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.079618][ T9047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.079635][ T9047] __sock_sendmsg+0x21c/0x270 [ 183.079659][ T9047] ____sys_sendmsg+0x505/0x830 [ 183.079682][ T9047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.079711][ T9047] ? import_iovec+0x74/0xa0 [ 183.079736][ T9047] ___sys_sendmsg+0x21f/0x2a0 [ 183.079759][ T9047] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.079814][ T9047] ? __fget_files+0x2a/0x420 [ 183.079831][ T9047] ? __fget_files+0x3a0/0x420 [ 183.079859][ T9047] __x64_sys_sendmsg+0x19b/0x260 [ 183.079882][ T9047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.079909][ T9047] ? __pfx_ksys_write+0x10/0x10 [ 183.079936][ T9047] ? do_syscall_64+0xbe/0xfa0 [ 183.079958][ T9047] do_syscall_64+0xfa/0xfa0 [ 183.079973][ T9047] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.079990][ T9047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.080006][ T9047] ? clear_bhb_loop+0x60/0xb0 [ 183.080028][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.080045][ T9047] RIP: 0033:0x7fda5658f6c9 [ 183.080062][ T9047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.080077][ T9047] RSP: 002b:00007fda57401038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.080097][ T9047] RAX: ffffffffffffffda RBX: 00007fda567e5fa0 RCX: 00007fda5658f6c9 [ 183.080110][ T9047] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 183.080122][ T9047] RBP: 00007fda57401090 R08: 0000000000000000 R09: 0000000000000000 [ 183.080134][ T9047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.080151][ T9047] R13: 00007fda567e6038 R14: 00007fda567e5fa0 R15: 00007fff4e214578 [ 183.080182][ T9047] [ 183.636510][ T9059] FAULT_INJECTION: forcing a failure. [ 183.636510][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 183.649695][ T9059] CPU: 1 UID: 0 PID: 9059 Comm: syz.4.985 Not tainted syzkaller #0 PREEMPT(full) [ 183.649720][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.649732][ T9059] Call Trace: [ 183.649740][ T9059] [ 183.649748][ T9059] dump_stack_lvl+0x189/0x250 [ 183.649773][ T9059] ? __pfx____ratelimit+0x10/0x10 [ 183.649799][ T9059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.649821][ T9059] ? __pfx__printk+0x10/0x10 [ 183.649844][ T9059] ? __lock_acquire+0xab9/0xd20 [ 183.649865][ T9059] should_fail_ex+0x414/0x560 [ 183.649894][ T9059] should_failslab+0xa8/0x100 [ 183.649914][ T9059] kmem_cache_alloc_noprof+0x74/0x6e0 [ 183.649938][ T9059] ? skb_clone+0x212/0x3a0 [ 183.649963][ T9059] skb_clone+0x212/0x3a0 [ 183.649987][ T9059] __netlink_deliver_tap+0x404/0x850 [ 183.650029][ T9059] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.650048][ T9059] netlink_deliver_tap+0x19c/0x1b0 [ 183.650069][ T9059] netlink_unicast+0x7fa/0x9e0 [ 183.650102][ T9059] ? __pfx_netlink_unicast+0x10/0x10 [ 183.650128][ T9059] ? netlink_sendmsg+0x642/0xb30 [ 183.650144][ T9059] ? skb_put+0x11b/0x210 [ 183.650166][ T9059] netlink_sendmsg+0x805/0xb30 [ 183.650195][ T9059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.650218][ T9059] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.650245][ T9059] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.650263][ T9059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.650284][ T9059] __sock_sendmsg+0x21c/0x270 [ 183.650310][ T9059] ____sys_sendmsg+0x505/0x830 [ 183.650335][ T9059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.650364][ T9059] ? import_iovec+0x74/0xa0 [ 183.650390][ T9059] ___sys_sendmsg+0x21f/0x2a0 [ 183.650411][ T9059] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.650468][ T9059] ? __fget_files+0x2a/0x420 [ 183.650484][ T9059] ? __fget_files+0x3a0/0x420 [ 183.650512][ T9059] __x64_sys_sendmsg+0x19b/0x260 [ 183.650535][ T9059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.650565][ T9059] ? __pfx_ksys_write+0x10/0x10 [ 183.650592][ T9059] ? do_syscall_64+0xbe/0xfa0 [ 183.650614][ T9059] do_syscall_64+0xfa/0xfa0 [ 183.650630][ T9059] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.650647][ T9059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.650665][ T9059] ? clear_bhb_loop+0x60/0xb0 [ 183.650687][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.650703][ T9059] RIP: 0033:0x7f571cb8f6c9 [ 183.650721][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.650736][ T9059] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.650756][ T9059] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 183.650769][ T9059] RDX: 000000002400400c RSI: 0000200000000200 RDI: 0000000000000003 [ 183.650779][ T9059] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 183.650790][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.650800][ T9059] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 183.650831][ T9059] [ 184.024134][ T9066] tunl0: entered allmulticast mode [ 184.024943][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 184.030229][ T9066] bond1: entered allmulticast mode [ 184.072303][ T9066] bridge1: entered allmulticast mode [ 184.081636][ T9066] syztnl1: entered allmulticast mode [ 184.087203][ T9066] bond2: entered allmulticast mode [ 184.094770][ T9066] geneve2: left promiscuous mode [ 184.139964][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.188799][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.255049][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.275944][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.305621][ T9070] lo speed is unknown, defaulting to 1000 [ 184.988500][ T9101] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 185.088495][ T9106] FAULT_INJECTION: forcing a failure. [ 185.088495][ T9106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.088611][ T9105] FAULT_INJECTION: forcing a failure. [ 185.088611][ T9105] name failslab, interval 1, probability 0, space 0, times 0 [ 185.101743][ T9106] CPU: 1 UID: 0 PID: 9106 Comm: syz.2.998 Not tainted syzkaller #0 PREEMPT(full) [ 185.101763][ T9106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.101773][ T9106] Call Trace: [ 185.101781][ T9106] [ 185.101789][ T9106] dump_stack_lvl+0x189/0x250 [ 185.101817][ T9106] ? __pfx____ratelimit+0x10/0x10 [ 185.101841][ T9106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.101863][ T9106] ? __pfx__printk+0x10/0x10 [ 185.101881][ T9106] ? __might_fault+0xb0/0x130 [ 185.101914][ T9106] should_fail_ex+0x414/0x560 [ 185.101942][ T9106] _copy_from_iter+0x1de/0x1790 [ 185.101967][ T9106] ? rcu_is_watching+0x15/0xb0 [ 185.101990][ T9106] ? kmalloc_reserve+0xbd/0x290 [ 185.102008][ T9106] ? __pfx__copy_from_iter+0x10/0x10 [ 185.102028][ T9106] ? __build_skb_around+0x262/0x3f0 [ 185.102049][ T9106] ? netlink_sendmsg+0x642/0xb30 [ 185.102066][ T9106] ? skb_put+0x11b/0x210 [ 185.102087][ T9106] netlink_sendmsg+0x6b2/0xb30 [ 185.102113][ T9106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.102134][ T9106] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.102160][ T9106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.102176][ T9106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.102195][ T9106] __sock_sendmsg+0x21c/0x270 [ 185.102220][ T9106] ____sys_sendmsg+0x505/0x830 [ 185.102244][ T9106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.102272][ T9106] ? import_iovec+0x74/0xa0 [ 185.102296][ T9106] ___sys_sendmsg+0x21f/0x2a0 [ 185.102316][ T9106] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.102369][ T9106] ? __fget_files+0x2a/0x420 [ 185.102385][ T9106] ? __fget_files+0x3a0/0x420 [ 185.102411][ T9106] __x64_sys_sendmsg+0x19b/0x260 [ 185.102432][ T9106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.102468][ T9106] ? __pfx_ksys_write+0x10/0x10 [ 185.102494][ T9106] ? do_syscall_64+0xbe/0xfa0 [ 185.102515][ T9106] do_syscall_64+0xfa/0xfa0 [ 185.102530][ T9106] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.102546][ T9106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.102563][ T9106] ? clear_bhb_loop+0x60/0xb0 [ 185.102589][ T9106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.102606][ T9106] RIP: 0033:0x7f512258f6c9 [ 185.102621][ T9106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.102635][ T9106] RSP: 002b:00007f51234bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.102654][ T9106] RAX: ffffffffffffffda RBX: 00007f51227e6090 RCX: 00007f512258f6c9 [ 185.102668][ T9106] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000004 [ 185.102679][ T9106] RBP: 00007f51234bc090 R08: 0000000000000000 R09: 0000000000000000 [ 185.102690][ T9106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.102701][ T9106] R13: 00007f51227e6128 R14: 00007f51227e6090 R15: 00007ffdcc2c3d58 [ 185.102731][ T9106] [ 185.123886][ T9108] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 185.146291][ T9101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.153627][ T9105] CPU: 1 UID: 0 PID: 9105 Comm: syz.0.999 Not tainted syzkaller #0 PREEMPT(full) [ 185.153653][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.153665][ T9105] Call Trace: [ 185.153672][ T9105] [ 185.153681][ T9105] dump_stack_lvl+0x189/0x250 [ 185.153707][ T9105] ? __pfx____ratelimit+0x10/0x10 [ 185.153732][ T9105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.153754][ T9105] ? __pfx__printk+0x10/0x10 [ 185.153778][ T9105] ? __pfx___might_resched+0x10/0x10 [ 185.153795][ T9105] ? fs_reclaim_acquire+0x7d/0x100 [ 185.153817][ T9105] should_fail_ex+0x414/0x560 [ 185.153846][ T9105] should_failslab+0xa8/0x100 [ 185.153866][ T9105] __kmalloc_noprof+0xcb/0x7f0 [ 185.153895][ T9105] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 185.153925][ T9105] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 185.153956][ T9105] genl_family_rcv_msg_doit+0xb8/0x300 [ 185.153984][ T9105] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.154014][ T9105] ? apparmor_capable+0x137/0x1b0 [ 185.154036][ T9105] ? bpf_lsm_capable+0x9/0x20 [ 185.154056][ T9105] ? security_capable+0x7e/0x2e0 [ 185.154085][ T9105] genl_rcv_msg+0x60e/0x790 [ 185.154113][ T9105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.154134][ T9105] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 185.154153][ T9105] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 185.154174][ T9105] ? __pfx_nl80211_post_doit+0x10/0x10 [ 185.154209][ T9105] netlink_rcv_skb+0x208/0x470 [ 185.154225][ T9105] ? __lock_acquire+0xab9/0xd20 [ 185.154243][ T9105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.154266][ T9105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.154303][ T9105] ? down_read+0x1ad/0x2e0 [ 185.154326][ T9105] genl_rcv+0x28/0x40 [ 185.154346][ T9105] netlink_unicast+0x82f/0x9e0 [ 185.154378][ T9105] ? __pfx_netlink_unicast+0x10/0x10 [ 185.154404][ T9105] ? netlink_sendmsg+0x642/0xb30 [ 185.154421][ T9105] ? skb_put+0x11b/0x210 [ 185.154443][ T9105] netlink_sendmsg+0x805/0xb30 [ 185.154470][ T9105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.154493][ T9105] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.154518][ T9105] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.154534][ T9105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.154553][ T9105] __sock_sendmsg+0x21c/0x270 [ 185.154586][ T9105] ____sys_sendmsg+0x505/0x830 [ 185.154611][ T9105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.154640][ T9105] ? import_iovec+0x74/0xa0 [ 185.154664][ T9105] ___sys_sendmsg+0x21f/0x2a0 [ 185.154685][ T9105] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.154741][ T9105] ? __fget_files+0x2a/0x420 [ 185.154757][ T9105] ? __fget_files+0x3a0/0x420 [ 185.154784][ T9105] __x64_sys_sendmsg+0x19b/0x260 [ 185.154806][ T9105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.154835][ T9105] ? __pfx_ksys_write+0x10/0x10 [ 185.154861][ T9105] ? do_syscall_64+0xbe/0xfa0 [ 185.154881][ T9105] do_syscall_64+0xfa/0xfa0 [ 185.154897][ T9105] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.154913][ T9105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.154930][ T9105] ? clear_bhb_loop+0x60/0xb0 [ 185.154950][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.154966][ T9105] RIP: 0033:0x7f81fcf8f6c9 [ 185.154983][ T9105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.154998][ T9105] RSP: 002b:00007f81fdebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.155016][ T9105] RAX: ffffffffffffffda RBX: 00007f81fd1e5fa0 RCX: 00007f81fcf8f6c9 [ 185.155029][ T9105] RDX: 0000000000004000 RSI: 0000200000000f00 RDI: 0000000000000003 [ 185.155041][ T9105] RBP: 00007f81fdebf090 R08: 0000000000000000 R09: 0000000000000000 [ 185.155051][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.155062][ T9105] R13: 00007f81fd1e6038 R14: 00007f81fd1e5fa0 R15: 00007ffc62180c28 [ 185.155092][ T9105] [ 185.567180][ T9119] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.589576][ T9103] bond2: (slave ip6gretap1): making interface the new active one [ 185.800416][ T9103] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 185.823774][ T9109] veth3: entered promiscuous mode [ 185.832544][ T9109] bond2: (slave veth3): Enslaving as an active interface with a down link [ 185.847899][ T9110] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 185.863604][ T9097] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 185.896066][ T9115] __nla_validate_parse: 2 callbacks suppressed [ 185.896083][ T9115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 185.911466][ T9115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 185.920908][ T9115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 185.943589][ T9120] syzkaller1: entered allmulticast mode [ 185.952529][ T9124] netlink: 'syz.0.1001': attribute type 4 has an invalid length. [ 186.098026][ T9130] FAULT_INJECTION: forcing a failure. [ 186.098026][ T9130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.125507][ T9130] CPU: 0 UID: 0 PID: 9130 Comm: syz.2.1005 Not tainted syzkaller #0 PREEMPT(full) [ 186.125542][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.125553][ T9130] Call Trace: [ 186.125561][ T9130] [ 186.125570][ T9130] dump_stack_lvl+0x189/0x250 [ 186.125596][ T9130] ? __pfx____ratelimit+0x10/0x10 [ 186.125620][ T9130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.125642][ T9130] ? __pfx__printk+0x10/0x10 [ 186.125660][ T9130] ? __might_fault+0xb0/0x130 [ 186.125692][ T9130] should_fail_ex+0x414/0x560 [ 186.125722][ T9130] _copy_from_iter+0x1de/0x1790 [ 186.125748][ T9130] ? rcu_is_watching+0x15/0xb0 [ 186.125771][ T9130] ? kmalloc_reserve+0xbd/0x290 [ 186.125789][ T9130] ? __pfx__copy_from_iter+0x10/0x10 [ 186.125811][ T9130] ? __build_skb_around+0x262/0x3f0 [ 186.125832][ T9130] ? netlink_sendmsg+0x642/0xb30 [ 186.125851][ T9130] ? skb_put+0x11b/0x210 [ 186.125872][ T9130] netlink_sendmsg+0x6b2/0xb30 [ 186.125899][ T9130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.125922][ T9130] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.125947][ T9130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.125966][ T9130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.125985][ T9130] __sock_sendmsg+0x21c/0x270 [ 186.126008][ T9130] ____sys_sendmsg+0x505/0x830 [ 186.126033][ T9130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.126062][ T9130] ? import_iovec+0x74/0xa0 [ 186.126086][ T9130] ___sys_sendmsg+0x21f/0x2a0 [ 186.126108][ T9130] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.126163][ T9130] ? __fget_files+0x2a/0x420 [ 186.126178][ T9130] ? __fget_files+0x3a0/0x420 [ 186.126204][ T9130] __x64_sys_sendmsg+0x19b/0x260 [ 186.126227][ T9130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.126256][ T9130] ? __pfx_ksys_write+0x10/0x10 [ 186.126282][ T9130] ? do_syscall_64+0xbe/0xfa0 [ 186.126303][ T9130] do_syscall_64+0xfa/0xfa0 [ 186.126319][ T9130] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.126336][ T9130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.126353][ T9130] ? clear_bhb_loop+0x60/0xb0 [ 186.126374][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.126391][ T9130] RIP: 0033:0x7f512258f6c9 [ 186.126407][ T9130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.126422][ T9130] RSP: 002b:00007f51234dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.126442][ T9130] RAX: ffffffffffffffda RBX: 00007f51227e5fa0 RCX: 00007f512258f6c9 [ 186.126455][ T9130] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 186.126466][ T9130] RBP: 00007f51234dd090 R08: 0000000000000000 R09: 0000000000000000 [ 186.126478][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.126488][ T9130] R13: 00007f51227e6038 R14: 00007f51227e5fa0 R15: 00007ffdcc2c3d58 [ 186.126526][ T9130] [ 186.455810][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1007'. [ 186.469047][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 186.514797][ T9131] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1003'. [ 186.592660][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 186.974373][ T9167] FAULT_INJECTION: forcing a failure. [ 186.974373][ T9167] name failslab, interval 1, probability 0, space 0, times 0 [ 187.000818][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 187.019076][ T9167] CPU: 0 UID: 0 PID: 9167 Comm: syz.4.1017 Not tainted syzkaller #0 PREEMPT(full) [ 187.019104][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.019115][ T9167] Call Trace: [ 187.019123][ T9167] [ 187.019132][ T9167] dump_stack_lvl+0x189/0x250 [ 187.019160][ T9167] ? __pfx____ratelimit+0x10/0x10 [ 187.019185][ T9167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.019208][ T9167] ? __pfx__printk+0x10/0x10 [ 187.019231][ T9167] ? __pfx___might_resched+0x10/0x10 [ 187.019250][ T9167] ? fs_reclaim_acquire+0x7d/0x100 [ 187.019272][ T9167] should_fail_ex+0x414/0x560 [ 187.019302][ T9167] should_failslab+0xa8/0x100 [ 187.019323][ T9167] kmem_cache_alloc_node_noprof+0x77/0x710 [ 187.019348][ T9167] ? __alloc_skb+0x112/0x2d0 [ 187.019371][ T9167] __alloc_skb+0x112/0x2d0 [ 187.019393][ T9167] ip6addrlbl_get+0x4e7/0x9b0 [ 187.019420][ T9167] ? __pfx_ip6addrlbl_get+0x10/0x10 [ 187.019451][ T9167] ? __pfx_ip6addrlbl_get+0x10/0x10 [ 187.019471][ T9167] rtnetlink_rcv_msg+0x7cf/0xb70 [ 187.019491][ T9167] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 187.019506][ T9167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.019522][ T9167] ? ref_tracker_free+0x63a/0x7d0 [ 187.019538][ T9167] ? __asan_memcpy+0x40/0x70 [ 187.019559][ T9167] ? __pfx_ref_tracker_free+0x10/0x10 [ 187.019575][ T9167] ? __skb_clone+0x63/0x7a0 [ 187.019605][ T9167] netlink_rcv_skb+0x208/0x470 [ 187.019626][ T9167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.019646][ T9167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.019676][ T9167] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.019703][ T9167] netlink_unicast+0x82f/0x9e0 [ 187.019745][ T9167] ? __pfx_netlink_unicast+0x10/0x10 [ 187.019772][ T9167] ? netlink_sendmsg+0x642/0xb30 [ 187.019789][ T9167] ? skb_put+0x11b/0x210 [ 187.019810][ T9167] netlink_sendmsg+0x805/0xb30 [ 187.019839][ T9167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.019861][ T9167] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.019889][ T9167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.019907][ T9167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.019927][ T9167] __sock_sendmsg+0x21c/0x270 [ 187.019953][ T9167] ____sys_sendmsg+0x505/0x830 [ 187.019978][ T9167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.020008][ T9167] ? import_iovec+0x74/0xa0 [ 187.020031][ T9167] ___sys_sendmsg+0x21f/0x2a0 [ 187.020053][ T9167] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.020105][ T9167] ? __fget_files+0x2a/0x420 [ 187.020122][ T9167] ? __fget_files+0x3a0/0x420 [ 187.020149][ T9167] __x64_sys_sendmsg+0x19b/0x260 [ 187.020171][ T9167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.020202][ T9167] ? __pfx_ksys_write+0x10/0x10 [ 187.020228][ T9167] ? do_syscall_64+0xbe/0xfa0 [ 187.020250][ T9167] do_syscall_64+0xfa/0xfa0 [ 187.020266][ T9167] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.020283][ T9167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.020302][ T9167] ? clear_bhb_loop+0x60/0xb0 [ 187.020323][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.020340][ T9167] RIP: 0033:0x7f571cb8f6c9 [ 187.020357][ T9167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.020372][ T9167] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.020392][ T9167] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 187.020406][ T9167] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 187.020418][ T9167] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 187.020429][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.020440][ T9167] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 187.020471][ T9167] [ 187.025068][ T9171] sctp: [Deprecated]: syz.3.1014 (pid 9171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.025068][ T9171] Use struct sctp_sack_info instead [ 187.130138][ T9175] netlink: 'syz.1.1018': attribute type 3 has an invalid length. [ 187.666371][ T9194] FAULT_INJECTION: forcing a failure. [ 187.666371][ T9194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.688212][ T9192] FAULT_INJECTION: forcing a failure. [ 187.688212][ T9192] name failslab, interval 1, probability 0, space 0, times 0 [ 187.703228][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.0.1026 Not tainted syzkaller #0 PREEMPT(full) [ 187.703268][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.703280][ T9194] Call Trace: [ 187.703288][ T9194] [ 187.703297][ T9194] dump_stack_lvl+0x189/0x250 [ 187.703324][ T9194] ? __pfx____ratelimit+0x10/0x10 [ 187.703351][ T9194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.703373][ T9194] ? __pfx__printk+0x10/0x10 [ 187.703392][ T9194] ? __might_fault+0xb0/0x130 [ 187.703432][ T9194] should_fail_ex+0x414/0x560 [ 187.703461][ T9194] _copy_from_user+0x2d/0xb0 [ 187.703484][ T9194] kstrtouint_from_user+0xc4/0x170 [ 187.703506][ T9194] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 187.703542][ T9194] proc_fail_nth_write+0x88/0x200 [ 187.703564][ T9194] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.703589][ T9194] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 187.703618][ T9194] vfs_write+0x27e/0xb30 [ 187.703650][ T9194] ? __pfx_vfs_write+0x10/0x10 [ 187.703671][ T9194] ? __fget_files+0x2a/0x420 [ 187.703692][ T9194] ? __fget_files+0x3a0/0x420 [ 187.703705][ T9194] ? __fget_files+0x2a/0x420 [ 187.703727][ T9194] ksys_write+0x145/0x250 [ 187.703751][ T9194] ? __pfx_ksys_write+0x10/0x10 [ 187.703779][ T9194] ? do_syscall_64+0xbe/0xfa0 [ 187.703800][ T9194] do_syscall_64+0xfa/0xfa0 [ 187.703816][ T9194] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.703831][ T9194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.703846][ T9194] ? clear_bhb_loop+0x60/0xb0 [ 187.703866][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.703882][ T9194] RIP: 0033:0x7f81fcf8e17f [ 187.703898][ T9194] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 187.703913][ T9194] RSP: 002b:00007f81fdebf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 187.703933][ T9194] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f81fcf8e17f [ 187.703946][ T9194] RDX: 0000000000000001 RSI: 00007f81fdebf0a0 RDI: 0000000000000004 [ 187.703958][ T9194] RBP: 00007f81fdebf090 R08: 0000000000000000 R09: 0000000000000000 [ 187.703969][ T9194] R10: 0000000000000074 R11: 0000000000000293 R12: 0000000000000001 [ 187.703980][ T9194] R13: 00007f81fd1e6038 R14: 00007f81fd1e5fa0 R15: 00007ffc62180c28 [ 187.704013][ T9194] [ 187.713876][ T9192] CPU: 1 UID: 0 PID: 9192 Comm: syz.3.1025 Not tainted syzkaller #0 PREEMPT(full) [ 187.713901][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.713912][ T9192] Call Trace: [ 187.713921][ T9192] [ 187.713928][ T9192] dump_stack_lvl+0x189/0x250 [ 187.713954][ T9192] ? __pfx____ratelimit+0x10/0x10 [ 187.713980][ T9192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.714002][ T9192] ? __pfx__printk+0x10/0x10 [ 187.714022][ T9192] ? __pfx___might_resched+0x10/0x10 [ 187.714042][ T9192] ? fs_reclaim_acquire+0x7d/0x100 [ 187.714063][ T9192] should_fail_ex+0x414/0x560 [ 187.714093][ T9192] should_failslab+0xa8/0x100 [ 187.714112][ T9192] kmem_cache_alloc_noprof+0x74/0x6e0 [ 187.714135][ T9192] ? security_inode_alloc+0x39/0x330 [ 187.714164][ T9192] security_inode_alloc+0x39/0x330 [ 187.714190][ T9192] inode_init_always_gfp+0x9ed/0xdc0 [ 187.714220][ T9192] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 187.714238][ T9192] alloc_inode+0x82/0x1b0 [ 187.714263][ T9192] new_inode+0x22/0x170 [ 187.714279][ T9192] ? resv_map_alloc+0x1da/0x2c0 [ 187.714303][ T9192] hugetlbfs_get_inode+0x80/0x660 [ 187.714329][ T9192] ? fput+0xa0/0xd0 [ 187.714351][ T9192] hugetlb_file_setup+0x21d/0x630 [ 187.714385][ T9192] ksys_mmap_pgoff+0x22f/0x760 [ 187.714413][ T9192] do_syscall_64+0xfa/0xfa0 [ 187.714429][ T9192] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.714446][ T9192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.714463][ T9192] ? clear_bhb_loop+0x60/0xb0 [ 187.714484][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.714499][ T9192] RIP: 0033:0x7fda5658f6c9 [ 187.714515][ T9192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.714530][ T9192] RSP: 002b:00007fda57401038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 187.714548][ T9192] RAX: ffffffffffffffda RBX: 00007fda567e5fa0 RCX: 00007fda5658f6c9 [ 187.714561][ T9192] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000000000 [ 187.714572][ T9192] RBP: 00007fda57401090 R08: ffffffffffffffff R09: 0000000000002000 [ 187.714584][ T9192] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 187.714595][ T9192] R13: 00007fda567e6038 R14: 00007fda567e5fa0 R15: 00007fff4e214578 [ 187.714623][ T9192] [ 188.369912][ T9206] FAULT_INJECTION: forcing a failure. [ 188.369912][ T9206] name failslab, interval 1, probability 0, space 0, times 0 [ 188.388085][ T9206] CPU: 0 UID: 0 PID: 9206 Comm: syz.2.1031 Not tainted syzkaller #0 PREEMPT(full) [ 188.388111][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.388123][ T9206] Call Trace: [ 188.388131][ T9206] [ 188.388140][ T9206] dump_stack_lvl+0x189/0x250 [ 188.388169][ T9206] ? __pfx____ratelimit+0x10/0x10 [ 188.388195][ T9206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.388218][ T9206] ? __pfx__printk+0x10/0x10 [ 188.388243][ T9206] ? __pfx___might_resched+0x10/0x10 [ 188.388260][ T9206] ? fs_reclaim_acquire+0x7d/0x100 [ 188.388281][ T9206] should_fail_ex+0x414/0x560 [ 188.388309][ T9206] should_failslab+0xa8/0x100 [ 188.388330][ T9206] __kmalloc_noprof+0xcb/0x7f0 [ 188.388352][ T9206] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 188.388385][ T9206] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 188.388420][ T9206] genl_family_rcv_msg_doit+0xb8/0x300 [ 188.388450][ T9206] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 188.388481][ T9206] ? apparmor_capable+0x137/0x1b0 [ 188.388501][ T9206] ? bpf_lsm_capable+0x9/0x20 [ 188.388521][ T9206] ? security_capable+0x7e/0x2e0 [ 188.388557][ T9206] genl_rcv_msg+0x60e/0x790 [ 188.388583][ T9206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.388603][ T9206] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 188.388638][ T9206] netlink_rcv_skb+0x208/0x470 [ 188.388654][ T9206] ? __lock_acquire+0xab9/0xd20 [ 188.388672][ T9206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.388695][ T9206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.388731][ T9206] ? down_read+0x1ad/0x2e0 [ 188.388754][ T9206] genl_rcv+0x28/0x40 [ 188.388775][ T9206] netlink_unicast+0x82f/0x9e0 [ 188.388809][ T9206] ? __pfx_netlink_unicast+0x10/0x10 [ 188.388835][ T9206] ? netlink_sendmsg+0x642/0xb30 [ 188.388853][ T9206] ? skb_put+0x11b/0x210 [ 188.388875][ T9206] netlink_sendmsg+0x805/0xb30 [ 188.388903][ T9206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.388925][ T9206] ? aa_sock_msg_perm+0xf1/0x1d0 [ 188.388950][ T9206] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.388965][ T9206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.388983][ T9206] __sock_sendmsg+0x21c/0x270 [ 188.389007][ T9206] ____sys_sendmsg+0x505/0x830 [ 188.389032][ T9206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.389057][ T9206] ? import_iovec+0x74/0xa0 [ 188.389082][ T9206] ___sys_sendmsg+0x21f/0x2a0 [ 188.389103][ T9206] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.389157][ T9206] ? __fget_files+0x2a/0x420 [ 188.389173][ T9206] ? __fget_files+0x3a0/0x420 [ 188.389200][ T9206] __x64_sys_sendmsg+0x19b/0x260 [ 188.389223][ T9206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.389253][ T9206] ? __pfx_ksys_write+0x10/0x10 [ 188.389280][ T9206] ? do_syscall_64+0xbe/0xfa0 [ 188.389301][ T9206] do_syscall_64+0xfa/0xfa0 [ 188.389317][ T9206] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.389334][ T9206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.389352][ T9206] ? clear_bhb_loop+0x60/0xb0 [ 188.389373][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.389390][ T9206] RIP: 0033:0x7f512258f6c9 [ 188.389407][ T9206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.389423][ T9206] RSP: 002b:00007f51234dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.389443][ T9206] RAX: ffffffffffffffda RBX: 00007f51227e5fa0 RCX: 00007f512258f6c9 [ 188.389457][ T9206] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 188.389468][ T9206] RBP: 00007f51234dd090 R08: 0000000000000000 R09: 0000000000000000 [ 188.389479][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.389490][ T9206] R13: 00007f51227e6038 R14: 00007f51227e5fa0 R15: 00007ffdcc2c3d58 [ 188.389532][ T9206] [ 189.029055][ T9226] syzkaller1: entered promiscuous mode [ 189.034584][ T9226] syzkaller1: entered allmulticast mode [ 189.104987][ T9224] lo speed is unknown, defaulting to 1000 [ 189.116815][ T9228] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 189.189978][ T9229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1038'. [ 189.216330][ T9238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.456187][ T9] hid-generic 0005:04F3:05DF.0002: item fetching failed at offset 0/1 [ 189.465465][ T9] hid-generic 0005:04F3:05DF.0002: probe with driver hid-generic failed with error -22 [ 189.609571][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 189.627069][ T9263] netlink: 'syz.1.1046': attribute type 5 has an invalid length. [ 189.688935][ T9262] netlink: 'syz.3.1050': attribute type 39 has an invalid length. [ 189.736554][ T9263] geneve2: entered promiscuous mode [ 189.743344][ T9263] geneve2: entered allmulticast mode [ 189.757227][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 189.776677][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 189.795794][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 189.806219][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 189.946057][ T44] IPVS: starting estimator thread 0... [ 190.037856][ T9273] IPVS: using max 32 ests per chain, 76800 per kthread [ 190.357712][ T9279] lo speed is unknown, defaulting to 1000 [ 190.541002][ T9288] FAULT_INJECTION: forcing a failure. [ 190.541002][ T9288] name failslab, interval 1, probability 0, space 0, times 0 [ 190.587402][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.4.1059 Not tainted syzkaller #0 PREEMPT(full) [ 190.587432][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.587444][ T9288] Call Trace: [ 190.587452][ T9288] [ 190.587460][ T9288] dump_stack_lvl+0x189/0x250 [ 190.587503][ T9288] ? __pfx____ratelimit+0x10/0x10 [ 190.587528][ T9288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.587550][ T9288] ? __pfx__printk+0x10/0x10 [ 190.587573][ T9288] ? __pfx___might_resched+0x10/0x10 [ 190.587589][ T9288] ? fs_reclaim_acquire+0x7d/0x100 [ 190.587609][ T9288] should_fail_ex+0x414/0x560 [ 190.587639][ T9288] should_failslab+0xa8/0x100 [ 190.587658][ T9288] __kmalloc_noprof+0xcb/0x7f0 [ 190.587680][ T9288] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 190.587702][ T9288] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 190.587725][ T9288] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 190.587753][ T9288] genl_family_rcv_msg_doit+0xb8/0x300 [ 190.587780][ T9288] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.587810][ T9288] ? apparmor_capable+0x137/0x1b0 [ 190.587831][ T9288] ? bpf_lsm_capable+0x9/0x20 [ 190.587849][ T9288] ? security_capable+0x7e/0x2e0 [ 190.587875][ T9288] genl_rcv_msg+0x60e/0x790 [ 190.587901][ T9288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.587921][ T9288] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 190.587942][ T9288] ? __pfx_nl80211_del_tx_ts+0x10/0x10 [ 190.587961][ T9288] ? __pfx_nl80211_post_doit+0x10/0x10 [ 190.587983][ T9288] ? __asan_memcpy+0x40/0x70 [ 190.588005][ T9288] ? __pfx_ref_tracker_free+0x10/0x10 [ 190.588030][ T9288] netlink_rcv_skb+0x208/0x470 [ 190.588046][ T9288] ? __lock_acquire+0xab9/0xd20 [ 190.588063][ T9288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.588086][ T9288] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.588125][ T9288] ? down_read+0x1ad/0x2e0 [ 190.588148][ T9288] genl_rcv+0x28/0x40 [ 190.588169][ T9288] netlink_unicast+0x82f/0x9e0 [ 190.588204][ T9288] ? __pfx_netlink_unicast+0x10/0x10 [ 190.588232][ T9288] ? netlink_sendmsg+0x642/0xb30 [ 190.588249][ T9288] ? skb_put+0x11b/0x210 [ 190.588272][ T9288] netlink_sendmsg+0x805/0xb30 [ 190.588301][ T9288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.588324][ T9288] ? aa_sock_msg_perm+0xf1/0x1d0 [ 190.588358][ T9288] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.588375][ T9288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.588395][ T9288] __sock_sendmsg+0x21c/0x270 [ 190.588420][ T9288] ____sys_sendmsg+0x505/0x830 [ 190.588446][ T9288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.588477][ T9288] ? import_iovec+0x74/0xa0 [ 190.588503][ T9288] ___sys_sendmsg+0x21f/0x2a0 [ 190.588526][ T9288] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.588585][ T9288] ? __fget_files+0x2a/0x420 [ 190.588602][ T9288] ? __fget_files+0x3a0/0x420 [ 190.588628][ T9288] __x64_sys_sendmsg+0x19b/0x260 [ 190.588650][ T9288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.588681][ T9288] ? __pfx_ksys_write+0x10/0x10 [ 190.588708][ T9288] ? do_syscall_64+0xbe/0xfa0 [ 190.588731][ T9288] do_syscall_64+0xfa/0xfa0 [ 190.588747][ T9288] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.588765][ T9288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.588782][ T9288] ? clear_bhb_loop+0x60/0xb0 [ 190.588804][ T9288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.588821][ T9288] RIP: 0033:0x7f571cb8f6c9 [ 190.588837][ T9288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.588853][ T9288] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.588873][ T9288] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 190.588887][ T9288] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 190.588899][ T9288] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 190.588911][ T9288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.588922][ T9288] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 190.588955][ T9288] [ 191.009553][ T9293] __nla_validate_parse: 2 callbacks suppressed [ 191.009573][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 191.159211][ T9295] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1062'. [ 191.251513][ T9298] FAULT_INJECTION: forcing a failure. [ 191.251513][ T9298] name failslab, interval 1, probability 0, space 0, times 0 [ 191.264765][ T24] IPVS: starting estimator thread 0... [ 191.358037][ T9300] IPVS: using max 31 ests per chain, 74400 per kthread [ 191.366102][ T9298] CPU: 1 UID: 0 PID: 9298 Comm: syz.3.1064 Not tainted syzkaller #0 PREEMPT(full) [ 191.366128][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.366139][ T9298] Call Trace: [ 191.366147][ T9298] [ 191.366155][ T9298] dump_stack_lvl+0x189/0x250 [ 191.366183][ T9298] ? __pfx____ratelimit+0x10/0x10 [ 191.366208][ T9298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.366230][ T9298] ? __pfx__printk+0x10/0x10 [ 191.366253][ T9298] ? __pfx___might_resched+0x10/0x10 [ 191.366270][ T9298] ? fs_reclaim_acquire+0x7d/0x100 [ 191.366292][ T9298] should_fail_ex+0x414/0x560 [ 191.366322][ T9298] should_failslab+0xa8/0x100 [ 191.366343][ T9298] kmem_cache_alloc_node_noprof+0x77/0x710 [ 191.366367][ T9298] ? __alloc_skb+0x112/0x2d0 [ 191.366390][ T9298] __alloc_skb+0x112/0x2d0 [ 191.366412][ T9298] alloc_skb_with_frags+0xca/0x890 [ 191.366441][ T9298] ? is_bpf_text_address+0x26/0x2b0 [ 191.366463][ T9298] sock_alloc_send_pskb+0x84d/0x980 [ 191.366484][ T9298] ? __lock_acquire+0xab9/0xd20 [ 191.366518][ T9298] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 191.366541][ T9298] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 191.366566][ T9298] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.366585][ T9298] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.366609][ T9298] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.366639][ T9298] __ip_append_data+0x2ce8/0x40c0 [ 191.366683][ T9298] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 191.366728][ T9298] ? __pfx___ip_append_data+0x10/0x10 [ 191.366750][ T9298] ? ipv4_mtu+0x53b/0x650 [ 191.366776][ T9298] ? ip_setup_cork+0x577/0x9a0 [ 191.366803][ T9298] ip_make_skb+0x1de/0x3f0 [ 191.366832][ T9298] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 191.366857][ T9298] ? __pfx_ip_make_skb+0x10/0x10 [ 191.366900][ T9298] udp_sendmsg+0x1925/0x2170 [ 191.366936][ T9298] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 191.366962][ T9298] ? __pfx_udp_sendmsg+0x10/0x10 [ 191.367004][ T9298] ? get_random_u32+0x155/0x940 [ 191.367033][ T9298] ? register_lock_class+0x51/0x320 [ 191.367053][ T9298] ? get_random_u32+0x155/0x940 [ 191.367075][ T9298] ? __lock_acquire+0xab9/0xd20 [ 191.367102][ T9298] udpv6_sendmsg+0xc1c/0x2510 [ 191.367142][ T9298] ? udp_lib_get_port+0x164b/0x1b10 [ 191.367159][ T9298] ? udp_lib_get_port+0x164b/0x1b10 [ 191.367179][ T9298] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 191.367206][ T9298] ? __lock_acquire+0xab9/0xd20 [ 191.367239][ T9298] ? __local_bh_enable_ip+0x12d/0x1c0 [ 191.367258][ T9298] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 191.367283][ T9298] ? inet_send_prepare+0x1b9/0x270 [ 191.367304][ T9298] ? inet_send_prepare+0x1b9/0x270 [ 191.367325][ T9298] ? inet6_sendmsg+0xe4/0x120 [ 191.367348][ T9298] __sock_sendmsg+0xe5/0x270 [ 191.367375][ T9298] ____sys_sendmsg+0x505/0x830 [ 191.367400][ T9298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.367429][ T9298] ? import_iovec+0x74/0xa0 [ 191.367454][ T9298] ___sys_sendmsg+0x21f/0x2a0 [ 191.367476][ T9298] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.367531][ T9298] ? __fget_files+0x2a/0x420 [ 191.367547][ T9298] ? __fget_files+0x3a0/0x420 [ 191.367574][ T9298] __x64_sys_sendmsg+0x19b/0x260 [ 191.367597][ T9298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.367625][ T9298] ? __pfx_ksys_write+0x10/0x10 [ 191.367653][ T9298] ? do_syscall_64+0xbe/0xfa0 [ 191.367671][ T9298] do_syscall_64+0xfa/0xfa0 [ 191.367684][ T9298] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.367699][ T9298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.367715][ T9298] ? clear_bhb_loop+0x60/0xb0 [ 191.367735][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.367749][ T9298] RIP: 0033:0x7fda5658f6c9 [ 191.367763][ T9298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.367776][ T9298] RSP: 002b:00007fda57401038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.367794][ T9298] RAX: ffffffffffffffda RBX: 00007fda567e5fa0 RCX: 00007fda5658f6c9 [ 191.367806][ T9298] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 191.367816][ T9298] RBP: 00007fda57401090 R08: 0000000000000000 R09: 0000000000000000 [ 191.367827][ T9298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.367837][ T9298] R13: 00007fda567e6038 R14: 00007fda567e5fa0 R15: 00007fff4e214578 [ 191.367864][ T9298] [ 191.874446][ T9307] FAULT_INJECTION: forcing a failure. [ 191.874446][ T9307] name failslab, interval 1, probability 0, space 0, times 0 [ 191.914783][ T9307] CPU: 0 UID: 0 PID: 9307 Comm: syz.0.1065 Not tainted syzkaller #0 PREEMPT(full) [ 191.914808][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.914821][ T9307] Call Trace: [ 191.914829][ T9307] [ 191.914837][ T9307] dump_stack_lvl+0x189/0x250 [ 191.914870][ T9307] ? __pfx____ratelimit+0x10/0x10 [ 191.914896][ T9307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.914918][ T9307] ? __pfx__printk+0x10/0x10 [ 191.914942][ T9307] ? __pfx___might_resched+0x10/0x10 [ 191.914975][ T9307] should_fail_ex+0x414/0x560 [ 191.915006][ T9307] should_failslab+0xa8/0x100 [ 191.915027][ T9307] __kmalloc_noprof+0xcb/0x7f0 [ 191.915049][ T9307] ? kfree+0x4d/0x6d0 [ 191.915067][ T9307] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 191.915099][ T9307] tomoyo_realpath_from_path+0xe3/0x5d0 [ 191.915126][ T9307] ? tomoyo_domain+0xd9/0x130 [ 191.915149][ T9307] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 191.915181][ T9307] tomoyo_path_number_perm+0x1e8/0x5a0 [ 191.915206][ T9307] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 191.915267][ T9307] ? __fget_files+0x2a/0x420 [ 191.915288][ T9307] ? __fget_files+0x3a0/0x420 [ 191.915304][ T9307] ? __fget_files+0x2a/0x420 [ 191.915324][ T9307] security_file_ioctl+0xcb/0x2d0 [ 191.915348][ T9307] __se_sys_ioctl+0x47/0x170 [ 191.915373][ T9307] do_syscall_64+0xfa/0xfa0 [ 191.915390][ T9307] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.915408][ T9307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.915426][ T9307] ? clear_bhb_loop+0x60/0xb0 [ 191.915448][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.915465][ T9307] RIP: 0033:0x7f81fcf8f6c9 [ 191.915482][ T9307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.915497][ T9307] RSP: 002b:00007f81fdebf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.915517][ T9307] RAX: ffffffffffffffda RBX: 00007f81fd1e5fa0 RCX: 00007f81fcf8f6c9 [ 191.915530][ T9307] RDX: 0000200000000600 RSI: 00000000400448c8 RDI: 0000000000000005 [ 191.915543][ T9307] RBP: 00007f81fdebf090 R08: 0000000000000000 R09: 0000000000000000 [ 191.915554][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.915565][ T9307] R13: 00007f81fd1e6038 R14: 00007f81fd1e5fa0 R15: 00007ffc62180c28 [ 191.915597][ T9307] [ 191.915715][ T9307] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.226660][ T44] hid-generic 0005:0458:05DF.0003: item fetching failed at offset 0/1 [ 192.235764][ T44] hid-generic 0005:0458:05DF.0003: probe with driver hid-generic failed with error -22 [ 192.315507][ T9314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1067'. [ 192.413461][ T9322] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1067'. [ 192.779705][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 192.876442][ T9343] lo speed is unknown, defaulting to 1000 [ 193.164863][ T9360] netlink: 'syz.2.1080': attribute type 4 has an invalid length. [ 193.181593][ T9363] FAULT_INJECTION: forcing a failure. [ 193.181593][ T9363] name failslab, interval 1, probability 0, space 0, times 0 [ 193.183504][ T9354] syzkaller0: entered promiscuous mode [ 193.205776][ T9354] syzkaller0: entered allmulticast mode [ 193.210372][ T9363] CPU: 0 UID: 0 PID: 9363 Comm: syz.1.1082 Not tainted syzkaller #0 PREEMPT(full) [ 193.210398][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.210409][ T9363] Call Trace: [ 193.210416][ T9363] [ 193.210425][ T9363] dump_stack_lvl+0x189/0x250 [ 193.210452][ T9363] ? __pfx____ratelimit+0x10/0x10 [ 193.210477][ T9363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.210499][ T9363] ? __pfx__printk+0x10/0x10 [ 193.210523][ T9363] ? __pfx___might_resched+0x10/0x10 [ 193.210546][ T9363] should_fail_ex+0x414/0x560 [ 193.210576][ T9363] should_failslab+0xa8/0x100 [ 193.210596][ T9363] kmem_cache_alloc_node_noprof+0x77/0x710 [ 193.210620][ T9363] ? __alloc_skb+0x112/0x2d0 [ 193.210644][ T9363] __alloc_skb+0x112/0x2d0 [ 193.210665][ T9363] netlink_ack+0x146/0xa50 [ 193.210681][ T9363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.210710][ T9363] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 193.210730][ T9363] ? __pfx_nl80211_post_doit+0x10/0x10 [ 193.210764][ T9363] netlink_rcv_skb+0x28c/0x470 [ 193.210781][ T9363] ? __lock_acquire+0xab9/0xd20 [ 193.210798][ T9363] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.210821][ T9363] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.210857][ T9363] ? down_read+0x1ad/0x2e0 [ 193.210878][ T9363] genl_rcv+0x28/0x40 [ 193.210898][ T9363] netlink_unicast+0x82f/0x9e0 [ 193.210930][ T9363] ? __pfx_netlink_unicast+0x10/0x10 [ 193.210956][ T9363] ? netlink_sendmsg+0x642/0xb30 [ 193.210972][ T9363] ? skb_put+0x11b/0x210 [ 193.210993][ T9363] netlink_sendmsg+0x805/0xb30 [ 193.211020][ T9363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.211042][ T9363] ? aa_sock_msg_perm+0xf1/0x1d0 [ 193.211073][ T9363] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.211089][ T9363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.211108][ T9363] __sock_sendmsg+0x21c/0x270 [ 193.211135][ T9363] ____sys_sendmsg+0x505/0x830 [ 193.211159][ T9363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.211187][ T9363] ? import_iovec+0x74/0xa0 [ 193.211212][ T9363] ___sys_sendmsg+0x21f/0x2a0 [ 193.211234][ T9363] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.211288][ T9363] ? __fget_files+0x2a/0x420 [ 193.211304][ T9363] ? __fget_files+0x3a0/0x420 [ 193.211330][ T9363] __x64_sys_sendmsg+0x19b/0x260 [ 193.211356][ T9363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.211385][ T9363] ? __pfx_ksys_write+0x10/0x10 [ 193.211411][ T9363] ? do_syscall_64+0xbe/0xfa0 [ 193.211432][ T9363] do_syscall_64+0xfa/0xfa0 [ 193.211446][ T9363] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.211460][ T9363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.211475][ T9363] ? clear_bhb_loop+0x60/0xb0 [ 193.211495][ T9363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.211510][ T9363] RIP: 0033:0x7f5c4c98f6c9 [ 193.211524][ T9363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.211538][ T9363] RSP: 002b:00007f5c4d750038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.211556][ T9363] RAX: ffffffffffffffda RBX: 00007f5c4cbe5fa0 RCX: 00007f5c4c98f6c9 [ 193.211568][ T9363] RDX: 0000000000040084 RSI: 0000200000000080 RDI: 0000000000000003 [ 193.211579][ T9363] RBP: 00007f5c4d750090 R08: 0000000000000000 R09: 0000000000000000 [ 193.211591][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.211602][ T9363] R13: 00007f5c4cbe6038 R14: 00007f5c4cbe5fa0 R15: 00007ffd9ed22e48 [ 193.211634][ T9363] [ 193.589687][ T9376] FAULT_INJECTION: forcing a failure. [ 193.589687][ T9376] name failslab, interval 1, probability 0, space 0, times 0 [ 193.605764][ T9376] CPU: 1 UID: 0 PID: 9376 Comm: syz.4.1085 Not tainted syzkaller #0 PREEMPT(full) [ 193.605789][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.605800][ T9376] Call Trace: [ 193.605808][ T9376] [ 193.605817][ T9376] dump_stack_lvl+0x189/0x250 [ 193.605853][ T9376] ? __pfx____ratelimit+0x10/0x10 [ 193.605879][ T9376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.605901][ T9376] ? __pfx__printk+0x10/0x10 [ 193.605925][ T9376] ? __lock_acquire+0xab9/0xd20 [ 193.605950][ T9376] should_fail_ex+0x414/0x560 [ 193.605981][ T9376] should_failslab+0xa8/0x100 [ 193.606001][ T9376] kmem_cache_alloc_noprof+0x74/0x6e0 [ 193.606024][ T9376] ? skb_clone+0x212/0x3a0 [ 193.606050][ T9376] skb_clone+0x212/0x3a0 [ 193.606074][ T9376] __netlink_deliver_tap+0x404/0x850 [ 193.606106][ T9376] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.606127][ T9376] netlink_deliver_tap+0x19c/0x1b0 [ 193.606147][ T9376] netlink_unicast+0x7fa/0x9e0 [ 193.606181][ T9376] ? __pfx_netlink_unicast+0x10/0x10 [ 193.606208][ T9376] ? netlink_sendmsg+0x642/0xb30 [ 193.606225][ T9376] ? skb_put+0x11b/0x210 [ 193.606247][ T9376] netlink_sendmsg+0x805/0xb30 [ 193.606276][ T9376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.606299][ T9376] ? aa_sock_msg_perm+0xf1/0x1d0 [ 193.606325][ T9376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.606340][ T9376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.606360][ T9376] __sock_sendmsg+0x21c/0x270 [ 193.606387][ T9376] ____sys_sendmsg+0x505/0x830 [ 193.606412][ T9376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.606442][ T9376] ? import_iovec+0x74/0xa0 [ 193.606467][ T9376] ___sys_sendmsg+0x21f/0x2a0 [ 193.606489][ T9376] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.606547][ T9376] ? __fget_files+0x2a/0x420 [ 193.606563][ T9376] ? __fget_files+0x3a0/0x420 [ 193.606590][ T9376] __x64_sys_sendmsg+0x19b/0x260 [ 193.606612][ T9376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.606643][ T9376] ? __pfx_ksys_write+0x10/0x10 [ 193.606669][ T9376] ? do_syscall_64+0xbe/0xfa0 [ 193.606690][ T9376] do_syscall_64+0xfa/0xfa0 [ 193.606706][ T9376] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.606724][ T9376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.606741][ T9376] ? clear_bhb_loop+0x60/0xb0 [ 193.606763][ T9376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.606780][ T9376] RIP: 0033:0x7f571cb8f6c9 [ 193.606797][ T9376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.606812][ T9376] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.606832][ T9376] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 193.606852][ T9376] RDX: 0000000000008800 RSI: 0000200000000280 RDI: 0000000000000003 [ 193.606864][ T9376] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 193.606875][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.606886][ T9376] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 193.606919][ T9376] [ 194.115856][ T9368] lo speed is unknown, defaulting to 1000 [ 194.273505][ T9343] lo speed is unknown, defaulting to 1000 [ 194.394550][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.404372][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.481634][ T9396] syzkaller1: entered promiscuous mode [ 194.487258][ T9396] syzkaller1: entered allmulticast mode [ 194.541742][ T9393] lo speed is unknown, defaulting to 1000 [ 194.654292][ T9402] FAULT_INJECTION: forcing a failure. [ 194.654292][ T9402] name failslab, interval 1, probability 0, space 0, times 0 [ 194.681193][ T9402] CPU: 0 UID: 0 PID: 9402 Comm: syz.3.1091 Not tainted syzkaller #0 PREEMPT(full) [ 194.681218][ T9402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.681230][ T9402] Call Trace: [ 194.681238][ T9402] [ 194.681246][ T9402] dump_stack_lvl+0x189/0x250 [ 194.681275][ T9402] ? __pfx____ratelimit+0x10/0x10 [ 194.681300][ T9402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.681322][ T9402] ? __pfx__printk+0x10/0x10 [ 194.681347][ T9402] ? __pfx___might_resched+0x10/0x10 [ 194.681365][ T9402] ? fs_reclaim_acquire+0x7d/0x100 [ 194.681388][ T9402] should_fail_ex+0x414/0x560 [ 194.681418][ T9402] should_failslab+0xa8/0x100 [ 194.681439][ T9402] __kmalloc_noprof+0xcb/0x7f0 [ 194.681462][ T9402] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 194.681485][ T9402] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 194.681510][ T9402] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 194.681541][ T9402] genl_family_rcv_msg_doit+0xb8/0x300 [ 194.681571][ T9402] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 194.681603][ T9402] ? apparmor_capable+0x137/0x1b0 [ 194.681625][ T9402] ? bpf_lsm_capable+0x9/0x20 [ 194.681645][ T9402] ? security_capable+0x7e/0x2e0 [ 194.681675][ T9402] genl_rcv_msg+0x60e/0x790 [ 194.681703][ T9402] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.681723][ T9402] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 194.681743][ T9402] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 194.681772][ T9402] ? __pfx_nl80211_post_doit+0x10/0x10 [ 194.681794][ T9402] ? __asan_memcpy+0x40/0x70 [ 194.681816][ T9402] ? __pfx_ref_tracker_free+0x10/0x10 [ 194.681841][ T9402] netlink_rcv_skb+0x208/0x470 [ 194.681859][ T9402] ? __lock_acquire+0xab9/0xd20 [ 194.681877][ T9402] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.681901][ T9402] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.681939][ T9402] ? down_read+0x1ad/0x2e0 [ 194.681963][ T9402] genl_rcv+0x28/0x40 [ 194.681982][ T9402] netlink_unicast+0x82f/0x9e0 [ 194.682014][ T9402] ? __pfx_netlink_unicast+0x10/0x10 [ 194.682039][ T9402] ? netlink_sendmsg+0x642/0xb30 [ 194.682056][ T9402] ? skb_put+0x11b/0x210 [ 194.682078][ T9402] netlink_sendmsg+0x805/0xb30 [ 194.682107][ T9402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.682130][ T9402] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.682156][ T9402] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.682174][ T9402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.682194][ T9402] __sock_sendmsg+0x21c/0x270 [ 194.682221][ T9402] ____sys_sendmsg+0x505/0x830 [ 194.682246][ T9402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.682274][ T9402] ? import_iovec+0x74/0xa0 [ 194.682299][ T9402] ___sys_sendmsg+0x21f/0x2a0 [ 194.682322][ T9402] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.682380][ T9402] ? __fget_files+0x2a/0x420 [ 194.682396][ T9402] ? __fget_files+0x3a0/0x420 [ 194.682424][ T9402] __x64_sys_sendmsg+0x19b/0x260 [ 194.682448][ T9402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.682478][ T9402] ? __pfx_ksys_write+0x10/0x10 [ 194.682503][ T9402] ? do_syscall_64+0xbe/0xfa0 [ 194.682525][ T9402] do_syscall_64+0xfa/0xfa0 [ 194.682541][ T9402] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.682558][ T9402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.682577][ T9402] ? clear_bhb_loop+0x60/0xb0 [ 194.682596][ T9402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.682613][ T9402] RIP: 0033:0x7fda5658f6c9 [ 194.682630][ T9402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.682645][ T9402] RSP: 002b:00007fda57401038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.682665][ T9402] RAX: ffffffffffffffda RBX: 00007fda567e5fa0 RCX: 00007fda5658f6c9 [ 194.682677][ T9402] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 194.682688][ T9402] RBP: 00007fda57401090 R08: 0000000000000000 R09: 0000000000000000 [ 194.682697][ T9402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.682707][ T9402] R13: 00007fda567e6038 R14: 00007fda567e5fa0 R15: 00007fff4e214578 [ 194.682738][ T9402] [ 195.175413][ T9409] FAULT_INJECTION: forcing a failure. [ 195.175413][ T9409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.202359][ T9409] CPU: 1 UID: 0 PID: 9409 Comm: syz.3.1094 Not tainted syzkaller #0 PREEMPT(full) [ 195.202384][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.202396][ T9409] Call Trace: [ 195.202403][ T9409] [ 195.202411][ T9409] dump_stack_lvl+0x189/0x250 [ 195.202439][ T9409] ? __pfx____ratelimit+0x10/0x10 [ 195.202464][ T9409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.202487][ T9409] ? __pfx__printk+0x10/0x10 [ 195.202505][ T9409] ? __might_fault+0xb0/0x130 [ 195.202540][ T9409] should_fail_ex+0x414/0x560 [ 195.202571][ T9409] _copy_from_iter+0x1de/0x1790 [ 195.202597][ T9409] ? rcu_is_watching+0x15/0xb0 [ 195.202629][ T9409] ? kmalloc_reserve+0xbd/0x290 [ 195.202648][ T9409] ? __pfx__copy_from_iter+0x10/0x10 [ 195.202669][ T9409] ? __build_skb_around+0x262/0x3f0 [ 195.202690][ T9409] ? netlink_sendmsg+0x642/0xb30 [ 195.202707][ T9409] ? skb_put+0x11b/0x210 [ 195.202729][ T9409] netlink_sendmsg+0x6b2/0xb30 [ 195.202757][ T9409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.202780][ T9409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 195.202806][ T9409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.202824][ T9409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.202844][ T9409] __sock_sendmsg+0x21c/0x270 [ 195.202870][ T9409] ____sys_sendmsg+0x505/0x830 [ 195.202895][ T9409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.202923][ T9409] ? import_iovec+0x74/0xa0 [ 195.202946][ T9409] ___sys_sendmsg+0x21f/0x2a0 [ 195.202967][ T9409] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.203020][ T9409] ? __fget_files+0x2a/0x420 [ 195.203038][ T9409] ? __fget_files+0x3a0/0x420 [ 195.203064][ T9409] __x64_sys_sendmsg+0x19b/0x260 [ 195.203087][ T9409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.203114][ T9409] ? __pfx_ksys_write+0x10/0x10 [ 195.203137][ T9409] ? do_syscall_64+0xbe/0xfa0 [ 195.203155][ T9409] do_syscall_64+0xfa/0xfa0 [ 195.203168][ T9409] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.203183][ T9409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.203199][ T9409] ? clear_bhb_loop+0x60/0xb0 [ 195.203217][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.203233][ T9409] RIP: 0033:0x7fda5658f6c9 [ 195.203247][ T9409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.203261][ T9409] RSP: 002b:00007fda57401038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.203279][ T9409] RAX: ffffffffffffffda RBX: 00007fda567e5fa0 RCX: 00007fda5658f6c9 [ 195.203291][ T9409] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 195.203301][ T9409] RBP: 00007fda57401090 R08: 0000000000000000 R09: 0000000000000000 [ 195.203311][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.203320][ T9409] R13: 00007fda567e6038 R14: 00007fda567e5fa0 R15: 00007fff4e214578 [ 195.203347][ T9409] [ 195.813354][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 195.814362][ T9422] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 195.824423][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1100'. [ 195.859473][ T9423] nbd: socks must be embedded in a SOCK_ITEM attr [ 196.262419][ T9444] FAULT_INJECTION: forcing a failure. [ 196.262419][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 196.275399][ T9444] CPU: 1 UID: 0 PID: 9444 Comm: syz.1.1105 Not tainted syzkaller #0 PREEMPT(full) [ 196.275424][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.275435][ T9444] Call Trace: [ 196.275443][ T9444] [ 196.275451][ T9444] dump_stack_lvl+0x189/0x250 [ 196.275478][ T9444] ? __pfx____ratelimit+0x10/0x10 [ 196.275502][ T9444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.275524][ T9444] ? __pfx__printk+0x10/0x10 [ 196.275555][ T9444] should_fail_ex+0x414/0x560 [ 196.275584][ T9444] should_failslab+0xa8/0x100 [ 196.275605][ T9444] kmem_cache_alloc_noprof+0x74/0x6e0 [ 196.275629][ T9444] ? radix_tree_node_alloc+0x7e/0x3a0 [ 196.275657][ T9444] radix_tree_node_alloc+0x7e/0x3a0 [ 196.275687][ T9444] idr_get_free+0x2b3/0xa70 [ 196.275723][ T9444] idr_alloc_u32+0x159/0x2d0 [ 196.275747][ T9444] ? __pfx_idr_alloc_u32+0x10/0x10 [ 196.275767][ T9444] ? do_raw_spin_lock+0x121/0x290 [ 196.275798][ T9444] idr_alloc_cyclic+0x9b/0x1b0 [ 196.275822][ T9444] bpf_link_prime+0x6b/0x220 [ 196.275855][ T9444] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 196.275884][ T9444] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 196.275917][ T9444] ? __fget_files+0x2a/0x420 [ 196.275944][ T9444] bpf_raw_tracepoint_open+0x1b2/0x220 [ 196.275966][ T9444] __sys_bpf+0x73e/0x860 [ 196.275986][ T9444] ? __pfx___sys_bpf+0x10/0x10 [ 196.276021][ T9444] ? ksys_write+0x22a/0x250 [ 196.276046][ T9444] ? __pfx_ksys_write+0x10/0x10 [ 196.276075][ T9444] __x64_sys_bpf+0x7c/0x90 [ 196.276100][ T9444] do_syscall_64+0xfa/0xfa0 [ 196.276116][ T9444] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.276134][ T9444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.276151][ T9444] ? clear_bhb_loop+0x60/0xb0 [ 196.276172][ T9444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.276188][ T9444] RIP: 0033:0x7f5c4c98f6c9 [ 196.276204][ T9444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.276218][ T9444] RSP: 002b:00007f5c4d750038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.276237][ T9444] RAX: ffffffffffffffda RBX: 00007f5c4cbe5fa0 RCX: 00007f5c4c98f6c9 [ 196.276250][ T9444] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 196.276261][ T9444] RBP: 00007f5c4d750090 R08: 0000000000000000 R09: 0000000000000000 [ 196.276272][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.276283][ T9444] R13: 00007f5c4cbe6038 R14: 00007f5c4cbe5fa0 R15: 00007ffd9ed22e48 [ 196.276314][ T9444] [ 196.522317][ T5845] Bluetooth: hci2: command 0x0401 tx timeout [ 196.530273][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 196.536393][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 196.639085][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 196.639085][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 196.666176][ T9449] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1107'. [ 196.763432][ T9457] FAULT_INJECTION: forcing a failure. [ 196.763432][ T9457] name failslab, interval 1, probability 0, space 0, times 0 [ 196.765799][ T9454] pim6reg: entered allmulticast mode [ 196.776893][ T9457] CPU: 1 UID: 0 PID: 9457 Comm: syz.4.1111 Not tainted syzkaller #0 PREEMPT(full) [ 196.776916][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.776926][ T9457] Call Trace: [ 196.776934][ T9457] [ 196.776942][ T9457] dump_stack_lvl+0x189/0x250 [ 196.776969][ T9457] ? __pfx____ratelimit+0x10/0x10 [ 196.776994][ T9457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.777015][ T9457] ? __pfx__printk+0x10/0x10 [ 196.777038][ T9457] ? __lock_acquire+0xab9/0xd20 [ 196.777062][ T9457] should_fail_ex+0x414/0x560 [ 196.777091][ T9457] should_failslab+0xa8/0x100 [ 196.777111][ T9457] kmem_cache_alloc_noprof+0x74/0x6e0 [ 196.777134][ T9457] ? skb_clone+0x212/0x3a0 [ 196.777158][ T9457] skb_clone+0x212/0x3a0 [ 196.777187][ T9457] __netlink_deliver_tap+0x404/0x850 [ 196.777217][ T9457] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.777237][ T9457] netlink_deliver_tap+0x19c/0x1b0 [ 196.777255][ T9457] netlink_unicast+0x7fa/0x9e0 [ 196.777288][ T9457] ? __pfx_netlink_unicast+0x10/0x10 [ 196.777315][ T9457] ? netlink_sendmsg+0x642/0xb30 [ 196.777331][ T9457] ? skb_put+0x11b/0x210 [ 196.777353][ T9457] netlink_sendmsg+0x805/0xb30 [ 196.777379][ T9457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.777401][ T9457] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.777427][ T9457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.777444][ T9457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.777464][ T9457] __sock_sendmsg+0x21c/0x270 [ 196.777490][ T9457] ____sys_sendmsg+0x505/0x830 [ 196.777514][ T9457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.777543][ T9457] ? import_iovec+0x74/0xa0 [ 196.777567][ T9457] ___sys_sendmsg+0x21f/0x2a0 [ 196.777588][ T9457] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.777642][ T9457] ? __fget_files+0x2a/0x420 [ 196.777658][ T9457] ? __fget_files+0x3a0/0x420 [ 196.777684][ T9457] __x64_sys_sendmsg+0x19b/0x260 [ 196.777706][ T9457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.777738][ T9457] ? __pfx_ksys_write+0x10/0x10 [ 196.777765][ T9457] ? do_syscall_64+0xbe/0xfa0 [ 196.777791][ T9457] do_syscall_64+0xfa/0xfa0 [ 196.777807][ T9457] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.777824][ T9457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.777841][ T9457] ? clear_bhb_loop+0x60/0xb0 [ 196.777861][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.777878][ T9457] RIP: 0033:0x7f571cb8f6c9 [ 196.777895][ T9457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.777910][ T9457] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.777929][ T9457] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 196.777942][ T9457] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 196.777953][ T9457] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 196.777964][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.777974][ T9457] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 196.778003][ T9457] [ 197.163328][ T9453] pim6reg: left allmulticast mode [ 197.315125][ T9474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.361792][ T9474] bond0: (slave rose0): Enslaving as an active interface with an up link [ 197.537273][ T9490] xt_limit: Overflow, try lower: 271964/0 [ 197.572510][ T9490] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1119'. [ 197.599339][ T9490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1119'. [ 197.770019][ T9501] FAULT_INJECTION: forcing a failure. [ 197.770019][ T9501] name failslab, interval 1, probability 0, space 0, times 0 [ 197.818659][ T9501] CPU: 1 UID: 0 PID: 9501 Comm: syz.4.1123 Not tainted syzkaller #0 PREEMPT(full) [ 197.818686][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.818697][ T9501] Call Trace: [ 197.818706][ T9501] [ 197.818714][ T9501] dump_stack_lvl+0x189/0x250 [ 197.818742][ T9501] ? __pfx____ratelimit+0x10/0x10 [ 197.818767][ T9501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.818790][ T9501] ? __pfx__printk+0x10/0x10 [ 197.818821][ T9501] ? __pfx___might_resched+0x10/0x10 [ 197.818839][ T9501] ? fs_reclaim_acquire+0x7d/0x100 [ 197.818861][ T9501] should_fail_ex+0x414/0x560 [ 197.818890][ T9501] should_failslab+0xa8/0x100 [ 197.818908][ T9501] __kmalloc_noprof+0xcb/0x7f0 [ 197.818931][ T9501] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 197.818958][ T9501] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 197.818986][ T9501] genl_start+0x180/0x6c0 [ 197.819004][ T9501] ? netlink_lookup+0x30/0x200 [ 197.819024][ T9501] __netlink_dump_start+0x469/0x7e0 [ 197.819049][ T9501] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 197.819076][ T9501] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 197.819099][ T9501] ? genl_get_cmd+0x67f/0x910 [ 197.819124][ T9501] ? __pfx_genl_start+0x10/0x10 [ 197.819142][ T9501] ? __pfx_genl_dumpit+0x10/0x10 [ 197.819162][ T9501] ? __pfx_genl_done+0x10/0x10 [ 197.819198][ T9501] genl_rcv_msg+0x5da/0x790 [ 197.819231][ T9501] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.819251][ T9501] ? __pfx_ethnl_tunnel_info_start+0x10/0x10 [ 197.819270][ T9501] ? __pfx_ethnl_tunnel_info_dumpit+0x10/0x10 [ 197.819291][ T9501] ? __asan_memcpy+0x40/0x70 [ 197.819310][ T9501] ? __pfx_ref_tracker_free+0x10/0x10 [ 197.819334][ T9501] netlink_rcv_skb+0x208/0x470 [ 197.819350][ T9501] ? __lock_acquire+0xab9/0xd20 [ 197.819368][ T9501] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.819399][ T9501] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.819437][ T9501] ? down_read+0x1ad/0x2e0 [ 197.819460][ T9501] genl_rcv+0x28/0x40 [ 197.819479][ T9501] netlink_unicast+0x82f/0x9e0 [ 197.819510][ T9501] ? __pfx_netlink_unicast+0x10/0x10 [ 197.819535][ T9501] ? netlink_sendmsg+0x642/0xb30 [ 197.819551][ T9501] ? skb_put+0x11b/0x210 [ 197.819573][ T9501] netlink_sendmsg+0x805/0xb30 [ 197.819601][ T9501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.819623][ T9501] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.819649][ T9501] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.819666][ T9501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.819686][ T9501] __sock_sendmsg+0x21c/0x270 [ 197.819711][ T9501] ____sys_sendmsg+0x505/0x830 [ 197.819737][ T9501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.819765][ T9501] ? import_iovec+0x74/0xa0 [ 197.819789][ T9501] ___sys_sendmsg+0x21f/0x2a0 [ 197.819813][ T9501] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.819868][ T9501] ? __fget_files+0x2a/0x420 [ 197.819883][ T9501] ? __fget_files+0x3a0/0x420 [ 197.819909][ T9501] __x64_sys_sendmsg+0x19b/0x260 [ 197.819932][ T9501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.819961][ T9501] ? __pfx_ksys_write+0x10/0x10 [ 197.819989][ T9501] ? do_syscall_64+0xbe/0xfa0 [ 197.820010][ T9501] do_syscall_64+0xfa/0xfa0 [ 197.820026][ T9501] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.820043][ T9501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.820060][ T9501] ? clear_bhb_loop+0x60/0xb0 [ 197.820081][ T9501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.820098][ T9501] RIP: 0033:0x7f571cb8f6c9 [ 197.820115][ T9501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.820130][ T9501] RSP: 002b:00007f571d958038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.820148][ T9501] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8f6c9 [ 197.820161][ T9501] RDX: 0000000000008880 RSI: 0000200000000580 RDI: 0000000000000003 [ 197.820173][ T9501] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 197.820184][ T9501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.820196][ T9501] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 197.820227][ T9501] [ 197.903670][ T9504] ipvlan2: entered promiscuous mode [ 198.245747][ T9504] bridge0: port 3(ipvlan2) entered blocking state [ 198.277687][ T9515] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1125'. [ 198.299162][ T9504] bridge0: port 3(ipvlan2) entered disabled state [ 198.332771][ T9504] ipvlan2: entered allmulticast mode [ 198.348451][ T9504] bridge0: entered allmulticast mode [ 198.366740][ T9504] ipvlan2: left allmulticast mode [ 198.376827][ T9504] bridge0: left allmulticast mode [ 198.508920][ T9523] tipc: Enabled bearer , priority 0 [ 198.539442][ T9523] syzkaller0: entered promiscuous mode [ 198.571045][ T9523] syzkaller0: entered allmulticast mode [ 198.665899][ T9523] tipc: Resetting bearer [ 198.680209][ T9522] tipc: Resetting bearer [ 198.788844][ T9522] tipc: Disabling bearer [ 198.887299][ T9553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.153865][ T9561] pim6reg1: entered promiscuous mode [ 199.166294][ T9561] pim6reg1: entered allmulticast mode [ 199.496942][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 199.547798][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1140'. [ 199.556788][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1140'. [ 199.607467][ T9592] FAULT_INJECTION: forcing a failure. [ 199.607467][ T9592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.631015][ T9592] CPU: 0 UID: 0 PID: 9592 Comm: syz.0.1143 Not tainted syzkaller #0 PREEMPT(full) [ 199.631041][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.631052][ T9592] Call Trace: [ 199.631059][ T9592] [ 199.631067][ T9592] dump_stack_lvl+0x189/0x250 [ 199.631096][ T9592] ? __pfx____ratelimit+0x10/0x10 [ 199.631121][ T9592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.631144][ T9592] ? __pfx__printk+0x10/0x10 [ 199.631162][ T9592] ? __might_fault+0xb0/0x130 [ 199.631197][ T9592] should_fail_ex+0x414/0x560 [ 199.631233][ T9592] _copy_from_iter+0x1de/0x1790 [ 199.631261][ T9592] ? rcu_is_watching+0x15/0xb0 [ 199.631285][ T9592] ? kmalloc_reserve+0xbd/0x290 [ 199.631304][ T9592] ? __pfx__copy_from_iter+0x10/0x10 [ 199.631326][ T9592] ? __build_skb_around+0x262/0x3f0 [ 199.631348][ T9592] ? netlink_sendmsg+0x642/0xb30 [ 199.631371][ T9592] ? skb_put+0x11b/0x210 [ 199.631393][ T9592] netlink_sendmsg+0x6b2/0xb30 [ 199.631426][ T9592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.631452][ T9592] ? aa_sock_msg_perm+0xf1/0x1d0 [ 199.631476][ T9592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.631490][ T9592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.631510][ T9592] __sock_sendmsg+0x21c/0x270 [ 199.631537][ T9592] ____sys_sendmsg+0x505/0x830 [ 199.631562][ T9592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.631591][ T9592] ? import_iovec+0x74/0xa0 [ 199.631616][ T9592] ___sys_sendmsg+0x21f/0x2a0 [ 199.631638][ T9592] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.631693][ T9592] ? __fget_files+0x2a/0x420 [ 199.631710][ T9592] ? __fget_files+0x3a0/0x420 [ 199.631737][ T9592] __x64_sys_sendmsg+0x19b/0x260 [ 199.631764][ T9592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.631794][ T9592] ? __pfx_ksys_write+0x10/0x10 [ 199.631821][ T9592] ? do_syscall_64+0xbe/0xfa0 [ 199.631842][ T9592] do_syscall_64+0xfa/0xfa0 [ 199.631858][ T9592] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.631876][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.631894][ T9592] ? clear_bhb_loop+0x60/0xb0 [ 199.631916][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.631934][ T9592] RIP: 0033:0x7f81fcf8f6c9 [ 199.631950][ T9592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.631966][ T9592] RSP: 002b:00007f81fdebf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.631987][ T9592] RAX: ffffffffffffffda RBX: 00007f81fd1e5fa0 RCX: 00007f81fcf8f6c9 [ 199.632000][ T9592] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 199.632012][ T9592] RBP: 00007f81fdebf090 R08: 0000000000000000 R09: 0000000000000000 [ 199.632024][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.632036][ T9592] R13: 00007f81fd1e6038 R14: 00007f81fd1e5fa0 R15: 00007ffc62180c28 [ 199.632068][ T9592] [ 200.391092][ T9623] FAULT_INJECTION: forcing a failure. [ 200.391092][ T9623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.392343][ T9623] [ 200.392352][ T9623] ====================================================== [ 200.392359][ T9623] WARNING: possible circular locking dependency detected [ 200.392370][ T9623] syzkaller #0 Not tainted [ 200.392379][ T9623] ------------------------------------------------------ [ 200.392386][ T9623] syz.2.1152/9623 is trying to acquire lock: [ 200.392394][ T9623] ffffffff8df31620 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 200.392447][ T9623] [ 200.392447][ T9623] but task is already holding lock: [ 200.392453][ T9623] ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 200.392488][ T9623] [ 200.392488][ T9623] which lock already depends on the new lock. [ 200.392488][ T9623] [ 200.392495][ T9623] [ 200.392495][ T9623] the existing dependency chain (in reverse order) is: [ 200.392500][ T9623] [ 200.392500][ T9623] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 200.392522][ T9623] lock_acquire+0x120/0x360 [ 200.392538][ T9623] _raw_spin_lock_nested+0x32/0x50 [ 200.392552][ T9623] raw_spin_rq_lock_nested+0x2a/0x140 [ 200.392567][ T9623] task_rq_lock+0xbc/0x470 [ 200.392580][ T9623] cgroup_move_task+0x92/0x2a0 [ 200.392598][ T9623] css_set_move_task+0x658/0x9e0 [ 200.392616][ T9623] cgroup_post_fork+0x1ef/0x790 [ 200.392635][ T9623] copy_process+0x3862/0x3c00 [ 200.392650][ T9623] kernel_clone+0x21e/0x840 [ 200.392667][ T9623] user_mode_thread+0xdd/0x140 [ 200.392683][ T9623] rest_init+0x23/0x300 [ 200.392700][ T9623] start_kernel+0x3ae/0x410 [ 200.392718][ T9623] x86_64_start_reservations+0x24/0x30 [ 200.392733][ T9623] x86_64_start_kernel+0x143/0x1c0 [ 200.392748][ T9623] common_startup_64+0x13e/0x147 [ 200.392766][ T9623] [ 200.392766][ T9623] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 200.392788][ T9623] lock_acquire+0x120/0x360 [ 200.392802][ T9623] _raw_spin_lock_irqsave+0xa7/0xf0 [ 200.392821][ T9623] try_to_wake_up+0x67/0x12b0 [ 200.392839][ T9623] __wake_up_common_lock+0x137/0x1f0 [ 200.392859][ T9623] tty_port_default_wakeup+0xfb/0x170 [ 200.392874][ T9623] serial8250_tx_chars+0x72e/0x970 [ 200.392894][ T9623] serial8250_handle_irq+0x633/0xbb0 [ 200.392914][ T9623] serial8250_default_handle_irq+0xbf/0x200 [ 200.392929][ T9623] serial8250_interrupt+0x8d/0x180 [ 200.392946][ T9623] __handle_irq_event_percpu+0x295/0xab0 [ 200.392965][ T9623] handle_irq_event+0x8b/0x1e0 [ 200.392981][ T9623] handle_edge_irq+0x23b/0xa10 [ 200.393025][ T9623] __common_interrupt+0x141/0x1f0 [ 200.393046][ T9623] common_interrupt+0xb6/0xe0 [ 200.393064][ T9623] asm_common_interrupt+0x26/0x40 [ 200.393079][ T9623] pv_native_safe_halt+0x13/0x20 [ 200.393093][ T9623] default_idle+0x13/0x20 [ 200.393108][ T9623] default_idle_call+0x73/0xb0 [ 200.393123][ T9623] do_idle+0x1e7/0x510 [ 200.393137][ T9623] cpu_startup_entry+0x44/0x60 [ 200.393152][ T9623] rest_init+0x2de/0x300 [ 200.393169][ T9623] start_kernel+0x3ae/0x410 [ 200.393186][ T9623] x86_64_start_reservations+0x24/0x30 [ 200.393200][ T9623] x86_64_start_kernel+0x143/0x1c0 [ 200.393214][ T9623] common_startup_64+0x13e/0x147 [ 200.393233][ T9623] [ 200.393233][ T9623] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 200.393256][ T9623] lock_acquire+0x120/0x360 [ 200.393267][ T9623] _raw_spin_lock_irqsave+0xa7/0xf0 [ 200.393288][ T9623] __wake_up_common_lock+0x2f/0x1f0 [ 200.393307][ T9623] tty_port_default_wakeup+0xfb/0x170 [ 200.393321][ T9623] serial8250_tx_chars+0x72e/0x970 [ 200.393341][ T9623] serial8250_handle_irq+0x633/0xbb0 [ 200.393361][ T9623] serial8250_default_handle_irq+0xbf/0x200 [ 200.393378][ T9623] serial8250_interrupt+0x8d/0x180 [ 200.393395][ T9623] __handle_irq_event_percpu+0x295/0xab0 [ 200.393414][ T9623] handle_irq_event+0x8b/0x1e0 [ 200.393441][ T9623] handle_edge_irq+0x23b/0xa10 [ 200.393459][ T9623] __common_interrupt+0x141/0x1f0 [ 200.393480][ T9623] common_interrupt+0x5e/0xe0 [ 200.393497][ T9623] asm_common_interrupt+0x26/0x40 [ 200.393512][ T9623] handle_softirqs+0x1b0/0x870 [ 200.393529][ T9623] __irq_exit_rcu+0xca/0x1f0 [ 200.393544][ T9623] irq_exit_rcu+0x9/0x30 [ 200.393558][ T9623] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 200.393579][ T9623] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 200.393596][ T9623] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 200.393637][ T9623] uart_port_unlock_deref+0x111/0x2f0 [ 200.393657][ T9623] uart_write+0xe8/0x130 [ 200.393675][ T9623] n_tty_write+0xd27/0x1200 [ 200.393690][ T9623] file_tty_write+0x559/0xa20 [ 200.393709][ T9623] vfs_write+0x5c9/0xb30 [ 200.393727][ T9623] ksys_write+0x145/0x250 [ 200.393747][ T9623] do_syscall_64+0xfa/0xfa0 [ 200.393762][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.393777][ T9623] [ 200.393777][ T9623] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 200.393799][ T9623] lock_acquire+0x120/0x360 [ 200.393813][ T9623] _raw_spin_lock_irqsave+0xa7/0xf0 [ 200.393833][ T9623] serial8250_console_write+0x17e/0x1ba0 [ 200.393855][ T9623] console_flush_all+0x6f3/0xb10 [ 200.393873][ T9623] console_unlock+0xbb/0x190 [ 200.393889][ T9623] vprintk_emit+0x4c5/0x590 [ 200.393905][ T9623] _printk+0xcf/0x120 [ 200.393919][ T9623] register_console+0xa8b/0xf90 [ 200.393937][ T9623] univ8250_console_init+0x3a/0x70 [ 200.393953][ T9623] console_init+0x10e/0x430 [ 200.393967][ T9623] start_kernel+0x254/0x410 [ 200.393985][ T9623] x86_64_start_reservations+0x24/0x30 [ 200.394001][ T9623] x86_64_start_kernel+0x143/0x1c0 [ 200.394015][ T9623] common_startup_64+0x13e/0x147 [ 200.394033][ T9623] [ 200.394033][ T9623] -> #0 (console_owner){-.-.}-{0:0}: [ 200.394052][ T9623] validate_chain+0xb9b/0x2140 [ 200.394067][ T9623] __lock_acquire+0xab9/0xd20 [ 200.394082][ T9623] lock_acquire+0x120/0x360 [ 200.394094][ T9623] console_flush_all+0x69c/0xb10 [ 200.394113][ T9623] console_unlock+0xbb/0x190 [ 200.394129][ T9623] vprintk_emit+0x4c5/0x590 [ 200.394146][ T9623] _printk+0xcf/0x120 [ 200.394159][ T9623] should_fail_ex+0x3f5/0x560 [ 200.394178][ T9623] strncpy_from_user+0x36/0x290 [ 200.394197][ T9623] strncpy_from_user_nofault+0x72/0x150 [ 200.394214][ T9623] bpf_probe_read_compat_str+0xe2/0x180 [ 200.394231][ T9623] bpf_prog_8667240c19f5840f+0x73/0x7b [ 200.394244][ T9623] bpf_trace_run2+0x3ff/0x4b0 [ 200.394256][ T9623] __bpf_trace_tlb_flush+0xf5/0x150 [ 200.394276][ T9623] trace_tlb_flush+0x115/0x140 [ 200.394295][ T9623] switch_mm_irqs_off+0x54a/0x7b0 [ 200.394313][ T9623] __schedule+0x110e/0x4cc0 [ 200.394333][ T9623] schedule+0x165/0x360 [ 200.394351][ T9623] schedule_preempt_disabled+0x13/0x30 [ 200.394372][ T9623] __mutex_lock+0x7e6/0x1350 [ 200.394387][ T9623] nl80211_pre_doit+0x5f/0x930 [ 200.394405][ T9623] genl_family_rcv_msg_doit+0x1be/0x300 [ 200.394448][ T9623] genl_rcv_msg+0x60e/0x790 [ 200.394465][ T9623] netlink_rcv_skb+0x208/0x470 [ 200.394480][ T9623] genl_rcv+0x28/0x40 [ 200.394497][ T9623] netlink_unicast+0x82f/0x9e0 [ 200.394518][ T9623] netlink_sendmsg+0x805/0xb30 [ 200.394533][ T9623] __sock_sendmsg+0x21c/0x270 [ 200.394553][ T9623] ____sys_sendmsg+0x505/0x830 [ 200.394569][ T9623] ___sys_sendmsg+0x21f/0x2a0 [ 200.394584][ T9623] __x64_sys_sendmsg+0x19b/0x260 [ 200.394599][ T9623] do_syscall_64+0xfa/0xfa0 [ 200.394613][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.394628][ T9623] [ 200.394628][ T9623] other info that might help us debug this: [ 200.394628][ T9623] [ 200.394633][ T9623] Chain exists of: [ 200.394633][ T9623] console_owner --> &p->pi_lock --> &rq->__lock [ 200.394633][ T9623] [ 200.394659][ T9623] Possible unsafe locking scenario: [ 200.394659][ T9623] [ 200.394665][ T9623] CPU0 CPU1 [ 200.394671][ T9623] ---- ---- [ 200.394676][ T9623] lock(&rq->__lock); [ 200.394688][ T9623] lock(&p->pi_lock); [ 200.394700][ T9623] lock(&rq->__lock); [ 200.394712][ T9623] lock(console_owner); [ 200.394724][ T9623] [ 200.394724][ T9623] *** DEADLOCK *** [ 200.394724][ T9623] [ 200.394729][ T9623] 6 locks held by syz.2.1152/9623: [ 200.394739][ T9623] #0: ffffffff8f3320b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 200.394787][ T9623] #1: ffffffff8f2cc148 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 200.394827][ T9623] #2: ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 200.394866][ T9623] #3: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 200.394901][ T9623] #4: ffffffff8df31680 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 200.394937][ T9623] #5: ffffffff8de18f50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 200.394978][ T9623] [ 200.394978][ T9623] stack backtrace: [ 200.394988][ T9623] CPU: 1 UID: 0 PID: 9623 Comm: syz.2.1152 Not tainted syzkaller #0 PREEMPT(full) [ 200.395006][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.395016][ T9623] Call Trace: [ 200.395024][ T9623] [ 200.395031][ T9623] dump_stack_lvl+0x189/0x250 [ 200.395054][ T9623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.395075][ T9623] ? __pfx__printk+0x10/0x10 [ 200.395092][ T9623] ? print_lock_name+0xde/0x100 [ 200.395109][ T9623] print_circular_bug+0x2ee/0x310 [ 200.395129][ T9623] check_noncircular+0x134/0x160 [ 200.395150][ T9623] validate_chain+0xb9b/0x2140 [ 200.395177][ T9623] __lock_acquire+0xab9/0xd20 [ 200.395195][ T9623] ? console_flush_all+0x13a/0xb10 [ 200.395215][ T9623] lock_acquire+0x120/0x360 [ 200.395230][ T9623] ? console_flush_all+0x13a/0xb10 [ 200.395252][ T9623] ? do_raw_spin_unlock+0x122/0x240 [ 200.395273][ T9623] ? console_flush_all+0x13a/0xb10 [ 200.395293][ T9623] console_flush_all+0x69c/0xb10 [ 200.395313][ T9623] ? console_flush_all+0x13a/0xb10 [ 200.395333][ T9623] ? console_flush_all+0x13a/0xb10 [ 200.395356][ T9623] ? __pfx_console_flush_all+0x10/0x10 [ 200.395380][ T9623] ? is_printk_cpu_sync_owner+0x32/0x40 [ 200.395405][ T9623] console_unlock+0xbb/0x190 [ 200.395423][ T9623] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 200.395448][ T9623] ? __pfx_console_unlock+0x10/0x10 [ 200.395469][ T9623] vprintk_emit+0x4c5/0x590 [ 200.395489][ T9623] ? __pfx_vprintk_emit+0x10/0x10 [ 200.395508][ T9623] ? trace_buffer_unlock_commit_regs+0x14f/0x550 [ 200.395531][ T9623] ? trace_event_buffer_commit+0x264/0x7b0 [ 200.395554][ T9623] _printk+0xcf/0x120 [ 200.395570][ T9623] ? __pfx____ratelimit+0x10/0x10 [ 200.395593][ T9623] ? __pfx__printk+0x10/0x10 [ 200.395610][ T9623] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 200.395635][ T9623] should_fail_ex+0x3f5/0x560 [ 200.395658][ T9623] strncpy_from_user+0x36/0x290 [ 200.395678][ T9623] ? bpf_trace_run2+0x186/0x4b0 [ 200.395693][ T9623] strncpy_from_user_nofault+0x72/0x150 [ 200.395714][ T9623] bpf_probe_read_compat_str+0xe2/0x180 [ 200.395743][ T9623] bpf_prog_8667240c19f5840f+0x73/0x7b [ 200.395757][ T9623] bpf_trace_run2+0x3ff/0x4b0 [ 200.395771][ T9623] ? bpf_trace_run2+0x186/0x4b0 [ 200.395786][ T9623] ? __pfx_bpf_trace_run2+0x10/0x10 [ 200.395799][ T9623] ? __pfx_bpf_trace_run4+0x10/0x10 [ 200.395814][ T9623] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 200.395836][ T9623] __bpf_trace_tlb_flush+0xf5/0x150 [ 200.395856][ T9623] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 200.395878][ T9623] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 200.395898][ T9623] ? __bpf_trace_sched_switch+0x17a/0x1e0 [ 200.395921][ T9623] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 200.395946][ T9623] ? trace_save_cmdline+0x35b/0x500 [ 200.395969][ T9623] ? psi_group_change+0xab8/0x1050 [ 200.395988][ T9623] trace_tlb_flush+0x115/0x140 [ 200.396010][ T9623] switch_mm_irqs_off+0x54a/0x7b0 [ 200.396033][ T9623] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 200.396054][ T9623] ? tracing_record_taskinfo_sched_switch+0x274/0x370 [ 200.396081][ T9623] __schedule+0x110e/0x4cc0 [ 200.396108][ T9623] ? __lock_acquire+0xab9/0xd20 [ 200.396126][ T9623] ? __lock_acquire+0xab9/0xd20 [ 200.396142][ T9623] ? __pfx___schedule+0x10/0x10 [ 200.396176][ T9623] ? schedule+0x91/0x360 [ 200.396197][ T9623] schedule+0x165/0x360 [ 200.396220][ T9623] schedule_preempt_disabled+0x13/0x30 [ 200.396242][ T9623] __mutex_lock+0x7e6/0x1350 [ 200.396260][ T9623] ? __mutex_lock+0x5bb/0x1350 [ 200.396279][ T9623] ? nl80211_pre_doit+0x5f/0x930 [ 200.396300][ T9623] ? __pfx___mutex_lock+0x10/0x10 [ 200.396319][ T9623] ? rcu_is_watching+0x15/0xb0 [ 200.396339][ T9623] ? __nla_parse+0x40/0x60 [ 200.396357][ T9623] nl80211_pre_doit+0x5f/0x930 [ 200.396374][ T9623] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 200.396399][ T9623] genl_family_rcv_msg_doit+0x1be/0x300 [ 200.396422][ T9623] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 200.396456][ T9623] ? bpf_lsm_capable+0x9/0x20 [ 200.396475][ T9623] ? security_capable+0x7e/0x2e0 [ 200.396497][ T9623] genl_rcv_msg+0x60e/0x790 [ 200.396526][ T9623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.396545][ T9623] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 200.396568][ T9623] ? __pfx_nl80211_new_station+0x10/0x10 [ 200.396587][ T9623] ? __pfx_nl80211_post_doit+0x10/0x10 [ 200.396611][ T9623] netlink_rcv_skb+0x208/0x470 [ 200.396625][ T9623] ? __lock_acquire+0xab9/0xd20 [ 200.396640][ T9623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.396660][ T9623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.396685][ T9623] ? down_read+0x1ad/0x2e0 [ 200.396703][ T9623] genl_rcv+0x28/0x40 [ 200.396722][ T9623] netlink_unicast+0x82f/0x9e0 [ 200.396749][ T9623] ? __pfx_netlink_unicast+0x10/0x10 [ 200.396772][ T9623] ? netlink_sendmsg+0x642/0xb30 [ 200.396785][ T9623] ? skb_put+0x11b/0x210 [ 200.396804][ T9623] netlink_sendmsg+0x805/0xb30 [ 200.396825][ T9623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.396844][ T9623] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.396868][ T9623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.396884][ T9623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.396902][ T9623] __sock_sendmsg+0x21c/0x270 [ 200.396925][ T9623] ____sys_sendmsg+0x505/0x830 [ 200.396945][ T9623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.396965][ T9623] ? import_iovec+0x74/0xa0 [ 200.396985][ T9623] ___sys_sendmsg+0x21f/0x2a0 [ 200.397005][ T9623] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.397039][ T9623] ? __fget_files+0x2a/0x420 [ 200.397055][ T9623] ? __fget_files+0x3a0/0x420 [ 200.397073][ T9623] __x64_sys_sendmsg+0x19b/0x260 [ 200.397092][ T9623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.397114][ T9623] ? __pfx_ksys_write+0x10/0x10 [ 200.397136][ T9623] ? do_syscall_64+0xbe/0xfa0 [ 200.397153][ T9623] do_syscall_64+0xfa/0xfa0 [ 200.397173][ T9623] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.397188][ T9623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.397203][ T9623] ? clear_bhb_loop+0x60/0xb0 [ 200.397221][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.397236][ T9623] RIP: 0033:0x7f512258f6c9 [ 200.397251][ T9623] Code: Unable to access opcode bytes at 0x7f512258f69f. [ 200.397260][ T9623] RSP: 002b:00007f51234dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.397277][ T9623] RAX: ffffffffffffffda RBX: 00007f51227e5fa0 RCX: 00007f512258f6c9 [ 200.397290][ T9623] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000003 [ 200.397302][ T9623] RBP: 00007f51234dd090 R08: 0000000000000000 R09: 0000000000000000 [ 200.397313][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.397323][ T9623] R13: 00007f51227e6038 R14: 00007f51227e5fa0 R15: 00007ffdcc2c3d58 [ 200.397343][ T9623] [ 201.910393][ T9623] CPU: 1 UID: 0 PID: 9623 Comm: syz.2.1152 Not tainted syzkaller #0 PREEMPT(full) [ 201.910408][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.910415][ T9623] Call Trace: [ 201.910422][ T9623] [ 201.910428][ T9623] dump_stack_lvl+0x189/0x250 [ 201.910446][ T9623] ? __pfx____ratelimit+0x10/0x10 [ 201.910460][ T9623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.910472][ T9623] ? __pfx__printk+0x10/0x10 [ 201.910483][ T9623] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 201.910498][ T9623] should_fail_ex+0x414/0x560 [ 201.910513][ T9623] strncpy_from_user+0x36/0x290 [ 201.910526][ T9623] ? bpf_trace_run2+0x186/0x4b0 [ 201.910535][ T9623] strncpy_from_user_nofault+0x72/0x150 [ 201.910548][ T9623] bpf_probe_read_compat_str+0xe2/0x180 [ 201.910561][ T9623] bpf_prog_8667240c19f5840f+0x73/0x7b [ 201.910571][ T9623] bpf_trace_run2+0x3ff/0x4b0 [ 201.910580][ T9623] ? bpf_trace_run2+0x186/0x4b0 [ 201.910588][ T9623] ? __pfx_bpf_trace_run2+0x10/0x10 [ 201.910597][ T9623] ? __pfx_bpf_trace_run4+0x10/0x10 [ 201.910606][ T9623] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 201.910620][ T9623] __bpf_trace_tlb_flush+0xf5/0x150 [ 201.910632][ T9623] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 201.910653][ T9623] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 201.910665][ T9623] ? __bpf_trace_sched_switch+0x17a/0x1e0 [ 201.910678][ T9623] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 201.910689][ T9623] ? trace_save_cmdline+0x35b/0x500 [ 201.910703][ T9623] ? psi_group_change+0xab8/0x1050 [ 201.910714][ T9623] trace_tlb_flush+0x115/0x140 [ 201.910727][ T9623] switch_mm_irqs_off+0x54a/0x7b0 [ 201.910741][ T9623] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 201.910753][ T9623] ? tracing_record_taskinfo_sched_switch+0x274/0x370 [ 201.910768][ T9623] __schedule+0x110e/0x4cc0 [ 201.910785][ T9623] ? __lock_acquire+0xab9/0xd20 [ 201.910796][ T9623] ? __lock_acquire+0xab9/0xd20 [ 201.910805][ T9623] ? __pfx___schedule+0x10/0x10 [ 201.910821][ T9623] ? schedule+0x91/0x360 [ 201.910834][ T9623] schedule+0x165/0x360 [ 201.910846][ T9623] schedule_preempt_disabled+0x13/0x30 [ 201.910860][ T9623] __mutex_lock+0x7e6/0x1350 [ 201.910870][ T9623] ? __mutex_lock+0x5bb/0x1350 [ 201.910881][ T9623] ? nl80211_pre_doit+0x5f/0x930 [ 201.910893][ T9623] ? __pfx___mutex_lock+0x10/0x10 [ 201.910904][ T9623] ? rcu_is_watching+0x15/0xb0 [ 201.910915][ T9623] ? __nla_parse+0x40/0x60 [ 201.910926][ T9623] nl80211_pre_doit+0x5f/0x930 [ 201.910936][ T9623] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 201.910957][ T9623] genl_family_rcv_msg_doit+0x1be/0x300 [ 201.911092][ T9623] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.911108][ T9623] ? bpf_lsm_capable+0x9/0x20 [ 201.911120][ T9623] ? security_capable+0x7e/0x2e0 [ 201.911135][ T9623] genl_rcv_msg+0x60e/0x790 [ 201.911149][ T9623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.911160][ T9623] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 201.911172][ T9623] ? __pfx_nl80211_new_station+0x10/0x10 [ 201.911183][ T9623] ? __pfx_nl80211_post_doit+0x10/0x10 [ 201.911197][ T9623] netlink_rcv_skb+0x208/0x470 [ 201.911207][ T9623] ? __lock_acquire+0xab9/0xd20 [ 201.911216][ T9623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.911228][ T9623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.911244][ T9623] ? down_read+0x1ad/0x2e0 [ 201.911255][ T9623] genl_rcv+0x28/0x40 [ 201.911267][ T9623] netlink_unicast+0x82f/0x9e0 [ 201.911283][ T9623] ? __pfx_netlink_unicast+0x10/0x10 [ 201.911297][ T9623] ? netlink_sendmsg+0x642/0xb30 [ 201.911307][ T9623] ? skb_put+0x11b/0x210 [ 201.911318][ T9623] netlink_sendmsg+0x805/0xb30 [ 201.911331][ T9623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.911341][ T9623] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.911356][ T9623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.911366][ T9623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.911376][ T9623] __sock_sendmsg+0x21c/0x270 [ 201.911391][ T9623] ____sys_sendmsg+0x505/0x830 [ 201.911403][ T9623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.911415][ T9623] ? import_iovec+0x74/0xa0 [ 201.911427][ T9623] ___sys_sendmsg+0x21f/0x2a0 [ 201.911438][ T9623] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.911456][ T9623] ? __fget_files+0x2a/0x420 [ 201.911466][ T9623] ? __fget_files+0x3a0/0x420 [ 201.911478][ T9623] __x64_sys_sendmsg+0x19b/0x260 [ 201.911489][ T9623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.911503][ T9623] ? __pfx_ksys_write+0x10/0x10 [ 201.911516][ T9623] ? do_syscall_64+0xbe/0xfa0 [ 201.911527][ T9623] do_syscall_64+0xfa/0xfa0 [ 201.911537][ T9623] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.911546][ T9623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.911556][ T9623] ? clear_bhb_loop+0x60/0xb0 [ 201.911567][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.911577][ T9623] RIP: 0033:0x7f512258f6c9 [ 201.911588][ T9623] Code: Unable to access opcode bytes at 0x7f512258f69f. [ 201.911593][ T9623] RSP: 002b:00007f51234dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.911606][ T9623] RAX: ffffffffffffffda RBX: 00007f51227e5fa0 RCX: 00007f512258f6c9 [ 201.911613][ T9623] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000003 [ 201.911620][ T9623] RBP: 00007f51234dd090 R08: 0000000000000000 R09: 0000000000000000 [ 201.911626][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.911633][ T9623] R13: 00007f51227e6038 R14: 00007f51227e5fa0 R15: 00007ffdcc2c3d58 [ 201.911655][ T9623] [ 202.517327][ T9620] FAULT_INJECTION: forcing a failure. [ 202.517327][ T9620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.531725][ T9620] CPU: 1 UID: 0 PID: 9620 Comm: syz.4.1151 Not tainted syzkaller #0 PREEMPT(full) [ 202.531748][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.531760][ T9620] Call Trace: [ 202.531768][ T9620] [ 202.531776][ T9620] dump_stack_lvl+0x189/0x250 [ 202.531803][ T9620] ? __pfx____ratelimit+0x10/0x10 [ 202.531828][ T9620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.531849][ T9620] ? __pfx__printk+0x10/0x10 [ 202.531869][ T9620] ? rcu_is_watching+0x15/0xb0 [ 202.531890][ T9620] should_fail_ex+0x414/0x560 [ 202.531915][ T9620] _copy_to_user+0x31/0xb0 [ 202.531936][ T9620] simple_read_from_buffer+0xe1/0x170 [ 202.531962][ T9620] proc_fail_nth_read+0x1b3/0x220 [ 202.531985][ T9620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.532006][ T9620] ? rw_verify_area+0x2a6/0x4d0 [ 202.532028][ T9620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.532048][ T9620] vfs_read+0x200/0xa30 [ 202.532069][ T9620] ? fdget_pos+0x247/0x320 [ 202.532087][ T9620] ? __pfx___mutex_lock+0x10/0x10 [ 202.532106][ T9620] ? __pfx_vfs_read+0x10/0x10 [ 202.532130][ T9620] ? __fget_files+0x3a0/0x420 [ 202.532145][ T9620] ? __fget_files+0x2a/0x420 [ 202.532163][ T9620] ksys_read+0x145/0x250 [ 202.532186][ T9620] ? __pfx_ksys_read+0x10/0x10 [ 202.532208][ T9620] ? rcu_is_watching+0x15/0xb0 [ 202.532228][ T9620] do_syscall_64+0xfa/0xfa0 [ 202.532251][ T9620] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.532268][ T9620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.532285][ T9620] ? clear_bhb_loop+0x60/0xb0 [ 202.532304][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.532321][ T9620] RIP: 0033:0x7f571cb8e0dc [ 202.532336][ T9620] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.532352][ T9620] RSP: 002b:00007f571d958030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.532372][ T9620] RAX: ffffffffffffffda RBX: 00007f571cde5fa0 RCX: 00007f571cb8e0dc [ 202.532385][ T9620] RDX: 000000000000000f RSI: 00007f571d9580a0 RDI: 0000000000000006 [ 202.532396][ T9620] RBP: 00007f571d958090 R08: 0000000000000000 R09: 0000000000000000 [ 202.532408][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.532419][ T9620] R13: 00007f571cde6038 R14: 00007f571cde5fa0 R15: 00007ffdda5c3fc8 [ 202.532437][ T9620]