last executing test programs: 6.146059674s ago: executing program 0 (id=2163): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x8) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], 0x48) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r5) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 4.811907203s ago: executing program 0 (id=2178): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000027c00000400f6000c0001800600060089"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000040)={r6, 0x4, 0x8, 0x8}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={r6, 0x6}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 4.55727414s ago: executing program 2 (id=2185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0xc, 0xffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x200, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f0000000280)="23516583558551ec1eaca8309bb5bb6c8c72b82c370744573ffeca53e15bff1d36f1e0b8d54b89242d13869315a9bd52255799366d7cf4260cd88a14033425e60f4aab5c81faffe6153f61c8628f415265980920e61e25f95a0266eb5bf62898e1f369ef510ca874caba77d8d42d39f5192084fa10e68e1cf44544b1c4f1cedc36cd2539a927272a1565290cba4ff6e455304791919e638e573c45274b8899ed357af155e0", &(0x7f0000000540)=""/231, &(0x7f00000003c0)="888b5ea484c4c2365a9cbf0fd30fa206834ba4378b2b41c54bedb13df928a1cc83b490ed7bbfc2f2a662bdb2e624b61ee0dfed5cf72f1ea4ffaa06a140bb7d686f07f1bea30706466ecf1843a61837fda11c6b2b1bd16a58c350e244284e256abb214d478afd86bc16919dd72d03d61cdee5e924698f", &(0x7f0000000000)="63d1ef67405bc8746555e0c889188290", 0x3, r3}, 0x38) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xc5, 0x0, &(0x7f0000000640)="82c2c7cb5229673829afe8895c90862eafa997805a18d831a2f7898ff1f1c15ca68eb63c967910610f62e136a4e10df32755ddf68e760b1b66c9c704c93d69e8d00500de7b72cbf375f8b633b58410b8a769dc4731e8387df5b660fb931a1907b65773bd6586be0bfcf94c20931a3860a32e9d9319c1ec731d06eca1139624ce3e9d6d57636ab10d4851dc17b86f35b54e6fae237e5a583799e723e81ccaa9117485c96be190afa664d7bd4edac44268598ef1721bd88acd0fded0ca98a4abb4b60a39db83608dd4727cb084890cd904ebf65421737a27b103ad3087502900997bc205b6f838dfaca7e99f7ba0c06e68ef25252cb5a63d6dbab0f42f96decbe224f9f4ba2c075d236c51c8640c3b5871f16cd24a5af8a45bb081880b7c8686088a9b0fdc9bc20412ddef21d8b063b41fd87caf32035e93db85c72eb815cd872cbd4a3bb0adf1d9fe2575577ce2ad35b34e40d14a733123d78f1acbbff0a9e0477fda6f47b92ff1019acf2746f31be8ecbcc62c10ebe0bfea4e55ff3a", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x23) 3.929302569s ago: executing program 0 (id=2192): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x884c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f0200000000000020", 0x14}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x5, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "bbb2d34b9d1ae270"}}, 0x48}}, 0x20000000) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r8, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x8000) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r8, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x4) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000500)) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0) r9 = socket$key(0xf, 0x3, 0x2) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, 0x0, &(0x7f0000000ec0)) 3.523931253s ago: executing program 2 (id=2196): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050001000400000008001c000000000008000400000400000800050004000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r2, &(0x7f0000000140)={0x2, 0xc000, @remote}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000680)=r3, 0x4) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000854) 3.378410726s ago: executing program 4 (id=2199): r0 = socket$inet(0x2, 0x3, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r0, &(0x7f0000000980)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a00)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x30, 0x1d}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x8d0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r7, @ANYBLOB="0300fcbb3700"/20, @ANYRES32=0x0, @ANYBLOB="04000000050000000300"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="789daf9e", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r8, 0x0, 0x0, &(0x7f0000000880)=[r7, r7, r7, r9], 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x15, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x73}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x6f, &(0x7f0000000240)=""/111, 0x41100, 0x77, '\x00', r5, @fallback=0x27, r1, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000380)=[{0x1, 0x2, 0x9, 0xc}, {0x2, 0x2, 0xa, 0x8}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) shutdown(r10, 0x0) recvmmsg(r10, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.215128641s ago: executing program 4 (id=2201): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a05000000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100ac000000080001400000080908000240000000010900010073797a"], 0xcc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c0002800800050001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000010c0)={0x0, 0x1, 0x1, [0x1, 0x100000001, 0x7fff, 0x4, 0x8], [0x0, 0x6, 0x1, 0x0, 0xb08b275, 0xfff, 0xffffffffffffbc9f, 0xad6, 0xfffffffffffffc00, 0x4, 0x2, 0x2, 0x4, 0x1e7, 0xe, 0x4, 0x3, 0x6, 0xff, 0x0, 0x5b50, 0x2, 0x6, 0x5, 0x6, 0x4, 0x2, 0x63, 0x10, 0x5, 0x5, 0x86c, 0x9, 0x4, 0x87, 0x200, 0xd366, 0x1, 0x8, 0xc, 0x3, 0x961e, 0xa810000, 0x6, 0x8, 0x10001, 0x6, 0x4, 0x5, 0x2, 0x6, 0x9, 0x7634, 0x0, 0x0, 0x4, 0xf, 0x2, 0xffffffffffffff4c, 0x0, 0x3, 0xfffffffffffff06c, 0xffffffffffffe535, 0x10, 0x2, 0x332e8a29, 0x5, 0xde, 0x101, 0x1000, 0x8, 0x9, 0x7f, 0x1, 0x1, 0x4, 0x4, 0x1d, 0x3, 0x5, 0x6, 0x1, 0x6, 0x1, 0x6000000000, 0xfff, 0x5, 0xfffffffffffffff7, 0x9, 0x100, 0x10, 0x8, 0x2, 0x6, 0x81, 0x8, 0x9d67, 0x5, 0x6, 0x4, 0x7, 0x2, 0x5, 0x4, 0xffffffffffffff17, 0x800, 0x800, 0x4, 0x7, 0x2, 0xffffffffffffffff, 0x2, 0x80000000, 0x4, 0x40, 0xa2, 0x9, 0x1ff, 0x594, 0x9, 0x5]}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000680)={0x1, 0x8, @start={r6, 0x0, "94ac3869fd6923049d1d806d2f7f5939f7109f0de97cd6309f607ec451b92fe73886844fa9f58d021ec897647f8cb7ac962e81464fed9faf78cd564bd3f5049312b0c96489fcb417f196270664f7fa7c4055d174ff4d12d2573c3365b6c102bc4fdbeeaf2c7f81bccd6c79b3ce5dfcc71646082037f4509f56dcfc7008236ad349ad252d42c23aed144f5e1118fde8e97ae5672fcde45556fd055063bab411e31e667c71c1f22a329ebbc7156ccc6799c75ab9df8f2aff4b233f6d13e3976817579d09712340cffed69ff96f8951d853a3c80e061cdcda73cd2d59799353a5bac46caad4f0c0767503a9cb60f6d08eb18783a16c56c62a3670e9ebb008931acb4579009942ea84eb7926599e5dfc45ab43f70b8b6e8228358583d3e904bd17c55c49942d8e3bbd6a620962193ea7c34d7d7bfcdb44d87fd30dfe4054a0506e1a7ec14a1dde72f8fb30d7babc3ae6785ecd1cf07447c09d7ce7a974eebbb152423b94d69652ed5e83967f21db2683dddefdaf86f01faad82a9e4004543c8a7e3bc614619b4b14711970c6a24a8fc5f019e4270f3bc8020fec5548d7a83376a48e2bf50ea92f05836ad1a07c45a6150af05465b7149e884f7e6b9dc42fd959263036464550283afa3da18822d17f79c2b7ea4ed143cb65524a110eb14f7e9ef377c21957811a79f5ba5c9e1dd23d84bb08a3355ca40b4a9d892036254b154888d961eba9238b5644f35209235359e4f2df6c898638b6cedfb5fc1843478973a78c3379444e059f652b055f1499653a6e2199d9aa21a2de747a31852e1cdaab69125cc3cb8fca9fc66a63430d40698f4ca1bb7d2cb4a4aa26490b166f846b0a610c0a0586edde6bc43b996716a36e15ea4a52daa1c013281dfee414447394566b166581ff2fe6acadf6f336a584e0f436146a475ab088eac4e9e7c612763f935903caad8b99377d1a00837d4f3c9f2df3e4e3fc6a0ef742d8dba604063307a8d159cc4314e3931f451deae551938cd5203c763f667c4578d9511a9df82bf5ea4d0c650f7c1406055367996f1fc94c67886d5c2a4925666fcff3bfac01d7874e67da6e1fa71e97367d3c45e84b91187de24f341bcb394e8aa16733c01d07eac2fb497d75faa97986cdb655f587cc9862c74b544280612be01332595ed9a7ec0bf4328e44ad9be218547824fde524ec685df195fe2f2255f5d537544ff416d4845b921bbc166e9e29959f7064b5cc80b0b6a4041690f47006a04abf6d511b6085da4794e7072ffbd0937f08462d821b58a3e991625d43076580baf5348a46d44f0eb4d6b465392380e6f5c1a2834c5cb8f2261fba21d359d5f901aaf76b0aedf26f2e78ba93bcfb55c56e5ac8e02cb6e487ce095233338e6c4ae35eef398e1d0b11e750d7dbb191b6924a18bde787f0e6043134744b441716f2a8b071175240f0f5b363", "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"}, [0x7, 0x417, 0x1cde, 0x81, 0x5, 0x40, 0x7, 0x100000001, 0xee, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1, 0xffff, 0xfffffffffffffffc, 0x9, 0x1, 0xd27, 0x6, 0x2, 0x480000000000000, 0xffbd, 0x1000, 0x7, 0xff, 0x4bd, 0x18000000, 0x2, 0x62, 0x8001, 0xb1b, 0x7, 0x9, 0x81, 0x0, 0x0, 0x5, 0x8, 0x2, 0x9, 0x0, 0xfffffffffffffff9, 0xb24c, 0x4, 0x800, 0x0, 0x2, 0x100000000e, 0x3, 0x9, 0xffffffff, 0x1, 0x3, 0x6, 0x7fff, 0x401, 0x0, 0xfffffffffffffffd, 0xf, 0x100000000, 0x0, 0x6, 0x8]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x74, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.857710428s ago: executing program 0 (id=2204): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x58}}, 0x4000800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x2, 0xff, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000059c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x0, 0x7800, 0x200, 0x0, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @private=0xa010100, {[@noop]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=r4, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000380)={0x9e, {{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}}}, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xc362e63b3f31ba5f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffd, 0x40000000800}}]}]}]}, 0x44}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x1000, @remote, 0x8}, 0x1c) r8 = epoll_create1(0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000140)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x1a000201d}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0x4}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000005c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r8, @ANYBLOB="010028bd7000fcdbdf253100000008000300", @ANYRES8=r5, @ANYBLOB="0c00990000000000270000000800de4c00b27a4caed188b201e85e0300", @ANYRES32=r2, @ANYBLOB="0800db00", @ANYRES32, @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x8050}, 0x20084034) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x2, 0x6, 0xd30, 0x9c8, 0x8d8, 0x8d8, 0x8d8, 0xa98, 0xc60, 0xc60, 0xc60, 0xc60, 0xc60, 0x6, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {0xff}, 0x21}, 0x0, 0x8b0, 0x8d8, 0x0, {0x7a00000010000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x8, 0x1}, {0x5, 0x2}, {0x7fffffff, 0x1}, {0x64c, 0x2}, {0xb4, 0x3}, {0x3}, {0x981e, 0x2}, {}, {0x63b}, {0x8, 0x2}, {0x2}], [{0xfffffffa, 0x1}, {0xb, 0x9}, {0x200, 0x4}, {0x1, 0x9}, {0x7ff, 0x2}, {0x7, 0x5}, {0x1, 0x7}, {0x8001, 0x80}, {0x2, 0x2}, {0xffffffff}, {0x4, 0xd961}], 0x6, 0xa}, {[{0x5, 0x3}, {0x7fff, 0x3}, {0x8001}, {0xfd5, 0x1}, {0x7, 0x2}, {0xffffbf2c, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x738}, {0x800, 0x3}, {0xc, 0x2}], [{0x1, 0x9}, {0xffff, 0xf}, {0x2, 0x41}, {0x4000, 0x8}, {0x2, 0x4797}, {0x2, 0x8000}, {0xe0, 0x1}, {0xe, 0x2}, {0x401, 0x6}, {0x3, 0xffff}, {0x7, 0x7}], 0x2, 0x1}, {[{0x0, 0x2}, {0xba}, {0x8, 0x3}, {0xfffffe00, 0x3}, {0x8, 0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x3}, {0x9, 0x2}, {0x9, 0x3}, {0x1}], [{0xe, 0x7}, {0x8, 0x10}, {0x2, 0x6}, {0x80000000, 0x2}, {0x5384, 0x1}, {0x7fff, 0xf}, {0x6, 0x10000}, {0x2, 0xc0}, {0xe, 0x3}, {0x9, 0x1ff}, {0x9, 0x7f}], 0x5, 0x6}, {[{0x3, 0x3}, {0x5, 0x3}, {0x81, 0x2}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x9, 0x2}, {0x80, 0x3}, {0x3ff, 0x3}], [{0x3, 0x4}, {0x401, 0x500}, {0xe, 0x1}, {0x3, 0xffffffc7}, {0x4c15, 0x10001}, {0x3, 0x4}, {0x3, 0x200}, {0x7fff, 0x8}, {0x2, 0xd39}, {0x7ffe, 0xc}, {0x4, 0x7f}], 0x9, 0xb}, {[{0x101, 0x1}, {0x5, 0x2}, {0xfffffffa}, {}, {0x8, 0x2}, {0x7, 0x2}, {0x100, 0x2}, {0x5, 0x1}, {0xfffffffd, 0x1}, {0xe}, {0x0, 0x1}], [{0x3, 0x9}, {0x8, 0x3}, {0x6, 0x9}, {0x8, 0x80}, {0x1, 0x6}, {0x81, 0x4}, {0x2, 0x7}, {0x80, 0x6}, {0x8, 0x40}, {0x9}, {0x0, 0xff}], 0xa, 0xa}, {[{0x5, 0x2}, {0x7600, 0x3}, {0x10001, 0x1}, {0x1, 0x2}, {0x84}, {0xd}, {0x136}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0x1}, {0x592c, 0x1}], [{0xf0c}, {0x9, 0xfffffff9}, {0x4, 0xffff1871}, {0x9, 0x101}, {0x6, 0x4}, {0x3000, 0xb}, {0x9, 0xd3f5}, {0x7}, {0x9, 0x9737}, {0xffff, 0xe49}, {0x7fffffff, 0x5}], 0x1, 0xa}, {[{0x1, 0x1}, {0x7fff, 0x3}, {0x9}, {0xfffffff6, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0xe92, 0x3}, {0x9}, {0xb372, 0x1}, {0x5, 0x1}, {0x8}], [{0x9, 0x9}, {0x4, 0x7}, {0x9bc, 0x6}, {0xffff8001, 0x100}, {0x9, 0x10}, {0x66e4, 0x8bf}, {0x6, 0x7}, {0xf639, 0x6}, {0x5, 0x8}, {0x9, 0x401}, {0x4, 0x100}], 0x4, 0x9}, {[{0x3, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x3}, {0x4, 0x1}, {0xff, 0x3}, {0x6, 0x3}, {0x2}], [{0x7, 0x8000}, {0xfff, 0x6}, {0x2, 0x2}, {0xc, 0x3ff}, {0xa, 0x80000000}, {0x4, 0x783}, {0x6, 0x9}, {0x101, 0x8000}, {0x10001, 0x3}, {0x3, 0xd67}, {0xfffffff9, 0xfff}], 0xb, 0x1}, {[{0x80000001, 0x3}, {0x3}, {0x61c5c6cf, 0x2}, {0x0, 0x3}, {}, {0x806, 0x2}, {0x6, 0x3}, {0xfffffffa, 0x1}, {0xb43, 0x3}, {0x6, 0x2}, {0x400, 0x1}], [{0x1, 0x8000}, {0xce47, 0xfffffcef}, {0x100, 0x4}, {0x4, 0x3}, {0xd41, 0x8}, {0x8, 0x18000}, {0x8000, 0x6}, {0xf}, {0x4, 0x7f}, {0x4, 0x2}, {0x5, 0x1}], 0x6, 0x6}, {[{0x4}, {0xfff}, {0x0, 0x1}, {0x9, 0x1}, {0x365, 0x3}, {0x6, 0x2}, {0xfffffffe}, {0xfff, 0x8515453908d9a9fb}, {0xfffffffa, 0x3}, {0x0, 0x2}, {0x58c, 0x3}], [{0x8, 0xb}, {0x6, 0xffff}, {0x2, 0x9}, {0x8000, 0x8}, {0x1, 0x2}, {0x4, 0x29a0f484}, {0x6b, 0x5}, {0x4, 0x2f9}, {0x18a6, 0x2}, {0xd58, 0x10}, {0x8, 0x2}], 0x3, 0x6}, {[{0x4, 0x3}, {0x9}, {0xe, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0xc16b, 0x2}, {0x6, 0x1}, {0x3, 0x3}, {0x41}, {0x5ae8}], [{0xfff, 0xffffff80}, {0x8, 0xa5}, {0x2, 0x5}, {0x6, 0xbe8f}, {0xfffffbff, 0x7ff}, {0x5, 0x8001}, {0x1, 0x47}, {0x400, 0x47d4}, {0x38a7, 0xfffffff7}, {0x7c6, 0xffff}, {0xbc8, 0x3}], 0x0, 0x4}], 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@multicast1=0xe0000000, 0x36, 0x11, 0x5}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff000000], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xb96, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2b}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xd90) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 2.757838028s ago: executing program 3 (id=2205): socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6db5608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xac, 0x0, 0x1, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x1000, 0x9, 0x0, 0x2a854384, 0x0, 0x0]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x810) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000002a0e00002000"/28, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x4, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2.463972871s ago: executing program 0 (id=2207): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000100000000000000f8ff00000000bfa10000000000000701"], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000140)="ab1658a626251d6cb9e4689d3e52aeb85f922e746b5a44c6ef", 0x19}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f00000003c0)="97231ab8dbecfedc4f39989533ded471052696397e018632ec8753ae195a21c72f86abefc8c792254454fb89da227e1a0399e5d479b2ed1e45791e8f97921e0d4fcee7c273197e", 0xfffffffffffffe53, 0x1400c094, 0x0, 0x0) 2.276636045s ago: executing program 0 (id=2209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001c000000f800119078000000e0ac1414aa00024e2000089078"], 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000300)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x7, @local, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) tee(r3, r7, 0x8f5, 0x100000000000000) sendto(r6, &(0x7f0000000400)="74c920ed2ef0ded01f2b2ff1a516c6eec016e04662b12a1c1df99c17836c5751bbb4d02a1bd9c0708ea7c52a7a6cb5c92636dc79374b33207f58f80a7b8cbda33d517196921de2250c3cad4bfe56b9cf6083c57164cfea6c597449a2e29a49c7a0e7cfdc34752e1a2ce9cc07161576ffb532064080a334041dd533ae0f94f40268d3129102881eb46f9285ee236992ba", 0x90, 0x884, &(0x7f00000004c0)=@qipcrtr={0x2a, 0x2, 0x2}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004080}, 0x40013) r11 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r11, &(0x7f00000000c0), 0x10) recvfrom$l2tp(r11, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0xffffffffffffff48) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x9) 2.21199822s ago: executing program 4 (id=2210): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare(0x6020480) ioctl$FITRIM(r1, 0xc0185879, 0x0) 1.957072546s ago: executing program 4 (id=2212): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140c, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x100003}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x1}}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 7) 1.323824475s ago: executing program 1 (id=2213): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280140003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="0700000000000000000000000000000000000000e6b3c118c83165457eccdda815ac133c30f38f38e22eee57be73d305f62615c5970aa51ec424f4f2113e943641e26552a51d053a2df25d28e8b3b5546184930dfd8ebee87cc518e4ec78c8ca54d597ce8df65d064973f2d6a8476ef7", @ANYRES32=r3, @ANYRES32, @ANYBLOB="030000000300"/28], 0x50) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000480)={0x6f0, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x3fc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '*+-\x1aV,%\':-\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ip6tnl\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x11c00000}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ip6tnl\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']([&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ip6tnl\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff628}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}]}, @ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "8c76c5892125af2dfe6d7ae3df3a94711875bc632fbebd0ba66f380c6cbb87ba2e46b88ff1038df45597c12fd0f3bd34264d6691d7750705b6ceb90bea654856f0c643367837cd9e13098c9ef23e952bc04f1f01d59051f21b26845606e0b16d529fcd2b900c6690cff742437c96b6679b0a53e29200a33be5a9eb6e572da534a312a5b6d55b8637be2b27"}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%{!$.}\\E\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ip6tnl\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@\\(\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ip6tnl\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@$)^\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',i[[\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5a, 0x4, "f2f8346dbbdd79bca201d95813c33a5d3dacf8df4ea6acf8bc7fb54f0135d483290e9b122fabd2bf237c99194a087f6f7eb0d0ab801af593cbc9146812ea5083b3d720ed3563507b16dbbc682ac2d351b833927e3a96"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd6, 0x4, "48197e4f9cc49801de66115eb7bc17756e08a9d02bc0463825c91abd71e8a763d31432d9e35ef79c1b1930484d661bbe182c96faa21710ff7dbd94e21e05699f82fdf05e5600e54cc556a70f072949314b6bbcff362729a7df253f1f4c38e49b1f0aa7ad60fa400e2316d14f32bdea3cd7470058481fc206e0dfe49a5644c5f80eed09ddd1a10cfa638550241d8da1a4eebfbb434eaa208a6c70b9b627a8c9d6ebca0bb179168291a8e18ac82dd91f5f44e1aa6b5c0c597ddad2d3950833abf49b5a5ca44a0d358fbd9bb3faf8f6598ca416"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_OURS={0x208, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "a598a97441b13475eb4ef33d988aa90455044678523363232088bc221ba2c196e49834f17ac7632e0187d009d755b4ab396d317c3bcb522a606c25d9a1ef42e1d5134db64d7b5e795d187c22c620b3da2fcfa300619ecb52a1823a292bd145309d1f8cf6638bef61596baae55e6bcc6986d401e8b4f97d2ad7f83c5de9d456d7375e6dd86aba089cc0c08c327ee9cecea1af7a60aa769a3d55a200f75a34224f1908ec88e2fe3ef809dd83dfc16c2ea01f6bfa55accf3cd080c3fbb74e41353a26c8b62ba1a8a6a14f27924a5484359bcb37"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb1, 0x5, "9021fd587da25f15290c5db963deb9f1f299dafa34bccfea68bf1e1d0f0e4e2f1421f9f17802a083c86723ca34a968e2a72c6dfa3a8c835c69c881d68fdf5b036f2f691ad82177e6e5ce0875a3d5fe403033a2c8fbd14ec58375b0ebb97b22d6e0861b6d6cb85649e7fe9e3900527f67927bcd9eddfc6f425991775219d25dd0dc195232014acaac1096ba26f289c1a972e9fa812304cd47ede660a07110f298e0a20c89a91a8ffd01792a4953"}, @ETHTOOL_A_BITSET_MASK={0x6a, 0x5, "15dce06beabadfc3ad109258568139fa99724522cdd79dcfa7e768dd7a06cee136c2527a657513095cd5196e1cec80fbed756bdd194b08d577da8c41c159ce3fab4fc443bfe209b63a9e0dd6906d1c79dc3188cdc4c3647d7ebae413a89b99fecffa899dc39b"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x50, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x49, 0x5, "c6d8e439fa20d27207fa944965522f50a45408acc45198c907930a5e2e3c5d890a3ad4f75dcbd3b3280db1358198c8006cfd62a257c79fb3cc9a0f1da92364556e9ed5f687"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x81}]}, 0x6f0}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 1.323363005s ago: executing program 4 (id=2214): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x884c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f0200000000000020", 0x14}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x5, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "bbb2d34b9d1ae270"}}, 0x48}}, 0x20000000) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r8, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x4) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000500)) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0) r10 = socket$key(0xf, 0x3, 0x2) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, 0x0, &(0x7f0000000ec0)) 1.280687414s ago: executing program 3 (id=2215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000f000000070000000010"], 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000008c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000900)={0x0, 0xcc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="750a00000000000061119c0000000000180000000000000000000000000000009500000000000000c39d9fd29ac27ada6a6aeeeffc82d637eb4997ee0c6fccb2b664b7abf5d095bc51ca4707cb476439dd9922f86e7c3c37af81e590110feaf5eebf5ba0ac8216744a650fd861d34d2dbd9287cbfd0fc618f2b76972cc0493a7bd2f804102f7dbc3bd80194a4b6a38ea4d22bae470aa879ebe8a48f125448289139feebf209ffe9112fc7e345d16f83a5843047f046579aa078d27839a48fcb93c9d0303574716ebfe5439ee66f76fb29224d89b17cbfcef524f0a2a97da38e792b6680beece8aacd5d8c7d14541a2257ad4212623c6c31a0c9272329ee1d078b9e98812b8f175cb63a24a0f1aedb4"], &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000004, 0x4010, r1, 0xe9527000) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 1.210882126s ago: executing program 1 (id=2216): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=[0x3], &(0x7f0000000200)=[0x3, 0x1, 0x0, 0x4, 0x3, 0x0], 0x4, 0x1}}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="6800005d78c058c3afdf33ef0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.149804418s ago: executing program 3 (id=2217): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000feff845b8531120000e7950000ef00000000009500a505004000000000000000000000002200"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000f403010000000080000000000000000a14000000f903010000000000000000000000000a"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) unshare(0x20000400) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0xe}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r6, 0x0, 0x32600) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2008004) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2000}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) 1.098936774s ago: executing program 2 (id=2218): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) r3 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r4, 0x0, 0xa) bind$bt_hci(r4, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_ERSPAN_DIR={0xfffffe53}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 982.304405ms ago: executing program 1 (id=2219): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000100000000000000f8ff00000000bfa10000000000000701"], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f00000003c0)="97231ab8dbecfedc4f39989533ded471052696397e018632ec8753ae195a21c72f86abefc8c792254454fb89da227e1a0399e5d479b2ed1e45791e8f97921e0d4fcee7c273197e", 0xfffffffffffffe53, 0x1400c094, 0x0, 0x0) 927.961125ms ago: executing program 3 (id=2220): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="e4bd9dd29bc6a30e7b0039b6622f6b2467f17fc7d52a61e1ddda34e1d18c63f037bd3ac0cbad5fc38ebc8ea06f4dfead8a5c0ceae4ae162d16276c08", 0x3c}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 891.638165ms ago: executing program 1 (id=2221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf2505"], 0x1618}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000001380)=""/224, 0xe0}, {0x0}], 0x5) (fail_nth: 3) 803.499074ms ago: executing program 2 (id=2222): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FITRIM(r1, 0xc0185879, 0x0) 792.480326ms ago: executing program 1 (id=2223): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x4}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, 0x0, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x4898) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 791.992201ms ago: executing program 3 (id=2224): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 701.176436ms ago: executing program 3 (id=2225): socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6db5608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xac, 0x0, 0x1, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x1000, 0x9, 0x0, 0x2a854384, 0x0, 0x0]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x810) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000002a0e00002000"/28, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x4, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 605.859464ms ago: executing program 2 (id=2226): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001ec0)='ns/time\x00') ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, 0x8) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x203, @rand_addr=' \x01\x00'}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf4d6, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x74}}, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0xe946, 0x70, &(0x7f0000000180)=""/112, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xa, 0xe81}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x2, 0x5, 0x9, 0xb}, {0x4, 0x5, 0xa, 0x3}, {0x3, 0x5, 0x10, 0x8}, {0x4, 0x3, 0x0, 0x9}, {0x5, 0x2, 0x3, 0x2}, {0x3, 0x4, 0xc, 0x1}, {0x2, 0x2, 0x1, 0x7}, {0x4, 0x4, 0xa, 0xe}, {0x1, 0x5, 0xc, 0x9}, {0x5, 0x3, 0x6, 0x8}], 0x10, 0xe}, 0x94) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f0000000440)=r11, 0x4) close(r0) 383.232152ms ago: executing program 2 (id=2227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000082", @ANYRES16=r1, @ANYBLOB="01032cbd7000fbdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000000c0)={'batadv_slave_1\x00', {0x2, 0x0, @initdev}}) unshare(0x6a040000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180), &(0x7f0000000240)=0x4) sendmsg$nl_route(r4, 0x0, 0x50) unshare(0x44000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x800) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4008840) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000300)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 28.134831ms ago: executing program 4 (id=2228): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x71, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf110011aaaa432e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@gettaction={0x128, 0x32, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x9c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffb5}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 1 (id=2229): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="80"], 0x48) kernel console output (not intermixed with test programs): 9': attribute type 1 has an invalid length. [ 250.646674][T11196] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 251.295009][T11195] wlan1 speed is unknown, defaulting to 1000 [ 252.825835][T11230] syzkaller0: entered promiscuous mode [ 252.832005][T11230] syzkaller0: entered allmulticast mode [ 253.758910][T11263] __nla_validate_parse: 5 callbacks suppressed [ 253.758928][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1592'. [ 255.219875][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1587'. [ 255.255152][T11251] wlan1 speed is unknown, defaulting to 1000 [ 255.349943][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 255.380222][T11274] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1597'. [ 255.682753][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1600'. [ 255.781691][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 255.792505][T11281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.821421][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.918536][T11317] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1610'. [ 257.041074][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 257.154873][T11321] netlink: 'syz.2.1612': attribute type 83 has an invalid length. [ 257.661981][T11343] wlan1 speed is unknown, defaulting to 1000 [ 258.283125][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 258.616143][T11369] FAULT_INJECTION: forcing a failure. [ 258.616143][T11369] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.703818][T11369] CPU: 1 UID: 0 PID: 11369 Comm: syz.3.1631 Not tainted syzkaller #0 PREEMPT(full) [ 258.703843][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.703853][T11369] Call Trace: [ 258.703861][T11369] [ 258.703869][T11369] dump_stack_lvl+0x189/0x250 [ 258.703893][T11369] ? __pfx____ratelimit+0x10/0x10 [ 258.703919][T11369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.703946][T11369] ? __pfx__printk+0x10/0x10 [ 258.703967][T11369] ? fs_reclaim_acquire+0x7d/0x100 [ 258.703997][T11369] should_fail_ex+0x414/0x560 [ 258.704029][T11369] prepare_alloc_pages+0x213/0x610 [ 258.704059][T11369] __alloc_frozen_pages_noprof+0x123/0x370 [ 258.704085][T11369] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 258.704114][T11369] ? __lock_acquire+0xab9/0xd20 [ 258.704138][T11369] ? policy_nodemask+0x27c/0x720 [ 258.704166][T11369] alloc_pages_mpol+0x232/0x4a0 [ 258.704194][T11369] alloc_pages_noprof+0xa9/0x190 [ 258.704218][T11369] pte_alloc_one+0x23/0x310 [ 258.704241][T11369] ? __pte_alloc+0x1d/0x1a0 [ 258.704265][T11369] __pte_alloc+0x25/0x1a0 [ 258.704291][T11369] __handle_mm_fault+0x4985/0x5400 [ 258.704327][T11369] ? __pfx___handle_mm_fault+0x10/0x10 [ 258.704366][T11369] ? find_vma+0xe7/0x160 [ 258.704383][T11369] ? __pfx_find_vma+0x10/0x10 [ 258.704403][T11369] handle_mm_fault+0x40a/0x8e0 [ 258.704433][T11369] do_user_addr_fault+0x764/0x1380 [ 258.704472][T11369] exc_page_fault+0x82/0x100 [ 258.704493][T11369] asm_exc_page_fault+0x26/0x30 [ 258.704510][T11369] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 258.704533][T11369] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 35 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 258.704549][T11369] RSP: 0018:ffffc90003017758 EFLAGS: 00050202 [ 258.704566][T11369] RAX: ffffffff848e7701 RBX: ffff888071208040 RCX: 000000000000002e [ 258.704580][T11369] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffff888071208040 [ 258.704592][T11369] RBP: ffffc900030178c8 R08: ffff88807120806d R09: 1ffff1100e24100d [ 258.704606][T11369] R10: dffffc0000000000 R11: ffffed100e24100e R12: 1ffff92000602faf [ 258.704618][T11369] R13: 00002000000000c0 R14: ffffc90003017d88 R15: 000000000000002e [ 258.704640][T11369] ? _copy_from_iter+0x181/0x1790 [ 258.704668][T11369] _copy_from_iter+0x24f/0x1790 [ 258.704691][T11369] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 258.704721][T11369] ? policy_nodemask+0x27c/0x720 [ 258.704741][T11369] ? __pfx__copy_from_iter+0x10/0x10 [ 258.704769][T11369] ? set_page_refcounted+0xa0/0x1e0 [ 258.704790][T11369] ? page_copy_sane+0x4e/0x280 [ 258.704813][T11369] copy_page_from_iter+0xdd/0x170 [ 258.704838][T11369] tun_get_user+0x1d7b/0x3e90 [ 258.704869][T11369] ? tun_get_user+0x6f6/0x3e90 [ 258.704899][T11369] ? aa_file_perm+0x44d/0x1550 [ 258.704920][T11369] ? __pfx_tun_get_user+0x10/0x10 [ 258.704945][T11369] ? _parse_integer_limit+0x1ae/0x1f0 [ 258.704973][T11369] ? __lock_acquire+0xab9/0xd20 [ 258.705001][T11369] ? ref_tracker_alloc+0x318/0x460 [ 258.705017][T11369] ? __lock_acquire+0xab9/0xd20 [ 258.705040][T11369] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 258.705065][T11369] ? tun_get+0x1c/0x2f0 [ 258.705091][T11369] ? tun_get+0x1c/0x2f0 [ 258.705111][T11369] ? tun_get+0x1c/0x2f0 [ 258.705136][T11369] tun_chr_write_iter+0x113/0x200 [ 258.705161][T11369] vfs_write+0x5c9/0xb30 [ 258.705185][T11369] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 258.705207][T11369] ? __pfx_vfs_write+0x10/0x10 [ 258.705237][T11369] ? __fget_files+0x2a/0x420 [ 258.705268][T11369] ksys_write+0x145/0x250 [ 258.705290][T11369] ? __pfx_ksys_write+0x10/0x10 [ 258.705312][T11369] ? do_syscall_64+0xbe/0xfa0 [ 258.705335][T11369] do_syscall_64+0xfa/0xfa0 [ 258.705351][T11369] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.705368][T11369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.705386][T11369] ? clear_bhb_loop+0x60/0xb0 [ 258.705407][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.705424][T11369] RIP: 0033:0x7f4ce918d97f [ 258.705440][T11369] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 258.705454][T11369] RSP: 002b:00007f4cea07b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 258.705472][T11369] RAX: ffffffffffffffda RBX: 00007f4ce93e5fa0 RCX: 00007f4ce918d97f [ 258.705485][T11369] RDX: 000000000000002e RSI: 00002000000000c0 RDI: 00000000000000c8 [ 258.705513][T11369] RBP: 00007f4cea07b090 R08: 0000000000000000 R09: 0000000000000000 [ 258.705525][T11369] R10: 000000000000002e R11: 0000000000000293 R12: 0000000000000001 [ 258.705536][T11369] R13: 00007f4ce93e6038 R14: 00007f4ce93e5fa0 R15: 00007ffe9aebbd18 [ 258.705568][T11369] [ 259.268745][T11376] FAULT_INJECTION: forcing a failure. [ 259.268745][T11376] name failslab, interval 1, probability 0, space 0, times 0 [ 259.298955][T11377] netlink: 'syz.3.1635': attribute type 1 has an invalid length. [ 259.318099][T11379] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1634'. [ 259.355740][T11376] CPU: 1 UID: 0 PID: 11376 Comm: syz.4.1633 Not tainted syzkaller #0 PREEMPT(full) [ 259.355766][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.355777][T11376] Call Trace: [ 259.355785][T11376] [ 259.355792][T11376] dump_stack_lvl+0x189/0x250 [ 259.355816][T11376] ? __pfx____ratelimit+0x10/0x10 [ 259.355842][T11376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.355861][T11376] ? __pfx__printk+0x10/0x10 [ 259.355882][T11376] ? __pfx___might_resched+0x10/0x10 [ 259.355905][T11376] ? fs_reclaim_acquire+0x7d/0x100 [ 259.355931][T11376] should_fail_ex+0x414/0x560 [ 259.355962][T11376] should_failslab+0xa8/0x100 [ 259.355986][T11376] __kmalloc_cache_noprof+0x6f/0x6f0 [ 259.356005][T11376] ? kasan_save_track+0x4f/0x80 [ 259.356022][T11376] ? rtnl_newlink+0xfb/0x1c80 [ 259.356043][T11376] ? __kasan_save_free_info+0x46/0x50 [ 259.356065][T11376] ? __kasan_slab_free+0x5c/0x80 [ 259.356083][T11376] ? kmem_cache_free+0x19b/0x690 [ 259.356105][T11376] rtnl_newlink+0xfb/0x1c80 [ 259.356126][T11376] ? ____sys_sendmsg+0x505/0x830 [ 259.356141][T11376] ? ___sys_sendmsg+0x21f/0x2a0 [ 259.356155][T11376] ? __x64_sys_sendmsg+0x19b/0x260 [ 259.356170][T11376] ? do_syscall_64+0xfa/0xfa0 [ 259.356187][T11376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.356214][T11376] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.356259][T11376] ? kasan_quarantine_put+0xdd/0x220 [ 259.356277][T11376] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.356301][T11376] ? nlmon_xmit+0xb0/0x100 [ 259.356320][T11376] ? kmem_cache_free+0x19b/0x690 [ 259.356348][T11376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 259.356371][T11376] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.356389][T11376] ? __local_bh_enable_ip+0x12d/0x1c0 [ 259.356412][T11376] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 259.356438][T11376] ? __dev_queue_xmit+0x284/0x3740 [ 259.356459][T11376] ? __dev_queue_xmit+0x284/0x3740 [ 259.356477][T11376] ? __dev_queue_xmit+0x1bfb/0x3740 [ 259.356504][T11376] ? __lock_acquire+0xab9/0xd20 [ 259.356550][T11376] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.356579][T11376] rtnetlink_rcv_msg+0x7cf/0xb70 [ 259.356606][T11376] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 259.356627][T11376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.356648][T11376] ? ref_tracker_free+0x63a/0x7d0 [ 259.356667][T11376] ? __asan_memcpy+0x40/0x70 [ 259.356684][T11376] ? __pfx_ref_tracker_free+0x10/0x10 [ 259.356700][T11376] ? __skb_clone+0x63/0x7a0 [ 259.356727][T11376] netlink_rcv_skb+0x208/0x470 [ 259.356755][T11376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.356780][T11376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.356816][T11376] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.356847][T11376] netlink_unicast+0x82f/0x9e0 [ 259.356873][T11376] ? __pfx_netlink_unicast+0x10/0x10 [ 259.356895][T11376] ? netlink_sendmsg+0x642/0xb30 [ 259.356915][T11376] ? skb_put+0x11b/0x210 [ 259.356942][T11376] netlink_sendmsg+0x805/0xb30 [ 259.356976][T11376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.357003][T11376] ? aa_sock_msg_perm+0xf1/0x1d0 [ 259.357025][T11376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.357046][T11376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.357071][T11376] __sock_sendmsg+0x21c/0x270 [ 259.357095][T11376] ____sys_sendmsg+0x505/0x830 [ 259.357118][T11376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.357153][T11376] ? import_iovec+0x74/0xa0 [ 259.357175][T11376] ___sys_sendmsg+0x21f/0x2a0 [ 259.357194][T11376] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.357243][T11376] ? __fget_files+0x2a/0x420 [ 259.357263][T11376] ? __fget_files+0x3a0/0x420 [ 259.357290][T11376] __x64_sys_sendmsg+0x19b/0x260 [ 259.357311][T11376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.357338][T11376] ? __pfx_ksys_write+0x10/0x10 [ 259.357361][T11376] ? do_syscall_64+0xbe/0xfa0 [ 259.357382][T11376] do_syscall_64+0xfa/0xfa0 [ 259.357398][T11376] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.357415][T11376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.357433][T11376] ? clear_bhb_loop+0x60/0xb0 [ 259.357454][T11376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.357471][T11376] RIP: 0033:0x7f7d4798eec9 [ 259.357487][T11376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.357503][T11376] RSP: 002b:00007f7d48773038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.357523][T11376] RAX: ffffffffffffffda RBX: 00007f7d47be5fa0 RCX: 00007f7d4798eec9 [ 259.357537][T11376] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003 [ 259.357548][T11376] RBP: 00007f7d48773090 R08: 0000000000000000 R09: 0000000000000000 [ 259.357559][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.357575][T11376] R13: 00007f7d47be6038 R14: 00007f7d47be5fa0 R15: 00007fffb46bc728 [ 259.357606][T11376] [ 259.814036][T11377] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1635'. [ 259.823323][T11377] NCSI netlink: No device for ifindex 0 [ 260.034913][T11388] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1640'. [ 260.200093][T11386] wlan1 speed is unknown, defaulting to 1000 [ 261.042484][T11435] FAULT_INJECTION: forcing a failure. [ 261.042484][T11435] name failslab, interval 1, probability 0, space 0, times 0 [ 261.080073][T11435] CPU: 0 UID: 0 PID: 11435 Comm: syz.4.1651 Not tainted syzkaller #0 PREEMPT(full) [ 261.080097][T11435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.080107][T11435] Call Trace: [ 261.080115][T11435] [ 261.080123][T11435] dump_stack_lvl+0x189/0x250 [ 261.080147][T11435] ? __pfx____ratelimit+0x10/0x10 [ 261.080182][T11435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.080197][T11435] ? __pfx__printk+0x10/0x10 [ 261.080217][T11435] ? __pfx___might_resched+0x10/0x10 [ 261.080234][T11435] ? fs_reclaim_acquire+0x7d/0x100 [ 261.080255][T11435] should_fail_ex+0x414/0x560 [ 261.080280][T11435] should_failslab+0xa8/0x100 [ 261.080299][T11435] __kmalloc_noprof+0xcb/0x7f0 [ 261.080314][T11435] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 261.080330][T11435] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 261.080354][T11435] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 261.080376][T11435] genl_family_rcv_msg_doit+0xb8/0x300 [ 261.080400][T11435] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 261.080424][T11435] ? apparmor_capable+0x137/0x1b0 [ 261.080444][T11435] ? bpf_lsm_capable+0x9/0x20 [ 261.080456][T11435] ? security_capable+0x7e/0x2e0 [ 261.080483][T11435] genl_rcv_msg+0x60e/0x790 [ 261.080503][T11435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.080517][T11435] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 261.080535][T11435] ? __pfx_nl80211_set_station+0x10/0x10 [ 261.080553][T11435] ? __pfx_nl80211_post_doit+0x10/0x10 [ 261.080572][T11435] ? __asan_memcpy+0x40/0x70 [ 261.080585][T11435] ? __pfx_ref_tracker_free+0x10/0x10 [ 261.080606][T11435] netlink_rcv_skb+0x208/0x470 [ 261.080624][T11435] ? __lock_acquire+0xab9/0xd20 [ 261.080642][T11435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.080658][T11435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.080692][T11435] ? down_read+0x1ad/0x2e0 [ 261.080709][T11435] genl_rcv+0x28/0x40 [ 261.080724][T11435] netlink_unicast+0x82f/0x9e0 [ 261.080748][T11435] ? __pfx_netlink_unicast+0x10/0x10 [ 261.080767][T11435] ? netlink_sendmsg+0x642/0xb30 [ 261.080785][T11435] ? skb_put+0x11b/0x210 [ 261.080808][T11435] netlink_sendmsg+0x805/0xb30 [ 261.080834][T11435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.080856][T11435] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.080873][T11435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.080890][T11435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.080909][T11435] __sock_sendmsg+0x21c/0x270 [ 261.080930][T11435] ____sys_sendmsg+0x505/0x830 [ 261.080948][T11435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.080976][T11435] ? import_iovec+0x74/0xa0 [ 261.081001][T11435] ___sys_sendmsg+0x21f/0x2a0 [ 261.081016][T11435] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.081057][T11435] ? __fget_files+0x2a/0x420 [ 261.081074][T11435] ? __fget_files+0x3a0/0x420 [ 261.081098][T11435] __x64_sys_sendmsg+0x19b/0x260 [ 261.081114][T11435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.081135][T11435] ? __pfx_ksys_write+0x10/0x10 [ 261.081153][T11435] ? do_syscall_64+0xbe/0xfa0 [ 261.081170][T11435] do_syscall_64+0xfa/0xfa0 [ 261.081182][T11435] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.081197][T11435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.081210][T11435] ? clear_bhb_loop+0x60/0xb0 [ 261.081227][T11435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.081241][T11435] RIP: 0033:0x7f7d4798eec9 [ 261.081254][T11435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.081265][T11435] RSP: 002b:00007f7d48773038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.081281][T11435] RAX: ffffffffffffffda RBX: 00007f7d47be5fa0 RCX: 00007f7d4798eec9 [ 261.081292][T11435] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 261.081309][T11435] RBP: 00007f7d48773090 R08: 0000000000000000 R09: 0000000000000000 [ 261.081318][T11435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.081326][T11435] R13: 00007f7d47be6038 R14: 00007f7d47be5fa0 R15: 00007fffb46bc728 [ 261.081350][T11435] [ 261.544421][T11444] FAULT_INJECTION: forcing a failure. [ 261.544421][T11444] name failslab, interval 1, probability 0, space 0, times 0 [ 261.559339][T11444] CPU: 0 UID: 0 PID: 11444 Comm: syz.4.1653 Not tainted syzkaller #0 PREEMPT(full) [ 261.559365][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.559375][T11444] Call Trace: [ 261.559383][T11444] [ 261.559391][T11444] dump_stack_lvl+0x189/0x250 [ 261.559415][T11444] ? __pfx____ratelimit+0x10/0x10 [ 261.559438][T11444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.559454][T11444] ? __pfx__printk+0x10/0x10 [ 261.559472][T11444] ? __pfx___might_resched+0x10/0x10 [ 261.559494][T11444] ? fs_reclaim_acquire+0x7d/0x100 [ 261.559518][T11444] should_fail_ex+0x414/0x560 [ 261.559549][T11444] should_failslab+0xa8/0x100 [ 261.559571][T11444] kmem_cache_alloc_noprof+0x74/0x6e0 [ 261.559588][T11444] ? skb_clone+0x212/0x3a0 [ 261.559609][T11444] skb_clone+0x212/0x3a0 [ 261.559623][T11444] ? nfnetlink_rcv+0x4ba/0x2590 [ 261.559647][T11444] nfnetlink_rcv+0x4ec/0x2590 [ 261.559667][T11444] ? __dev_queue_xmit+0x284/0x3740 [ 261.559692][T11444] ? __dev_queue_xmit+0x1bfb/0x3740 [ 261.559723][T11444] ? __dev_queue_xmit+0x284/0x3740 [ 261.559747][T11444] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 261.559782][T11444] ? ref_tracker_free+0x63a/0x7d0 [ 261.559800][T11444] ? __asan_memcpy+0x40/0x70 [ 261.559815][T11444] ? __pfx_ref_tracker_free+0x10/0x10 [ 261.559829][T11444] ? __skb_clone+0x63/0x7a0 [ 261.559850][T11444] ? __skb_clone+0x483/0x7a0 [ 261.559873][T11444] ? skb_clone+0x246/0x3a0 [ 261.559893][T11444] ? __netlink_deliver_tap+0x807/0x850 [ 261.559916][T11444] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.559954][T11444] netlink_unicast+0x82f/0x9e0 [ 261.559982][T11444] ? __pfx_netlink_unicast+0x10/0x10 [ 261.560006][T11444] ? netlink_sendmsg+0x642/0xb30 [ 261.560028][T11444] ? skb_put+0x11b/0x210 [ 261.560054][T11444] netlink_sendmsg+0x805/0xb30 [ 261.560083][T11444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.560108][T11444] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.560129][T11444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.560150][T11444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.560174][T11444] __sock_sendmsg+0x21c/0x270 [ 261.560197][T11444] ____sys_sendmsg+0x505/0x830 [ 261.560219][T11444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.560254][T11444] ? import_iovec+0x74/0xa0 [ 261.560279][T11444] ___sys_sendmsg+0x21f/0x2a0 [ 261.560298][T11444] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.560350][T11444] ? __fget_files+0x2a/0x420 [ 261.560370][T11444] ? __fget_files+0x3a0/0x420 [ 261.560401][T11444] __x64_sys_sendmsg+0x19b/0x260 [ 261.560418][T11444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.560444][T11444] ? __pfx_ksys_write+0x10/0x10 [ 261.560466][T11444] ? do_syscall_64+0xbe/0xfa0 [ 261.560488][T11444] do_syscall_64+0xfa/0xfa0 [ 261.560503][T11444] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.560519][T11444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.560536][T11444] ? clear_bhb_loop+0x60/0xb0 [ 261.560557][T11444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.560574][T11444] RIP: 0033:0x7f7d4798eec9 [ 261.560589][T11444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.560602][T11444] RSP: 002b:00007f7d48773038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.560620][T11444] RAX: ffffffffffffffda RBX: 00007f7d47be5fa0 RCX: 00007f7d4798eec9 [ 261.560632][T11444] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 261.560641][T11444] RBP: 00007f7d48773090 R08: 0000000000000000 R09: 0000000000000000 [ 261.560651][T11444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.560661][T11444] R13: 00007f7d47be6038 R14: 00007f7d47be5fa0 R15: 00007fffb46bc728 [ 261.560696][T11444] [ 262.467160][ T30] audit: type=1804 audit(1760689538.208:86): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1663" name="/newroot/332/memory.events" dev="tmpfs" ino=1711 res=1 errno=0 [ 262.559672][ T30] audit: type=1800 audit(1760689538.208:87): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1663" name="memory.events" dev="tmpfs" ino=1711 res=0 errno=0 [ 262.776543][T11475] wlan1 speed is unknown, defaulting to 1000 [ 262.787998][T11478] netlink: 'syz.1.1665': attribute type 1 has an invalid length. [ 262.796304][T11478] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1665'. [ 262.815054][T11478] NCSI netlink: No device for ifindex 0 [ 262.899539][T11483] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 262.909368][T11483] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1667'. [ 262.919181][T11483] NCSI netlink: No device for ifindex 0 [ 262.975603][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 263.105940][T11487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1669'. [ 263.116406][T11487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1669'. [ 263.573411][T11501] FAULT_INJECTION: forcing a failure. [ 263.573411][T11501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.598397][T11501] CPU: 0 UID: 0 PID: 11501 Comm: syz.4.1676 Not tainted syzkaller #0 PREEMPT(full) [ 263.598421][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.598432][T11501] Call Trace: [ 263.598440][T11501] [ 263.598448][T11501] dump_stack_lvl+0x189/0x250 [ 263.598471][T11501] ? __pfx____ratelimit+0x10/0x10 [ 263.598497][T11501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.598516][T11501] ? __pfx__printk+0x10/0x10 [ 263.598532][T11501] ? __might_fault+0xb0/0x130 [ 263.598559][T11501] should_fail_ex+0x414/0x560 [ 263.598588][T11501] _copy_from_user+0x2d/0xb0 [ 263.598611][T11501] ____sys_sendmsg+0x2fe/0x830 [ 263.598634][T11501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.598669][T11501] ? import_iovec+0x74/0xa0 [ 263.598694][T11501] ___sys_sendmsg+0x21f/0x2a0 [ 263.598714][T11501] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.598768][T11501] ? __fget_files+0x2a/0x420 [ 263.598787][T11501] ? __fget_files+0x3a0/0x420 [ 263.598818][T11501] __x64_sys_sendmsg+0x19b/0x260 [ 263.598838][T11501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.598865][T11501] ? __pfx_ksys_write+0x10/0x10 [ 263.598888][T11501] ? do_syscall_64+0xbe/0xfa0 [ 263.598910][T11501] do_syscall_64+0xfa/0xfa0 [ 263.598926][T11501] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.598943][T11501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.598960][T11501] ? clear_bhb_loop+0x60/0xb0 [ 263.598982][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.598999][T11501] RIP: 0033:0x7f7d4798eec9 [ 263.599015][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.599030][T11501] RSP: 002b:00007f7d48773038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.599050][T11501] RAX: ffffffffffffffda RBX: 00007f7d47be5fa0 RCX: 00007f7d4798eec9 [ 263.599063][T11501] RDX: 0000000004004840 RSI: 0000200000000880 RDI: 0000000000000003 [ 263.599075][T11501] RBP: 00007f7d48773090 R08: 0000000000000000 R09: 0000000000000000 [ 263.599086][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.599097][T11501] R13: 00007f7d47be6038 R14: 00007f7d47be5fa0 R15: 00007fffb46bc728 [ 263.599128][T11501] [ 264.011683][T11509] wlan1 speed is unknown, defaulting to 1000 [ 264.217672][T11522] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1685'. [ 264.488164][T11514] wlan1 speed is unknown, defaulting to 1000 [ 264.607370][T11534] bond2: option mode: unable to set because the bond device has slaves [ 264.673641][T11534] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 264.768107][T11539] team0: Port device dummy0 removed [ 264.830829][T11544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1692'. [ 264.841947][T11539] bridge_slave_0: left allmulticast mode [ 264.848198][T11539] bridge_slave_0: left promiscuous mode [ 264.855178][T11539] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.872032][T11539] bridge_slave_1: left allmulticast mode [ 264.878022][T11539] bridge_slave_1: left promiscuous mode [ 264.890164][T11539] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.903997][T11539] bond0: (slave bond_slave_0): Releasing backup interface [ 264.913116][T11539] bond_slave_0: left allmulticast mode [ 264.920475][T11539] bond_slave_0: left promiscuous mode [ 264.933715][T11539] bond0: (slave bond_slave_1): Releasing backup interface [ 264.944722][T11539] bond_slave_1: left allmulticast mode [ 264.950452][T11539] bond_slave_1: left promiscuous mode [ 264.963949][T11539] team0: Port device team_slave_1 removed [ 264.971080][T11539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.978927][T11539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.988554][T11539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.996184][T11539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.005745][T11539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.143878][T11548] tipc: Enabled bearer , priority 0 [ 265.151902][T11542] syzkaller0: entered promiscuous mode [ 265.159029][T11551] FAULT_INJECTION: forcing a failure. [ 265.159029][T11551] name failslab, interval 1, probability 0, space 0, times 0 [ 265.173407][T11542] syzkaller0: entered allmulticast mode [ 265.183174][ T1008] bond2: (slave macvlan1): link status definitely down, disabling slave [ 265.193242][T11551] CPU: 1 UID: 0 PID: 11551 Comm: syz.4.1694 Not tainted syzkaller #0 PREEMPT(full) [ 265.193263][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.193274][T11551] Call Trace: [ 265.193281][T11551] [ 265.193289][T11551] dump_stack_lvl+0x189/0x250 [ 265.193313][T11551] ? __pfx____ratelimit+0x10/0x10 [ 265.193339][T11551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.193356][T11551] ? __pfx__printk+0x10/0x10 [ 265.193380][T11551] ? __pfx___might_resched+0x10/0x10 [ 265.193400][T11551] ? fs_reclaim_acquire+0x7d/0x100 [ 265.193424][T11551] should_fail_ex+0x414/0x560 [ 265.193452][T11551] should_failslab+0xa8/0x100 [ 265.193475][T11551] __kmalloc_noprof+0xcb/0x7f0 [ 265.193493][T11551] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 265.193510][T11551] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 265.193536][T11551] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 265.193560][T11551] genl_family_rcv_msg_doit+0xb8/0x300 [ 265.193583][T11551] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 265.193607][T11551] ? apparmor_capable+0x137/0x1b0 [ 265.193629][T11551] ? bpf_lsm_capable+0x9/0x20 [ 265.193644][T11551] ? security_capable+0x7e/0x2e0 [ 265.193667][T11551] genl_rcv_msg+0x60e/0x790 [ 265.193691][T11551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.193706][T11551] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 265.193726][T11551] ? __pfx_nl80211_connect+0x10/0x10 [ 265.193743][T11551] ? __pfx_nl80211_post_doit+0x10/0x10 [ 265.193765][T11551] ? __asan_memcpy+0x40/0x70 [ 265.193781][T11551] ? __pfx_ref_tracker_free+0x10/0x10 [ 265.193804][T11551] netlink_rcv_skb+0x208/0x470 [ 265.193821][T11551] ? __lock_acquire+0xab9/0xd20 [ 265.193839][T11551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.193855][T11551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.193887][T11551] ? down_read+0x1ad/0x2e0 [ 265.193904][T11551] genl_rcv+0x28/0x40 [ 265.193917][T11551] netlink_unicast+0x82f/0x9e0 [ 265.193941][T11551] ? __pfx_netlink_unicast+0x10/0x10 [ 265.193959][T11551] ? netlink_sendmsg+0x642/0xb30 [ 265.193976][T11551] ? skb_put+0x11b/0x210 [ 265.193998][T11551] netlink_sendmsg+0x805/0xb30 [ 265.194024][T11551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.194045][T11551] ? aa_sock_msg_perm+0xf1/0x1d0 [ 265.194061][T11551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.194078][T11551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.194097][T11551] __sock_sendmsg+0x21c/0x270 [ 265.194122][T11551] ____sys_sendmsg+0x505/0x830 [ 265.194140][T11551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.194167][T11551] ? import_iovec+0x74/0xa0 [ 265.194187][T11551] ___sys_sendmsg+0x21f/0x2a0 [ 265.194202][T11551] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.194242][T11551] ? __fget_files+0x2a/0x420 [ 265.194257][T11551] ? __fget_files+0x3a0/0x420 [ 265.194281][T11551] __x64_sys_sendmsg+0x19b/0x260 [ 265.194296][T11551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.194316][T11551] ? __pfx_ksys_write+0x10/0x10 [ 265.194334][T11551] ? do_syscall_64+0xbe/0xfa0 [ 265.194350][T11551] do_syscall_64+0xfa/0xfa0 [ 265.194363][T11551] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.194376][T11551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.194389][T11551] ? clear_bhb_loop+0x60/0xb0 [ 265.194406][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.194418][T11551] RIP: 0033:0x7f7d4798eec9 [ 265.194431][T11551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.194443][T11551] RSP: 002b:00007f7d48773038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.194457][T11551] RAX: ffffffffffffffda RBX: 00007f7d47be5fa0 RCX: 00007f7d4798eec9 [ 265.194468][T11551] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 265.194476][T11551] RBP: 00007f7d48773090 R08: 0000000000000000 R09: 0000000000000000 [ 265.194485][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.194492][T11551] R13: 00007f7d47be6038 R14: 00007f7d47be5fa0 R15: 00007fffb46bc728 [ 265.194516][T11551] [ 265.671042][T11545] tipc: Resetting bearer [ 265.704189][ T30] audit: type=1107 audit(1760689541.458:88): pid=11564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 265.705958][T11545] tipc: Disabling bearer [ 265.802890][T11567] FAULT_INJECTION: forcing a failure. [ 265.802890][T11567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.849556][T11567] CPU: 1 UID: 0 PID: 11567 Comm: syz.0.1697 Not tainted syzkaller #0 PREEMPT(full) [ 265.849581][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.849592][T11567] Call Trace: [ 265.849599][T11567] [ 265.849607][T11567] dump_stack_lvl+0x189/0x250 [ 265.849631][T11567] ? __pfx____ratelimit+0x10/0x10 [ 265.849657][T11567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.849675][T11567] ? __pfx__printk+0x10/0x10 [ 265.849705][T11567] should_fail_ex+0x414/0x560 [ 265.849736][T11567] _copy_to_user+0x31/0xb0 [ 265.849760][T11567] simple_read_from_buffer+0xe1/0x170 [ 265.849785][T11567] proc_fail_nth_read+0x1b3/0x220 [ 265.849814][T11567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.849842][T11567] ? rw_verify_area+0x2a6/0x4d0 [ 265.849859][T11567] ? __lock_acquire+0xab9/0xd20 [ 265.849878][T11567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.849905][T11567] vfs_read+0x200/0xa30 [ 265.849922][T11567] ? fdget_pos+0x247/0x320 [ 265.849946][T11567] ? __pfx___mutex_lock+0x10/0x10 [ 265.849966][T11567] ? __pfx_vfs_read+0x10/0x10 [ 265.849985][T11567] ? __fget_files+0x2a/0x420 [ 265.850010][T11567] ? __fget_files+0x3a0/0x420 [ 265.850028][T11567] ? __fget_files+0x2a/0x420 [ 265.850058][T11567] ksys_read+0x145/0x250 [ 265.850079][T11567] ? __pfx_ksys_read+0x10/0x10 [ 265.850102][T11567] ? do_syscall_64+0xbe/0xfa0 [ 265.850131][T11567] do_syscall_64+0xfa/0xfa0 [ 265.850146][T11567] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.850163][T11567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.850181][T11567] ? clear_bhb_loop+0x60/0xb0 [ 265.850202][T11567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.850218][T11567] RIP: 0033:0x7f8cd538d8dc [ 265.850234][T11567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 265.850249][T11567] RSP: 002b:00007f8cd61af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.850269][T11567] RAX: ffffffffffffffda RBX: 00007f8cd55e6180 RCX: 00007f8cd538d8dc [ 265.850282][T11567] RDX: 000000000000000f RSI: 00007f8cd61af0a0 RDI: 0000000000000005 [ 265.850293][T11567] RBP: 00007f8cd61af090 R08: 0000000000000000 R09: 0000000000000000 [ 265.850305][T11567] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 265.850315][T11567] R13: 00007f8cd55e6218 R14: 00007f8cd55e6180 R15: 00007fff1ba25e68 [ 265.850347][T11567] [ 266.101478][ T6099] bond2: (slave macvlan1): link status definitely down, disabling slave [ 266.720309][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1706'. [ 266.778467][T11592] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1707'. [ 266.839219][T11592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 267.114664][ T30] audit: type=1107 audit(1760689542.868:89): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 267.529874][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1719'. [ 267.765598][T11620] netlink: 'syz.2.1718': attribute type 10 has an invalid length. [ 267.880059][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1725'. [ 269.659988][T11651] wlan1 speed is unknown, defaulting to 1000 [ 270.263625][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1736'. [ 270.613961][T11687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1739'. [ 271.031037][T11697] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1744'. [ 271.204934][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1748'. [ 271.420973][ T5834] Bluetooth: hci4: link tx timeout [ 271.426248][ T5834] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 271.697053][T11738] veth0_to_bridge: entered promiscuous mode [ 271.833912][T11744] FAULT_INJECTION: forcing a failure. [ 271.833912][T11744] name failslab, interval 1, probability 0, space 0, times 0 [ 271.863211][T11744] CPU: 1 UID: 0 PID: 11744 Comm: syz.0.1761 Not tainted syzkaller #0 PREEMPT(full) [ 271.863237][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.863249][T11744] Call Trace: [ 271.863256][T11744] [ 271.863264][T11744] dump_stack_lvl+0x189/0x250 [ 271.863291][T11744] ? __pfx____ratelimit+0x10/0x10 [ 271.863317][T11744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.863335][T11744] ? __pfx__printk+0x10/0x10 [ 271.863358][T11744] ? __pfx___might_resched+0x10/0x10 [ 271.863386][T11744] should_fail_ex+0x414/0x560 [ 271.863416][T11744] should_failslab+0xa8/0x100 [ 271.863439][T11744] kmem_cache_alloc_node_noprof+0x77/0x710 [ 271.863460][T11744] ? __alloc_skb+0x112/0x2d0 [ 271.863489][T11744] __alloc_skb+0x112/0x2d0 [ 271.863517][T11744] netlink_ack+0x146/0xa50 [ 271.863537][T11744] ? ref_tracker_free+0x63a/0x7d0 [ 271.863554][T11744] ? __asan_memcpy+0x40/0x70 [ 271.863571][T11744] ? __pfx_ref_tracker_free+0x10/0x10 [ 271.863586][T11744] ? __skb_clone+0x63/0x7a0 [ 271.863612][T11744] netlink_rcv_skb+0x28c/0x470 [ 271.863636][T11744] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.863662][T11744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.863696][T11744] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.863726][T11744] netlink_unicast+0x82f/0x9e0 [ 271.863755][T11744] ? __pfx_netlink_unicast+0x10/0x10 [ 271.863778][T11744] ? netlink_sendmsg+0x642/0xb30 [ 271.863798][T11744] ? skb_put+0x11b/0x210 [ 271.863825][T11744] netlink_sendmsg+0x805/0xb30 [ 271.863867][T11744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.863895][T11744] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.863917][T11744] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.863938][T11744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.863962][T11744] __sock_sendmsg+0x21c/0x270 [ 271.863987][T11744] ____sys_sendmsg+0x52d/0x830 [ 271.864010][T11744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.864045][T11744] ? import_iovec+0x74/0xa0 [ 271.864071][T11744] ___sys_sendmsg+0x21f/0x2a0 [ 271.864091][T11744] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.864141][T11744] ? __fget_files+0x2a/0x420 [ 271.864161][T11744] ? __fget_files+0x3a0/0x420 [ 271.864192][T11744] __sys_sendmmsg+0x227/0x430 [ 271.864215][T11744] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.864241][T11744] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.864279][T11744] ? ksys_write+0x22a/0x250 [ 271.864300][T11744] ? __pfx_ksys_write+0x10/0x10 [ 271.864324][T11744] __x64_sys_sendmmsg+0xa0/0xc0 [ 271.864344][T11744] do_syscall_64+0xfa/0xfa0 [ 271.864360][T11744] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.864378][T11744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.864396][T11744] ? clear_bhb_loop+0x60/0xb0 [ 271.864437][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.864453][T11744] RIP: 0033:0x7f8cd538eec9 [ 271.864469][T11744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.864485][T11744] RSP: 002b:00007f8cd61f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.864505][T11744] RAX: ffffffffffffffda RBX: 00007f8cd55e5fa0 RCX: 00007f8cd538eec9 [ 271.864518][T11744] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 271.864530][T11744] RBP: 00007f8cd61f1090 R08: 0000000000000000 R09: 0000000000000000 [ 271.864541][T11744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.864551][T11744] R13: 00007f8cd55e6038 R14: 00007f8cd55e5fa0 R15: 00007fff1ba25e68 [ 271.864581][T11744] [ 272.226357][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'. [ 272.338463][T11737] veth0_to_bridge: left promiscuous mode [ 273.330870][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 273.456122][T11799] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1777'. [ 273.509001][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 273.959778][T11828] FAULT_INJECTION: forcing a failure. [ 273.959778][T11828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.973266][T11828] CPU: 0 UID: 0 PID: 11828 Comm: syz.2.1787 Not tainted syzkaller #0 PREEMPT(full) [ 273.973292][T11828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.973302][T11828] Call Trace: [ 273.973310][T11828] [ 273.973319][T11828] dump_stack_lvl+0x189/0x250 [ 273.973342][T11828] ? __pfx____ratelimit+0x10/0x10 [ 273.973377][T11828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.973395][T11828] ? __pfx__printk+0x10/0x10 [ 273.973427][T11828] should_fail_ex+0x414/0x560 [ 273.973458][T11828] _copy_to_user+0x31/0xb0 [ 273.973483][T11828] simple_read_from_buffer+0xe1/0x170 [ 273.973509][T11828] proc_fail_nth_read+0x1b3/0x220 [ 273.973538][T11828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.973566][T11828] ? rw_verify_area+0x2a6/0x4d0 [ 273.973583][T11828] ? __lock_acquire+0xab9/0xd20 [ 273.973602][T11828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.973629][T11828] vfs_read+0x200/0xa30 [ 273.973646][T11828] ? fdget_pos+0x247/0x320 [ 273.973671][T11828] ? __pfx___mutex_lock+0x10/0x10 [ 273.973691][T11828] ? __pfx_vfs_read+0x10/0x10 [ 273.973711][T11828] ? __fget_files+0x2a/0x420 [ 273.973736][T11828] ? __fget_files+0x3a0/0x420 [ 273.973755][T11828] ? __fget_files+0x2a/0x420 [ 273.973785][T11828] ksys_read+0x145/0x250 [ 273.973806][T11828] ? __pfx_ksys_read+0x10/0x10 [ 273.973829][T11828] ? do_syscall_64+0xbe/0xfa0 [ 273.973851][T11828] do_syscall_64+0xfa/0xfa0 [ 273.973868][T11828] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.973885][T11828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.973903][T11828] ? clear_bhb_loop+0x60/0xb0 [ 273.973925][T11828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.973942][T11828] RIP: 0033:0x7f0bea78d8dc [ 273.973957][T11828] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.973970][T11828] RSP: 002b:00007f0beb6af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.973989][T11828] RAX: ffffffffffffffda RBX: 00007f0bea9e5fa0 RCX: 00007f0bea78d8dc [ 273.974000][T11828] RDX: 000000000000000f RSI: 00007f0beb6af0a0 RDI: 0000000000000004 [ 273.974009][T11828] RBP: 00007f0beb6af090 R08: 0000000000000000 R09: 0000000000000000 [ 273.974019][T11828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.974028][T11828] R13: 00007f0bea9e6038 R14: 00007f0bea9e5fa0 R15: 00007ffc634abb08 [ 273.974056][T11828] [ 274.103217][T11835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1789'. [ 274.261175][T11835] nbd: must specify at least one socket [ 274.580187][T11815] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.586379][T11815] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 274.624123][T11815] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.640488][T11815] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 274.680810][T11815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.687975][T11815] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 274.784287][T11857] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1796'. [ 274.806192][ T30] audit: type=1804 audit(1760689550.558:90): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1796" name="/newroot/355/memory.events" dev="tmpfs" ino=1829 res=1 errno=0 [ 274.875926][ T30] audit: type=1800 audit(1760689550.558:91): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1796" name="memory.events" dev="tmpfs" ino=1829 res=0 errno=0 [ 275.044011][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 275.074292][T11865] veth1_to_bond: left promiscuous mode [ 275.292216][T11872] wlan1 speed is unknown, defaulting to 1000 [ 275.300499][T11875] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 275.321880][T11875] __nla_validate_parse: 1 callbacks suppressed [ 275.321896][T11875] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1802'. [ 275.375941][T11874] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20003 [ 275.820738][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 275.830093][T11815] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.837617][T11815] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 275.909150][T11903] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1812'. [ 276.221195][T11915] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1815'. [ 276.278672][ T30] audit: type=1804 audit(1760689552.028:92): pid=11915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1815" name="/newroot/363/memory.events" dev="tmpfs" ino=1871 res=1 errno=0 [ 276.339165][ T30] audit: type=1800 audit(1760689552.038:93): pid=11915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1815" name="memory.events" dev="tmpfs" ino=1871 res=0 errno=0 [ 276.476038][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1817'. [ 277.038034][T11942] wlan1 speed is unknown, defaulting to 1000 [ 277.482189][T11955] syzkaller0: entered promiscuous mode [ 277.487861][T11955] syzkaller0: entered allmulticast mode [ 277.842992][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1831'. [ 278.813871][T11962] wlan1 speed is unknown, defaulting to 1000 [ 279.269857][T11979] wlan1 speed is unknown, defaulting to 1000 [ 279.657185][T11996] FAULT_INJECTION: forcing a failure. [ 279.657185][T11996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.856907][T11996] CPU: 0 UID: 0 PID: 11996 Comm: syz.1.1837 Not tainted syzkaller #0 PREEMPT(full) [ 279.856933][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.856943][T11996] Call Trace: [ 279.856951][T11996] [ 279.856958][T11996] dump_stack_lvl+0x189/0x250 [ 279.856982][T11996] ? __pfx____ratelimit+0x10/0x10 [ 279.857008][T11996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.857026][T11996] ? __pfx__printk+0x10/0x10 [ 279.857059][T11996] should_fail_ex+0x414/0x560 [ 279.857093][T11996] _copy_from_user+0x2d/0xb0 [ 279.857118][T11996] bpf_test_init+0xd8/0x150 [ 279.857145][T11996] bpf_prog_test_run_xdp+0x49e/0x10e0 [ 279.857191][T11996] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 279.857220][T11996] ? __fget_files+0x2a/0x420 [ 279.857247][T11996] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 279.857271][T11996] bpf_prog_test_run+0x2c7/0x340 [ 279.857299][T11996] __sys_bpf+0x562/0x860 [ 279.857322][T11996] ? __pfx___sys_bpf+0x10/0x10 [ 279.857359][T11996] ? ksys_write+0x22a/0x250 [ 279.857381][T11996] ? __pfx_ksys_write+0x10/0x10 [ 279.857406][T11996] __x64_sys_bpf+0x7c/0x90 [ 279.857427][T11996] do_syscall_64+0xfa/0xfa0 [ 279.857444][T11996] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.857461][T11996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.857479][T11996] ? clear_bhb_loop+0x60/0xb0 [ 279.857501][T11996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.857518][T11996] RIP: 0033:0x7fda7658eec9 [ 279.857535][T11996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.857550][T11996] RSP: 002b:00007fda7737b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.857570][T11996] RAX: ffffffffffffffda RBX: 00007fda767e5fa0 RCX: 00007fda7658eec9 [ 279.857583][T11996] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 279.857595][T11996] RBP: 00007fda7737b090 R08: 0000000000000000 R09: 0000000000000000 [ 279.857606][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.857617][T11996] R13: 00007fda767e6038 R14: 00007fda767e5fa0 R15: 00007ffd58ea9dc8 [ 279.857649][T11996] [ 280.733227][T12011] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.1842'. [ 280.899884][T12011] Bluetooth: MGMT ver 1.23 [ 280.992784][T12010] syzkaller0: entered promiscuous mode [ 281.025058][T12010] syzkaller0: entered allmulticast mode [ 282.853950][T12043] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 282.877800][T12045] netlink: 'syz.2.1850': attribute type 1 has an invalid length. [ 282.954135][T12045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.970726][ T30] audit: type=1804 audit(1760689558.728:94): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1851" name="/newroot/365/memory.events" dev="tmpfs" ino=1887 res=1 errno=0 [ 283.004075][ T30] audit: type=1800 audit(1760689558.728:95): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1851" name="memory.events" dev="tmpfs" ino=1887 res=0 errno=0 [ 283.004688][T12049] ipvlan2: entered allmulticast mode [ 283.034999][T12049] bond3: entered allmulticast mode [ 283.146529][T12045] bond3: (slave gretap2): making interface the new active one [ 283.210806][T12045] gretap2: entered allmulticast mode [ 283.222565][T12045] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 283.255160][T12062] wlan1 speed is unknown, defaulting to 1000 [ 283.760130][T12086] FAULT_INJECTION: forcing a failure. [ 283.760130][T12086] name failslab, interval 1, probability 0, space 0, times 0 [ 283.819885][T12086] CPU: 1 UID: 0 PID: 12086 Comm: syz.1.1860 Not tainted syzkaller #0 PREEMPT(full) [ 283.819911][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.819922][T12086] Call Trace: [ 283.819929][T12086] [ 283.819937][T12086] dump_stack_lvl+0x189/0x250 [ 283.819962][T12086] ? __pfx____ratelimit+0x10/0x10 [ 283.819987][T12086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.820006][T12086] ? __pfx__printk+0x10/0x10 [ 283.820028][T12086] ? __lock_acquire+0xab9/0xd20 [ 283.820057][T12086] should_fail_ex+0x414/0x560 [ 283.820089][T12086] should_failslab+0xa8/0x100 [ 283.820113][T12086] kmem_cache_alloc_noprof+0x74/0x6e0 [ 283.820132][T12086] ? skb_clone+0x212/0x3a0 [ 283.820155][T12086] skb_clone+0x212/0x3a0 [ 283.820176][T12086] __netlink_deliver_tap+0x404/0x850 [ 283.820212][T12086] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.820237][T12086] netlink_deliver_tap+0x19c/0x1b0 [ 283.820261][T12086] netlink_unicast+0x7fa/0x9e0 [ 283.820293][T12086] ? __pfx_netlink_unicast+0x10/0x10 [ 283.820316][T12086] ? netlink_sendmsg+0x642/0xb30 [ 283.820338][T12086] ? skb_put+0x11b/0x210 [ 283.820366][T12086] netlink_sendmsg+0x805/0xb30 [ 283.820399][T12086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.820427][T12086] ? aa_sock_msg_perm+0xf1/0x1d0 [ 283.820449][T12086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.820470][T12086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.820495][T12086] __sock_sendmsg+0x21c/0x270 [ 283.820520][T12086] ____sys_sendmsg+0x505/0x830 [ 283.820543][T12086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.820579][T12086] ? import_iovec+0x74/0xa0 [ 283.820604][T12086] ___sys_sendmsg+0x21f/0x2a0 [ 283.820623][T12086] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.820682][T12086] ? __fget_files+0x2a/0x420 [ 283.820702][T12086] ? __fget_files+0x3a0/0x420 [ 283.820734][T12086] __x64_sys_sendmsg+0x19b/0x260 [ 283.820756][T12086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.820784][T12086] ? __pfx_ksys_write+0x10/0x10 [ 283.820808][T12086] ? do_syscall_64+0xbe/0xfa0 [ 283.820828][T12086] do_syscall_64+0xfa/0xfa0 [ 283.820848][T12086] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.820864][T12086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.820880][T12086] ? clear_bhb_loop+0x60/0xb0 [ 283.820901][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.820918][T12086] RIP: 0033:0x7fda7658eec9 [ 283.820934][T12086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.820949][T12086] RSP: 002b:00007fda7737b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.820969][T12086] RAX: ffffffffffffffda RBX: 00007fda767e5fa0 RCX: 00007fda7658eec9 [ 283.820983][T12086] RDX: 0000000000008050 RSI: 0000200000000340 RDI: 0000000000000003 [ 283.820995][T12086] RBP: 00007fda7737b090 R08: 0000000000000000 R09: 0000000000000000 [ 283.821006][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.821018][T12086] R13: 00007fda767e6038 R14: 00007fda767e5fa0 R15: 00007ffd58ea9dc8 [ 283.821051][T12086] [ 283.823836][T12086] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1860'. [ 284.271758][T12089] syzkaller0: entered promiscuous mode [ 284.278880][T12089] syzkaller0: entered allmulticast mode [ 285.838945][T12099] syzkaller1: entered promiscuous mode [ 285.844459][T12099] syzkaller1: entered allmulticast mode [ 285.851237][T12110] wg1: entered promiscuous mode [ 285.856218][T12110] wg1: entered allmulticast mode [ 285.944991][T12119] erspan0: left allmulticast mode [ 285.963801][T12119] bridge0: port 1(erspan0) entered disabled state [ 286.004053][T12119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.034592][T12120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.061105][T12129] l2tp_ppp: sess 2/0: no socket in recv [ 286.078053][ T30] audit: type=1804 audit(1760689561.828:96): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1871" name="/newroot/398/memory.events" dev="tmpfs" ino=2061 res=1 errno=0 [ 286.103983][ T30] audit: type=1800 audit(1760689561.828:97): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1871" name="memory.events" dev="tmpfs" ino=2061 res=0 errno=0 [ 286.292470][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 286.312369][T12138] wlan1 speed is unknown, defaulting to 1000 [ 286.346784][T12148] FAULT_INJECTION: forcing a failure. [ 286.346784][T12148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.361531][T12148] CPU: 1 UID: 0 PID: 12148 Comm: syz.4.1875 Not tainted syzkaller #0 PREEMPT(full) [ 286.361557][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.361568][T12148] Call Trace: [ 286.361576][T12148] [ 286.361584][T12148] dump_stack_lvl+0x189/0x250 [ 286.361608][T12148] ? __pfx____ratelimit+0x10/0x10 [ 286.361633][T12148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.361650][T12148] ? __pfx__printk+0x10/0x10 [ 286.361678][T12148] should_fail_ex+0x414/0x560 [ 286.361710][T12148] _copy_to_user+0x31/0xb0 [ 286.361735][T12148] simple_read_from_buffer+0xe1/0x170 [ 286.361767][T12148] proc_fail_nth_read+0x1b3/0x220 [ 286.361796][T12148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.361831][T12148] ? rw_verify_area+0x2a6/0x4d0 [ 286.361849][T12148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.361876][T12148] vfs_read+0x200/0xa30 [ 286.361900][T12148] ? __pfx___sys_sendto+0x10/0x10 [ 286.361923][T12148] ? __pfx_vfs_read+0x10/0x10 [ 286.361951][T12148] ? do_sys_openat2+0x154/0x1c0 [ 286.361986][T12148] ksys_read+0x145/0x250 [ 286.362006][T12148] ? __pfx_ksys_read+0x10/0x10 [ 286.362029][T12148] ? do_syscall_64+0xbe/0xfa0 [ 286.362050][T12148] do_syscall_64+0xfa/0xfa0 [ 286.362065][T12148] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.362083][T12148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.362100][T12148] ? clear_bhb_loop+0x60/0xb0 [ 286.362122][T12148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.362138][T12148] RIP: 0033:0x7f7d4798d8dc [ 286.362155][T12148] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 286.362170][T12148] RSP: 002b:00007f7d48752030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.362189][T12148] RAX: ffffffffffffffda RBX: 00007f7d47be6090 RCX: 00007f7d4798d8dc [ 286.362203][T12148] RDX: 000000000000000f RSI: 00007f7d487520a0 RDI: 0000000000000006 [ 286.362214][T12148] RBP: 00007f7d48752090 R08: 0000000000000000 R09: fffffffffffffef0 [ 286.362226][T12148] R10: 0000000000000880 R11: 0000000000000246 R12: 0000000000000001 [ 286.362237][T12148] R13: 00007f7d47be6128 R14: 00007f7d47be6090 R15: 00007fffb46bc728 [ 286.362268][T12148] [ 286.908884][T12158] syzkaller0: entered promiscuous mode [ 286.914696][T12158] syzkaller0: entered allmulticast mode [ 286.922219][T12155] wlan1 speed is unknown, defaulting to 1000 [ 288.424261][T12172] netlink: 'syz.4.1883': attribute type 1 has an invalid length. [ 288.461510][T12172] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1883'. [ 288.491951][T12172] NCSI netlink: No device for ifindex 0 [ 288.568333][T12175] bond1: entered promiscuous mode [ 288.573982][T12175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.870045][T12191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1888'. [ 289.011705][T12188] wlan1 speed is unknown, defaulting to 1000 [ 289.193342][T12206] netlink: 'syz.2.1895': attribute type 21 has an invalid length. [ 289.209980][T12206] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1895'. [ 289.361352][T12204] syzkaller0: entered promiscuous mode [ 289.366975][T12204] syzkaller0: entered allmulticast mode [ 289.374580][T12206] netlink: 'syz.2.1895': attribute type 5 has an invalid length. [ 289.383124][T12206] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1895'. [ 289.543302][T12215] FAULT_INJECTION: forcing a failure. [ 289.543302][T12215] name failslab, interval 1, probability 0, space 0, times 0 [ 289.557030][T12215] CPU: 0 UID: 0 PID: 12215 Comm: syz.2.1898 Not tainted syzkaller #0 PREEMPT(full) [ 289.557056][T12215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.557066][T12215] Call Trace: [ 289.557074][T12215] [ 289.557082][T12215] dump_stack_lvl+0x189/0x250 [ 289.557106][T12215] ? __pfx____ratelimit+0x10/0x10 [ 289.557132][T12215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.557158][T12215] ? __pfx__printk+0x10/0x10 [ 289.557179][T12215] ? __pfx___might_resched+0x10/0x10 [ 289.557201][T12215] ? fs_reclaim_acquire+0x7d/0x100 [ 289.557228][T12215] should_fail_ex+0x414/0x560 [ 289.557259][T12215] should_failslab+0xa8/0x100 [ 289.557282][T12215] __kmalloc_cache_noprof+0x6f/0x6f0 [ 289.557302][T12215] ? kobject_uevent_env+0x27c/0x8c0 [ 289.557322][T12215] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 289.557339][T12215] ? devres_release_all+0x1ca/0x230 [ 289.557365][T12215] ? __pfx_dev_uevent_name+0x10/0x10 [ 289.557382][T12215] kobject_uevent_env+0x27c/0x8c0 [ 289.557410][T12215] device_del+0x73a/0x8e0 [ 289.557439][T12215] ? __pfx_device_del+0x10/0x10 [ 289.557461][T12215] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 289.557487][T12215] device_unregister+0x20/0xc0 [ 289.557507][T12215] wakeup_source_unregister+0x179/0x3f0 [ 289.557531][T12215] __ep_remove+0x516/0x710 [ 289.557557][T12215] ep_remove_safe+0x1c/0xd0 [ 289.557579][T12215] ep_clear_and_put+0x149/0x380 [ 289.557600][T12215] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 289.557621][T12215] ep_eventpoll_release+0x45/0x60 [ 289.557642][T12215] __fput+0x44c/0xa70 [ 289.557678][T12215] fput_close_sync+0x119/0x200 [ 289.557703][T12215] ? dnotify_flush+0x1db/0x5e0 [ 289.557725][T12215] ? __pfx_fput_close_sync+0x10/0x10 [ 289.557749][T12215] ? do_raw_spin_unlock+0x122/0x240 [ 289.557777][T12215] __x64_sys_close+0x7f/0x110 [ 289.557803][T12215] do_syscall_64+0xfa/0xfa0 [ 289.557818][T12215] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.557835][T12215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.557852][T12215] ? clear_bhb_loop+0x60/0xb0 [ 289.557874][T12215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.557891][T12215] RIP: 0033:0x7f0bea78eec9 [ 289.557907][T12215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.557921][T12215] RSP: 002b:00007f0beb68e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 289.557939][T12215] RAX: ffffffffffffffda RBX: 00007f0bea9e6090 RCX: 00007f0bea78eec9 [ 289.557951][T12215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 289.557960][T12215] RBP: 00007f0beb68e090 R08: 0000000000000000 R09: 0000000000000000 [ 289.557971][T12215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.557981][T12215] R13: 00007f0bea9e6128 R14: 00007f0bea9e6090 R15: 00007ffc634abb08 [ 289.558011][T12215] [ 289.650961][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1899'. [ 291.158908][T12225] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 291.166312][T12225] macsec0: entered promiscuous mode [ 291.173819][T12225] macsec0: entered allmulticast mode [ 291.181050][T12225] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 291.378965][T12235] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1904'. [ 291.873825][T12256] wlan1 speed is unknown, defaulting to 1000 [ 291.937198][T12258] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 291.944968][T12258] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1909'. [ 292.090027][T12260] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1911'. [ 292.127210][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 292.275127][T12268] netlink: 'syz.1.1912': attribute type 8 has an invalid length. [ 293.014665][T12292] xt_l2tp: missing protocol rule (udp|l2tpip) [ 293.069972][T12294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1915'. [ 293.170580][T12292] bond3: entered allmulticast mode [ 293.176737][T12292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.282687][T12308] netlink: 'syz.1.1923': attribute type 1 has an invalid length. [ 293.327332][T12309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1922'. [ 293.401325][T12308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.435070][T12313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.442519][T12313] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 293.454365][T12313] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 293.614922][T12323] netlink: 'syz.3.1926': attribute type 4 has an invalid length. [ 293.649320][T12317] veth3: entered promiscuous mode [ 293.673137][T12317] bond2: (slave veth3): Enslaving as an active interface with a down link [ 293.784455][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1926'. [ 293.788616][T12309] wlan1 speed is unknown, defaulting to 1000 [ 294.236549][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 294.437077][T12354] FAULT_INJECTION: forcing a failure. [ 294.437077][T12354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.440474][T12356] FAULT_INJECTION: forcing a failure. [ 294.440474][T12356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.450691][T12354] CPU: 1 UID: 0 PID: 12354 Comm: syz.4.1937 Not tainted syzkaller #0 PREEMPT(full) [ 294.450712][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.450723][T12354] Call Trace: [ 294.450731][T12354] [ 294.450738][T12354] dump_stack_lvl+0x189/0x250 [ 294.450771][T12354] ? __pfx____ratelimit+0x10/0x10 [ 294.450797][T12354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.450814][T12354] ? __pfx__printk+0x10/0x10 [ 294.450832][T12354] ? __might_fault+0xb0/0x130 [ 294.450861][T12354] should_fail_ex+0x414/0x560 [ 294.450892][T12354] _copy_from_user+0x2d/0xb0 [ 294.450915][T12354] kstrtouint_from_user+0xc4/0x170 [ 294.450940][T12354] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 294.450976][T12354] proc_fail_nth_write+0x88/0x200 [ 294.451001][T12354] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 294.451031][T12354] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 294.451057][T12354] vfs_write+0x27e/0xb30 [ 294.451084][T12354] ? __pfx_vfs_write+0x10/0x10 [ 294.451105][T12354] ? __fget_files+0x2a/0x420 [ 294.451129][T12354] ? __fget_files+0x3a0/0x420 [ 294.451148][T12354] ? __fget_files+0x2a/0x420 [ 294.451176][T12354] ksys_write+0x145/0x250 [ 294.451197][T12354] ? __pfx_ksys_write+0x10/0x10 [ 294.451219][T12354] ? do_syscall_64+0xbe/0xfa0 [ 294.451240][T12354] do_syscall_64+0xfa/0xfa0 [ 294.451256][T12354] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.451273][T12354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.451289][T12354] ? clear_bhb_loop+0x60/0xb0 [ 294.451310][T12354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.451327][T12354] RIP: 0033:0x7f7d4798d97f [ 294.451342][T12354] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 294.451357][T12354] RSP: 002b:00007f7d48773030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 294.451375][T12354] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d4798d97f [ 294.451387][T12354] RDX: 0000000000000001 RSI: 00007f7d487730a0 RDI: 0000000000000009 [ 294.451398][T12354] RBP: 00007f7d48773090 R08: 0000000000000000 R09: 0000000000000000 [ 294.451409][T12354] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 294.451419][T12354] R13: 00007f7d47be6038 R14: 00007f7d47be5fa0 R15: 00007fffb46bc728 [ 294.451449][T12354] [ 294.692136][T12356] CPU: 1 UID: 0 PID: 12356 Comm: syz.3.1938 Not tainted syzkaller #0 PREEMPT(full) [ 294.692159][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.692169][T12356] Call Trace: [ 294.692178][T12356] [ 294.692186][T12356] dump_stack_lvl+0x189/0x250 [ 294.692208][T12356] ? __pfx____ratelimit+0x10/0x10 [ 294.692232][T12356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.692250][T12356] ? __pfx__printk+0x10/0x10 [ 294.692265][T12356] ? __might_fault+0xb0/0x130 [ 294.692293][T12356] should_fail_ex+0x414/0x560 [ 294.692322][T12356] _copy_from_user+0x2d/0xb0 [ 294.692344][T12356] addrconf_set_dstaddr+0xad/0x2d0 [ 294.692371][T12356] ? __pfx_addrconf_set_dstaddr+0x10/0x10 [ 294.692401][T12356] ? kasan_quarantine_put+0xdd/0x220 [ 294.692419][T12356] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.692441][T12356] inet6_ioctl+0x152/0x280 [ 294.692461][T12356] ? __pfx_inet6_ioctl+0x10/0x10 [ 294.692486][T12356] ? do_vfs_ioctl+0xbe8/0x1430 [ 294.692501][T12356] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 294.692536][T12356] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 294.692558][T12356] sock_do_ioctl+0xdc/0x300 [ 294.692581][T12356] ? __pfx_sock_do_ioctl+0x10/0x10 [ 294.692614][T12356] sock_ioctl+0x576/0x790 [ 294.692636][T12356] ? __pfx_sock_ioctl+0x10/0x10 [ 294.692665][T12356] ? __fget_files+0x3a0/0x420 [ 294.692684][T12356] ? __fget_files+0x2a/0x420 [ 294.692711][T12356] ? bpf_lsm_file_ioctl+0x9/0x20 [ 294.692733][T12356] ? __pfx_sock_ioctl+0x10/0x10 [ 294.692750][T12356] __se_sys_ioctl+0xfc/0x170 [ 294.692769][T12356] do_syscall_64+0xfa/0xfa0 [ 294.692785][T12356] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.692802][T12356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.692819][T12356] ? clear_bhb_loop+0x60/0xb0 [ 294.692840][T12356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.692857][T12356] RIP: 0033:0x7f4ce918eec9 [ 294.692873][T12356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.692887][T12356] RSP: 002b:00007f4cea07b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.692907][T12356] RAX: ffffffffffffffda RBX: 00007f4ce93e5fa0 RCX: 00007f4ce918eec9 [ 294.692921][T12356] RDX: 0000000000000000 RSI: 0000000000008918 RDI: 0000000000000003 [ 294.692932][T12356] RBP: 00007f4cea07b090 R08: 0000000000000000 R09: 0000000000000000 [ 294.692942][T12356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.692956][T12356] R13: 00007f4ce93e6038 R14: 00007f4ce93e5fa0 R15: 00007ffe9aebbd18 [ 294.692988][T12356] [ 294.964206][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1939'. [ 295.307096][T12376] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1945'. [ 295.392919][T12370] wlan1 speed is unknown, defaulting to 1000 [ 295.444219][T12377] netlink: 'syz.1.1941': attribute type 1 has an invalid length. [ 295.787497][T12393] FAULT_INJECTION: forcing a failure. [ 295.787497][T12393] name failslab, interval 1, probability 0, space 0, times 0 [ 295.830102][T12393] CPU: 0 UID: 0 PID: 12393 Comm: syz.4.1950 Not tainted syzkaller #0 PREEMPT(full) [ 295.830127][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.830137][T12393] Call Trace: [ 295.830145][T12393] [ 295.830153][T12393] dump_stack_lvl+0x189/0x250 [ 295.830177][T12393] ? __pfx____ratelimit+0x10/0x10 [ 295.830203][T12393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.830220][T12393] ? __pfx__printk+0x10/0x10 [ 295.830243][T12393] ? __pfx___might_resched+0x10/0x10 [ 295.830271][T12393] should_fail_ex+0x414/0x560 [ 295.830302][T12393] should_failslab+0xa8/0x100 [ 295.830326][T12393] __kmalloc_node_noprof+0xd2/0x800 [ 295.830345][T12393] ? alloc_slab_obj_exts+0x3d/0xc0 [ 295.830367][T12393] alloc_slab_obj_exts+0x3d/0xc0 [ 295.830385][T12393] __memcg_slab_post_alloc_hook+0x31d/0x7d0 [ 295.830423][T12393] kmem_cache_alloc_node_noprof+0x4e4/0x710 [ 295.830442][T12393] ? __alloc_skb+0x112/0x2d0 [ 295.830472][T12393] __alloc_skb+0x112/0x2d0 [ 295.830496][T12393] alloc_skb_with_frags+0xca/0x890 [ 295.830524][T12393] ? process_measurement+0x72d/0x1a40 [ 295.830552][T12393] sock_alloc_send_pskb+0x84d/0x980 [ 295.830590][T12393] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 295.830608][T12393] ? __pfx_process_measurement+0x10/0x10 [ 295.830625][T12393] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 295.830647][T12393] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 295.830671][T12393] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 295.830692][T12393] unix_dgram_sendmsg+0x461/0x1850 [ 295.830714][T12393] ? __lock_acquire+0xab9/0xd20 [ 295.830744][T12393] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 295.830759][T12393] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 295.830783][T12393] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.830798][T12393] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 295.830814][T12393] __sock_sendmsg+0x21c/0x270 [ 295.830833][T12393] ____sys_sendmsg+0x52d/0x830 [ 295.830851][T12393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.830879][T12393] ? import_iovec+0x74/0xa0 [ 295.830900][T12393] ___sys_sendmsg+0x21f/0x2a0 [ 295.830915][T12393] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.830961][T12393] ? __fget_files+0x2a/0x420 [ 295.830977][T12393] ? __fget_files+0x3a0/0x420 [ 295.831001][T12393] __sys_sendmmsg+0x227/0x430 [ 295.831018][T12393] ? __pfx___sys_sendmmsg+0x10/0x10 [ 295.831038][T12393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 295.831066][T12393] ? ksys_write+0x22a/0x250 [ 295.831082][T12393] ? __pfx_ksys_write+0x10/0x10 [ 295.831100][T12393] __x64_sys_sendmmsg+0xa0/0xc0 [ 295.831115][T12393] do_syscall_64+0xfa/0xfa0 [ 295.831127][T12393] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.831141][T12393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.831154][T12393] ? clear_bhb_loop+0x60/0xb0 [ 295.831170][T12393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.831183][T12393] RIP: 0033:0x7f7d4798eec9 [ 295.831196][T12393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.831208][T12393] RSP: 002b:00007f7d48773038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 295.831223][T12393] RAX: ffffffffffffffda RBX: 00007f7d47be5fa0 RCX: 00007f7d4798eec9 [ 295.831233][T12393] RDX: 0000000000000002 RSI: 0000200000001080 RDI: 0000000000000004 [ 295.831242][T12393] RBP: 00007f7d48773090 R08: 0000000000000000 R09: 0000000000000000 [ 295.831251][T12393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.831259][T12393] R13: 00007f7d47be6038 R14: 00007f7d47be5fa0 R15: 00007fffb46bc728 [ 295.831282][T12393] [ 296.495042][T12412] __nla_validate_parse: 1 callbacks suppressed [ 296.495061][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 296.501565][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1956'. [ 296.774785][T12418] wlan1 speed is unknown, defaulting to 1000 [ 297.083996][T12429] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 297.704620][T12455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1970'. [ 297.904194][T12459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1971'. [ 297.908308][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 297.914947][T12457] wlan1 speed is unknown, defaulting to 1000 [ 298.292593][T12478] netlink: 'syz.2.1975': attribute type 1 has an invalid length. [ 298.321557][T12478] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1975'. [ 298.985346][T12474] wlan1 speed is unknown, defaulting to 1000 [ 299.280200][T12483] wlan1 speed is unknown, defaulting to 1000 [ 299.779522][T12507] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 300.084951][T12509] syzkaller0: entered promiscuous mode [ 300.092572][T12509] syzkaller0: entered allmulticast mode [ 301.878421][T12538] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 302.051580][T12541] syzkaller1: entered promiscuous mode [ 302.063878][T12541] syzkaller1: entered allmulticast mode [ 302.155172][T12560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1996'. [ 302.311212][T12566] wlan1 speed is unknown, defaulting to 1000 [ 303.017534][T12586] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2006'. [ 303.061495][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2006'. [ 303.168956][T12595] wlan1 speed is unknown, defaulting to 1000 [ 303.566451][T12599] wlan1 speed is unknown, defaulting to 1000 [ 303.918868][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 304.007330][T12613] netlink: 'syz.3.2009': attribute type 5 has an invalid length. [ 304.015103][T12613] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2009'. [ 304.111288][T12629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2018'. [ 304.122930][T12613] geneve2: entered promiscuous mode [ 304.206576][T12613] geneve2: entered allmulticast mode [ 304.214186][T12630] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2016'. [ 304.225531][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 304.235544][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 304.245917][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 304.261274][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 304.584378][T12637] wlan1 speed is unknown, defaulting to 1000 [ 305.109726][T12650] FAULT_INJECTION: forcing a failure. [ 305.109726][T12650] name failslab, interval 1, probability 0, space 0, times 0 [ 305.136946][T12650] CPU: 1 UID: 0 PID: 12650 Comm: syz.1.2023 Not tainted syzkaller #0 PREEMPT(full) [ 305.136972][T12650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.136982][T12650] Call Trace: [ 305.136992][T12650] [ 305.137000][T12650] dump_stack_lvl+0x189/0x250 [ 305.137023][T12650] ? __pfx____ratelimit+0x10/0x10 [ 305.137048][T12650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.137066][T12650] ? __pfx__printk+0x10/0x10 [ 305.137099][T12650] should_fail_ex+0x414/0x560 [ 305.137131][T12650] should_failslab+0xa8/0x100 [ 305.137155][T12650] __kmalloc_cache_noprof+0x6f/0x6f0 [ 305.137174][T12650] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 305.137192][T12650] ? sctp_add_bind_addr+0x8c/0x370 [ 305.137215][T12650] sctp_add_bind_addr+0x8c/0x370 [ 305.137238][T12650] sctp_copy_local_addr_list+0x30b/0x4e0 [ 305.137261][T12650] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 305.137279][T12650] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 305.137299][T12650] ? sctp_v6_is_any+0x64/0x80 [ 305.137319][T12650] ? sctp_copy_one_addr+0x93/0x360 [ 305.137341][T12650] sctp_bind_addr_copy+0xb3/0x3c0 [ 305.137360][T12650] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 305.137389][T12650] sctp_connect_new_asoc+0x2e0/0x690 [ 305.137414][T12650] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 305.137433][T12650] ? __local_bh_enable_ip+0x12d/0x1c0 [ 305.137464][T12650] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 305.137486][T12650] ? security_sctp_bind_connect+0x7e/0x2e0 [ 305.137512][T12650] sctp_sendmsg+0x155c/0x2810 [ 305.137551][T12650] ? __pfx_sctp_sendmsg+0x10/0x10 [ 305.137576][T12650] ? aa_sk_perm+0x81e/0x950 [ 305.137600][T12650] ? __pfx_aa_sk_perm+0x10/0x10 [ 305.137622][T12650] ? sock_rps_record_flow+0x19/0x410 [ 305.137648][T12650] ? inet_sendmsg+0x2f4/0x370 [ 305.137675][T12650] __sock_sendmsg+0x19c/0x270 [ 305.137700][T12650] __sys_sendto+0x3bd/0x520 [ 305.137727][T12650] ? __pfx___sys_sendto+0x10/0x10 [ 305.137748][T12650] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 305.137781][T12650] ? __fget_files+0x3a0/0x420 [ 305.137813][T12650] ? ksys_write+0x22a/0x250 [ 305.137834][T12650] ? __pfx_ksys_write+0x10/0x10 [ 305.137861][T12650] __x64_sys_sendto+0xde/0x100 [ 305.137888][T12650] do_syscall_64+0xfa/0xfa0 [ 305.137905][T12650] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.137922][T12650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.137938][T12650] ? clear_bhb_loop+0x60/0xb0 [ 305.137960][T12650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.137977][T12650] RIP: 0033:0x7fda7658eec9 [ 305.137994][T12650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.138008][T12650] RSP: 002b:00007fda7737b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 305.138027][T12650] RAX: ffffffffffffffda RBX: 00007fda767e5fa0 RCX: 00007fda7658eec9 [ 305.138041][T12650] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 305.138053][T12650] RBP: 00007fda7737b090 R08: 000020000005ffe4 R09: 000000000000001c [ 305.138065][T12650] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 305.138075][T12650] R13: 00007fda767e6038 R14: 00007fda767e5fa0 R15: 00007ffd58ea9dc8 [ 305.138106][T12650] [ 305.919200][T12660] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 305.928249][T12660] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2026'. [ 305.937779][T12660] NCSI netlink: No device for ifindex 0 [ 305.974069][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 306.642513][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 306.944331][ T30] audit: type=1804 audit(1760689582.698:98): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2035" name="/newroot/376/memory.events" dev="tmpfs" ino=1932 res=1 errno=0 [ 306.992685][ T30] audit: type=1800 audit(1760689582.698:99): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2035" name="memory.events" dev="tmpfs" ino=1932 res=0 errno=0 [ 307.703854][T12718] __nla_validate_parse: 1 callbacks suppressed [ 307.703872][T12718] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2046'. [ 307.727586][T12717] netlink: 'syz.1.2045': attribute type 1 has an invalid length. [ 307.755833][T12717] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2045'. [ 307.785745][T12717] NCSI netlink: No device for ifindex 0 [ 307.820932][ T30] audit: type=1804 audit(1760689583.578:100): pid=12718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2046" name="/newroot/441/memory.events" dev="tmpfs" ino=2280 res=1 errno=0 [ 307.868347][ T30] audit: type=1800 audit(1760689583.598:101): pid=12718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2046" name="memory.events" dev="tmpfs" ino=2280 res=0 errno=0 [ 308.022073][T12725] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 308.060604][T12720] FAULT_INJECTION: forcing a failure. [ 308.060604][T12720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.106221][T12720] CPU: 1 UID: 0 PID: 12720 Comm: syz.0.2044 Not tainted syzkaller #0 PREEMPT(full) [ 308.106245][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.106255][T12720] Call Trace: [ 308.106262][T12720] [ 308.106270][T12720] dump_stack_lvl+0x189/0x250 [ 308.106294][T12720] ? __pfx____ratelimit+0x10/0x10 [ 308.106318][T12720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.106335][T12720] ? __pfx__printk+0x10/0x10 [ 308.106352][T12720] ? __might_fault+0xb0/0x130 [ 308.106381][T12720] should_fail_ex+0x414/0x560 [ 308.106409][T12720] _copy_from_user+0x2d/0xb0 [ 308.106432][T12720] kstrtouint_from_user+0xc4/0x170 [ 308.106452][T12720] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 308.106486][T12720] proc_fail_nth_write+0x88/0x200 [ 308.106513][T12720] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 308.106545][T12720] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 308.106571][T12720] vfs_write+0x27e/0xb30 [ 308.106598][T12720] ? __pfx_vfs_write+0x10/0x10 [ 308.106617][T12720] ? __fget_files+0x2a/0x420 [ 308.106643][T12720] ? __fget_files+0x3a0/0x420 [ 308.106661][T12720] ? __fget_files+0x2a/0x420 [ 308.106688][T12720] ksys_write+0x145/0x250 [ 308.106707][T12720] ? __pfx_ksys_write+0x10/0x10 [ 308.106729][T12720] ? do_syscall_64+0xbe/0xfa0 [ 308.106750][T12720] do_syscall_64+0xfa/0xfa0 [ 308.106766][T12720] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.106782][T12720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.106800][T12720] ? clear_bhb_loop+0x60/0xb0 [ 308.106821][T12720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.106841][T12720] RIP: 0033:0x7f8cd538d97f [ 308.106856][T12720] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 308.106871][T12720] RSP: 002b:00007f8cd61d0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 308.106889][T12720] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8cd538d97f [ 308.106902][T12720] RDX: 0000000000000001 RSI: 00007f8cd61d00a0 RDI: 0000000000000008 [ 308.106913][T12720] RBP: 00007f8cd61d0090 R08: 0000000000000000 R09: 0000000000000000 [ 308.106925][T12720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 308.106944][T12720] R13: 00007f8cd55e6128 R14: 00007f8cd55e6090 R15: 00007fff1ba25e68 [ 308.106979][T12720] [ 308.115773][T12727] netlink: 'syz.4.2050': attribute type 39 has an invalid length. [ 308.852673][T12760] xt_hashlimit: max too large, truncated to 1048576 [ 308.973768][T12762] syzkaller0: entered promiscuous mode [ 309.014417][T12762] syzkaller0: entered allmulticast mode [ 309.143521][T12771] rdma_rxe: rxe_newlink: failed to add wlan1 [ 310.430370][T12768] wlan1 speed is unknown, defaulting to 1000 [ 310.884010][T12816] netlink: 'syz.1.2081': attribute type 1 has an invalid length. [ 310.892044][T12816] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2081'. [ 310.916011][T12813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2080'. [ 310.926551][T12816] NCSI netlink: No device for ifindex 0 [ 311.050619][T12813] wlan1 speed is unknown, defaulting to 1000 [ 311.128292][T12825] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 311.139339][T12825] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2083'. [ 311.150232][T12825] NCSI netlink: No device for ifindex 0 [ 311.667648][T12836] FAULT_INJECTION: forcing a failure. [ 311.667648][T12836] name failslab, interval 1, probability 0, space 0, times 0 [ 311.688874][T12836] CPU: 0 UID: 0 PID: 12836 Comm: syz.3.2085 Not tainted syzkaller #0 PREEMPT(full) [ 311.688898][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.688909][T12836] Call Trace: [ 311.688915][T12836] [ 311.688924][T12836] dump_stack_lvl+0x189/0x250 [ 311.688947][T12836] ? __pfx____ratelimit+0x10/0x10 [ 311.688973][T12836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.688990][T12836] ? __pfx__printk+0x10/0x10 [ 311.689010][T12836] ? __pfx___might_resched+0x10/0x10 [ 311.689033][T12836] ? fs_reclaim_acquire+0x7d/0x100 [ 311.689059][T12836] should_fail_ex+0x414/0x560 [ 311.689090][T12836] should_failslab+0xa8/0x100 [ 311.689113][T12836] __kvmalloc_node_noprof+0x158/0x910 [ 311.689134][T12836] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 311.689152][T12836] ? page_pool_create_percpu+0x314/0xbc0 [ 311.689171][T12836] ? page_pool_create_percpu+0xb2/0xbc0 [ 311.689195][T12836] page_pool_create_percpu+0x314/0xbc0 [ 311.689214][T12836] ? bpf_test_run_xdp_live+0x1bf/0x1b20 [ 311.689245][T12836] bpf_test_run_xdp_live+0x1d4/0x1b20 [ 311.689328][T12836] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 311.689353][T12836] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 311.689381][T12836] ? synchronize_rcu+0x11a/0x310 [ 311.689405][T12836] ? __pfx_synchronize_rcu+0x10/0x10 [ 311.689434][T12836] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 311.689459][T12836] ? bpf_dispatcher_xdp+0x800/0x1000 [ 311.689496][T12836] ? 0xffffffffa02016cc [ 311.689509][T12836] ? 0xffffffffa0201a50 [ 311.689604][T12836] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 311.689645][T12836] ? _copy_from_user+0x94/0xb0 [ 311.689669][T12836] ? bpf_test_init+0x113/0x150 [ 311.689687][T12836] ? xdp_convert_md_to_buff+0x5b/0x330 [ 311.689712][T12836] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 311.689748][T12836] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 311.689774][T12836] ? __fget_files+0x2a/0x420 [ 311.689799][T12836] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 311.689822][T12836] bpf_prog_test_run+0x2c7/0x340 [ 311.689849][T12836] __sys_bpf+0x562/0x860 [ 311.689871][T12836] ? __pfx___sys_bpf+0x10/0x10 [ 311.689912][T12836] ? ksys_write+0x22a/0x250 [ 311.689934][T12836] ? __pfx_ksys_write+0x10/0x10 [ 311.689958][T12836] __x64_sys_bpf+0x7c/0x90 [ 311.689978][T12836] do_syscall_64+0xfa/0xfa0 [ 311.689993][T12836] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.690010][T12836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.690027][T12836] ? clear_bhb_loop+0x60/0xb0 [ 311.690047][T12836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.690063][T12836] RIP: 0033:0x7f4ce918eec9 [ 311.690080][T12836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.690095][T12836] RSP: 002b:00007f4cea07b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.690113][T12836] RAX: ffffffffffffffda RBX: 00007f4ce93e5fa0 RCX: 00007f4ce918eec9 [ 311.690127][T12836] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 311.690138][T12836] RBP: 00007f4cea07b090 R08: 0000000000000000 R09: 0000000000000000 [ 311.690149][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.690159][T12836] R13: 00007f4ce93e6038 R14: 00007f4ce93e5fa0 R15: 00007ffe9aebbd18 [ 311.690190][T12836] [ 311.690229][T12836] page_pool_create_percpu() gave up with errno -12 [ 312.144629][T12840] FAULT_INJECTION: forcing a failure. [ 312.144629][T12840] name failslab, interval 1, probability 0, space 0, times 0 [ 312.223741][T12840] CPU: 0 UID: 0 PID: 12840 Comm: syz.4.2088 Not tainted syzkaller #0 PREEMPT(full) [ 312.223767][T12840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.223778][T12840] Call Trace: [ 312.223785][T12840] [ 312.223794][T12840] dump_stack_lvl+0x189/0x250 [ 312.223817][T12840] ? __pfx____ratelimit+0x10/0x10 [ 312.223843][T12840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.223862][T12840] ? __pfx__printk+0x10/0x10 [ 312.223883][T12840] ? __pfx___might_resched+0x10/0x10 [ 312.223907][T12840] ? fs_reclaim_acquire+0x7d/0x100 [ 312.223933][T12840] should_fail_ex+0x414/0x560 [ 312.223964][T12840] should_failslab+0xa8/0x100 [ 312.223988][T12840] __kvmalloc_node_noprof+0x158/0x910 [ 312.224008][T12840] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 312.224027][T12840] ? page_pool_create_percpu+0x314/0xbc0 [ 312.224048][T12840] ? page_pool_create_percpu+0xb2/0xbc0 [ 312.224073][T12840] page_pool_create_percpu+0x314/0xbc0 [ 312.224092][T12840] ? bpf_test_run_xdp_live+0x1bf/0x1b20 [ 312.224124][T12840] bpf_test_run_xdp_live+0x1d4/0x1b20 [ 312.224152][T12840] ? wake_up_q+0x99/0xd0 [ 312.224175][T12840] ? __mutex_unlock_slowpath+0x69a/0x740 [ 312.224202][T12840] ? synchronize_rcu+0x11a/0x310 [ 312.224227][T12840] ? __pfx_synchronize_rcu+0x10/0x10 [ 312.224256][T12840] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 312.224304][T12840] ? 0xffffffffa0205540 [ 312.224337][T12840] ? 0xffffffffa020174c [ 312.224350][T12840] ? 0xffffffffa0201a50 [ 312.224391][T12840] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 312.224427][T12840] ? _copy_from_user+0x94/0xb0 [ 312.224450][T12840] ? bpf_test_init+0x113/0x150 [ 312.224470][T12840] ? xdp_convert_md_to_buff+0x5b/0x330 [ 312.224497][T12840] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 312.224537][T12840] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 312.224575][T12840] ? __fget_files+0x2a/0x420 [ 312.224601][T12840] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 312.224626][T12840] bpf_prog_test_run+0x2c7/0x340 [ 312.224653][T12840] __sys_bpf+0x562/0x860 [ 312.224676][T12840] ? __pfx___sys_bpf+0x10/0x10 [ 312.224720][T12840] ? ksys_write+0x22a/0x250 [ 312.224741][T12840] ? __pfx_ksys_write+0x10/0x10 [ 312.224767][T12840] __x64_sys_bpf+0x7c/0x90 [ 312.224786][T12840] do_syscall_64+0xfa/0xfa0 [ 312.224803][T12840] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.224820][T12840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.224837][T12840] ? clear_bhb_loop+0x60/0xb0 [ 312.224859][T12840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.224876][T12840] RIP: 0033:0x7f7d4798eec9 [ 312.224891][T12840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.224905][T12840] RSP: 002b:00007f7d48773038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.224925][T12840] RAX: ffffffffffffffda RBX: 00007f7d47be5fa0 RCX: 00007f7d4798eec9 [ 312.224938][T12840] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 312.224949][T12840] RBP: 00007f7d48773090 R08: 0000000000000000 R09: 0000000000000000 [ 312.224960][T12840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.224971][T12840] R13: 00007f7d47be6038 R14: 00007f7d47be5fa0 R15: 00007fffb46bc728 [ 312.225002][T12840] [ 312.541329][T12840] page_pool_create_percpu() gave up with errno -12 [ 312.641564][T12852] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.2091'. [ 312.672985][T12852] FAULT_INJECTION: forcing a failure. [ 312.672985][T12852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.701943][T12852] CPU: 0 UID: 0 PID: 12852 Comm: syz.2.2091 Not tainted syzkaller #0 PREEMPT(full) [ 312.701968][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.701978][T12852] Call Trace: [ 312.701986][T12852] [ 312.701995][T12852] dump_stack_lvl+0x189/0x250 [ 312.702019][T12852] ? __pfx____ratelimit+0x10/0x10 [ 312.702045][T12852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.702064][T12852] ? __pfx__printk+0x10/0x10 [ 312.702083][T12852] ? __might_fault+0xb0/0x130 [ 312.702113][T12852] should_fail_ex+0x414/0x560 [ 312.702145][T12852] _copy_from_iter+0x1de/0x1790 [ 312.702172][T12852] ? rcu_is_watching+0x15/0xb0 [ 312.702200][T12852] ? kmalloc_reserve+0xbd/0x290 [ 312.702223][T12852] ? __pfx__copy_from_iter+0x10/0x10 [ 312.702246][T12852] ? __build_skb_around+0x262/0x3f0 [ 312.702273][T12852] ? netlink_sendmsg+0x642/0xb30 [ 312.702296][T12852] ? skb_put+0x11b/0x210 [ 312.702323][T12852] netlink_sendmsg+0x6b2/0xb30 [ 312.702357][T12852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.702385][T12852] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.702407][T12852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.702428][T12852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.702454][T12852] __sock_sendmsg+0x21c/0x270 [ 312.702486][T12852] ____sys_sendmsg+0x505/0x830 [ 312.702510][T12852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.702545][T12852] ? import_iovec+0x74/0xa0 [ 312.702571][T12852] ___sys_sendmsg+0x21f/0x2a0 [ 312.702591][T12852] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.702642][T12852] ? __fget_files+0x2a/0x420 [ 312.702662][T12852] ? __fget_files+0x3a0/0x420 [ 312.702692][T12852] __x64_sys_sendmsg+0x19b/0x260 [ 312.702713][T12852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.702740][T12852] ? __pfx_ksys_write+0x10/0x10 [ 312.702761][T12852] ? do_syscall_64+0xbe/0xfa0 [ 312.702780][T12852] do_syscall_64+0xfa/0xfa0 [ 312.702795][T12852] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.702811][T12852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.702828][T12852] ? clear_bhb_loop+0x60/0xb0 [ 312.702848][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.702862][T12852] RIP: 0033:0x7f0bea78eec9 [ 312.702878][T12852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.702891][T12852] RSP: 002b:00007f0beb68e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.702909][T12852] RAX: ffffffffffffffda RBX: 00007f0bea9e6090 RCX: 00007f0bea78eec9 [ 312.702921][T12852] RDX: 0000000004000804 RSI: 0000200000000140 RDI: 0000000000000008 [ 312.702932][T12852] RBP: 00007f0beb68e090 R08: 0000000000000000 R09: 0000000000000000 [ 312.702942][T12852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.702950][T12852] R13: 00007f0bea9e6128 R14: 00007f0bea9e6090 R15: 00007ffc634abb08 [ 312.702980][T12852] [ 313.249975][T12869] netlink: 'syz.4.2097': attribute type 1 has an invalid length. [ 313.313381][T12869] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2097'. [ 313.333210][T12869] NCSI netlink: No device for ifindex 0 [ 313.592762][T12891] FAULT_INJECTION: forcing a failure. [ 313.592762][T12891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.624167][T12891] CPU: 1 UID: 0 PID: 12891 Comm: syz.2.2104 Not tainted syzkaller #0 PREEMPT(full) [ 313.624192][T12891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.624202][T12891] Call Trace: [ 313.624210][T12891] [ 313.624219][T12891] dump_stack_lvl+0x189/0x250 [ 313.624244][T12891] ? __pfx____ratelimit+0x10/0x10 [ 313.624269][T12891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.624286][T12891] ? __pfx__printk+0x10/0x10 [ 313.624303][T12891] ? __might_fault+0xb0/0x130 [ 313.624333][T12891] should_fail_ex+0x414/0x560 [ 313.624365][T12891] _copy_from_user+0x2d/0xb0 [ 313.624389][T12891] kstrtouint_from_user+0xc4/0x170 [ 313.624411][T12891] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 313.624449][T12891] proc_fail_nth_write+0x88/0x200 [ 313.624475][T12891] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.624507][T12891] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.624533][T12891] vfs_write+0x27e/0xb30 [ 313.624562][T12891] ? __pfx_vfs_write+0x10/0x10 [ 313.624583][T12891] ? __fget_files+0x2a/0x420 [ 313.624609][T12891] ? __fget_files+0x3a0/0x420 [ 313.624627][T12891] ? __fget_files+0x2a/0x420 [ 313.624658][T12891] ksys_write+0x145/0x250 [ 313.624675][T12891] ? __fget_files+0x2a/0x420 [ 313.624696][T12891] ? __pfx_ksys_write+0x10/0x10 [ 313.624719][T12891] ? do_syscall_64+0xbe/0xfa0 [ 313.624741][T12891] do_syscall_64+0xfa/0xfa0 [ 313.624757][T12891] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.624774][T12891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.624792][T12891] ? clear_bhb_loop+0x60/0xb0 [ 313.624813][T12891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.624830][T12891] RIP: 0033:0x7f0bea78d97f [ 313.624846][T12891] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 313.624860][T12891] RSP: 002b:00007f0beb6af030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 313.624881][T12891] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0bea78d97f [ 313.624894][T12891] RDX: 0000000000000001 RSI: 00007f0beb6af0a0 RDI: 0000000000000004 [ 313.624905][T12891] RBP: 00007f0beb6af090 R08: 0000000000000000 R09: 0000000000000000 [ 313.624917][T12891] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 313.624927][T12891] R13: 00007f0bea9e6038 R14: 00007f0bea9e5fa0 R15: 00007ffc634abb08 [ 313.624961][T12891] [ 313.885953][T12899] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2107'. [ 313.936086][ T30] audit: type=1804 audit(1760689589.688:102): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2107" name="/newroot/424/memory.events" dev="tmpfs" ino=2192 res=1 errno=0 [ 313.997202][ T30] audit: type=1800 audit(1760689589.718:103): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2107" name="memory.events" dev="tmpfs" ino=2192 res=0 errno=0 [ 314.313284][T12933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2113'. [ 314.654583][T12946] netlink: 'syz.3.2119': attribute type 1 has an invalid length. [ 314.662487][T12946] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2119'. [ 314.672296][T12946] NCSI netlink: No device for ifindex 0 [ 314.725840][T12947] tipc: Enabled bearer , priority 0 [ 314.734412][T12947] syzkaller0: entered promiscuous mode [ 314.741482][T12947] syzkaller0: entered allmulticast mode [ 314.772931][T12947] tipc: Resetting bearer [ 314.780810][T12945] tipc: Resetting bearer [ 314.806711][T12945] tipc: Disabling bearer [ 315.055031][T12960] wlan1 speed is unknown, defaulting to 1000 [ 315.126821][T12963] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 315.195788][T12963] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2124'. [ 315.430906][T12971] netlink: 'syz.2.2125': attribute type 1 has an invalid length. [ 315.457249][T12971] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2125'. [ 315.654390][T12973] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2127'. [ 315.785940][T12961] wlan1 speed is unknown, defaulting to 1000 [ 315.876397][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 315.901328][T12976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2128'. [ 316.240653][T12981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2130'. [ 316.281205][T12969] wlan1 speed is unknown, defaulting to 1000 [ 316.485377][T12990] FAULT_INJECTION: forcing a failure. [ 316.485377][T12990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.499124][T12990] CPU: 1 UID: 0 PID: 12990 Comm: syz.1.2134 Not tainted syzkaller #0 PREEMPT(full) [ 316.499149][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.499159][T12990] Call Trace: [ 316.499167][T12990] [ 316.499174][T12990] dump_stack_lvl+0x189/0x250 [ 316.499198][T12990] ? __pfx____ratelimit+0x10/0x10 [ 316.499225][T12990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.499243][T12990] ? __pfx__printk+0x10/0x10 [ 316.499279][T12990] should_fail_ex+0x414/0x560 [ 316.499307][T12990] _copy_to_user+0x31/0xb0 [ 316.499330][T12990] simple_read_from_buffer+0xe1/0x170 [ 316.499355][T12990] proc_fail_nth_read+0x1b3/0x220 [ 316.499381][T12990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.499410][T12990] ? rw_verify_area+0x2a6/0x4d0 [ 316.499425][T12990] ? __lock_acquire+0xab9/0xd20 [ 316.499443][T12990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.499467][T12990] vfs_read+0x200/0xa30 [ 316.499483][T12990] ? fdget_pos+0x247/0x320 [ 316.499505][T12990] ? __pfx___mutex_lock+0x10/0x10 [ 316.499522][T12990] ? __pfx_vfs_read+0x10/0x10 [ 316.499539][T12990] ? __fget_files+0x2a/0x420 [ 316.499562][T12990] ? __fget_files+0x3a0/0x420 [ 316.499581][T12990] ? __fget_files+0x2a/0x420 [ 316.499611][T12990] ksys_read+0x145/0x250 [ 316.499627][T12990] ? __fget_files+0x2a/0x420 [ 316.499647][T12990] ? __pfx_ksys_read+0x10/0x10 [ 316.499667][T12990] ? do_syscall_64+0xbe/0xfa0 [ 316.499686][T12990] do_syscall_64+0xfa/0xfa0 [ 316.499700][T12990] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.499717][T12990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.499733][T12990] ? clear_bhb_loop+0x60/0xb0 [ 316.499756][T12990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.499773][T12990] RIP: 0033:0x7fda7658d8dc [ 316.499790][T12990] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 316.499805][T12990] RSP: 002b:00007fda7737b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.499824][T12990] RAX: ffffffffffffffda RBX: 00007fda767e5fa0 RCX: 00007fda7658d8dc [ 316.499838][T12990] RDX: 000000000000000f RSI: 00007fda7737b0a0 RDI: 0000000000000003 [ 316.499849][T12990] RBP: 00007fda7737b090 R08: 0000000000000000 R09: 0000000000000000 [ 316.499860][T12990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.499871][T12990] R13: 00007fda767e6038 R14: 00007fda767e5fa0 R15: 00007ffd58ea9dc8 [ 316.499903][T12990] [ 316.851128][T12995] FAULT_INJECTION: forcing a failure. [ 316.851128][T12995] name failslab, interval 1, probability 0, space 0, times 0 [ 316.881498][T12995] CPU: 0 UID: 0 PID: 12995 Comm: syz.3.2135 Not tainted syzkaller #0 PREEMPT(full) [ 316.881523][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.881533][T12995] Call Trace: [ 316.881540][T12995] [ 316.881548][T12995] dump_stack_lvl+0x189/0x250 [ 316.881574][T12995] ? __pfx____ratelimit+0x10/0x10 [ 316.881601][T12995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.881619][T12995] ? __pfx__printk+0x10/0x10 [ 316.881640][T12995] ? __pfx___might_resched+0x10/0x10 [ 316.881664][T12995] ? fs_reclaim_acquire+0x7d/0x100 [ 316.881690][T12995] should_fail_ex+0x414/0x560 [ 316.881722][T12995] should_failslab+0xa8/0x100 [ 316.881745][T12995] __kmalloc_cache_noprof+0x6f/0x6f0 [ 316.881763][T12995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.881782][T12995] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 316.881805][T12995] __xdp_reg_mem_model+0x1d8/0x5a0 [ 316.881829][T12995] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 316.881849][T12995] ? page_pool_create_percpu+0x7ea/0xbc0 [ 316.881875][T12995] xdp_reg_mem_model+0x22/0x40 [ 316.881892][T12995] bpf_test_run_xdp_live+0x21f/0x1b20 [ 316.881917][T12995] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 316.881942][T12995] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 316.881967][T12995] ? synchronize_rcu+0x11a/0x310 [ 316.881998][T12995] ? __pfx_synchronize_rcu+0x10/0x10 [ 316.882026][T12995] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 316.882053][T12995] ? bpf_dispatcher_xdp+0x800/0x1000 [ 316.882088][T12995] ? 0xffffffffa0201650 [ 316.882101][T12995] ? 0xffffffffa0201a50 [ 316.882143][T12995] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 316.882178][T12995] ? _copy_from_user+0x94/0xb0 [ 316.882201][T12995] ? bpf_test_init+0x113/0x150 [ 316.882222][T12995] ? xdp_convert_md_to_buff+0x5b/0x330 [ 316.882247][T12995] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 316.882287][T12995] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 316.882316][T12995] ? __fget_files+0x2a/0x420 [ 316.882342][T12995] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 316.882367][T12995] bpf_prog_test_run+0x2c7/0x340 [ 316.882393][T12995] __sys_bpf+0x562/0x860 [ 316.882417][T12995] ? __pfx___sys_bpf+0x10/0x10 [ 316.882454][T12995] ? ksys_write+0x22a/0x250 [ 316.882476][T12995] ? __pfx_ksys_write+0x10/0x10 [ 316.882500][T12995] __x64_sys_bpf+0x7c/0x90 [ 316.882525][T12995] do_syscall_64+0xfa/0xfa0 [ 316.882542][T12995] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.882559][T12995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.882577][T12995] ? clear_bhb_loop+0x60/0xb0 [ 316.882598][T12995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.882615][T12995] RIP: 0033:0x7f4ce918eec9 [ 316.882630][T12995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.882646][T12995] RSP: 002b:00007f4cea05a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.882665][T12995] RAX: ffffffffffffffda RBX: 00007f4ce93e6090 RCX: 00007f4ce918eec9 [ 316.882678][T12995] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 316.882689][T12995] RBP: 00007f4cea05a090 R08: 0000000000000000 R09: 0000000000000000 [ 316.882701][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.882711][T12995] R13: 00007f4ce93e6128 R14: 00007f4ce93e6090 R15: 00007ffe9aebbd18 [ 316.882743][T12995] [ 317.280095][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.596320][T13011] tipc: Enabling of bearer rejected, already enabled [ 317.720335][T13019] FAULT_INJECTION: forcing a failure. [ 317.720335][T13019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.737008][T13019] CPU: 1 UID: 0 PID: 13019 Comm: syz.3.2142 Not tainted syzkaller #0 PREEMPT(full) [ 317.737035][T13019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.737045][T13019] Call Trace: [ 317.737053][T13019] [ 317.737061][T13019] dump_stack_lvl+0x189/0x250 [ 317.737087][T13019] ? __pfx____ratelimit+0x10/0x10 [ 317.737113][T13019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.737132][T13019] ? __pfx__printk+0x10/0x10 [ 317.737151][T13019] ? __might_fault+0xb0/0x130 [ 317.737180][T13019] should_fail_ex+0x414/0x560 [ 317.737210][T13019] _copy_from_user+0x2d/0xb0 [ 317.737231][T13019] nr_rt_ioctl+0x74f/0xd50 [ 317.737264][T13019] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 317.737284][T13019] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.737313][T13019] ? apparmor_capable+0x137/0x1b0 [ 317.737340][T13019] ? capable+0x89/0xe0 [ 317.737362][T13019] ? nr_ioctl+0x1b1/0x3b0 [ 317.737385][T13019] sock_do_ioctl+0xdc/0x300 [ 317.737408][T13019] ? __pfx_sock_do_ioctl+0x10/0x10 [ 317.737444][T13019] sock_ioctl+0x576/0x790 [ 317.737464][T13019] ? __pfx_sock_ioctl+0x10/0x10 [ 317.737487][T13019] ? __fget_files+0x3a0/0x420 [ 317.737506][T13019] ? __fget_files+0x2a/0x420 [ 317.737528][T13019] ? bpf_lsm_file_ioctl+0x9/0x20 [ 317.737549][T13019] ? __pfx_sock_ioctl+0x10/0x10 [ 317.737565][T13019] __se_sys_ioctl+0xfc/0x170 [ 317.737584][T13019] do_syscall_64+0xfa/0xfa0 [ 317.737599][T13019] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.737615][T13019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.737633][T13019] ? clear_bhb_loop+0x60/0xb0 [ 317.737654][T13019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.737671][T13019] RIP: 0033:0x7f4ce918eec9 [ 317.737687][T13019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.737701][T13019] RSP: 002b:00007f4cea07b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.737719][T13019] RAX: ffffffffffffffda RBX: 00007f4ce93e5fa0 RCX: 00007f4ce918eec9 [ 317.737732][T13019] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000004 [ 317.737743][T13019] RBP: 00007f4cea07b090 R08: 0000000000000000 R09: 0000000000000000 [ 317.737753][T13019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.737763][T13019] R13: 00007f4ce93e6038 R14: 00007f4ce93e5fa0 R15: 00007ffe9aebbd18 [ 317.737801][T13019] [ 318.480456][T13044] __nla_validate_parse: 65 callbacks suppressed [ 318.480473][T13044] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2152'. [ 318.508992][T13039] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2150'. [ 318.610446][T13054] netlink: 'syz.3.2153': attribute type 1 has an invalid length. [ 318.623302][T13054] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2153'. [ 318.633718][T13054] NCSI netlink: No device for ifindex 0 [ 318.661167][T13056] FAULT_INJECTION: forcing a failure. [ 318.661167][T13056] name failslab, interval 1, probability 0, space 0, times 0 [ 318.675037][T13056] CPU: 1 UID: 0 PID: 13056 Comm: syz.2.2154 Not tainted syzkaller #0 PREEMPT(full) [ 318.675061][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 318.675073][T13056] Call Trace: [ 318.675080][T13056] [ 318.675088][T13056] dump_stack_lvl+0x189/0x250 [ 318.675113][T13056] ? __pfx____ratelimit+0x10/0x10 [ 318.675139][T13056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.675158][T13056] ? __pfx__printk+0x10/0x10 [ 318.675181][T13056] ? __pfx___might_resched+0x10/0x10 [ 318.675204][T13056] ? fs_reclaim_acquire+0x7d/0x100 [ 318.675229][T13056] should_fail_ex+0x414/0x560 [ 318.675260][T13056] should_failslab+0xa8/0x100 [ 318.675283][T13056] kmem_cache_alloc_node_noprof+0x77/0x710 [ 318.675302][T13056] ? __alloc_skb+0x112/0x2d0 [ 318.675331][T13056] __alloc_skb+0x112/0x2d0 [ 318.675357][T13056] tipc_msg_build+0x13b/0xcf0 [ 318.675382][T13056] ? tipc_node_find+0xb3/0x480 [ 318.675399][T13056] ? __pfx_tipc_msg_build+0x10/0x10 [ 318.675435][T13056] tipc_send_group_msg+0x25d/0x570 [ 318.675451][T13056] ? tipc_dest_pop+0x19c/0x230 [ 318.675471][T13056] ? __tipc_sendmsg+0x13b1/0x2960 [ 318.675492][T13056] ? __pfx_tipc_send_group_msg+0x10/0x10 [ 318.675529][T13056] tipc_send_group_unicast+0x488/0x500 [ 318.675565][T13056] ? __pfx_tipc_send_group_unicast+0x10/0x10 [ 318.675587][T13056] ? __pfx_woken_wake_function+0x10/0x10 [ 318.675615][T13056] ? tipc_dest_pop+0x19c/0x230 [ 318.675640][T13056] __tipc_sendmsg+0x13c8/0x2960 [ 318.675675][T13056] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 318.675700][T13056] ? __pfx___tipc_sendmsg+0x10/0x10 [ 318.675722][T13056] ? aa_label_sk_perm+0x4cd/0x630 [ 318.675748][T13056] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 318.675779][T13056] ? __lock_acquire+0xab9/0xd20 [ 318.675809][T13056] ? __lock_acquire+0xab9/0xd20 [ 318.675844][T13056] ? __local_bh_enable_ip+0x12d/0x1c0 [ 318.675866][T13056] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.675886][T13056] ? __local_bh_enable_ip+0x12d/0x1c0 [ 318.675907][T13056] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 318.675941][T13056] tipc_sendmsg+0x55/0x70 [ 318.675958][T13056] ? __pfx_tipc_sendmsg+0x10/0x10 [ 318.675976][T13056] __sock_sendmsg+0x21c/0x270 [ 318.676010][T13056] ____sys_sendmsg+0x505/0x830 [ 318.676037][T13056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.676072][T13056] ? import_iovec+0x74/0xa0 [ 318.676099][T13056] ___sys_sendmsg+0x21f/0x2a0 [ 318.676119][T13056] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.676175][T13056] ? __fget_files+0x2a/0x420 [ 318.676194][T13056] ? __fget_files+0x3a0/0x420 [ 318.676226][T13056] __x64_sys_sendmsg+0x19b/0x260 [ 318.676246][T13056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.676274][T13056] ? __pfx_ksys_write+0x10/0x10 [ 318.676297][T13056] ? do_syscall_64+0xbe/0xfa0 [ 318.676318][T13056] do_syscall_64+0xfa/0xfa0 [ 318.676335][T13056] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.676352][T13056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.676371][T13056] ? clear_bhb_loop+0x60/0xb0 [ 318.676392][T13056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.676409][T13056] RIP: 0033:0x7f0bea78eec9 [ 318.676426][T13056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.676441][T13056] RSP: 002b:00007f0beb6af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.676461][T13056] RAX: ffffffffffffffda RBX: 00007f0bea9e5fa0 RCX: 00007f0bea78eec9 [ 318.676474][T13056] RDX: 0000000000040805 RSI: 0000200000000440 RDI: 0000000000000004 [ 318.676486][T13056] RBP: 00007f0beb6af090 R08: 0000000000000000 R09: 0000000000000000 [ 318.676497][T13056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.676508][T13056] R13: 00007f0bea9e6038 R14: 00007f0bea9e5fa0 R15: 00007ffc634abb08 [ 318.676538][T13056] [ 319.251435][T13065] netlink: 'syz.0.2158': attribute type 4 has an invalid length. [ 319.283882][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'. [ 319.511809][T13075] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.527706][T13075] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.599770][T13075] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.618793][T13075] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.671215][T13085] netlink: 'syz.4.2166': attribute type 1 has an invalid length. [ 319.696004][T13085] netlink: 'syz.4.2166': attribute type 2 has an invalid length. [ 319.721933][T13075] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.733725][T13075] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.824683][T13075] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.842321][T13075] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.856406][T13090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.075740][T13095] netlink: 384 bytes leftover after parsing attributes in process `syz.3.2170'. [ 320.134271][ T6094] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.147265][ T6094] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.235312][ T6094] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.243709][ T6094] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.295507][ T6094] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.315688][ T6094] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.355931][T13101] vlan0: left promiscuous mode [ 320.411505][T13109] FAULT_INJECTION: forcing a failure. [ 320.411505][T13109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.426302][T13109] CPU: 0 UID: 0 PID: 13109 Comm: syz.1.2177 Not tainted syzkaller #0 PREEMPT(full) [ 320.426329][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.426339][T13109] Call Trace: [ 320.426346][T13109] [ 320.426354][T13109] dump_stack_lvl+0x189/0x250 [ 320.426377][T13109] ? __pfx____ratelimit+0x10/0x10 [ 320.426400][T13109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.426417][T13109] ? __pfx__printk+0x10/0x10 [ 320.426434][T13109] ? __might_fault+0xb0/0x130 [ 320.426463][T13109] should_fail_ex+0x414/0x560 [ 320.426493][T13109] _copy_from_iter+0x1de/0x1790 [ 320.426521][T13109] ? rcu_is_watching+0x15/0xb0 [ 320.426548][T13109] ? kmalloc_reserve+0xbd/0x290 [ 320.426571][T13109] ? __pfx__copy_from_iter+0x10/0x10 [ 320.426593][T13109] ? __build_skb_around+0x262/0x3f0 [ 320.426620][T13109] ? netlink_sendmsg+0x642/0xb30 [ 320.426643][T13109] ? skb_put+0x11b/0x210 [ 320.426667][T13109] netlink_sendmsg+0x6b2/0xb30 [ 320.426698][T13109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.426722][T13109] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.426741][T13109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.426761][T13109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.426783][T13109] __sock_sendmsg+0x21c/0x270 [ 320.426807][T13109] ____sys_sendmsg+0x505/0x830 [ 320.426839][T13109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.426870][T13109] ? import_iovec+0x74/0xa0 [ 320.426894][T13109] ___sys_sendmsg+0x21f/0x2a0 [ 320.426912][T13109] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.426964][T13109] ? __fget_files+0x2a/0x420 [ 320.426983][T13109] ? __fget_files+0x3a0/0x420 [ 320.427011][T13109] __x64_sys_sendmsg+0x19b/0x260 [ 320.427031][T13109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.427058][T13109] ? __pfx_ksys_write+0x10/0x10 [ 320.427081][T13109] ? do_syscall_64+0xbe/0xfa0 [ 320.427102][T13109] do_syscall_64+0xfa/0xfa0 [ 320.427119][T13109] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.427137][T13109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.427154][T13109] ? clear_bhb_loop+0x60/0xb0 [ 320.427176][T13109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.427192][T13109] RIP: 0033:0x7fda7658eec9 [ 320.427210][T13109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.427225][T13109] RSP: 002b:00007fda7737b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.427245][T13109] RAX: ffffffffffffffda RBX: 00007fda767e5fa0 RCX: 00007fda7658eec9 [ 320.427259][T13109] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 320.427271][T13109] RBP: 00007fda7737b090 R08: 0000000000000000 R09: 0000000000000000 [ 320.427283][T13109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.427294][T13109] R13: 00007fda767e6038 R14: 00007fda767e5fa0 R15: 00007ffd58ea9dc8 [ 320.427332][T13109] [ 320.812079][ T6094] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 320.822529][ T6094] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 320.833158][ T6094] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 320.842108][ T6094] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 320.851420][ T6094] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.859850][ T6094] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.980598][T13122] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.2178'. [ 321.481662][T13145] netlink: 'syz.3.2190': attribute type 1 has an invalid length. [ 321.564583][T13145] 8021q: adding VLAN 0 to HW filter on device bond5 [ 321.684120][T13145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2190'. [ 321.735961][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'. [ 322.019317][T13158] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 322.063354][T13158] netlink: 'syz.1.2194': attribute type 1 has an invalid length. [ 322.096378][T13158] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2194'. [ 322.117038][T13158] netlink: 'syz.1.2194': attribute type 2 has an invalid length. [ 322.124831][T13158] netlink: 'syz.1.2194': attribute type 1 has an invalid length. [ 322.138386][T13165] bond4: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 322.148274][T13165] bond4: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 322.198338][T13169] x_tables: duplicate underflow at hook 2 [ 322.367095][T13167] wlan1 speed is unknown, defaulting to 1000 [ 322.533300][T13184] netlink: 'syz.4.2201': attribute type 4 has an invalid length. [ 322.550395][T13184] netlink: 'syz.4.2201': attribute type 1 has an invalid length. [ 322.567208][T13184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2201'. [ 322.666918][T13184] team0: Port device dummy0 added [ 322.832552][T13182] wlan1 speed is unknown, defaulting to 1000 [ 322.839789][T13191] openvswitch: netlink: IP tunnel dst address not specified [ 322.900392][T13189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.201829][T13195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.755551][T13220] validate_nla: 2 callbacks suppressed [ 323.755568][T13220] netlink: 'syz.4.2212': attribute type 1 has an invalid length. [ 323.797819][T13220] __nla_validate_parse: 1 callbacks suppressed [ 323.797836][T13220] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2212'. [ 323.827062][T13220] netlink: 'syz.4.2212': attribute type 2 has an invalid length. [ 323.845461][T13220] netlink: 'syz.4.2212': attribute type 1 has an invalid length. [ 323.857676][T13220] FAULT_INJECTION: forcing a failure. [ 323.857676][T13220] name failslab, interval 1, probability 0, space 0, times 0 [ 323.886386][T13220] CPU: 1 UID: 0 PID: 13220 Comm: syz.4.2212 Not tainted syzkaller #0 PREEMPT(full) [ 323.886416][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.886427][T13220] Call Trace: [ 323.886434][T13220] [ 323.886443][T13220] dump_stack_lvl+0x189/0x250 [ 323.886467][T13220] ? __pfx____ratelimit+0x10/0x10 [ 323.886493][T13220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.886511][T13220] ? __pfx__printk+0x10/0x10 [ 323.886536][T13220] ? __pfx___might_resched+0x10/0x10 [ 323.886565][T13220] should_fail_ex+0x414/0x560 [ 323.886597][T13220] should_failslab+0xa8/0x100 [ 323.886621][T13220] kmem_cache_alloc_node_noprof+0x77/0x710 [ 323.886641][T13220] ? __alloc_skb+0x112/0x2d0 [ 323.886671][T13220] __alloc_skb+0x112/0x2d0 [ 323.886698][T13220] netlink_ack+0x146/0xa50 [ 323.886719][T13220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.886756][T13220] netlink_rcv_skb+0x28c/0x470 [ 323.886778][T13220] ? __lock_acquire+0xab9/0xd20 [ 323.886801][T13220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.886821][T13220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.886857][T13220] ? down_read+0x1ad/0x2e0 [ 323.886878][T13220] genl_rcv+0x28/0x40 [ 323.886895][T13220] netlink_unicast+0x82f/0x9e0 [ 323.886927][T13220] ? __pfx_netlink_unicast+0x10/0x10 [ 323.886951][T13220] ? netlink_sendmsg+0x642/0xb30 [ 323.886973][T13220] ? skb_put+0x11b/0x210 [ 323.887001][T13220] netlink_sendmsg+0x805/0xb30 [ 323.887035][T13220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.887063][T13220] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.887086][T13220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.887107][T13220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.887132][T13220] __sock_sendmsg+0x21c/0x270 [ 323.887155][T13220] ____sys_sendmsg+0x505/0x830 [ 323.887176][T13220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.887209][T13220] ? import_iovec+0x74/0xa0 [ 323.887234][T13220] ___sys_sendmsg+0x21f/0x2a0 [ 323.887253][T13220] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.887308][T13220] ? __fget_files+0x2a/0x420 [ 323.887328][T13220] ? __fget_files+0x3a0/0x420 [ 323.887367][T13220] __x64_sys_sendmsg+0x19b/0x260 [ 323.887388][T13220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.887416][T13220] ? __pfx_ksys_write+0x10/0x10 [ 323.887439][T13220] ? do_syscall_64+0xbe/0xfa0 [ 323.887461][T13220] do_syscall_64+0xfa/0xfa0 [ 323.887477][T13220] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.887495][T13220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.887513][T13220] ? clear_bhb_loop+0x60/0xb0 [ 323.887535][T13220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.887552][T13220] RIP: 0033:0x7f7d4798eec9 [ 323.887569][T13220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.887584][T13220] RSP: 002b:00007f7d48773038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.887604][T13220] RAX: ffffffffffffffda RBX: 00007f7d47be5fa0 RCX: 00007f7d4798eec9 [ 323.887617][T13220] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 323.887629][T13220] RBP: 00007f7d48773090 R08: 0000000000000000 R09: 0000000000000000 [ 323.887641][T13220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.887651][T13220] R13: 00007f7d47be6038 R14: 00007f7d47be5fa0 R15: 00007fffb46bc728 [ 323.887685][T13220] [ 324.207027][T13217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2211'. [ 324.668374][T13239] netlink: 'syz.2.2218': attribute type 4 has an invalid length. [ 324.749400][T13239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.756658][T13246] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.2221'. [ 324.759928][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2218'. [ 325.132356][T13265] netlink: 'syz.2.2226': attribute type 21 has an invalid length. [ 325.379392][T13274] wlan1 speed is unknown, defaulting to 1000 [ 325.399642][T13276] sctp: [Deprecated]: syz.2.2227 (pid 13276) Use of int in maxseg socket option. [ 325.399642][T13276] Use struct sctp_assoc_value instead [ 325.580940][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'. [ 325.633233][T13278] bridge0: entered promiscuous mode [ 325.664012][T13278] bridge1: port 1(macvlan2) entered blocking state [ 325.673120][T13278] bridge1: port 1(macvlan2) entered disabled state [ 325.682010][T13278] macvlan2: entered allmulticast mode [ 325.689078][T13278] bridge0: entered allmulticast mode [ 325.698695][T13278] macvlan2: entered promiscuous mode [ 325.708199][T13278] bridge1: port 1(macvlan2) entered blocking state [ 325.715075][T13278] bridge1: port 1(macvlan2) entered forwarding state [ 325.727096][ C0] [ 325.729452][ C0] ============================================ [ 325.735593][ C0] WARNING: possible recursive locking detected [ 325.741733][ C0] syzkaller #0 Not tainted [ 325.746130][ C0] -------------------------------------------- [ 325.752267][ C0] syz-executor/13284 is trying to acquire lock: [ 325.758513][ C0] ffff88807b1e5508 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_rcv+0x2d0b/0x74b0 [ 325.768337][ C0] [ 325.768337][ C0] but task is already holding lock: [ 325.775682][ C0] ffff88807ca1d508 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_port_query_expired+0x62/0x370 [ 325.786542][ C0] [ 325.786542][ C0] other info that might help us debug this: [ 325.794579][ C0] Possible unsafe locking scenario: [ 325.794579][ C0] [ 325.802009][ C0] CPU0 [ 325.805277][ C0] ---- [ 325.808534][ C0] lock(&br->multicast_lock); [ 325.813284][ C0] lock(&br->multicast_lock); [ 325.818036][ C0] [ 325.818036][ C0] *** DEADLOCK *** [ 325.818036][ C0] [ 325.826158][ C0] May be due to missing lock nesting notation [ 325.826158][ C0] [ 325.834456][ C0] 7 locks held by syz-executor/13284: [ 325.839806][ C0] #0: ffff88807dfcfb50 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: lookup_slow+0x46/0x70 [ 325.849990][ C0] #1: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 325.859644][ C0] #2: ffffc90000007be0 ((&pmctx->ip6_own_query.timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 325.870250][ C0] #3: ffff88807ca1d508 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_port_query_expired+0x62/0x370 [ 325.881549][ C0] #4: ffffffff8e13d340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x284/0x3740 [ 325.891455][ C0] #5: ffffffff8e13d340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x284/0x3740 [ 325.901361][ C0] #6: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 325.910581][ C0] [ 325.910581][ C0] stack backtrace: [ 325.916452][ C0] CPU: 0 UID: 0 PID: 13284 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 325.916470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.916480][ C0] Call Trace: [ 325.916489][ C0] [ 325.916497][ C0] dump_stack_lvl+0x189/0x250 [ 325.916515][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.916531][ C0] ? __pfx__printk+0x10/0x10 [ 325.916547][ C0] ? print_lock_name+0xde/0x100 [ 325.916563][ C0] print_deadlock_bug+0x28b/0x2a0 [ 325.916587][ C0] validate_chain+0x1a3f/0x2140 [ 325.916609][ C0] ? __skb_checksum_complete+0x13d/0x3d0 [ 325.916630][ C0] ? ipv6_mc_validate_checksum+0x3dc/0x6a0 [ 325.916647][ C0] ? csum_partial+0x239/0x2c0 [ 325.916670][ C0] __lock_acquire+0xab9/0xd20 [ 325.916691][ C0] ? br_multicast_rcv+0x2d0b/0x74b0 [ 325.916712][ C0] lock_acquire+0x120/0x360 [ 325.916730][ C0] ? br_multicast_rcv+0x2d0b/0x74b0 [ 325.916751][ C0] ? __pfx_ipv6_mc_check_mld+0x10/0x10 [ 325.916767][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 325.916788][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 325.916809][ C0] _raw_spin_lock+0x2e/0x40 [ 325.916834][ C0] ? br_multicast_rcv+0x2d0b/0x74b0 [ 325.916855][ C0] br_multicast_rcv+0x2d0b/0x74b0 [ 325.916875][ C0] ? unwind_get_return_address+0x4d/0x90 [ 325.916898][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.916920][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 325.916935][ C0] ? stack_depot_save_flags+0x40/0x860 [ 325.916952][ C0] ? __pfx_br_multicast_rcv+0x10/0x10 [ 325.916972][ C0] ? kasan_save_track+0x4f/0x80 [ 325.916987][ C0] ? kasan_save_track+0x3e/0x80 [ 325.917002][ C0] ? __kasan_save_free_info+0x46/0x50 [ 325.917024][ C0] ? __kasan_slab_free+0x5c/0x80 [ 325.917040][ C0] ? kmem_cache_free+0x19b/0x690 [ 325.917056][ C0] ? tcp_ack+0x2266/0x6950 [ 325.917073][ C0] ? tcp_rcv_established+0x1908/0x2670 [ 325.917092][ C0] ? tcp_v4_do_rcv+0xa23/0xce0 [ 325.917106][ C0] ? tcp_v4_rcv+0x252a/0x2dc0 [ 325.917119][ C0] ? ip_protocol_deliver_rcu+0x221/0x440 [ 325.917141][ C0] ? ip_local_deliver_finish+0x3bb/0x6f0 [ 325.917164][ C0] ? NF_HOOK+0x30c/0x3a0 [ 325.917183][ C0] ? ip_sublist_rcv_finish+0x221/0x2a0 [ 325.917196][ C0] ? ip_sublist_rcv+0x74c/0xa10 [ 325.917217][ C0] ? __netif_receive_skb_list_core+0x7d2/0x800 [ 325.917237][ C0] ? netif_receive_skb_list_internal+0x96f/0xcb0 [ 325.917254][ C0] ? napi_complete_done+0x2f2/0x7c0 [ 325.917270][ C0] ? virtnet_poll+0x23a6/0x2d80 [ 325.917288][ C0] ? rcu_is_watching+0x15/0xb0 [ 325.917310][ C0] ? rcu_is_watching+0x15/0xb0 [ 325.917331][ C0] ? trace_pelt_se_tp+0x39/0x130 [ 325.917347][ C0] ? __lock_acquire+0xab9/0xd20 [ 325.917371][ C0] ? trace_save_cmdline+0x35b/0x500 [ 325.917393][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 325.917414][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 325.917436][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 325.917461][ C0] ? __lock_acquire+0xab9/0xd20 [ 325.917481][ C0] ? br_dev_xmit+0x185/0x1840 [ 325.917498][ C0] ? br_allowed_ingress+0xd3/0x1040 [ 325.917522][ C0] br_dev_xmit+0xaf7/0x1840 [ 325.917539][ C0] ? br_dev_xmit+0x185/0x1840 [ 325.917558][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 325.917573][ C0] ? validate_xmit_xfrm+0xbf/0x1160 [ 325.917595][ C0] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 325.917621][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 325.917642][ C0] __dev_queue_xmit+0x172a/0x3740 [ 325.917663][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 325.917679][ C0] ? rcu_is_watching+0x15/0xb0 [ 325.917698][ C0] ? __kasan_check_byte+0x12/0x40 [ 325.917716][ C0] ? unwind_next_frame+0xa5/0x2390 [ 325.917738][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 325.917753][ C0] ? __kasan_check_byte+0x12/0x40 [ 325.917771][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 325.917791][ C0] ? rcu_is_watching+0x15/0xb0 [ 325.917811][ C0] ? __kasan_check_byte+0x12/0x40 [ 325.917830][ C0] ? skb_network_protocol+0x508/0x760 [ 325.917844][ C0] ? lock_release+0x4b/0x3e0 [ 325.917863][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 325.917878][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 325.917897][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 325.917920][ C0] ? netif_skb_features+0xa69/0x1540 [ 325.917935][ C0] ? validate_xmit_xfrm+0xbf/0x1160 [ 325.917957][ C0] macvlan_start_xmit+0x46d/0x6e0 [ 325.917980][ C0] ? __pfx_macvlan_start_xmit+0x10/0x10 [ 325.918004][ C0] dev_hard_start_xmit+0x2d7/0x830 [ 325.918025][ C0] __dev_queue_xmit+0x172a/0x3740 [ 325.918046][ C0] ? __dev_queue_xmit+0x284/0x3740 [ 325.918063][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 325.918083][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.918099][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 325.918114][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 325.918133][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 325.918156][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 325.918173][ C0] ? ebt_do_table+0x265b/0x2820 [ 325.918196][ C0] ? ipv6_dev_get_saddr+0x143/0xb70 [ 325.918220][ C0] br_dev_queue_push_xmit+0x6c5/0x890 [ 325.918245][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 325.918269][ C0] ? __br_multicast_send_query+0x3df7/0x4580 [ 325.918286][ C0] ? __br_multicast_send_query+0x3df7/0x4580 [ 325.918302][ C0] __br_multicast_send_query+0x2ea1/0x4580 [ 325.918331][ C0] ? __pfx___br_multicast_send_query+0x10/0x10 [ 325.918348][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 325.918376][ C0] br_multicast_send_query+0x4d6/0x680 [ 325.918394][ C0] ? __pfx_br_multicast_send_query+0x10/0x10 [ 325.918415][ C0] ? do_raw_spin_lock+0x121/0x290 [ 325.918431][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 325.918446][ C0] ? call_timer_fn+0xbe/0x5f0 [ 325.918465][ C0] ? call_timer_fn+0xbe/0x5f0 [ 325.918484][ C0] br_multicast_port_query_expired+0x2a4/0x370 [ 325.918503][ C0] call_timer_fn+0x17e/0x5f0 [ 325.918521][ C0] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 325.918543][ C0] ? call_timer_fn+0xbe/0x5f0 [ 325.918560][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 325.918581][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.918603][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.918616][ C0] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 325.918638][ C0] __run_timer_base+0x61a/0x860 [ 325.918661][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 325.918676][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 325.918697][ C0] run_timer_softirq+0xb7/0x180 [ 325.918715][ C0] handle_softirqs+0x286/0x870 [ 325.918736][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 325.918758][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 325.918782][ C0] __irq_exit_rcu+0xca/0x1f0 [ 325.918801][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 325.918824][ C0] irq_exit_rcu+0x9/0x30 [ 325.918842][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 325.918867][ C0] [ 325.918872][ C0] [ 325.918877][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.918894][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 325.918914][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 fb ac f3 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 325.918927][ C0] RSP: 0018:ffffc9000c956f58 EFLAGS: 00000206 [ 325.918941][ C0] RAX: b9605ba17f675900 RBX: 0000000000000000 RCX: b9605ba17f675900 [ 325.918952][ C0] RDX: 0000000000000000 RSI: ffffffff8d9d182c RDI: ffffffff8bc077e0 [ 325.918963][ C0] RBP: ffffffff8173cd25 R08: 0000000000000000 R09: ffffffff8173cd25 [ 325.918974][ C0] R10: ffffc9000c957118 R11: ffffffff81ac6cd0 R12: 0000000000000002 [ 325.918985][ C0] R13: ffffffff8e13d2e0 R14: 0000000000000000 R15: 0000000000000246 [ 325.918996][ C0] ? unwind_next_frame+0xa5/0x2390 [ 325.919017][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.919032][ C0] ? unwind_next_frame+0xa5/0x2390 [ 325.919059][ C0] ? unwind_next_frame+0xa5/0x2390 [ 325.919080][ C0] ? __d_alloc+0x36/0x7a0 [ 325.919100][ C0] ? unwind_next_frame+0xa5/0x2390 [ 325.919121][ C0] unwind_next_frame+0xc2/0x2390 [ 325.919141][ C0] ? unwind_next_frame+0xa5/0x2390 [ 325.919165][ C0] ? unwind_next_frame+0xa5/0x2390 [ 325.919186][ C0] ? kmem_cache_alloc_lru_noprof+0x35d/0x6d0 [ 325.919204][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.919219][ C0] arch_stack_walk+0x11c/0x150 [ 325.919244][ C0] ? __d_alloc+0x36/0x7a0 [ 325.919265][ C0] stack_trace_save+0x9c/0xe0 [ 325.919279][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 325.919295][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 325.919317][ C0] kasan_save_track+0x3e/0x80 [ 325.919332][ C0] ? kasan_save_track+0x3e/0x80 [ 325.919347][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 325.919363][ C0] ? kmem_cache_alloc_lru_noprof+0x35d/0x6d0 [ 325.919377][ C0] ? __d_alloc+0x36/0x7a0 [ 325.919418][ C0] __kasan_slab_alloc+0x6c/0x80 [ 325.919435][ C0] kmem_cache_alloc_lru_noprof+0x35d/0x6d0 [ 325.919451][ C0] ? __d_alloc+0x36/0x7a0 [ 325.919472][ C0] __d_alloc+0x36/0x7a0 [ 325.919494][ C0] d_alloc_parallel+0xe1/0x1610 [ 325.919518][ C0] ? __lock_acquire+0xab9/0xd20 [ 325.919539][ C0] ? __lock_acquire+0xab9/0xd20 [ 325.919557][ C0] ? __pfx_d_alloc_parallel+0x10/0x10 [ 325.919580][ C0] ? __raw_spin_lock_init+0x45/0x100 [ 325.919595][ C0] ? __init_waitqueue_head+0xa9/0x150 [ 325.919613][ C0] __lookup_slow+0x116/0x3d0 [ 325.919635][ C0] ? __pfx___lookup_slow+0x10/0x10 [ 325.919662][ C0] ? down_read+0x1ad/0x2e0 [ 325.919679][ C0] lookup_slow+0x53/0x70 [ 325.919700][ C0] walk_component+0x2d2/0x400 [ 325.919722][ C0] link_path_walk+0x75b/0xea0 [ 325.919747][ C0] path_openat+0x28c/0x3830 [ 325.919773][ C0] ? __pfx_path_openat+0x10/0x10 [ 325.919789][ C0] ? look_up_lock_class+0x74/0x170 [ 325.919807][ C0] do_filp_open+0x1fa/0x410 [ 325.919820][ C0] ? __lock_acquire+0xab9/0xd20 [ 325.919839][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 325.919856][ C0] ? __pfx_kfree_link+0x10/0x10 [ 325.919876][ C0] ? _raw_spin_unlock+0x28/0x50 [ 325.919897][ C0] ? alloc_fd+0x64c/0x6c0 [ 325.919918][ C0] do_sys_openat2+0x121/0x1c0 [ 325.919940][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 325.919962][ C0] ? exc_page_fault+0x82/0x100 [ 325.919977][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 325.920010][ C0] __x64_sys_openat+0x138/0x170 [ 325.920033][ C0] do_syscall_64+0xfa/0xfa0 [ 325.920048][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.920062][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.920077][ C0] ? clear_bhb_loop+0x60/0xb0 [ 325.920093][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.920108][ C0] RIP: 0033:0x7fda7658d710 [ 325.920121][ C0] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 325.920133][ C0] RSP: 002b:00007ffd58ea9bd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 325.920148][ C0] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007fda7658d710 [ 325.920160][ C0] RDX: 0000000000080001 RSI: 00007fda76613818 RDI: 00000000ffffff9c [ 325.920171][ C0] RBP: 00007fda76613818 R08: 0000000000000000 R09: 0000000000000000 [ 325.920181][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 325.920190][ C0] R13: 00007ffd58ea9c70 R14: 000000000004f7f8 R15: 00007ffd58eaa1e0 [ 325.920207][ C0] [ 327.097048][T13276] wlan1 speed is unknown, defaulting to 1000