last executing test programs: 2.329948668s ago: executing program 4 (id=5224): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x58, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x4, 0x3}}, 0x5, @random=0x2, 0x4, @val, @val, @void, @val={0x4, 0x6, {0xa, 0xff, 0xc2ac, 0xa}}, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x58}}, 0x4000010) 2.120140072s ago: executing program 1 (id=5225): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) 2.02685745s ago: executing program 3 (id=5227): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2b, &(0x7f00000000c0)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x0, 0x29, 0x0, 0x2, 0x2ea}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) getsockopt$inet_opts(r1, 0x0, 0xd, 0x0, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) readv(r4, &(0x7f0000000740)=[{0x0}], 0x1) sendfile(r5, r4, 0x0, 0xf03a0005) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r8, r8, 0x0, 0x9) r9 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_int(r9, 0x1, 0x22, 0x0, &(0x7f0000000180)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130001002dbd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000080013e5ff875785207b7ed9a6ee149e2c544e5895f49ee5fdc2415bcf5d3a8a4de9ec54b3a144262b372659640527a787bfb5609486a994c594a866b70af8fea549fcef07fe58ac19c92aea4d18b4aa6a63ebfec3d801b2be798db6d6bc6cee30d2c00c589c5f9b45f5c9761cd43ee33be64caa6231646054428e1ea43f172f39877fe3a62b1b4ccc9088c7", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x9, 0x10, 0x0, 0xfffffff4}, {0x2, 0x8, 0x1, 0x4}, {0x7, 0x4, 0xf, 0x5}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x50, 0x4, 0x1}, {0x3, 0xff, 0x0, 0x9}, {0x3, 0x0, 0x6, 0x1}, {0x9, 0x1a, 0x6, 0x1000}]}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) 2.01857006s ago: executing program 2 (id=5228): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @empty}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r3, &(0x7f0000002a40)=[{&(0x7f0000001640)="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", 0x3f8}], 0x1) 1.970609017s ago: executing program 4 (id=5229): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040002a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x120, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0x88, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1002}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x47, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x120}, 0x1, 0x0, 0x0, 0x41}, 0x8080) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3a0000001c"], 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x6d, "5f16539ecc47db59888d7476dcac68638b0142c66428cffbe8537aca2a0a1265524ad7a2242006418e8370e6a27342c1c99f2ef532a378b9ba8b85d3fac6e3e6f85d937bd4a63fb22c7643c8467dedcf4367e663705b5f8eb988fcbc796d2736c3d55613d687f6465541c1eda2"}, &(0x7f0000000140)=0x75) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={r3, 0xe68}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}, 0x81, 0x5}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r3, 0xffffffff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipmr_getroute={0x1c, 0x1a, 0x819, 0x70bd2c, 0x25dfdbfc, {0x80, 0x0, 0x10, 0xff, 0xfc, 0x0, 0x36, 0x5, 0x2100}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x5, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448e4, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x6000000, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000540)={r13, 0x2}, 0x8) 1.837052564s ago: executing program 1 (id=5231): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'vxcan1\x00', &(0x7f00000006c0)=@ethtool_dump={0x8814ffb5e4f3d659, 0xffff4bc5, 0x0, 0x56, "8fce62c332e8f3a7b90d006895c30f7d458958511a1dfe112d382632772955b00747b160dd07ffad997e77d7b7d5432f8ad4114a5ae258e4f35d46ac3dae31abca308f15b4bd6fcbc69ee21d9447b2e48c7d11649ab5"}}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.724871911s ago: executing program 0 (id=5232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)="000a11000500000000eb55000000000100aa34740000", 0x16, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 1.533325583s ago: executing program 0 (id=5233): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000) sendmsg$nl_route_sched(r0, 0x0, 0x20084084) 1.532940387s ago: executing program 1 (id=5234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @local, @val={@val={0x88a8, 0x6}, {0x8100, 0x5}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8ab7f2", 0x14, 0x2c, 0x0, @empty, @local, {[], {{0x3a04, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@allocspi={0x11c, 0x16, 0x1, 0x3, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xa, 0x4}, {0x0, 0x9, 0x80ec}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, 0x5, 0x5}, [@lifetime_val={0x24, 0x9, {0x5, 0x916, 0x9, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001200090500000000000000000800bb0000000000c500008008000000", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672b0601c63c4f9c0bf2dc42c77065f2e"], 0xe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r11, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r13}, 0x99) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r11, &(0x7f0000000280)="aa", &(0x7f0000000400)=@udp=r12}, 0x20) 1.48100895s ago: executing program 4 (id=5235): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000061000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0x1}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xa0fe, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1300b877dbe8bc3aa6a45ef7feacc491498135", @ANYRES16=r3, @ANYBLOB="2503000000000000000016000000"], 0x14}}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000640)={0x3, 0x7, 0x1, 0x3, 0x8, 0x8, 0xe}) close(0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x14, r10, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r10, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'erspan0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000881) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.350259943s ago: executing program 0 (id=5236): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 1.309420438s ago: executing program 3 (id=5237): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x401) 1.092654151s ago: executing program 0 (id=5238): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0xde9c26d928be03ce) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x18}, 0x3400c8d4) write(r0, &(0x7f0000000000)="0a000200010078", 0x7) getsockname(r0, &(0x7f0000000400)=@ieee802154, &(0x7f0000000480)=0x80) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000003040)={{r0, &(0x7f0000000080)='-\x00', 0x0, &(0x7f0000000100)={@align=0x3, {0x8, 0x24f, 0xa6, 0x3c60}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0xffff0000}, 0x6, &(0x7f0000002f80)=[{0x2, 0xffffffff, &(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000b80)="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", 0x1000, 0xa}, {0x1, 0x0, &(0x7f0000001b80)='\x00', &(0x7f0000001bc0)="22b9f818f0a058c5b5166c80d35344962343ca4257b067743a0325333f85050b8e86520133e4c7d566551fadd48e2bb7eb784ee2f019c49470f5155451cd5da92e980b0f7e0a8985dec461e8990208a7756674876d9267ef30265edf9f739e9416e3c67e1977a2d95b7db85aa8e0f8d88261289fffa3a807e38a871fa4ef4572672612a9f0604185432934979ad7715498a4d285da587bea85a0bef800fef665f86897904f0ea0902d57e2843e959865a5415acef529b8f88a84389c64fd01a803ae3f8027ceaa752acd23b336abe63e7a595ad0c290fe338ec313282bf0f237ec076aa5c55f55", 0xe7, 0x28}, {0x2, 0x80a00000, &(0x7f0000001cc0)='syzkaller\x00', &(0x7f0000001d00)="8dc970d07b529419d66e6a3a05e00351c8b684cf0f763811f0f362d556ab229c215fa6f0a1a4ecc0", 0x28, 0x10}, {0x1, 0x100000, &(0x7f0000001d40)='$!$\x00', &(0x7f0000001d80)="c023bea79a76deb44baa7c788919fcbd220b9fd6eff57be00c9cd29281dae6ea2d2511e63902e6b812004cb6811d114105d1afb0fcc886c76f258f653f0cb84d370591339c05ebb318b941e7cc5437e5fb936ca62b503d853c2af10d2f7829dd9c8dc127100090fc30be8a652910373b3549b0d88a251f4cd20b9266bcf85b73a71b78fb7c6fb799ce78234107161c2462b7f70f684df78f8ff8cd3dfcaded25889e5d88dbb16ed2b9d84282f435fc08e4b9935a741f9dda4b5dbedee975b89907", 0xc1, 0x20}, {0x3, 0x5, &(0x7f0000001e80)='\x00', &(0x7f0000001ec0)="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", 0x1000, 0x30}, {0x1, 0x4, &(0x7f0000002ec0)='\x00', &(0x7f0000002f00)="f1255b856ff729f0268230f00067b16f2963b7f738755dfaa03e3dde37402e8680365c93a19ab0cff6eb46ab2c929e610d6f3568aa60636e90f7a059a5dd6dc83d5a94e5a775476b1dc52baf21d354", 0x4f, 0x18}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x4, 0x1, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x60000000}, 0xc) 1.046321883s ago: executing program 2 (id=5239): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0x1}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xa0fe, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'vxcan1\x00', &(0x7f00000006c0)=@ethtool_dump={0x8814ffb5e4f3d659, 0xffff4bc5, 0x0, 0xac, "8fce62c332e8f3a7b90d006895c30f7d458958511a1dfe112d382632772955b00747b160dd07ffad997e77d7b7d5432f8ad4114a5ae258e4f35d46ac3dae31abca308f15b4bd6fcbc69ee21d9447b2e48c7d11649ab572e6d825e37e31fa0b4b406cfcec06112937d7c699d49e90cfa3cee565af9ded48d1f767dcbec83b28308cc3c551d1bca6c1659771c9663cb5881e25861463c9743e1c4e8e15266c18ec58bcc161cc766e183a230138"}}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 965.564372ms ago: executing program 0 (id=5240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000fedbdf2520000000080003", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) 861.418486ms ago: executing program 2 (id=5241): r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) 802.981245ms ago: executing program 2 (id=5242): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)="000a11000500004000eb55000000000100aa34740000", 0x16, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 742.515209ms ago: executing program 2 (id=5243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000700)=ANY=[], 0x38}}, 0x0) 667.728158ms ago: executing program 2 (id=5244): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2dc, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x168, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f102591}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x533e4afc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12c02a75}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdec7}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c64}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d55}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cafe33e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x631d624a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x697e0528}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65811290}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x592d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7174595c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59b67361}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x239f8138}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf398}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5581}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc508}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ba0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2171d9fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7539b2e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15bcc315}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x899f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe05d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bb5bca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6399}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fd8e57a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x394efada}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0fe}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74442a9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5cb}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15b22794}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x106fc711}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x762eaba3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbcd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53fc1796}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50ae0b03}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65af02b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49b54b02}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16ec83ec}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfac0304}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5630c696}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27820874}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x144a3c25}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x793afd46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79924240}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x712eff2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7125059b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7505af2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55638d95}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7f6cdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x5}, 0x40040) write$nci(r0, &(0x7f0000001180)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0xb8, @f_listen={0x8, 0x7, 0x6, 0x82, 0x2, 0x7, 0x4a, {}, 0x64, 0xff, 0xa4, 0x9, 0x801, "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"}}, 0x811) 596.755287ms ago: executing program 0 (id=5245): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000061000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0x1}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xa0fe, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @mcast2={0xff, 0x3}, 0x2000, 0xba08}}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'vxcan1\x00', &(0x7f00000006c0)=@ethtool_dump={0x8814ffb5e4f3d659, 0xffff4bc5, 0x0, 0x55, "8fce62c332e8f3a7b90d006895c30f7d458958511a1dfe112d382632772955b00747b160dd07ffad997e77d7b7d5432f8ad4114a5ae258e4f35d46ac3dae31abca308f15b4bd6fcbc69ee21d9447b2e48c7d11649a"}}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 596.562258ms ago: executing program 4 (id=5246): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) 509.173991ms ago: executing program 3 (id=5247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0xff, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, &(0x7f0000000340)="402a19029ebb2c20ba49b07dcf76c1743245fcc4f029854f259843fbcb0a9c80deffa8eb41f33e88a19733757a6322e62e3fa906f3f25a701f30b712a7bf51f93c09fabfb12f4a375eb46f05c431b7cc4917e50b385855ed6041ce54c3ed6135e3d74cc82675898789d7a2f68d3d0d1633cafb5dc38ea8336c012d7e87d0d6c59a5477adcb7e8287ea8f822d11eee7264ef0ad007d4ba53cb4e120dfea07ab6335e5ab7512f3ce08c928b05cffe69493b88f204014dd57fa5f1fb33be09d322d04b8a94d58148909b6139d5f5a459d41", 0xd0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r3, &(0x7f0000000080)="44f9b108", 0x4, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) 445.007544ms ago: executing program 3 (id=5248): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 399.53684ms ago: executing program 1 (id=5249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002300)={{r0, &(0x7f0000000080)='#]-$\\,\x00', 0x440, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0xfffffffa]}, {0x7, 0x6, 0x7f, 0x10001}}, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x5}, 0x3, &(0x7f0000002280)=[{0x2, 0x8, &(0x7f0000000180)='\xd2{\x00', &(0x7f00000001c0)="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", 0x1000, 0x2a}, {0x2, 0x8, &(0x7f00000011c0)='}%){-\xf8\x00', &(0x7f0000001200)="314f06bd5a25a186f0273d911f0322c0572a004820d5be52ac48446b9ccaead2d452136366d31a4137e93d674995b0030569c6b3", 0x34, 0x8}, {0x1, 0x7, &(0x7f0000001240)='\x13&\x00', &(0x7f0000001280)="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", 0x1000, 0x8}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002380)=@bloom_filter={0x1e, 0x0, 0x0, 0x9, 0x180, r1, 0x400, '\x00', 0x0, r2, 0x5, 0x2, 0x3, 0xe}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet(0x2, 0x800, 0x5c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002400)={'batadv_slave_0\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f0000002440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0xf, 0x0, 0x0, 0x8, 0x3}, @const={0xa}, @float={0xb, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0x61, 0x0, 0x5f]}}, &(0x7f00000024c0)=""/83, 0x42, 0x53, 0x1, 0x3, 0x10000, @value=r1}, 0x28) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000002580)={'gretap0\x00', {0x2, 0x4e23, @remote}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'rose0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40805) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000026c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xfff, '\x00', r4, r2, 0x5, 0x2, 0x4}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000002940)={'batadv0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002cc0)={r2, 0xe0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002a00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000002a40)=[0x0, 0x0], &(0x7f0000002a80)=[0x0, 0x0], 0x0, 0xac, &(0x7f0000002ac0)=[{}, {}], 0x10, 0x10, &(0x7f0000002b00), &(0x7f0000002b40), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000002b80)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x9, 0x11, &(0x7f0000002740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@alu={0x4, 0x1, 0x1, 0x7, 0xa, 0x50, 0xfffffffffffffffc}, @generic={0x85, 0x5, 0x1, 0x4, 0xfffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002800)='GPL\x00', 0x9, 0xc6, &(0x7f0000002840)=""/198, 0x41100, 0x2, '\x00', r7, @fallback=0x1c, r2, 0x8, &(0x7f0000002980)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000029c0)={0x3, 0x5, 0xe, 0xbd1}, 0x10, r8, r2, 0x3, &(0x7f0000002d00)=[0x1, 0x1], &(0x7f0000002d40)=[{0x0, 0x4, 0xc, 0x6}, {0x5, 0x3, 0x10, 0x3}, {0x5, 0x4, 0x5, 0x7}], 0x10, 0x2}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x30, r11, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x30}, 0x1, 0x0, 0x0, 0x50810}, 0x400c015) (async) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000002f80)={0x7, 0x80}, 0x2) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000003140)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x44, r12, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x9, 0x4a}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x12, 0x1}, {0x1b}, {0x12, 0x1}, {0x12}, {0x6c, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1c}, {0x66ef66e393cf6f52}, {0xb}, {0x2}, {0x1b}, {0x30}, {0x6, 0x1}, {0xcb61f9fdf6dcec3f, 0x1}, {0x3, 0x1}, {}, {0x36}, {0x36}, {0x18, 0x1}]}]}, 0x44}}, 0x20040051) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003280)={&(0x7f0000003180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0xd, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x2e]}}, &(0x7f00000031c0)=""/192, 0x27, 0xc0, 0x1, 0x2, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000032c0)=@base={0x19, 0x0, 0xffffffff, 0x3628d470, 0x400, r1, 0x70000000, '\x00', r4, r14, 0x0, 0x5, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003640)={r9, 0xe0, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000003340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000003380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000033c0)=[0x0], 0x0, 0xda, &(0x7f0000003400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000003480), &(0x7f00000034c0), 0x8, 0x40, 0x8, 0x8, &(0x7f0000003500)}}, 0x10) (async) sendmsg$NET_DM_CMD_STOP(r10, &(0x7f0000003740)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$bt_l2cap(r9, &(0x7f0000003780)={0x1f, 0x3, @any, 0x81, 0x2}, 0xe) sendmsg$nl_route_sched(r1, &(0x7f0000003a80)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003800)=@newqdisc={0x224, 0x24, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8}, {0x8, 0xfff3}, {0x8, 0x4}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x7, 0x1, 0x4, 0x4, 0x80000000, 0x1, 0x9, 0x9, 0x8, 0x10, 0x17, 0xc, 0x16, 0x9049, 0xfff}}]}}, @qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x10000, 0x0, 0xd, 0x7d, 0x7}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x81}]}}}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x87, 0xe, 0x2, 0x6, 0x2, 0x8, 0x401, 0x3}}, {0xa, 0x2, [0x800, 0x5, 0x6880]}}, {{0x1c, 0x1, {0x7, 0x5, 0x2, 0x6b2, 0x2, 0x2fa, 0x3, 0x5}}, {0xe, 0x2, [0xffff, 0x10, 0x2, 0x400, 0x5]}}, {{0x1c, 0x1, {0xb, 0x4, 0x1ae, 0x2, 0x2, 0x2, 0x1ff, 0x7}}, {0x12, 0x2, [0x6, 0x7f, 0x81, 0x9, 0x40, 0x8d, 0x9]}}]}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8b, 0x50, 0x5, 0x5, 0x1, 0x1, 0x1, 0x5}}, {0xe, 0x2, [0x8b, 0x2, 0x101, 0x5, 0x2]}}, {{0x1c, 0x1, {0x2, 0xff, 0x4, 0x9, 0x1, 0x9, 0x10001, 0x3}}, {0xa, 0x2, [0x7fff, 0x4, 0x2]}}, {{0x1c, 0x1, {0xf3, 0x8, 0x7, 0x4, 0x0, 0x7fff, 0x5, 0x6}}, {0x10, 0x2, [0x2d, 0x9, 0x3, 0x5, 0x40, 0x3fd1]}}, {{0x1c, 0x1, {0xf1, 0xff, 0xa2, 0x200, 0x1, 0x10001, 0x3, 0x5}}, {0xe, 0x2, [0x401, 0x200, 0x7ed, 0x716f, 0x8000]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x9, 0xfd}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x81, 0x800, 0x6, 0x0, 0xfdb, 0x1, 0x1}}, {0x6, 0x2, [0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x224}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 237.305347ms ago: executing program 3 (id=5250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 203.688955ms ago: executing program 4 (id=5251): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socket(0x2d, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[], 0x0) 163.636113ms ago: executing program 1 (id=5252): r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) 58.992609ms ago: executing program 1 (id=5253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="000a11000500004000eb55000000000100aa34740000", 0x16, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 15.586267ms ago: executing program 3 (id=5254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000700)=ANY=[], 0x38}}, 0x0) 0s ago: executing program 4 (id=5255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000fedbdf2520000000080003", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) kernel console output (not intermixed with test programs): 336176][T16223] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3935'. [ 483.511569][ T5640] Bluetooth: hci4: link tx timeout [ 483.520035][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 484.546688][T16268] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 484.804393][T16277] __nla_validate_parse: 4 callbacks suppressed [ 484.804410][T16277] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3960'. [ 485.559212][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 485.765326][T16312] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 485.800244][T16317] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3979'. [ 486.437561][T16338] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3989'. [ 486.878182][T16355] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 487.186501][T16369] netlink: 1500 bytes leftover after parsing attributes in process `syz.3.4003'. [ 487.749655][T16394] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4014'. [ 488.193838][T16402] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 488.988866][T16419] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4025'. [ 489.257054][T16423] netlink: 'syz.4.4027': attribute type 8 has an invalid length. [ 489.695331][T16432] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 490.344212][T16446] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4037'. [ 491.111324][T16462] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 491.271225][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4046'. [ 491.914662][T16475] block nbd9: server does not support multiple connections per device. [ 491.979248][T16475] block nbd9: shutting down sockets [ 492.402664][T16495] : option downdelay: invalid value (18446744073709547007) [ 492.450255][T16495] : option downdelay: allowed values 0 - 2147483647 [ 492.470379][T16495]  (unregistering): Released all slaves [ 492.809861][T16510] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4065'. [ 493.027251][T16518] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4070'. [ 493.071139][T16520] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4068'. [ 493.567410][T16539] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4079'. [ 493.596253][T16544] FAULT_INJECTION: forcing a failure. [ 493.596253][T16544] name failslab, interval 1, probability 0, space 0, times 0 [ 493.622561][T16544] CPU: 0 UID: 0 PID: 16544 Comm: syz.1.4082 Not tainted syzkaller #0 PREEMPT(full) [ 493.622589][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 493.622607][T16544] Call Trace: [ 493.622615][T16544] [ 493.622623][T16544] dump_stack_lvl+0xe8/0x150 [ 493.622776][T16544] should_fail_ex+0x40c/0x560 [ 493.622931][T16544] should_failslab+0xa8/0x100 [ 493.622988][T16544] __kmalloc_noprof+0xfe/0x720 [ 493.623017][T16544] ? rcu_is_watching+0x15/0xb0 [ 493.623068][T16544] ? tomoyo_realpath_from_path+0xef/0x640 [ 493.623150][T16544] ? tomoyo_realpath_from_path+0xef/0x640 [ 493.623179][T16544] tomoyo_realpath_from_path+0xef/0x640 [ 493.623210][T16544] ? tomoyo_path_number_perm+0x219/0x5f0 [ 493.623261][T16544] tomoyo_path_number_perm+0x246/0x5f0 [ 493.623291][T16544] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 493.623330][T16544] ? __lock_acquire+0x683/0x2cf0 [ 493.623374][T16544] ? hook_file_ioctl+0x1f0/0x5f0 [ 493.623471][T16544] ? __fget_files+0x2a/0x420 [ 493.623513][T16544] ? __fget_files+0x2a/0x420 [ 493.623535][T16544] ? __fget_files+0x3a2/0x420 [ 493.623558][T16544] ? __fget_files+0x2a/0x420 [ 493.623586][T16544] security_file_ioctl+0xc3/0x2a0 [ 493.623657][T16544] __se_sys_ioctl+0x47/0x170 [ 493.623674][T16544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.623710][T16544] do_syscall_64+0x174/0x580 [ 493.623802][T16544] ? trace_irq_disable+0x3b/0x140 [ 493.623840][T16544] ? clear_bhb_loop+0x40/0x90 [ 493.623863][T16544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.623883][T16544] RIP: 0033:0x7f886539de99 [ 493.623902][T16544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.623918][T16544] RSP: 002b:00007f88662a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.623938][T16544] RAX: ffffffffffffffda RBX: 00007f8865625fa0 RCX: 00007f886539de99 [ 493.623952][T16544] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000003 [ 493.623964][T16544] RBP: 00007f88662a4090 R08: 0000000000000000 R09: 0000000000000000 [ 493.623976][T16544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.623987][T16544] R13: 00007f8865626038 R14: 00007f8865625fa0 R15: 00007ffd58079498 [ 493.624018][T16544] [ 493.624052][T16544] ERROR: Out of memory at tomoyo_realpath_from_path. [ 493.929993][T16552] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4085'. [ 493.958050][T16548] team0 (unregistering): Port device team_slave_0 removed [ 494.003463][T16548] team0 (unregistering): Port device team_slave_1 removed [ 494.282304][T16558] netlink: 1500 bytes leftover after parsing attributes in process `syz.0.4088'. [ 494.368170][T16565] netlink: 'syz.1.4092': attribute type 10 has an invalid length. [ 494.787298][T16582] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4099'. [ 494.843507][T16582] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4099'. [ 495.252338][T16600] nftables ruleset with unbound chain [ 495.318624][T16604] syzkaller1: entered promiscuous mode [ 495.335549][T16604] syzkaller1: entered allmulticast mode [ 495.380464][T16604] Bluetooth: MGMT ver 1.23 [ 495.674777][T16611] netlink: 'syz.1.4112': attribute type 21 has an invalid length. [ 495.694734][T16611] __nla_validate_parse: 2 callbacks suppressed [ 495.694754][T16611] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4112'. [ 495.767424][T16611] netlink: 'syz.1.4112': attribute type 4 has an invalid length. [ 495.786492][T16611] netlink: 'syz.1.4112': attribute type 5 has an invalid length. [ 495.803356][T16611] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4112'. [ 496.095888][T16623] gre0: entered promiscuous mode [ 496.116426][T16623] gre0: entered allmulticast mode [ 496.122326][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4119'. [ 496.579081][T16639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4125'. [ 496.824801][T16647] syzkaller0: entered promiscuous mode [ 496.855566][T16647] syzkaller0: entered allmulticast mode [ 498.127726][T16688] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4146'. [ 499.037173][T16718] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.044892][T16718] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.216546][T16718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.229220][T16718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.396533][T16718] batman_adv: batadv0: Interface deactivated: gretap1 [ 499.429461][T16718] batman_adv: batadv0: Interface deactivated: gretap2 [ 499.441237][T16718] batman_adv: batadv0: Interface deactivated: gretap3 [ 499.460699][ T147] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.477337][ T147] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.506968][ T147] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.551335][ T147] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.666013][T16726] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4160'. [ 499.838319][T16734] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20002 [ 500.018990][T16744] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 500.231054][T16749] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4168'. [ 500.523071][T16757] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4171'. [ 500.902470][T16769] netlink: 'syz.0.4174': attribute type 3 has an invalid length. [ 501.478652][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.486012][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.688461][T16792] gtp0: entered promiscuous mode [ 501.695343][T16792] gtp0: entered allmulticast mode [ 501.707053][T16792] team0: Device gtp0 is of different type [ 501.968438][T16794] lo speed is unknown, defaulting to 1000 [ 501.983172][T16794] wg2 speed is unknown, defaulting to 1000 [ 502.333207][T16809] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4190'. [ 502.371897][T16811] FAULT_INJECTION: forcing a failure. [ 502.371897][T16811] name failslab, interval 1, probability 0, space 0, times 0 [ 502.380166][T16672] Set syz1 is full, maxelem 65536 reached [ 502.418390][T16811] CPU: 0 UID: 0 PID: 16811 Comm: syz.3.4191 Not tainted syzkaller #0 PREEMPT(full) [ 502.418418][T16811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 502.418428][T16811] Call Trace: [ 502.418438][T16811] [ 502.418446][T16811] dump_stack_lvl+0xe8/0x150 [ 502.418486][T16811] should_fail_ex+0x40c/0x560 [ 502.418514][T16811] should_failslab+0xa8/0x100 [ 502.418542][T16811] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 502.418564][T16811] ? local_lock_release+0x9c/0x160 [ 502.418725][T16811] ? __alloc_skb+0x1d7/0x7a0 [ 502.418740][T16811] ? __alloc_skb+0x1d7/0x7a0 [ 502.418762][T16811] __alloc_skb+0x1d7/0x7a0 [ 502.418783][T16811] alloc_skb_with_frags+0xc6/0x760 [ 502.418830][T16811] ? ima_match_policy+0x2125/0x21c0 [ 502.418902][T16811] sock_alloc_send_pskb+0x878/0x990 [ 502.418937][T16811] ? l2cap_sock_alloc_skb_cb+0xcc/0x490 [ 502.419017][T16811] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 502.419040][T16811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 502.419091][T16811] ? process_measurement+0x7b2/0x1c10 [ 502.419128][T16811] l2cap_sock_alloc_skb_cb+0xef/0x490 [ 502.419155][T16811] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 502.419178][T16811] ? __pfx___mutex_trylock_common+0x10/0x10 [ 502.419204][T16811] l2cap_chan_send+0x235/0x22f0 [ 502.419259][T16811] ? bt_sock_wait_ready+0x4f8/0x600 [ 502.419344][T16811] ? l2cap_sock_sendmsg+0x324/0x4d0 [ 502.419365][T16811] ? __pfx_l2cap_chan_send+0x10/0x10 [ 502.419393][T16811] ? l2cap_sock_sendmsg+0x2ce/0x4d0 [ 502.419413][T16811] ? l2cap_sock_sendmsg+0x2ce/0x4d0 [ 502.419432][T16811] ? __local_bh_enable_ip+0xd0/0x130 [ 502.419472][T16811] l2cap_sock_sendmsg+0x33a/0x4d0 [ 502.419494][T16811] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 502.419517][T16811] ? aa_sock_msg_perm+0xf1/0x1b0 [ 502.419541][T16811] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 502.419560][T16811] sock_sendmsg_nosec+0x13a/0x180 [ 502.419587][T16811] sock_write_iter+0x2de/0x3e0 [ 502.419613][T16811] ? __pfx_sock_write_iter+0x10/0x10 [ 502.419653][T16811] do_iter_readv_writev+0x612/0x8c0 [ 502.419675][T16811] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 502.419699][T16811] ? bpf_lsm_file_permission+0x9/0x20 [ 502.419733][T16811] ? security_file_permission+0x75/0x260 [ 502.419760][T16811] ? rw_verify_area+0x203/0x4c0 [ 502.419789][T16811] vfs_writev+0x343/0x990 [ 502.419820][T16811] ? __pfx_vfs_writev+0x10/0x10 [ 502.419854][T16811] ? __fget_files+0x2a/0x420 [ 502.419882][T16811] ? __fget_files+0x3a2/0x420 [ 502.419909][T16811] ? __fget_files+0x2a/0x420 [ 502.419941][T16811] do_writev+0x154/0x2e0 [ 502.419964][T16811] ? __pfx_do_writev+0x10/0x10 [ 502.419994][T16811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.420015][T16811] do_syscall_64+0x174/0x580 [ 502.420037][T16811] ? clear_bhb_loop+0x40/0x90 [ 502.420060][T16811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.420078][T16811] RIP: 0033:0x7fec12b9de99 [ 502.420096][T16811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.420112][T16811] RSP: 002b:00007fec13981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 502.420131][T16811] RAX: ffffffffffffffda RBX: 00007fec12e25fa0 RCX: 00007fec12b9de99 [ 502.420145][T16811] RDX: 0000000000000001 RSI: 0000200000002a40 RDI: 0000000000000004 [ 502.420156][T16811] RBP: 00007fec13981090 R08: 0000000000000000 R09: 0000000000000000 [ 502.420168][T16811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.420178][T16811] R13: 00007fec12e26038 R14: 00007fec12e25fa0 R15: 00007fff4b501cb8 [ 502.420208][T16811] [ 503.221351][T16820] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4195'. [ 503.396885][ T253] block nbd6: Possible stuck request ffff888028677000: control (read@0,1024B). Runtime 180 seconds [ 503.408282][ T253] block nbd6: Possible stuck request ffff8880286771c0: control (read@1024,1024B). Runtime 180 seconds [ 503.421596][ T253] block nbd6: Possible stuck request ffff888028677380: control (read@2048,1024B). Runtime 180 seconds [ 503.433251][ T253] block nbd6: Possible stuck request ffff888028677540: control (read@3072,1024B). Runtime 180 seconds [ 503.501239][T16825] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4196'. [ 503.557951][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 503.901621][T16839] netlink: 'syz.3.4204': attribute type 33 has an invalid length. [ 503.930021][T16839] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4204'. [ 504.018845][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4205'. [ 504.030939][T16840] FAULT_INJECTION: forcing a failure. [ 504.030939][T16840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.054397][T16840] CPU: 0 UID: 0 PID: 16840 Comm: syz.1.4203 Not tainted syzkaller #0 PREEMPT(full) [ 504.054425][T16840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 504.054435][T16840] Call Trace: [ 504.054442][T16840] [ 504.054450][T16840] dump_stack_lvl+0xe8/0x150 [ 504.054483][T16840] should_fail_ex+0x40c/0x560 [ 504.054510][T16840] _copy_from_user+0x2d/0xb0 [ 504.054657][T16840] ___sys_sendmsg+0x1c6/0x360 [ 504.054678][T16840] ? __lock_acquire+0x683/0x2cf0 [ 504.054707][T16840] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.054760][T16840] ? __fget_files+0x2a/0x420 [ 504.054782][T16840] ? __fget_files+0x3a2/0x420 [ 504.054814][T16840] __x64_sys_sendmsg+0x1b1/0x290 [ 504.054837][T16840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.054874][T16840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.054895][T16840] do_syscall_64+0x174/0x580 [ 504.054916][T16840] ? trace_irq_disable+0x3b/0x140 [ 504.054937][T16840] ? clear_bhb_loop+0x40/0x90 [ 504.054958][T16840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.054975][T16840] RIP: 0033:0x7f886539de99 [ 504.054992][T16840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.055010][T16840] RSP: 002b:00007f88662a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.055029][T16840] RAX: ffffffffffffffda RBX: 00007f8865625fa0 RCX: 00007f886539de99 [ 504.055042][T16840] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 504.055052][T16840] RBP: 00007f88662a4090 R08: 0000000000000000 R09: 0000000000000000 [ 504.055063][T16840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.055073][T16840] R13: 00007f8865626038 R14: 00007f8865625fa0 R15: 00007ffd58079498 [ 504.055100][T16840] [ 504.357911][T16844] xt_CONNSECMARK: invalid mode: 0 [ 504.443497][T16848] lo speed is unknown, defaulting to 1000 [ 504.499779][T16848] wg2 speed is unknown, defaulting to 1000 [ 504.633953][T16866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4210'. [ 504.655779][T16866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4210'. [ 505.193194][T16876] lo speed is unknown, defaulting to 1000 [ 505.247371][T16876] wg2 speed is unknown, defaulting to 1000 [ 505.353683][T16886] bridge_slave_1: left allmulticast mode [ 505.373508][T16886] bridge_slave_1: left promiscuous mode [ 505.404604][T16886] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.421758][T16886] bridge_slave_0: left allmulticast mode [ 505.427778][T16886] bridge_slave_0: left promiscuous mode [ 505.433646][T16886] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.978910][T16904] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4223'. [ 506.250140][T16904] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4223'. [ 506.288478][T16899] lo speed is unknown, defaulting to 1000 [ 506.327827][T16899] wg2 speed is unknown, defaulting to 1000 [ 506.579768][T16911] syzkaller1: entered promiscuous mode [ 506.598268][T16911] syzkaller1: entered allmulticast mode [ 508.966341][T16934] syzkaller1: entered promiscuous mode [ 508.991279][T16934] syzkaller1: entered allmulticast mode [ 509.566851][T16964] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4246'. [ 509.611535][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'. [ 509.641172][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4247'. [ 509.682176][T16967] geneve2: entered promiscuous mode [ 509.708413][T16967] geneve2: entered allmulticast mode [ 510.060218][T16980] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 510.321622][T16985] nbd9: detected capacity change from 0 to 63 [ 510.345487][ T5640] block nbd9: Receive control failed (result -104) [ 510.696662][T16999] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4258'. [ 510.747343][T17002] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 510.773970][T17003] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 511.006856][T17013] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4263'. [ 511.269623][T17022] macsec1: entered promiscuous mode [ 511.286765][T17022] dummy0: entered promiscuous mode [ 511.303096][T17022] macsec1: entered allmulticast mode [ 511.316433][T17022] dummy0: entered allmulticast mode [ 511.707803][ T253] block nbd7: Possible stuck request ffff8880286a0000: control (read@0,1024B). Runtime 180 seconds [ 511.719142][ T253] block nbd7: Possible stuck request ffff8880286a01c0: control (read@1024,1024B). Runtime 180 seconds [ 511.731195][ T253] block nbd7: Possible stuck request ffff8880286a0380: control (read@2048,1024B). Runtime 180 seconds [ 511.742384][ T253] block nbd7: Possible stuck request ffff8880286a0540: control (read@3072,1024B). Runtime 180 seconds [ 511.747450][T17022] dummy0: left allmulticast mode [ 511.786659][ T24] dummy0: left promiscuous mode [ 511.796695][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4269'. [ 512.083752][T17034] syzkaller1: entered promiscuous mode [ 512.095554][T17033] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4271'. [ 512.110655][T17034] syzkaller1: entered allmulticast mode [ 512.525402][T17047] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 513.602484][T17063] FAULT_INJECTION: forcing a failure. [ 513.602484][T17063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.635839][T17063] CPU: 1 UID: 0 PID: 17063 Comm: syz.0.4283 Not tainted syzkaller #0 PREEMPT(full) [ 513.635866][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 513.635876][T17063] Call Trace: [ 513.635883][T17063] [ 513.635889][T17063] dump_stack_lvl+0xe8/0x150 [ 513.635923][T17063] should_fail_ex+0x40c/0x560 [ 513.635951][T17063] _copy_to_user+0x31/0xb0 [ 513.635981][T17063] simple_read_from_buffer+0xe1/0x170 [ 513.636011][T17063] proc_fail_nth_read+0x1bb/0x230 [ 513.636072][T17063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 513.636100][T17063] ? rw_verify_area+0x24a/0x4c0 [ 513.636131][T17063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 513.636155][T17063] vfs_read+0x213/0xa80 [ 513.636188][T17063] ? __pfx___mutex_lock+0x10/0x10 [ 513.636211][T17063] ? __pfx_vfs_read+0x10/0x10 [ 513.636240][T17063] ? __fget_files+0x2a/0x420 [ 513.636268][T17063] ? __fget_files+0x3a2/0x420 [ 513.636298][T17063] ? __fget_files+0x2a/0x420 [ 513.636330][T17063] ksys_read+0x150/0x270 [ 513.636360][T17063] ? __pfx_ksys_read+0x10/0x10 [ 513.636395][T17063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.636416][T17063] do_syscall_64+0x174/0x580 [ 513.636436][T17063] ? trace_irq_disable+0x3b/0x140 [ 513.636460][T17063] ? clear_bhb_loop+0x40/0x90 [ 513.636483][T17063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.636502][T17063] RIP: 0033:0x7ff29755e6ce [ 513.636520][T17063] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 513.636536][T17063] RSP: 002b:00007ff2984defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 513.636556][T17063] RAX: ffffffffffffffda RBX: 00007ff2984df6c0 RCX: 00007ff29755e6ce [ 513.636569][T17063] RDX: 000000000000000f RSI: 00007ff2984df0a0 RDI: 0000000000000005 [ 513.636580][T17063] RBP: 00007ff2984df090 R08: 0000000000000000 R09: 0000000000000000 [ 513.636591][T17063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.636602][T17063] R13: 00007ff297826038 R14: 00007ff297825fa0 R15: 00007ffeb03bc608 [ 513.636632][T17063] [ 513.854609][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 513.870793][T17065] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.4284'. [ 513.958658][T17067] syzkaller1: entered promiscuous mode [ 513.974418][T17067] syzkaller1: entered allmulticast mode [ 514.175969][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4287'. [ 515.134861][T17099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4299'. [ 515.280913][T17102] syzkaller1: entered promiscuous mode [ 515.315844][T17102] syzkaller1: entered allmulticast mode [ 515.508777][T17111] FAULT_INJECTION: forcing a failure. [ 515.508777][T17111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.537280][T17111] CPU: 0 UID: 0 PID: 17111 Comm: syz.4.4303 Not tainted syzkaller #0 PREEMPT(full) [ 515.537305][T17111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 515.537316][T17111] Call Trace: [ 515.537323][T17111] [ 515.537331][T17111] dump_stack_lvl+0xe8/0x150 [ 515.537362][T17111] should_fail_ex+0x40c/0x560 [ 515.537387][T17111] _copy_from_iter+0x1d3/0x1660 [ 515.537410][T17111] ? l2cap_sock_alloc_skb_cb+0x24c/0x490 [ 515.537433][T17111] ? __pfx___mutex_lock+0x10/0x10 [ 515.537456][T17111] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 515.537482][T17111] ? __pfx__copy_from_iter+0x10/0x10 [ 515.537525][T17111] ? l2cap_sock_alloc_skb_cb+0x28e/0x490 [ 515.537544][T17111] ? skb_put+0x112/0x210 [ 515.537564][T17111] l2cap_skbuff_fromiovec+0x9f/0x520 [ 515.537592][T17111] ? __pfx___mutex_trylock_common+0x10/0x10 [ 515.537612][T17111] ? skb_put+0x112/0x210 [ 515.537633][T17111] l2cap_chan_send+0x3e5/0x22f0 [ 515.537661][T17111] ? bt_sock_wait_ready+0x4f8/0x600 [ 515.537691][T17111] ? l2cap_sock_sendmsg+0x324/0x4d0 [ 515.537712][T17111] ? __pfx_l2cap_chan_send+0x10/0x10 [ 515.537742][T17111] ? l2cap_sock_sendmsg+0x2ce/0x4d0 [ 515.537762][T17111] ? l2cap_sock_sendmsg+0x2ce/0x4d0 [ 515.537781][T17111] ? __local_bh_enable_ip+0xd0/0x130 [ 515.537806][T17111] l2cap_sock_sendmsg+0x33a/0x4d0 [ 515.537829][T17111] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 515.537852][T17111] ? aa_sock_msg_perm+0xf1/0x1b0 [ 515.537876][T17111] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 515.537894][T17111] sock_sendmsg_nosec+0x13a/0x180 [ 515.537923][T17111] sock_write_iter+0x2de/0x3e0 [ 515.537946][T17111] ? __pfx_sock_write_iter+0x10/0x10 [ 515.537985][T17111] do_iter_readv_writev+0x612/0x8c0 [ 515.538007][T17111] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 515.538028][T17111] ? bpf_lsm_file_permission+0x9/0x20 [ 515.538046][T17111] ? security_file_permission+0x75/0x260 [ 515.538071][T17111] ? rw_verify_area+0x203/0x4c0 [ 515.538100][T17111] vfs_writev+0x343/0x990 [ 515.538126][T17111] ? __pfx_vfs_writev+0x10/0x10 [ 515.538155][T17111] ? __fget_files+0x2a/0x420 [ 515.538181][T17111] ? __fget_files+0x3a2/0x420 [ 515.538203][T17111] ? __fget_files+0x2a/0x420 [ 515.538230][T17111] do_writev+0x154/0x2e0 [ 515.538250][T17111] ? __pfx_do_writev+0x10/0x10 [ 515.538276][T17111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.538297][T17111] do_syscall_64+0x174/0x580 [ 515.538314][T17111] ? trace_irq_disable+0x3b/0x140 [ 515.538337][T17111] ? clear_bhb_loop+0x40/0x90 [ 515.538357][T17111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.538375][T17111] RIP: 0033:0x7f572b79de99 [ 515.538392][T17111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.538408][T17111] RSP: 002b:00007f572c583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 515.538426][T17111] RAX: ffffffffffffffda RBX: 00007f572ba25fa0 RCX: 00007f572b79de99 [ 515.538438][T17111] RDX: 0000000000000001 RSI: 0000200000002a40 RDI: 0000000000000004 [ 515.538449][T17111] RBP: 00007f572c583090 R08: 0000000000000000 R09: 0000000000000000 [ 515.538460][T17111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.538471][T17111] R13: 00007f572ba26038 R14: 00007f572ba25fa0 R15: 00007fff5c9eb188 [ 515.538507][T17111] [ 515.962016][T17117] netlink: 'syz.4.4306': attribute type 1 has an invalid length. [ 516.141526][T17117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.265378][T17123] bond1: (slave veth3): Enslaving as an active interface with a down link [ 516.289817][T17129] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 516.304008][T17129] bond1: (slave batadv1): making interface the new active one [ 516.313457][T17129] batadv1: entered promiscuous mode [ 516.322134][T17129] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 516.537630][T17145] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 516.678527][T17151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.789886][T17151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.901117][T17161] tipc: Started in network mode [ 516.945370][T17161] tipc: Node identity dae2229af4f9, cluster identity 4711 [ 516.992537][T17161] tipc: Enabled bearer , priority 0 [ 517.244553][T17162] syzkaller0: entered promiscuous mode [ 517.253145][T17162] syzkaller0: entered allmulticast mode [ 517.262426][T17162] tipc: Resetting bearer [ 517.269896][T17176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4320'. [ 517.305552][T17176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4320'. [ 517.345697][T17176] FAULT_INJECTION: forcing a failure. [ 517.345697][T17176] name failslab, interval 1, probability 0, space 0, times 0 [ 517.396526][T17176] CPU: 0 UID: 0 PID: 17176 Comm: syz.0.4320 Not tainted syzkaller #0 PREEMPT(full) [ 517.396554][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 517.396565][T17176] Call Trace: [ 517.396572][T17176] [ 517.396580][T17176] dump_stack_lvl+0xe8/0x150 [ 517.396614][T17176] should_fail_ex+0x40c/0x560 [ 517.396649][T17176] should_failslab+0xa8/0x100 [ 517.396679][T17176] __kmalloc_cache_noprof+0xa8/0x660 [ 517.396705][T17176] ? tcf_ife_init+0x2c4/0xd80 [ 517.396816][T17176] ? tcf_ife_init+0x2c4/0xd80 [ 517.396850][T17176] tcf_ife_init+0x2c4/0xd80 [ 517.396887][T17176] ? __pfx_tcf_ife_init+0x10/0x10 [ 517.396925][T17176] ? __kmalloc_cache_noprof+0x32d/0x660 [ 517.396948][T17176] ? kmemdup_noprof+0x55/0x70 [ 517.396986][T17176] ? __asan_memcpy+0x40/0x70 [ 517.397011][T17176] tcf_action_init_1+0x4ba/0x740 [ 517.397097][T17176] ? __pfx_tcf_action_init_1+0x10/0x10 [ 517.397123][T17176] ? _raw_read_unlock+0x28/0x50 [ 517.397175][T17176] ? tc_action_load_ops+0x247/0x540 [ 517.397216][T17176] ? kasan_record_aux_stack+0xbd/0xd0 [ 517.397234][T17176] ? call_rcu+0xee/0x8b0 [ 517.397254][T17176] ? __nla_parse+0x40/0x60 [ 517.397281][T17176] tcf_action_init+0x30e/0xb10 [ 517.397319][T17176] ? __pfx_tcf_action_init+0x10/0x10 [ 517.397372][T17176] ? lockdep_hardirqs_on+0x7a/0x110 [ 517.397419][T17176] ? __pfx___nla_validate_parse+0x10/0x10 [ 517.397481][T17176] tc_ctl_action+0x43b/0xc70 [ 517.397521][T17176] ? __pfx_tc_ctl_action+0x10/0x10 [ 517.397555][T17176] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 517.397617][T17176] ? __pfx_tc_ctl_action+0x10/0x10 [ 517.397644][T17176] rtnetlink_rcv_msg+0x7b9/0xc00 [ 517.397787][T17176] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 517.397815][T17176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.397842][T17176] ? ref_tracker_free+0x689/0x830 [ 517.397911][T17176] ? __pfx_ref_tracker_free+0x10/0x10 [ 517.397945][T17176] netlink_rcv_skb+0x226/0x4a0 [ 517.398008][T17176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.398039][T17176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.398074][T17176] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.398095][T17176] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.398121][T17176] netlink_unicast+0x7bb/0x940 [ 517.398152][T17176] netlink_sendmsg+0x813/0xb40 [ 517.398183][T17176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.398208][T17176] ? aa_sock_msg_perm+0xf1/0x1b0 [ 517.398232][T17176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.398252][T17176] sock_sendmsg_nosec+0x13a/0x180 [ 517.398281][T17176] ____sys_sendmsg+0x54e/0x850 [ 517.398308][T17176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.398338][T17176] ? import_iovec+0x73/0xa0 [ 517.398369][T17176] ___sys_sendmsg+0x2a5/0x360 [ 517.398387][T17176] ? __lock_acquire+0x683/0x2cf0 [ 517.398417][T17176] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.398474][T17176] ? __fget_files+0x2a/0x420 [ 517.398498][T17176] ? __fget_files+0x3a2/0x420 [ 517.398532][T17176] __x64_sys_sendmsg+0x1b1/0x290 [ 517.398556][T17176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 517.398596][T17176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.398617][T17176] do_syscall_64+0x174/0x580 [ 517.398638][T17176] ? trace_irq_disable+0x3b/0x140 [ 517.398661][T17176] ? clear_bhb_loop+0x40/0x90 [ 517.398684][T17176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.398702][T17176] RIP: 0033:0x7ff29759de99 [ 517.398721][T17176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.398737][T17176] RSP: 002b:00007ff2984df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.398757][T17176] RAX: ffffffffffffffda RBX: 00007ff297825fa0 RCX: 00007ff29759de99 [ 517.398772][T17176] RDX: 00000000000000c0 RSI: 0000200000000080 RDI: 0000000000000003 [ 517.398784][T17176] RBP: 00007ff2984df090 R08: 0000000000000000 R09: 0000000000000000 [ 517.398796][T17176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.398807][T17176] R13: 00007ff297826038 R14: 00007ff297825fa0 R15: 00007ffeb03bc608 [ 517.398838][T17176] [ 517.864849][T17162] tipc: Resetting bearer [ 517.968935][ T147] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 518.212386][T17178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.924221][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 520.045576][T17199] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4326'. [ 520.868313][T17162] tipc: Disabling bearer [ 520.883850][ T5749] tipc: Node number set to 773530266 [ 520.892673][T17195] workqueue: Failed to create a rescuer kthread for wq "": -EINTR [ 521.040339][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4327'. [ 521.463504][T17223] gre0: left promiscuous mode [ 522.408104][T17229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4337'. [ 522.461920][T17228] FAULT_INJECTION: forcing a failure. [ 522.461920][T17228] name failslab, interval 1, probability 0, space 0, times 0 [ 522.509572][T17228] CPU: 1 UID: 0 PID: 17228 Comm: syz.0.4337 Not tainted syzkaller #0 PREEMPT(full) [ 522.509598][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 522.509609][T17228] Call Trace: [ 522.509616][T17228] [ 522.509625][T17228] dump_stack_lvl+0xe8/0x150 [ 522.509658][T17228] should_fail_ex+0x40c/0x560 [ 522.509685][T17228] should_failslab+0xa8/0x100 [ 522.509712][T17228] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 522.509734][T17228] ? local_lock_release+0x9c/0x160 [ 522.509762][T17228] ? __alloc_skb+0x1d7/0x7a0 [ 522.509777][T17228] ? __alloc_skb+0x1d7/0x7a0 [ 522.509798][T17228] __alloc_skb+0x1d7/0x7a0 [ 522.509818][T17228] netlink_sendmsg+0x5d4/0xb40 [ 522.509847][T17228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.509878][T17228] ? aa_sock_msg_perm+0xf1/0x1b0 [ 522.509901][T17228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.509921][T17228] sock_sendmsg_nosec+0x13a/0x180 [ 522.509946][T17228] ____sys_sendmsg+0x54e/0x850 [ 522.509969][T17228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.509994][T17228] ? import_iovec+0x73/0xa0 [ 522.510022][T17228] ___sys_sendmsg+0x2a5/0x360 [ 522.510038][T17228] ? __lock_acquire+0x683/0x2cf0 [ 522.510065][T17228] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.510110][T17228] ? __fget_files+0x2a/0x420 [ 522.510133][T17228] ? __fget_files+0x3a2/0x420 [ 522.510163][T17228] __x64_sys_sendmsg+0x1b1/0x290 [ 522.510185][T17228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.510220][T17228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.510240][T17228] do_syscall_64+0x174/0x580 [ 522.510260][T17228] ? trace_irq_disable+0x3b/0x140 [ 522.510282][T17228] ? clear_bhb_loop+0x40/0x90 [ 522.510304][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.510322][T17228] RIP: 0033:0x7ff29759de99 [ 522.510340][T17228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.510354][T17228] RSP: 002b:00007ff2984df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.510373][T17228] RAX: ffffffffffffffda RBX: 00007ff297825fa0 RCX: 00007ff29759de99 [ 522.510387][T17228] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 522.510399][T17228] RBP: 00007ff2984df090 R08: 0000000000000000 R09: 0000000000000000 [ 522.510409][T17228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.510419][T17228] R13: 00007ff297826038 R14: 00007ff297825fa0 R15: 00007ffeb03bc608 [ 522.510447][T17228] [ 522.942969][T17237] netlink: 'syz.4.4340': attribute type 2 has an invalid length. [ 523.015576][T17235] ip6tnl1: entered allmulticast mode [ 523.021632][T17237] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4340'. [ 523.077428][T17241] syzkaller0: entered promiscuous mode [ 523.102984][T17241] syzkaller0: entered allmulticast mode [ 523.150856][T17241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.265130][T11397] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.288658][T11397] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.314275][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.358952][T17252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4344'. [ 523.552940][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4344'. [ 523.586548][T17260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4348'. [ 523.595789][T17260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4348'. [ 523.701402][T17262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4349'. [ 523.764433][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.854909][T17264] syzkaller0: entered promiscuous mode [ 523.860615][T17264] syzkaller0: entered allmulticast mode [ 524.264714][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 524.377687][T17281] FAULT_INJECTION: forcing a failure. [ 524.377687][T17281] name failslab, interval 1, probability 0, space 0, times 0 [ 524.392296][T17281] CPU: 1 UID: 0 PID: 17281 Comm: syz.3.4358 Not tainted syzkaller #0 PREEMPT(full) [ 524.392323][T17281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 524.392335][T17281] Call Trace: [ 524.392342][T17281] [ 524.392350][T17281] dump_stack_lvl+0xe8/0x150 [ 524.392383][T17281] should_fail_ex+0x40c/0x560 [ 524.392412][T17281] should_failslab+0xa8/0x100 [ 524.392441][T17281] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 524.392463][T17281] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 524.392483][T17281] ? __inet_hash_connect+0x1631/0x25a0 [ 524.392628][T17281] ? __inet_hash_connect+0x1631/0x25a0 [ 524.392659][T17281] __inet_hash_connect+0x1631/0x25a0 [ 524.392700][T17281] ? __inet_hash_connect+0x5ce/0x25a0 [ 524.392732][T17281] ? __pfx___inet_hash_connect+0x10/0x10 [ 524.392756][T17281] ? sk_setup_caps+0x94f/0xbc0 [ 524.392775][T17281] ? inet6_ehashfn+0x2f/0x3b0 [ 524.392843][T17281] ? inet6_hash_connect+0xeb/0x170 [ 524.392869][T17281] tcp_v6_connect+0x1231/0x1cf0 [ 524.392942][T17281] ? sock_sendmsg_nosec+0x90/0x180 [ 524.392965][T17281] ? __sys_sendto+0x408/0x5a0 [ 524.392996][T17281] ? __pfx_tcp_v6_connect+0x10/0x10 [ 524.393033][T17281] __inet_stream_connect+0x258/0xe00 [ 524.393121][T17281] ? rcu_is_watching+0x15/0xb0 [ 524.393149][T17281] ? __pfx___inet_stream_connect+0x10/0x10 [ 524.393174][T17281] ? __kasan_kmalloc+0x93/0xb0 [ 524.393201][T17281] ? __kmalloc_cache_noprof+0x32d/0x660 [ 524.393223][T17281] ? __kmalloc_cache_noprof+0x150/0x660 [ 524.393244][T17281] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 524.393273][T17281] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 524.393300][T17281] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 524.393330][T17281] ? tcp_sendmsg_locked+0x5c1/0x55c0 [ 524.393355][T17281] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 524.393384][T17281] ? look_up_lock_class+0x57/0x110 [ 524.393406][T17281] ? register_lock_class+0x31/0x2e0 [ 524.393435][T17281] ? __lock_acquire+0x683/0x2cf0 [ 524.393489][T17281] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 524.393519][T17281] ? tcp_sendmsg+0x21/0x50 [ 524.393541][T17281] ? __local_bh_enable_ip+0xd0/0x130 [ 524.393568][T17281] tcp_sendmsg+0x2f/0x50 [ 524.393588][T17281] ? __pfx_inet6_sendmsg+0x10/0x10 [ 524.393669][T17281] sock_sendmsg_nosec+0x90/0x180 [ 524.393698][T17281] __sys_sendto+0x408/0x5a0 [ 524.393716][T17281] ? ksys_write+0x1e6/0x270 [ 524.393747][T17281] ? __pfx___sys_sendto+0x10/0x10 [ 524.393763][T17281] ? __mutex_unlock_slowpath+0x731/0x900 [ 524.393811][T17281] ? __pfx_ksys_write+0x10/0x10 [ 524.393843][T17281] __x64_sys_sendto+0xde/0x100 [ 524.393860][T17281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.393878][T17281] do_syscall_64+0x174/0x580 [ 524.393897][T17281] ? trace_irq_disable+0x3b/0x140 [ 524.393917][T17281] ? clear_bhb_loop+0x40/0x90 [ 524.393940][T17281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.393959][T17281] RIP: 0033:0x7fec12b9de99 [ 524.393977][T17281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.393993][T17281] RSP: 002b:00007fec13981028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 524.394013][T17281] RAX: ffffffffffffffda RBX: 00007fec12e25fa0 RCX: 00007fec12b9de99 [ 524.394027][T17281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 524.394038][T17281] RBP: 00007fec13981090 R08: 00002000000001c0 R09: 000000000000001c [ 524.394050][T17281] R10: 000000002404c805 R11: 0000000000000246 R12: 0000000000000001 [ 524.394061][T17281] R13: 00007fec12e26038 R14: 00007fec12e25fa0 R15: 00007fff4b501cb8 [ 524.394092][T17281] [ 524.980205][T17288] netlink: 'syz.0.4360': attribute type 2 has an invalid length. [ 525.014000][T17288] netlink: 'syz.0.4360': attribute type 2 has an invalid length. [ 526.050241][T17322] netlink: 'syz.1.4373': attribute type 4 has an invalid length. [ 526.158854][T17328] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4375'. [ 526.182046][T17331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.266153][T17331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.284795][T17333] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4377'. [ 526.782903][T17352] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 527.059396][T17364] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4389'. [ 527.073827][ T1111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 527.088165][ T1111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 527.109282][ T1111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 527.136711][ T1111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 527.219773][T17369] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4391'. [ 527.430890][T17375] netlink: 'syz.3.4393': attribute type 1 has an invalid length. [ 527.464766][T17375] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4393'. [ 527.704298][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 528.061916][T17400] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4401'. [ 528.140494][T17402] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4403'. [ 528.337257][ T1111] batadv1: left promiscuous mode [ 528.547775][T17419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.566994][T17420] netlink: 'syz.1.4409': attribute type 2 has an invalid length. [ 528.591253][T17420] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4409'. [ 528.614495][T17413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4407'. [ 528.787786][T17415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.031745][T17430] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4411'. [ 529.297585][T13582] udevd[13582]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 529.659937][T17450] netlink: 'syz.1.4420': attribute type 1 has an invalid length. [ 530.552681][T17482] lo speed is unknown, defaulting to 1000 [ 530.580983][T17482] wg2 speed is unknown, defaulting to 1000 [ 530.739487][T17490] syzkaller1: entered promiscuous mode [ 530.748738][T17490] syzkaller1: entered allmulticast mode [ 530.757551][T17492] syzkaller1: entered promiscuous mode [ 530.763182][T17492] syzkaller1: entered allmulticast mode [ 531.262674][T17506] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 531.328851][T17508] FAULT_INJECTION: forcing a failure. [ 531.328851][T17508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.367783][T17508] CPU: 1 UID: 0 PID: 17508 Comm: syz.2.4444 Not tainted syzkaller #0 PREEMPT(full) [ 531.367809][T17508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 531.367820][T17508] Call Trace: [ 531.367826][T17508] [ 531.367834][T17508] dump_stack_lvl+0xe8/0x150 [ 531.367864][T17508] should_fail_ex+0x40c/0x560 [ 531.367891][T17508] _copy_to_user+0x31/0xb0 [ 531.367931][T17508] simple_read_from_buffer+0xe1/0x170 [ 531.367961][T17508] proc_fail_nth_read+0x1bb/0x230 [ 531.367988][T17508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.368015][T17508] ? rw_verify_area+0x24a/0x4c0 [ 531.368040][T17508] ? tun_chr_write_iter+0x18a/0x200 [ 531.368177][T17508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.368199][T17508] vfs_read+0x213/0xa80 [ 531.368231][T17508] ? __pfx___mutex_lock+0x10/0x10 [ 531.368253][T17508] ? __pfx_vfs_read+0x10/0x10 [ 531.368278][T17508] ? __fget_files+0x2a/0x420 [ 531.368306][T17508] ? __fget_files+0x3a2/0x420 [ 531.368327][T17508] ? __fget_files+0x2a/0x420 [ 531.368358][T17508] ksys_read+0x150/0x270 [ 531.368386][T17508] ? __pfx_ksys_read+0x10/0x10 [ 531.368419][T17508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.368440][T17508] do_syscall_64+0x174/0x580 [ 531.368459][T17508] ? trace_irq_disable+0x3b/0x140 [ 531.368482][T17508] ? clear_bhb_loop+0x40/0x90 [ 531.368508][T17508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.368527][T17508] RIP: 0033:0x7f941e15e6ce [ 531.368544][T17508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 531.368560][T17508] RSP: 002b:00007f941f09afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.368580][T17508] RAX: ffffffffffffffda RBX: 00007f941f09b6c0 RCX: 00007f941e15e6ce [ 531.368593][T17508] RDX: 000000000000000f RSI: 00007f941f09b0a0 RDI: 0000000000000007 [ 531.368605][T17508] RBP: 00007f941f09b090 R08: 0000000000000000 R09: 0000000000000000 [ 531.368616][T17508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.368626][T17508] R13: 00007f941e426038 R14: 00007f941e425fa0 R15: 00007ffdf2d3a538 [ 531.368654][T17508] [ 531.607004][T17517] FAULT_INJECTION: forcing a failure. [ 531.607004][T17517] name failslab, interval 1, probability 0, space 0, times 0 [ 531.631101][T17517] CPU: 0 UID: 0 PID: 17517 Comm: syz.4.4446 Not tainted syzkaller #0 PREEMPT(full) [ 531.631127][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 531.631138][T17517] Call Trace: [ 531.631145][T17517] [ 531.631153][T17517] dump_stack_lvl+0xe8/0x150 [ 531.631185][T17517] should_fail_ex+0x40c/0x560 [ 531.631212][T17517] should_failslab+0xa8/0x100 [ 531.631242][T17517] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 531.631266][T17517] ? ip6_default_advmss+0x80/0x3b0 [ 531.631356][T17517] ? __alloc_skb+0x1d7/0x7a0 [ 531.631371][T17517] ? __alloc_skb+0x1d7/0x7a0 [ 531.631395][T17517] __alloc_skb+0x1d7/0x7a0 [ 531.631416][T17517] tcp_stream_alloc_skb+0x3f/0x580 [ 531.631437][T17517] ? __asan_memset+0x22/0x50 [ 531.631460][T17517] tcp_connect+0x1582/0x53e0 [ 531.631540][T17517] ? ktime_get_with_offset+0x93/0x2d0 [ 531.631574][T17517] ? __pfx_tcp_connect+0x10/0x10 [ 531.631603][T17517] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 531.631627][T17517] ? lockdep_hardirqs_on+0x7a/0x110 [ 531.631647][T17517] ? ktime_get_with_offset+0x93/0x2d0 [ 531.631668][T17517] ? seqcount_lockdep_reader_access+0xea/0x100 [ 531.631700][T17517] ? __asan_memset+0x22/0x50 [ 531.631728][T17517] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 531.631811][T17517] ? inet6_hash_connect+0xeb/0x170 [ 531.631836][T17517] tcp_v6_connect+0x14ed/0x1cf0 [ 531.631856][T17517] ? sock_sendmsg_nosec+0x90/0x180 [ 531.631886][T17517] ? __sys_sendto+0x408/0x5a0 [ 531.631917][T17517] ? __pfx_tcp_v6_connect+0x10/0x10 [ 531.631951][T17517] __inet_stream_connect+0x258/0xe00 [ 531.631988][T17517] ? rcu_is_watching+0x15/0xb0 [ 531.632016][T17517] ? __pfx___inet_stream_connect+0x10/0x10 [ 531.632043][T17517] ? __kasan_kmalloc+0x93/0xb0 [ 531.632069][T17517] ? __kmalloc_cache_noprof+0x32d/0x660 [ 531.632092][T17517] ? __kmalloc_cache_noprof+0x150/0x660 [ 531.632114][T17517] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 531.632143][T17517] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 531.632170][T17517] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 531.632193][T17517] ? tcp_sendmsg_locked+0x5c1/0x55c0 [ 531.632218][T17517] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 531.632245][T17517] ? look_up_lock_class+0x57/0x110 [ 531.632266][T17517] ? register_lock_class+0x31/0x2e0 [ 531.632295][T17517] ? __lock_acquire+0x683/0x2cf0 [ 531.632348][T17517] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 531.632375][T17517] ? tcp_sendmsg+0x21/0x50 [ 531.632398][T17517] ? __local_bh_enable_ip+0xd0/0x130 [ 531.632423][T17517] tcp_sendmsg+0x2f/0x50 [ 531.632442][T17517] ? __pfx_inet6_sendmsg+0x10/0x10 [ 531.632462][T17517] sock_sendmsg_nosec+0x90/0x180 [ 531.632489][T17517] __sys_sendto+0x408/0x5a0 [ 531.632507][T17517] ? ksys_write+0x1e6/0x270 [ 531.632538][T17517] ? __pfx___sys_sendto+0x10/0x10 [ 531.632554][T17517] ? __mutex_unlock_slowpath+0x731/0x900 [ 531.632604][T17517] ? __pfx_ksys_write+0x10/0x10 [ 531.632637][T17517] __x64_sys_sendto+0xde/0x100 [ 531.632655][T17517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.632676][T17517] do_syscall_64+0x174/0x580 [ 531.632696][T17517] ? trace_irq_disable+0x3b/0x140 [ 531.632719][T17517] ? clear_bhb_loop+0x40/0x90 [ 531.632741][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.632761][T17517] RIP: 0033:0x7f572b79de99 [ 531.632778][T17517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.632793][T17517] RSP: 002b:00007f572c583028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 531.632813][T17517] RAX: ffffffffffffffda RBX: 00007f572ba25fa0 RCX: 00007f572b79de99 [ 531.632827][T17517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 531.632837][T17517] RBP: 00007f572c583090 R08: 00002000000001c0 R09: 000000000000001c [ 531.632850][T17517] R10: 000000002404c805 R11: 0000000000000246 R12: 0000000000000001 [ 531.632862][T17517] R13: 00007f572ba26038 R14: 00007f572ba25fa0 R15: 00007fff5c9eb188 [ 531.632896][T17517] [ 532.091037][T17521] FAULT_INJECTION: forcing a failure. [ 532.091037][T17521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.105431][T17521] CPU: 0 UID: 0 PID: 17521 Comm: syz.4.4448 Not tainted syzkaller #0 PREEMPT(full) [ 532.105453][T17521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 532.105462][T17521] Call Trace: [ 532.105467][T17521] [ 532.105474][T17521] dump_stack_lvl+0xe8/0x150 [ 532.105502][T17521] should_fail_ex+0x40c/0x560 [ 532.105523][T17521] _copy_from_iter+0x1d3/0x1660 [ 532.105543][T17521] ? __pfx___mutex_lock+0x10/0x10 [ 532.105564][T17521] ? l2cap_sock_alloc_skb_cb+0x28e/0x490 [ 532.105582][T17521] ? __pfx__copy_from_iter+0x10/0x10 [ 532.105603][T17521] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 532.105624][T17521] ? l2cap_sock_alloc_skb_cb+0x28e/0x490 [ 532.105640][T17521] ? skb_put+0x112/0x210 [ 532.105657][T17521] l2cap_skbuff_fromiovec+0x296/0x520 [ 532.105685][T17521] l2cap_chan_send+0x3e5/0x22f0 [ 532.105707][T17521] ? bt_sock_wait_ready+0x4f8/0x600 [ 532.105732][T17521] ? l2cap_sock_sendmsg+0x324/0x4d0 [ 532.105749][T17521] ? __pfx_l2cap_chan_send+0x10/0x10 [ 532.105775][T17521] ? l2cap_sock_sendmsg+0x2ce/0x4d0 [ 532.105791][T17521] ? l2cap_sock_sendmsg+0x2ce/0x4d0 [ 532.105806][T17521] ? __local_bh_enable_ip+0xd0/0x130 [ 532.105828][T17521] l2cap_sock_sendmsg+0x33a/0x4d0 [ 532.105847][T17521] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 532.105868][T17521] ? aa_sock_msg_perm+0xf1/0x1b0 [ 532.105889][T17521] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 532.105905][T17521] sock_sendmsg_nosec+0x13a/0x180 [ 532.105932][T17521] sock_write_iter+0x2de/0x3e0 [ 532.105956][T17521] ? __pfx_sock_write_iter+0x10/0x10 [ 532.105993][T17521] do_iter_readv_writev+0x612/0x8c0 [ 532.106016][T17521] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 532.106038][T17521] ? bpf_lsm_file_permission+0x9/0x20 [ 532.106058][T17521] ? security_file_permission+0x75/0x260 [ 532.106082][T17521] ? rw_verify_area+0x203/0x4c0 [ 532.106112][T17521] vfs_writev+0x343/0x990 [ 532.106142][T17521] ? __pfx_vfs_writev+0x10/0x10 [ 532.106175][T17521] ? __fget_files+0x2a/0x420 [ 532.106201][T17521] ? __fget_files+0x3a2/0x420 [ 532.106221][T17521] ? __fget_files+0x2a/0x420 [ 532.106251][T17521] do_writev+0x154/0x2e0 [ 532.106271][T17521] ? __irq_exit_rcu+0xca/0x220 [ 532.106294][T17521] ? __pfx_do_writev+0x10/0x10 [ 532.106313][T17521] ? handle_softirqs+0x70f/0x840 [ 532.106341][T17521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.106361][T17521] do_syscall_64+0x174/0x580 [ 532.106384][T17521] ? clear_bhb_loop+0x40/0x90 [ 532.106415][T17521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.106433][T17521] RIP: 0033:0x7f572b79de99 [ 532.106450][T17521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.106464][T17521] RSP: 002b:00007f572c583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 532.106482][T17521] RAX: ffffffffffffffda RBX: 00007f572ba25fa0 RCX: 00007f572b79de99 [ 532.106494][T17521] RDX: 0000000000000001 RSI: 0000200000002a40 RDI: 0000000000000004 [ 532.106505][T17521] RBP: 00007f572c583090 R08: 0000000000000000 R09: 0000000000000000 [ 532.106516][T17521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.106527][T17521] R13: 00007f572ba26038 R14: 00007f572ba25fa0 R15: 00007fff5c9eb188 [ 532.106556][T17521] [ 532.720428][T17534] blkio.reset_stats is deprecated [ 532.799949][T17534] __nla_validate_parse: 9 callbacks suppressed [ 532.799979][T17534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4451'. [ 532.840410][T17534] wireguard: wg0: Could not create IPv4 socket [ 532.881222][T17540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4455'. [ 532.999948][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4455'. [ 533.123786][T17550] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 533.399994][T17556] FAULT_INJECTION: forcing a failure. [ 533.399994][T17556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.414271][T17556] CPU: 0 UID: 0 PID: 17556 Comm: syz.2.4460 Not tainted syzkaller #0 PREEMPT(full) [ 533.414298][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 533.414308][T17556] Call Trace: [ 533.414315][T17556] [ 533.414322][T17556] dump_stack_lvl+0xe8/0x150 [ 533.414363][T17556] should_fail_ex+0x40c/0x560 [ 533.414391][T17556] _copy_to_user+0x31/0xb0 [ 533.414421][T17556] bpf_test_finish+0x4ea/0x690 [ 533.414534][T17556] ? __pfx_bpf_test_finish+0x10/0x10 [ 533.414568][T17556] bpf_prog_test_run_skb+0x11fe/0x2230 [ 533.414610][T17556] ? __fget_files+0x3a2/0x420 [ 533.414634][T17556] ? __fget_files+0x2a/0x420 [ 533.414662][T17556] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 533.414684][T17556] bpf_prog_test_run+0x2c5/0x340 [ 533.414724][T17556] __sys_bpf+0xa22/0xd90 [ 533.414753][T17556] ? __pfx___sys_bpf+0x10/0x10 [ 533.414794][T17556] ? __fget_files+0x2a/0x420 [ 533.414833][T17556] ? ksys_write+0x242/0x270 [ 533.414862][T17556] ? __pfx_ksys_write+0x10/0x10 [ 533.414894][T17556] __x64_sys_bpf+0xba/0xd0 [ 533.414917][T17556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.414938][T17556] do_syscall_64+0x174/0x580 [ 533.414959][T17556] ? trace_irq_disable+0x3b/0x140 [ 533.414982][T17556] ? clear_bhb_loop+0x40/0x90 [ 533.415004][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.415023][T17556] RIP: 0033:0x7f941e19de99 [ 533.415041][T17556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.415058][T17556] RSP: 002b:00007f941f09b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.415077][T17556] RAX: ffffffffffffffda RBX: 00007f941e425fa0 RCX: 00007f941e19de99 [ 533.415091][T17556] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a [ 533.415104][T17556] RBP: 00007f941f09b090 R08: 0000000000000000 R09: 0000000000000000 [ 533.415115][T17556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.415126][T17556] R13: 00007f941e426038 R14: 00007f941e425fa0 R15: 00007ffdf2d3a538 [ 533.415157][T17556] [ 533.632942][T17557] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4461'. [ 533.733626][ T253] block nbd6: Possible stuck request ffff888028677000: control (read@0,1024B). Runtime 210 seconds [ 533.745891][ T253] block nbd6: Possible stuck request ffff8880286771c0: control (read@1024,1024B). Runtime 210 seconds [ 533.761796][ T253] block nbd6: Possible stuck request ffff888028677380: control (read@2048,1024B). Runtime 210 seconds [ 533.772995][ T253] block nbd6: Possible stuck request ffff888028677540: control (read@3072,1024B). Runtime 210 seconds [ 534.593616][T17583] FAULT_INJECTION: forcing a failure. [ 534.593616][T17583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.652035][T17583] CPU: 0 UID: 0 PID: 17583 Comm: syz.2.4469 Not tainted syzkaller #0 PREEMPT(full) [ 534.652061][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 534.652071][T17583] Call Trace: [ 534.652078][T17583] [ 534.652086][T17583] dump_stack_lvl+0xe8/0x150 [ 534.652136][T17583] should_fail_ex+0x40c/0x560 [ 534.652162][T17583] _copy_from_iter+0x1d3/0x1660 [ 534.652184][T17583] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 534.652207][T17583] ? rcu_is_watching+0x15/0xb0 [ 534.652232][T17583] ? trace_kmem_cache_alloc+0x29/0xe0 [ 534.652256][T17583] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 534.652278][T17583] ? __pfx__copy_from_iter+0x10/0x10 [ 534.652300][T17583] ? __alloc_skb+0x276/0x7a0 [ 534.652317][T17583] ? __alloc_skb+0x276/0x7a0 [ 534.652338][T17583] ? netlink_sendmsg+0x650/0xb40 [ 534.652360][T17583] ? skb_put+0x112/0x210 [ 534.652380][T17583] netlink_sendmsg+0x6c0/0xb40 [ 534.652411][T17583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.652435][T17583] ? aa_sock_msg_perm+0xf1/0x1b0 [ 534.652457][T17583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.652477][T17583] sock_sendmsg_nosec+0x13a/0x180 [ 534.652505][T17583] ____sys_sendmsg+0x54e/0x850 [ 534.652529][T17583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.652557][T17583] ? import_iovec+0x73/0xa0 [ 534.652586][T17583] ___sys_sendmsg+0x2a5/0x360 [ 534.652604][T17583] ? __lock_acquire+0x683/0x2cf0 [ 534.652633][T17583] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.652686][T17583] ? __fget_files+0x2a/0x420 [ 534.652710][T17583] ? __fget_files+0x3a2/0x420 [ 534.652743][T17583] __x64_sys_sendmsg+0x1b1/0x290 [ 534.652767][T17583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.652804][T17583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.652824][T17583] do_syscall_64+0x174/0x580 [ 534.652845][T17583] ? trace_irq_disable+0x3b/0x140 [ 534.652867][T17583] ? clear_bhb_loop+0x40/0x90 [ 534.652890][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.652908][T17583] RIP: 0033:0x7f941e19de99 [ 534.652925][T17583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.652940][T17583] RSP: 002b:00007f941f09b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.652959][T17583] RAX: ffffffffffffffda RBX: 00007f941e425fa0 RCX: 00007f941e19de99 [ 534.652972][T17583] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 534.652984][T17583] RBP: 00007f941f09b090 R08: 0000000000000000 R09: 0000000000000000 [ 534.652995][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.653006][T17583] R13: 00007f941e426038 R14: 00007f941e425fa0 R15: 00007ffdf2d3a538 [ 534.653035][T17583] [ 535.598006][T17616] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4480'. [ 535.847771][T17624] FAULT_INJECTION: forcing a failure. [ 535.847771][T17624] name failslab, interval 1, probability 0, space 0, times 0 [ 535.864633][T17624] CPU: 1 UID: 0 PID: 17624 Comm: syz.2.4484 Not tainted syzkaller #0 PREEMPT(full) [ 535.864659][T17624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 535.864670][T17624] Call Trace: [ 535.864677][T17624] [ 535.864684][T17624] dump_stack_lvl+0xe8/0x150 [ 535.864717][T17624] should_fail_ex+0x40c/0x560 [ 535.864744][T17624] should_failslab+0xa8/0x100 [ 535.864774][T17624] __kmalloc_noprof+0xfe/0x720 [ 535.864798][T17624] ? sk_prot_alloc+0xe7/0x210 [ 535.864815][T17624] ? sk_prot_alloc+0xe7/0x210 [ 535.864840][T17624] sk_prot_alloc+0xe7/0x210 [ 535.864856][T17624] ? sk_alloc+0x27/0x390 [ 535.864877][T17624] sk_alloc+0x3a/0x390 [ 535.864898][T17624] bpf_prog_test_run_skb+0x3a6/0x2230 [ 535.864938][T17624] ? __fget_files+0x3a2/0x420 [ 535.864970][T17624] ? __fget_files+0x2a/0x420 [ 535.864997][T17624] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 535.865017][T17624] bpf_prog_test_run+0x2c5/0x340 [ 535.865045][T17624] __sys_bpf+0xa22/0xd90 [ 535.865073][T17624] ? __pfx___sys_bpf+0x10/0x10 [ 535.865104][T17624] ? __fget_files+0x2a/0x420 [ 535.865141][T17624] ? ksys_write+0x242/0x270 [ 535.865171][T17624] ? __pfx_ksys_write+0x10/0x10 [ 535.865203][T17624] __x64_sys_bpf+0xba/0xd0 [ 535.865224][T17624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.865244][T17624] do_syscall_64+0x174/0x580 [ 535.865265][T17624] ? trace_irq_disable+0x3b/0x140 [ 535.865286][T17624] ? clear_bhb_loop+0x40/0x90 [ 535.865308][T17624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.865326][T17624] RIP: 0033:0x7f941e19de99 [ 535.865343][T17624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.865359][T17624] RSP: 002b:00007f941f09b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 535.865379][T17624] RAX: ffffffffffffffda RBX: 00007f941e425fa0 RCX: 00007f941e19de99 [ 535.865393][T17624] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 535.865405][T17624] RBP: 00007f941f09b090 R08: 0000000000000000 R09: 0000000000000000 [ 535.865416][T17624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.865427][T17624] R13: 00007f941e426038 R14: 00007f941e425fa0 R15: 00007ffdf2d3a538 [ 535.865455][T17624] [ 536.095988][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 536.259598][T17630] syzkaller0: entered promiscuous mode [ 536.266991][T17630] syzkaller0: entered allmulticast mode [ 536.550071][T17632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.616271][T17645] : option downdelay: invalid value (18446744073709547007) [ 536.644256][T17645] : option downdelay: allowed values 0 - 2147483647 [ 536.705662][T17645]  (unregistering): Released all slaves [ 536.810879][T17650] tipc: Enabling of bearer rejected, failed to enable media [ 537.042612][T17653] netlink: 87 bytes leftover after parsing attributes in process `syz.0.4495'. [ 537.808201][T17684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4508'. [ 537.942633][T17687] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4509'. [ 537.956208][T17689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4510'. [ 538.020615][T17692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4511'. [ 538.361938][T17703] pim6reg: entered allmulticast mode [ 538.430634][T17703] syzkaller1: entered promiscuous mode [ 538.453049][T17703] syzkaller1: entered allmulticast mode [ 538.475511][T17714] bond0: (slave bond_slave_0): Releasing backup interface [ 538.543893][T17714] bond0: (slave bond_slave_1): Releasing backup interface [ 538.599653][T17714] team0: Port device team_slave_0 removed [ 538.619882][T17714] team0: Port device team_slave_1 removed [ 538.626816][T17714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.638312][T17714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.648238][T17714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 539.056231][T17734] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4522'. [ 539.150865][T17736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 539.503545][T17747] IPVS: length: 24 != 518424 [ 540.096122][T17768] netlink: 'syz.4.4535': attribute type 15 has an invalid length. [ 540.138721][T17770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4536'. [ 540.304011][T17774] netlink: 'syz.2.4538': attribute type 2 has an invalid length. [ 540.326226][T17774] netlink: 'syz.2.4538': attribute type 2 has an invalid length. [ 540.457187][T17781] netlink: 'syz.1.4541': attribute type 1 has an invalid length. [ 540.504708][ T1657] block nbd9: Possible stuck request ffff888028747000: control (read@0,1024B). Runtime 30 seconds [ 540.516468][ T1657] block nbd9: Possible stuck request ffff8880287471c0: control (read@1024,1024B). Runtime 30 seconds [ 540.527461][ T1657] block nbd9: Possible stuck request ffff888028747380: control (read@2048,1024B). Runtime 30 seconds [ 540.540227][ T1657] block nbd9: Possible stuck request ffff888028747540: control (read@3072,1024B). Runtime 30 seconds [ 540.599646][T17787] FAULT_INJECTION: forcing a failure. [ 540.599646][T17787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.623566][T17787] CPU: 0 UID: 0 PID: 17787 Comm: syz.4.4542 Not tainted syzkaller #0 PREEMPT(full) [ 540.623592][T17787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 540.623602][T17787] Call Trace: [ 540.623609][T17787] [ 540.623616][T17787] dump_stack_lvl+0xe8/0x150 [ 540.623649][T17787] should_fail_ex+0x40c/0x560 [ 540.623675][T17787] _copy_from_user+0x2d/0xb0 [ 540.623704][T17787] ___sys_recvmsg+0x173/0x5a0 [ 540.623731][T17787] ? __pfx____sys_recvmsg+0x10/0x10 [ 540.623756][T17787] ? __fget_files+0x2a/0x420 [ 540.623808][T17787] do_recvmmsg+0x31a/0x7f0 [ 540.623837][T17787] ? __pfx_do_recvmmsg+0x10/0x10 [ 540.623868][T17787] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 540.623893][T17787] ? __fget_files+0x3a2/0x420 [ 540.623925][T17787] __x64_sys_recvmmsg+0x198/0x250 [ 540.623950][T17787] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 540.623980][T17787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.624000][T17787] do_syscall_64+0x174/0x580 [ 540.624030][T17787] ? trace_irq_disable+0x3b/0x140 [ 540.624056][T17787] ? clear_bhb_loop+0x40/0x90 [ 540.624076][T17787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.624091][T17787] RIP: 0033:0x7f572b79de99 [ 540.624107][T17787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.624122][T17787] RSP: 002b:00007f572c583028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 540.624141][T17787] RAX: ffffffffffffffda RBX: 00007f572ba25fa0 RCX: 00007f572b79de99 [ 540.624152][T17787] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000006 [ 540.624162][T17787] RBP: 00007f572c583090 R08: 0000000000000000 R09: 0000000000000000 [ 540.624173][T17787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 540.624183][T17787] R13: 00007f572ba26038 R14: 00007f572ba25fa0 R15: 00007fff5c9eb188 [ 540.624207][T17787] [ 540.813679][T17784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.820770][T17782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4541'. [ 540.840203][T17784] bond1: (slave bond2): making interface the new active one [ 540.890816][T17784] bond1: (slave bond2): Enslaving as an active interface with an up link [ 540.937448][T17781] bond1: (slave gretap4): Enslaving as a backup interface with an up link [ 540.969029][T17782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.241182][T17809] FAULT_INJECTION: forcing a failure. [ 541.241182][T17809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.247112][T17811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.294764][T17809] CPU: 1 UID: 0 PID: 17809 Comm: syz.0.4549 Not tainted syzkaller #0 PREEMPT(full) [ 541.294792][T17809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 541.294802][T17809] Call Trace: [ 541.294809][T17809] [ 541.294817][T17809] dump_stack_lvl+0xe8/0x150 [ 541.294850][T17809] should_fail_ex+0x40c/0x560 [ 541.294877][T17809] _copy_to_user+0x31/0xb0 [ 541.294903][T17809] simple_read_from_buffer+0xe1/0x170 [ 541.294929][T17809] proc_fail_nth_read+0x1bb/0x230 [ 541.294954][T17809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.294980][T17809] ? rw_verify_area+0x24a/0x4c0 [ 541.295004][T17809] ? tun_chr_write_iter+0x18a/0x200 [ 541.295029][T17809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.295051][T17809] vfs_read+0x213/0xa80 [ 541.295086][T17809] ? __pfx___mutex_lock+0x10/0x10 [ 541.295108][T17809] ? __pfx_vfs_read+0x10/0x10 [ 541.295134][T17809] ? __fget_files+0x2a/0x420 [ 541.295161][T17809] ? __fget_files+0x3a2/0x420 [ 541.295182][T17809] ? __fget_files+0x2a/0x420 [ 541.295212][T17809] ksys_read+0x150/0x270 [ 541.295240][T17809] ? __pfx_ksys_read+0x10/0x10 [ 541.295276][T17809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.295298][T17809] do_syscall_64+0x174/0x580 [ 541.295321][T17809] ? clear_bhb_loop+0x40/0x90 [ 541.295344][T17809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.295363][T17809] RIP: 0033:0x7ff29755e6ce [ 541.295382][T17809] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 541.295398][T17809] RSP: 002b:00007ff2984defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 541.295418][T17809] RAX: ffffffffffffffda RBX: 00007ff2984df6c0 RCX: 00007ff29755e6ce [ 541.295432][T17809] RDX: 000000000000000f RSI: 00007ff2984df0a0 RDI: 0000000000000017 [ 541.295444][T17809] RBP: 00007ff2984df090 R08: 0000000000000000 R09: 0000000000000000 [ 541.295456][T17809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.295467][T17809] R13: 00007ff297826038 R14: 00007ff297825fa0 R15: 00007ffeb03bc608 [ 541.295499][T17809] [ 541.546520][T17811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.689747][ T5625] Bluetooth: hci4: link tx timeout [ 541.694989][ T5625] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 541.868924][ T253] block nbd7: Possible stuck request ffff8880286a0000: control (read@0,1024B). Runtime 210 seconds [ 541.882406][ T253] block nbd7: Possible stuck request ffff8880286a01c0: control (read@1024,1024B). Runtime 210 seconds [ 541.893756][ T253] block nbd7: Possible stuck request ffff8880286a0380: control (read@2048,1024B). Runtime 210 seconds [ 541.904886][ T253] block nbd7: Possible stuck request ffff8880286a0540: control (read@3072,1024B). Runtime 210 seconds [ 541.935971][T17817] siw: device registration error -23 [ 541.993534][T17827] netlink: 'syz.0.4554': attribute type 2 has an invalid length. [ 542.022367][T17827] netlink: 'syz.0.4554': attribute type 2 has an invalid length. [ 542.511427][T17845] FAULT_INJECTION: forcing a failure. [ 542.511427][T17845] name failslab, interval 1, probability 0, space 0, times 0 [ 542.524945][T17845] CPU: 1 UID: 0 PID: 17845 Comm: syz.0.4558 Not tainted syzkaller #0 PREEMPT(full) [ 542.524971][T17845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 542.524981][T17845] Call Trace: [ 542.524989][T17845] [ 542.525005][T17845] dump_stack_lvl+0xe8/0x150 [ 542.525039][T17845] should_fail_ex+0x40c/0x560 [ 542.525068][T17845] should_failslab+0xa8/0x100 [ 542.525097][T17845] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 542.525124][T17845] ? kasprintf+0xe2/0x140 [ 542.525225][T17845] ? kasprintf+0xe2/0x140 [ 542.525256][T17845] kvasprintf+0xeb/0x1a0 [ 542.525285][T17845] ? __pfx_kvasprintf+0x10/0x10 [ 542.525316][T17845] ? do_raw_spin_lock+0x12b/0x2f0 [ 542.525344][T17845] kasprintf+0xe2/0x140 [ 542.525377][T17845] ? __pfx_kasprintf+0x10/0x10 [ 542.525411][T17845] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 542.525439][T17845] ieee80211_alloc_led_names+0x1de/0x2b0 [ 542.525551][T17845] ieee80211_alloc_hw_nm+0x1824/0x1ec0 [ 542.525616][T17845] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 542.525640][T17845] mac80211_hwsim_new_radio+0x1ea/0x5680 [ 542.525750][T17845] ? rcu_is_watching+0x15/0xb0 [ 542.525777][T17845] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 542.525804][T17845] ? __kmalloc_cache_noprof+0x150/0x660 [ 542.525827][T17845] ? hwsim_new_radio_nl+0xcde/0xf90 [ 542.525858][T17845] hwsim_new_radio_nl+0xd8b/0xf90 [ 542.525895][T17845] genl_family_rcv_msg_doit+0x233/0x340 [ 542.525928][T17845] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 542.525963][T17845] ? bpf_lsm_capable+0x9/0x20 [ 542.525985][T17845] ? security_capable+0x7e/0x2c0 [ 542.526058][T17845] genl_rcv_msg+0x614/0x7a0 [ 542.526089][T17845] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.526113][T17845] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 542.526151][T17845] netlink_rcv_skb+0x226/0x4a0 [ 542.526174][T17845] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.526199][T17845] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.526232][T17845] ? down_read+0x2be/0x330 [ 542.526258][T17845] genl_rcv+0x28/0x40 [ 542.526280][T17845] netlink_unicast+0x7bb/0x940 [ 542.526308][T17845] netlink_sendmsg+0x813/0xb40 [ 542.526336][T17845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.526361][T17845] ? aa_sock_msg_perm+0xf1/0x1b0 [ 542.526390][T17845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.526409][T17845] sock_sendmsg_nosec+0x13a/0x180 [ 542.526437][T17845] ____sys_sendmsg+0x54e/0x850 [ 542.526461][T17845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.526490][T17845] ? import_iovec+0x73/0xa0 [ 542.526520][T17845] ___sys_sendmsg+0x2a5/0x360 [ 542.526538][T17845] ? __lock_acquire+0x683/0x2cf0 [ 542.526566][T17845] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.526619][T17845] ? __fget_files+0x2a/0x420 [ 542.526643][T17845] ? __fget_files+0x3a2/0x420 [ 542.526675][T17845] __x64_sys_sendmsg+0x1b1/0x290 [ 542.526697][T17845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.526736][T17845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.526757][T17845] do_syscall_64+0x174/0x580 [ 542.526777][T17845] ? trace_irq_disable+0x3b/0x140 [ 542.526799][T17845] ? clear_bhb_loop+0x40/0x90 [ 542.526822][T17845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.526845][T17845] RIP: 0033:0x7ff29759de99 [ 542.526863][T17845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.526879][T17845] RSP: 002b:00007ff2984df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.526899][T17845] RAX: ffffffffffffffda RBX: 00007ff297825fa0 RCX: 00007ff29759de99 [ 542.526912][T17845] RDX: 0000000000080000 RSI: 0000200000000400 RDI: 0000000000000003 [ 542.526923][T17845] RBP: 00007ff2984df090 R08: 0000000000000000 R09: 0000000000000000 [ 542.526934][T17845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 542.526945][T17845] R13: 00007ff297826038 R14: 00007ff297825fa0 R15: 00007ffeb03bc608 [ 542.526976][T17845] [ 542.794342][T17841] Bluetooth: hci4: link tx timeout [ 542.922163][T17841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 543.119508][T17852] FAULT_INJECTION: forcing a failure. [ 543.119508][T17852] name failslab, interval 1, probability 0, space 0, times 0 [ 543.134795][T17852] CPU: 1 UID: 0 PID: 17852 Comm: syz.0.4560 Not tainted syzkaller #0 PREEMPT(full) [ 543.134819][T17852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 543.134832][T17852] Call Trace: [ 543.134839][T17852] [ 543.134848][T17852] dump_stack_lvl+0xe8/0x150 [ 543.134882][T17852] should_fail_ex+0x40c/0x560 [ 543.134909][T17852] should_failslab+0xa8/0x100 [ 543.134937][T17852] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 543.134958][T17852] ? batadv_tt_local_table_transmit_size+0x1e/0x240 [ 543.135104][T17852] ? batadv_tt_local_add+0x38b/0x2a20 [ 543.135127][T17852] ? batadv_tt_local_add+0x38b/0x2a20 [ 543.135160][T17852] batadv_tt_local_add+0x38b/0x2a20 [ 543.135198][T17852] ? is_bpf_text_address+0x292/0x2b0 [ 543.135225][T17852] ? batadv_tt_local_add+0xa0/0x2a20 [ 543.135254][T17852] ? __pfx_batadv_tt_local_add+0x10/0x10 [ 543.135284][T17852] ? batadv_get_vid+0x183/0x2b0 [ 543.135335][T17852] batadv_interface_tx+0x769/0x1540 [ 543.135370][T17852] ? __pfx_batadv_interface_tx+0x10/0x10 [ 543.135400][T17852] ? netdev_core_pick_tx+0x1dd/0x360 [ 543.135458][T17852] generic_xdp_tx+0x1a1/0x390 [ 543.135486][T17852] dev_map_generic_redirect+0x5d7/0x920 [ 543.135524][T17852] ? __pfx_dev_map_generic_redirect+0x10/0x10 [ 543.135571][T17852] dev_map_redirect_multi+0x7f0/0x9b0 [ 543.135608][T17852] ? __pfx_dev_map_redirect_multi+0x10/0x10 [ 543.135652][T17852] xdp_do_generic_redirect+0x663/0x830 [ 543.135706][T17852] do_xdp_generic+0xcf4/0x12d0 [ 543.135749][T17852] ? __pfx_do_xdp_generic+0x10/0x10 [ 543.135815][T17852] __netif_receive_skb_core+0x10e0/0x30b0 [ 543.135874][T17852] ? __lock_acquire+0x683/0x2cf0 [ 543.135900][T17852] ? stack_depot_save_flags+0x33/0x800 [ 543.135924][T17852] ? __lock_acquire+0x683/0x2cf0 [ 543.135951][T17852] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 543.135975][T17852] ? kasan_save_track+0x4f/0x80 [ 543.135998][T17852] ? kasan_save_track+0x3e/0x80 [ 543.136019][T17852] ? __kasan_slab_alloc+0x6c/0x80 [ 543.136042][T17852] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 543.136062][T17852] ? __build_skb+0x62/0x440 [ 543.136087][T17852] ? build_skb+0x23/0x180 [ 543.136112][T17852] ? tun_get_user+0x1c4d/0x4370 [ 543.136137][T17852] ? tun_chr_write_iter+0x113/0x200 [ 543.136159][T17852] ? vfs_write+0x612/0xba0 [ 543.136184][T17852] ? ksys_write+0x150/0x270 [ 543.136209][T17852] ? do_syscall_64+0x174/0x580 [ 543.136229][T17852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.136251][T17852] ? netif_receive_skb+0x102/0xbf0 [ 543.136274][T17852] ? lock_acquire+0x106/0x350 [ 543.136298][T17852] ? netif_receive_skb+0x102/0xbf0 [ 543.136329][T17852] ? netif_receive_skb+0x102/0xbf0 [ 543.136351][T17852] ? netif_receive_skb+0x102/0xbf0 [ 543.136376][T17852] netif_receive_skb+0x1fe/0xbf0 [ 543.136406][T17852] ? __pfx_netif_receive_skb+0x10/0x10 [ 543.136436][T17852] ? rcu_is_watching+0x15/0xb0 [ 543.136461][T17852] ? tun_rx_batched+0x185/0x790 [ 543.136489][T17852] tun_rx_batched+0x1de/0x790 [ 543.136531][T17852] ? __pfx_tun_rx_batched+0x10/0x10 [ 543.136557][T17852] ? tun_get_user+0x2717/0x4370 [ 543.136583][T17852] ? tun_get_user+0x2717/0x4370 [ 543.136610][T17852] ? tun_get_user+0x23cb/0x4370 [ 543.136635][T17852] ? tun_get_user+0x23cb/0x4370 [ 543.136659][T17852] ? __local_bh_enable_ip+0xd0/0x130 [ 543.136680][T17852] ? tun_get_user+0x2717/0x4370 [ 543.136704][T17852] ? tun_get_user+0x2717/0x4370 [ 543.136729][T17852] tun_get_user+0x2b44/0x4370 [ 543.136785][T17852] ? aa_file_perm+0x4ed/0x15f0 [ 543.136806][T17852] ? __pfx_tun_get_user+0x10/0x10 [ 543.136838][T17852] ? __lock_acquire+0x683/0x2cf0 [ 543.136876][T17852] ? ref_tracker_alloc+0x341/0x4b0 [ 543.136898][T17852] ? get_pid_task+0x20/0x1f0 [ 543.136925][T17852] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 543.136950][T17852] ? tun_get+0x1c/0x2f0 [ 543.136976][T17852] ? tun_get+0x1c/0x2f0 [ 543.137006][T17852] ? tun_get+0x1c/0x2f0 [ 543.137030][T17852] ? tun_get+0x1c/0x2f0 [ 543.137060][T17852] tun_chr_write_iter+0x113/0x200 [ 543.137089][T17852] vfs_write+0x612/0xba0 [ 543.137125][T17852] ? __pfx_vfs_write+0x10/0x10 [ 543.137163][T17852] ? __fget_files+0x2a/0x420 [ 543.137196][T17852] ksys_write+0x150/0x270 [ 543.137226][T17852] ? __pfx_ksys_write+0x10/0x10 [ 543.137268][T17852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.137288][T17852] do_syscall_64+0x174/0x580 [ 543.137310][T17852] ? clear_bhb_loop+0x40/0x90 [ 543.137330][T17852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.137349][T17852] RIP: 0033:0x7ff29755e6ce [ 543.137366][T17852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 543.137382][T17852] RSP: 002b:00007ff2984defb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.137402][T17852] RAX: ffffffffffffffda RBX: 00007ff2984df6c0 RCX: 00007ff29755e6ce [ 543.137415][T17852] RDX: 000000000000003e RSI: 0000200000000240 RDI: 00000000000000c8 [ 543.137426][T17852] RBP: 00007ff2984df090 R08: 0000000000000000 R09: 0000000000000000 [ 543.137438][T17852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.137449][T17852] R13: 00007ff297826038 R14: 00007ff297825fa0 R15: 00007ffeb03bc608 [ 543.137481][T17852] [ 543.785941][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 543.814655][T17858] netlink: 'syz.4.4563': attribute type 8 has an invalid length. [ 544.144386][T17868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4567'. [ 544.164049][T17868] batadv0: entered promiscuous mode [ 544.169024][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4569'. [ 544.172438][T17868] macsec1: entered promiscuous mode [ 544.186109][T17868] macsec1: entered allmulticast mode [ 544.192052][T17868] batadv0: entered allmulticast mode [ 544.200163][T17868] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 544.212326][T17868] batadv0: left allmulticast mode [ 544.224392][T17868] batadv0: left promiscuous mode [ 544.507600][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 544.516473][T17885] FAULT_INJECTION: forcing a failure. [ 544.516473][T17885] name failslab, interval 1, probability 0, space 0, times 0 [ 544.553210][T17885] CPU: 0 UID: 0 PID: 17885 Comm: syz.4.4575 Not tainted syzkaller #0 PREEMPT(full) [ 544.553236][T17885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 544.553247][T17885] Call Trace: [ 544.553254][T17885] [ 544.553263][T17885] dump_stack_lvl+0xe8/0x150 [ 544.553296][T17885] should_fail_ex+0x40c/0x560 [ 544.553324][T17885] should_failslab+0xa8/0x100 [ 544.553353][T17885] __kmalloc_noprof+0xfe/0x720 [ 544.553378][T17885] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 544.553405][T17885] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 544.553440][T17885] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 544.553475][T17885] genl_family_rcv_msg_doit+0xda/0x340 [ 544.553507][T17885] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 544.553542][T17885] ? apparmor_capable+0x126/0x170 [ 544.553646][T17885] ? bpf_lsm_capable+0x9/0x20 [ 544.553668][T17885] ? security_capable+0x7e/0x2c0 [ 544.553702][T17885] genl_rcv_msg+0x614/0x7a0 [ 544.553741][T17885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.553766][T17885] ? __pfx_wg_set_device_doit+0x10/0x10 [ 544.553848][T17885] ? __pfx_ref_tracker_free+0x10/0x10 [ 544.553883][T17885] netlink_rcv_skb+0x226/0x4a0 [ 544.553905][T17885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.553932][T17885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.553965][T17885] ? down_read+0x2be/0x330 [ 544.553990][T17885] genl_rcv+0x28/0x40 [ 544.554012][T17885] netlink_unicast+0x7bb/0x940 [ 544.554039][T17885] netlink_sendmsg+0x813/0xb40 [ 544.554069][T17885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.554092][T17885] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.554116][T17885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.554136][T17885] sock_sendmsg_nosec+0x13a/0x180 [ 544.554161][T17885] ____sys_sendmsg+0x54e/0x850 [ 544.554182][T17885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.554211][T17885] ? import_iovec+0x73/0xa0 [ 544.554241][T17885] ___sys_sendmsg+0x2a5/0x360 [ 544.554260][T17885] ? __lock_acquire+0x683/0x2cf0 [ 544.554289][T17885] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.554344][T17885] ? __fget_files+0x2a/0x420 [ 544.554367][T17885] ? __fget_files+0x3a2/0x420 [ 544.554400][T17885] __x64_sys_sendmsg+0x1b1/0x290 [ 544.554424][T17885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.554463][T17885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.554484][T17885] do_syscall_64+0x174/0x580 [ 544.554504][T17885] ? trace_irq_disable+0x3b/0x140 [ 544.554527][T17885] ? clear_bhb_loop+0x40/0x90 [ 544.554549][T17885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.554568][T17885] RIP: 0033:0x7f572b79de99 [ 544.554586][T17885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.554602][T17885] RSP: 002b:00007f572c583028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.554620][T17885] RAX: ffffffffffffffda RBX: 00007f572ba25fa0 RCX: 00007f572b79de99 [ 544.554633][T17885] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 544.554645][T17885] RBP: 00007f572c583090 R08: 0000000000000000 R09: 0000000000000000 [ 544.554657][T17885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.554668][T17885] R13: 00007f572ba26038 R14: 00007f572ba25fa0 R15: 00007fff5c9eb188 [ 544.554699][T17885] [ 544.998400][T17896] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4577'. [ 545.050133][T17888] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4576'. [ 545.192062][T17901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4581'. [ 545.361263][T17902] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 545.400036][T17894] lo speed is unknown, defaulting to 1000 [ 545.421382][T17905] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 545.447178][T17905] bond2 (unregistering): Released all slaves [ 545.474154][T17894] wg2 speed is unknown, defaulting to 1000 [ 545.836337][T17912] netlink: 'syz.4.4584': attribute type 3 has an invalid length. [ 545.892801][T17914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4585'. [ 545.993639][T17914] FAULT_INJECTION: forcing a failure. [ 545.993639][T17914] name failslab, interval 1, probability 0, space 0, times 0 [ 546.044402][T17914] CPU: 0 UID: 0 PID: 17914 Comm: syz.3.4585 Not tainted syzkaller #0 PREEMPT(full) [ 546.044429][T17914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 546.044440][T17914] Call Trace: [ 546.044448][T17914] [ 546.044455][T17914] dump_stack_lvl+0xe8/0x150 [ 546.044488][T17914] should_fail_ex+0x40c/0x560 [ 546.044516][T17914] should_failslab+0xa8/0x100 [ 546.044555][T17914] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 546.044590][T17914] ? skb_clone+0x212/0x3a0 [ 546.044610][T17914] ? skb_clone+0x212/0x3a0 [ 546.044636][T17914] skb_clone+0x212/0x3a0 [ 546.044661][T17914] __netlink_deliver_tap+0x413/0x860 [ 546.044694][T17914] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.044716][T17914] netlink_deliver_tap+0x19c/0x1b0 [ 546.044738][T17914] netlink_unicast+0x77f/0x940 [ 546.044767][T17914] netlink_sendmsg+0x813/0xb40 [ 546.044798][T17914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.044821][T17914] ? aa_sock_msg_perm+0xf1/0x1b0 [ 546.044846][T17914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.044866][T17914] sock_sendmsg_nosec+0x13a/0x180 [ 546.044894][T17914] ____sys_sendmsg+0x54e/0x850 [ 546.044920][T17914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.044949][T17914] ? import_iovec+0x73/0xa0 [ 546.044979][T17914] ___sys_sendmsg+0x2a5/0x360 [ 546.044998][T17914] ? __lock_acquire+0x683/0x2cf0 [ 546.045027][T17914] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.045077][T17914] ? __fget_files+0x2a/0x420 [ 546.045100][T17914] ? __fget_files+0x3a2/0x420 [ 546.045133][T17914] __x64_sys_sendmsg+0x1b1/0x290 [ 546.045156][T17914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.045194][T17914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.045215][T17914] do_syscall_64+0x174/0x580 [ 546.045236][T17914] ? trace_irq_disable+0x3b/0x140 [ 546.045258][T17914] ? clear_bhb_loop+0x40/0x90 [ 546.045281][T17914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.045298][T17914] RIP: 0033:0x7fec12b9de99 [ 546.045315][T17914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.045332][T17914] RSP: 002b:00007fec13981028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.045352][T17914] RAX: ffffffffffffffda RBX: 00007fec12e25fa0 RCX: 00007fec12b9de99 [ 546.045365][T17914] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 546.045377][T17914] RBP: 00007fec13981090 R08: 0000000000000000 R09: 0000000000000000 [ 546.045389][T17914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.045400][T17914] R13: 00007fec12e26038 R14: 00007fec12e25fa0 R15: 00007fff4b501cb8 [ 546.045430][T17914] [ 546.767267][T17926] nbd10: detected capacity change from 0 to 63 [ 546.797529][ T5640] block nbd10: Receive control failed (result -32) [ 546.808351][ T1657] block nbd10: Dead connection, failed to find a fallback [ 546.825479][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4589'. [ 546.826529][ T1657] block nbd10: shutting down sockets [ 546.844288][ T1657] blk_print_req_error: 115 callbacks suppressed [ 546.844304][ T1657] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 546.861495][ T1657] buffer_io_error: 138 callbacks suppressed [ 546.861511][ T1657] Buffer I/O error on dev nbd10, logical block 0, async page read [ 546.877146][ T1657] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 546.887782][ T1657] Buffer I/O error on dev nbd10, logical block 1, async page read [ 546.895969][ T1657] Buffer I/O error on dev nbd10, logical block 2, async page read [ 546.903985][ T1657] Buffer I/O error on dev nbd10, logical block 3, async page read [ 546.913870][ T1657] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 546.925177][ T1657] Buffer I/O error on dev nbd10, logical block 0, async page read [ 546.933152][ T1657] Buffer I/O error on dev nbd10, logical block 1, async page read [ 546.941540][ T1657] Buffer I/O error on dev nbd10, logical block 2, async page read [ 546.950128][ T1657] Buffer I/O error on dev nbd10, logical block 3, async page read [ 546.958778][ T1657] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 546.968533][ T1657] Buffer I/O error on dev nbd10, logical block 0, async page read [ 546.976829][ T1657] Buffer I/O error on dev nbd10, logical block 1, async page read [ 546.985087][ T1657] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 546.995567][ T1657] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 547.005617][ T1657] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.015580][ T1657] I/O error, dev nbd10, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 547.025457][ T1657] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 547.035337][ T1657] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.045751][T13582] ldm_validate_partition_table(): Disk read failed. [ 547.056041][T13582] Dev nbd10: unable to read RDB block 0 [ 547.063064][T13582] nbd10: unable to read partition table [ 547.077447][T13582] ldm_validate_partition_table(): Disk read failed. [ 547.085477][T13582] Dev nbd10: unable to read RDB block 0 [ 547.092497][T13582] nbd10: unable to read partition table [ 547.664393][T17954] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4596'. [ 547.706208][T17957] sctp: [Deprecated]: syz.4.4599 (pid 17957) Use of int in max_burst socket option. [ 547.706208][T17957] Use struct sctp_assoc_value instead [ 547.849035][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4599'. [ 550.600602][ T1111] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 550.674890][T17985] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4608'. [ 550.698512][T17985] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4608'. [ 550.907699][T17996] syzkaller0: entered promiscuous mode [ 550.914445][T17996] syzkaller0: entered allmulticast mode [ 551.233511][T18005] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 551.280449][T17972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.671159][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 553.720642][T18023] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4622'. [ 553.937612][T18039] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 554.073283][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4628'. [ 554.139718][T18047] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4628'. [ 554.431635][T18052] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 554.616821][T18057] lo speed is unknown, defaulting to 1000 [ 554.628373][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4635'. [ 554.705474][T18057] wg2 speed is unknown, defaulting to 1000 [ 554.877341][T18073] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4639'. [ 554.933968][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4640'. [ 554.973722][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4640'. [ 555.197433][T18085] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 555.260290][T18088] trusted_key: syz.2.4641 sent an empty control message without MSG_MORE. [ 555.456420][T18097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4648'. [ 556.896306][T18128] syzkaller0: delete flow: hash 2936296707 index 1 [ 559.313313][T18176] netlink: 'syz.1.4673': attribute type 1 has an invalid length. [ 559.350282][T18176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4673'. [ 559.382784][T18179] xfrm1: entered allmulticast mode [ 559.496778][ T5805] bridge0: entered promiscuous mode [ 559.780699][T18197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.866247][T18197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.951702][T18204] netlink: 87 bytes leftover after parsing attributes in process `syz.3.4688'. [ 560.485706][T18197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.577446][T18224] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4692'. [ 560.822921][T18240] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 560.869883][T18241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4700'. [ 561.056173][ T57] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 561.090174][T18245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4702'. [ 561.120452][T18256] FAULT_INJECTION: forcing a failure. [ 561.120452][T18256] name failslab, interval 1, probability 0, space 0, times 0 [ 561.133222][T18256] CPU: 0 UID: 0 PID: 18256 Comm: syz.1.4704 Not tainted syzkaller #0 PREEMPT(full) [ 561.133270][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 561.133291][T18256] Call Trace: [ 561.133298][T18256] [ 561.133306][T18256] dump_stack_lvl+0xe8/0x150 [ 561.133341][T18256] should_fail_ex+0x40c/0x560 [ 561.133373][T18256] should_failslab+0xa8/0x100 [ 561.133403][T18256] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 561.133429][T18256] ? skb_clone+0x212/0x3a0 [ 561.133452][T18256] ? skb_clone+0x212/0x3a0 [ 561.133481][T18256] skb_clone+0x212/0x3a0 [ 561.133505][T18256] bpf_clone_redirect+0x170/0x4b0 [ 561.133541][T18256] ? bpf_test_run+0x1d1/0x830 [ 561.133564][T18256] bpf_prog_89e516583ebc9f7f+0x22/0x2a [ 561.133584][T18256] bpf_test_run+0x354/0x830 [ 561.133626][T18256] ? __pfx_bpf_test_run+0x10/0x10 [ 561.133661][T18256] ? __kasan_krealloc+0xec/0x110 [ 561.133692][T18256] ? convert___skb_to_skb+0x3d/0x5b0 [ 561.133712][T18256] bpf_prog_test_run_skb+0xe35/0x2230 [ 561.133748][T18256] ? __fget_files+0x3a2/0x420 [ 561.133771][T18256] ? __fget_files+0x2a/0x420 [ 561.133796][T18256] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 561.133816][T18256] bpf_prog_test_run+0x2c5/0x340 [ 561.133847][T18256] __sys_bpf+0xa22/0xd90 [ 561.133878][T18256] ? __pfx___sys_bpf+0x10/0x10 [ 561.133915][T18256] ? __fget_files+0x2a/0x420 [ 561.133956][T18256] ? ksys_write+0x242/0x270 [ 561.133995][T18256] ? __pfx_ksys_write+0x10/0x10 [ 561.134029][T18256] __x64_sys_bpf+0xba/0xd0 [ 561.134055][T18256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.134074][T18256] do_syscall_64+0x174/0x580 [ 561.134096][T18256] ? trace_irq_disable+0x3b/0x140 [ 561.134118][T18256] ? clear_bhb_loop+0x40/0x90 [ 561.134140][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.134159][T18256] RIP: 0033:0x7f886539de99 [ 561.134176][T18256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.134191][T18256] RSP: 002b:00007f88662a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.134210][T18256] RAX: ffffffffffffffda RBX: 00007f8865625fa0 RCX: 00007f886539de99 [ 561.134223][T18256] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 561.134236][T18256] RBP: 00007f88662a4090 R08: 0000000000000000 R09: 0000000000000000 [ 561.134247][T18256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.134259][T18256] R13: 00007f8865626038 R14: 00007f8865625fa0 R15: 00007ffd58079498 [ 561.134289][T18256] [ 561.186910][T18245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4702'. [ 561.393191][T18260] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4705'. [ 562.910594][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.917871][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.819034][T18241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 564.185271][ T253] block nbd6: Possible stuck request ffff888028677000: control (read@0,1024B). Runtime 240 seconds [ 564.196189][ T253] block nbd6: Possible stuck request ffff8880286771c0: control (read@1024,1024B). Runtime 240 seconds [ 564.207720][ T253] block nbd6: Possible stuck request ffff888028677380: control (read@2048,1024B). Runtime 240 seconds [ 564.219014][ T253] block nbd6: Possible stuck request ffff888028677540: control (read@3072,1024B). Runtime 240 seconds [ 564.222095][T18299] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4718'. [ 564.274233][T18299] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4718'. [ 564.439368][T18309] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4722'. [ 564.461034][T18307] netlink: 'syz.3.4719': attribute type 2 has an invalid length. [ 564.928584][T18331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 565.169694][T18341] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4734'. [ 565.252884][T18343] netlink: 'syz.2.4736': attribute type 2 has an invalid length. [ 565.289675][T18343] netlink: 'syz.2.4736': attribute type 2 has an invalid length. [ 565.435550][T18350] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 565.450481][T18350] bond3 (unregistering): Released all slaves [ 565.719403][T18369] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 565.861206][T18372] netlink: 'syz.2.4746': attribute type 1 has an invalid length. [ 565.905525][T18372] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4746'. [ 566.018539][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4746'. [ 566.059917][T18380] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4750'. [ 566.067735][T18378] lo speed is unknown, defaulting to 1000 [ 566.083170][T18378] wg2 speed is unknown, defaulting to 1000 [ 566.457288][T18395] netlink: 'syz.4.4756': attribute type 32 has an invalid length. [ 566.492570][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4756'. [ 566.510120][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4756'. [ 567.001782][ T1111] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 567.713135][T18407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 567.947676][T18436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4769'. [ 567.983892][T18436] x_tables: duplicate underflow at hook 4 [ 568.053386][T18442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4773'. [ 569.030445][T18472] syzkaller0: entered promiscuous mode [ 569.049007][T18472] syzkaller0: entered allmulticast mode [ 569.066366][T18475] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.4785'. [ 569.077005][T18472] 0: reclassify loop, rule prio 0, protocol 800 [ 569.225849][T18481] FAULT_INJECTION: forcing a failure. [ 569.225849][T18481] name failslab, interval 1, probability 0, space 0, times 0 [ 569.241024][T18481] CPU: 0 UID: 0 PID: 18481 Comm: syz.4.4788 Not tainted syzkaller #0 PREEMPT(full) [ 569.241049][T18481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 569.241059][T18481] Call Trace: [ 569.241065][T18481] [ 569.241072][T18481] dump_stack_lvl+0xe8/0x150 [ 569.241103][T18481] should_fail_ex+0x40c/0x560 [ 569.241130][T18481] should_failslab+0xa8/0x100 [ 569.241156][T18481] __kmalloc_noprof+0xfe/0x720 [ 569.241177][T18481] ? __kasan_kmalloc+0x93/0xb0 [ 569.241200][T18481] ? nla_strdup+0x9d/0x140 [ 569.241222][T18481] ? nla_strdup+0x9d/0x140 [ 569.241249][T18481] nla_strdup+0x9d/0x140 [ 569.241274][T18481] nf_tables_newtable+0x49a/0x1950 [ 569.241411][T18481] nfnetlink_rcv+0x1288/0x28c0 [ 569.241489][T18481] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 569.241520][T18481] ? ref_tracker_free+0x689/0x830 [ 569.241562][T18481] ? skb_clone+0x246/0x3a0 [ 569.241584][T18481] ? __netlink_deliver_tap+0x811/0x860 [ 569.241614][T18481] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.241633][T18481] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.241658][T18481] netlink_unicast+0x7bb/0x940 [ 569.241687][T18481] netlink_sendmsg+0x813/0xb40 [ 569.241715][T18481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.241738][T18481] ? aa_sock_msg_perm+0xf1/0x1b0 [ 569.241763][T18481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.241782][T18481] sock_sendmsg_nosec+0x13a/0x180 [ 569.241809][T18481] ____sys_sendmsg+0x54e/0x850 [ 569.241833][T18481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.241863][T18481] ? import_iovec+0x73/0xa0 [ 569.241894][T18481] ___sys_sendmsg+0x2a5/0x360 [ 569.241914][T18481] ? __lock_acquire+0x683/0x2cf0 [ 569.241944][T18481] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.241999][T18481] ? __fget_files+0x2a/0x420 [ 569.242022][T18481] ? __fget_files+0x3a2/0x420 [ 569.242056][T18481] __x64_sys_sendmsg+0x1b1/0x290 [ 569.242079][T18481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.242119][T18481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.242140][T18481] do_syscall_64+0x174/0x580 [ 569.242161][T18481] ? trace_irq_disable+0x3b/0x140 [ 569.242185][T18481] ? clear_bhb_loop+0x40/0x90 [ 569.242208][T18481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.242227][T18481] RIP: 0033:0x7f572b79de99 [ 569.242246][T18481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.242262][T18481] RSP: 002b:00007f572c583028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.242283][T18481] RAX: ffffffffffffffda RBX: 00007f572ba25fa0 RCX: 00007f572b79de99 [ 569.242297][T18481] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 569.242309][T18481] RBP: 00007f572c583090 R08: 0000000000000000 R09: 0000000000000000 [ 569.242321][T18481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.242339][T18481] R13: 00007f572ba26038 R14: 00007f572ba25fa0 R15: 00007fff5c9eb188 [ 569.242370][T18481] [ 569.605276][T18484] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 569.978784][T18507] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4797'. [ 570.586739][ T1657] block nbd9: Possible stuck request ffff888028747000: control (read@0,1024B). Runtime 60 seconds [ 570.597792][ T1657] block nbd9: Possible stuck request ffff8880287471c0: control (read@1024,1024B). Runtime 60 seconds [ 570.609422][ T1657] block nbd9: Possible stuck request ffff888028747380: control (read@2048,1024B). Runtime 60 seconds [ 570.620612][ T1657] block nbd9: Possible stuck request ffff888028747540: control (read@3072,1024B). Runtime 60 seconds [ 571.704185][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 572.099615][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4802'. [ 572.202794][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4802'. [ 572.355431][T18534] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4809'. [ 572.419952][T18536] netlink: 'syz.4.4807': attribute type 2 has an invalid length. [ 572.437272][T18536] netlink: 'syz.4.4807': attribute type 2 has an invalid length. [ 572.504466][ T253] block nbd7: Possible stuck request ffff8880286a0000: control (read@0,1024B). Runtime 240 seconds [ 572.512127][T18538] syzkaller0: entered promiscuous mode [ 572.515955][ T253] block nbd7: Possible stuck request ffff8880286a01c0: control (read@1024,1024B). Runtime 240 seconds [ 572.516272][ T253] block nbd7: Possible stuck request ffff8880286a0380: control (read@2048,1024B). Runtime 240 seconds [ 572.521902][T18538] syzkaller0: entered allmulticast mode [ 572.532936][ T253] block nbd7: Possible stuck request ffff8880286a0540: control (read@3072,1024B). Runtime 240 seconds [ 572.577222][T18543] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 572.722377][T18540] syzkaller0: entered promiscuous mode [ 572.736652][T18540] syzkaller0: entered allmulticast mode [ 574.350322][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 576.118990][T18584] netlink: 'syz.4.4822': attribute type 2 has an invalid length. [ 576.128190][T18584] netlink: 'syz.4.4822': attribute type 2 has an invalid length. [ 577.561378][T18588] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 577.570470][T18589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4824'. [ 580.195764][T18670] xt_hashlimit: size too large, truncated to 1048576 [ 581.426433][T18713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4876'. [ 581.526385][T18716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4878'. [ 581.660963][T18719] netlink: 'syz.0.4879': attribute type 3 has an invalid length. [ 581.764232][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4879'. [ 582.752819][T18742] xt_hashlimit: size too large, truncated to 1048576 [ 582.841684][T18747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.923100][T18747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.382333][T18759] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4895'. [ 583.804623][T18768] lo speed is unknown, defaulting to 1000 [ 583.816175][T18768] wg2 speed is unknown, defaulting to 1000 [ 584.288315][T18607] Set syz1 is full, maxelem 65536 reached [ 584.725223][T18786] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4907'. [ 584.843335][T18788] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4908'. [ 585.016038][T18796] netlink: 'syz.4.4912': attribute type 2 has an invalid length. [ 585.035137][T18796] netlink: 'syz.4.4912': attribute type 2 has an invalid length. [ 585.241178][T18800] netlink: 'syz.3.4914': attribute type 8 has an invalid length. [ 585.257295][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4915'. [ 585.862236][T18825] netlink: 'syz.0.4925': attribute type 2 has an invalid length. [ 585.895448][T18825] netlink: 'syz.0.4925': attribute type 2 has an invalid length. [ 585.958983][T18829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.130265][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4930'. [ 586.716394][T18853] syzkaller0: entered promiscuous mode [ 586.729651][T18853] syzkaller0: entered allmulticast mode [ 587.224511][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 587.532774][T18890] xt_TPROXY: Can be used only with -p tcp or -p udp [ 590.180705][T18932] syzkaller1: entered promiscuous mode [ 590.187499][T18932] syzkaller1: entered allmulticast mode [ 590.378373][T18942] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4974'. [ 592.333643][T18956] FAULT_INJECTION: forcing a failure. [ 592.333643][T18956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.364336][T18956] CPU: 1 UID: 0 PID: 18956 Comm: syz.2.4980 Not tainted syzkaller #0 PREEMPT(full) [ 592.364362][T18956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 592.364373][T18956] Call Trace: [ 592.364381][T18956] [ 592.364388][T18956] dump_stack_lvl+0xe8/0x150 [ 592.364424][T18956] should_fail_ex+0x40c/0x560 [ 592.364452][T18956] _copy_from_user+0x2d/0xb0 [ 592.364481][T18956] ___sys_recvmsg+0x173/0x5a0 [ 592.364508][T18956] ? __pfx____sys_recvmsg+0x10/0x10 [ 592.364534][T18956] ? __fget_files+0x2a/0x420 [ 592.364595][T18956] do_recvmmsg+0x31a/0x7f0 [ 592.364625][T18956] ? __pfx_do_recvmmsg+0x10/0x10 [ 592.364658][T18956] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 592.364683][T18956] ? __fget_files+0x3a2/0x420 [ 592.364717][T18956] __x64_sys_recvmmsg+0x198/0x250 [ 592.364741][T18956] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 592.364772][T18956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.364793][T18956] do_syscall_64+0x174/0x580 [ 592.364813][T18956] ? trace_irq_disable+0x3b/0x140 [ 592.364836][T18956] ? clear_bhb_loop+0x40/0x90 [ 592.364860][T18956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.364878][T18956] RIP: 0033:0x7f941e19de99 [ 592.364896][T18956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.364912][T18956] RSP: 002b:00007f941f09b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 592.364932][T18956] RAX: ffffffffffffffda RBX: 00007f941e425fa0 RCX: 00007f941e19de99 [ 592.364946][T18956] RDX: 00101f2043b8267e RSI: 0000200000000fc0 RDI: 0000000000000004 [ 592.364959][T18956] RBP: 00007f941f09b090 R08: 0000000000000000 R09: 0000000000000000 [ 592.364970][T18956] R10: 0000000000010120 R11: 0000000000000246 R12: 0000000000000002 [ 592.364981][T18956] R13: 00007f941e426038 R14: 00007f941e425fa0 R15: 00007ffdf2d3a538 [ 592.365011][T18956] [ 592.653001][T18961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4982'. [ 592.687686][T18965] syzkaller0: entered promiscuous mode [ 592.707402][T18965] syzkaller0: entered allmulticast mode [ 592.741697][T18961] xt_cgroup: invalid path, errno=-2 [ 592.780413][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4984'. [ 592.807842][T18965] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4984'. [ 592.862468][T18965] simple: bas]9oς>Q/ic_2 [ 592.869352][T18965] simple: bas]9oς>Q/ic_4 [ 592.874317][T18965] simple: bas]9oς>Q/ic_6 [ 592.879209][T18965] simple: bas]9oς>Q/ic_8 [ 592.884113][T18965] simple: bas]9oς>Q/ic_10 [ 592.889069][T18965] simple: bas]9oς>Q/ic_12 [ 592.894025][T18965] simple: bas]9oς>Q/ic_14 [ 592.900495][T18965] simple: bas]9oς>Q/ic_16 [ 592.905686][T18965] simple: bas]9oς>Q/ic_18 [ 592.910637][T18965] simple: bas]9oς>Q/ic_20 [ 592.915641][T18965] simple: bas]9oς>Q/ic_22 [ 592.920676][T18965] simple: bas]9oς>Q/ic_24 [ 592.925674][T18965] simple: bas]9oς>Q/ic_26 [ 592.930637][T18965] simple: bas]9oς>Q/ic_28 [ 592.935652][T18965] simple: bas]9oς>Q/ic_30 [ 592.940601][T18965] simple: bas]9oς>Q/ic_32 [ 592.945592][T18965] simple: bas]9oς>Q/ic_34 [ 592.950617][T18965] simple: bas]9oς>Q/ic_36 [ 592.955610][T18965] simple: bas]9oς>Q/ic_38 [ 592.960561][T18965] simple: bas]9oς>Q/ic_40 [ 592.965565][T18965] simple: bas]9oς>Q/ic_42 [ 592.970519][T18965] simple: bas]9oς>Q/ic_44 [ 592.975538][T18965] simple: bas]9oς>Q/ic_46 [ 592.980488][T18965] simple: bas]9oς>Q/ic_48 [ 592.985499][T18965] simple: bas]9oς>Q/ic_50 [ 592.990439][T18965] simple: bas]9oς>Q/ic_52 [ 592.995440][T18965] simple: bas]9oς>Q/ic_54 [ 593.000391][T18965] simple: bas]9oς>Q/ic_56 [ 593.005401][T18965] simple: bas]9oς>Q/ic_58 [ 593.010358][T18965] simple: bas]9oς>Q/ic_60 [ 593.015386][T18965] simple: bas]9oς>Q/ic_62 [ 593.020422][T18965] simple: bas]9oς>Q/ic_64 [ 593.025444][T18965] TC_ACT_REPEAT abuse ? [ 593.212500][T18983] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4991'. [ 593.634953][T19002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4999'. [ 593.817836][T19010] sctp: [Deprecated]: syz.0.5001 (pid 19010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.817836][T19010] Use struct sctp_sack_info instead [ 594.215298][T19027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.276991][ T253] block nbd6: Possible stuck request ffff888028677000: control (read@0,1024B). Runtime 270 seconds [ 594.287988][ T253] block nbd6: Possible stuck request ffff8880286771c0: control (read@1024,1024B). Runtime 270 seconds [ 594.299059][ T253] block nbd6: Possible stuck request ffff888028677380: control (read@2048,1024B). Runtime 270 seconds [ 594.310155][ T253] block nbd6: Possible stuck request ffff888028677540: control (read@3072,1024B). Runtime 270 seconds [ 594.322956][T19027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.843081][T19083] gre1: entered promiscuous mode [ 597.417353][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5039'. [ 597.426538][T19101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5039'. [ 597.470966][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5039'. [ 597.558910][T19104] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5040'. [ 598.021539][T19122] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5048'. [ 598.117174][T19125] syzkaller0: entered promiscuous mode [ 598.145846][T19125] syzkaller0: entered allmulticast mode [ 598.471303][T19141] netlink: 'syz.3.5055': attribute type 8 has an invalid length. [ 598.480477][T19141] netlink: 'syz.3.5055': attribute type 9 has an invalid length. [ 599.209950][T19170] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5067'. [ 599.749271][T19192] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5077'. [ 600.664388][ T1657] block nbd9: Possible stuck request ffff888028747000: control (read@0,1024B). Runtime 90 seconds [ 600.675135][ T1657] block nbd9: Possible stuck request ffff8880287471c0: control (read@1024,1024B). Runtime 90 seconds [ 600.686309][ T1657] block nbd9: Possible stuck request ffff888028747380: control (read@2048,1024B). Runtime 90 seconds [ 600.697326][ T1657] block nbd9: Possible stuck request ffff888028747540: control (read@3072,1024B). Runtime 90 seconds [ 602.590861][ T253] block nbd7: Possible stuck request ffff8880286a0000: control (read@0,1024B). Runtime 270 seconds [ 602.604011][ T253] block nbd7: Possible stuck request ffff8880286a01c0: control (read@1024,1024B). Runtime 270 seconds [ 602.615772][ T253] block nbd7: Possible stuck request ffff8880286a0380: control (read@2048,1024B). Runtime 270 seconds [ 602.627206][ T253] block nbd7: Possible stuck request ffff8880286a0540: control (read@3072,1024B). Runtime 270 seconds [ 603.762220][T19351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.690256][T19384] syzkaller1: entered promiscuous mode [ 604.710962][T19384] syzkaller1: entered allmulticast mode [ 605.087132][T19400] FAULT_INJECTION: forcing a failure. [ 605.087132][T19400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.106717][T19400] CPU: 1 UID: 0 PID: 19400 Comm: syz.1.5164 Not tainted syzkaller #0 PREEMPT(full) [ 605.106742][T19400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 605.106753][T19400] Call Trace: [ 605.106760][T19400] [ 605.106768][T19400] dump_stack_lvl+0xe8/0x150 [ 605.106802][T19400] should_fail_ex+0x40c/0x560 [ 605.106829][T19400] _copy_from_user+0x2d/0xb0 [ 605.106858][T19400] ___sys_recvmsg+0x173/0x5a0 [ 605.106886][T19400] ? __pfx____sys_recvmsg+0x10/0x10 [ 605.106912][T19400] ? __fget_files+0x2a/0x420 [ 605.106964][T19400] do_recvmmsg+0x31a/0x7f0 [ 605.106993][T19400] ? __pfx_do_recvmmsg+0x10/0x10 [ 605.107026][T19400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 605.107050][T19400] ? __fget_files+0x3a2/0x420 [ 605.107083][T19400] __x64_sys_recvmmsg+0x198/0x250 [ 605.107107][T19400] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 605.107137][T19400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.107158][T19400] do_syscall_64+0x174/0x580 [ 605.107179][T19400] ? trace_irq_disable+0x3b/0x140 [ 605.107202][T19400] ? clear_bhb_loop+0x40/0x90 [ 605.107231][T19400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.107249][T19400] RIP: 0033:0x7f886539de99 [ 605.107266][T19400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.107282][T19400] RSP: 002b:00007f88662a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 605.107301][T19400] RAX: ffffffffffffffda RBX: 00007f8865625fa0 RCX: 00007f886539de99 [ 605.107313][T19400] RDX: 00101f2043b8267e RSI: 0000200000000fc0 RDI: 0000000000000004 [ 605.107325][T19400] RBP: 00007f88662a4090 R08: 0000000000000000 R09: 0000000000000000 [ 605.107335][T19400] R10: 0000000000010120 R11: 0000000000000246 R12: 0000000000000002 [ 605.107345][T19400] R13: 00007f8865626038 R14: 00007f8865625fa0 R15: 00007ffd58079498 [ 605.107373][T19400] [ 605.673689][T19422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5173'. [ 605.720393][T19422] ip6gre1: entered promiscuous mode [ 605.748045][T19422] ip6gre1: entered allmulticast mode [ 605.768745][ T5817] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.790502][ T5817] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.798401][ T5721] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.824318][T19426] nbd11: detected capacity change from 0 to 63 [ 605.852117][ T5640] block nbd11: Receive control failed (result -104) [ 605.998534][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5180'. [ 606.327462][T14491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.363887][T19448] syzkaller0: entered promiscuous mode [ 606.382853][T19448] syzkaller0: entered allmulticast mode [ 606.416886][T14491] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.569019][T19461] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 606.681752][T19465] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5189'. [ 606.763024][T19469] FAULT_INJECTION: forcing a failure. [ 606.763024][T19469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.807305][T19469] CPU: 1 UID: 0 PID: 19469 Comm: syz.2.5191 Not tainted syzkaller #0 PREEMPT(full) [ 606.807333][T19469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 606.807344][T19469] Call Trace: [ 606.807351][T19469] [ 606.807359][T19469] dump_stack_lvl+0xe8/0x150 [ 606.807392][T19469] should_fail_ex+0x40c/0x560 [ 606.807419][T19469] _copy_from_user+0x2d/0xb0 [ 606.807448][T19469] __sys_bpf+0x2e7/0xd90 [ 606.807480][T19469] ? __pfx___sys_bpf+0x10/0x10 [ 606.807514][T19469] ? __fget_files+0x2a/0x420 [ 606.807554][T19469] ? ksys_write+0x242/0x270 [ 606.807585][T19469] ? __pfx_ksys_write+0x10/0x10 [ 606.807618][T19469] __x64_sys_bpf+0xba/0xd0 [ 606.807639][T19469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.807659][T19469] do_syscall_64+0x174/0x580 [ 606.807679][T19469] ? trace_irq_disable+0x3b/0x140 [ 606.807702][T19469] ? clear_bhb_loop+0x40/0x90 [ 606.807724][T19469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.807743][T19469] RIP: 0033:0x7f941e19de99 [ 606.807761][T19469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.807777][T19469] RSP: 002b:00007f941f09b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.807797][T19469] RAX: ffffffffffffffda RBX: 00007f941e425fa0 RCX: 00007f941e19de99 [ 606.807810][T19469] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 606.807822][T19469] RBP: 00007f941f09b090 R08: 0000000000000000 R09: 0000000000000000 [ 606.807834][T19469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.807845][T19469] R13: 00007f941e426038 R14: 00007f941e425fa0 R15: 00007ffdf2d3a538 [ 606.807875][T19469] [ 607.531874][T19495] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.5199'. [ 607.619284][T19500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5202'. [ 607.714349][T19503] sctp: [Deprecated]: syz.2.5203 (pid 19503) Use of int in max_burst socket option. [ 607.714349][T19503] Use struct sctp_assoc_value instead [ 609.624309][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 610.160414][T19515] lo speed is unknown, defaulting to 1000 [ 610.217381][T19524] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5211'. [ 610.218741][T19515] wg2 speed is unknown, defaulting to 1000 [ 610.255357][T19526] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 610.305975][T19524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5211'. [ 610.533820][T19538] FAULT_INJECTION: forcing a failure. [ 610.533820][T19538] name failslab, interval 1, probability 0, space 0, times 0 [ 610.590002][T19538] CPU: 0 UID: 0 PID: 19538 Comm: syz.1.5216 Not tainted syzkaller #0 PREEMPT(full) [ 610.590032][T19538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 610.590042][T19538] Call Trace: [ 610.590050][T19538] [ 610.590057][T19538] dump_stack_lvl+0xe8/0x150 [ 610.590091][T19538] should_fail_ex+0x40c/0x560 [ 610.590118][T19538] should_failslab+0xa8/0x100 [ 610.590147][T19538] __kmalloc_noprof+0xfe/0x720 [ 610.590172][T19538] ? bpf_test_init+0x9f/0x150 [ 610.590191][T19538] ? bpf_test_init+0x9f/0x150 [ 610.590216][T19538] bpf_test_init+0x9f/0x150 [ 610.590239][T19538] bpf_prog_test_run_skb+0x31e/0x2230 [ 610.590278][T19538] ? __fget_files+0x3a2/0x420 [ 610.590302][T19538] ? __fget_files+0x2a/0x420 [ 610.590329][T19538] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 610.590351][T19538] bpf_prog_test_run+0x2c5/0x340 [ 610.590380][T19538] __sys_bpf+0xa22/0xd90 [ 610.590411][T19538] ? __pfx___sys_bpf+0x10/0x10 [ 610.590445][T19538] ? __fget_files+0x2a/0x420 [ 610.590485][T19538] ? ksys_write+0x242/0x270 [ 610.590515][T19538] ? __pfx_ksys_write+0x10/0x10 [ 610.590547][T19538] __x64_sys_bpf+0xba/0xd0 [ 610.590568][T19538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.590588][T19538] do_syscall_64+0x174/0x580 [ 610.590608][T19538] ? trace_irq_disable+0x3b/0x140 [ 610.590631][T19538] ? clear_bhb_loop+0x40/0x90 [ 610.590654][T19538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.590672][T19538] RIP: 0033:0x7f886539de99 [ 610.590689][T19538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.590705][T19538] RSP: 002b:00007f8866283028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 610.590725][T19538] RAX: ffffffffffffffda RBX: 00007f8865626090 RCX: 00007f886539de99 [ 610.590739][T19538] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 610.590751][T19538] RBP: 00007f8866283090 R08: 0000000000000000 R09: 0000000000000000 [ 610.590763][T19538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.590774][T19538] R13: 00007f8865626128 R14: 00007f8865626090 R15: 00007ffd58079498 [ 610.590804][T19538] [ 610.623306][T19532] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5215'. [ 611.857776][T19567] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 611.940460][T19574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5229'. [ 611.982369][T19574] netlink: 'syz.4.5229': attribute type 1 has an invalid length. [ 612.060644][T19577] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 612.255040][T19577] block nbd3: reconnected socket [ 612.428654][ T5625] block nbd3: Receive control failed (result -32) [ 612.645962][T19601] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5234'. [ 612.787033][T19607] Bluetooth: MGMT ver 1.23 [ 612.941291][ T1111] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 612.956073][ T1111] bridge1 (unregistering): left promiscuous mode [ 612.970502][T19613] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 612.987990][ T1111] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 613.019224][ T1111] bond0 (unregistering): Released all slaves [ 613.061384][ T1111] bond1 (unregistering): Released all slaves [ 613.109882][ T1111] bond2 (unregistering): Released all slaves [ 613.282099][ T1111] tipc: Left network mode [ 613.370496][ T1111] IPVS: stopping backup sync thread 8298 ... [ 613.452507][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 613.726857][T19648] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 613.939597][ T1111] hsr_slave_0: left promiscuous mode [ 613.951406][ T1111] hsr_slave_1: left promiscuous mode [ 614.020583][ T1111] [ 614.022955][ T1111] ====================================================== [ 614.029983][ T1111] WARNING: possible circular locking dependency detected [ 614.037021][ T1111] syzkaller #0 Not tainted [ 614.041699][ T1111] ------------------------------------------------------ [ 614.048701][ T1111] kworker/u8:8/1111 is trying to acquire lock: [ 614.054930][ T1111] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 614.064831][ T1111] [ 614.064831][ T1111] but task is already holding lock: [ 614.072188][ T1111] ffffffff8f5e4060 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 614.080983][ T1111] [ 614.080983][ T1111] which lock already depends on the new lock. [ 614.080983][ T1111] [ 614.091383][ T1111] [ 614.091383][ T1111] the existing dependency chain (in reverse order) is: [ 614.100392][ T1111] [ 614.100392][ T1111] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 614.107604][ T1111] __mutex_lock+0x19d/0x1550 [ 614.112716][ T1111] get_device_parent+0x16f/0x3a0 [ 614.118163][ T1111] device_add+0x2d4/0xb80 [ 614.122997][ T1111] device_create+0x269/0x300 [ 614.128095][ T1111] msr_device_create+0x33/0x50 [ 614.133403][ T1111] cpuhp_invoke_callback+0x434/0x810 [ 614.139242][ T1111] cpuhp_thread_fun+0x362/0x780 [ 614.144608][ T1111] smpboot_thread_fn+0x57c/0xa80 [ 614.150086][ T1111] kthread+0x388/0x470 [ 614.154755][ T1111] ret_from_fork+0x514/0xb70 [ 614.160588][ T1111] ret_from_fork_asm+0x1a/0x30 [ 614.165888][ T1111] [ 614.165888][ T1111] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 614.173464][ T1111] cpuhp_thread_fun+0x127/0x780 [ 614.178851][ T1111] smpboot_thread_fn+0x57c/0xa80 [ 614.184297][ T1111] kthread+0x388/0x470 [ 614.188895][ T1111] ret_from_fork+0x514/0xb70 [ 614.194110][ T1111] ret_from_fork_asm+0x1a/0x30 [ 614.199382][ T1111] [ 614.199382][ T1111] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 614.207107][ T1111] cpus_read_lock+0x42/0x160 [ 614.212223][ T1111] static_key_slow_inc+0x12/0x30 [ 614.217708][ T1111] nbd_genl_reconfigure+0x1301/0x1e80 [ 614.223736][ T1111] genl_family_rcv_msg_doit+0x233/0x340 [ 614.229795][ T1111] genl_rcv_msg+0x614/0x7a0 [ 614.234837][ T1111] netlink_rcv_skb+0x226/0x4a0 [ 614.240114][ T1111] genl_rcv+0x28/0x40 [ 614.244608][ T1111] netlink_unicast+0x7bb/0x940 [ 614.249879][ T1111] netlink_sendmsg+0x813/0xb40 [ 614.255149][ T1111] sock_sendmsg_nosec+0x13a/0x180 [ 614.260696][ T1111] ____sys_sendmsg+0x54e/0x850 [ 614.265967][ T1111] ___sys_sendmsg+0x2a5/0x360 [ 614.271152][ T1111] __x64_sys_sendmsg+0x1b1/0x290 [ 614.276601][ T1111] do_syscall_64+0x174/0x580 [ 614.281703][ T1111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.288104][ T1111] [ 614.288104][ T1111] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 614.295746][ T1111] __mutex_lock+0x19d/0x1550 [ 614.300846][ T1111] nbd_queue_rq+0x373/0x1150 [ 614.305951][ T1111] blk_mq_dispatch_rq_list+0x499/0x1990 [ 614.312093][ T1111] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 614.319003][ T1111] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 614.325495][ T1111] blk_mq_run_work_fn+0x16c/0x300 [ 614.331029][ T1111] process_scheduled_works+0xa8e/0x14e0 [ 614.337083][ T1111] worker_thread+0xa47/0xfb0 [ 614.342183][ T1111] kthread+0x388/0x470 [ 614.346765][ T1111] ret_from_fork+0x514/0xb70 [ 614.351956][ T1111] ret_from_fork_asm+0x1a/0x30 [ 614.357237][ T1111] [ 614.357237][ T1111] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 614.364437][ T1111] __mutex_lock+0x19d/0x1550 [ 614.369539][ T1111] nbd_queue_rq+0xc1/0x1150 [ 614.374554][ T1111] blk_mq_dispatch_rq_list+0x499/0x1990 [ 614.380608][ T1111] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 614.387445][ T1111] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 614.393941][ T1111] blk_mq_run_work_fn+0x16c/0x300 [ 614.399481][ T1111] process_scheduled_works+0xa8e/0x14e0 [ 614.405535][ T1111] worker_thread+0xa47/0xfb0 [ 614.410649][ T1111] kthread+0x388/0x470 [ 614.415229][ T1111] ret_from_fork+0x514/0xb70 [ 614.420329][ T1111] ret_from_fork_asm+0x1a/0x30 [ 614.425703][ T1111] [ 614.425703][ T1111] -> #5 (set->srcu){.+.+}-{0:0}: [ 614.432836][ T1111] __synchronize_srcu+0xc9/0x2f0 [ 614.438328][ T1111] elevator_switch+0x1e8/0x7b0 [ 614.443676][ T1111] elevator_change+0x2fa/0x480 [ 614.448945][ T1111] elevator_set_default+0x375/0x440 [ 614.454651][ T1111] blk_register_queue+0x3f3/0x4e0 [ 614.460271][ T1111] __add_disk+0x6cb/0xe30 [ 614.465113][ T1111] add_disk_fwnode+0x100/0x3a0 [ 614.470380][ T1111] nbd_dev_add+0x733/0xb60 [ 614.475315][ T1111] nbd_init+0x15f/0x1e0 [ 614.480091][ T1111] do_one_initcall+0x250/0x870 [ 614.485371][ T1111] do_initcall_level+0x10a/0x1a0 [ 614.490850][ T1111] do_initcalls+0x59/0xa0 [ 614.495865][ T1111] kernel_init_freeable+0x29d/0x3e0 [ 614.501574][ T1111] kernel_init+0x1d/0x1d0 [ 614.506422][ T1111] ret_from_fork+0x514/0xb70 [ 614.511523][ T1111] ret_from_fork_asm+0x1a/0x30 [ 614.516804][ T1111] [ 614.516804][ T1111] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 614.524699][ T1111] __mutex_lock+0x19d/0x1550 [ 614.529797][ T1111] elevator_change+0x1af/0x480 [ 614.535069][ T1111] elevator_set_none+0xb5/0x140 [ 614.540428][ T1111] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 614.546745][ T1111] nbd_start_device+0x189/0xb30 [ 614.552113][ T1111] nbd_genl_connect+0x1597/0x1c10 [ 614.557646][ T1111] genl_family_rcv_msg_doit+0x233/0x340 [ 614.563701][ T1111] genl_rcv_msg+0x614/0x7a0 [ 614.568710][ T1111] netlink_rcv_skb+0x226/0x4a0 [ 614.573978][ T1111] genl_rcv+0x28/0x40 [ 614.578473][ T1111] netlink_unicast+0x7bb/0x940 [ 614.583738][ T1111] netlink_sendmsg+0x813/0xb40 [ 614.589097][ T1111] sock_sendmsg_nosec+0x13a/0x180 [ 614.594736][ T1111] ____sys_sendmsg+0x54e/0x850 [ 614.600002][ T1111] ___sys_sendmsg+0x2a5/0x360 [ 614.605183][ T1111] __x64_sys_sendmsg+0x1b1/0x290 [ 614.610627][ T1111] do_syscall_64+0x174/0x580 [ 614.615744][ T1111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.622254][ T1111] [ 614.622254][ T1111] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 614.630843][ T1111] blk_alloc_queue+0x544/0x690 [ 614.636146][ T1111] __blk_mq_alloc_disk+0x194/0x390 [ 614.641862][ T1111] nbd_dev_add+0x494/0xb60 [ 614.646796][ T1111] nbd_init+0x15f/0x1e0 [ 614.651456][ T1111] do_one_initcall+0x250/0x870 [ 614.656745][ T1111] do_initcall_level+0x10a/0x1a0 [ 614.662194][ T1111] do_initcalls+0x59/0xa0 [ 614.667132][ T1111] kernel_init_freeable+0x29d/0x3e0 [ 614.673020][ T1111] kernel_init+0x1d/0x1d0 [ 614.677865][ T1111] ret_from_fork+0x514/0xb70 [ 614.682968][ T1111] ret_from_fork_asm+0x1a/0x30 [ 614.688236][ T1111] [ 614.688236][ T1111] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 614.695435][ T1111] fs_reclaim_acquire+0x71/0x100 [ 614.700913][ T1111] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 614.707141][ T1111] alloc_inode+0xb8/0x1b0 [ 614.711977][ T1111] iget_locked+0x131/0x6a0 [ 614.716904][ T1111] kernfs_get_inode+0x4f/0x770 [ 614.722174][ T1111] kernfs_get_tree+0x5cd/0x980 [ 614.727443][ T1111] vfs_get_tree+0x92/0x2a0 [ 614.732381][ T1111] do_new_mount+0x319/0xdc0 [ 614.737479][ T1111] __se_sys_mount+0x31d/0x420 [ 614.742672][ T1111] do_syscall_64+0x174/0x580 [ 614.747775][ T1111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.754177][ T1111] [ 614.754177][ T1111] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 614.762255][ T1111] down_write+0x96/0x200 [ 614.767047][ T1111] kernfs_remove_by_name_ns+0x4e/0x140 [ 614.773051][ T1111] device_links_driver_bound+0x4ab/0x1440 [ 614.779350][ T1111] driver_bound+0xd8/0x2e0 [ 614.784276][ T1111] really_probe+0x774/0xae0 [ 614.789349][ T1111] __driver_probe_device+0x1e8/0x360 [ 614.795144][ T1111] driver_probe_device+0x4f/0x240 [ 614.800676][ T1111] __device_attach_driver+0x270/0x410 [ 614.806558][ T1111] bus_for_each_drv+0x258/0x2f0 [ 614.811921][ T1111] __device_attach+0x2c4/0x450 [ 614.817190][ T1111] device_initial_probe+0xa1/0xd0 [ 614.822740][ T1111] bus_probe_device+0x12a/0x220 [ 614.828104][ T1111] device_add+0x7d7/0xb80 [ 614.832943][ T1111] faux_device_create_with_groups+0x1a5/0x2b0 [ 614.839573][ T1111] regulator_dummy_init+0x19/0x40 [ 614.845151][ T1111] regulator_init+0xca/0x110 [ 614.850255][ T1111] do_one_initcall+0x250/0x870 [ 614.855531][ T1111] do_initcall_level+0x10a/0x1a0 [ 614.861242][ T1111] do_initcalls+0x59/0xa0 [ 614.866081][ T1111] kernel_init_freeable+0x29d/0x3e0 [ 614.871809][ T1111] kernel_init+0x1d/0x1d0 [ 614.876672][ T1111] ret_from_fork+0x514/0xb70 [ 614.881784][ T1111] ret_from_fork_asm+0x1a/0x30 [ 614.887062][ T1111] [ 614.887062][ T1111] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 614.895657][ T1111] __lock_acquire+0x1520/0x2cf0 [ 614.901023][ T1111] lock_acquire+0x106/0x350 [ 614.906036][ T1111] down_read+0x4a/0x330 [ 614.910707][ T1111] kernfs_remove+0x35/0x80 [ 614.915651][ T1111] __kobject_del+0xe0/0x310 [ 614.920886][ T1111] kobject_del+0x45/0x60 [ 614.925652][ T1111] cleanup_glue_dir+0x1a3/0x220 [ 614.931021][ T1111] device_del+0x77d/0x8f0 [ 614.935882][ T1111] device_destroy+0xb2/0x1a0 [ 614.940985][ T1111] macvtap_device_event+0x226/0x400 [ 614.946814][ T1111] notifier_call_chain+0x1a5/0x3d0 [ 614.952444][ T1111] unregister_netdevice_many_notify+0x17de/0x2150 [ 614.959368][ T1111] default_device_exit_batch+0x91e/0x9a0 [ 614.965516][ T1111] ops_undo_list+0x4b4/0x8d0 [ 614.970704][ T1111] cleanup_net+0x572/0x810 [ 614.975629][ T1111] process_scheduled_works+0xa8e/0x14e0 [ 614.981683][ T1111] worker_thread+0xa47/0xfb0 [ 614.986966][ T1111] kthread+0x388/0x470 [ 614.991601][ T1111] ret_from_fork+0x514/0xb70 [ 614.996723][ T1111] ret_from_fork_asm+0x1a/0x30 [ 615.002004][ T1111] [ 615.002004][ T1111] other info that might help us debug this: [ 615.002004][ T1111] [ 615.012230][ T1111] Chain exists of: [ 615.012230][ T1111] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 615.012230][ T1111] [ 615.025693][ T1111] Possible unsafe locking scenario: [ 615.025693][ T1111] [ 615.033128][ T1111] CPU0 CPU1 [ 615.038479][ T1111] ---- ---- [ 615.043840][ T1111] lock(gdp_mutex); [ 615.047745][ T1111] lock(cpuhp_state-up); [ 615.054703][ T1111] lock(gdp_mutex); [ 615.061116][ T1111] rlock(&root->kernfs_supers_rwsem); [ 615.066564][ T1111] [ 615.066564][ T1111] *** DEADLOCK *** [ 615.066564][ T1111] [ 615.075035][ T1111] 5 locks held by kworker/u8:8/1111: [ 615.080299][ T1111] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 615.091198][ T1111] #1: ffffc90005b7fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 615.101710][ T1111] #2: ffffffff9001e948 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 615.111008][ T1111] #3: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0x9a0 [ 615.121013][ T1111] #4: ffffffff8f5e4060 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 615.130230][ T1111] [ 615.130230][ T1111] stack backtrace: [ 615.136103][ T1111] CPU: 0 UID: 0 PID: 1111 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 615.136121][ T1111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 615.136131][ T1111] Workqueue: netns cleanup_net [ 615.136147][ T1111] Call Trace: [ 615.136155][ T1111] [ 615.136162][ T1111] dump_stack_lvl+0xe8/0x150 [ 615.136184][ T1111] print_circular_bug+0x2e1/0x300 [ 615.136214][ T1111] check_noncircular+0x12e/0x150 [ 615.136237][ T1111] __lock_acquire+0x1520/0x2cf0 [ 615.136263][ T1111] ? kernfs_remove+0x35/0x80 [ 615.136284][ T1111] lock_acquire+0x106/0x350 [ 615.136301][ T1111] ? kernfs_remove+0x35/0x80 [ 615.136325][ T1111] down_read+0x4a/0x330 [ 615.136347][ T1111] ? kernfs_remove+0x35/0x80 [ 615.136367][ T1111] kernfs_remove+0x35/0x80 [ 615.136387][ T1111] __kobject_del+0xe0/0x310 [ 615.136407][ T1111] kobject_del+0x45/0x60 [ 615.136425][ T1111] cleanup_glue_dir+0x1a3/0x220 [ 615.136441][ T1111] device_del+0x77d/0x8f0 [ 615.136457][ T1111] ? __pfx_device_del+0x10/0x10 [ 615.136471][ T1111] ? kobject_put+0x50f/0x550 [ 615.136491][ T1111] device_destroy+0xb2/0x1a0 [ 615.136505][ T1111] ? __pfx_device_destroy+0x10/0x10 [ 615.136521][ T1111] ? kernfs_remove_by_name_ns+0x101/0x140 [ 615.136543][ T1111] macvtap_device_event+0x226/0x400 [ 615.136564][ T1111] ? __pfx_ipvlan_device_event+0x10/0x10 [ 615.136634][ T1111] ? __pfx_macvtap_device_event+0x10/0x10 [ 615.136657][ T1111] notifier_call_chain+0x1a5/0x3d0 [ 615.136679][ T1111] unregister_netdevice_many_notify+0x17de/0x2150 [ 615.136703][ T1111] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 615.136723][ T1111] ? unregister_netdevice_queue+0x17d/0x340 [ 615.136741][ T1111] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 615.136761][ T1111] default_device_exit_batch+0x91e/0x9a0 [ 615.136786][ T1111] ? __pfx_default_device_exit_batch+0x10/0x10 [ 615.136810][ T1111] ? __pfx_default_device_exit_batch+0x10/0x10 [ 615.136835][ T1111] ops_undo_list+0x4b4/0x8d0 [ 615.136860][ T1111] ? __pfx_ops_undo_list+0x10/0x10 [ 615.136881][ T1111] ? idr_destroy+0x218/0x290 [ 615.136923][ T1111] ? do_raw_spin_unlock+0xf5/0x210 [ 615.136940][ T1111] cleanup_net+0x572/0x810 [ 615.136953][ T1111] ? __pfx_cleanup_net+0x10/0x10 [ 615.136975][ T1111] ? rcu_is_watching+0x15/0xb0 [ 615.136997][ T1111] ? process_scheduled_works+0xa20/0x14e0 [ 615.137012][ T1111] process_scheduled_works+0xa8e/0x14e0 [ 615.137036][ T1111] ? __pfx_process_scheduled_works+0x10/0x10 [ 615.137054][ T1111] ? assign_work+0x3cf/0x5d0 [ 615.137069][ T1111] worker_thread+0xa47/0xfb0 [ 615.137089][ T1111] ? __kthread_parkme+0x71/0x1f0 [ 615.137109][ T1111] kthread+0x388/0x470 [ 615.137127][ T1111] ? __pfx_worker_thread+0x10/0x10 [ 615.137142][ T1111] ? __pfx_kthread+0x10/0x10 [ 615.137160][ T1111] ret_from_fork+0x514/0xb70 [ 615.137182][ T1111] ? __pfx_ret_from_fork+0x10/0x10 [ 615.137201][ T1111] ? __switch_to+0xc89/0x1420 [ 615.137218][ T1111] ? __pfx_kthread+0x10/0x10 [ 615.137236][ T1111] ret_from_fork_asm+0x1a/0x30 [ 615.137254][ T1111] [ 615.434991][T19619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.650439][T19662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5256'. [ 615.949565][ T1111] IPVS: stop unused estimator thread 0... [ 617.304230][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 618.958922][ T4987] udevd[4987]: worker [5942] /devices/virtual/block/nbd6 timeout; kill it [ 618.967645][ T4987] udevd[4987]: seq 17131 '/devices/virtual/block/nbd6' killed [ 618.975714][ T4987] udevd[4987]: worker [8283] /devices/virtual/block/nbd7 timeout; kill it [ 618.984565][ T4987] udevd[4987]: seq 17319 '/devices/virtual/block/nbd7' killed [ 618.992086][ T4987] udevd[4987]: worker [12715] /devices/virtual/block/nbd9 is taking a long time