last executing test programs: 3m42.958917514s ago: executing program 0 (id=2996): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004005adf9d22484b4c89000080000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4580d8521676ed693d1c1890dac432f5"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f10af5dc71ec21ff525809b1c4c54f53"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a76e880afa3530d9953c15c870bafff79bedd1e84f64079a477e6715464cd0a3"}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040081}, 0x20008091) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m42.807985423s ago: executing program 0 (id=2999): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x1f0, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0x9}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c4, 0x2, [@TCA_BPF_ACT={0x1b8, 0x1, [@m_csum={0x1b4, 0x2, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0xffffffff, 0xffff}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xf5, 0x7, 0x7fffffff, 0x3}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x1, 0x4, 0x4}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x704, 0x9, 0x20000000, 0x3ff, 0x2}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x8, 0x5, 0x9, 0x48e}, 0x7a}}]}, {0xfb, 0x6, "21fe18afaf66970513919f70ddca273d0f8cf90e38d08ce69f111ce9161a2cd7bd48884651dba2cb0699ba30dc95f52ee93d3435c5b9c21bb70be7c9868bd1a452a2d6d67e8d5c3683ca32f85a4341015c8db56ee7438870835bbcebebf238c4fdcccdc45fe28e89a62065e7379255709b3cefd2e9983def2fddc747b61d721409fae243417e9158f993d8bbf67e93cecfe1240eeb6ce69b2a50bc71b0da2933d9a9119e3cc8801fa49fdbc640e3c9234c86ad49a61c2b11389baec9ceb3f7ead7ba07b95d84f3b46ad29920bf1e48785cd1244760e7e70e3f559441dc67beef78f32516a7cb21abc73bacdb8c4281b3a4edc6399fc407"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x1f0}}, 0x0) 3m42.453909585s ago: executing program 0 (id=3001): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082abd7000fcdbdf252e00000006000400a0aa000006000400a0aa00000c002d000201aaaaaaaaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x30}, 0x810) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @map_fd={0x18, 0x9}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x39, &(0x7f00000005c0)=""/57, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0xa, 0x3, 0xffff}, 0x10, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000680)=[{0x0, 0x5, 0x2, 0x6}, {0x1, 0x1, 0xc, 0x5}, {0x3, 0x3, 0x2, 0x9}, {0x1, 0x3, 0xd, 0x5}], 0x10, 0x80000001}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r7, 0x0, 0x1b, 0x0, &(0x7f0000000780)="0026063573fd491f9ee77763d59800009a20000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000010000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100000400000000010000000400000003180000002e5f2e"], 0x0, 0x35}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c009b00", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x810) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r10, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x52}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000085) 3m42.199440545s ago: executing program 0 (id=3005): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) 3m41.739895704s ago: executing program 0 (id=3007): socket(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 3m40.635765438s ago: executing program 1 (id=3019): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000003e000709fefffffffcffff"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000500002c001a801800028014000700fc010000000000000200f3a6a4ec000d0800000000b874000000070804000a80c45368147c0f8ffa7430878382e510f8e05393e6e73789ff6571add27482fdc0bb7b1150"], 0x4c}}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0xfffffff4, [0x5dd, 0x6], 0x3}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000000040)) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r8, 0x541b, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0x400, 0x0, 0x0, {0x7a}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xffffffffffffffd0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYRES32=r1], 0x944}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m40.26978216s ago: executing program 1 (id=3020): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m40.007882317s ago: executing program 2 (id=3021): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3m39.824746606s ago: executing program 2 (id=3023): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r4, 0x0, 0x0) write$cgroup_subtree(r4, 0x0, 0x12) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x3}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000100fcff0000000000001c"], 0x18}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) socket$netlink(0x10, 0x3, 0x15) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) (async) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) (async) pipe(&(0x7f0000000000)) (async) write$cgroup_int(r4, 0x0, 0x0) (async) write$cgroup_subtree(r4, 0x0, 0x12) (async) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x3}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000100fcff0000000000001c"], 0x18}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) (async) 3m39.349426724s ago: executing program 1 (id=3027): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) (async) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', r2, 0x2f, 0x3, 0x2, 0x3797, 0x5d, @dev={0xfe, 0x80, '\x00', 0x11}, @private1, 0x10, 0x80, 0x80000001, 0x40}}) 3m39.282420471s ago: executing program 2 (id=3028): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000060004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 3m38.759975481s ago: executing program 2 (id=3033): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100)='802.15.4 MAC\x00'}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x17, 0x10}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) close(0x3) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0xc040) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYBLOB="df7e4a63db7c5cffb8131c632646b7cbea64d97fa04a4d0d1905d67ae3933f23660ddc612a49b011066bf1388c19b62d10febf90e9185918bccc45459da3defd6ceda87852d16387f7844cdf326b7b54bf7f7dfa2364a945f317", @ANYBLOB="0000007c000000002400128009000100626f6e64000000001400028008000a00000000000800fcff2417eb2ec45e9da73c67c33258c1259130ec0b09b9c3c0ce328fe0e2bccab9182c78be832a9b6ff5408b339013c8653ad247c7311cde7b79c7ebef306ed85b0f8c2c6456ec6f2e3b0a6421da2f5befa2a27fea8f892b2e27edc54e957139a6fda1796538fdae8aa9811334fcd526934095f38199575b600791368791b512e39a167595"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 3m38.758909265s ago: executing program 1 (id=3034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0x88a8, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 3m38.691630819s ago: executing program 2 (id=3037): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x900, &(0x7f0000000480)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4073, 0xfe9}], 0x3}, 0x8000}], 0x3, 0x2, 0x0) 3m38.674680436s ago: executing program 1 (id=3038): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040054) 3m37.064199278s ago: executing program 2 (id=3043): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000070004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 3m36.98479034s ago: executing program 0 (id=3009): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="286952b6f683ecb3eefe95492dddf5614077574bad8fbddea0ac9e6767ada284a800b9ca77a8f1b6ad27fe73515f9bb4d3d0c11b1175e0a85784d69b8b16cebeb37f4416d1", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x89, @empty, 0x4e20, 0x0, 'sed\x00', 0x7, 0x7, 0x1}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0, r2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x20048000) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff070000", @ANYRES16=r4, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 3m36.27839639s ago: executing program 32 (id=3043): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000070004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 3m36.231840951s ago: executing program 33 (id=3009): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="286952b6f683ecb3eefe95492dddf5614077574bad8fbddea0ac9e6767ada284a800b9ca77a8f1b6ad27fe73515f9bb4d3d0c11b1175e0a85784d69b8b16cebeb37f4416d1", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x89, @empty, 0x4e20, 0x0, 'sed\x00', 0x7, 0x7, 0x1}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r0, r2}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x20048000) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff070000", @ANYRES16=r4, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 3m36.217024078s ago: executing program 1 (id=3046): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, 0x0, 0x0) 3m36.067509529s ago: executing program 34 (id=3046): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, 0x0, 0x0) 2.056599121s ago: executing program 4 (id=5795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x20}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x80) 1.724056603s ago: executing program 4 (id=5800): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="4000000012000501000000000000000005001900ff00000028001a000a0101020000000000000000000000000a0101000000010000000000000000000a"], 0x40}}, 0x20040810) 1.617396501s ago: executing program 4 (id=5803): r0 = socket(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req={0x8, 0xffffff81, 0x5c, 0x6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6", 0xd1}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000240)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f00050002000700"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x17, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r9, 0x5421, &(0x7f0000000140)=0x1) writev(r9, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x3) socket$nl_route(0x10, 0x3, 0x0) 1.467879755s ago: executing program 6 (id=5806): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x1, 0x700, 0x0, 0x1, {{0x16, 0x4, 0x0, 0x1e, 0x58, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@ssrr={0x89, 0x7, 0x24, [@multicast2]}, @timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0x1, [{@empty, 0x4}, {@broadcast, 0x81}, {@loopback, 0xe000000}]}, @timestamp={0x44, 0x18, 0x5e, 0x0, 0x0, [0x3, 0xc, 0xfff, 0x7, 0x7]}, @end, @ra={0x94, 0x4}, @noop]}}}}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) write$rfkill(r2, &(0x7f00000004c0)={0xffffff3a, 0x6, 0x3, 0x1}, 0x8) 1.452352485s ago: executing program 7 (id=5807): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x43) 1.312215097s ago: executing program 7 (id=5810): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0x2, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x24, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3], [0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1000, 0x0, 0x0, 0x8000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3fffffd}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}]}]}}]}, 0xb8}}, 0x0) (async) r3 = epoll_create1(0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x2000001c}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x2000000f}) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6000000000182c00fe8000000000000000000000000000bbfe800000aa0002020200000000ff02000000000000000000000000000100"/78], 0x0) (async) mmap(&(0x7f0000e31000/0x14000)=nil, 0x14000, 0xa, 0x12, 0xffffffffffffffff, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x5, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000180)={r9, 0xd}, &(0x7f0000000200)=0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)={0x200, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x1e4, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3, 0x7, 0x5, 0x4}, {0xf581, 0xf9, 0x7}, {0x1, 0x1, 0x8}, {0x180, 0x4, 0x1, 0x7a2}, {0x2, 0x29, 0xe, 0x1}, {0x9, 0x7, 0x96, 0x5}, {0x6, 0x0, 0x81, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000000) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x2000, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500382c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b0002"], 0x0) 1.285913856s ago: executing program 6 (id=5811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x2100000000000000, 0x0, 0x42890}, 0x0) 1.233196362s ago: executing program 5 (id=5812): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1fd1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 1.143349292s ago: executing program 3 (id=5813): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000b00000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.142833207s ago: executing program 7 (id=5814): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000002e00)=""/4111, 0x100f}, {&(0x7f0000000580)=""/238, 0xee}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/147, 0x93}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f0000000500)=""/106, 0x6a}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="00012dbd7000fddbdf2508000000940001801c000280080004000300000008000200ffff000008000300001000000d0001007564703a73797a32000000000800030002000000440000000002fc020000000000000000000000000000ff2f0000200002000a004e240000073ffc000000000000000000000000000000400000000d0001007564703a73797a300000000001000004000780"], 0xac}, 0x1, 0x0, 0x0, 0x44004}, 0x40010) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x54, r9, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000a80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a00)={0x6c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffc0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffffe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) 949.193972ms ago: executing program 6 (id=5815): r0 = socket(0x2b, 0x801, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'pimreg1\x00', 0x3}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42) 948.599899ms ago: executing program 5 (id=5816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) connect$inet(r6, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) listen(r7, 0x7fffffff) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r2, 0x1d, 0x1, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0xb, 0x28, 0x0, @void, @void, @void, @value, r9}, 0x20) r10 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}]}, 0x60}}, 0x0) close(0xffffffffffffffff) 948.056023ms ago: executing program 3 (id=5817): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_GET_DEST(r0, 0x0, 0x4041000) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x104, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0xd4, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0xa, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x8, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x4, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x0, 0x6, 0x8}, {0xf02, 0x7, 0x3, 0xffff}, {0x5, 0x81, 0x2, 0x2}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x2, 0xb62, 0x5}, {0x101, 0x200, 0xfffffbff, 0x400}, {0x0, 0x2, 0x6, 0xffff}]}}]}}]}, 0x104}}, 0x4080) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c050}, 0x4000000) 871.884864ms ago: executing program 6 (id=5818): r0 = socket$kcm(0x10, 0x2, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000290005ac1414aa640101028677fffeffff000ce256b28c59881681fb520009020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc23f9ffffffa30900a301c84600000012c8f46976e79ea788f03d9d3205927e3d8606ff"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0008007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0xffffffffffffffff], 0x40}}, 0x48010) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r4], 0x48) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19) connect$tipc(r5, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 767.248409ms ago: executing program 7 (id=5819): socketpair(0xa, 0x800, 0xb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x800) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc080}, 0x800) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @private=0xa010101}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @multicast2}, 0x342, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)='caif0\x00', 0x3, 0xffffffffffff109f, 0x1}) sendmsg$kcm(r0, &(0x7f0000000880)={&(0x7f0000000440)=@nl=@kern={0x10, 0x0, 0x0, 0x2004}, 0x80, &(0x7f0000000800)=[{&(0x7f00000004c0)="45ec7d73ede19cfbbbff4e36d91ac6405cb55ce394e6d7b6a05936bac5570bcbdfcd20d03227a8ba173c26b6c1f18c2bcb6a6322ca29ec9d245120", 0x3b}, {&(0x7f0000000500)="0064c94b528f4b0593a4dfaf3c554d35649d407b336f25c627f1b6872c7aa07820c0ea282c06379d1c485e88033284c254aeee2e19847d8885ca3a0383a686bd531762d90b1cf3bd3a82c5babaac51e8d492e72f98c68ea6fbcf0c957be675ac311127f94e49faa1671c24382b258cc4815cdabd115fdb802920dab92bb6de058990a3d8ba6197cec2d9cf0244e9357813f28d60082615a3c4ddf20f9573a2bc643f34cde0ec0ba45076ddaa64a26186d0cb8f608c6cbd1a558b71ee06469cce44223ea9a023f94518e668", 0xcb}, {&(0x7f0000000600)="d8ec73e394944989abc3c4b8566b132d576ea492bba9977603b7db5e35119f2d0ac7463f59fe3879b0edc91ec67f7b26322edd7f30eca8e6611111c4ef45c761441cbcdc2dcec10fe001b6f47259941fbd34f4aa208aea2ef5bc9459f265627b2b437c1b112946c677079db2baf65449b55c6d373d89e6e6da60c2", 0x7b}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="994c3578094382f02ae7aba92ddf8e0e0e5aa71dfe2a762c88cad6e9a7d4157abb9b6c653fa46b4dfb534cc937b2fb9cccbb55d12afaf221f40310d0556aebbd814a1dda108f8f61f1e575a065f46da7479479fa947507c0a53b00028ac56530", 0x60}, {&(0x7f0000000740)="8cdd2046e7f99378715227c5f418aaa2b4266c1245d703966681bde5cd7649b94bb5962c3c84c35e984224a591ccaa6165a10f69781010da176c4df039a97a670b7b3a5445eb034d90f875331633075357310a5105a51ef907", 0x59}, {&(0x7f00000007c0)="44b200c698420b15e4e6979139d5ff31f6a25802c8ab42aff07dfc71f3c0906e398374505f7d6d7f14cc7234b3282028d2360e5ce832fa78ed1fc1b4eee1ac", 0x3f}], 0x7}, 0x40040) r4 = accept4(r0, &(0x7f00000008c0)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000940)=0x80, 0x800) sendmsg$unix(r4, &(0x7f0000000bc0)={&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a00)="dc086a44b2d5cd6a37bef07ba984ebaf787aa7bf3d1353fcf1a81198adf6e52d824c9c73ab2f5b1245567bd97ca9925b03adbc7547967d713b11621d2e53da261ae74f15b7", 0x45}, {&(0x7f0000000a80)="b48a7674845fc68648936ff7de5091389ceb5707ed9205172dfafe5e9360dc2c591ea5be37c16dc7240c3cee02eaade0f0ad9de9af34ec6746f89561e1f8f49bd7b9e7ff96b3e39ec86c5b3190e70dd10e0d89d53f6f3966045bfdcc00c1c751d81e6a85ec971234ee72b53652dc06eee7dddd152ffaf7", 0x77}, {&(0x7f0000000b00)="f02ba74652562bf01876685b20abaa66b63e87336a07df4518c2b8254b870dc2218bec2b0fc8fcfd4a3c2ae542da798f3d784220ef0540", 0x37}], 0x3, &(0x7f0000000b80)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r1, r0, r0]}}], 0x28, 0xd0}, 0x20000000) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000c00)={0x32, @empty, 0x4e23, 0x4, 'ovf\x00', 0x20, 0x9, 0x26}, 0x2c) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000c40)=0x2, 0x4) bind$isdn_base(r4, &(0x7f0000000c80)={0x22, 0xf8, 0x47, 0xb, 0xfd}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x48}}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r1) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x84, r6, 0x104, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x39}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0xb8e, 0x376]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7a}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r5) shutdown(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001000)={'vxcan0\x00'}) connect$ax25(r0, &(0x7f0000001040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast]}, 0x48) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_netdev_private(r7, 0x89f3, &(0x7f00000010c0)="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") close(r0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000020c0)={0x100, 0x4, 0x6, 0x2, 0xfff, 0x40}) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000021c0)={&(0x7f0000002100), 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x28, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x18}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x20000010) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000002300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000002340)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000002380)={r8, 0xb, 0x1, [0xff01]}, 0xa) 765.828027ms ago: executing program 5 (id=5820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x54, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty=0x7f000001}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) 762.266029ms ago: executing program 3 (id=5821): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) pselect6(0x40, &(0x7f0000000000)={0xfffffffffffffff9, 0x8, 0x1ff, 0x8, 0x6, 0x1000, 0x2, 0x2}, &(0x7f0000000040)={0x100, 0x1, 0xffffffffffffffff, 0xfffffffffffffff8, 0x7fffffff, 0x8000000000000000, 0x2, 0x7}, &(0x7f0000000080)={0x8, 0x8000000000000001, 0xb, 0x0, 0x6, 0x4, 0x8, 0xc7d5}, &(0x7f00000000c0), &(0x7f0000000200)={&(0x7f00000001c0)={[0x7]}, 0x8}) 614.719727ms ago: executing program 5 (id=5822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fcf5ffffffffffffff000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 564.101818ms ago: executing program 4 (id=5823): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x10000000) 563.603523ms ago: executing program 3 (id=5824): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7f}}}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r4, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000a40)={r6, "8d804cd5ca75c723da52eabc17eba6d4"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000840)={r6, 0x7a1}) 557.370319ms ago: executing program 6 (id=5825): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 439.463795ms ago: executing program 4 (id=5826): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x1, 0x9, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0}, 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup=r2, r0, 0x2b, 0x9, r0, @void, @value=r0, @void, @void, r1}, 0x20) 315.95709ms ago: executing program 5 (id=5827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x4000000000000000, 0x0, 0x42890}, 0x0) 305.914399ms ago: executing program 3 (id=5828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000009000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000808000b400000000028000480240001800b0001007470726f7879000014000280080003400000000a08000140000000420900010073797a30"], 0xc4}}, 0x4008800) 187.470389ms ago: executing program 7 (id=5829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='syzkaller\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0xfffffffd, 0x0, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0xd}, 0x50) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r0}, 0x18) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x2b, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x6, 0x1, 0x6, 0xfffffffffffffffe, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2b}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x65}, @call={0x85, 0x0, 0x0, 0x6e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000100)='GPL\x00', 0x7e, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @sk_lookup, r3, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0x3, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r4, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x2, 0x5, 0x9}, {0x5, 0x2, 0xb}], 0x10, 0x7}, 0x94) 135.749751ms ago: executing program 5 (id=5830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c484}, 0x20000001) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000002c0)={'macvtap0\x00'}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r2, 0xa773a000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r6}, 0x10) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0xc4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) openat$cgroup_ro(r8, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x94) 135.35029ms ago: executing program 4 (id=5831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000440)=@ethtool_rx_ntuple={0x35, {0x9, @esp_ip4_spec={@multicast2, @private=0xa010102, 0xe, 0x59}, @esp_ip4_spec={@remote, @private=0xa010102, 0x401, 0x62}, 0x8, 0x7, 0x8, 0x2, 0x1}}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket(0x10, 0x80002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x14, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xd26c097928740739) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r10, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000040000001c00128009000100626f6e64000000000c0002800500010002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772658d6b85fb229b6082957461700000001800028014000700ff01000000000000000000", @ANYRES32=r14, @ANYBLOB], 0x54}}, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r2) 69.908629ms ago: executing program 3 (id=5832): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x54, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty=0x7f000001}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) 57.10053ms ago: executing program 7 (id=5833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) sendmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200048c1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) (async) sendmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200048c1) (async) 0s ago: executing program 6 (id=5834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fcde00000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) (fail_nth: 1) kernel console output (not intermixed with test programs): ] lo: left allmulticast mode [ 460.591497][ T5952] tipc: Node number set to 1 [ 460.742750][T18985] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4546'. [ 460.808525][T18990] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4547'. [ 460.970706][T18998] syz_tun: entered allmulticast mode [ 461.003442][T18997] syz_tun: left allmulticast mode [ 461.173858][T19005] veth0: entered promiscuous mode [ 461.332407][T19003] veth0: left promiscuous mode [ 461.395781][T19015] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4560'. [ 461.550351][T19022] batadv_slave_1: entered allmulticast mode [ 461.558723][T19020] batadv_slave_1: left allmulticast mode [ 461.657731][T19027] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4563'. [ 461.768582][T19031] netlink: 'syz.4.4567': attribute type 23 has an invalid length. [ 461.970327][T19039] bridge1: entered allmulticast mode [ 461.993246][T19039] netlink: 'syz.3.4570': attribute type 11 has an invalid length. [ 462.017812][T19039] netlink: 'syz.3.4570': attribute type 11 has an invalid length. [ 462.040779][T19039] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4570'. [ 462.122847][T19044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.099761][T19082] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 463.655054][T19104] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 463.830666][T19108] FAULT_INJECTION: forcing a failure. [ 463.830666][T19108] name failslab, interval 1, probability 0, space 0, times 0 [ 463.867923][T19108] CPU: 0 UID: 0 PID: 19108 Comm: syz.7.4600 Not tainted syzkaller #0 PREEMPT(full) [ 463.867955][T19108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 463.867970][T19108] Call Trace: [ 463.867979][T19108] [ 463.867989][T19108] dump_stack_lvl+0x189/0x250 [ 463.868025][T19108] ? __pfx____ratelimit+0x10/0x10 [ 463.868065][T19108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.868092][T19108] ? __pfx__printk+0x10/0x10 [ 463.868132][T19108] ? __pfx___might_resched+0x10/0x10 [ 463.868160][T19108] should_fail_ex+0x414/0x560 [ 463.868207][T19108] should_failslab+0xa8/0x100 [ 463.868244][T19108] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 463.868277][T19108] ? ipv4_default_advmss+0x20/0x290 [ 463.868328][T19108] ? __alloc_skb+0x112/0x2d0 [ 463.868359][T19108] __alloc_skb+0x112/0x2d0 [ 463.868390][T19108] tcp_stream_alloc_skb+0x3d/0x340 [ 463.868437][T19108] tcp_connect+0x146f/0x4ef0 [ 463.868491][T19108] ? __lock_acquire+0xab9/0xd20 [ 463.868538][T19108] ? get_random_u16+0x154/0x940 [ 463.868594][T19108] ? __pfx_tcp_connect+0x10/0x10 [ 463.868623][T19108] ? get_random_u16+0x48e/0x940 [ 463.868662][T19108] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.868687][T19108] ? get_random_u16+0x154/0x940 [ 463.868712][T19108] ? get_random_u16+0x4df/0x940 [ 463.868748][T19108] ? __asan_memset+0x22/0x50 [ 463.868780][T19108] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 463.868822][T19108] ? sk_setup_caps+0x850/0xac0 [ 463.868853][T19108] ? dst_release+0x72/0x1b0 [ 463.868893][T19108] tcp_v4_connect+0x1110/0x1a00 [ 463.868956][T19108] ? __pfx_tcp_v4_connect+0x10/0x10 [ 463.869003][T19108] __inet_stream_connect+0x2ab/0xe80 [ 463.869054][T19108] ? __local_bh_enable_ip+0x12d/0x1c0 [ 463.869079][T19108] ? __pfx___inet_stream_connect+0x10/0x10 [ 463.869114][T19108] ? __local_bh_enable_ip+0x12d/0x1c0 [ 463.869136][T19108] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 463.869172][T19108] inet_stream_connect+0x66/0xa0 [ 463.869210][T19108] __sys_connect+0x316/0x440 [ 463.869237][T19108] ? __fget_files+0x3a0/0x420 [ 463.869260][T19108] ? __pfx___sys_connect+0x10/0x10 [ 463.869298][T19108] ? __pfx_ksys_write+0x10/0x10 [ 463.869326][T19108] ? rcu_is_watching+0x15/0xb0 [ 463.869359][T19108] __x64_sys_connect+0x7a/0x90 [ 463.869386][T19108] do_syscall_64+0xfa/0x3b0 [ 463.869412][T19108] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.869435][T19108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.869457][T19108] ? clear_bhb_loop+0x60/0xb0 [ 463.869485][T19108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.869507][T19108] RIP: 0033:0x7f74e218eec9 [ 463.869530][T19108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.869550][T19108] RSP: 002b:00007f74e2f45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 463.869575][T19108] RAX: ffffffffffffffda RBX: 00007f74e23e5fa0 RCX: 00007f74e218eec9 [ 463.869591][T19108] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 463.869605][T19108] RBP: 00007f74e2f45090 R08: 0000000000000000 R09: 0000000000000000 [ 463.869620][T19108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.869642][T19108] R13: 00007f74e23e6038 R14: 00007f74e23e5fa0 R15: 00007fffa330d2a8 [ 463.869679][T19108] [ 464.598737][T19127] __nla_validate_parse: 2 callbacks suppressed [ 464.598768][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4607'. [ 464.854333][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4615'. [ 464.941307][T19150] sctp: [Deprecated]: syz.7.4618 (pid 19150) Use of int in max_burst socket option. [ 464.941307][T19150] Use struct sctp_assoc_value instead [ 464.970086][T19149] sctp: [Deprecated]: syz.7.4618 (pid 19149) Use of int in max_burst socket option. [ 464.970086][T19149] Use struct sctp_assoc_value instead [ 465.031478][T19150] sctp: [Deprecated]: syz.7.4618 (pid 19150) Use of int in max_burst socket option. [ 465.031478][T19150] Use struct sctp_assoc_value instead [ 465.210284][T19164] netlink: 'syz.7.4624': attribute type 7 has an invalid length. [ 465.282781][T19168] netlink: 'syz.7.4624': attribute type 7 has an invalid length. [ 465.314504][T19164] : entered promiscuous mode [ 465.516266][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4631'. [ 465.547548][T19182] FAULT_INJECTION: forcing a failure. [ 465.547548][T19182] name failslab, interval 1, probability 0, space 0, times 0 [ 465.570224][T19182] CPU: 0 UID: 0 PID: 19182 Comm: syz.3.4632 Not tainted syzkaller #0 PREEMPT(full) [ 465.570254][T19182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 465.570267][T19182] Call Trace: [ 465.570285][T19182] [ 465.570294][T19182] dump_stack_lvl+0x189/0x250 [ 465.570323][T19182] ? __pfx____ratelimit+0x10/0x10 [ 465.570344][T19182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.570366][T19182] ? __pfx__printk+0x10/0x10 [ 465.570414][T19182] ? __pfx___might_resched+0x10/0x10 [ 465.570449][T19182] should_fail_ex+0x414/0x560 [ 465.570482][T19182] should_failslab+0xa8/0x100 [ 465.570510][T19182] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 465.570537][T19182] ? __alloc_skb+0x112/0x2d0 [ 465.570562][T19182] __alloc_skb+0x112/0x2d0 [ 465.570586][T19182] netlink_sendmsg+0x5c6/0xb30 [ 465.570618][T19182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.570642][T19182] ? aa_sock_msg_perm+0xf1/0x1d0 [ 465.570664][T19182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.570687][T19182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.570712][T19182] __sock_sendmsg+0x21c/0x270 [ 465.570747][T19182] ____sys_sendmsg+0x505/0x830 [ 465.570779][T19182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.570813][T19182] ? import_iovec+0x74/0xa0 [ 465.570845][T19182] ___sys_sendmsg+0x21f/0x2a0 [ 465.570874][T19182] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.570931][T19182] ? __fget_files+0x2a/0x420 [ 465.570947][T19182] ? __fget_files+0x3a0/0x420 [ 465.570973][T19182] __x64_sys_sendmsg+0x19b/0x260 [ 465.571002][T19182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.571040][T19182] ? __pfx_ksys_write+0x10/0x10 [ 465.571071][T19182] ? rcu_is_watching+0x15/0xb0 [ 465.571097][T19182] ? do_syscall_64+0xbe/0x3b0 [ 465.571125][T19182] do_syscall_64+0xfa/0x3b0 [ 465.571148][T19182] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.571170][T19182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.571190][T19182] ? clear_bhb_loop+0x60/0xb0 [ 465.571216][T19182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.571237][T19182] RIP: 0033:0x7fedfe78eec9 [ 465.571257][T19182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.571276][T19182] RSP: 002b:00007fedff5fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.571299][T19182] RAX: ffffffffffffffda RBX: 00007fedfe9e5fa0 RCX: 00007fedfe78eec9 [ 465.571315][T19182] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 465.571329][T19182] RBP: 00007fedff5fb090 R08: 0000000000000000 R09: 0000000000000000 [ 465.571343][T19182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.571357][T19182] R13: 00007fedfe9e6038 R14: 00007fedfe9e5fa0 R15: 00007ffe436c7418 [ 465.571393][T19182] [ 466.495878][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4646'. [ 466.524836][T19216] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.4644'. [ 466.651856][T19218] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.798009][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4647'. [ 467.040249][T19244] netlink: 'syz.7.4657': attribute type 10 has an invalid length. [ 467.052397][T19245] netlink: 'syz.5.4658': attribute type 10 has an invalid length. [ 467.076441][T19244] bridge_slave_1: left allmulticast mode [ 467.084210][T19244] bridge_slave_1: left promiscuous mode [ 467.094916][T19244] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.125389][T19247] netlink: 'syz.7.4657': attribute type 10 has an invalid length. [ 467.127089][T19244] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 467.140407][T19247] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4657'. [ 467.210884][T19247] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 467.280278][T19247] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 467.328616][T19247] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 467.650869][T19267] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4665'. [ 467.975827][T19281] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4671'. [ 468.066245][T19267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.088630][T19267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.105448][T19267] bond0 (unregistering): (slave team0): Releasing backup interface [ 468.119273][T19267] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 468.131859][T19267] bond0 (unregistering): Released all slaves [ 468.337149][T19284] netlink: 'syz.3.4673': attribute type 1 has an invalid length. [ 468.404135][T19291] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4675'. [ 468.457104][T19293] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 468.488306][T19293] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 468.603513][T19284] vlan2: entered allmulticast mode [ 468.608930][T19284] bridge0: entered allmulticast mode [ 468.631010][T19284] bond5: (slave vlan2): Opening slave failed [ 469.459874][T19340] IPVS: Error connecting to the multicast addr [ 469.752471][T19348] IPVS: length: 222 != 8 [ 469.823853][T19347] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.888952][T19356] __nla_validate_parse: 2 callbacks suppressed [ 469.888977][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4700'. [ 470.047725][T19347] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.186730][ T1149] tipc: Subscription rejected, illegal request [ 470.258798][T19347] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.320690][T19365] pim6reg1: entered promiscuous mode [ 470.358784][T19365] pim6reg1: entered allmulticast mode [ 470.743691][T19347] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.908769][T19372] IPVS: Error connecting to the multicast addr [ 471.101354][ T994] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.131390][ T994] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.236174][ T994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.266095][ T994] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.322046][T19391] netlink: 'syz.5.4712': attribute type 1 has an invalid length. [ 471.397307][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4712'. [ 471.399071][T19391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.451969][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4713'. [ 471.710234][T19414] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 471.726332][T19414] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 471.757340][T19416] netlink: 'syz.7.4722': attribute type 10 has an invalid length. [ 471.776808][T19416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4722'. [ 472.722444][T19457] netlink: 'syz.5.4739': attribute type 2 has an invalid length. [ 472.810241][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4741'. [ 473.053268][T19476] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4748'. [ 473.072151][T19476] openvswitch: netlink: Flow actions attr not present in new flow. [ 473.268680][ T31] audit: type=1804 audit(1759321189.928:4): pid=19488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4753" name="/newroot/310/cgroup.controllers" dev="tmpfs" ino=1582 res=1 errno=0 [ 473.341654][ T31] audit: type=1800 audit(1759321189.958:5): pid=19488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4753" name="cgroup.controllers" dev="tmpfs" ino=1582 res=0 errno=0 [ 473.430138][T19498] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4757'. [ 474.447331][T19544] netlink: 'syz.4.4776': attribute type 4 has an invalid length. [ 474.567450][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4779'. [ 474.929034][ T3491] tipc: Subscription rejected, illegal request [ 474.990174][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4786'. [ 475.012569][T19572] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4786'. [ 475.144018][ T994] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x35 [ 475.953985][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4800'. [ 475.979761][T19607] openvswitch: netlink: Flow actions attr not present in new flow. [ 476.005371][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4802'. [ 476.670945][T19641] netlink: 'syz.7.4812': attribute type 5 has an invalid length. [ 476.984133][T19652] FAULT_INJECTION: forcing a failure. [ 476.984133][T19652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.007806][T19652] CPU: 0 UID: 0 PID: 19652 Comm: syz.5.4817 Not tainted syzkaller #0 PREEMPT(full) [ 477.007838][T19652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.007851][T19652] Call Trace: [ 477.007890][T19652] [ 477.007909][T19652] dump_stack_lvl+0x189/0x250 [ 477.007942][T19652] ? __pfx____ratelimit+0x10/0x10 [ 477.007965][T19652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.007990][T19652] ? __pfx__printk+0x10/0x10 [ 477.008020][T19652] ? __might_fault+0xb0/0x130 [ 477.008062][T19652] should_fail_ex+0x414/0x560 [ 477.008102][T19652] _copy_from_iter+0x1de/0x1790 [ 477.008136][T19652] ? rcu_is_watching+0x15/0xb0 [ 477.008161][T19652] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 477.008195][T19652] ? __pfx__copy_from_iter+0x10/0x10 [ 477.008223][T19652] ? __build_skb_around+0x257/0x3e0 [ 477.008255][T19652] ? netlink_sendmsg+0x642/0xb30 [ 477.008277][T19652] ? skb_put+0x11b/0x210 [ 477.008307][T19652] netlink_sendmsg+0x6b2/0xb30 [ 477.008343][T19652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.008372][T19652] ? aa_sock_msg_perm+0xf1/0x1d0 [ 477.008398][T19652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.008421][T19652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.008448][T19652] __sock_sendmsg+0x21c/0x270 [ 477.008486][T19652] ____sys_sendmsg+0x505/0x830 [ 477.008523][T19652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.008563][T19652] ? import_iovec+0x74/0xa0 [ 477.008595][T19652] ___sys_sendmsg+0x21f/0x2a0 [ 477.008625][T19652] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.008690][T19652] ? __fget_files+0x2a/0x420 [ 477.008710][T19652] ? __fget_files+0x3a0/0x420 [ 477.008756][T19652] __x64_sys_sendmsg+0x19b/0x260 [ 477.008794][T19652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.008834][T19652] ? __pfx_ksys_write+0x10/0x10 [ 477.008860][T19652] ? rcu_is_watching+0x15/0xb0 [ 477.008889][T19652] ? do_syscall_64+0xbe/0x3b0 [ 477.008921][T19652] do_syscall_64+0xfa/0x3b0 [ 477.008946][T19652] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.008969][T19652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.008990][T19652] ? clear_bhb_loop+0x60/0xb0 [ 477.009016][T19652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.009036][T19652] RIP: 0033:0x7fa81db8eec9 [ 477.009057][T19652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.009077][T19652] RSP: 002b:00007fa81e946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.009100][T19652] RAX: ffffffffffffffda RBX: 00007fa81dde5fa0 RCX: 00007fa81db8eec9 [ 477.009117][T19652] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 477.009131][T19652] RBP: 00007fa81e946090 R08: 0000000000000000 R09: 0000000000000000 [ 477.009145][T19652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.009159][T19652] R13: 00007fa81dde6038 R14: 00007fa81dde5fa0 R15: 00007fff102604b8 [ 477.009194][T19652] [ 477.319178][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4818'. [ 477.339685][T19655] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4819'. [ 477.355225][T19655] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4819'. [ 477.402178][T19656] openvswitch: netlink: Flow actions attr not present in new flow. [ 477.424011][T19655] gretap1: entered promiscuous mode [ 477.464258][T19655] gretap1: entered allmulticast mode [ 477.485964][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4822'. [ 477.957923][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4832'. [ 478.068940][T19688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4832'. [ 478.263547][T19695] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.538550][T19703] FAULT_INJECTION: forcing a failure. [ 478.538550][T19703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.573665][T19703] CPU: 1 UID: 0 PID: 19703 Comm: syz.6.4841 Not tainted syzkaller #0 PREEMPT(full) [ 478.573700][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.573715][T19703] Call Trace: [ 478.573725][T19703] [ 478.573736][T19703] dump_stack_lvl+0x189/0x250 [ 478.573771][T19703] ? __pfx____ratelimit+0x10/0x10 [ 478.573798][T19703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.573826][T19703] ? __pfx__printk+0x10/0x10 [ 478.573874][T19703] should_fail_ex+0x414/0x560 [ 478.573916][T19703] _copy_to_user+0x31/0xb0 [ 478.573951][T19703] sctp_getsockopt_pf_expose+0x3c0/0x500 [ 478.574011][T19703] ? __pfx_sctp_getsockopt_pf_expose+0x10/0x10 [ 478.574054][T19703] sctp_getsockopt+0x465/0xb60 [ 478.574086][T19703] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 478.574113][T19703] do_sock_getsockopt+0x36f/0x450 [ 478.574146][T19703] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 478.574174][T19703] ? write_ibpb+0x30/0x40 [ 478.574203][T19703] ? __fget_files+0x3a0/0x420 [ 478.574224][T19703] ? __fget_files+0x2a/0x420 [ 478.574254][T19703] __x64_sys_getsockopt+0x1a5/0x250 [ 478.574282][T19703] ? write_ibpb+0x30/0x40 [ 478.574310][T19703] ? write_ibpb+0x30/0x40 [ 478.574340][T19703] do_syscall_64+0xfa/0x3b0 [ 478.574364][T19703] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.574389][T19703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.574418][T19703] ? clear_bhb_loop+0x60/0xb0 [ 478.574447][T19703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.574469][T19703] RIP: 0033:0x7f08d138eec9 [ 478.574491][T19703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.574512][T19703] RSP: 002b:00007f08cf5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 478.574536][T19703] RAX: ffffffffffffffda RBX: 00007f08d15e5fa0 RCX: 00007f08d138eec9 [ 478.574565][T19703] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 478.574610][T19703] RBP: 00007f08cf5f6090 R08: 0000200000000000 R09: 0000000000000000 [ 478.574625][T19703] R10: 0000200000001c40 R11: 0000000000000246 R12: 0000000000000001 [ 478.574640][T19703] R13: 00007f08d15e6038 R14: 00007f08d15e5fa0 R15: 00007ffcc14ee268 [ 478.574677][T19703] [ 479.192864][T19721] netlink: zone id is out of range [ 479.218479][T19721] netlink: del zone limit has 4 unknown bytes [ 479.700886][T19747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.769406][T19747] FAULT_INJECTION: forcing a failure. [ 479.769406][T19747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 479.830361][T19747] CPU: 1 UID: 0 PID: 19747 Comm: syz.4.4860 Not tainted syzkaller #0 PREEMPT(full) [ 479.830396][T19747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.830411][T19747] Call Trace: [ 479.830421][T19747] [ 479.830432][T19747] dump_stack_lvl+0x189/0x250 [ 479.830467][T19747] ? __pfx____ratelimit+0x10/0x10 [ 479.830494][T19747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.830521][T19747] ? __pfx__printk+0x10/0x10 [ 479.830556][T19747] ? fs_reclaim_acquire+0x7d/0x100 [ 479.830589][T19747] should_fail_ex+0x414/0x560 [ 479.830630][T19747] prepare_alloc_pages+0x213/0x610 [ 479.830662][T19747] __alloc_frozen_pages_noprof+0x123/0x370 [ 479.830691][T19747] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 479.830712][T19747] ? ima_match_policy+0x10b/0x2150 [ 479.830763][T19747] ? policy_nodemask+0x27c/0x720 [ 479.830802][T19747] ? process_measurement+0x72d/0x1a40 [ 479.830835][T19747] alloc_pages_mpol+0x232/0x4a0 [ 479.830874][T19747] vma_alloc_folio_noprof+0xe4/0x200 [ 479.830911][T19747] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 479.830971][T19747] folio_prealloc+0x30/0x180 [ 479.831007][T19747] do_wp_page+0x1231/0x5800 [ 479.831069][T19747] ? __pfx_do_wp_page+0x10/0x10 [ 479.831092][T19747] ? do_raw_spin_lock+0x121/0x290 [ 479.831128][T19747] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 479.831170][T19747] __handle_mm_fault+0x1033/0x5440 [ 479.831223][T19747] ? __pfx___handle_mm_fault+0x10/0x10 [ 479.831271][T19747] ? find_vma+0xe7/0x160 [ 479.831311][T19747] ? __pfx_find_vma+0x10/0x10 [ 479.831345][T19747] handle_mm_fault+0x40a/0x8e0 [ 479.831387][T19747] do_user_addr_fault+0x764/0x1390 [ 479.831453][T19747] exc_page_fault+0x76/0xf0 [ 479.831481][T19747] asm_exc_page_fault+0x26/0x30 [ 479.831503][T19747] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 479.831536][T19747] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 479.831556][T19747] RSP: 0018:ffffc90002eb7c68 EFLAGS: 00050246 [ 479.831576][T19747] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 479.831590][T19747] RDX: 0000000000000000 RSI: ffffc90002eb7ce0 RDI: 0000200000001c40 [ 479.831605][T19747] RBP: ffffc90002eb7d50 R08: ffffc90002eb7ce7 R09: 1ffff920005d6f9c [ 479.831621][T19747] R10: dffffc0000000000 R11: fffff520005d6f9d R12: 0000200000001c48 [ 479.831638][T19747] R13: 00007ffffffff000 R14: ffffc90002eb7ce0 R15: 0000200000001c40 [ 479.831676][T19747] _copy_to_user+0x8a/0xb0 [ 479.831710][T19747] sctp_getsockopt_pf_expose+0x3c0/0x500 [ 479.831742][T19747] ? __pfx_sctp_getsockopt_pf_expose+0x10/0x10 [ 479.831784][T19747] sctp_getsockopt+0x465/0xb60 [ 479.831810][T19747] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 479.831836][T19747] do_sock_getsockopt+0x36f/0x450 [ 479.831869][T19747] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 479.831897][T19747] ? write_ibpb+0x30/0x40 [ 479.831920][T19747] ? __fget_files+0x3a0/0x420 [ 479.831940][T19747] ? __fget_files+0x2a/0x420 [ 479.831968][T19747] __x64_sys_getsockopt+0x1a5/0x250 [ 479.831995][T19747] ? write_ibpb+0x30/0x40 [ 479.832020][T19747] ? write_ibpb+0x30/0x40 [ 479.832051][T19747] do_syscall_64+0xfa/0x3b0 [ 479.832075][T19747] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.832099][T19747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.832121][T19747] ? clear_bhb_loop+0x60/0xb0 [ 479.832149][T19747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.832170][T19747] RIP: 0033:0x7f65fa38eec9 [ 479.832190][T19747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.832209][T19747] RSP: 002b:00007f65fb1b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 479.832231][T19747] RAX: ffffffffffffffda RBX: 00007f65fa5e5fa0 RCX: 00007f65fa38eec9 [ 479.832248][T19747] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 479.832269][T19747] RBP: 00007f65fb1b5090 R08: 0000200000000000 R09: 0000000000000000 [ 479.832285][T19747] R10: 0000200000001c40 R11: 0000000000000246 R12: 0000000000000001 [ 479.832305][T19747] R13: 00007f65fa5e6038 R14: 00007f65fa5e5fa0 R15: 00007ffdd605b478 [ 479.832342][T19747] [ 480.286729][T19752] netlink: 'syz.5.4861': attribute type 11 has an invalid length. [ 480.301967][T19752] netlink: 'syz.5.4861': attribute type 11 has an invalid length. [ 480.309960][T19752] __nla_validate_parse: 2 callbacks suppressed [ 480.310057][T19752] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4861'. [ 480.516901][T19766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.532133][T19766] IPVS: Error connecting to the multicast addr [ 480.761325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.800732][T19772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4870'. [ 480.861879][ T5876] Bluetooth: hci1: link tx timeout [ 480.869546][ T5876] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.884754][ T5876] Bluetooth: hci1: link tx timeout [ 480.890307][ T5876] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.952902][ T5876] Bluetooth: hci1: link tx timeout [ 480.958582][ T5876] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.967008][ T5876] Bluetooth: hci1: link tx timeout [ 480.972406][ T5876] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 480.973374][T19790] FAULT_INJECTION: forcing a failure. [ 480.973374][T19790] name failslab, interval 1, probability 0, space 0, times 0 [ 481.036389][T19790] CPU: 1 UID: 0 PID: 19790 Comm: syz.4.4876 Not tainted syzkaller #0 PREEMPT(full) [ 481.036422][T19790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 481.036447][T19790] Call Trace: [ 481.036457][T19790] [ 481.036467][T19790] dump_stack_lvl+0x189/0x250 [ 481.036501][T19790] ? __pfx____ratelimit+0x10/0x10 [ 481.036526][T19790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.036553][T19790] ? __pfx__printk+0x10/0x10 [ 481.036650][T19790] ? __pfx___might_resched+0x10/0x10 [ 481.036722][T19790] ? fs_reclaim_acquire+0x7d/0x100 [ 481.036749][T19790] should_fail_ex+0x414/0x560 [ 481.036790][T19790] should_failslab+0xa8/0x100 [ 481.036825][T19790] __kmalloc_noprof+0xcb/0x4f0 [ 481.036854][T19790] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 481.036895][T19790] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 481.036937][T19790] genl_family_rcv_msg_doit+0xb8/0x300 [ 481.036977][T19790] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 481.037016][T19790] ? apparmor_capable+0x137/0x1b0 [ 481.037054][T19790] ? bpf_lsm_capable+0x9/0x20 [ 481.037089][T19790] ? security_capable+0x7e/0x2e0 [ 481.037136][T19790] genl_rcv_msg+0x60e/0x790 [ 481.037173][T19790] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.037209][T19790] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 481.037249][T19790] ? __pfx_nl80211_stop_ap+0x10/0x10 [ 481.037284][T19790] ? __pfx_nl80211_post_doit+0x10/0x10 [ 481.037316][T19790] ? __asan_memcpy+0x40/0x70 [ 481.037341][T19790] ? __pfx_ref_tracker_free+0x10/0x10 [ 481.037373][T19790] netlink_rcv_skb+0x208/0x470 [ 481.037395][T19790] ? __lock_acquire+0xab9/0xd20 [ 481.037429][T19790] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.037461][T19790] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.037509][T19790] ? down_read+0x1ad/0x2e0 [ 481.037572][T19790] genl_rcv+0x28/0x40 [ 481.037597][T19790] netlink_unicast+0x82c/0x9e0 [ 481.037644][T19790] ? __pfx_netlink_unicast+0x10/0x10 [ 481.037680][T19790] ? netlink_sendmsg+0x642/0xb30 [ 481.037701][T19790] ? skb_put+0x11b/0x210 [ 481.037733][T19790] netlink_sendmsg+0x805/0xb30 [ 481.037770][T19790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.037798][T19790] ? aa_sock_msg_perm+0xf1/0x1d0 [ 481.037824][T19790] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.037849][T19790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.037875][T19790] __sock_sendmsg+0x21c/0x270 [ 481.037915][T19790] ____sys_sendmsg+0x505/0x830 [ 481.037951][T19790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.037991][T19790] ? import_iovec+0x74/0xa0 [ 481.038024][T19790] ___sys_sendmsg+0x21f/0x2a0 [ 481.038053][T19790] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.038109][T19790] ? __fget_files+0x2a/0x420 [ 481.038125][T19790] ? __fget_files+0x3a0/0x420 [ 481.038151][T19790] __x64_sys_sendmsg+0x19b/0x260 [ 481.038176][T19790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.038216][T19790] ? __pfx_ksys_write+0x10/0x10 [ 481.038238][T19790] ? rcu_is_watching+0x15/0xb0 [ 481.038261][T19790] ? do_syscall_64+0xbe/0x3b0 [ 481.038286][T19790] do_syscall_64+0xfa/0x3b0 [ 481.038305][T19790] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.038324][T19790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.038342][T19790] ? clear_bhb_loop+0x60/0xb0 [ 481.038364][T19790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.038382][T19790] RIP: 0033:0x7f65fa38eec9 [ 481.038399][T19790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.038415][T19790] RSP: 002b:00007f65fb1b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.038435][T19790] RAX: ffffffffffffffda RBX: 00007f65fa5e5fa0 RCX: 00007f65fa38eec9 [ 481.038450][T19790] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000004 [ 481.038462][T19790] RBP: 00007f65fb1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 481.038473][T19790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.038484][T19790] R13: 00007f65fa5e6038 R14: 00007f65fa5e5fa0 R15: 00007ffdd605b478 [ 481.038513][T19790] [ 481.792523][T19809] FAULT_INJECTION: forcing a failure. [ 481.792523][T19809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.807672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.817245][T19809] CPU: 1 UID: 0 PID: 19809 Comm: syz.4.4884 Not tainted syzkaller #0 PREEMPT(full) [ 481.817277][T19809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 481.817292][T19809] Call Trace: [ 481.817303][T19809] [ 481.817314][T19809] dump_stack_lvl+0x189/0x250 [ 481.817349][T19809] ? __pfx____ratelimit+0x10/0x10 [ 481.817375][T19809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.817413][T19809] ? __pfx__printk+0x10/0x10 [ 481.817460][T19809] should_fail_ex+0x414/0x560 [ 481.817502][T19809] _copy_to_user+0x31/0xb0 [ 481.817536][T19809] simple_read_from_buffer+0xe1/0x170 [ 481.817582][T19809] proc_fail_nth_read+0x1b3/0x220 [ 481.817632][T19809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.817662][T19809] ? rw_verify_area+0x2a6/0x4d0 [ 481.817690][T19809] ? __lock_acquire+0xab9/0xd20 [ 481.817722][T19809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.817749][T19809] vfs_read+0x1fd/0xa30 [ 481.817778][T19809] ? fdget_pos+0x247/0x320 [ 481.817803][T19809] ? __pfx___mutex_lock+0x10/0x10 [ 481.817829][T19809] ? __pfx_vfs_read+0x10/0x10 [ 481.817861][T19809] ? __fget_files+0x2a/0x420 [ 481.817886][T19809] ? __fget_files+0x3a0/0x420 [ 481.817905][T19809] ? __fget_files+0x2a/0x420 [ 481.817936][T19809] ksys_read+0x145/0x250 [ 481.817969][T19809] ? __pfx_ksys_read+0x10/0x10 [ 481.817996][T19809] ? fput+0xa0/0xd0 [ 481.818024][T19809] ? do_syscall_64+0xbe/0x3b0 [ 481.818055][T19809] do_syscall_64+0xfa/0x3b0 [ 481.818079][T19809] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.818103][T19809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.818126][T19809] ? clear_bhb_loop+0x60/0xb0 [ 481.818164][T19809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.818186][T19809] RIP: 0033:0x7f65fa38d8dc [ 481.818207][T19809] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 481.818227][T19809] RSP: 002b:00007f65fb1b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 481.818251][T19809] RAX: ffffffffffffffda RBX: 00007f65fa5e5fa0 RCX: 00007f65fa38d8dc [ 481.818269][T19809] RDX: 000000000000000f RSI: 00007f65fb1b50a0 RDI: 0000000000000004 [ 481.818283][T19809] RBP: 00007f65fb1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 481.818298][T19809] R10: 0000200000001c40 R11: 0000000000000246 R12: 0000000000000001 [ 481.818312][T19809] R13: 00007f65fa5e6038 R14: 00007f65fa5e5fa0 R15: 00007ffdd605b478 [ 481.818350][T19809] [ 482.187160][T19815] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4885'. [ 482.553990][T19824] tipc: Enabled bearer , priority 0 [ 482.573285][T19827] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 482.590046][T19827] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.597937][T19827] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.655663][T19831] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 482.667687][T19824] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 482.687174][T19824] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 482.758793][T19824] tipc: Resetting bearer [ 482.923886][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 483.010349][T19844] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 483.022845][T19844] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 483.306929][T19852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4901'. [ 483.326733][T19852] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4901'. [ 483.344393][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4901'. [ 483.537970][T19867] tipc: Enabled bearer , priority 0 [ 483.557253][T19870] tipc: Enabling of bearer rejected, already enabled [ 483.575191][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4909'. [ 483.628618][T19873] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 484.188365][T19890] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4917'. [ 484.228600][T19892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4918'. [ 484.328195][ T1149] tipc: Subscription rejected, illegal request [ 484.351562][T19897] tipc: Enabled bearer , priority 0 [ 484.518605][T19907] IPVS: Error connecting to the multicast addr [ 484.536093][ T24] tipc: Node number set to 1074086323 [ 485.246302][T11810] tipc: Subscription rejected, illegal request [ 485.336679][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4934'. [ 485.653589][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4939'. [ 485.737025][T19947] FAULT_INJECTION: forcing a failure. [ 485.737025][T19947] name failslab, interval 1, probability 0, space 0, times 0 [ 485.768230][T19947] CPU: 0 UID: 0 PID: 19947 Comm: syz.5.4941 Not tainted syzkaller #0 PREEMPT(full) [ 485.768266][T19947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.768291][T19947] Call Trace: [ 485.768301][T19947] [ 485.768312][T19947] dump_stack_lvl+0x189/0x250 [ 485.768346][T19947] ? __pfx____ratelimit+0x10/0x10 [ 485.768372][T19947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.768400][T19947] ? __pfx__printk+0x10/0x10 [ 485.768435][T19947] ? genl_rcv+0x28/0x40 [ 485.768466][T19947] ? ____sys_sendmsg+0x505/0x830 [ 485.768493][T19947] ? __x64_sys_sendmsg+0x19b/0x260 [ 485.768535][T19947] should_fail_ex+0x414/0x560 [ 485.768575][T19947] should_failslab+0xa8/0x100 [ 485.768612][T19947] kmem_cache_alloc_noprof+0x73/0x3c0 [ 485.768642][T19947] ? skb_clone+0x212/0x3a0 [ 485.768678][T19947] skb_clone+0x212/0x3a0 [ 485.768714][T19947] __netlink_deliver_tap+0x404/0x850 [ 485.768755][T19947] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.768783][T19947] netlink_deliver_tap+0x19c/0x1b0 [ 485.768810][T19947] netlink_sendskb+0x68/0x140 [ 485.768862][T19947] netlink_unicast+0x397/0x9e0 [ 485.768895][T19947] ? __asan_memcpy+0x40/0x70 [ 485.768932][T19947] ? __pfx_netlink_unicast+0x10/0x10 [ 485.769024][T19947] netlink_rcv_skb+0x28c/0x470 [ 485.769047][T19947] ? __lock_acquire+0xab9/0xd20 [ 485.769088][T19947] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.769121][T19947] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.769169][T19947] ? down_read+0x1ad/0x2e0 [ 485.769201][T19947] genl_rcv+0x28/0x40 [ 485.769229][T19947] netlink_unicast+0x82c/0x9e0 [ 485.769282][T19947] ? __pfx_netlink_unicast+0x10/0x10 [ 485.769318][T19947] ? netlink_sendmsg+0x642/0xb30 [ 485.769341][T19947] ? skb_put+0x11b/0x210 [ 485.769415][T19947] netlink_sendmsg+0x805/0xb30 [ 485.769451][T19947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.769480][T19947] ? aa_sock_msg_perm+0xf1/0x1d0 [ 485.769506][T19947] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.769530][T19947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.769573][T19947] __sock_sendmsg+0x21c/0x270 [ 485.769640][T19947] ____sys_sendmsg+0x505/0x830 [ 485.769675][T19947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.769715][T19947] ? import_iovec+0x74/0xa0 [ 485.769750][T19947] ___sys_sendmsg+0x21f/0x2a0 [ 485.769782][T19947] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.769855][T19947] ? __fget_files+0x2a/0x420 [ 485.769875][T19947] ? __fget_files+0x3a0/0x420 [ 485.769908][T19947] __x64_sys_sendmsg+0x19b/0x260 [ 485.769940][T19947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.769980][T19947] ? __pfx_ksys_write+0x10/0x10 [ 485.770007][T19947] ? rcu_is_watching+0x15/0xb0 [ 485.770038][T19947] ? do_syscall_64+0xbe/0x3b0 [ 485.770089][T19947] do_syscall_64+0xfa/0x3b0 [ 485.770112][T19947] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.770136][T19947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.770159][T19947] ? clear_bhb_loop+0x60/0xb0 [ 485.770186][T19947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.770208][T19947] RIP: 0033:0x7fa81db8eec9 [ 485.770229][T19947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.770250][T19947] RSP: 002b:00007fa81e946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.770274][T19947] RAX: ffffffffffffffda RBX: 00007fa81dde5fa0 RCX: 00007fa81db8eec9 [ 485.770296][T19947] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000004 [ 485.770310][T19947] RBP: 00007fa81e946090 R08: 0000000000000000 R09: 0000000000000000 [ 485.770323][T19947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.770336][T19947] R13: 00007fa81dde6038 R14: 00007fa81dde5fa0 R15: 00007fff102604b8 [ 485.770415][T19947] [ 485.838984][T19951] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4943'. [ 486.227915][T19958] IPVS: Error connecting to the multicast addr [ 486.364738][T19963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4946'. [ 486.384202][T19963] openvswitch: netlink: Flow actions attr not present in new flow. [ 487.027705][T19998] FAULT_INJECTION: forcing a failure. [ 487.027705][T19998] name failslab, interval 1, probability 0, space 0, times 0 [ 487.046037][T19998] CPU: 1 UID: 0 PID: 19998 Comm: syz.5.4959 Not tainted syzkaller #0 PREEMPT(full) [ 487.046071][T19998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.046086][T19998] Call Trace: [ 487.046095][T19998] [ 487.046107][T19998] dump_stack_lvl+0x189/0x250 [ 487.046141][T19998] ? __pfx____ratelimit+0x10/0x10 [ 487.046171][T19998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.046207][T19998] ? __pfx__printk+0x10/0x10 [ 487.046246][T19998] ? __pfx___might_resched+0x10/0x10 [ 487.046274][T19998] should_fail_ex+0x414/0x560 [ 487.046324][T19998] should_failslab+0xa8/0x100 [ 487.046360][T19998] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 487.046393][T19998] ? __alloc_skb+0x112/0x2d0 [ 487.046429][T19998] __alloc_skb+0x112/0x2d0 [ 487.046459][T19998] netlink_sendmsg+0x5c6/0xb30 [ 487.046496][T19998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.046525][T19998] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.046550][T19998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.046575][T19998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.046601][T19998] __sock_sendmsg+0x21c/0x270 [ 487.046640][T19998] ____sys_sendmsg+0x505/0x830 [ 487.046675][T19998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.046715][T19998] ? import_iovec+0x74/0xa0 [ 487.046749][T19998] ___sys_sendmsg+0x21f/0x2a0 [ 487.046780][T19998] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.046853][T19998] ? __fget_files+0x2a/0x420 [ 487.046872][T19998] ? __fget_files+0x3a0/0x420 [ 487.046905][T19998] __x64_sys_sendmsg+0x19b/0x260 [ 487.046938][T19998] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.047016][T19998] ? __pfx_ksys_write+0x10/0x10 [ 487.047045][T19998] ? rcu_is_watching+0x15/0xb0 [ 487.047075][T19998] ? do_syscall_64+0xbe/0x3b0 [ 487.047106][T19998] do_syscall_64+0xfa/0x3b0 [ 487.047130][T19998] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.047154][T19998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.047177][T19998] ? clear_bhb_loop+0x60/0xb0 [ 487.047205][T19998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.047227][T19998] RIP: 0033:0x7fa81db8eec9 [ 487.047248][T19998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.047269][T19998] RSP: 002b:00007fa81e946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.047293][T19998] RAX: ffffffffffffffda RBX: 00007fa81dde5fa0 RCX: 00007fa81db8eec9 [ 487.047310][T19998] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 487.047326][T19998] RBP: 00007fa81e946090 R08: 0000000000000000 R09: 0000000000000000 [ 487.047340][T19998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.047354][T19998] R13: 00007fa81dde6038 R14: 00007fa81dde5fa0 R15: 00007fff102604b8 [ 487.047391][T19998] [ 487.460501][T20004] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4962'. [ 487.475530][T20005] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4961'. [ 487.945397][T20013] tipc: Enabling of bearer rejected, already enabled [ 488.890906][T20052] tipc: Enabling of bearer rejected, already enabled [ 488.906724][T20052] tipc: Resetting bearer [ 489.568181][T20069] tipc: Enabling of bearer rejected, failed to enable media [ 489.578968][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4987'. [ 489.592422][T20067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4987'. [ 489.864890][T20079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4992'. [ 489.987970][T20086] sch_fq: defrate 0 ignored. [ 489.998903][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4996'. [ 490.241249][T20097] netlink: 'syz.3.5000': attribute type 21 has an invalid length. [ 490.294961][T20103] netlink: 'syz.3.5000': attribute type 33 has an invalid length. [ 490.695545][T20123] __nla_validate_parse: 2 callbacks suppressed [ 490.695570][T20123] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5008'. [ 491.050895][T20132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5011'. [ 491.277161][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5015'. [ 491.550646][T20156] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5018'. [ 491.997445][T20179] FAULT_INJECTION: forcing a failure. [ 491.997445][T20179] name failslab, interval 1, probability 0, space 0, times 0 [ 492.022732][T20179] CPU: 0 UID: 0 PID: 20179 Comm: syz.3.5030 Not tainted syzkaller #0 PREEMPT(full) [ 492.022770][T20179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.022787][T20179] Call Trace: [ 492.022798][T20179] [ 492.022810][T20179] dump_stack_lvl+0x189/0x250 [ 492.022848][T20179] ? __pfx____ratelimit+0x10/0x10 [ 492.022876][T20179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.022906][T20179] ? __pfx__printk+0x10/0x10 [ 492.022945][T20179] ? __pfx___might_resched+0x10/0x10 [ 492.022971][T20179] ? fs_reclaim_acquire+0x7d/0x100 [ 492.023002][T20179] should_fail_ex+0x414/0x560 [ 492.023049][T20179] should_failslab+0xa8/0x100 [ 492.023090][T20179] __kmalloc_noprof+0xcb/0x4f0 [ 492.023124][T20179] ? tomoyo_encode+0x28b/0x550 [ 492.023175][T20179] tomoyo_encode+0x28b/0x550 [ 492.023218][T20179] tomoyo_realpath_from_path+0x58d/0x5d0 [ 492.023249][T20179] ? tomoyo_domain+0xd9/0x130 [ 492.023286][T20179] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 492.023324][T20179] tomoyo_path_number_perm+0x1e8/0x5a0 [ 492.023367][T20179] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 492.023429][T20179] ? __lock_acquire+0xab9/0xd20 [ 492.023517][T20179] ? __fget_files+0x2a/0x420 [ 492.023553][T20179] ? __fget_files+0x2a/0x420 [ 492.023575][T20179] ? __fget_files+0x3a0/0x420 [ 492.023596][T20179] ? __fget_files+0x2a/0x420 [ 492.023625][T20179] security_file_ioctl+0xcb/0x2d0 [ 492.023663][T20179] __se_sys_ioctl+0x47/0x170 [ 492.023712][T20179] do_syscall_64+0xfa/0x3b0 [ 492.023740][T20179] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.023767][T20179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.023793][T20179] ? clear_bhb_loop+0x60/0xb0 [ 492.023824][T20179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.023849][T20179] RIP: 0033:0x7fedfe78eec9 [ 492.023872][T20179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.023895][T20179] RSP: 002b:00007fedff5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.023929][T20179] RAX: ffffffffffffffda RBX: 00007fedfe9e5fa0 RCX: 00007fedfe78eec9 [ 492.023948][T20179] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 492.023965][T20179] RBP: 00007fedff5fb090 R08: 0000000000000000 R09: 0000000000000000 [ 492.023981][T20179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.023997][T20179] R13: 00007fedfe9e6038 R14: 00007fedfe9e5fa0 R15: 00007ffe436c7418 [ 492.024040][T20179] [ 492.024076][T20179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 492.511834][T20193] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 492.684596][T20200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5036'. [ 492.717698][T20203] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5035'. [ 492.901949][T20207] netlink: 'syz.4.5040': attribute type 4 has an invalid length. [ 493.050720][T20209] netlink: 14544 bytes leftover after parsing attributes in process `syz.6.5041'. [ 493.065813][T20218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5044'. [ 493.384274][T20230] FAULT_INJECTION: forcing a failure. [ 493.384274][T20230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.419174][T20230] CPU: 0 UID: 0 PID: 20230 Comm: syz.6.5049 Not tainted syzkaller #0 PREEMPT(full) [ 493.419208][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.419223][T20230] Call Trace: [ 493.419233][T20230] [ 493.419245][T20230] dump_stack_lvl+0x189/0x250 [ 493.419279][T20230] ? __pfx____ratelimit+0x10/0x10 [ 493.419305][T20230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.419333][T20230] ? __pfx__printk+0x10/0x10 [ 493.419365][T20230] ? __might_fault+0xb0/0x130 [ 493.419417][T20230] should_fail_ex+0x414/0x560 [ 493.419472][T20230] _copy_from_user+0x2d/0xb0 [ 493.419505][T20230] ___sys_sendmsg+0x158/0x2a0 [ 493.419538][T20230] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.419610][T20230] ? __fget_files+0x2a/0x420 [ 493.419630][T20230] ? __fget_files+0x3a0/0x420 [ 493.419660][T20230] __x64_sys_sendmsg+0x19b/0x260 [ 493.419691][T20230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.419728][T20230] ? __pfx_ksys_write+0x10/0x10 [ 493.419755][T20230] ? rcu_is_watching+0x15/0xb0 [ 493.419784][T20230] ? do_syscall_64+0xbe/0x3b0 [ 493.419815][T20230] do_syscall_64+0xfa/0x3b0 [ 493.419838][T20230] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.419860][T20230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.419881][T20230] ? clear_bhb_loop+0x60/0xb0 [ 493.419908][T20230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.419967][T20230] RIP: 0033:0x7f08d138eec9 [ 493.419987][T20230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.420006][T20230] RSP: 002b:00007f08cf5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.420030][T20230] RAX: ffffffffffffffda RBX: 00007f08d15e5fa0 RCX: 00007f08d138eec9 [ 493.420045][T20230] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000b [ 493.420060][T20230] RBP: 00007f08cf5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 493.420074][T20230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.420096][T20230] R13: 00007f08d15e6038 R14: 00007f08d15e5fa0 R15: 00007ffcc14ee268 [ 493.420141][T20230] [ 493.938510][T20242] FAULT_INJECTION: forcing a failure. [ 493.938510][T20242] name failslab, interval 1, probability 0, space 0, times 0 [ 493.954777][T20242] CPU: 0 UID: 0 PID: 20242 Comm: syz.3.5055 Not tainted syzkaller #0 PREEMPT(full) [ 493.954811][T20242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.954826][T20242] Call Trace: [ 493.954836][T20242] [ 493.954847][T20242] dump_stack_lvl+0x189/0x250 [ 493.954882][T20242] ? __pfx____ratelimit+0x10/0x10 [ 493.954909][T20242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.954938][T20242] ? __pfx__printk+0x10/0x10 [ 493.955063][T20242] ? __pfx___might_resched+0x10/0x10 [ 493.955116][T20242] should_fail_ex+0x414/0x560 [ 493.955159][T20242] should_failslab+0xa8/0x100 [ 493.955197][T20242] kmem_cache_alloc_noprof+0x73/0x3c0 [ 493.955304][T20242] ? sk_prot_alloc+0x57/0x220 [ 493.955339][T20242] sk_prot_alloc+0x57/0x220 [ 493.955364][T20242] ? sk_alloc+0x24/0x370 [ 493.955389][T20242] sk_alloc+0x3a/0x370 [ 493.955422][T20242] inet_create+0x7a0/0x1000 [ 493.955457][T20242] ? inet_create+0x9c/0x1000 [ 493.955483][T20242] __sock_create+0x4b0/0x9f0 [ 493.955519][T20242] start_sync_thread+0xc80/0x28b0 [ 493.955617][T20242] ? __pfx_sync_thread_master+0x10/0x10 [ 493.955669][T20242] ? __pfx_start_sync_thread+0x10/0x10 [ 493.955760][T20242] ? __nla_validate_parse+0x2400/0x2d40 [ 493.955789][T20242] ? __sock_sendmsg+0x21c/0x270 [ 493.955823][T20242] ? ____sys_sendmsg+0x505/0x830 [ 493.955881][T20242] ip_vs_genl_set_daemon+0x64e/0x7d0 [ 493.955941][T20242] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 493.955998][T20242] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 493.956042][T20242] genl_family_rcv_msg_doit+0x212/0x300 [ 493.956083][T20242] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 493.956133][T20242] ? bpf_lsm_capable+0x9/0x20 [ 493.956165][T20242] ? security_capable+0x7e/0x2e0 [ 493.956251][T20242] genl_rcv_msg+0x60e/0x790 [ 493.956289][T20242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.956316][T20242] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 493.956352][T20242] ? __asan_memcpy+0x40/0x70 [ 493.956379][T20242] ? __pfx_ref_tracker_free+0x10/0x10 [ 493.956413][T20242] netlink_rcv_skb+0x208/0x470 [ 493.956436][T20242] ? __lock_acquire+0xab9/0xd20 [ 493.956468][T20242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.956500][T20242] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.956550][T20242] ? down_read+0x1ad/0x2e0 [ 493.956590][T20242] genl_rcv+0x28/0x40 [ 493.956619][T20242] netlink_unicast+0x82c/0x9e0 [ 493.956675][T20242] ? __pfx_netlink_unicast+0x10/0x10 [ 493.956714][T20242] ? netlink_sendmsg+0x642/0xb30 [ 493.956737][T20242] ? skb_put+0x11b/0x210 [ 493.956769][T20242] netlink_sendmsg+0x805/0xb30 [ 493.956808][T20242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.956839][T20242] ? aa_sock_msg_perm+0xf1/0x1d0 [ 493.956867][T20242] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.956892][T20242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.956919][T20242] __sock_sendmsg+0x21c/0x270 [ 493.956959][T20242] ____sys_sendmsg+0x505/0x830 [ 493.956996][T20242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.957038][T20242] ? import_iovec+0x74/0xa0 [ 493.957075][T20242] ___sys_sendmsg+0x21f/0x2a0 [ 493.957108][T20242] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.957185][T20242] ? __fget_files+0x2a/0x420 [ 493.957213][T20242] ? __fget_files+0x3a0/0x420 [ 493.957249][T20242] __x64_sys_sendmsg+0x19b/0x260 [ 493.957283][T20242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.957326][T20242] ? __pfx_ksys_write+0x10/0x10 [ 493.957354][T20242] ? rcu_is_watching+0x15/0xb0 [ 493.957385][T20242] ? do_syscall_64+0xbe/0x3b0 [ 493.957418][T20242] do_syscall_64+0xfa/0x3b0 [ 493.957443][T20242] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.957479][T20242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.957503][T20242] ? clear_bhb_loop+0x60/0xb0 [ 493.957532][T20242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.957554][T20242] RIP: 0033:0x7fedfe78eec9 [ 493.957578][T20242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.957598][T20242] RSP: 002b:00007fedff5fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.957624][T20242] RAX: ffffffffffffffda RBX: 00007fedfe9e5fa0 RCX: 00007fedfe78eec9 [ 493.957641][T20242] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 493.957656][T20242] RBP: 00007fedff5fb090 R08: 0000000000000000 R09: 0000000000000000 [ 493.957671][T20242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 493.957686][T20242] R13: 00007fedfe9e6038 R14: 00007fedfe9e5fa0 R15: 00007ffe436c7418 [ 493.957724][T20242] [ 493.958337][T20242] IPVS: Error during creation of socket; terminating [ 493.972246][T17979] IPVS: ip_vs_send_async error -101 [ 494.233421][T20246] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5056'. [ 494.403130][T20248] sctp: [Deprecated]: syz.3.5059 (pid 20248) Use of int in max_burst socket option deprecated. [ 494.403130][T20248] Use struct sctp_assoc_value instead [ 494.535062][T20250] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5058'. [ 494.769061][T20260] netlink: 'syz.5.5063': attribute type 2 has an invalid length. [ 494.786388][T20260] netlink: 'syz.5.5063': attribute type 1 has an invalid length. [ 494.915333][T20272] FAULT_INJECTION: forcing a failure. [ 494.915333][T20272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.950980][T20272] CPU: 0 UID: 0 PID: 20272 Comm: syz.4.5066 Not tainted syzkaller #0 PREEMPT(full) [ 494.951015][T20272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.951042][T20272] Call Trace: [ 494.951053][T20272] [ 494.951073][T20272] dump_stack_lvl+0x189/0x250 [ 494.951106][T20272] ? __pfx____ratelimit+0x10/0x10 [ 494.951132][T20272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.951160][T20272] ? __pfx__printk+0x10/0x10 [ 494.951208][T20272] should_fail_ex+0x414/0x560 [ 494.951251][T20272] _copy_to_user+0x31/0xb0 [ 494.951286][T20272] simple_read_from_buffer+0xe1/0x170 [ 494.951326][T20272] proc_fail_nth_read+0x1b3/0x220 [ 494.951358][T20272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.951389][T20272] ? rw_verify_area+0x2a6/0x4d0 [ 494.951417][T20272] ? __lock_acquire+0xab9/0xd20 [ 494.951449][T20272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.951477][T20272] vfs_read+0x1fd/0xa30 [ 494.951506][T20272] ? fdget_pos+0x247/0x320 [ 494.951532][T20272] ? __pfx___mutex_lock+0x10/0x10 [ 494.951562][T20272] ? __pfx_vfs_read+0x10/0x10 [ 494.951594][T20272] ? __fget_files+0x2a/0x420 [ 494.951619][T20272] ? __fget_files+0x3a0/0x420 [ 494.951638][T20272] ? __fget_files+0x2a/0x420 [ 494.951670][T20272] ksys_read+0x145/0x250 [ 494.951698][T20272] ? __fget_files+0x3a0/0x420 [ 494.951720][T20272] ? __pfx_ksys_read+0x10/0x10 [ 494.951756][T20272] ? do_syscall_64+0xbe/0x3b0 [ 494.951789][T20272] do_syscall_64+0xfa/0x3b0 [ 494.951813][T20272] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.951838][T20272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.951861][T20272] ? clear_bhb_loop+0x60/0xb0 [ 494.951889][T20272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.951912][T20272] RIP: 0033:0x7f65fa38d8dc [ 494.951933][T20272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 494.951953][T20272] RSP: 002b:00007f65fb1b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.951978][T20272] RAX: ffffffffffffffda RBX: 00007f65fa5e5fa0 RCX: 00007f65fa38d8dc [ 494.951995][T20272] RDX: 000000000000000f RSI: 00007f65fb1b50a0 RDI: 0000000000000003 [ 494.952010][T20272] RBP: 00007f65fb1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 494.952025][T20272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.952077][T20272] R13: 00007f65fa5e6038 R14: 00007f65fa5e5fa0 R15: 00007ffdd605b478 [ 494.952115][T20272] [ 495.855520][T20297] __nla_validate_parse: 5 callbacks suppressed [ 495.855546][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5076'. [ 496.010355][T20301] netlink: 'syz.7.5078': attribute type 1 has an invalid length. [ 496.125599][T20307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5080'. [ 496.173078][T20307] bridge0: entered allmulticast mode [ 496.374117][T20321] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 496.383961][T20321] netlink: 'syz.4.5085': attribute type 1 has an invalid length. [ 496.392011][T20321] netlink: 'syz.4.5085': attribute type 1 has an invalid length. [ 496.399907][T20321] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5085'. [ 496.410234][T20321] netlink: 'syz.4.5085': attribute type 1 has an invalid length. [ 496.588678][T20328] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5088'. [ 497.775230][ T30] tipc: Subscription rejected, illegal request [ 498.513206][T20402] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5114'. [ 499.233784][T20423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5125'. [ 499.379354][ T3491] tipc: Subscription rejected, illegal request [ 499.440178][T20434] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5128'. [ 499.506403][T20436] IPVS: Error connecting to the multicast addr [ 499.762252][T20442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.084293][T20469] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5140'. [ 500.161760][T20471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5139'. [ 500.227014][T20475] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5141'. [ 501.583632][ T3491] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.603304][T20506] delete_channel: no stack [ 501.608155][ T3491] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.677662][ T3491] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.705305][ T3491] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.902298][T20524] __nla_validate_parse: 1 callbacks suppressed [ 501.902323][T20524] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5162'. [ 502.001284][T20530] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5164'. [ 502.237850][T20544] 8021q: VLANs not supported on ip6_vti0 [ 502.283234][T20542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5167'. [ 502.382858][T20551] netlink: 'syz.7.5173': attribute type 1 has an invalid length. [ 502.393095][T20551] netlink: 'syz.7.5173': attribute type 2 has an invalid length. [ 502.489823][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5174'. [ 502.558650][T20557] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5175'. [ 502.788497][T20564] nbd: couldn't find a device at index -373156329 [ 502.801429][T20567] IPVS: Error connecting to the multicast addr [ 503.053493][T20578] netlink: 'syz.7.5183': attribute type 10 has an invalid length. [ 503.059581][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5184'. [ 503.089199][T20578] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5183'. [ 503.131553][T20578] dummy0: entered promiscuous mode [ 503.162665][T20578] bridge0: port 2(dummy0) entered blocking state [ 503.238869][T20578] bridge0: port 2(dummy0) entered disabled state [ 503.254478][T20578] dummy0: entered allmulticast mode [ 503.268145][T20593] FAULT_INJECTION: forcing a failure. [ 503.268145][T20593] name failslab, interval 1, probability 0, space 0, times 0 [ 503.283555][T20593] CPU: 0 UID: 0 PID: 20593 Comm: syz.3.5189 Not tainted syzkaller #0 PREEMPT(full) [ 503.283586][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.283599][T20593] Call Trace: [ 503.283608][T20593] [ 503.283618][T20593] dump_stack_lvl+0x189/0x250 [ 503.283650][T20593] ? __pfx____ratelimit+0x10/0x10 [ 503.283673][T20593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.283697][T20593] ? __pfx__printk+0x10/0x10 [ 503.283733][T20593] ? __mutex_trylock_common+0x153/0x260 [ 503.283762][T20593] should_fail_ex+0x414/0x560 [ 503.283802][T20593] should_failslab+0xa8/0x100 [ 503.283850][T20593] __kmalloc_noprof+0xcb/0x4f0 [ 503.283879][T20593] ? __nla_parse+0x40/0x60 [ 503.283899][T20593] ? seg6_local_build_state+0x129/0xdb0 [ 503.283933][T20593] seg6_local_build_state+0x129/0xdb0 [ 503.283972][T20593] ? __lock_acquire+0xab9/0xd20 [ 503.284008][T20593] ? __pfx_seg6_local_build_state+0x10/0x10 [ 503.284053][T20593] ? lwtunnel_build_state+0xe2/0x4c0 [ 503.284096][T20593] lwtunnel_build_state+0x381/0x4c0 [ 503.284124][T20593] ? lwtunnel_build_state+0xe2/0x4c0 [ 503.284155][T20593] fib_nh_common_init+0x127/0x3b0 [ 503.284178][T20593] ? in6_dev_get+0x1a/0x290 [ 503.284212][T20593] ? __pfx_fib_nh_common_init+0x10/0x10 [ 503.284233][T20593] ? in6_dev_get+0x1a/0x290 [ 503.284270][T20593] fib6_nh_init+0x1608/0x1ff0 [ 503.284331][T20593] ? __pfx_fib6_nh_init+0x10/0x10 [ 503.284361][T20593] ? kasan_save_track+0x4f/0x80 [ 503.284394][T20593] ? kasan_save_track+0x3e/0x80 [ 503.284420][T20593] ? __kasan_kmalloc+0x93/0xb0 [ 503.284448][T20593] ? __kmalloc_noprof+0x27a/0x4f0 [ 503.284474][T20593] ? fib6_info_alloc+0x30/0xf0 [ 503.284506][T20593] ? ip6_route_info_create+0x142/0x860 [ 503.284535][T20593] ? ip6_route_add+0x49/0x1b0 [ 503.284564][T20593] ? inet6_rtm_newroute+0x1cf/0x18c0 [ 503.284589][T20593] ? rtnetlink_rcv_msg+0x7cc/0xb70 [ 503.284619][T20593] ? netlink_rcv_skb+0x208/0x470 [ 503.284638][T20593] ? netlink_unicast+0x82c/0x9e0 [ 503.284666][T20593] ? netlink_sendmsg+0x805/0xb30 [ 503.284685][T20593] ? __sock_sendmsg+0x21c/0x270 [ 503.284713][T20593] ? ____sys_sendmsg+0x505/0x830 [ 503.284735][T20593] ? ___sys_sendmsg+0x21f/0x2a0 [ 503.284756][T20593] ? __x64_sys_sendmsg+0x19b/0x260 [ 503.284784][T20593] ? do_syscall_64+0xfa/0x3b0 [ 503.284804][T20593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.284854][T20593] ? ip_fib_metrics_init+0x404/0x6f0 [ 503.284892][T20593] ip6_route_info_create_nh+0x16a/0xab0 [ 503.284927][T20593] ? __pfx_ip6_route_info_create_nh+0x10/0x10 [ 503.284959][T20593] ? ip6_route_info_create+0x508/0x860 [ 503.284993][T20593] ip6_route_add+0x6e/0x1b0 [ 503.285027][T20593] inet6_rtm_newroute+0x1cf/0x18c0 [ 503.285056][T20593] ? nlmon_xmit+0xb0/0x100 [ 503.285088][T20593] ? kmem_cache_free+0x18f/0x400 [ 503.285116][T20593] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 503.285143][T20593] ? __local_bh_enable_ip+0x12d/0x1c0 [ 503.285181][T20593] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.285210][T20593] ? __local_bh_enable_ip+0x12d/0x1c0 [ 503.285231][T20593] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 503.285257][T20593] ? __dev_queue_xmit+0x27b/0x3b50 [ 503.285295][T20593] ? __dev_queue_xmit+0x27b/0x3b50 [ 503.285324][T20593] ? __dev_queue_xmit+0x27b/0x3b50 [ 503.285356][T20593] ? __dev_queue_xmit+0x1d79/0x3b50 [ 503.285426][T20593] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 503.285457][T20593] rtnetlink_rcv_msg+0x7cc/0xb70 [ 503.285485][T20593] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 503.285507][T20593] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 503.285529][T20593] ? ref_tracker_free+0x63a/0x7d0 [ 503.285554][T20593] ? __asan_memcpy+0x40/0x70 [ 503.285578][T20593] ? __pfx_ref_tracker_free+0x10/0x10 [ 503.285612][T20593] netlink_rcv_skb+0x208/0x470 [ 503.285639][T20593] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 503.285665][T20593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.285702][T20593] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.285738][T20593] netlink_unicast+0x82c/0x9e0 [ 503.285784][T20593] ? __pfx_netlink_unicast+0x10/0x10 [ 503.285823][T20593] ? netlink_sendmsg+0x642/0xb30 [ 503.285847][T20593] ? skb_put+0x11b/0x210 [ 503.285879][T20593] netlink_sendmsg+0x805/0xb30 [ 503.285916][T20593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.285945][T20593] ? aa_sock_msg_perm+0xf1/0x1d0 [ 503.285972][T20593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.285999][T20593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.286023][T20593] __sock_sendmsg+0x21c/0x270 [ 503.286055][T20593] ____sys_sendmsg+0x505/0x830 [ 503.286084][T20593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.286116][T20593] ? import_iovec+0x74/0xa0 [ 503.286146][T20593] ___sys_sendmsg+0x21f/0x2a0 [ 503.286177][T20593] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.286248][T20593] ? __fget_files+0x2a/0x420 [ 503.286268][T20593] ? __fget_files+0x3a0/0x420 [ 503.286321][T20593] __x64_sys_sendmsg+0x19b/0x260 [ 503.286354][T20593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.286395][T20593] ? __pfx_ksys_write+0x10/0x10 [ 503.286422][T20593] ? rcu_is_watching+0x15/0xb0 [ 503.286453][T20593] ? do_syscall_64+0xbe/0x3b0 [ 503.286484][T20593] do_syscall_64+0xfa/0x3b0 [ 503.286508][T20593] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.286531][T20593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.286553][T20593] ? clear_bhb_loop+0x60/0xb0 [ 503.286581][T20593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.286604][T20593] RIP: 0033:0x7fedfe78eec9 [ 503.286626][T20593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.286647][T20593] RSP: 002b:00007fedff5fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.286672][T20593] RAX: ffffffffffffffda RBX: 00007fedfe9e5fa0 RCX: 00007fedfe78eec9 [ 503.286687][T20593] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000b [ 503.286700][T20593] RBP: 00007fedff5fb090 R08: 0000000000000000 R09: 0000000000000000 [ 503.286720][T20593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.286731][T20593] R13: 00007fedfe9e6038 R14: 00007fedfe9e5fa0 R15: 00007ffe436c7418 [ 503.286760][T20593] [ 504.166600][T20591] syz_tun: left allmulticast mode [ 504.328766][T20605] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5191'. [ 504.348446][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5194'. [ 504.421589][T20616] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 504.544076][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5198'. [ 504.853718][T20637] FAULT_INJECTION: forcing a failure. [ 504.853718][T20637] name failslab, interval 1, probability 0, space 0, times 0 [ 504.896675][T20637] CPU: 0 UID: 0 PID: 20637 Comm: syz.5.5205 Not tainted syzkaller #0 PREEMPT(full) [ 504.896715][T20637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.896741][T20637] Call Trace: [ 504.896752][T20637] [ 504.896762][T20637] dump_stack_lvl+0x189/0x250 [ 504.896795][T20637] ? __pfx____ratelimit+0x10/0x10 [ 504.896821][T20637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.896849][T20637] ? __pfx__printk+0x10/0x10 [ 504.896887][T20637] ? __pfx___might_resched+0x10/0x10 [ 504.896910][T20637] ? fs_reclaim_acquire+0x7d/0x100 [ 504.896938][T20637] should_fail_ex+0x414/0x560 [ 504.896979][T20637] should_failslab+0xa8/0x100 [ 504.897015][T20637] __kmalloc_cache_noprof+0x70/0x3d0 [ 504.897046][T20637] ? hash_netnet_create+0x6d5/0x1440 [ 504.897081][T20637] hash_netnet_create+0x6d5/0x1440 [ 504.897101][T20637] ? __lock_acquire+0xab9/0xd20 [ 504.897182][T20637] ? __pfx_hash_netnet_create+0x10/0x10 [ 504.897214][T20637] ? __nla_parse+0x40/0x60 [ 504.897237][T20637] ? __pfx_hash_netnet_create+0x10/0x10 [ 504.897261][T20637] ip_set_create+0xa94/0x1940 [ 504.897313][T20637] ? ip_set_create+0x4a2/0x1940 [ 504.897359][T20637] ? __pfx_ip_set_create+0x10/0x10 [ 504.897435][T20637] nfnetlink_rcv_msg+0xb4d/0x1130 [ 504.897480][T20637] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 504.897535][T20637] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 504.897565][T20637] ? kasan_save_free_info+0x46/0x50 [ 504.897643][T20637] netlink_rcv_skb+0x208/0x470 [ 504.897669][T20637] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 504.897704][T20637] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.897739][T20637] ? bpf_lsm_capable+0x9/0x20 [ 504.897767][T20637] ? security_capable+0x7e/0x2e0 [ 504.897808][T20637] nfnetlink_rcv+0x26a/0x2520 [ 504.897844][T20637] ? __dev_queue_xmit+0x1d79/0x3b50 [ 504.897888][T20637] ? __dev_queue_xmit+0x27b/0x3b50 [ 504.897934][T20637] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 504.897966][T20637] ? __pfx___dev_queue_xmit+0x10/0x10 [ 504.898013][T20637] ? ref_tracker_free+0x63a/0x7d0 [ 504.898037][T20637] ? __asan_memcpy+0x40/0x70 [ 504.898061][T20637] ? __pfx_ref_tracker_free+0x10/0x10 [ 504.898103][T20637] ? skb_clone+0x246/0x3a0 [ 504.898135][T20637] ? __netlink_deliver_tap+0x807/0x850 [ 504.898159][T20637] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.898190][T20637] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.898233][T20637] netlink_unicast+0x82c/0x9e0 [ 504.898279][T20637] ? __pfx_netlink_unicast+0x10/0x10 [ 504.898316][T20637] ? netlink_sendmsg+0x642/0xb30 [ 504.898336][T20637] ? skb_put+0x11b/0x210 [ 504.898362][T20637] netlink_sendmsg+0x805/0xb30 [ 504.898391][T20637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.898415][T20637] ? aa_sock_msg_perm+0xf1/0x1d0 [ 504.898436][T20637] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.898455][T20637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.898478][T20637] __sock_sendmsg+0x21c/0x270 [ 504.898509][T20637] ____sys_sendmsg+0x505/0x830 [ 504.898538][T20637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.898570][T20637] ? import_iovec+0x74/0xa0 [ 504.898597][T20637] ___sys_sendmsg+0x21f/0x2a0 [ 504.898623][T20637] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.898679][T20637] ? __fget_files+0x2a/0x420 [ 504.898695][T20637] ? __fget_files+0x3a0/0x420 [ 504.898721][T20637] __x64_sys_sendmsg+0x19b/0x260 [ 504.898747][T20637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.898780][T20637] ? __pfx_ksys_write+0x10/0x10 [ 504.898802][T20637] ? rcu_is_watching+0x15/0xb0 [ 504.898826][T20637] ? do_syscall_64+0xbe/0x3b0 [ 504.898851][T20637] do_syscall_64+0xfa/0x3b0 [ 504.898870][T20637] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.898889][T20637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.898907][T20637] ? clear_bhb_loop+0x60/0xb0 [ 504.898929][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.898946][T20637] RIP: 0033:0x7fa81db8eec9 [ 504.898964][T20637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.898981][T20637] RSP: 002b:00007fa81e946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.899001][T20637] RAX: ffffffffffffffda RBX: 00007fa81dde5fa0 RCX: 00007fa81db8eec9 [ 504.899015][T20637] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 504.899027][T20637] RBP: 00007fa81e946090 R08: 0000000000000000 R09: 0000000000000000 [ 504.899037][T20637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.899047][T20637] R13: 00007fa81dde6038 R14: 00007fa81dde5fa0 R15: 00007fff102604b8 [ 504.899076][T20637] [ 505.673242][T20640] bond0 (unregistering): Released all slaves [ 505.961428][T20662] netlink: 'syz.4.5211': attribute type 5 has an invalid length. [ 505.985176][T20665] IPVS: set_ctl: invalid protocol: 4 172.30.1.8:20002 [ 506.192042][T20668] syzkaller1: entered promiscuous mode [ 506.197626][T20668] syzkaller1: entered allmulticast mode [ 506.253668][T20671] tipc: Started in network mode [ 506.267252][T20671] tipc: Node identity 080211000001, cluster identity 4711 [ 506.276487][T20671] tipc: Enabled bearer , priority 0 [ 506.292078][T20671] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 506.310509][T20671] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 506.693517][T20687] IPVS: Error connecting to the multicast addr [ 506.876091][T20694] netlink: 'syz.7.5224': attribute type 1 has an invalid length. [ 507.277601][T20715] __nla_validate_parse: 7 callbacks suppressed [ 507.277626][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5229'. [ 507.391615][ T5932] tipc: Node number set to 134418688 [ 507.424382][T20721] IPVS: Error connecting to the multicast addr [ 507.468502][T20725] bond0: option resend_igmp: invalid value (32767) [ 507.477658][T20725] bond0: option resend_igmp: allowed values 0 - 255 [ 507.513595][T20725] bond0 (unregistering): Released all slaves [ 507.516680][T20729] FAULT_INJECTION: forcing a failure. [ 507.516680][T20729] name failslab, interval 1, probability 0, space 0, times 0 [ 507.540221][T20729] CPU: 0 UID: 0 PID: 20729 Comm: syz.3.5233 Not tainted syzkaller #0 PREEMPT(full) [ 507.540280][T20729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 507.540301][T20729] Call Trace: [ 507.540310][T20729] [ 507.540322][T20729] dump_stack_lvl+0x189/0x250 [ 507.540357][T20729] ? __pfx____ratelimit+0x10/0x10 [ 507.540384][T20729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.540412][T20729] ? __pfx__printk+0x10/0x10 [ 507.540441][T20729] ? netlink_unicast+0x82c/0x9e0 [ 507.540478][T20729] ? ___sys_sendmsg+0x21f/0x2a0 [ 507.540505][T20729] ? do_syscall_64+0xfa/0x3b0 [ 507.540544][T20729] should_fail_ex+0x414/0x560 [ 507.540587][T20729] should_failslab+0xa8/0x100 [ 507.540630][T20729] kmem_cache_alloc_noprof+0x73/0x3c0 [ 507.540662][T20729] ? skb_clone+0x212/0x3a0 [ 507.540698][T20729] skb_clone+0x212/0x3a0 [ 507.540733][T20729] __netlink_deliver_tap+0x404/0x850 [ 507.540773][T20729] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.540799][T20729] netlink_deliver_tap+0x19c/0x1b0 [ 507.540825][T20729] netlink_sendskb+0x68/0x140 [ 507.540862][T20729] netlink_unicast+0x397/0x9e0 [ 507.540894][T20729] ? __asan_memcpy+0x40/0x70 [ 507.540930][T20729] ? __pfx_netlink_unicast+0x10/0x10 [ 507.540977][T20729] netlink_rcv_skb+0x28c/0x470 [ 507.541003][T20729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 507.541031][T20729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 507.541067][T20729] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.541101][T20729] netlink_unicast+0x82c/0x9e0 [ 507.541143][T20729] ? __pfx_netlink_unicast+0x10/0x10 [ 507.541180][T20729] ? netlink_sendmsg+0x642/0xb30 [ 507.541203][T20729] ? skb_put+0x11b/0x210 [ 507.541234][T20729] netlink_sendmsg+0x805/0xb30 [ 507.541282][T20729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.541312][T20729] ? aa_sock_msg_perm+0xf1/0x1d0 [ 507.541336][T20729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.541362][T20729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.541388][T20729] __sock_sendmsg+0x21c/0x270 [ 507.541427][T20729] ____sys_sendmsg+0x505/0x830 [ 507.541464][T20729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.541503][T20729] ? import_iovec+0x74/0xa0 [ 507.541538][T20729] ___sys_sendmsg+0x21f/0x2a0 [ 507.541570][T20729] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.541643][T20729] ? __fget_files+0x2a/0x420 [ 507.541664][T20729] ? __fget_files+0x3a0/0x420 [ 507.541697][T20729] __x64_sys_sendmsg+0x19b/0x260 [ 507.541729][T20729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.541770][T20729] ? __pfx_ksys_write+0x10/0x10 [ 507.541798][T20729] ? rcu_is_watching+0x15/0xb0 [ 507.541827][T20729] ? do_syscall_64+0xbe/0x3b0 [ 507.541857][T20729] do_syscall_64+0xfa/0x3b0 [ 507.541881][T20729] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.541905][T20729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.541928][T20729] ? clear_bhb_loop+0x60/0xb0 [ 507.541956][T20729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.541979][T20729] RIP: 0033:0x7fedfe78eec9 [ 507.542000][T20729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.542021][T20729] RSP: 002b:00007fedff5fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.542046][T20729] RAX: ffffffffffffffda RBX: 00007fedfe9e5fa0 RCX: 00007fedfe78eec9 [ 507.542063][T20729] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000b [ 507.542079][T20729] RBP: 00007fedff5fb090 R08: 0000000000000000 R09: 0000000000000000 [ 507.542093][T20729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.542116][T20729] R13: 00007fedfe9e6038 R14: 00007fedfe9e5fa0 R15: 00007ffe436c7418 [ 507.542158][T20729] [ 508.136967][T20741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5238'. [ 508.146748][T20741] openvswitch: netlink: Flow actions attr not present in new flow. [ 508.733201][T20767] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5248'. [ 508.808368][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5250'. [ 508.825508][T20771] openvswitch: netlink: Flow actions attr not present in new flow. [ 508.838946][T20771] FAULT_INJECTION: forcing a failure. [ 508.838946][T20771] name failslab, interval 1, probability 0, space 0, times 0 [ 508.858880][T20771] CPU: 0 UID: 0 PID: 20771 Comm: syz.5.5250 Not tainted syzkaller #0 PREEMPT(full) [ 508.858912][T20771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.858927][T20771] Call Trace: [ 508.858937][T20771] [ 508.858948][T20771] dump_stack_lvl+0x189/0x250 [ 508.858982][T20771] ? __pfx____ratelimit+0x10/0x10 [ 508.859008][T20771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.859034][T20771] ? __pfx__printk+0x10/0x10 [ 508.859067][T20771] ? __pfx___might_resched+0x10/0x10 [ 508.859099][T20771] ? fs_reclaim_acquire+0x7d/0x100 [ 508.859126][T20771] should_fail_ex+0x414/0x560 [ 508.859167][T20771] should_failslab+0xa8/0x100 [ 508.859202][T20771] __kmalloc_noprof+0xcb/0x4f0 [ 508.859231][T20771] ? tomoyo_encode+0x28b/0x550 [ 508.859261][T20771] tomoyo_encode+0x28b/0x550 [ 508.859291][T20771] tomoyo_realpath_from_path+0x58d/0x5d0 [ 508.859319][T20771] ? tomoyo_domain+0xd9/0x130 [ 508.859350][T20771] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 508.859383][T20771] tomoyo_path_number_perm+0x1e8/0x5a0 [ 508.859418][T20771] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 508.859472][T20771] ? __lock_acquire+0xab9/0xd20 [ 508.859530][T20771] ? __fget_files+0x2a/0x420 [ 508.859554][T20771] ? __fget_files+0x2a/0x420 [ 508.859573][T20771] ? __fget_files+0x3a0/0x420 [ 508.859591][T20771] ? __fget_files+0x2a/0x420 [ 508.859617][T20771] security_file_ioctl+0xcb/0x2d0 [ 508.859649][T20771] __se_sys_ioctl+0x47/0x170 [ 508.859680][T20771] do_syscall_64+0xfa/0x3b0 [ 508.859704][T20771] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.859726][T20771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.859748][T20771] ? clear_bhb_loop+0x60/0xb0 [ 508.859775][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.859797][T20771] RIP: 0033:0x7fa81db8eec9 [ 508.859817][T20771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.859835][T20771] RSP: 002b:00007fa81e946038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.859862][T20771] RAX: ffffffffffffffda RBX: 00007fa81dde5fa0 RCX: 00007fa81db8eec9 [ 508.859877][T20771] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 000000000000000a [ 508.859890][T20771] RBP: 00007fa81e946090 R08: 0000000000000000 R09: 0000000000000000 [ 508.859902][T20771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.859915][T20771] R13: 00007fa81dde6038 R14: 00007fa81dde5fa0 R15: 00007fff102604b8 [ 508.859948][T20771] [ 508.860072][T20771] ERROR: Out of memory at tomoyo_realpath_from_path. [ 508.860353][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.120477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.138005][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.267925][T20781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5254'. [ 509.363054][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5255'. [ 509.373400][T20785] openvswitch: netlink: Flow actions attr not present in new flow. [ 509.892574][T20807] tipc: Enabling of bearer rejected, already enabled [ 509.979469][T20811] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5266'. [ 510.141638][T20817] FAULT_INJECTION: forcing a failure. [ 510.141638][T20817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.165189][T20817] CPU: 1 UID: 0 PID: 20817 Comm: syz.7.5269 Not tainted syzkaller #0 PREEMPT(full) [ 510.165223][T20817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.165237][T20817] Call Trace: [ 510.165260][T20817] [ 510.165271][T20817] dump_stack_lvl+0x189/0x250 [ 510.165307][T20817] ? __pfx____ratelimit+0x10/0x10 [ 510.165332][T20817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.165359][T20817] ? __pfx__printk+0x10/0x10 [ 510.165393][T20817] ? __might_fault+0xb0/0x130 [ 510.165445][T20817] should_fail_ex+0x414/0x560 [ 510.165486][T20817] _copy_from_user+0x2d/0xb0 [ 510.165519][T20817] kstrtouint_from_user+0xc4/0x170 [ 510.165553][T20817] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 510.165600][T20817] proc_fail_nth_write+0x88/0x200 [ 510.165627][T20817] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 510.165662][T20817] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 510.165691][T20817] vfs_write+0x27e/0xb30 [ 510.165744][T20817] ? __pfx_vfs_write+0x10/0x10 [ 510.165777][T20817] ? __fget_files+0x2a/0x420 [ 510.165803][T20817] ? __fget_files+0x3a0/0x420 [ 510.165822][T20817] ? __fget_files+0x2a/0x420 [ 510.165853][T20817] ksys_write+0x145/0x250 [ 510.165885][T20817] ? __pfx_ksys_write+0x10/0x10 [ 510.165911][T20817] ? rcu_is_watching+0x15/0xb0 [ 510.165941][T20817] ? do_syscall_64+0xbe/0x3b0 [ 510.165972][T20817] do_syscall_64+0xfa/0x3b0 [ 510.165995][T20817] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.166019][T20817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.166042][T20817] ? clear_bhb_loop+0x60/0xb0 [ 510.166069][T20817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.166091][T20817] RIP: 0033:0x7f74e218d97f [ 510.166112][T20817] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 510.166131][T20817] RSP: 002b:00007f74e2f45030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 510.166153][T20817] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f74e218d97f [ 510.166170][T20817] RDX: 0000000000000001 RSI: 00007f74e2f450a0 RDI: 000000000000000c [ 510.166184][T20817] RBP: 00007f74e2f45090 R08: 0000000000000000 R09: 0000000000000000 [ 510.166198][T20817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 510.166212][T20817] R13: 00007f74e23e6038 R14: 00007f74e23e5fa0 R15: 00007fffa330d2a8 [ 510.166248][T20817] [ 510.221964][T20820] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5268'. [ 510.545362][T20823] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5271'. [ 510.990382][T20847] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5283'. [ 511.033475][T20849] FAULT_INJECTION: forcing a failure. [ 511.033475][T20849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.057278][T20851] netlink: 'syz.4.5285': attribute type 4 has an invalid length. [ 511.065736][T20849] CPU: 1 UID: 0 PID: 20849 Comm: syz.3.5282 Not tainted syzkaller #0 PREEMPT(full) [ 511.065769][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.065784][T20849] Call Trace: [ 511.065794][T20849] [ 511.065804][T20849] dump_stack_lvl+0x189/0x250 [ 511.065848][T20849] ? __pfx____ratelimit+0x10/0x10 [ 511.065875][T20849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.065903][T20849] ? __pfx__printk+0x10/0x10 [ 511.065935][T20849] ? __might_fault+0xb0/0x130 [ 511.065981][T20849] should_fail_ex+0x414/0x560 [ 511.066021][T20849] _copy_from_user+0x2d/0xb0 [ 511.066052][T20849] ___sys_sendmsg+0x158/0x2a0 [ 511.066086][T20849] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.066157][T20849] ? __fget_files+0x2a/0x420 [ 511.066177][T20849] ? __fget_files+0x3a0/0x420 [ 511.066210][T20849] __x64_sys_sendmsg+0x19b/0x260 [ 511.066244][T20849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.066284][T20849] ? __pfx_ksys_write+0x10/0x10 [ 511.066312][T20849] ? rcu_is_watching+0x15/0xb0 [ 511.066343][T20849] ? do_syscall_64+0xbe/0x3b0 [ 511.066374][T20849] do_syscall_64+0xfa/0x3b0 [ 511.066398][T20849] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.066422][T20849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.066445][T20849] ? clear_bhb_loop+0x60/0xb0 [ 511.066473][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.066496][T20849] RIP: 0033:0x7fedfe78eec9 [ 511.066516][T20849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.066537][T20849] RSP: 002b:00007fedff5fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.066562][T20849] RAX: ffffffffffffffda RBX: 00007fedfe9e5fa0 RCX: 00007fedfe78eec9 [ 511.066579][T20849] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 511.066595][T20849] RBP: 00007fedff5fb090 R08: 0000000000000000 R09: 0000000000000000 [ 511.066609][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.066623][T20849] R13: 00007fedfe9e6038 R14: 00007fedfe9e5fa0 R15: 00007ffe436c7418 [ 511.066667][T20849] [ 511.464750][T20857] netlink: 'syz.7.5286': attribute type 13 has an invalid length. [ 511.516680][T20862] IPVS: Error connecting to the multicast addr [ 511.721587][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 511.932140][T20853] infiniband syz1: set down [ 511.936905][T20853] infiniband syz1: added bond0 [ 512.035348][T20853] RDS/IB: syz1: added [ 512.039514][T20853] smc: adding ib device syz1 with port count 1 [ 512.060080][T20853] smc: ib device syz1 port 1 has pnetid [ 512.129016][T20857] bridge0: port 2(dummy0) entered blocking state [ 512.135647][T20857] bridge0: port 2(dummy0) entered forwarding state [ 512.142737][T20857] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.150151][T20857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.202408][T20857] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.216056][T20857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.245215][T20877] netlink: 'syz.5.5295': attribute type 12 has an invalid length. [ 512.280929][T20888] tipc: Enabling of bearer rejected, already enabled [ 512.400951][ T994] tipc: Subscription rejected, illegal request [ 512.522341][T20895] nftables ruleset with unbound chain [ 512.539729][T20897] __nla_validate_parse: 3 callbacks suppressed [ 512.539766][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5303'. [ 512.815519][T20905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5307'. [ 512.901625][T20905] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 512.916335][T20907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.929522][T20907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5305'. [ 512.939929][T20908] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 513.188800][T20916] IPVS: Error connecting to the multicast addr [ 513.216625][T20914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5310'. [ 513.321694][T20918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5312'. [ 513.346251][T20918] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.667987][T20934] tipc: Enabling of bearer rejected, already enabled [ 513.859237][T20942] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5321'. [ 513.886054][ T78] tipc: Subscription rejected, illegal request [ 514.375377][T20954] FAULT_INJECTION: forcing a failure. [ 514.375377][T20954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.401258][T20954] CPU: 1 UID: 0 PID: 20954 Comm: syz.4.5327 Not tainted syzkaller #0 PREEMPT(full) [ 514.401292][T20954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.401307][T20954] Call Trace: [ 514.401318][T20954] [ 514.401328][T20954] dump_stack_lvl+0x189/0x250 [ 514.401372][T20954] ? __pfx____ratelimit+0x10/0x10 [ 514.401398][T20954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.401425][T20954] ? __pfx__printk+0x10/0x10 [ 514.401457][T20954] ? __might_fault+0xb0/0x130 [ 514.401502][T20954] should_fail_ex+0x414/0x560 [ 514.401542][T20954] _copy_from_iter+0x1de/0x1790 [ 514.401578][T20954] ? rcu_is_watching+0x15/0xb0 [ 514.401604][T20954] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 514.401637][T20954] ? __pfx__copy_from_iter+0x10/0x10 [ 514.401665][T20954] ? __build_skb_around+0x257/0x3e0 [ 514.401697][T20954] ? netlink_sendmsg+0x642/0xb30 [ 514.401720][T20954] ? skb_put+0x11b/0x210 [ 514.401751][T20954] netlink_sendmsg+0x6b2/0xb30 [ 514.401785][T20954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.401815][T20954] ? aa_sock_msg_perm+0xf1/0x1d0 [ 514.401841][T20954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.401866][T20954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.401892][T20954] __sock_sendmsg+0x21c/0x270 [ 514.401930][T20954] ____sys_sendmsg+0x505/0x830 [ 514.401966][T20954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.402013][T20954] ? import_iovec+0x74/0xa0 [ 514.402047][T20954] ___sys_sendmsg+0x21f/0x2a0 [ 514.402080][T20954] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.402162][T20954] ? __fget_files+0x2a/0x420 [ 514.402182][T20954] ? __fget_files+0x3a0/0x420 [ 514.402216][T20954] __x64_sys_sendmsg+0x19b/0x260 [ 514.402248][T20954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.402294][T20954] ? __pfx_ksys_write+0x10/0x10 [ 514.402322][T20954] ? rcu_is_watching+0x15/0xb0 [ 514.402351][T20954] ? do_syscall_64+0xbe/0x3b0 [ 514.402393][T20954] do_syscall_64+0xfa/0x3b0 [ 514.402418][T20954] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.402442][T20954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.402464][T20954] ? clear_bhb_loop+0x60/0xb0 [ 514.402492][T20954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.402515][T20954] RIP: 0033:0x7f65fa38eec9 [ 514.402536][T20954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.402557][T20954] RSP: 002b:00007f65fb1b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.402582][T20954] RAX: ffffffffffffffda RBX: 00007f65fa5e5fa0 RCX: 00007f65fa38eec9 [ 514.402599][T20954] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 514.402614][T20954] RBP: 00007f65fb1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 514.402629][T20954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.402643][T20954] R13: 00007f65fa5e6038 R14: 00007f65fa5e5fa0 R15: 00007ffdd605b478 [ 514.402681][T20954] [ 515.135094][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5332'. [ 515.144434][T20961] openvswitch: netlink: Flow actions attr not present in new flow. [ 515.578583][ T78] tipc: Subscription rejected, illegal request [ 515.669482][T20976] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5338'. [ 515.954513][T20983] tipc: Enabling of bearer rejected, already enabled [ 516.028842][T20986] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5342'. [ 516.487842][ T78] tipc: Subscription rejected, illegal request [ 516.626047][T21010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5351'. [ 516.754987][T21015] tipc: Enabling of bearer rejected, already enabled [ 517.038281][T21033] netlink: 'syz.3.5357': attribute type 16 has an invalid length. [ 517.068681][T21033] netlink: 'syz.3.5357': attribute type 17 has an invalid length. [ 517.207666][T21030] tipc: Resetting bearer [ 517.223933][T21030] tipc: Resetting bearer [ 517.230926][T21032] veth0: entered promiscuous mode [ 517.253232][T21034] veth0: left promiscuous mode [ 517.333806][T21033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.658249][T21051] syzkaller0 speed is unknown, defaulting to 1000 [ 517.690556][T21051] syzkaller0 speed is unknown, defaulting to 1000 [ 517.716521][T21057] __nla_validate_parse: 3 callbacks suppressed [ 517.716544][T21057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5365'. [ 517.743701][T21051] syzkaller0 speed is unknown, defaulting to 1000 [ 517.794162][T21051] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 517.844620][T21051] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 517.953764][T21051] syzkaller0 speed is unknown, defaulting to 1000 [ 518.000070][T21051] syzkaller0 speed is unknown, defaulting to 1000 [ 518.046857][T21051] syzkaller0 speed is unknown, defaulting to 1000 [ 518.070724][T21051] syzkaller0 speed is unknown, defaulting to 1000 [ 518.096537][T21051] syzkaller0 speed is unknown, defaulting to 1000 [ 518.116645][T21051] syzkaller0 speed is unknown, defaulting to 1000 [ 518.162480][T21051] syzkaller0 speed is unknown, defaulting to 1000 [ 518.446841][T21084] netlink: 'syz.4.5377': attribute type 8 has an invalid length. [ 518.554466][ T78] tipc: Subscription rejected, illegal request [ 518.616320][T21092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5376'. [ 518.653875][T21097] tipc: Resetting bearer [ 519.017975][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5386'. [ 519.047926][T21111] openvswitch: netlink: Flow actions attr not present in new flow. [ 519.274805][T11810] tipc: Subscription rejected, illegal request [ 519.415538][T21132] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5393'. [ 519.603003][T21140] bridge0: port 3(ipvlan3) entered blocking state [ 519.609786][T21140] bridge0: port 3(ipvlan3) entered disabled state [ 519.630963][T21140] ipvlan3: entered allmulticast mode [ 519.640479][T21140] bridge0: entered allmulticast mode [ 519.650983][T21140] ipvlan3: left allmulticast mode [ 519.656591][T21140] bridge0: left allmulticast mode [ 519.694020][T21135] C: renamed from lo [ 519.832750][T21154] netlink: 'syz.7.5396': attribute type 4 has an invalid length. [ 521.801275][ T1149] tipc: Subscription rejected, illegal request [ 521.831193][T21167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5402'. [ 522.081912][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5407'. [ 522.098279][T21181] : renamed from veth1_vlan [ 522.520298][T21205] netlink: 'syz.6.5411': attribute type 4 has an invalid length. [ 522.629157][T21208] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5415'. [ 522.704041][ T30] tipc: Subscription rejected, illegal request [ 523.166985][T21223] batman_adv: batadv0: Adding interface: dummy0 [ 523.173525][T21223] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.240454][T21223] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 523.422670][T21240] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5425'. [ 523.435625][T21240] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5425'. [ 523.446591][T21240] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5425'. [ 523.456509][T21240] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5425'. [ 523.466302][T21240] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5425'. [ 523.478362][T21240] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5425'. [ 523.489945][T21240] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5425'. [ 523.500805][T21240] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5425'. [ 523.510639][T21240] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5425'. [ 523.520127][T21240] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5425'. [ 526.379356][T21366] netlink: 'syz.5.5473': attribute type 21 has an invalid length. [ 526.394138][T21367] tipc: Resetting bearer [ 526.812867][T21383] bridge0: left allmulticast mode [ 527.640953][T21410] netlink: 'syz.7.5489': attribute type 1 has an invalid length. [ 527.685034][T21414] tipc: Enabling of bearer rejected, already enabled [ 527.845719][T21419] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 528.747745][T21467] __nla_validate_parse: 22 callbacks suppressed [ 528.747770][T21467] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5508'. [ 528.898224][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5509'. [ 528.939612][T21472] tipc: Enabling of bearer rejected, already enabled [ 529.209652][T21488] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5517'. [ 529.291992][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5518'. [ 529.586920][T21504] netlink: 6 bytes leftover after parsing attributes in process `syz.5.5521'. [ 529.607275][T21504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.669738][T21509] 8021q: VLANs not supported on vxcan1 [ 529.723720][T21514] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5525'. [ 529.906948][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5526'. [ 529.914864][T21524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5529'. [ 529.997554][T21530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5529'. [ 530.211954][T21539] netlink: 'syz.6.5533': attribute type 1 has an invalid length. [ 530.220948][T21539] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5533'. [ 530.422629][T21547] IPVS: Error connecting to the multicast addr [ 531.003712][T21583] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 531.190466][T21594] IPVS: Error connecting to the multicast addr [ 531.772534][T21624] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 532.252014][T21649] Bluetooth: MGMT ver 1.23 [ 532.280984][T21652] tipc: Enabling of bearer rejected, already enabled [ 532.297943][T21649] bridge0: port 2(dummy0) entered disabled state [ 532.364956][T21649] dummy0 (unregistering): left allmulticast mode [ 532.373986][T21649] bridge0: port 2(dummy0) entered disabled state [ 532.555835][T21664] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 532.928327][T21686] netlink: 'syz.4.5589': attribute type 3 has an invalid length. [ 533.004765][T21689] FAULT_INJECTION: forcing a failure. [ 533.004765][T21689] name failslab, interval 1, probability 0, space 0, times 0 [ 533.036153][T21689] CPU: 1 UID: 0 PID: 21689 Comm: syz.5.5592 Not tainted syzkaller #0 PREEMPT(full) [ 533.036191][T21689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.036206][T21689] Call Trace: [ 533.036216][T21689] [ 533.036227][T21689] dump_stack_lvl+0x189/0x250 [ 533.036265][T21689] ? __pfx____ratelimit+0x10/0x10 [ 533.036293][T21689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.036341][T21689] ? __pfx__printk+0x10/0x10 [ 533.036381][T21689] ? __pfx___might_resched+0x10/0x10 [ 533.036410][T21689] should_fail_ex+0x414/0x560 [ 533.036453][T21689] should_failslab+0xa8/0x100 [ 533.036490][T21689] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 533.036524][T21689] ? __alloc_skb+0x112/0x2d0 [ 533.036557][T21689] __alloc_skb+0x112/0x2d0 [ 533.036589][T21689] netlink_sendmsg+0x5c6/0xb30 [ 533.036628][T21689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.036658][T21689] ? aa_sock_msg_perm+0xf1/0x1d0 [ 533.036685][T21689] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.036710][T21689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.036737][T21689] __sock_sendmsg+0x21c/0x270 [ 533.036777][T21689] ____sys_sendmsg+0x505/0x830 [ 533.036813][T21689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.036860][T21689] ? import_iovec+0x74/0xa0 [ 533.036896][T21689] ___sys_sendmsg+0x21f/0x2a0 [ 533.036927][T21689] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.036999][T21689] ? __fget_files+0x2a/0x420 [ 533.037019][T21689] ? __fget_files+0x3a0/0x420 [ 533.037051][T21689] __x64_sys_sendmsg+0x19b/0x260 [ 533.037084][T21689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.037125][T21689] ? __pfx_ksys_write+0x10/0x10 [ 533.037153][T21689] ? rcu_is_watching+0x15/0xb0 [ 533.037183][T21689] ? do_syscall_64+0xbe/0x3b0 [ 533.037214][T21689] do_syscall_64+0xfa/0x3b0 [ 533.037238][T21689] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.037261][T21689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.037284][T21689] ? clear_bhb_loop+0x60/0xb0 [ 533.037311][T21689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.037333][T21689] RIP: 0033:0x7fa81db8eec9 [ 533.037354][T21689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.037375][T21689] RSP: 002b:00007fa81e946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.037399][T21689] RAX: ffffffffffffffda RBX: 00007fa81dde5fa0 RCX: 00007fa81db8eec9 [ 533.037416][T21689] RDX: 0000000020040810 RSI: 0000200000000080 RDI: 0000000000000003 [ 533.037431][T21689] RBP: 00007fa81e946090 R08: 0000000000000000 R09: 0000000000000000 [ 533.037446][T21689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.037460][T21689] R13: 00007fa81dde6038 R14: 00007fa81dde5fa0 R15: 00007fff102604b8 [ 533.037496][T21689] [ 533.483514][T21699] tipc: Enabling of bearer rejected, already enabled [ 533.787765][T21717] bond3: option mode: invalid value (12) [ 533.810494][T21717] bond3 (unregistering): Released all slaves [ 533.970236][T21730] __nla_validate_parse: 15 callbacks suppressed [ 533.970262][T21730] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5606'. [ 534.049608][T21732] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5607'. [ 534.108486][T21734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5608'. [ 534.210642][T21742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.342584][T21748] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5613'. [ 534.413391][T21754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5613'. [ 534.614480][T21758] macvlan0: mtu less than device minimum [ 534.636191][T21762] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5617'. [ 534.659491][T21765] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5618'. [ 534.754205][T21770] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5621'. [ 534.937731][T21776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5623'. [ 535.008481][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5625'. [ 535.042775][T21777] netlink: 'syz.6.5624': attribute type 12 has an invalid length. [ 535.050325][T21781] team0: Device gtp0 is of different type [ 535.160237][T21777] bond3: option primary_reselect: invalid value (255) [ 535.195749][T21777] bond3 (unregistering): Released all slaves [ 535.515676][T21806] netlink: 'syz.6.5634': attribute type 15 has an invalid length. [ 535.737607][T21821] tipc: Enabled bearer , priority 10 [ 535.809268][T21825] bond2: Unable to set down delay as MII monitoring is disabled [ 535.838611][T21825] bond2 (unregistering): Released all slaves [ 535.874257][T21831] netlink: 'syz.6.5642': attribute type 4 has an invalid length. [ 535.903916][T21831] netlink: 'syz.6.5642': attribute type 7 has an invalid length. [ 535.955631][T21831] netlink: 'syz.6.5642': attribute type 8 has an invalid length. [ 536.439153][ T31] audit: type=1107 audit(1759321253.098:6): pid=21852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 536.619280][T21861] batman_adv: batadv0: Interface deactivated: dummy0 [ 536.630390][T21861] batman_adv: batadv0: Removing interface: dummy0 [ 536.652079][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.243710][T21902] netlink: 'syz.6.5669': attribute type 33 has an invalid length. [ 537.265982][T21897] netlink: 'syz.7.5666': attribute type 4 has an invalid length. [ 537.330162][T21902] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 537.344101][T21902] bond3 (unregistering): Released all slaves [ 537.402383][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.510726][T21910] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 537.533387][T21910] bond2 (unregistering): Released all slaves [ 537.978732][T21932] FAULT_INJECTION: forcing a failure. [ 537.978732][T21932] name failslab, interval 1, probability 0, space 0, times 0 [ 537.998637][T21932] CPU: 0 UID: 0 PID: 21932 Comm: syz.5.5676 Not tainted syzkaller #0 PREEMPT(full) [ 537.998678][T21932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 537.998690][T21932] Call Trace: [ 537.998701][T21932] [ 537.998712][T21932] dump_stack_lvl+0x189/0x250 [ 537.998743][T21932] ? __pfx____ratelimit+0x10/0x10 [ 537.998765][T21932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.998788][T21932] ? __pfx__printk+0x10/0x10 [ 537.998821][T21932] ? __pfx___might_resched+0x10/0x10 [ 537.998838][T21932] ? fs_reclaim_acquire+0x7d/0x100 [ 537.998861][T21932] should_fail_ex+0x414/0x560 [ 537.998896][T21932] should_failslab+0xa8/0x100 [ 537.998926][T21932] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 537.998954][T21932] ? __alloc_skb+0x112/0x2d0 [ 537.998980][T21932] __alloc_skb+0x112/0x2d0 [ 537.999006][T21932] netlink_ack+0x146/0xa50 [ 537.999024][T21932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.999067][T21932] netlink_rcv_skb+0x28c/0x470 [ 537.999086][T21932] ? __lock_acquire+0xab9/0xd20 [ 537.999115][T21932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.999143][T21932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.999184][T21932] ? down_read+0x1ad/0x2e0 [ 537.999213][T21932] genl_rcv+0x28/0x40 [ 537.999235][T21932] netlink_unicast+0x82c/0x9e0 [ 537.999276][T21932] ? __pfx_netlink_unicast+0x10/0x10 [ 537.999307][T21932] ? netlink_sendmsg+0x642/0xb30 [ 537.999326][T21932] ? skb_put+0x11b/0x210 [ 537.999351][T21932] netlink_sendmsg+0x805/0xb30 [ 537.999382][T21932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.999407][T21932] ? aa_sock_msg_perm+0xf1/0x1d0 [ 537.999433][T21932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.999454][T21932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.999489][T21932] __sock_sendmsg+0x21c/0x270 [ 537.999522][T21932] ____sys_sendmsg+0x505/0x830 [ 537.999552][T21932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.999587][T21932] ? import_iovec+0x74/0xa0 [ 537.999616][T21932] ___sys_sendmsg+0x21f/0x2a0 [ 537.999643][T21932] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.999714][T21932] ? __fget_files+0x2a/0x420 [ 537.999731][T21932] ? __fget_files+0x3a0/0x420 [ 537.999759][T21932] __x64_sys_sendmsg+0x19b/0x260 [ 537.999787][T21932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.999822][T21932] ? __pfx_ksys_write+0x10/0x10 [ 537.999846][T21932] ? rcu_is_watching+0x15/0xb0 [ 537.999872][T21932] ? do_syscall_64+0xbe/0x3b0 [ 537.999898][T21932] do_syscall_64+0xfa/0x3b0 [ 537.999918][T21932] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.999937][T21932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.999956][T21932] ? clear_bhb_loop+0x60/0xb0 [ 537.999979][T21932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.999998][T21932] RIP: 0033:0x7fa81db8eec9 [ 538.000018][T21932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.000035][T21932] RSP: 002b:00007fa81e946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.000056][T21932] RAX: ffffffffffffffda RBX: 00007fa81dde5fa0 RCX: 00007fa81db8eec9 [ 538.000070][T21932] RDX: 0000000000000030 RSI: 0000200000002900 RDI: 0000000000000004 [ 538.000082][T21932] RBP: 00007fa81e946090 R08: 0000000000000000 R09: 0000000000000000 [ 538.000093][T21932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.000105][T21932] R13: 00007fa81dde6038 R14: 00007fa81dde5fa0 R15: 00007fff102604b8 [ 538.000137][T21932] [ 538.365995][T21935] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 538.787471][T21954] tipc: Enabling of bearer rejected, already enabled [ 538.875268][T21958] netlink: 'syz.6.5688': attribute type 4 has an invalid length. [ 539.018371][T21968] __nla_validate_parse: 13 callbacks suppressed [ 539.018396][T21968] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5693'. [ 539.155577][T21973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5695'. [ 539.185171][T21973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5695'. [ 539.228662][T21977] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5697'. [ 539.249782][T21977] netlink: 'syz.3.5697': attribute type 1 has an invalid length. [ 539.385475][T21981] bond6: (slave bridge2): making interface the new active one [ 539.404879][T21981] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 539.553876][T21994] tipc: Enabling of bearer rejected, already enabled [ 540.180711][T22024] FAULT_INJECTION: forcing a failure. [ 540.180711][T22024] name failslab, interval 1, probability 0, space 0, times 0 [ 540.194066][T22024] CPU: 1 UID: 0 PID: 22024 Comm: syz.4.5716 Not tainted syzkaller #0 PREEMPT(full) [ 540.194099][T22024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 540.194114][T22024] Call Trace: [ 540.194126][T22024] [ 540.194137][T22024] dump_stack_lvl+0x189/0x250 [ 540.194175][T22024] ? __pfx____ratelimit+0x10/0x10 [ 540.194224][T22024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.194260][T22024] ? __pfx__printk+0x10/0x10 [ 540.194310][T22024] should_fail_ex+0x414/0x560 [ 540.194352][T22024] should_failslab+0xa8/0x100 [ 540.194389][T22024] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 540.194423][T22024] ? __alloc_skb+0x112/0x2d0 [ 540.194455][T22024] __alloc_skb+0x112/0x2d0 [ 540.194487][T22024] xfrm_alloc_compat+0x1a6/0x16f0 [ 540.194531][T22024] ? xfrm_get_translator+0x1b/0x240 [ 540.194576][T22024] dump_one_state+0x2c5/0x440 [ 540.194605][T22024] xfrm_state_walk+0x295/0xa60 [ 540.194642][T22024] ? __pfx_dump_one_state+0x10/0x10 [ 540.194671][T22024] xfrm_dump_sa+0x1c2/0x530 [ 540.194712][T22024] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 540.194795][T22024] ? __build_skb_around+0x257/0x3e0 [ 540.194827][T22024] ? __alloc_skb+0x1bc/0x2d0 [ 540.194857][T22024] netlink_dump+0x6e1/0xe90 [ 540.194897][T22024] ? __pfx_netlink_dump+0x10/0x10 [ 540.194918][T22024] ? __netlink_lookup+0x752/0x810 [ 540.194964][T22024] ? netlink_lookup+0x30/0x200 [ 540.194986][T22024] ? netlink_lookup+0x30/0x200 [ 540.195006][T22024] ? netlink_lookup+0x30/0x200 [ 540.195036][T22024] __netlink_dump_start+0x5cb/0x7e0 [ 540.195072][T22024] xfrm_user_rcv_msg+0x42f/0xab0 [ 540.195119][T22024] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 540.195197][T22024] ? __pfx___mutex_trylock_common+0x10/0x10 [ 540.195226][T22024] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 540.195296][T22024] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 540.195333][T22024] ? trace_contention_end+0x39/0x120 [ 540.195359][T22024] ? __mutex_lock+0x335/0x1350 [ 540.195393][T22024] netlink_rcv_skb+0x208/0x470 [ 540.195417][T22024] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 540.195449][T22024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 540.195495][T22024] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.195519][T22024] ? netlink_deliver_tap+0x2e/0x1b0 [ 540.195546][T22024] xfrm_netlink_rcv+0x79/0x90 [ 540.195579][T22024] netlink_unicast+0x82c/0x9e0 [ 540.195626][T22024] ? __pfx_netlink_unicast+0x10/0x10 [ 540.195664][T22024] ? netlink_sendmsg+0x642/0xb30 [ 540.195686][T22024] ? skb_put+0x11b/0x210 [ 540.195717][T22024] netlink_sendmsg+0x805/0xb30 [ 540.195754][T22024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.195784][T22024] ? aa_sock_msg_perm+0xf1/0x1d0 [ 540.195811][T22024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.195837][T22024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.195863][T22024] __sock_sendmsg+0x21c/0x270 [ 540.195902][T22024] ____sys_sendmsg+0x505/0x830 [ 540.195940][T22024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.195982][T22024] ? import_iovec+0x74/0xa0 [ 540.196017][T22024] ___sys_sendmsg+0x21f/0x2a0 [ 540.196050][T22024] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.196123][T22024] ? __fget_files+0x2a/0x420 [ 540.196144][T22024] ? __fget_files+0x3a0/0x420 [ 540.196178][T22024] __x64_sys_sendmsg+0x19b/0x260 [ 540.196212][T22024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.196261][T22024] ? __pfx_ksys_write+0x10/0x10 [ 540.196288][T22024] ? rcu_is_watching+0x15/0xb0 [ 540.196318][T22024] ? do_syscall_64+0xbe/0x3b0 [ 540.196350][T22024] do_syscall_64+0xfa/0x3b0 [ 540.196374][T22024] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.196396][T22024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.196417][T22024] ? clear_bhb_loop+0x60/0xb0 [ 540.196443][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.196464][T22024] RIP: 0033:0x7f65fa38eec9 [ 540.196484][T22024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.196504][T22024] RSP: 002b:00007f65fb1b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.196527][T22024] RAX: ffffffffffffffda RBX: 00007f65fa5e5fa0 RCX: 00007f65fa38eec9 [ 540.196543][T22024] RDX: 0000000020040810 RSI: 0000200000000080 RDI: 0000000000000003 [ 540.196557][T22024] RBP: 00007f65fb1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 540.196570][T22024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.196584][T22024] R13: 00007f65fa5e6038 R14: 00007f65fa5e5fa0 R15: 00007ffdd605b478 [ 540.196620][T22024] [ 540.900361][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5718'. [ 541.066241][T22036] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5722'. [ 541.117061][T22036] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 541.422817][T22053] FAULT_INJECTION: forcing a failure. [ 541.422817][T22053] name failslab, interval 1, probability 0, space 0, times 0 [ 541.508083][T22053] CPU: 0 UID: 0 PID: 22053 Comm: syz.6.5730 Not tainted syzkaller #0 PREEMPT(full) [ 541.508118][T22053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 541.508141][T22053] Call Trace: [ 541.508151][T22053] [ 541.508162][T22053] dump_stack_lvl+0x189/0x250 [ 541.508197][T22053] ? __pfx____ratelimit+0x10/0x10 [ 541.508224][T22053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.508252][T22053] ? __pfx__printk+0x10/0x10 [ 541.508290][T22053] ? __pfx___might_resched+0x10/0x10 [ 541.508320][T22053] should_fail_ex+0x414/0x560 [ 541.508359][T22053] should_failslab+0xa8/0x100 [ 541.508396][T22053] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 541.508429][T22053] ? xfrm_dump_sa+0x336/0x530 [ 541.508468][T22053] kmemdup_noprof+0x2b/0x70 [ 541.508516][T22053] xfrm_dump_sa+0x336/0x530 [ 541.508556][T22053] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 541.508640][T22053] ? __build_skb_around+0x257/0x3e0 [ 541.508673][T22053] ? __alloc_skb+0x1bc/0x2d0 [ 541.508704][T22053] netlink_dump+0x6e1/0xe90 [ 541.508744][T22053] ? __pfx_netlink_dump+0x10/0x10 [ 541.508764][T22053] ? __netlink_lookup+0x752/0x810 [ 541.508811][T22053] ? netlink_lookup+0x30/0x200 [ 541.508834][T22053] ? netlink_lookup+0x30/0x200 [ 541.508854][T22053] ? netlink_lookup+0x30/0x200 [ 541.508883][T22053] __netlink_dump_start+0x5cb/0x7e0 [ 541.508919][T22053] xfrm_user_rcv_msg+0x42f/0xab0 [ 541.508960][T22053] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 541.509043][T22053] ? __pfx___mutex_trylock_common+0x10/0x10 [ 541.509072][T22053] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 541.509102][T22053] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 541.509145][T22053] ? trace_contention_end+0x39/0x120 [ 541.509172][T22053] ? __mutex_lock+0x335/0x1350 [ 541.509209][T22053] netlink_rcv_skb+0x208/0x470 [ 541.509235][T22053] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 541.509271][T22053] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.509314][T22053] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.509338][T22053] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.509365][T22053] xfrm_netlink_rcv+0x79/0x90 [ 541.509399][T22053] netlink_unicast+0x82c/0x9e0 [ 541.509446][T22053] ? __pfx_netlink_unicast+0x10/0x10 [ 541.509485][T22053] ? netlink_sendmsg+0x642/0xb30 [ 541.509508][T22053] ? skb_put+0x11b/0x210 [ 541.509539][T22053] netlink_sendmsg+0x805/0xb30 [ 541.509577][T22053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.509607][T22053] ? aa_sock_msg_perm+0xf1/0x1d0 [ 541.509634][T22053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 541.509660][T22053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.509687][T22053] __sock_sendmsg+0x21c/0x270 [ 541.509727][T22053] ____sys_sendmsg+0x505/0x830 [ 541.509764][T22053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.509806][T22053] ? import_iovec+0x74/0xa0 [ 541.509841][T22053] ___sys_sendmsg+0x21f/0x2a0 [ 541.509874][T22053] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.509949][T22053] ? __fget_files+0x2a/0x420 [ 541.509970][T22053] ? __fget_files+0x3a0/0x420 [ 541.510005][T22053] __x64_sys_sendmsg+0x19b/0x260 [ 541.510038][T22053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.510080][T22053] ? __pfx_ksys_write+0x10/0x10 [ 541.510108][T22053] ? rcu_is_watching+0x15/0xb0 [ 541.510162][T22053] ? do_syscall_64+0xbe/0x3b0 [ 541.510194][T22053] do_syscall_64+0xfa/0x3b0 [ 541.510219][T22053] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.510243][T22053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.510266][T22053] ? clear_bhb_loop+0x60/0xb0 [ 541.510295][T22053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.510321][T22053] RIP: 0033:0x7f08d138eec9 [ 541.510342][T22053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.510361][T22053] RSP: 002b:00007f08cf5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.510385][T22053] RAX: ffffffffffffffda RBX: 00007f08d15e5fa0 RCX: 00007f08d138eec9 [ 541.510406][T22053] RDX: 0000000020040810 RSI: 0000200000000080 RDI: 0000000000000003 [ 541.510421][T22053] RBP: 00007f08cf5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 541.510435][T22053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.510449][T22053] R13: 00007f08d15e6038 R14: 00007f08d15e5fa0 R15: 00007ffcc14ee268 [ 541.510486][T22053] [ 541.977384][T22062] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5729'. [ 541.994885][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5729'. [ 542.036995][T22066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5735'. [ 542.265073][T22070] netlink: 'syz.6.5740': attribute type 3 has an invalid length. [ 542.673360][T22092] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5746'. [ 543.058595][ T994] tipc: Subscription rejected, illegal request [ 543.399241][T22123] tipc: New replicast peer: 0.0.0.0 [ 543.440139][T22123] tipc: Enabled bearer , priority 10 [ 543.461012][T22123] tipc: New replicast peer: 255.255.255.255 [ 543.685745][T11810] tipc: Subscription rejected, illegal request [ 544.043496][T22151] __nla_validate_parse: 66 callbacks suppressed [ 544.043525][T22151] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5769'. [ 544.163656][T22153] netlink: 'syz.6.5771': attribute type 1 has an invalid length. [ 544.210296][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5771'. [ 544.246017][T22157] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5773'. [ 544.345716][T22166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5774'. [ 544.478675][T11810] tipc: Subscription rejected, illegal request [ 544.715888][T22183] IPVS: Error connecting to the multicast addr [ 544.801218][T22186] netlink: 'syz.7.5784': attribute type 1 has an invalid length. [ 544.820583][T22186] netlink: 180 bytes leftover after parsing attributes in process `syz.7.5784'. [ 544.839890][T22189] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5785'. [ 545.126506][T22197] nbd: socks must be embedded in a SOCK_ITEM attr [ 545.323276][ T1149] tipc: Subscription rejected, illegal request [ 545.345454][T22211] netlink: 'syz.3.5793': attribute type 1 has an invalid length. [ 545.374968][T22211] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5793'. [ 545.406707][T22211] netlink: 'syz.3.5793': attribute type 1 has an invalid length. [ 545.447404][T22216] netlink: 'syz.4.5795': attribute type 4 has an invalid length. [ 545.447407][T22211] netlink: 'syz.3.5793': attribute type 2 has an invalid length. [ 545.447432][T22216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5795'. [ 545.517145][T22219] IPVS: Error connecting to the multicast addr [ 545.701545][T22224] netlink: 124 bytes leftover after parsing attributes in process `syz.5.5799'. [ 545.720621][T22225] netlink: 277 bytes leftover after parsing attributes in process `syz.6.5798'. [ 545.864276][T22237] lo: left allmulticast mode [ 546.007884][ T3491] tipc: Subscription rejected, illegal request [ 546.174765][T22257] IPVS: Error connecting to the multicast addr [ 546.288853][T11810] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.317341][T11810] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.331027][T11810] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.346210][T11810] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.454983][T22263] nbd2: detected capacity change from 0 to 127 [ 546.472213][ T5184] block nbd2: Receive control failed (result -32) [ 546.686814][T22271] rdma_rxe: rxe_newlink: failed to add lo [ 547.153071][T22300] IPVS: Error connecting to the multicast addr [ 547.452326][T22316] FAULT_INJECTION: forcing a failure. [ 547.452326][T22316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.453933][T22316] [ 547.453961][T22316] ====================================================== [ 547.453975][T22316] WARNING: possible circular locking dependency detected [ 547.453998][T22316] syzkaller #0 Not tainted [ 547.454013][T22316] ------------------------------------------------------ [ 547.454025][T22316] syz.6.5834/22316 is trying to acquire lock: [ 547.454038][T22316] ffffffff8e12e320 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 547.454114][T22316] [ 547.454114][T22316] but task is already holding lock: [ 547.454122][T22316] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 547.454186][T22316] [ 547.454186][T22316] which lock already depends on the new lock. [ 547.454186][T22316] [ 547.454195][T22316] [ 547.454195][T22316] the existing dependency chain (in reverse order) is: [ 547.454203][T22316] [ 547.454203][T22316] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 547.454239][T22316] lock_acquire+0x120/0x360 [ 547.454270][T22316] _raw_spin_lock_nested+0x32/0x50 [ 547.454296][T22316] raw_spin_rq_lock_nested+0x2a/0x140 [ 547.454326][T22316] task_rq_lock+0xbc/0x470 [ 547.454356][T22316] cgroup_move_task+0x92/0x2a0 [ 547.454381][T22316] css_set_move_task+0x658/0x9e0 [ 547.454410][T22316] cgroup_post_fork+0x1ef/0x790 [ 547.454433][T22316] copy_process+0x3862/0x3c00 [ 547.454459][T22316] kernel_clone+0x21e/0x840 [ 547.454483][T22316] user_mode_thread+0xdd/0x140 [ 547.454506][T22316] rest_init+0x23/0x300 [ 547.454532][T22316] start_kernel+0x3a9/0x410 [ 547.454588][T22316] x86_64_start_reservations+0x24/0x30 [ 547.454626][T22316] x86_64_start_kernel+0x143/0x1c0 [ 547.454661][T22316] common_startup_64+0x13e/0x147 [ 547.454702][T22316] [ 547.454702][T22316] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 547.454730][T22316] lock_acquire+0x120/0x360 [ 547.454759][T22316] _raw_spin_lock_irqsave+0xa7/0xf0 [ 547.454792][T22316] try_to_wake_up+0x67/0x12b0 [ 547.454815][T22316] __wake_up_common_lock+0x137/0x1f0 [ 547.454847][T22316] tty_port_default_wakeup+0xa2/0xf0 [ 547.454886][T22316] serial8250_tx_chars+0x72e/0x970 [ 547.454913][T22316] serial8250_handle_irq+0x633/0xbb0 [ 547.454934][T22316] serial8250_default_handle_irq+0xbf/0x1e0 [ 547.454962][T22316] serial8250_interrupt+0x8d/0x160 [ 547.454996][T22316] __handle_irq_event_percpu+0x289/0x980 [ 547.455026][T22316] handle_irq_event+0x8b/0x1e0 [ 547.455050][T22316] handle_edge_irq+0x23b/0xa10 [ 547.455076][T22316] __common_interrupt+0x13e/0x1f0 [ 547.455112][T22316] common_interrupt+0xb6/0xe0 [ 547.455139][T22316] asm_common_interrupt+0x26/0x40 [ 547.455160][T22316] pv_native_safe_halt+0x13/0x20 [ 547.455180][T22316] default_idle+0x13/0x20 [ 547.455204][T22316] default_idle_call+0x74/0xb0 [ 547.455234][T22316] do_idle+0x1e8/0x510 [ 547.455256][T22316] cpu_startup_entry+0x44/0x60 [ 547.455275][T22316] rest_init+0x2de/0x300 [ 547.455304][T22316] start_kernel+0x3a9/0x410 [ 547.455324][T22316] x86_64_start_reservations+0x24/0x30 [ 547.455353][T22316] x86_64_start_kernel+0x143/0x1c0 [ 547.455380][T22316] common_startup_64+0x13e/0x147 [ 547.455408][T22316] [ 547.455408][T22316] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 547.455437][T22316] lock_acquire+0x120/0x360 [ 547.455467][T22316] _raw_spin_lock_irqsave+0xa7/0xf0 [ 547.455498][T22316] __wake_up_common_lock+0x2f/0x1f0 [ 547.455524][T22316] tty_port_default_wakeup+0xa2/0xf0 [ 547.455549][T22316] serial8250_tx_chars+0x72e/0x970 [ 547.455570][T22316] serial8250_handle_irq+0x633/0xbb0 [ 547.455591][T22316] serial8250_default_handle_irq+0xbf/0x1e0 [ 547.455619][T22316] serial8250_interrupt+0x8d/0x160 [ 547.455657][T22316] __handle_irq_event_percpu+0x289/0x980 [ 547.455682][T22316] handle_irq_event+0x8b/0x1e0 [ 547.455707][T22316] handle_edge_irq+0x23b/0xa10 [ 547.455728][T22316] __common_interrupt+0x13e/0x1f0 [ 547.455760][T22316] common_interrupt+0xb6/0xe0 [ 547.455787][T22316] asm_common_interrupt+0x26/0x40 [ 547.455806][T22316] pv_native_safe_halt+0x13/0x20 [ 547.455826][T22316] default_idle+0x13/0x20 [ 547.455850][T22316] default_idle_call+0x74/0xb0 [ 547.455875][T22316] do_idle+0x1e8/0x510 [ 547.455892][T22316] cpu_startup_entry+0x44/0x60 [ 547.455911][T22316] rest_init+0x2de/0x300 [ 547.455937][T22316] start_kernel+0x3a9/0x410 [ 547.455958][T22316] x86_64_start_reservations+0x24/0x30 [ 547.455986][T22316] x86_64_start_kernel+0x143/0x1c0 [ 547.456014][T22316] common_startup_64+0x13e/0x147 [ 547.456041][T22316] [ 547.456041][T22316] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 547.456077][T22316] lock_acquire+0x120/0x360 [ 547.456107][T22316] _raw_spin_lock_irqsave+0xa7/0xf0 [ 547.456139][T22316] serial8250_console_write+0x17e/0x1ba0 [ 547.456163][T22316] console_flush_all+0x728/0xc40 [ 547.456186][T22316] console_unlock+0xc4/0x270 [ 547.456207][T22316] vprintk_emit+0x5b7/0x7a0 [ 547.456228][T22316] _printk+0xcf/0x120 [ 547.456255][T22316] register_console+0xa8b/0xf90 [ 547.456279][T22316] univ8250_console_init+0x3a/0x70 [ 547.456324][T22316] console_init+0x10e/0x430 [ 547.456362][T22316] start_kernel+0x254/0x410 [ 547.456380][T22316] x86_64_start_reservations+0x24/0x30 [ 547.456409][T22316] x86_64_start_kernel+0x143/0x1c0 [ 547.456437][T22316] common_startup_64+0x13e/0x147 [ 547.456465][T22316] [ 547.456465][T22316] -> #0 (console_owner){-.-.}-{0:0}: [ 547.456493][T22316] validate_chain+0xb9b/0x2140 [ 547.456513][T22316] __lock_acquire+0xab9/0xd20 [ 547.456543][T22316] lock_acquire+0x120/0x360 [ 547.456571][T22316] console_flush_all+0x6d2/0xc40 [ 547.456595][T22316] console_unlock+0xc4/0x270 [ 547.456616][T22316] vprintk_emit+0x5b7/0x7a0 [ 547.456636][T22316] _printk+0xcf/0x120 [ 547.456669][T22316] should_fail_ex+0x3f5/0x560 [ 547.456698][T22316] strncpy_from_user+0x36/0x290 [ 547.456726][T22316] strncpy_from_user_nofault+0x72/0x150 [ 547.456757][T22316] bpf_probe_read_compat_str+0xe2/0x180 [ 547.456788][T22316] bpf_prog_56079403e473c493+0x70/0x76 [ 547.456805][T22316] bpf_trace_run2+0x284/0x4b0 [ 547.456834][T22316] __bpf_trace_tlb_flush+0xf5/0x150 [ 547.456866][T22316] trace_tlb_flush+0x115/0x140 [ 547.456896][T22316] switch_mm_irqs_off+0x53e/0x7a0 [ 547.456920][T22316] __schedule+0x110e/0x4cc0 [ 547.456936][T22316] preempt_schedule_irq+0xb5/0x150 [ 547.456954][T22316] irqentry_exit+0x6f/0x90 [ 547.456973][T22316] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.456993][T22316] do_syscall_64+0xc3/0x3b0 [ 547.457014][T22316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.457034][T22316] [ 547.457034][T22316] other info that might help us debug this: [ 547.457034][T22316] [ 547.457042][T22316] Chain exists of: [ 547.457042][T22316] console_owner --> &p->pi_lock --> &rq->__lock [ 547.457042][T22316] [ 547.457082][T22316] Possible unsafe locking scenario: [ 547.457082][T22316] [ 547.457093][T22316] CPU0 CPU1 [ 547.457105][T22316] ---- ---- [ 547.457113][T22316] lock(&rq->__lock); [ 547.457127][T22316] lock(&p->pi_lock); [ 547.457144][T22316] lock(&rq->__lock); [ 547.457161][T22316] lock(console_owner); [ 547.457175][T22316] [ 547.457175][T22316] *** DEADLOCK *** [ 547.457175][T22316] [ 547.457182][T22316] 4 locks held by syz.6.5834/22316: [ 547.457195][T22316] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 547.457266][T22316] #1: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 547.457321][T22316] #2: ffffffff8e12e380 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 547.457378][T22316] #3: ffffffff8e015c50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 547.457422][T22316] [ 547.457422][T22316] stack backtrace: [ 547.457431][T22316] CPU: 0 UID: 0 PID: 22316 Comm: syz.6.5834 Not tainted syzkaller #0 PREEMPT(full) [ 547.457450][T22316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 547.457462][T22316] Call Trace: [ 547.457469][T22316] [ 547.457477][T22316] dump_stack_lvl+0x189/0x250 [ 547.457500][T22316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.457520][T22316] ? __pfx__printk+0x10/0x10 [ 547.457544][T22316] ? print_lock_name+0xde/0x100 [ 547.457568][T22316] print_circular_bug+0x2ee/0x310 [ 547.457588][T22316] check_noncircular+0x134/0x160 [ 547.457609][T22316] validate_chain+0xb9b/0x2140 [ 547.457637][T22316] __lock_acquire+0xab9/0xd20 [ 547.457671][T22316] ? console_flush_all+0x13a/0xc40 [ 547.457690][T22316] lock_acquire+0x120/0x360 [ 547.457713][T22316] ? console_flush_all+0x13a/0xc40 [ 547.457736][T22316] ? do_raw_spin_unlock+0x122/0x240 [ 547.457756][T22316] ? console_flush_all+0x13a/0xc40 [ 547.457776][T22316] console_flush_all+0x6d2/0xc40 [ 547.457795][T22316] ? console_flush_all+0x13a/0xc40 [ 547.457816][T22316] ? console_flush_all+0x13a/0xc40 [ 547.457838][T22316] ? __pfx_console_flush_all+0x10/0x10 [ 547.457863][T22316] ? is_printk_cpu_sync_owner+0x32/0x40 [ 547.457887][T22316] console_unlock+0xc4/0x270 [ 547.457908][T22316] ? __pfx_console_unlock+0x10/0x10 [ 547.457927][T22316] ? is_printk_cpu_sync_owner+0x32/0x40 [ 547.457951][T22316] vprintk_emit+0x5b7/0x7a0 [ 547.457970][T22316] ? __pfx_vprintk_emit+0x10/0x10 [ 547.457988][T22316] ? trace_event_buffer_commit+0x264/0x7f0 [ 547.458023][T22316] _printk+0xcf/0x120 [ 547.458044][T22316] ? __pfx____ratelimit+0x10/0x10 [ 547.458062][T22316] ? __pfx__printk+0x10/0x10 [ 547.458083][T22316] ? process_measurement+0x1640/0x1a40 [ 547.458106][T22316] ? rcu_is_watching+0x15/0xb0 [ 547.458124][T22316] ? bpf_bprintf_cleanup+0x9f/0xd0 [ 547.458150][T22316] should_fail_ex+0x3f5/0x560 [ 547.458177][T22316] strncpy_from_user+0x36/0x290 [ 547.458202][T22316] strncpy_from_user_nofault+0x72/0x150 [ 547.458223][T22316] bpf_probe_read_compat_str+0xe2/0x180 [ 547.458241][T22316] bpf_prog_56079403e473c493+0x70/0x76 [ 547.458257][T22316] ? bpf_trace_run2+0x186/0x4b0 [ 547.458277][T22316] ? __pfx___cant_migrate+0x10/0x10 [ 547.458296][T22316] ? __lock_acquire+0xab9/0xd20 [ 547.458322][T22316] bpf_trace_run2+0x284/0x4b0 [ 547.458343][T22316] ? bpf_trace_run2+0x186/0x4b0 [ 547.458365][T22316] ? __pfx_bpf_trace_run2+0x10/0x10 [ 547.458386][T22316] ? __pfx_css_rstat_updated+0x10/0x10 [ 547.458403][T22316] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 547.458427][T22316] __bpf_trace_tlb_flush+0xf5/0x150 [ 547.458451][T22316] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 547.458478][T22316] ? psi_group_change+0xab8/0x1050 [ 547.458496][T22316] trace_tlb_flush+0x115/0x140 [ 547.458518][T22316] switch_mm_irqs_off+0x53e/0x7a0 [ 547.458543][T22316] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 547.458563][T22316] ? psi_task_switch+0x4e3/0x880 [ 547.458583][T22316] __schedule+0x110e/0x4cc0 [ 547.458603][T22316] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 547.458630][T22316] ? __pfx___schedule+0x10/0x10 [ 547.458652][T22316] ? ksys_write+0x1cb/0x250 [ 547.458679][T22316] ? preempt_schedule_irq+0xaa/0x150 [ 547.458697][T22316] preempt_schedule_irq+0xb5/0x150 [ 547.458713][T22316] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 547.458734][T22316] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 547.458752][T22316] irqentry_exit+0x6f/0x90 [ 547.458768][T22316] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.458785][T22316] RIP: 0010:do_syscall_64+0xc3/0x3b0 [ 547.458806][T22316] Code: 00 48 8b 7d 08 48 89 7b 18 e8 09 5a 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 99 38 4d f6 90 90 e8 42 38 4d f6 fb 49 8b 57 08 c2 3f 74 0e 4c 89 f7 4c 89 ee e8 2d 2d 30 f6 49 89 c4 90 90 41 [ 547.458821][T22316] RSP: 0018:ffffc90013ddfef0 EFLAGS: 00000286 [ 547.458836][T22316] RAX: b49f8a4f2fd44a00 RBX: ffffc90013ddfef0 RCX: b49f8a4f2fd44a00 [ 547.458849][T22316] RDX: 0000000000000000 RSI: ffffffff8d9ba53b RDI: ffffffff8be33f80 [ 547.458860][T22316] RBP: ffffc90013ddff48 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506 [ 547.458873][T22316] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: 000000000000002e [ 547.458885][T22316] R13: 000000000000002e R14: ffffc90013ddff58 R15: ffff888027d70000 [ 547.458906][T22316] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.458928][T22316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.458944][T22316] ? clear_bhb_loop+0x60/0xb0 [ 547.458962][T22316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.458978][T22316] RIP: 0033:0x7f08d138eec9 [ 547.458991][T22316] Code: Unable to access opcode bytes at 0x7f08d138ee9f. [ 547.459003][T22316] RSP: 002b:00007f08cf5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.459019][T22316] RAX: ffffffffffffffda RBX: 00007f08d15e5fa0 RCX: 00007f08d138eec9 [ 547.459031][T22316] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 547.459042][T22316] RBP: 00007f08cf5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.459062][T22316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.459072][T22316] R13: 00007f08d15e6038 R14: 00007f08d15e5fa0 R15: 00007ffcc14ee268 [ 547.459091][T22316] [ 548.739515][T22316] CPU: 0 UID: 0 PID: 22316 Comm: syz.6.5834 Not tainted syzkaller #0 PREEMPT(full) [ 548.739575][T22316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.739586][T22316] Call Trace: [ 548.739596][T22316] [ 548.739606][T22316] dump_stack_lvl+0x189/0x250 [ 548.739631][T22316] ? __pfx____ratelimit+0x10/0x10 [ 548.739649][T22316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.739668][T22316] ? __pfx__printk+0x10/0x10 [ 548.739689][T22316] ? process_measurement+0x1640/0x1a40 [ 548.739711][T22316] ? rcu_is_watching+0x15/0xb0 [ 548.739728][T22316] ? bpf_bprintf_cleanup+0x9f/0xd0 [ 548.739749][T22316] should_fail_ex+0x414/0x560 [ 548.739775][T22316] strncpy_from_user+0x36/0x290 [ 548.739801][T22316] strncpy_from_user_nofault+0x72/0x150 [ 548.739823][T22316] bpf_probe_read_compat_str+0xe2/0x180 [ 548.739842][T22316] bpf_prog_56079403e473c493+0x70/0x76 [ 548.739858][T22316] ? bpf_trace_run2+0x186/0x4b0 [ 548.739878][T22316] ? __pfx___cant_migrate+0x10/0x10 [ 548.739895][T22316] ? __lock_acquire+0xab9/0xd20 [ 548.739921][T22316] bpf_trace_run2+0x284/0x4b0 [ 548.739941][T22316] ? bpf_trace_run2+0x186/0x4b0 [ 548.739961][T22316] ? __pfx_bpf_trace_run2+0x10/0x10 [ 548.739982][T22316] ? __pfx_css_rstat_updated+0x10/0x10 [ 548.739998][T22316] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 548.740023][T22316] __bpf_trace_tlb_flush+0xf5/0x150 [ 548.740046][T22316] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 548.740072][T22316] ? psi_group_change+0xab8/0x1050 [ 548.740089][T22316] trace_tlb_flush+0x115/0x140 [ 548.740111][T22316] switch_mm_irqs_off+0x53e/0x7a0 [ 548.740135][T22316] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 548.740154][T22316] ? psi_task_switch+0x4e3/0x880 [ 548.740175][T22316] __schedule+0x110e/0x4cc0 [ 548.740198][T22316] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 548.740221][T22316] ? __pfx___schedule+0x10/0x10 [ 548.740237][T22316] ? ksys_write+0x1cb/0x250 [ 548.740262][T22316] ? preempt_schedule_irq+0xaa/0x150 [ 548.740279][T22316] preempt_schedule_irq+0xb5/0x150 [ 548.740295][T22316] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 548.740324][T22316] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 548.740345][T22316] irqentry_exit+0x6f/0x90 [ 548.740362][T22316] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.740380][T22316] RIP: 0010:do_syscall_64+0xc3/0x3b0 [ 548.740400][T22316] Code: 00 48 8b 7d 08 48 89 7b 18 e8 09 5a 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 99 38 4d f6 90 90 e8 42 38 4d f6 fb 49 8b 57 08 c2 3f 74 0e 4c 89 f7 4c 89 ee e8 2d 2d 30 f6 49 89 c4 90 90 41 [ 548.740414][T22316] RSP: 0018:ffffc90013ddfef0 EFLAGS: 00000286 [ 548.740429][T22316] RAX: b49f8a4f2fd44a00 RBX: ffffc90013ddfef0 RCX: b49f8a4f2fd44a00 [ 548.740442][T22316] RDX: 0000000000000000 RSI: ffffffff8d9ba53b RDI: ffffffff8be33f80 [ 548.740453][T22316] RBP: ffffc90013ddff48 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506 [ 548.740465][T22316] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: 000000000000002e [ 548.740477][T22316] R13: 000000000000002e R14: ffffc90013ddff58 R15: ffff888027d70000 [ 548.740496][T22316] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.740512][T22316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.740533][T22316] ? clear_bhb_loop+0x60/0xb0 [ 548.740551][T22316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.740566][T22316] RIP: 0033:0x7f08d138eec9 [ 548.740579][T22316] Code: Unable to access opcode bytes at 0x7f08d138ee9f. [ 548.740587][T22316] RSP: 002b:00007f08cf5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.740602][T22316] RAX: ffffffffffffffda RBX: 00007f08d15e5fa0 RCX: 00007f08d138eec9 [ 548.740614][T22316] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 548.740625][T22316] RBP: 00007f08cf5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 548.740635][T22316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.740654][T22316] R13: 00007f08d15e6038 R14: 00007f08d15e5fa0 R15: 00007ffcc14ee268 [ 548.740673][T22316] [ 549.121414][T22318] __nla_validate_parse: 5 callbacks suppressed [ 549.121436][T22318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5831'. [ 549.137867][T22318] nbd: must specify at least one socket [ 549.177854][T22319] netlink: 596 bytes leftover after parsing attributes in process `syz.7.5833'.